1+// K8s manifest tests cover the deployable Kubernetes bundle shape.
2+import { readFileSync } from "node:fs";
3+import { describe, expect, it } from "vitest";
4+import { parse } from "yaml";
5+6+type Manifest = Record<string, unknown>;
7+8+function readManifest(name: string): Manifest {
9+const parsed = parse(readFileSync(`scripts/k8s/manifests/${name}`, "utf8")) as unknown;
10+expect(parsed).toBeTypeOf("object");
11+expect(parsed).not.toBeNull();
12+expect(Array.isArray(parsed)).toBe(false);
13+return parsed as Manifest;
14+}
15+16+function asRecord(value: unknown, label: string): Record<string, unknown> {
17+expect(value, label).toBeTypeOf("object");
18+expect(value, label).not.toBeNull();
19+expect(Array.isArray(value), label).toBe(false);
20+return value as Record<string, unknown>;
21+}
22+23+function asRecords(value: unknown, label: string): Record<string, unknown>[] {
24+expect(Array.isArray(value), label).toBe(true);
25+return value as Record<string, unknown>[];
26+}
27+28+function asStrings(value: unknown, label: string): string[] {
29+expect(Array.isArray(value), label).toBe(true);
30+for (const entry of value as unknown[]) {
31+expect(entry, label).toBeTypeOf("string");
32+}
33+return value as string[];
34+}
35+36+function findNamed(records: Record<string, unknown>[], name: string): Record<string, unknown> {
37+const record = records.find((entry) => entry.name === name);
38+expect(record, name).toBeDefined();
39+return record as Record<string, unknown>;
40+}
41+42+describe("k8s manifests", () => {
43+it("keeps kustomization resources aligned with shipped manifests", () => {
44+const kustomization = readManifest("kustomization.yaml");
45+46+expect(kustomization).toMatchObject({
47+apiVersion: "kustomize.config.k8s.io/v1beta1",
48+kind: "Kustomization",
49+});
50+expect(asStrings(kustomization.resources, "kustomization resources").sort()).toEqual([
51+"configmap.yaml",
52+"deployment.yaml",
53+"pvc.yaml",
54+"service.yaml",
55+]);
56+});
57+58+it("keeps gateway service selectors and ports aligned with deployment labels", () => {
59+const deployment = readManifest("deployment.yaml");
60+const service = readManifest("service.yaml");
61+const deploymentSpec = asRecord(deployment.spec, "deployment spec");
62+const selector = asRecord(deploymentSpec.selector, "deployment selector");
63+const matchLabels = asRecord(selector.matchLabels, "deployment match labels");
64+const template = asRecord(deploymentSpec.template, "deployment template");
65+const templateMetadata = asRecord(template.metadata, "deployment template metadata");
66+const templateLabels = asRecord(templateMetadata.labels, "deployment template labels");
67+const serviceSpec = asRecord(service.spec, "service spec");
68+const serviceSelector = asRecord(serviceSpec.selector, "service selector");
69+const ports = asRecords(serviceSpec.ports, "service ports");
70+71+expect(deployment).toMatchObject({
72+apiVersion: "apps/v1",
73+kind: "Deployment",
74+metadata: { name: "openclaw" },
75+});
76+expect(matchLabels).toEqual({ app: "openclaw" });
77+expect(templateLabels).toMatchObject(matchLabels);
78+expect(serviceSelector).toEqual(matchLabels);
79+expect(ports).toContainEqual({
80+name: "gateway",
81+port: 18789,
82+protocol: "TCP",
83+targetPort: 18789,
84+});
85+});
86+87+it("keeps deployment mounts, secrets, and security posture deployable", () => {
88+const deployment = readManifest("deployment.yaml");
89+const spec = asRecord(deployment.spec, "deployment spec");
90+const template = asRecord(spec.template, "deployment template");
91+const podSpec = asRecord(template.spec, "pod spec");
92+const containers = asRecords(podSpec.containers, "containers");
93+const gateway = findNamed(containers, "gateway");
94+const env = asRecords(gateway.env, "gateway env");
95+const volumes = asRecords(podSpec.volumes, "pod volumes");
96+const securityContext = asRecord(gateway.securityContext, "gateway security context");
97+98+expect(gateway.command).toEqual(["node", "/app/dist/index.js", "gateway", "run"]);
99+expect(findNamed(env, "HOME")).toMatchObject({ value: "/home/node" });
100+expect(findNamed(env, "OPENCLAW_CONFIG_DIR")).toMatchObject({ value: "/home/node/.openclaw" });
101+expect(findNamed(env, "OPENCLAW_GATEWAY_TOKEN")).toMatchObject({
102+valueFrom: { secretKeyRef: { key: "OPENCLAW_GATEWAY_TOKEN", name: "openclaw-secrets" } },
103+});
104+expect(findNamed(volumes, "openclaw-home")).toMatchObject({
105+persistentVolumeClaim: { claimName: "openclaw-home-pvc" },
106+});
107+expect(findNamed(volumes, "config")).toMatchObject({ configMap: { name: "openclaw-config" } });
108+expect(securityContext).toMatchObject({
109+allowPrivilegeEscalation: false,
110+readOnlyRootFilesystem: true,
111+runAsNonRoot: true,
112+});
113+});
114+115+it("keeps config and persistence manifests aligned with the gateway", () => {
116+const configMap = readManifest("configmap.yaml");
117+const pvc = readManifest("pvc.yaml");
118+const data = asRecord(configMap.data, "configmap data");
119+const config = JSON.parse(String(data["openclaw.json"])) as Record<string, unknown>;
120+const gateway = asRecord(config.gateway, "openclaw config gateway");
121+const auth = asRecord(gateway.auth, "openclaw config auth");
122+const agents = asRecord(config.agents, "openclaw config agents");
123+const defaults = asRecord(agents.defaults, "openclaw config agent defaults");
124+const pvcSpec = asRecord(pvc.spec, "pvc spec");
125+const resources = asRecord(pvcSpec.resources, "pvc resources");
126+const requests = asRecord(resources.requests, "pvc resource requests");
127+128+expect(configMap).toMatchObject({
129+apiVersion: "v1",
130+kind: "ConfigMap",
131+metadata: { name: "openclaw-config" },
132+});
133+expect(gateway).toMatchObject({ mode: "local", port: 18789 });
134+expect(auth).toMatchObject({ mode: "token" });
135+expect(defaults).toMatchObject({ workspace: "~/.openclaw/workspace" });
136+expect(data["AGENTS.md"]).toContain("OpenClaw Assistant");
137+expect(pvc).toMatchObject({
138+apiVersion: "v1",
139+kind: "PersistentVolumeClaim",
140+metadata: { name: "openclaw-home-pvc" },
141+});
142+expect(requests).toMatchObject({ storage: "10Gi" });
143+});
144+});
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。