dohertj2/lmxopcua
1
0
Fork 0
Code Issues 1 Pull Requests Actions 1 Packages Projects Releases Wiki Activity

test(ldap): live GLAuth outage/recovery gate (R2-08 03/S2) #455

Merged
dohertj2 merged 1 commits from test/r2-08-glauth-outage-live-gate into master 2026-07-15 07:45:26 -04:00
Conversation 0 Commits 1 Files Changed 1
+190
dohertj2 commented 2026-07-15 07:45:19 -04:00
Owner
Copy Link
Copy Source

Closes the R2-08 S2 live leg. Drives the directory-outage circuit through the production auth path against a REAL GLAuth (paused/unpaused via docker pause), and is the first end-to-end verification that the PR #451 GLAuth swap binds correctly. Triple-gated, skips clean offline (1 skipped, 8ms). Verified GREEN against 10.100.0.35:3894 (12s): healthy binds -> pause -> 3 bounded failures -> circuit opens -> sub-second unavailable -> unpause -> half-open close -> recover.

Closes the R2-08 S2 live leg. Drives the directory-outage circuit through the production auth path against a REAL GLAuth (paused/unpaused via docker pause), and is the first end-to-end verification that the PR #451 GLAuth swap binds correctly. Triple-gated, skips clean offline (1 skipped, 8ms). Verified GREEN against 10.100.0.35:3894 (12s): healthy binds -> pause -> 3 bounded failures -> circuit opens -> sub-second unavailable -> unpause -> half-open close -> recover.
dohertj2 added 1 commit 2026-07-15 07:45:21 -04:00
test(ldap): live GLAuth outage/recovery gate (R2-08 03/S2)
v2-ci / build (pull_request) Successful in 3m59s
Details
v2-ci / unit-tests (pull_request) Failing after 11m55s
Details
4d2dcff5df 
Closes the R2-08 S2 live leg. The offline LdapAuthResilienceTests prove the
directory-outage circuit with fakes + an unroutable-host blackhole; this drives
the SAME circuit through the production auth path (OtOpcUaLdapAuthService +
LdapOpcUaUserAuthenticator) against a REAL GLAuth that is paused mid-run and
unpaused — and doubles as the first end-to-end verification that the PR #451
GLAuth swap (retired bitnami/openldap) binds correctly.

Triple-gated (GLAUTH_LIVE_HOST + GLAUTH_OUTAGE_START_CMD/STOP_CMD), skips clean
offline (verified: 1 skipped, 8 ms). try/finally always unpauses GLAuth.

Verified GREEN against 10.100.0.35:3894 (12 s): healthy binds (alice+bob, mapped
roles) -> docker pause -> 3 bounded failures -> circuit opens -> sub-second
"unavailable" fast-deny -> docker unpause -> half-open probe closes -> binds
succeed again. A boundary AuthTimeout feeds the circuit (authenticator :123-130),
so the docker-pause timeout shape is a faithful outage.
dohertj2 merged commit 5f12636cbc into master 2026-07-15 07:45:26 -04:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
auto-managed
queue management
 cross-driver
queue management
 driver/abcip
queue management
 driver/ablegacy
queue management
 driver/focas
queue management
 driver/opcuaclient
queue management
 driver/s7
queue management
 driver/twincat
queue management
 phase/1
queue management
 phase/2
queue management
 phase/3
queue management
 phase/4
queue management
 phase/5
queue management
 phase/6
queue management
 queue/blocked
queue management
 queue/done
queue management
 queue/failed
queue management
 queue/in-progress
queue management
 queue/queued
queue management
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
dohertj2 (dohertj2)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dohertj2/lmxopcua#455
Delete Branch "test/r2-08-glauth-outage-live-gate"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?