M8: direct-data-plane storage Terraform coverage (partial — TLS trust blocked on darwin)

.github/workflows/ci.yml

@@ -445,8 +445,14 @@ jobs:
         run: |
           TOTAL_CHUNKS=8
           CHUNK=${{ matrix.chunk }}
-          # Discover all test functions from source (no Docker needed)
-          TESTS=$(grep -rh '^func Test' test/terraform/*_test.go | sed 's/func \(Test[^ (]*\).*/\1/' | sort -u)
+          # Discover all test functions from source (no Docker needed).
+          # test/terraform/azure is a separate package one directory deeper
+          # (AZURE.md section 10.10), so it needs its own glob term -- a bare
+          # test/terraform/*_test.go never matched it, meaning the Azure
+          # Terraform suite (M7/M8) never actually ran in CI despite
+          # `./test/terraform/...` being the -v target below.
+          TESTS=$(grep -rh '^func Test' test/terraform/*_test.go test/terraform/azure/*_test.go \
+            | sed 's/func \(Test[^ (]*\).*/\1/' | sort -u)
           # Round-robin distribute tests across chunks
           CHUNK_TESTS=$(echo "$TESTS" | awk "NR % ${TOTAL_CHUNKS} == ${CHUNK}")
           COUNT=$(echo "$CHUNK_TESTS" | wc -l | tr -d ' ')

.golangci.yml

@@ -495,6 +495,13 @@ linters:
       # therefore run sequentially, so paralleltest is not applicable here.
       - path: 'dax/dataplane_integration_test.go'
         linters: [ paralleltest ]
+      # storage_dataplane_test.go's SharedKey-auth-path subtest deliberately
+      # runs non-parallel, after its three sibling subtests: it inspects the
+      # whole container log for a non-SharedKey Authorization header, so it
+      # must run once those subtests have actually generated their own
+      # traffic, not concurrently with them.
+      - path: 'test/terraform/azure/storage_dataplane_test.go'
+        linters: [ paralleltest ]
       # isolation_test.go uses unexported types and must be in the same package.
       - path: 'elasticache/isolation_test.go'
         linters: [ testpackage, paralleltest ]

Dockerfile

@@ -46,8 +46,10 @@ EXPOSE 8000
 # Expose MQTT broker port
 EXPOSE 1883
 
-# Expose Azure Blob/Queue/Table (Azurite-compatible), Service Bus, and Cosmos DB ports
-EXPOSE 10000 10001 10002 10003 10006 8081
+# Expose Azure Blob/Queue/Table (Azurite-compatible), the shared Azure
+# Storage virtual-hosted listener (10010, see services/azurestoragevhost),
+# Service Bus, ARM, and Cosmos DB ports
+EXPOSE 10000 10001 10002 10003 10006 10010 8081
 
 # OCI label pointing to the source repository
 LABEL org.opencontainers.image.source="https://github.com/blackbirdworks/gopherstack"

README.md

@@ -689,18 +689,19 @@ Every service links to its own page with a coverage breakdown — audited operat
 
 | Service | Parity | PARITY Entries | Notes |
 |---|---|---|---|
-| [Azure Blob Storage](services/azureblob/README.md) | C | 8 | 8 gaps; 3 deferred |
+| [Azure Blob Storage](services/azureblob/README.md) | C | 11 | 9 gaps; 3 deferred |
 | [Azure Cosmos DB](services/cosmosdb/README.md) | C | 15 | 10 gaps; 6 deferred |
-| [Azure Queue Storage](services/azurequeue/README.md) | C | 9 | 7 gaps; 1 deferred |
+| [Azure Queue Storage](services/azurequeue/README.md) | C | 11 | 7 gaps; 1 deferred |
 | [Azure Service Bus](services/azureservicebus/README.md) | B | 17 | 4 gaps; 2 deferred |
-| [Azure Table Storage](services/azuretable/README.md) | C | 10 | 6 gaps; 3 deferred |
+| [Azure Table Storage](services/azuretable/README.md) | C | 13 | 6 gaps; 3 deferred |
 
 ### Other
 
 | Service | Parity | PARITY Entries | Notes |
 |---|---|---|---|
 | [AppStream 2.0](services/appstream/README.md) | A | 44 | clean |
 | [Azurearm](services/azurearm/README.md) | B | 12 | 6 gaps; 1 deferred |
+| [Azurestoragevhost](services/azurestoragevhost/README.md) | B | 2 | 2 gaps; 1 deferred |
 | [Cloudfrontkeyvaluestore](services/cloudfrontkeyvaluestore/README.md) | B | 6 | 3 gaps; 1 structural gap |
 | [Directconnect](services/directconnect/README.md) | A | 64 | 4 gaps; 8 structural gaps; 1 deferred |
 | [Grafana](services/grafana/README.md) | A | 25 | 2 gaps; 1 structural gap |