eho/register-referentie
1
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

S-04c · Run the ACL integration test on the CI runner (compose-network) #55

New Issue
Closed
opened 2026-06-29 10:02:45 +00:00 by not · 0 comments
not commented 2026-06-29 10:02:45 +00:00
Contributor
Copy Link
Copy Source

Follow-up split from #46 (CLAUDE.md §13). S-04a delivered the ACL ↔ real-OpenZaak integration test; it passes via make integration locally / on a host-executing runner, but it cannot run on Gitea's hosted ubuntu-latest runner.

Why: the runner starts the OpenZaak stack as sibling containers via the host daemon, so published ports bind to the host — not to the runner's localhost. A process on the runner (the seed, and dotnet test) gets Connection refused on localhost:8000. Bind mounts have the same reach problem (see gitea-actions-gotchas.md §1). This is why compose-smoke only polls health via docker inspect and never talks to a service port.

Outcome: run the integration test (and the publishing seed) inside the compose network so they reach http://openzaak:8000 by service name, with sources delivered via a built image (not bind mounts). Then re-add a gating integration job to CI.

Options to weigh in this issue:

  • A built Dockerfile.integration (multi-stage: build Acl.IntegrationTests, run dotnet test --filter Category=Integration at container start) + a containerised seed step, joined to the OpenZaak network (OZ_BASE=http://openzaak:8000).
  • Gitea Actions services: for OpenZaak + Postgres + Redis (awkward multi-step init/seed ordering).
  • A host-executing self-hosted runner (reintroduces the runner we moved away from).

Out of scope: changing the test assertions or the gateway behaviour — those are done in #46.

Refs #46. Documented as a known gap in docs/runbooks/gitea-actions-gotchas.md.

Follow-up split from #46 (CLAUDE.md §13). S-04a delivered the ACL ↔ real-OpenZaak integration test; it passes via `make integration` **locally / on a host-executing runner**, but it cannot run on Gitea's hosted `ubuntu-latest` runner. **Why:** the runner starts the OpenZaak stack as *sibling* containers via the host daemon, so published ports bind to the host — not to the runner's `localhost`. A process on the runner (the seed, and `dotnet test`) gets `Connection refused` on `localhost:8000`. Bind mounts have the same reach problem (see gitea-actions-gotchas.md §1). This is why `compose-smoke` only polls health via `docker inspect` and never talks to a service port. **Outcome:** run the integration test (and the publishing seed) **inside the compose network** so they reach `http://openzaak:8000` by service name, with sources delivered via a built image (not bind mounts). Then re-add a gating `integration` job to CI. **Options to weigh in this issue:** - A built `Dockerfile.integration` (multi-stage: build `Acl.IntegrationTests`, run `dotnet test --filter Category=Integration` at container start) + a containerised seed step, joined to the OpenZaak network (`OZ_BASE=http://openzaak:8000`). - Gitea Actions `services:` for OpenZaak + Postgres + Redis (awkward multi-step init/seed ordering). - A host-executing self-hosted runner (reintroduces the runner we moved away from). **Out of scope:** changing the test assertions or the gateway behaviour — those are done in #46. Refs #46. Documented as a known gap in `docs/runbooks/gitea-actions-gotchas.md`.
not added this to the Iteration 1 — Walking Skeleton milestone 2026-06-29 10:02:45 +00:00
not added the type:slicearea:aclarea:infra labels 2026-06-29 10:02:45 +00:00
not closed this issue 2026-06-29 10:48:01 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area:acl
area:bff
area:docs
area:domain
area:event-subscriber
area:infra
area:portal-behandel
area:portal-beheer
area:portal-openbaar
area:portal-self-service
area:projection
area:workflow
type:adr-proposal
type:bug
type:chore
type:slice
No labels area:acl area:infra type:slice
Milestone
No items
No Milestone Iteration 1 — Walking Skeleton
Projects
Clear projects
No projects
Assignees
Clear assignees
eho (Edwin van den Houdt)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: eho/register-referentie#55