anti
a266d6b17e
Adds /api/v1/swarm-updates/{hosts,push,push-self,rollback} behind
require_admin. Reuses the existing UpdaterClient + tar_working_tree + the
per-host asyncio.gather pattern from api_deploy_swarm.py; tarball is
built exactly once per /push request and fanned out to every selected
worker. /hosts filters out decommissioned hosts and agent-only
enrollments (no updater bundle = not a target).
Connection drops during /update-self are treated as success — the
updater re-execs itself mid-response, so httpx always raises.
Pydantic models live in decnet/web/db/models.py (single source of
truth). 24 tests cover happy paths, rollback, transport failures,
include_self ordering (skip on rolled-back agents), validation, and
RBAC gating.
68 lines
2.2 KiB
Python
68 lines
2.2 KiB
Python
"""POST /api/v1/swarm-updates/push-self — updater-only upgrade path."""
|
|
from __future__ import annotations
|
|
|
|
import pytest
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_push_self_only_calls_update_self(client, auth_token, add_host, fake_updater):
|
|
await add_host("alpha")
|
|
|
|
resp = await client.post(
|
|
"/api/v1/swarm-updates/push-self",
|
|
headers={"Authorization": f"Bearer {auth_token}"},
|
|
json={"all": True},
|
|
)
|
|
assert resp.status_code == 200
|
|
assert resp.json()["results"][0]["status"] == "self-updated"
|
|
methods = [m for _, m, _ in fake_updater["client"].calls]
|
|
assert "update" not in methods
|
|
assert "update_self" in methods
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_push_self_reports_failure(client, auth_token, add_host, fake_updater):
|
|
await add_host("alpha")
|
|
Resp = fake_updater["Response"]
|
|
fake_updater["client"].update_self_responses = {
|
|
"alpha": Resp(500, {"error": "pip failed", "stderr": "no module named typer"}),
|
|
}
|
|
|
|
resp = await client.post(
|
|
"/api/v1/swarm-updates/push-self",
|
|
headers={"Authorization": f"Bearer {auth_token}"},
|
|
json={"all": True},
|
|
)
|
|
assert resp.status_code == 200
|
|
result = resp.json()["results"][0]
|
|
assert result["status"] == "self-failed"
|
|
assert result["http_status"] == 500
|
|
assert "typer" in (result["stderr"] or "")
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_push_self_treats_connection_drop_as_success(
|
|
client, auth_token, add_host, fake_updater, connection_drop_exc,
|
|
):
|
|
await add_host("alpha")
|
|
fake_updater["client"].update_self_responses = {"alpha": connection_drop_exc}
|
|
|
|
resp = await client.post(
|
|
"/api/v1/swarm-updates/push-self",
|
|
headers={"Authorization": f"Bearer {auth_token}"},
|
|
json={"all": True},
|
|
)
|
|
assert resp.status_code == 200
|
|
assert resp.json()["results"][0]["status"] == "self-updated"
|
|
|
|
|
|
@pytest.mark.anyio
|
|
async def test_viewer_is_forbidden(client, viewer_token, add_host, fake_updater):
|
|
await add_host("alpha")
|
|
resp = await client.post(
|
|
"/api/v1/swarm-updates/push-self",
|
|
headers={"Authorization": f"Bearer {viewer_token}"},
|
|
json={"all": True},
|
|
)
|
|
assert resp.status_code == 403
|