The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
6.2 KiB
JSON
15 lines
6.2 KiB
JSON
{
|
|
"assetKey": "a-validator-checking-the-wrong-datasource",
|
|
"kind": "terminal",
|
|
"command": "set -e\nset -o pipefail\nJ=src/app-bootstrap/src/main/java/dev/caskeleton/bootstrap/autoconfigure/jpa\nP=src/app-bootstrap/src/main/java/dev/caskeleton/bootstrap/autoconfigure/persistencejpa\nR=src/app-bootstrap/src/main/java/dev/caskeleton/bootstrap/runtime\nT=src/app-bootstrap/src/test/java/dev/caskeleton/bootstrap/autoconfigure/jpa\nstrip() { sed -E 's#^src/[^:]*/src/(main|test)/[^:]*/([^:/]+):([0-9]+):# \\1 · \\2:\\3 #'; }\ncut_range() { awk -v f=\"$2\" -v a=\"$3\" -v b=\"$4\" 'NR>=a && NR<=b {printf \" %s:%d %s\\n\", f, NR, $0}' \"$1\"; }\n\necho \"# 검증기 자바독이 적은 두 결함과 그 상쇄\"\ncut_range $J/JpaDataSourceProfileValidator.java JpaDataSourceProfileValidator.java 11 19\n\necho\necho \"# 그 병렬 네임스페이스가 src 안에 남아 있는 자리\"\ngit grep -n 'app.jpa-platform.datasource' -- 'src/**' | strip\necho \" src 밖에서 이 문자열을 쓰는 파일과 줄 수 :\"\ngit grep -c 'app.jpa-platform.datasource' | grep -v '^src/' | sed 's#^# #'\necho \" 그중 운영자용 표에 살아 있는 줄 :\"\ngrep -n 'app.jpa-platform.datasource' infra/jpa/postgres/README.md | cut -c1-150 | sed 's#^# infra/jpa/postgres/README.md:#'\nn=$(git grep -l 'app.jpa-platform.datasource' -- 'src/**/*.yml' 'src/**/*.yaml' 'src/**/*.properties' 2>/dev/null | wc -l || true)\necho \" 설정 파일(yml·yaml·properties)에서 : $n 건\"\ncm=$(git grep -n 'app.jpa-platform.datasource' -- 'src/**/*.java' | grep '/main/' | grep -cv '\\* \\|//' || true)\nct=$(git grep -n 'app.jpa-platform.datasource' -- 'src/**/*.java' | grep '/test/' | grep -cv '\\* \\|//' || true)\necho \" 그중 주석이 아닌 줄 : main $cm 건 · test $ct 건 (test 쪽은 회귀 테스트의 검색 문자열)\"\nf=$(find src -name 'JpaDataSourceSettings.java' -not -path '*/build/*' | wc -l || true)\necho \" 그것을 바인딩하던 JpaDataSourceSettings 클래스 : $f 건\"\n\necho\necho \"# 옛 상한 검사 메서드 이름이 남아 있는 자리\"\ngit grep -n 'requirePoolBounds' -- 'src/**/*.java' | strip\n\necho\necho \"# 지금 검증기가 읽는 것과 던지는 것\"\ncut_range $J/JpaDataSourceProfileValidator.java JpaDataSourceProfileValidator.java 50 66\n\necho\necho \"# validateResolved 를 부르는 자리 전부\"\ngit grep -n 'validateResolved' -- 'src/**/*.java' | grep -v '/JpaDataSourceProfileValidator.java:' | strip\n\necho\necho \"# 그 호출자가 붙는 조건과 출하 기본값\"\nawk 'NR>=56 && NR<=61 {printf \" PersistenceJpaRootAutoConfiguration.java:%d %s\\n\", NR, $0}' $P/PersistenceJpaRootAutoConfiguration.java\ngrep -n 'APP_PERSISTENCE_JPA_ENABLED' src/app-bootstrap/src/main/resources/application.yml | head -1 | sed 's#^# application.yml:#'\n\necho\necho \"# 직접 생성의 이유로 적힌 조건과, 그 조건의 현재 상태\"\nawk 'NR>=95 && NR<=99 {printf \" PersistenceJpaRootAutoConfiguration.java:%d %s\\n\", NR, $0}' $P/PersistenceJpaRootAutoConfiguration.java\nawk 'NR>=57 && NR<=64 {printf \" JpaPlatformRuntimeAutoConfiguration.java:%d %s\\n\", NR, $0}' $J/JpaPlatformRuntimeAutoConfiguration.java\n\necho\necho \"# 그 호출자가 검증기를 어디서 얻는가\"\ncut_range $P/PersistenceJpaRootAutoConfiguration.java PersistenceJpaRootAutoConfiguration.java 106 114\n\necho\necho \"# 이 타입을 빈으로 정의하는 자리와, 그 빈을 주입받는 코드\"\nb=$(grep -c '@Bean' $J/JpaPlatformAutoConfiguration.java || true)\necho \" JpaPlatformAutoConfiguration 의 @Bean 개수 : $b\"\n\nawk 'NR==19 || NR==20 {printf \" JpaPlatformAutoConfiguration.java:%d %s\\n\", NR, $0}' $J/JpaPlatformAutoConfiguration.java\ncut_range $J/JpaPlatformAutoConfiguration.java JpaPlatformAutoConfiguration.java 48 50\ncut_range $J/JpaPlatformRuntimeAutoConfiguration.java JpaPlatformRuntimeAutoConfiguration.java 111 117\nhits=$(git grep -n 'JpaDataSourceProfileValidator ' -- 'src/**/*.java' \\\n | grep '/main/' \\\n | grep -v 'public JpaDataSourceProfileValidator\\|new JpaDataSourceProfileValidator\\|final class' \\\n | grep -v 'JpaDataSourceProfileValidator validator =' || true)\nif [ -z \"$hits\" ]; then echo \" 파라미터나 필드로 받는 프로덕션 코드 : 0 건\"; else echo \"$hits\" | strip; fi\n\necho\necho \"# HikariPoolConstraintValidator 가 읽는 키와 그 빈, 그리고 풀 크기를 보는 다른 검증기\"\ngrep -n 'static final String .*_KEY = \"spring.datasource.hikari' $R/HikariPoolConstraintValidator.java \\\n | sed -E 's#^([0-9]+): *# HikariPoolConstraintValidator.java:\\1 #'\ncut_range $R/RuntimeSafetyConfig.java RuntimeSafetyConfig.java 49 51\necho \" maximum-pool-size 와 minimum-idle 을 실제로 검사하는 곳 :\"\ngit grep -n 'spring.datasource.hikari.maximum-pool-size\\|spring.datasource.hikari.minimum-idle' -- 'src/**/*.java' | grep '/main/' | strip\necho \" app-bootstrap 이 HikariCP 를 선언하는 구성 :\"\ngrep -n 'com.zaxxer:HikariCP' src/app-bootstrap/build.gradle | sed 's#^# build.gradle:#'\necho \" 그런데 runtimeClasspath 를 풀어 보면 :\"\n(cd src && ./gradlew :app-bootstrap:dependencies --configuration runtimeClasspath --offline -q 2>/dev/null | grep -i 'HikariCP' | head -2 | sed 's#^# #')\n\necho\necho \"# 그 부재를 고정하는 회귀 테스트\"\ngit grep -n '@DisplayName\\|void the\\|void an' -- 'src/**/JpaResolvedDataSourceValidationTest.java' | strip\necho \" 그 테스트가 훑는 범위 :\"\nawk 'NR>=115 && NR<=119 {printf \" JpaResolvedDataSourceValidationTest.java:%d %s\\n\", NR, $0}' $T/JpaResolvedDataSourceValidationTest.java\necho \" 공허한 통과를 막는 단언과 주석 제거 :\"\ncut_range $T/JpaResolvedDataSourceValidationTest.java JpaResolvedDataSourceValidationTest.java 47 60\n",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-03T12:44:22+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/a-validator-checking-the-wrong-datasource.txt",
|
|
"svg": "evidence/rendered/a-validator-checking-the-wrong-datasource.svg",
|
|
"rawSha256": "5ae399038bf4a1a248ca55147577082548360d509ea27f692df333448c3daeb8",
|
|
"lines": 158,
|
|
"redaction": "코드베이스 측정으로 교체"
|
|
}
|