orca-core 0.2.3-rc.1

Core types, configuration, Runtime trait, and error types for the orca orchestrator
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

use super::*;

#[test]
fn load_dir_discovers_services() {
    let dir = tempfile::tempdir().unwrap();
    // Create two service subdirs
    let svc_a = dir.path().join("alpha");
    let svc_b = dir.path().join("beta");
    std::fs::create_dir_all(&svc_a).unwrap();
    std::fs::create_dir_all(&svc_b).unwrap();

    std::fs::write(
        svc_a.join("service.toml"),
        r#"
[[service]]
name = "alpha"
image = "nginx:latest"
port = 80
"#,
    )
    .unwrap();

    std::fs::write(
        svc_b.join("service.toml"),
        r#"
[[service]]
name = "beta-db"
image = "postgres:16"
port = 5432

[[service]]
name = "beta-app"
image = "myapp:latest"
port = 3000
"#,
    )
    .unwrap();

    let config = ServicesConfig::load_dir(dir.path()).unwrap();
    assert_eq!(config.service.len(), 3);
    assert_eq!(config.service[0].name, "alpha");
    assert_eq!(config.service[1].name, "beta-db");
    assert_eq!(config.service[2].name, "beta-app");
}

#[test]
fn load_dir_resolves_per_service_secrets() {
    let dir = tempfile::tempdir().unwrap();
    let svc_dir = dir.path().join("myapp");
    std::fs::create_dir_all(&svc_dir).unwrap();

    std::fs::write(
        svc_dir.join("service.toml"),
        r#"
[[service]]
name = "myapp"
image = "myapp:latest"
port = 3000

[service.env]
DB_PASS = "${secrets.DB_PASS}"
PLAIN = "hello"
"#,
    )
    .unwrap();

    // Create secrets.json in the service dir
    let secrets_path = svc_dir.join("secrets.json");
    let mut store = crate::secrets::SecretStore::open(&secrets_path).unwrap();
    store.set("DB_PASS", "s3cret").unwrap();
    drop(store);

    // Secrets are no longer resolved at load time — they stay as templates
    // so the reconciler can compare unresolved values and skip unchanged services.
    // Resolution happens in service_config_to_spec() at container creation time.
    let config = ServicesConfig::load_dir(dir.path()).unwrap();
    assert_eq!(config.service[0].env["DB_PASS"], "${secrets.DB_PASS}");
    assert_eq!(config.service[0].env["PLAIN"], "hello");
}

#[test]
fn load_dir_errors_when_empty() {
    let dir = tempfile::tempdir().unwrap();
    let result = ServicesConfig::load_dir(dir.path());
    assert!(result.is_err());
}