Skip to content

Add functional service smoke coverage and fix CloudFront cleanup - #65

Merged
tyrchen merged 1 commit into
masterfrom
test/local-service-smoke
Oct 10, 2026
Merged

tyrchen merged 1 commit into
masterfrom
test/local-service-smoke

Conversation

@tyrchen

@tyrchen tyrchen commented Oct 10, 2026

Copy link
Copy Markdown
Owner

Pulumi provisioning alone did not assert service behavior, and cleanup failures were discarded. Add make smoke-services with 30 exact SDK/HTTP cases across all 18 services, make smoke-regressions for workspace/native Lambda regressions, and make smoke to run both plus Pulumi. The existing CI workflow now runs these checks against a freshly built server.

New live regressions cover KMS secp256k1 sign/verify and invalid DIGEST errors with key IDs/ARNs, Lambda S3 code updates with changed hash/size readback, and CloudFront config read/disable/delete. Strict cleanup exposed malformed CloudFront GeoRestriction XML: Quantity was nested inside Items. Fix the wire shape and add a populated-location serializer regression. Cleanup errors now fail the smoke, retain diagnostic state, and also clean up partial deployments; provider retries are bounded for transient connection errors.

Validation on fresh local servers:

  • make smoke: workspace regressions, native Lambda tests, 30 functional cases, and base Pulumi provisioning/cleanup passed.
  • make pulumi-hackathon-smoke and make pulumi-commerce-smoke: passed, including deletion of all 26/223 resources.
  • Both snapshot smoke targets passed: hackathon save/load 24/3 ms; commerce save/load 81/64 ms, including restored CloudFront cache hits.
  • cargo build, cargo +nightly fmt --check, cargo clippy -- -D warnings, and targeted all-target Clippy passed.
  • Shell cleanup success/failure/state-retention checks, missing-manifest failure checks, workflow YAML/context validation, documentation links, and git diff --check passed.

Coverage boundaries and recent-change mappings are documented in docs/smoke-tests.md. Native Lambda execution tests use the provider/runtime path, while the public API smoke covers metadata/S3 code loading/DryRun; API Gateway uses MOCK, and SES asserts local API acceptance. Extra pedantic Clippy currently fails on pre-existing documentation lints in auth/Lambda model dependencies; standard warnings-as-errors checks pass.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 10, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-10T20:56:52.669952Z 127fad7 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@tyrchen
tyrchen merged commit baed604 into master Oct 10, 2026
34 checks passed
@tyrchen
tyrchen deleted the test/local-service-smoke branch October 10, 2026 21:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant