ambient-pr-test

Ambient PR Test Skill

Deploy PR-tagged Ambient images into an OpenShift namespace for integration testing.

Invoke with a PR URL:

with skills/control-plane/ambient-pr-test  https://github.com/ambient-code/platform/pull/1599

Optional modifiers:

• --keep-alive — skip teardown
• deploy-only / teardown-only — single phase
• --namespace <ns> — target namespace (defaults to current project)

---

Environment Detection

if oc api-resources --api-group=tenant.paas.redhat.com 2>/dev/null  < /dev/null |  grep -q TenantNamespace; then
  echo "MPP"    # use provision.sh + install.sh
else
  echo "Standard"  # use install-standard.sh
fi

	Standard OpenShift	MPP
Namespace	Pre-existing	Created via TenantNamespace CR
Script	install-standard.sh	provision.sh + install.sh
Auth	Development (no JWT)	Production (RH SSO JWT)
Secrets	Auto-generated	Copied from runtime-int

---

Standard OpenShift

For any cluster where you have oc access and an existing namespace.

Prerequisites

• oc logged in with create permissions for deployments, services, routes, secrets, ClusterRoles
• Existing namespace (e.g. mturansk)
• PR images at quay.io/ambient_code/vteam_*:pr-<NUMBER>

Deploy

PR_NUMBER=1599
NAMESPACE=$(oc project -q)
bash components/pr-test/install-standard.sh "$NAMESPACE" "pr-${PR_NUMBER}"

The script:

1. Creates DB and app secrets (auto-generated)
2. Creates CP ServiceAccount + ClusterRole + ClusterRoleBinding
3. Deploys PostgreSQL, api-server (dev mode), control-plane (standard mode)
4. Creates Route (auto-assigned .apps.* host)
5. Waits for rollouts, smoke-checks health

Verify

API_HOST=$(oc get route ambient-api-server -n "$NAMESPACE" -o jsonpath='{.spec.host}')
curl -sk "https://${API_HOST}/api/ambient"
acpctl login --url "https://${API_HOST}"

Teardown

NAMESPACE=$(oc project -q)
oc delete deployment,svc,route,configmap,secret -l app=ambient-api-server -n "$NAMESPACE"
oc delete deployment,svc -l app=ambient-control-plane -n "$NAMESPACE"
oc delete secret ambient-control-plane-token ambient-cp-token-keypair -n "$NAMESPACE" --ignore-not-found
oc delete clusterrole,clusterrolebinding "ambient-control-plane-${NAMESPACE}" --ignore-not-found