From 379d256eb98bff31ec57a5e2c120a7bf8bd97071 Mon Sep 17 00:00:00 2001 From: Yuneng Jiang Date: Sat, 19 Sep 2026 19:55:07 -0700 Subject: [PATCH] test(batches): skip the Bedrock GovCloud batch e2e until its secrets are provisioned The test resolves four AWS_GOVCLOUD_* values through os.environ/ references on the deployment, and none of them is injected into the e2e stack, so the upload returns 500 "S3 bucket_name is required" and the test fails on configuration rather than on the GovCloud partition behavior it guards. The runner podSpec mounts 29 individual secretKeyRef entries from litellm-provider-keys with no envFrom, and the string "govcloud" appears nowhere in project-releaser, so nothing supplies these values today. The commercial-partition Bedrock batch tests resolve their own os.environ/ bucket and pass, which rules out the reference syntax and leaves the absent secrets as the only cause. Skipped rather than weakened, matching the LIT-5027 and LIT-4820 markers in this file: the assertions stay as the correct contract and the marker names the condition for removing it. Reports 1 skipped instead of 1 failed. --- tests/e2e/batches/test_batches_e2e.py | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/tests/e2e/batches/test_batches_e2e.py b/tests/e2e/batches/test_batches_e2e.py index 9b3c06d9a1b..191f3b4be20 100644 --- a/tests/e2e/batches/test_batches_e2e.py +++ b/tests/e2e/batches/test_batches_e2e.py @@ -1056,6 +1056,23 @@ class TestBedrockBatchGovCloud: "llm.files.bedrock.govcloud_partition.nonstream.works", exercised_on=["batches", "files"], ) + @pytest.mark.skip( + reason=( + "The GovCloud credentials this test resolves are not provisioned in the e2e " + "lane, so it fails on configuration rather than on the partition behavior it " + "guards: the upload returns 500 'S3 bucket_name is required' because " + "os.environ/AWS_GOVCLOUD_BATCH_S3_BUCKET resolves to nothing. None of " + "AWS_GOVCLOUD_ACCESS_KEY_ID, AWS_GOVCLOUD_SECRET_ACCESS_KEY, " + "AWS_GOVCLOUD_BATCH_S3_BUCKET or AWS_GOVCLOUD_BATCH_ROLE_ARN is injected into " + "the stack: the runner podSpec mounts 29 individual secretKeyRef entries from " + "litellm-provider-keys and no envFrom, and the string 'govcloud' appears nowhere " + "in project-releaser. The commercial-partition Bedrock batch tests resolve their " + "own os.environ/ bucket and pass, so the reference syntax is sound and only the " + "GovCloud secrets are absent. Skipped rather than weakened because the assertions " + "below are the correct contract. Remove this marker once the four secrets are " + "provisioned and injected; do not relax the assertions to make it pass." + ) + ) def test_unified_file_upload_and_batch_create_in_govcloud( self, client: BatchClient, resources: ResourceManager ) -> None: