fix(release): verify current runtime manifest (#539)

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

Author: jeremi

release/scripts/first-country-release-form.py

@@ -670,18 +670,32 @@ def read_runtime_inspection(
         "workbook_classification",
         "workbook_project_file",
         "workbook_runtime_path",
+        "match_principal",
+        "runtime_uid",
+        "runtime_gid",
+        "runtime_files",
         "topology",
     }
     if expected_notary_image is not None:
         expected_keys.add("notary")
     if not isinstance(runtime_manifest, dict) or set(runtime_manifest) != expected_keys:
         raise ReleaseFormError("canonical runtime manifest fields are not closed")
     if (
-        runtime_manifest.get("schema_version") != "registryctl.local_runtime.v1"
+        runtime_manifest.get("schema_version") != "registryctl.local_runtime.v2"
         or runtime_manifest.get("environment") != "local"
         or runtime_manifest.get("relay_image") != expected_relay_image
         or runtime_manifest.get("workbook_classification")
         != "operator_owned_source_data"
+        or not isinstance(runtime_manifest.get("match_principal"), str)
+        or not runtime_manifest["match_principal"]
+        or not isinstance(runtime_manifest.get("runtime_uid"), str)
+        or not runtime_manifest["runtime_uid"].isdigit()
+        or runtime_manifest.get("runtime_uid") == "0"
+        or not isinstance(runtime_manifest.get("runtime_gid"), str)
+        or not runtime_manifest["runtime_gid"].isdigit()
+        or runtime_manifest.get("runtime_gid") == "0"
+        or not isinstance(runtime_manifest.get("runtime_files"), dict)
+        or not runtime_manifest["runtime_files"]
         or runtime_manifest.get("topology") != expected_topology
     ):
         raise ReleaseFormError(

release/scripts/test_first_country_release_form.py

@@ -191,7 +191,7 @@ def write_combined_runtime(self) -> Path:
             path.parent.mkdir(parents=True, exist_ok=True)
             path.write_text(contents, encoding="utf-8")
         manifest = {
-            "schema_version": "registryctl.local_runtime.v1",
+            "schema_version": "registryctl.local_runtime.v2",
             "environment": "local",
             "relay_image": self.relay,
             "compose_digest": self.module.digest_uri(
@@ -210,6 +210,14 @@ def write_combined_runtime(self) -> Path:
             "workbook_classification": "operator_owned_source_data",
             "workbook_project_file": "data/public_works_projects.xlsx",
             "workbook_runtime_path": "/data/public_works_projects.xlsx",
+            "match_principal": "district-7",
+            "runtime_uid": "1000",
+            "runtime_gid": "1000",
+            "runtime_files": {
+                "compose.yaml": self.module.digest_uri(
+                    self.root / ".registry-stack/runtime/local/compose.yaml"
+                )
+            },
             "topology": "combined_notary",
             "notary": {
                 "notary_image": self.notary,