Performance Testing Infrastructure

tests/k6/
  helpers/
    auth.js          # Keycloak token acquisition
    config.js        # Base URL resolution, environment detection
    thresholds.js    # Shared threshold definitions
  services/
    rules.js         # craig-rules load tests
    cases.js         # craig-cases load tests
    placement.js     # craig-placement load tests
    exchange.js      # craig-exchange load tests
    financial.js     # craig-financial load tests
    reporting.js     # craig-reporting load tests
    security.js      # craig-security load tests
    intake.js        # craig-intake load tests
    web.js           # craig-web (BFF) load tests
  scenarios/
    smoke.js         # 1 VU, 1 iteration per endpoint
    load.js          # 50 VUs, 5 minute ramp-up, 10 minute sustained
    stress.js        # 100 VUs, 2 minute ramp-up, 5 minute sustained
    soak.js          # 10 VUs, 30 minute sustained
  run-all.js         # Orchestrator that imports all service scripts
  baselines/
    YYYY-MM-DD.json  # Recorded baseline results
    README.md        # Baseline format documentation

// tests/k6/helpers/auth.js
import http from 'k6/http';

export function getToken(username, password) {
    const url = `${__ENV.OIDC_INTERNAL_URL}/realms/craig/protocol/openid-connect/token`;
    const payload = {
        grant_type: 'password',
        client_id: 'craig-api',
        username: username,
        password: password,
    };
    const res = http.post(url, payload);
    return JSON.parse(res.body).access_token;
}

export const BASE_URLS = {
    rules:     __ENV.CRAIG_RULES_URL     || 'http://localhost:8001',
    cases:     __ENV.CRAIG_CASES_URL     || 'http://localhost:8002',
    placement: __ENV.CRAIG_PLACEMENT_URL || 'http://localhost:8003',
    exchange:  __ENV.CRAIG_EXCHANGE_URL  || 'http://localhost:8004',
    financial: __ENV.CRAIG_FINANCIAL_URL || 'http://localhost:8005',
    reporting: __ENV.CRAIG_REPORTING_URL || 'http://localhost:8006',
    security:  __ENV.CRAIG_SECURITY_URL  || 'http://localhost:8007',
    intake:    __ENV.CRAIG_INTAKE_URL    || 'http://localhost:8008',
    web:       __ENV.CRAIG_WEB_URL       || 'http://localhost:8080',
};

export const OIDC_INTERNAL_URL = __ENV.OIDC_INTERNAL_URL || 'http://localhost:9090';

export const READ_THRESHOLDS = { http_req_duration: ['p(95)<50'] };
export const LIST_THRESHOLDS = { http_req_duration: ['p(95)<100'] };
export const WRITE_THRESHOLDS = { http_req_duration: ['p(95)<200'] };
export const CROSS_SERVICE_THRESHOLDS = { http_req_duration: ['p(95)<500'] };
export const BFF_THRESHOLDS = { http_req_duration: ['p(95)<300'] };

import http from 'k6/http';
import { check } from 'k6';
import { BASE_URLS } from '../helpers/config.js';
import { getToken } from '../helpers/auth.js';

let token;

export function setup() {
    token = getToken('jane.doe', 'password');
    return { token };
}

export default function(data) {
    const headers = { Authorization: `Bearer ${data.token}`, 'Content-Type': 'application/json' };

    // List
    const listRes = http.get(`${BASE_URLS.cases}/v1/cases/cases`, { headers, tags: { endpoint: 'list_cases' } });
    check(listRes, { 'list cases 200': (r) => r.status === 200 });

    // Create
    const createRes = http.post(`${BASE_URLS.cases}/v1/cases/referrals`, JSON.stringify({
        reporter_name: 'k6 Test',
        reporter_phone: '555-0100',
        child_name: 'Test Child',
        child_age: 5,
        allegation_type: 'neglect',
        narrative: 'k6 performance test referral',
        source: 'hotline',
    }), { headers, tags: { endpoint: 'create_referral' } });
    check(createRes, { 'create referral 200': (r) => r.status === 200 });
}

// tests/k6/scenarios/load.js
import { cases } from '../services/cases.js';
import { rules } from '../services/rules.js';

export const options = {
    scenarios: {
        cases_load: {
            executor: 'ramping-vus',
            exec: 'cases',
            startVUs: 0,
            stages: [
                { duration: '5m', target: 50 },   // ramp up
                { duration: '10m', target: 50 },   // sustained
                { duration: '2m', target: 0 },     // ramp down
            ],
        },
        rules_load: {
            executor: 'ramping-vus',
            exec: 'rules',
            startVUs: 0,
            stages: [
                { duration: '5m', target: 50 },
                { duration: '10m', target: 50 },
                { duration: '2m', target: 0 },
            ],
        },
    },
    thresholds: {
        'http_req_duration{endpoint:list_cases}': ['p(95)<100'],
        'http_req_duration{endpoint:create_referral}': ['p(95)<200'],
        'http_req_duration{endpoint:evaluate_rule}': ['p(95)<500'],
    },
};

thresholds: {
    // Global
    http_req_failed: ['rate<0.01'],        // <1% error rate
    // Per-endpoint type
    'http_req_duration{endpoint:list_cases}': ['p(95)<100'],
    'http_req_duration{endpoint:get_case}': ['p(95)<50'],
    'http_req_duration{endpoint:create_referral}': ['p(95)<200'],
    'http_req_duration{endpoint:safety_assessment}': ['p(95)<500'],
},

// xtask/src/main.rs — add to command enum
Perf {
    /// Test profile: smoke, load, stress, soak (default: smoke)
    #[arg(long, default_value = "smoke")]
    profile: String,
    /// Specific service to test (default: all)
    #[arg(long)]
    service: Option<String>,
    /// Save results to baselines directory
    #[arg(long)]
    save_baseline: bool,
},

performance-smoke:
  stage: test
  image: grafana/k6:latest
  when: manual
  only:
    - main
  needs: ["build"]
  services:
    - name: docker:dind
  variables:
    OIDC_INTERNAL_URL: http://keycloak:9090
    CRAIG_RULES_URL: http://craig-rules:8001
    CRAIG_CASES_URL: http://craig-cases:8002
    CRAIG_PLACEMENT_URL: http://craig-placement:8003
    CRAIG_EXCHANGE_URL: http://craig-exchange:8004
    CRAIG_FINANCIAL_URL: http://craig-financial:8005
    CRAIG_REPORTING_URL: http://craig-reporting:8006
    CRAIG_SECURITY_URL: http://craig-security:8007
    CRAIG_INTAKE_URL: http://craig-intake:8008
    CRAIG_WEB_URL: http://craig-web:8080
  script:
    - k6 run tests/k6/scenarios/smoke.js --summary-export=summary.json
  artifacts:
    paths:
      - summary.json
    when: always
    expire_in: 30 days