Respect disabled DLP in contour smoke
CI / Rust checks (push) Canceled after 0s
CI / Docs and registry checks (push) Canceled after 0s
CI / Smoke checks (push) Canceled after 0s
Coverage / Coverage baseline (push) Canceled after 0s
Dependency hygiene / Unused dependency check (push) Canceled after 0s
Dependency hygiene / Dependency duplicate report (push) Canceled after 0s
Dependency hygiene / Dependency security policy (push) Canceled after 0s
Dependency hygiene / Cargo udeps nightly advisory (push) Canceled after 0s
Operational maturity / Offline operational maturity (push) Canceled after 0s
Operational maturity / Live operational contract (push) Canceled after 0s
Security / Cargo audit (push) Canceled after 0s
Security / Cargo deny (push) Canceled after 0s
Security / Secret pattern check (push) Canceled after 0s
Security / Dependency review (push) Canceled after 0s
CI / Rust checks (push) Canceled after 0s
CI / Docs and registry checks (push) Canceled after 0s
CI / Smoke checks (push) Canceled after 0s
Coverage / Coverage baseline (push) Canceled after 0s
Dependency hygiene / Unused dependency check (push) Canceled after 0s
Dependency hygiene / Dependency duplicate report (push) Canceled after 0s
Dependency hygiene / Dependency security policy (push) Canceled after 0s
Dependency hygiene / Cargo udeps nightly advisory (push) Canceled after 0s
Operational maturity / Offline operational maturity (push) Canceled after 0s
Operational maturity / Live operational contract (push) Canceled after 0s
Security / Cargo audit (push) Canceled after 0s
Security / Cargo deny (push) Canceled after 0s
Security / Secret pattern check (push) Canceled after 0s
Security / Dependency review (push) Canceled after 0s
This commit is contained in:
@@ -92,6 +92,11 @@ LOG_DIR="${AW_SMOKE_LOG_DIR:-$REPO_ROOT/output/smoke}"
|
|||||||
RUN_REMOTE="${AW_SMOKE_RUN_REMOTE:-1}"
|
RUN_REMOTE="${AW_SMOKE_RUN_REMOTE:-1}"
|
||||||
RUN_WINRM="${AW_SMOKE_RUN_WINRM:-1}"
|
RUN_WINRM="${AW_SMOKE_RUN_WINRM:-1}"
|
||||||
RUN_SERVER_SYSTEMD="${AW_SMOKE_RUN_SERVER_SYSTEMD:-1}"
|
RUN_SERVER_SYSTEMD="${AW_SMOKE_RUN_SERVER_SYSTEMD:-1}"
|
||||||
|
DLP_ENABLED="${DETMIR_DLP_ENABLED:-${AW_DLP_ENABLED:-false}}"
|
||||||
|
case "${DLP_ENABLED,,}" in
|
||||||
|
1|true|yes|on) DLP_ENABLED=true ;;
|
||||||
|
*) DLP_ENABLED=false ;;
|
||||||
|
esac
|
||||||
|
|
||||||
NO_PROXY_REQUIRED="localhost,127.0.0.1,$PROXMOX_HOST,$AW_HOST,$GRAFANA_HOST,$WINDOWS_HOST,10.10.10.0/24,192.168.100.0/24"
|
NO_PROXY_REQUIRED="localhost,127.0.0.1,$PROXMOX_HOST,$AW_HOST,$GRAFANA_HOST,$WINDOWS_HOST,10.10.10.0/24,192.168.100.0/24"
|
||||||
if [ -n "${no_proxy:-}" ]; then
|
if [ -n "${no_proxy:-}" ]; then
|
||||||
@@ -438,6 +443,10 @@ read_activitywatch_context() {
|
|||||||
classify_bucket_age() {
|
classify_bucket_age() {
|
||||||
local bucket="$1"
|
local bucket="$1"
|
||||||
local age_sec="$2"
|
local age_sec="$2"
|
||||||
|
if [ "$bucket" = "aw-dlp-endpoint-signals" ] && [ "$DLP_ENABLED" = "false" ]; then
|
||||||
|
printf "inactive"
|
||||||
|
return
|
||||||
|
fi
|
||||||
if [ "$bucket" = "aw-watcher-window" ] && [ "$HOST_INACTIVE" = "1" ]; then
|
if [ "$bucket" = "aw-watcher-window" ] && [ "$HOST_INACTIVE" = "1" ]; then
|
||||||
printf "inactive"
|
printf "inactive"
|
||||||
return
|
return
|
||||||
@@ -486,6 +495,13 @@ check_bucket_freshness() {
|
|||||||
|
|
||||||
if [ -z "$last_ts" ]; then
|
if [ -z "$last_ts" ]; then
|
||||||
case "$bucket" in
|
case "$bucket" in
|
||||||
|
aw-dlp-endpoint-signals)
|
||||||
|
if [ "$DLP_ENABLED" = "false" ]; then
|
||||||
|
pass "bucket $bucket_id inactive/empty while DLP runtime disabled"
|
||||||
|
else
|
||||||
|
fail "bucket $bucket_id empty"
|
||||||
|
fi
|
||||||
|
;;
|
||||||
aw-watcher-window)
|
aw-watcher-window)
|
||||||
if [ "$HOST_INACTIVE" = "1" ]; then
|
if [ "$HOST_INACTIVE" = "1" ]; then
|
||||||
pass "bucket $bucket_id inactive/empty while host inactive"
|
pass "bucket $bucket_id inactive/empty while host inactive"
|
||||||
@@ -513,7 +529,11 @@ check_bucket_freshness() {
|
|||||||
status="$(classify_bucket_age "$bucket" "$age_sec")"
|
status="$(classify_bucket_age "$bucket" "$age_sec")"
|
||||||
case "$status" in
|
case "$status" in
|
||||||
fresh|event-driven|inactive)
|
fresh|event-driven|inactive)
|
||||||
pass "bucket $bucket_id $status age=${age_sec}s id=$last_id"
|
if [ "$bucket" = "aw-dlp-endpoint-signals" ] && [ "$DLP_ENABLED" = "false" ]; then
|
||||||
|
pass "bucket $bucket_id inactive while DLP runtime disabled age=${age_sec}s id=$last_id"
|
||||||
|
else
|
||||||
|
pass "bucket $bucket_id $status age=${age_sec}s id=$last_id"
|
||||||
|
fi
|
||||||
;;
|
;;
|
||||||
stale)
|
stale)
|
||||||
warn "bucket $bucket_id stale age=${age_sec}s id=$last_id"
|
warn "bucket $bucket_id stale age=${age_sec}s id=$last_id"
|
||||||
@@ -580,6 +600,7 @@ exec > >(tee "$LOG_FILE") 2>&1
|
|||||||
|
|
||||||
section "Run Context"
|
section "Run Context"
|
||||||
printf "repo=%s\ninventory=%s\nlog=%s\n" "$REPO_ROOT" "$INVENTORY" "$LOG_FILE" | sed 's/^/ /'
|
printf "repo=%s\ninventory=%s\nlog=%s\n" "$REPO_ROOT" "$INVENTORY" "$LOG_FILE" | sed 's/^/ /'
|
||||||
|
printf "dlp_enabled=%s\n" "$DLP_ENABLED" | sed 's/^/ /'
|
||||||
date -Is | sed 's/^/ /'
|
date -Is | sed 's/^/ /'
|
||||||
|
|
||||||
section "Local Prerequisites"
|
section "Local Prerequisites"
|
||||||
|
|||||||
Reference in New Issue
Block a user