pomerium / pomerium / 29774203356
53%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 706
Run time 2min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 52.535% (+0.02%) from 52.518%
29774203356

push

github

web-flow 
test(mcp): drop explicit mcp runtime flag, force-pull mutable image tags (#6548)

## Summary

The `mcp` runtime flag defaults to `true` as of #6521, so the MCP
acceptance suite no longer needs to set `mcp: true` explicitly in its
Pomerium config. This removes it.

Removing the flag surfaced a latent trap in the suite's container setup.
testcontainers reuses an already-present local image and never re-pulls
a mutable tag on its own, so a stale cached `pomerium/pomerium:main`
(from before #6521) kept `mcp` defaulting off and 404'd every route —
the suite was silently pinned to whatever `:main` happened to be cached.
This only bites locally; CI runs on a clean runner and always pulls
fresh.

To close that gap, the Pomerium container now uses an `alwaysPull`
policy when `POMERIUM_IMAGE` is a moving tag (`:main`/`:latest`). A
pinned version or digest override is immutable, so it stays on the
default policy and skips the extra registry round-trip.

## Related issues

- #6521

## User Explanation

No user-facing changes; test-suite only.

## AI disclosure

Claude Code — investigated the failing suite, identified the stale-image
cause, and drafted both changes; I reviewed and verified locally.

## Checklist

- [x] reference any related issues
- [ ] updated unit tests
- [x] add appropriate label (`ci`)
- [x] disclosed AI usage (or wrote "none") per AI_POLICY.md
- [x] ready for review

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

37231 of 70869 relevant lines covered (52.53%)

462.37 hits per line

Coverage Regressions

Lines Coverage ∆ File
4
74.26
 -1.18% internal/databroker/config_source.go
3
48.48
 -0.18% internal/databroker/server_clustered_follower.go
1
78.36
 2.37% pkg/storage/postgres/backend.go
1
75.41
 0.0% pkg/storage/postgres/registry.go
Jobs
ID Job ID Ran Files Coverage
1 29774203356.1 706
52.53
 GitHub Action Run
Source Files on build 29774203356