Skip to content

Create a new immutable snapshot when bundle permissions change#5957

Open
andrewnester wants to merge 1 commit into
mainfrom
fix/immutable-snapshot-permissions
Open

Create a new immutable snapshot when bundle permissions change#5957
andrewnester wants to merge 1 commit into
mainfrom
fix/immutable-snapshot-permissions

Conversation

@andrewnester

Copy link
Copy Markdown
Contributor

Changes

Create a new immutable snapshot when bundle permissions change

Why

If the top-level permissions in the bundle change, we can't change the permission of corresponding snapshot because it's immutable. Hence instead we should create a new snapshot when permissions changed.
It's done by storing permissions hash as a metadata file in a snapshot zip.

Tests

Added an acceptance tests

@andrewnester
andrewnester requested a review from pietern July 17, 2026 09:29
@eng-dev-ecosystem-bot

Copy link
Copy Markdown
Collaborator

Integration test report

Commit: 72c853e

Run: 29570155969

Env 💚​RECOVERED 🙈​SKIP ✅​pass 🙈​skip Time
💚​ aws linux 4 4 227 1121 4:43
💚​ aws windows 4 4 229 1119 6:39
💚​ aws-ucws linux 4 4 316 1037 5:47
💚​ aws-ucws windows 4 4 318 1035 7:36
💚​ azure linux 4 4 227 1120 4:45
💚​ azure windows 4 4 229 1118 6:44
💚​ azure-ucws linux 4 4 318 1034 10:11
💚​ azure-ucws windows 4 4 320 1032 7:43
💚​ gcp linux 4 4 226 1122 4:55
💚​ gcp windows 4 4 228 1120 6:43
8 interesting tests: 4 RECOVERED, 4 SKIP
Test Name aws linux aws windows aws-ucws linux aws-ucws windows azure linux azure windows azure-ucws linux azure-ucws windows gcp linux gcp windows
💚​ TestAccept 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R
🙈​ TestAccept/bundle/invariant/no_drift 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S
🙈​ TestAccept/bundle/resources/vector_search_endpoints/drift/recreated_same_name 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S
🙈​ TestAccept/bundle/resources/vector_search_indexes/recreate/embedding_dimension 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S
🙈​ TestAccept/ssh/connection 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S 🙈​S
💚​ TestFetchRepositoryInfoAPI_FromRepo 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R
💚​ TestFetchRepositoryInfoAPI_FromRepo/root 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R
💚​ TestFetchRepositoryInfoAPI_FromRepo/subdir 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R 💚​R
Top 10 slowest tests (at least 2 minutes):
duration env testname
6:26 azure-ucws windows TestAccept
6:26 aws-ucws windows TestAccept
6:20 gcp windows TestAccept
6:18 azure windows TestAccept
6:14 aws windows TestAccept
2:59 gcp linux TestAccept
2:58 azure linux TestAccept
2:54 aws linux TestAccept
2:48 aws-ucws linux TestAccept
2:43 azure-ucws linux TestAccept

@@ -0,0 +1,15 @@
Local = true
Cloud = false # Temporary disable cloud tests until the API is fully available

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you add a Badness here so that we remember to flip this on at least? I think that's the convention we use in other tests

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants