# Pull Request > **IMPORTANT:** Before submitting, please remove all sensitive data, secrets, tokens, or confidential information. Ensure you've redacted any NDA-covered information, IP addresses, resource names, or security-related details that shouldn't be publicly disclosed. ## Description Foundation PR (1 of 4) for the static Go contract test rollout under #562. Fixes a `terraform-docs` config-inheritance bug in the shared Go contract helper and adds Go contract test scaffolding to the two blueprints that previously had no coverage (`minimum-single-node-cluster` and `only-cloud-single-node-cluster`). The helper bug had to be fixed first because the new tests exercise it; the repo-root `.terraform-docs.yml` (`output.file=README.md`) was being picked up by the helper's parent-directory walk and was rewriting module READMEs instead of emitting JSON to stdout. ## Related Issue Closes #567 Relates to #562 ## Type of Change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected) - [x] Blueprint modification or addition - [x] Component modification or addition - [ ] Documentation update - [ ] CI/CD pipeline change - [ ] Other (please describe): ## Implementation Details - `src/900-tools-utilities/904-test-utilities/contract.go` — `GetTerraformDeclaredOutputs` now writes a per-test `terraform-docs.yml` (`formatter: json`) into `t.TempDir()` and invokes `terraform-docs -c <cfgPath> json <dir>`. This pins the formatter explicitly and prevents the parent-directory config walk from picking up the repo-root `.terraform-docs.yml`. - `blueprints/minimum-single-node-cluster/tests/` and `blueprints/only-cloud-single-node-cluster/tests/` — each gains `contract_bicep_test.go`, `outputs.go`, `go.mod`, `go.sum`, mirroring the existing Bicep contract tests in the other blueprints. No deployment tests are added; this is contract scope only. - `src/900-tools-utilities/904-test-utilities/README.md` — documents the new per-test config behaviour. No workflow changes in this PR. The new tests will run only after the Go gate is wired up in PR 3 of the stack (#569). ## Testing Performed - [ ] Terraform plan/apply - [ ] Blueprint deployment test - [x] Unit tests - [ ] Integration tests - [x] Bug fix includes regression test (see [Test Policy](docs/contributing/testing-validation.md)) - [x] Manual validation - [ ] Other: ## Validation Steps Run from the repo root: ```bash (cd src/900-tools-utilities/904-test-utilities && go build ./... && go vet ./...) (cd blueprints/minimum-single-node-cluster/tests && go build ./... && go vet ./...) (cd blueprints/only-cloud-single-node-cluster/tests && go build ./... && go vet ./...) ``` All three module paths build and vet cleanly. The new `contract_bicep_test.go` files in the two blueprint modules exercise the fixed `terraform-docs` invocation path. ## Checklist - [x] I have updated the documentation accordingly - [x] I have added tests to cover my changes - [x] All new and existing tests passed - [ ] I have run `terraform fmt` on all Terraform code - [ ] I have run `terraform validate` on all Terraform code - [ ] I have run `az bicep format` on all Bicep code - [ ] I have run `az bicep build` to validate all Bicep code - [x] I have checked for any sensitive data/tokens that should not be committed - [x] Lint checks pass (run applicable linters for changed file types) ## Security Review - [x] No credentials, secrets, or tokens are hardcoded or logged - [x] RBAC and identity changes follow least-privilege principles - [x] No new network exposure or public endpoints introduced without justification - [x] Dependency additions or updates have been reviewed for known vulnerabilities - [x] Container image changes use pinned digests or SHA references This PR does not touch `SECURITY.md`, `src/000-cloud/010-security-identity/`, or `deploy/`. ## Additional Notes Stack: 1. **(this PR)** Foundation — #567 2. Detector + npm wrapper — #568 3. CI wiring — #569 4. Docs cleanup — #570 ## Screenshots (if applicable) N/A. 🔒 - Generated by Copilot Co-authored-by: Bill Berry <wbery@microsoft.com>

Uh oh!

Add Go static contract test workflow #562

Description

Metadata

Metadata

Assignees

Labels

Type

Fields

Projects

Milestone

Relationships

Development

Issue actions