Add a port-NAT opc-plc fixture so the #806 NAT browse tests run in CI #813

Closed
opened 2026-11-10 21:39:42 -05:00 by dohertj2 · 1 comment
Owner

#806 added NatPublishedEndpointBrowseTests (Fixture=opc-plc-nat, skipped unless OPCUA_NAT_ENDPOINT is set). They were verified against a local OrbStack container: opc-plc:2.14.10 --hostname otopcua-806-nat-parity -p 32781:50000 --autoaccept --ut (advertises opc.tcp://otopcua-806-nat-parity:50000, unresolvable from the client).

Add an equivalent compose fixture on the docker host (10.100.0.35) with a private hostname and a published port different from the internal one (carry the project=lmxopcua label), document it in infra/README.md, and set OPCUA_NAT_ENDPOINT in CI. Optional: OPCUA_NAT_SERVER_CERT_TRUSTED=1 with the fixture cert in the browser trust store turns the security case positive.

#806 added NatPublishedEndpointBrowseTests (Fixture=opc-plc-nat, skipped unless OPCUA_NAT_ENDPOINT is set). They were verified against a local OrbStack container: `opc-plc:2.14.10 --hostname otopcua-806-nat-parity -p 32781:50000 --autoaccept --ut` (advertises opc.tcp://otopcua-806-nat-parity:50000, unresolvable from the client). Add an equivalent compose fixture on the docker host (10.100.0.35) with a private hostname and a published port different from the internal one (carry the project=lmxopcua label), document it in infra/README.md, and set OPCUA_NAT_ENDPOINT in CI. Optional: OPCUA_NAT_SERVER_CERT_TRUSTED=1 with the fixture cert in the browser trust store turns the security case positive.
dohertj2 added the type:infrapriority:p3 labels 2026-11-10 21:39:42 -05:00
Author
Owner

Done on master (ac1b3355, 27302314). Port-NAT opc-plc fixture under tests/Drivers/ZB.MOM.WW.OtOpcUa.Driver.OpcUaClient.IntegrationTests/Docker/nat/, deployed as /opt/otopcua-opcuaclient-nat on 10.100.0.35 → opc.tcp://10.100.0.35:50010 (internal 50000), advertising otopcua-opc-plc-nat-private.invalid via --ph, project: lmxopcua label. CI: integration-fixtures.sh starts a throwaway container and exports OPCUA_NAT_ENDPOINT; v2-e2e points at the shared stack. Documented in infra/README.md and scripts/ci/README.md. NAT tests 3/3 live, 0 skipped; the secure case was made positive once with the cert trusted. Follow-ups: #817, #818, #816.

Done on master (ac1b3355, 27302314). Port-NAT opc-plc fixture under `tests/Drivers/ZB.MOM.WW.OtOpcUa.Driver.OpcUaClient.IntegrationTests/Docker/nat/`, deployed as `/opt/otopcua-opcuaclient-nat` on 10.100.0.35 → `opc.tcp://10.100.0.35:50010` (internal 50000), advertising `otopcua-opc-plc-nat-private.invalid` via `--ph`, `project: lmxopcua` label. CI: `integration-fixtures.sh` starts a throwaway container and exports `OPCUA_NAT_ENDPOINT`; v2-e2e points at the shared stack. Documented in infra/README.md and scripts/ci/README.md. NAT tests 3/3 live, 0 skipped; the secure case was made positive once with the cert trusted. Follow-ups: #817, #818, #816.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dohertj2/lmxopcua#813