mirror of
https://github.com/hanzoai/o11y.git
synced 2026-10-30 14:56:15 +00:00
zeekayandGitHub
babbdec4b8
* debrand: signoz/SigNoz/SIGNOZ -> o11y/O11y/O11Y across the tree Rename all SigNoz *branding* to O11y in file contents, file/dir names, package names, env vars, config keys, comments, docs, SDK code, and the ClickHouse schema identifiers the querier reads. Collector dependency: - Repoint github.com/hanzoai/signoz-otel-collector -> github.com/hanzoai/otel-collector and bump v0.144.6 -> v0.144.7 (go.mod + go.sum reconciled via go mod tidy). Internal package paths also debranded upstream: signozschemamigrator -> o11yschemamigrator, signozlogspipelineprocessor -> o11ylogspipelineprocessor. - Fix: v0.144.7 dropped otelconst.DistributedFieldKeysTable from the collector's public constants; pin FieldKeysTable = "distributed_field_keys" locally in pkg/telemetrymetadata/tables.go. Package/dir renames (package decl + all importers): pkg/apiserver/signozapiserver -> o11yapiserver, plus signozalertmanager, signozauthzapi, signozglobal, signozquerier, signozruler, and pkg/signoz -> pkg/o11y. Schema (read plane): signoz_traces/metrics/logs/metadata/analytics/meter and signoz_index_v3/index_v2/error_index_v2/spans (+ distributed_*) -> o11y_*. Data-preserving cutover migration added: deploy/clickhouse/migrations/0001_rename_signoz_to_o11y.sql (metadata-only RENAME DATABASE/TABLE, no drop/recreate). Preserved (attribution / external / wire contracts): - LICENSE + NOTICE verbatim (incl. "software from SigNoz", "Copyright ... SigNoz Inc."). - Upstream github.com/SigNoz/* repo URLs + @SigNoz/* CODEOWNERS teams. - Billing resource-attribute regex "signoz.workspace.*" (external wire contract). go build ./pkg/... ./cmd/... = 0; gofmt clean; renamed+schema pkg tests pass. * o11y: bump collector to v0.144.8 (o11y_* physical schema writer) + lockstep deploy plan Collector v0.144.8's schema-migrator + exporters now CREATE/WRITE the same o11y_* physical databases/tables the querier reads and the RENAME migration (0001_rename_signoz_to_o11y.sql) targets. Cross-checked byte-identical: writer DB set == migration target DB set (6); writer prefixed-table set == migration target table set (8); o11y querier reads and cloud reads are subsets of that set. Zero table-name mismatches between writer, readers, and migration. Collector go.mod unchanged between v0.144.7 and v0.144.8 (identical go.mod hash) — pure source rename, no module-graph change. Adds deploy/clickhouse/DEPLOY_signoz_to_o11y_cutover.md: the lockstep order (collector v0.144.8 -> RENAME migration -> o11y+cloud readers) with a fresh/scratch-ClickHouse pre-flight (create via migrator, emit trace+metric, query back) and rollback. Ships together or telemetry blackholes. go build ./pkg/... ./cmd/community = 0.
109 lines
4.1 KiB
Python
109 lines
4.1 KiB
Python
"""Fixtures and helpers for service account tests."""
|
|
|
|
from http import HTTPStatus
|
|
|
|
import requests
|
|
|
|
from fixtures import types
|
|
from fixtures.logger import setup_logger
|
|
from fixtures.role import ROLES_BASE, find_role_by_name # noqa: F401 — re-export for existing callers
|
|
|
|
logger = setup_logger(__name__)
|
|
|
|
SERVICE_ACCOUNT_BASE = "/api/v1/service_accounts"
|
|
|
|
|
|
def create_service_account(o11y: types.O11y, token: str, name: str, role: str = "o11y-viewer") -> str:
|
|
"""Create a service account, assign a role, and return its ID."""
|
|
resp = requests.post(
|
|
o11y.self.host_configs["8080"].get(SERVICE_ACCOUNT_BASE),
|
|
json={"name": name},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert resp.status_code == HTTPStatus.CREATED, resp.text
|
|
service_account_id = resp.json()["data"]["id"]
|
|
|
|
role_id = find_role_by_name(o11y, token, role)
|
|
role_resp = requests.post(
|
|
o11y.self.host_configs["8080"].get(f"{SERVICE_ACCOUNT_BASE}/{service_account_id}/roles"),
|
|
json={"id": role_id},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert role_resp.status_code == HTTPStatus.NO_CONTENT, role_resp.text
|
|
|
|
return service_account_id
|
|
|
|
|
|
def create_service_account_with_key(o11y: types.O11y, token: str, name: str, role: str = "o11y-admin") -> tuple:
|
|
"""Create a service account with an API key and return (service_account_id, api_key)."""
|
|
service_account_id = create_service_account(o11y, token, name, role)
|
|
|
|
key_resp = requests.post(
|
|
o11y.self.host_configs["8080"].get(f"{SERVICE_ACCOUNT_BASE}/{service_account_id}/keys"),
|
|
json={"name": "auth-key", "expiresAt": 0},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert key_resp.status_code == HTTPStatus.CREATED, key_resp.text
|
|
api_key = key_resp.json()["data"]["key"]
|
|
|
|
return service_account_id, api_key
|
|
|
|
|
|
def delete_service_account(o11y: types.O11y, token: str, service_account_id: str) -> None:
|
|
"""Soft-delete a service account."""
|
|
resp = requests.delete(
|
|
o11y.self.host_configs["8080"].get(f"{SERVICE_ACCOUNT_BASE}/{service_account_id}"),
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert resp.status_code == HTTPStatus.NO_CONTENT, resp.text
|
|
|
|
|
|
def get_first_key_id(o11y: types.O11y, token: str, service_account_id: str) -> str:
|
|
"""Return the ID of the first API key for a service account."""
|
|
resp = requests.get(
|
|
o11y.self.host_configs["8080"].get(f"{SERVICE_ACCOUNT_BASE}/{service_account_id}/keys"),
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert resp.status_code == HTTPStatus.OK, resp.text
|
|
return resp.json()["data"][0]["id"]
|
|
|
|
|
|
def create_service_account_with_roles(o11y: types.O11y, token: str, name: str, roles: list[str]) -> str:
|
|
"""Create a service account and assign multiple roles."""
|
|
resp = requests.post(
|
|
o11y.self.host_configs["8080"].get(SERVICE_ACCOUNT_BASE),
|
|
json={"name": name},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert resp.status_code == HTTPStatus.CREATED, resp.text
|
|
service_account_id = resp.json()["data"]["id"]
|
|
|
|
for role in roles:
|
|
role_id = find_role_by_name(o11y, token, role)
|
|
role_resp = requests.post(
|
|
o11y.self.host_configs["8080"].get(f"{SERVICE_ACCOUNT_BASE}/{service_account_id}/roles"),
|
|
json={"id": role_id},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert role_resp.status_code == HTTPStatus.NO_CONTENT, role_resp.text
|
|
|
|
return service_account_id
|
|
|
|
|
|
def find_service_account_by_name(o11y: types.O11y, token: str, name: str) -> dict:
|
|
"""Find a service account by name from the list endpoint."""
|
|
list_resp = requests.get(
|
|
o11y.self.host_configs["8080"].get(SERVICE_ACCOUNT_BASE),
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
timeout=5,
|
|
)
|
|
assert list_resp.status_code == HTTPStatus.OK, list_resp.text
|
|
return next(service_account for service_account in list_resp.json()["data"] if service_account["name"] == name)
|