feat: add e2e test fixtures extracted from platform repo - #17
Merged
Conversation
Adds the standalone MCP servers used by the Archestra Platform e2e test suite (mcp-example-oauth-server, mcp-server-jwks-keycloak, mcp-server-id-jag, mcp-server-network-probe, mcp-server-entra-obo-debug) under test-fixtures/. These were extracted from platform/e2e-tests/test-mcp-servers/ so their npm dependency surface no longer drives Dependabot traffic in the security-sensitive platform repo. Images are built/pushed manually via each server's Makefile to GCR; the platform e2e tests pull the pinned images, they do not build from source.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Adds the five standalone MCP servers that the Archestra Platform end-to-end test suite uses as fixtures, under a new
test-fixtures/directory:mcp-example-oauth-server— OAuth 2.1 fixture (image…/archestra-public/mcp-example-oauth-server:0.0.1)mcp-server-jwks-keycloak— JWT propagation / enterprise-managed credential exchange (…:0.0.3)mcp-server-id-jag— ID-JAG assertion exchange (…:0.0.4)mcp-server-network-probe— manual local network-policy testing (…:0.0.1)mcp-server-entra-obo-debug— Entra OBO bearer-token debug server (never containerized;npm startlocally)Why
These were extracted from
platform/e2e-tests/test-mcp-servers/. Three of them shippackage-lock.jsonfiles, which generated recurring Dependabot PRs in the security-sensitive platform repo. Moving the sources here removes that dependency surface from the platform repo.The platform e2e tests pull the pre-built, pinned images from Google Artifact Registry — they do not build these from source — so the platform-side removal (separate PR) is safe. Images continue to be built and pushed manually via each server's
Makefile. Seetest-fixtures/README.mdfor the build/publish flow and the platform references to update when bumping a tag.Companion PR
A separate PR in the platform repo removes
platform/e2e-tests/test-mcp-servers/and the associated knip/tsconfig excludes.