test(ers): wait for seeded LDAP readiness

[jrschumacher]

Summary

• replace the OpenLDAP startup-log wait with a bounded semantic readiness check
• wait for port 389 and repeatedly query LDAP until the seeded Alice DN is present
• document the pinned image dependency on the bundled ldapsearch client

Why

The token-based ERS BDD scenarios depend on seeded LDAP users. The existing slapd starting log only proves the daemon started; it can fire before custom LDIF fixtures are queryable, allowing the scenario to race bootstrap and fail for the wrong reason.

Testing

• cd tests-bdd && go test ./cukes -run "^$" -count=1
• cd tests-bdd && golangci-lint run --disable nestif ./cukes

Stack

Stacked above #3836 so the existing ERS PRs can merge independently.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 14d703e1-ee97-48dc-888e-682f7ad2acdb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	97.751399ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	56.164814ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	247.86707ms
Throughput	403.44 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	29.354918098s
Average Latency	292.121768ms
Throughput	170.33 requests/second

[github-actions]

X-Test Results

✅ go@main-pull-3841
✅ go@main-main
✅ go@pull-3841-pull-3841
✅ go@main-v0.9.0
✅ go@pull-3841-v0.9.0
✅ java@main-pull-3841
✅ go@pull-3841-main
✅ java@main-main
cukes-report
✅ js@main-main
✅ js@main-pull-3841
✅ js@main-v0.9.0
✅ java@main-v0.9.0
opentdfplatformBNGLJV.dockerbuild
govulncheck-failure-8
govulncheck-failure-5
govulncheck-failure-1
govulncheck-failure-0
govulncheck-failure-3
govulncheck-failure-2

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	209.466156ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	114.245104ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	418.365874ms
Throughput	239.03 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	43.198809798s
Average Latency	431.229184ms
Throughput	115.74 requests/second

[github-actions]

X-Test Results

✅ go@pull-3841-pull-3841
✅ go@main-pull-3841
✅ go@pull-3841-main
✅ js@main-v0.9.0
✅ java@main-main
✅ go@pull-3841-v0.9.0
✅ go@main-main
✅ go@main-v0.9.0
✅ js@main-pull-3841
✅ js@main-main
✅ java@main-v0.9.0
✅ java@main-pull-3841
cukes-report
opentdfplatformQDBFD0.dockerbuild
govulncheck-failure-1
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-2
govulncheck-failure-0
govulncheck-failure-5

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	189.689484ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	98.529418ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	405.626976ms
Throughput	246.53 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	42.441276507s
Average Latency	423.548768ms
Throughput	117.81 requests/second

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• examples
• otdfctl
• sdk
• service
• lib/fixtures
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Results

✅ go@pull-3841-main
✅ go@pull-3841-pull-3841
✅ go@main-main
bats-test-results
✅ go@main-pull-3841
✅ go@main-v0.9.0
cukes-report
✅ go@pull-3841-v0.9.0
✅ java@main-pull-3841
✅ java@main-main
✅ js@main-pull-3841
✅ js@main-v0.9.0
✅ js@main-main
✅ java@main-v0.9.0
opentdfplatformHWZGM0.dockerbuild
govulncheck-failure-2
govulncheck-failure-0
govulncheck-failure-1
govulncheck-failure-8
govulncheck-failure-5
govulncheck-failure-3