zheromiku
dcdc8d1ddd
全栈知识治理平台首次入库（P1-P10 + 发布链路模拟验证闭环）： - 治理核心：源目录/变更集/人工审核/发布批次/发布执行（fail-closed 闸口） - 测试通道：WeKnora 测试 KB 上传/轮询/验收；poll 完成时写入 parser_generation/index_generation，修复 manual/seed 路径发布闸口永久拦截 - 发布适配器 v071（本地 source=测试角色 / 云端 target=生产角色 模拟验证通过）： * ES 导出/导入 mapping 自适应（.keyword 子字段、可选 tenant_id） * OSS locator 支持嵌套 scheme；chunks.seq_id 由目标序列分配 * bundle 归档同身份重试原子替换；verifier 按 bundle chunk_type 计数 * 回滚 job payload 支持 prior_execution_id（strict 解码） - 三通道发布+回滚演练实测：publish 4/4 verified，检索命中， rollback 4/4 rolled_back，目标端 PG is_enabled=false、ES is_enabled=false - 前端 A·Data-console 风格全站统一，120 用例通过 - 门禁：go vet / go test 全包通过，gofmt 干净
66 lines
2.7 KiB
Go
66 lines
2.7 KiB
Go
package main
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func TestLoadReleaseRuntimeConfigValidatesRestrictedMultiKBConfig(t *testing.T) {
|
|
root := t.TempDir()
|
|
path := filepath.Join(root, "release.json")
|
|
payload := validReleaseConfigJSON(root)
|
|
if err := os.WriteFile(path, []byte(payload), 0o600); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
config, err := loadReleaseRuntimeConfig(path)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if len(config.Routes) != 1 || config.Routes[0].KnowledgeBaseID != "kb-safe" || config.Routes[0].Target.Object.StorageBackendID != "target-backend" {
|
|
t.Fatalf("config=%#v", config)
|
|
}
|
|
}
|
|
|
|
func TestLoadReleaseRuntimeConfigRejectsUnsafeFilesAndUnknownFields(t *testing.T) {
|
|
root := t.TempDir()
|
|
payload := validReleaseConfigJSON(root)
|
|
for _, test := range []struct {
|
|
name string
|
|
setup func(string) error
|
|
}{
|
|
{name: "overbroad", setup: func(path string) error { return os.WriteFile(path, []byte(payload), 0o644) }},
|
|
{name: "unknown field", setup: func(path string) error {
|
|
return os.WriteFile(path, []byte(strings.Replace(payload, `"archive_root":`, `"unknown":true,"archive_root":`, 1)), 0o600)
|
|
}},
|
|
} {
|
|
t.Run(test.name, func(t *testing.T) {
|
|
path := filepath.Join(root, strings.ReplaceAll(test.name, " ", "-")+".json")
|
|
if err := test.setup(path); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if _, err := loadReleaseRuntimeConfig(path); err == nil {
|
|
t.Fatal("unsafe config accepted")
|
|
}
|
|
})
|
|
}
|
|
real := filepath.Join(root, "real.json")
|
|
_ = os.WriteFile(real, []byte(payload), 0o600)
|
|
link := filepath.Join(root, "link.json")
|
|
_ = os.Symlink(real, link)
|
|
if _, err := loadReleaseRuntimeConfig(link); err == nil {
|
|
t.Fatal("symlink accepted")
|
|
}
|
|
}
|
|
|
|
func validReleaseConfigJSON(root string) string {
|
|
return `{
|
|
"archive_root":"` + filepath.ToSlash(filepath.Join(root, "archive")) + `",
|
|
"routes":[{
|
|
"tenant_id":10000,"knowledge_base_id":"kb-safe","embedding_model":"bge-m3",
|
|
"source":{"database_url_file":"/run/secrets/source-db","elasticsearch":{"base_url":"http://source-es:9200","index":"chunks","token_file":"/run/secrets/source-es"},"object":{"provider":"minio","endpoint":"http://source-minio:9000","region":"us-east-1","bucket":"source","access_key_file":"/run/secrets/source-ak","secret_key_file":"/run/secrets/source-sk"}},
|
|
"target":{"database_url_file":"/run/secrets/target-db","elasticsearch":{"base_url":"https://target-es.example","index":"chunks","token_file":"/run/secrets/target-es"},"object":{"provider":"oss","endpoint":"https://oss.example","region":"cn-shenzhen","bucket":"target","storage_backend_id":"target-backend","access_key_file":"/run/secrets/target-ak","secret_key_file":"/run/secrets/target-sk"},"weknora":{"base_url":"https://weknora.example","api_key_file":"/run/secrets/target-weknora"}}
|
|
}]}`
|
|
}
|