Implement Keystone environment deployments

2026-05-13 16:11:23 +01:00
parent 65d3142d03
commit aa680b25fd
175 changed files with 10258 additions and 740 deletions
--- a/tests/Feature/RepositoryAccessTest.php
+++ b/tests/Feature/RepositoryAccessTest.php
@@ -0,0 +1,54 @@
+<?php
+
+use App\Actions\Applications\GenerateDeployKey;
+use App\Actions\Applications\VerifyRepositoryAccess;
+use App\Models\Application;
+use Illuminate\Support\Facades\Process;
+
+it('stores generated deploy keys on the application without marking them installed', function () {
+    $application = Application::factory()->create([
+        'deploy_key_installed_at' => now(),
+    ]);
+
+    app(GenerateDeployKey::class)->execute($application, [
+        'public' => 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAITestPublicKey keystone',
+        'private' => "-----BEGIN OPENSSH PRIVATE KEY-----\ntest\n-----END OPENSSH PRIVATE KEY-----",
+        'fingerprint' => 'SHA256:test-fingerprint',
+    ]);
+
+    expect($application->refresh())
+        ->deploy_key_public->toStartWith('ssh-ed25519')
+        ->deploy_key_private->toContain('OPENSSH PRIVATE KEY')
+        ->deploy_key_fingerprint->toBe('SHA256:test-fingerprint')
+        ->deploy_key_installed_at->toBeNull();
+});
+
+it('verifies repository access with git ls-remote and a temporary ssh command', function () {
+    Process::fake([
+        '*' => Process::result(output: "abc123\trefs/heads/main\n"),
+    ]);
+
+    $application = Application::factory()->create([
+        'repository_url' => 'git@example.com:org/repo.git',
+        'default_branch' => 'main',
+    ]);
+    app(GenerateDeployKey::class)->execute($application, [
+        'public' => 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAITestPublicKey keystone',
+        'private' => "-----BEGIN OPENSSH PRIVATE KEY-----\ntest\n-----END OPENSSH PRIVATE KEY-----",
+        'fingerprint' => 'SHA256:test-fingerprint',
+    ]);
+
+    $verified = app(VerifyRepositoryAccess::class)->execute($application->refresh());
+
+    expect($verified)->toBeTrue()
+        ->and($application->refresh()->deploy_key_installed_at)->not->toBeNull();
+
+    Process::assertRan(function ($process): bool {
+        $command = is_array($process->command) ? implode(' ', $process->command) : $process->command;
+
+        return str_contains($command, 'git')
+            && str_contains($command, 'ls-remote')
+            && str_contains($command, 'git@example.com:org/repo.git')
+            && ($process->environment['GIT_SSH_COMMAND'] ?? null) !== null;
+    });
+});