fix: support host storage paths and clean up cancelled deployments

Allow validated host file and directory mounts outside resource directories
while protecting external paths from deletion.

Clean up cancelled deployment containers and clear tracked process IDs.
Preserve legacy KeyDB and Dragonfly password parsing, accept server backup
paths without extension restrictions, and allow Compose variable proxy ports.
This commit is contained in:
Andras Bacsai
2026-10-05 11:08:52 +02:00
parent 774e6bf178
commit 554bd354bf
94 changed files with 2922 additions and 357 deletions
@@ -181,6 +181,18 @@ it('keeps deployment logging available if value formatting fails', function () {
->toBe(REDACTED);
});
it('redacts shell-escaped remote secrets from command output', function () {
[$application, $server] = makeDeploymentControlVarFixture();
[$job, $reflection] = makeControlVarFilteringJob($application, $server, [
'remote_secrets_cache' => ['DB_PASS' => "s3cr'et-value"],
]);
$redacted = invokeDeploymentJobMethod($job, $reflection, 'redact_sensitive_info', "docker build --build-arg DB_PASS='s3cr'\\''et-value' --env 'DB_PASS=s3cr'\\''et-value' .");
expect($redacted)->not->toContain('s3cr')
->toContain('--build-arg DB_PASS='.REDACTED);
});
it('ignores empty and non-string remote secrets when redacting command output', function () {
[$application, $server] = makeDeploymentControlVarFixture();
[$job, $reflection] = makeControlVarFilteringJob($application, $server, [