baiyue-firstleg/scripts/deploy-built-service-rollback.test.mjs

import assert from 'node:assert/strict'
import { chmod, mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises'
import { existsSync } from 'node:fs'
import { tmpdir } from 'node:os'
import { delimiter, join, resolve } from 'node:path'
import { spawnSync } from 'node:child_process'
import test from 'node:test'

const repositoryRoot = resolve(import.meta.dirname, '..')
const deployScript = resolve(repositoryRoot, 'deploy/scripts/deploy-built-service.sh')
const shell = process.platform === 'win32'
  ? 'C:/Program Files/Git/bin/bash.exe'
  : '/bin/sh'

const mockDocker = `#!/usr/bin/env sh
set -eu
printf '%s\\n' "$*" >> "$MOCK_LOG"
command="$1"
shift
case "$command" in
  login|logout|pull)
    exit 0
    ;;
  compose)
    action=''
    for argument in "$@"; do
      case "$argument" in
        ps|up) action="$argument" ;;
      esac
    done
    case "$action" in
      ps)
        echo mock-container
        ;;
      up)
        service=''
        for argument in "$@"; do service="$argument"; done
        if [ "$IMAGE_TAG" = "\${MOCK_FAIL_UP_TAG:-never}" ]; then
          exit 3
        fi
        printf '%s\\n' "$IMAGE_REPOSITORY/$service:$IMAGE_TAG" > "$MOCK_CURRENT_IMAGE"
        if [ "$IMAGE_TAG" = "\${MOCK_FAIL_TAG:-never}" ]; then
          printf '%s\\n' unhealthy > "$MOCK_HEALTH_STATE"
        else
          printf '%s\\n' healthy > "$MOCK_HEALTH_STATE"
        fi
        ;;
    esac
    ;;
  inspect)
    case "$2" in
      *Config.Image*) cat "$MOCK_CURRENT_IMAGE" ;;
      *State.Health*) cat "$MOCK_HEALTH_STATE" ;;
      *) exit 2 ;;
    esac
    ;;
  logs)
    echo 'mock startup failure'
    ;;
  *)
    echo "unexpected docker command: $command $*" >&2
    exit 2
    ;;
esac
`

async function runDeployment({ imageTag, failingTag, failingStartTag }) {
  const temporaryDirectory = await mkdtemp(join(tmpdir(), 'firstleg-rollback-'))
  const mockBin = join(temporaryDirectory, 'bin')
  const dockerPath = join(mockBin, 'docker')
  const envFile = join(temporaryDirectory, 'deployment.env')
  const logFile = join(temporaryDirectory, 'docker.log')
  const currentImageFile = join(temporaryDirectory, 'current-image')
  const healthStateFile = join(temporaryDirectory, 'health-state')

  await mkdir(mockBin)
  await writeFile(dockerPath, mockDocker, 'utf8')
  await chmod(dockerPath, 0o755)
  await writeFile(envFile, 'PLACEHOLDER=true\n', 'utf8')
  await writeFile(logFile, '', 'utf8')
  await writeFile(currentImageFile, 'registry.local/group/firstleg/audit-service:oldgood\n', 'utf8')
  await writeFile(healthStateFile, 'healthy\n', 'utf8')

  const result = spawnSync(shell, [
    deployScript.replaceAll('\\', '/'),
    'development',
    'registry.local/group/firstleg',
    imageTag,
    'audit-service',
    envFile.replaceAll('\\', '/')
  ], {
    cwd: repositoryRoot,
    encoding: 'utf8',
    env: {
      ...process.env,
      PATH: `${mockBin}${delimiter}${process.env.PATH ?? ''}`,
      TARGET_IS_LOCAL: 'true',
      REGISTRY_USER: 'ci-user',
      REGISTRY_PASSWORD: 'ci-password',
      DEPLOY_HEALTH_TIMEOUT_SECONDS: '2',
      DEPLOY_HEALTH_POLL_SECONDS: '1',
      MOCK_LOG: logFile,
      MOCK_CURRENT_IMAGE: currentImageFile,
      MOCK_HEALTH_STATE: healthStateFile,
      MOCK_FAIL_TAG: failingTag ?? 'never',
      MOCK_FAIL_UP_TAG: failingStartTag ?? 'never'
    }
  })

  const dockerLog = await readFile(logFile, 'utf8')
  const currentImage = (await readFile(currentImageFile, 'utf8')).trim()
  await rm(temporaryDirectory, { recursive: true, force: true })
  return { ...result, dockerLog, currentImage }
}

test('successful deployment keeps the new healthy image', async (context) => {
  if (!existsSync(shell)) context.skip(`shell unavailable: ${shell}`)

  const result = await runDeployment({ imageTag: 'newgood' })

  assert.equal(result.status, 0, result.stderr)
  assert.match(result.stdout, /部署前运行镜像: registry\.local\/group\/firstleg\/audit-service:oldgood/)
  assert.match(result.stdout, /新镜像健康检查通过: registry\.local\/group\/firstleg\/audit-service:newgood/)
  assert.equal(result.currentImage, 'registry.local/group/firstleg/audit-service:newgood')
})

test('unhealthy deployment restores the previous healthy image and still fails the job', async (context) => {
  if (!existsSync(shell)) context.skip(`shell unavailable: ${shell}`)

  const result = await runDeployment({ imageTag: 'newbad', failingTag: 'newbad' })
  const output = `${result.stdout}\n${result.stderr}`

  assert.equal(result.status, 1, output)
  assert.match(output, /新镜像健康检查失败: registry\.local\/group\/firstleg\/audit-service:newbad/)
  assert.match(output, /新镜像容器最近日志（最多 200 行）:/)
  assert.match(output, /mock startup failure/)
  assert.match(result.dockerLog, /logs --tail 200 mock-container/)
  assert.match(output, /开始自动回滚到: registry\.local\/group\/firstleg\/audit-service:oldgood/)
  assert.match(output, /自动回滚成功: registry\.local\/group\/firstleg\/audit-service:oldgood/)
  assert.match(result.dockerLog, /pull registry\.local\/group\/firstleg\/audit-service:oldgood/)
  assert.equal(result.currentImage, 'registry.local/group/firstleg/audit-service:oldgood')
})

test('failed compose start also restores the previous healthy image', async (context) => {
  if (!existsSync(shell)) context.skip(`shell unavailable: ${shell}`)

  const result = await runDeployment({ imageTag: 'newbroken', failingStartTag: 'newbroken' })
  const output = `${result.stdout}\n${result.stderr}`

  assert.equal(result.status, 1, output)
  assert.match(output, /新镜像启动命令失败: registry\.local\/group\/firstleg\/audit-service:newbroken/)
  assert.match(output, /自动回滚成功: registry\.local\/group\/firstleg\/audit-service:oldgood/)
  assert.equal(result.currentImage, 'registry.local/group/firstleg/audit-service:oldgood')
})