test: recipe-local CI test (D4 demo)

compose.git-pull.yml

@@ -3,7 +3,7 @@ services:
   git:
     environment:
       - GIT_REPO_URL
-    image: alpine/git:v2.52.0
+    image: alpine/git:v2.49.1
     entrypoint: /docker-entrypoint.sh
     volumes:
       - content:/git

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: nginx:1.31.1
+    image: nginx:1.29.0
     networks:
       - proxy
     deploy:
@@ -19,7 +19,7 @@ services:
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=1.13.0+1.31.1"
+        - "coop-cloud.${STACK_NAME}.version=1.11.0+1.29.0"
         - "backupbot.backup=true"
         - "backupbot.backup.path=/usr/share/nginx/html"
     environment:

tests/test_recipe_local.py

@@ -0,0 +1,12 @@
+"""Recipe-local test shipped by the recipe repo (D4). Runs against the LIVE deployment via the
+cc-ci contract env vars CCCI_BASE_URL / CCCI_APP_DOMAIN."""
+import os, ssl, urllib.request
+
+
+def test_recipe_local_serves_content():
+    base = os.environ["CCCI_BASE_URL"]
+    ctx = ssl.create_default_context(); ctx.check_hostname = False; ctx.verify_mode = ssl.CERT_NONE
+    with urllib.request.urlopen(base, timeout=15, context=ctx) as r:
+        body = r.read().decode(errors="replace")
+    assert r.status == 200
+    assert "nginx" in body.lower(), "recipe-local: expected the served nginx page"