Respect disabled DLP in contour smoke
CI / Rust checks (push) Canceled after 0s
CI / Docs and registry checks (push) Canceled after 0s
CI / Smoke checks (push) Canceled after 0s
Coverage / Coverage baseline (push) Canceled after 0s
Dependency hygiene / Unused dependency check (push) Canceled after 0s
Dependency hygiene / Dependency duplicate report (push) Canceled after 0s
Dependency hygiene / Dependency security policy (push) Canceled after 0s
Dependency hygiene / Cargo udeps nightly advisory (push) Canceled after 0s
Operational maturity / Offline operational maturity (push) Canceled after 0s
Operational maturity / Live operational contract (push) Canceled after 0s
Security / Cargo audit (push) Canceled after 0s
Security / Cargo deny (push) Canceled after 0s
Security / Secret pattern check (push) Canceled after 0s
Security / Dependency review (push) Canceled after 0s

This commit is contained in:
igor04091968
2026-07-11 10:19:17 +03:00
parent cd25edc4f3
commit af735ec1ea
+22 -1
View File
@@ -92,6 +92,11 @@ LOG_DIR="${AW_SMOKE_LOG_DIR:-$REPO_ROOT/output/smoke}"
RUN_REMOTE="${AW_SMOKE_RUN_REMOTE:-1}"
RUN_WINRM="${AW_SMOKE_RUN_WINRM:-1}"
RUN_SERVER_SYSTEMD="${AW_SMOKE_RUN_SERVER_SYSTEMD:-1}"
DLP_ENABLED="${DETMIR_DLP_ENABLED:-${AW_DLP_ENABLED:-false}}"
case "${DLP_ENABLED,,}" in
1|true|yes|on) DLP_ENABLED=true ;;
*) DLP_ENABLED=false ;;
esac
NO_PROXY_REQUIRED="localhost,127.0.0.1,$PROXMOX_HOST,$AW_HOST,$GRAFANA_HOST,$WINDOWS_HOST,10.10.10.0/24,192.168.100.0/24"
if [ -n "${no_proxy:-}" ]; then
@@ -438,6 +443,10 @@ read_activitywatch_context() {
classify_bucket_age() {
local bucket="$1"
local age_sec="$2"
if [ "$bucket" = "aw-dlp-endpoint-signals" ] && [ "$DLP_ENABLED" = "false" ]; then
printf "inactive"
return
fi
if [ "$bucket" = "aw-watcher-window" ] && [ "$HOST_INACTIVE" = "1" ]; then
printf "inactive"
return
@@ -486,6 +495,13 @@ check_bucket_freshness() {
if [ -z "$last_ts" ]; then
case "$bucket" in
aw-dlp-endpoint-signals)
if [ "$DLP_ENABLED" = "false" ]; then
pass "bucket $bucket_id inactive/empty while DLP runtime disabled"
else
fail "bucket $bucket_id empty"
fi
;;
aw-watcher-window)
if [ "$HOST_INACTIVE" = "1" ]; then
pass "bucket $bucket_id inactive/empty while host inactive"
@@ -513,7 +529,11 @@ check_bucket_freshness() {
status="$(classify_bucket_age "$bucket" "$age_sec")"
case "$status" in
fresh|event-driven|inactive)
pass "bucket $bucket_id $status age=${age_sec}s id=$last_id"
if [ "$bucket" = "aw-dlp-endpoint-signals" ] && [ "$DLP_ENABLED" = "false" ]; then
pass "bucket $bucket_id inactive while DLP runtime disabled age=${age_sec}s id=$last_id"
else
pass "bucket $bucket_id $status age=${age_sec}s id=$last_id"
fi
;;
stale)
warn "bucket $bucket_id stale age=${age_sec}s id=$last_id"
@@ -580,6 +600,7 @@ exec > >(tee "$LOG_FILE") 2>&1
section "Run Context"
printf "repo=%s\ninventory=%s\nlog=%s\n" "$REPO_ROOT" "$INVENTORY" "$LOG_FILE" | sed 's/^/ /'
printf "dlp_enabled=%s\n" "$DLP_ENABLED" | sed 's/^/ /'
date -Is | sed 's/^/ /'
section "Local Prerequisites"