李建琦
6d655c9903
Release / update-version (push) Has been cancelled
Release / build-frontend (push) Has been cancelled
Release / release (push) Has been cancelled
Release / sync-version-file (push) Has been cancelled
CI / shell (push) Canceled after 0s
CI / test (push) Canceled after 0s
CI / frontend (push) Canceled after 0s
CI / golangci-lint (push) Canceled after 0s
Security Scan / backend-security (push) Canceled after 0s
Security Scan / frontend-security (push) Canceled after 0s
86 lines
3.1 KiB
Go
86 lines
3.1 KiB
Go
package securityaudit
|
|
|
|
import (
|
|
"context"
|
|
"os"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/redis/go-redis/v9"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestRedisPayloadStoreRoundTripTTLNamespaceAndDelete(t *testing.T) {
|
|
address := strings.TrimSpace(os.Getenv(promptAuditRedisTestEnv))
|
|
if address == "" {
|
|
t.Skip(promptAuditRedisTestEnv + " is not set")
|
|
}
|
|
client := redis.NewClient(&redis.Options{Addr: address})
|
|
t.Cleanup(func() { require.NoError(t, client.Close()) })
|
|
store := NewRedisPayloadStore(client)
|
|
ctx := context.Background()
|
|
const jobID int64 = 987654321
|
|
const canary = "PROMPT_CANARY_REDIS_ONLY_PAYLOAD"
|
|
_ = store.Delete(ctx, jobID)
|
|
require.NoError(t, store.Set(ctx, jobID, canary, 2*DefaultPayloadTTL))
|
|
require.Equal(t, PayloadKeyPrefix+"987654321", payloadKey(jobID))
|
|
value, err := store.Get(ctx, jobID)
|
|
require.NoError(t, err)
|
|
require.Equal(t, canary, value)
|
|
ttl, err := client.TTL(ctx, payloadKey(jobID)).Result()
|
|
require.NoError(t, err)
|
|
require.Greater(t, ttl, time.Duration(0))
|
|
require.LessOrEqual(t, ttl, DefaultPayloadTTL)
|
|
require.NoError(t, store.Delete(ctx, jobID))
|
|
_, err = store.Get(ctx, jobID)
|
|
require.ErrorIs(t, err, redis.Nil)
|
|
}
|
|
|
|
func TestPromptRuntimeAggregatesConfigWorkersQueueRedisEndpointsAndGuardMetrics(t *testing.T) {
|
|
address := strings.TrimSpace(os.Getenv(promptAuditRedisTestEnv))
|
|
if address == "" {
|
|
t.Skip(promptAuditRedisTestEnv + " is not set")
|
|
}
|
|
db := openPromptAuditIntegrationDB(t)
|
|
client := redis.NewClient(&redis.Options{Addr: address})
|
|
t.Cleanup(func() { require.NoError(t, client.Close()) })
|
|
|
|
config := &fakeConfigStore{active: true, cfg: ActiveConfig{
|
|
RiskControlEnabled: true, Enabled: true, WorkerCount: 3, QueueCapacity: 123,
|
|
ConfigVersion: 9, AllGroups: true,
|
|
}}
|
|
metrics := NewAtomicMetrics()
|
|
metrics.Observe(DecisionBlock, 25*time.Millisecond)
|
|
metrics.IncFailover()
|
|
metrics.IncEnqueued()
|
|
metrics.IncDropped()
|
|
service := NewPromptService(
|
|
config,
|
|
NewPostgreSQLRepository(db),
|
|
NewRedisPayloadStore(client),
|
|
NewOpenAICompatibleScanner(),
|
|
metrics,
|
|
)
|
|
service.probes["guard-1"] = ProbeResult{OK: true, Status: "healthy", HTTPStatus: 200}
|
|
|
|
runtime := service.Runtime(context.Background())
|
|
require.Equal(t, ModeAsync, runtime.EffectiveMode)
|
|
require.Equal(t, int64(9), runtime.ExpectedConfigVersion)
|
|
require.Equal(t, int64(9), runtime.ActiveConfigVersion)
|
|
require.Equal(t, 3, runtime.WorkerTotal)
|
|
require.Equal(t, 123, runtime.QueueCapacity)
|
|
require.Equal(t, "ok", runtime.DatabaseStatus)
|
|
require.Equal(t, "ok", runtime.RedisStatus)
|
|
require.Contains(t, runtime.Endpoints, "guard-1")
|
|
require.Equal(t, int64(1), runtime.GuardMetrics.Total)
|
|
require.Equal(t, int64(1), runtime.GuardMetrics.Blocked)
|
|
require.Equal(t, int64(1), runtime.GuardMetrics.Failovers)
|
|
require.Equal(t, int64(25), runtime.GuardMetrics.LatencyP95MS)
|
|
require.Equal(t, int64(1), runtime.EnqueuedTotal)
|
|
require.Equal(t, int64(1), runtime.DroppedTotal)
|
|
// The runner has not been started in this integration test, so the honest
|
|
// process status is degraded rather than a fabricated running heartbeat.
|
|
require.Equal(t, "degraded", runtime.ProcessStatus)
|
|
}
|