Fix session resume and PSD container configuration
This commit is contained in:
@@ -350,7 +350,14 @@ test("skips managed-key injection for a provider present in pi's auth store", as
|
||||
|
||||
test("session Pi spawn reads the single secret bundle and scrubs its path", async () => {
|
||||
const secret = path.resolve(__dirname, `.bundle-${process.pid}`);
|
||||
writeFileSync(secret, "THT_MODEL_API_KEY=bundle-secret\n", { mode: 0o600 });
|
||||
writeFileSync(secret, [
|
||||
"THT_MODEL_API_KEY=bundle-secret",
|
||||
"THT_DWH_API_KEY=dwh-secret",
|
||||
"THT_VEC_API_KEY=vector-reader-secret",
|
||||
"THT_VEC_WRITE_API_KEY=vector-writer-secret",
|
||||
"THT_CA=/run/secrets/ca-chain.pem",
|
||||
"",
|
||||
].join("\n"), { mode: 0o600 });
|
||||
chmodSync(secret, 0o600);
|
||||
const calls: any[][] = [];
|
||||
const child = recordingChild();
|
||||
@@ -361,6 +368,13 @@ test("session Pi spawn reads the single secret bundle and scrubs its path", asyn
|
||||
try {
|
||||
await mgr.spawnFor("bundle-session", { provider: "openai" });
|
||||
expect(calls[0][2].env.OPENAI_API_KEY).toBe("bundle-secret");
|
||||
expect(calls[0][2].env).toMatchObject({
|
||||
THT_DWH_API_KEY: "dwh-secret",
|
||||
THT_VEC_API_KEY: "vector-reader-secret",
|
||||
THT_VEC_WRITE_API_KEY: "vector-writer-secret",
|
||||
THT_CA: "/run/secrets/ca-chain.pem",
|
||||
THT_SSL_CA: "/run/secrets/ca-chain.pem",
|
||||
});
|
||||
expect(calls[0][2].env).not.toHaveProperty("THT_SECRETS_FILE");
|
||||
} finally {
|
||||
mgr.teardown("bundle-session");
|
||||
|
||||
Reference in New Issue
Block a user