stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
4231305fec4a24de438f29dc639575a39fd3b469
git.stella-ops.org/docs/modules/attestor/ttl-validation.md
StellaOps Bot 5540ce9430 docs consoliation work
2025-12-24 14:19:46 +02:00

2.9 KiB
Raw Blame History

Attestor TTL Validation Runbook

DEPRECATED: This runbook tests MongoDB TTL indexes, which are no longer used. Attestor now uses PostgreSQL for persistence (Sprint 4400). See docs/db/SPECIFICATION.md for current database schema.

Purpose: confirm MongoDB TTL indexes and Redis expirations for the attestation dedupe store behave as expected on a production-like stack.

Prerequisites

  • Docker Desktop or compatible daemon with the Compose plugin enabled.
  • Local ports 27017 and 6379 free.
  • dotnet SDK 10.0 preview (same as repo toolchain).
  • Network access to pull mongo:7 and redis:7 images.

Quickstart

  1. From the repo root export any required proxy settings, then run

    scripts/run-attestor-ttl-validation.sh

    The helper script:

    • Spins up mongo:7 and redis:7 containers.
    • Sets ATTESTOR_LIVE_MONGO_URI / ATTESTOR_LIVE_REDIS_URI.
    • Executes the live TTL test suite (Category=LiveTTL) in StellaOps.Attestor.Tests.
    • Tears the stack down automatically.

  2. Capture the test output (ttl-validation-<timestamp>.log) and attach it to the sprint evidence folder (docs/modules/attestor/evidence/).

Result handling

  • Success: Tests complete in ~3–4 minutes with Total tests: 2, Passed: 2. Store the log and note the run in docs/implplan/archived/SPRINT_0100_0001_0001_identity_signing.md under ATTESTOR-72-003.
  • Failure: Preserve:
    • docker compose logs for both services.
    • mongosh output of db.dedupe.getIndexes() and sample documents.
    • redis-cli --raw ttl attestor:ttl:live:bundle:<id>. File an incident in the Attestor Guild channel and link the captured artifacts.

Manual verification (optional)

If the helper script cannot be used:

  1. Start MongoDB and Redis manually with equivalent configuration.
  2. Set ATTESTOR_LIVE_MONGO_URI and ATTESTOR_LIVE_REDIS_URI.
  3. Run dotnet test src/Attestor/StellaOps.Attestor.sln --no-build --filter "Category=LiveTTL".
  4. Follow the evidence handling steps above.

Ownership

  • Primary: Attestor Service Guild.
  • Partner: QA Guild (observes TTL metrics, confirms evidence archiving).

2025-11-03 validation summary

  • Stack: mongod 7.0.5 (tarball) + mongosh 2.0.2, redis-server 7.2.4 (source build) running on localhost without Docker.
  • Mongo results: dedupe TTL index (ttlAt, expireAfterSeconds: 0) confirmed; document inserted with 20 s TTL expired automatically after ~80 s (expected allocator sweep). Evidence: docs/modules/attestor/evidence/2025-11-03-mongo-ttl-validation.txt.
  • Redis results: Key attestor:ttl:live:bundle:validation set with 45 s TTL reached TTL=-2 after ~47 s confirming expiry propagation. Evidence: docs/modules/attestor/evidence/2025-11-03-redis-ttl-validation.txt.
  • Notes: Local binaries built/run to accommodate sandbox without Docker; services shut down after validation.