Existing coverage was one integration test and zero e2e tests. Adds the thin, high-value integration/e2e layer unit tests can't reach (real Postgres wire contract, real browser flows) and wires it as a post-deploy smoke gate. - Seed a deterministic dev/QA admin user and fixed Development env key so HTTP-only tests can authenticate without per-run registration. - Expand the API integration suite: disabled-flag, unauthorized access, environment-document bootstrap, identity-override precedence, and auth login scenarios, reusing the existing black-box HTTP+Npgsql harness. - Add a Playwright suite for the admin SPA: login, nav, project/environment context selection, and feature create/toggle, against the real API. - Bind QA Postgres to 127.0.0.1 for direct seeding, add smoke-qa.sh and an ensure_node() bootstrap (the qa runner has no Node today), and wire a new smoke-qa CI job after deploy-qa.
66 lines
1.6 KiB
YAML
66 lines
1.6 KiB
YAML
name: miccheck-qa
|
|
|
|
# Dedicated, network-isolated QA stack. Not connected to the dev compose
|
|
# stack's network - runs entirely on its own bridge network below. The API has
|
|
# no published host port; Postgres is bound to 127.0.0.1 only, so the smoke-qa
|
|
# CI job (running on this same host) can seed/inspect data directly while it
|
|
# stays unreachable off-box.
|
|
services:
|
|
|
|
db:
|
|
image: postgres:16-alpine
|
|
environment:
|
|
POSTGRES_DB: miccheck
|
|
POSTGRES_USER: miccheck
|
|
POSTGRES_PASSWORD: password
|
|
ports:
|
|
- "127.0.0.1:55432:5432"
|
|
volumes:
|
|
- miccheck-qa-pgdata:/var/lib/postgresql/data
|
|
networks:
|
|
- qa
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U miccheck -d miccheck"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
|
|
api:
|
|
image: ${API_IMAGE}:qa
|
|
environment:
|
|
ASPNETCORE_ENVIRONMENT: Development
|
|
ASPNETCORE_URLS: http://+:8080
|
|
ConnectionStrings__miccheck: "Host=db;Database=miccheck;Username=miccheck;Password=password"
|
|
Jwt__SecretKey: ${JWT_SECRET_KEY}
|
|
Jwt__Issuer: MicCheck
|
|
Jwt__Audience: MicCheck
|
|
networks:
|
|
- qa
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "curl -fsS http://localhost:8080/health || exit 1"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 20s
|
|
|
|
admin:
|
|
image: ${ADMIN_IMAGE}:qa
|
|
ports:
|
|
- "${QA_ADMIN_PORT:-3001}:80"
|
|
networks:
|
|
- qa
|
|
depends_on:
|
|
api:
|
|
condition: service_started
|
|
|
|
networks:
|
|
qa:
|
|
name: miccheck-qa-net
|
|
|
|
volumes:
|
|
miccheck-qa-pgdata:
|
|
name: miccheck-qa-pgdata
|