K8s tests: Add requires_in_process marker in only_localstack tests where needed (#13303)

nik-localstack · web-flow · commit f829e69dcc60 · 2025-10-31T13:03:02.000+02:00
diff --git a/tests/aws/services/acm/test_acm.py b/tests/aws/services/acm/test_acm.py
@@ -85,6 +85,7 @@ def _cert_has_required_fields() -> bool:
         result = aws_client.acm.describe_certificate(CertificateArn=certificate_arn)
         snapshot.match("describe-certificate", result)
 
+    @markers.requires_in_process
     @markers.aws.needs_fixing
     def test_boto_wait_for_certificate_validation(
         self, acm_request_certificate, aws_client, monkeypatch
diff --git a/tests/aws/services/apigateway/test_apigateway_basic.py b/tests/aws/services/apigateway/test_apigateway_basic.py
@@ -301,6 +301,7 @@ def test_api_gateway_lambda_integration_aws_type(
     @pytest.mark.parametrize("disable_custom_cors", [True, False])
     @pytest.mark.parametrize("origin", ["http://allowed", "http://denied"])
     @markers.aws.only_localstack
+    @markers.requires_in_process
     def test_invoke_endpoint_cors_headers(
         self, url_type, disable_custom_cors, origin, monkeypatch, aws_client
     ):
diff --git a/tests/aws/services/apigateway/test_apigateway_custom_ids.py b/tests/aws/services/apigateway/test_apigateway_custom_ids.py
@@ -16,6 +16,7 @@
 
 # Custom ids can't be set on aws.
 @markers.aws.only_localstack
+@markers.requires_in_process
 def test_apigateway_custom_ids(
     aws_client, set_resource_custom_id, create_rest_apigw, account_id, region_name, cleanups
 ):
diff --git a/tests/aws/services/cloudformation/api/test_stacks.py b/tests/aws/services/cloudformation/api/test_stacks.py
@@ -474,6 +474,7 @@ def _assert_stack_process_finished():
         ]
         assert len(updated_resources) == length_expected
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_create_stack_with_custom_id(
         self, aws_client, cleanups, account_id, region_name, set_resource_custom_id
diff --git a/tests/aws/services/cloudformation/resources/test_lambda.py b/tests/aws/services/cloudformation/resources/test_lambda.py
@@ -549,6 +549,7 @@ def test_lambda_cfn_run_with_empty_string_replacement_deny_list(
     )
 
 
+@markers.requires_in_process
 @markers.aws.only_localstack(reason="This is functionality specific to Localstack")
 def test_lambda_cfn_run_with_non_empty_string_replacement_deny_list(
     deploy_cfn_template, aws_client, get_function_envars, monkeypatch
diff --git a/tests/aws/services/ec2/test_ec2.py b/tests/aws/services/ec2/test_ec2.py
@@ -668,6 +668,7 @@ def test_create_subnet_with_custom_id_and_vpc_id(self, cleanups, aws_client, cre
         assert subnet["Tags"][0]["Key"] == TAG_KEY_CUSTOM_ID
         assert subnet["Tags"][0]["Value"] == custom_subnet_id
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @pytest.mark.parametrize("strategy", ["tag", "id_manager"])
     @pytest.mark.parametrize("default_vpc", [True, False])
@@ -1006,6 +1007,7 @@ def test_pickle_ec2_backend(pickle_backends, aws_client):
     assert pickle_backends(ec2_backends)
 
 
+@markers.requires_in_process
 @markers.aws.only_localstack
 def test_create_specific_vpc_id(account_id, region_name, create_vpc, set_resource_custom_id):
     cidr_block = "10.0.0.0/16"
diff --git a/tests/aws/services/events/test_events_targets.py b/tests/aws/services/events/test_events_targets.py
@@ -41,6 +41,7 @@
 
 class TestEventsTargetApiDestination:
     # TODO validate against AWS & use common fixtures
+    @markers.requires_in_process  # uses pytest httpserver
     @markers.aws.only_localstack
     @pytest.mark.skipif(is_old_provider(), reason="not supported by the old provider")
     @pytest.mark.parametrize("auth", API_DESTINATION_AUTHS)
diff --git a/tests/aws/services/firehose/test_firehose.py b/tests/aws/services/firehose/test_firehose.py
@@ -38,6 +38,7 @@ def handler(event, context):
 
 @pytest.mark.parametrize("lambda_processor_enabled", [True, False])
 @markers.aws.unknown
+@markers.requires_in_process  # uses pytest httpserver
 def test_kinesis_firehose_http(
     aws_client,
     lambda_processor_enabled: bool,
diff --git a/tests/aws/services/lambda_/test_lambda.py b/tests/aws/services/lambda_/test_lambda.py
@@ -264,6 +264,7 @@ def _check_print_in_logs():
 
         retry(_check_print_in_logs, retries=10)
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_lambda_too_large_response_but_with_custom_limit(
         self, caplog, create_lambda_function, aws_client, monkeypatch
@@ -1970,6 +1971,7 @@ def test_lambda_runtime_wrapper_not_found(self, aws_client, create_lambda_functi
         )
         snapshot.match("invocation_error", result)
 
+    @markers.requires_in_process
     @markers.aws.only_localstack(
         reason="Can only induce Lambda-internal Docker error in LocalStack"
     )
@@ -1999,6 +2001,7 @@ def test_lambda_runtime_startup_timeout(
             r"retries: \d\): \[[^]]*\] Timeout while starting up lambda environment .*"
         )
 
+    @markers.requires_in_process
     @markers.aws.only_localstack(
         reason="Can only induce Lambda-internal Docker error in LocalStack"
     )
diff --git a/tests/aws/services/lambda_/test_lambda_api.py b/tests/aws/services/lambda_/test_lambda_api.py
@@ -4799,6 +4799,7 @@ def test_create_url_config_custom_id_tag(self, create_lambda_function, aws_clien
         # region changes, https vs http, etc
         assert f"://{custom_id_value}.lambda-url." in url_config_created["FunctionUrl"]
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_create_url_config_custom_id_tag_invalid_id(
         self, create_lambda_function, aws_client, caplog
@@ -6855,6 +6856,7 @@ def test_layer_policy_lifecycle(
             "get_layer_version_policy_postdeletes2", get_layer_version_policy_postdeletes2
         )
 
+    @markers.requires_in_process
     @markers.aws.only_localstack(reason="Deterministic id generation is LS only")
     def test_layer_deterministic_version(
         self, dummylayer, cleanups, aws_client, account_id, region_name, set_resource_custom_id
diff --git a/tests/aws/services/lambda_/test_lambda_developer_tools.py b/tests/aws/services/lambda_/test_lambda_developer_tools.py
@@ -36,6 +36,7 @@ class TestHotReloading:
         ids=["nodejs20.x", "python3.12"],
     )
     @markers.aws.only_localstack
+    @markers.requires_in_process
     def test_hot_reloading(
         self,
         create_lambda_function_aws,
@@ -165,6 +166,7 @@ def test_hot_reloading_error_path_not_absolute(
                 Runtime=Runtime.python3_12,
             )
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_hot_reloading_environment_placeholder(
         self, create_lambda_function_aws, lambda_su_role, cleanups, aws_client, monkeypatch
@@ -198,6 +200,7 @@ def test_hot_reloading_environment_placeholder(
 
 
 class TestDockerFlags:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_additional_docker_flags(self, create_lambda_function, monkeypatch, aws_client):
         env_value = short_uid()
@@ -214,6 +217,7 @@ def test_additional_docker_flags(self, create_lambda_function, monkeypatch, aws_
         result_data = json.load(result["Payload"])
         assert {"Hello": env_value} == result_data
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_lambda_docker_networks(self, lambda_su_role, monkeypatch, aws_client, cleanups):
         function_name = f"test-network-{short_uid()}"
diff --git a/tests/aws/services/opensearch/test_opensearch.py b/tests/aws/services/opensearch/test_opensearch.py
@@ -640,6 +640,7 @@ def test_search(self, opensearch_endpoint, opensearch_document_path):
             f"search unsuccessful({response.status_code}): {response.text}"
         )
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_endpoint_strategy_path(self, monkeypatch, opensearch_create_domain, aws_client):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "path")
@@ -653,6 +654,7 @@ def test_endpoint_strategy_path(self, monkeypatch, opensearch_create_domain, aws
         endpoint = status["Endpoint"]
         assert endpoint.endswith(f"/{domain_name}")
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_endpoint_strategy_port(self, monkeypatch, opensearch_create_domain, aws_client):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "port")
@@ -688,6 +690,7 @@ def test_cloudformation_deployment(self, deploy_cfn_template, aws_client):
 
 @markers.skip_offline
 class TestEdgeProxiedOpensearchCluster:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_route_through_edge(self):
         cluster_id = f"domain-{short_uid()}"
@@ -784,6 +787,7 @@ def test_custom_endpoint_disabled(
 
 @markers.skip_offline
 class TestMultiClusterManager:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_multi_cluster(self, account_id, monkeypatch):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "domain")
@@ -832,6 +836,7 @@ def test_multi_cluster(self, account_id, monkeypatch):
 
 @markers.skip_offline
 class TestMultiplexingClusterManager:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_multiplexing_cluster(self, account_id, monkeypatch):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "domain")
@@ -880,6 +885,7 @@ def test_multiplexing_cluster(self, account_id, monkeypatch):
 
 @markers.skip_offline
 class TestSingletonClusterManager:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_endpoint_strategy_port_singleton_cluster(self, account_id, monkeypatch):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "port")
@@ -926,6 +932,7 @@ def test_endpoint_strategy_port_singleton_cluster(self, account_id, monkeypatch)
 
 @markers.skip_offline
 class TestCustomBackendManager:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_custom_backend(self, account_id, httpserver, monkeypatch):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "domain")
@@ -992,6 +999,7 @@ def test_custom_backend(self, account_id, httpserver, monkeypatch):
 
         httpserver.check()
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_custom_backend_with_custom_endpoint(
         self,
diff --git a/tests/aws/services/s3/test_s3.py b/tests/aws/services/s3/test_s3.py
@@ -6312,6 +6312,7 @@ def add_query_param(request, **kwargs):
         finally:
             s3_presigned_client.meta.events.unregister("before-sign.s3.GetObject", add_query_param)
 
+    @markers.requires_in_process  # Patches skip signature validation
     @markers.aws.only_localstack
     def test_presign_check_signature_validation_for_port_permutation(
         self, s3_bucket, patch_s3_skip_signature_validation_false, aws_client
@@ -6354,6 +6355,7 @@ def test_put_object(self, s3_bucket, snapshot, aws_client):
         assert response["Body"].read() == b"something"
         snapshot.match("get_object", response)
 
+    @markers.requires_in_process  # Patches skip signature validation
     @markers.aws.only_localstack
     def test_get_request_expires_ignored_if_validation_disabled(
         self, s3_bucket, monkeypatch, patch_s3_skip_signature_validation_false, aws_client
@@ -6917,6 +6919,7 @@ def test_s3_put_presigned_url_same_header_and_qs_parameter(
         exception["StatusCode"] = response.status_code
         snapshot.match("override-signed-qs", exception)
 
+    @markers.requires_in_process  # Patches skip signature validation
     @markers.aws.validated
     @pytest.mark.parametrize("signature_version", ["s3", "s3v4"])
     def test_s3_put_presigned_url_missing_sig_param(
@@ -6992,6 +6995,7 @@ def test_s3_get_response_content_type_same_as_upload_and_range(self, s3_bucket,
 
     @pytest.mark.skipif(condition=TEST_S3_IMAGE, reason="STS not enabled in S3 image")
     @markers.aws.validated
+    @markers.requires_in_process  # Patches skip signature validation
     def test_presigned_url_with_session_token(
         self,
         s3_create_bucket_with_client,
@@ -7031,6 +7035,7 @@ def test_presigned_url_with_session_token(
 
     @pytest.mark.skipif(condition=TEST_S3_IMAGE, reason="STS not enabled in S3 image")
     @markers.aws.validated
+    @markers.requires_in_process  # Patches skip signature validation
     def test_presigned_url_with_different_user_credentials(
         self,
         aws_client,
@@ -7102,6 +7107,7 @@ def test_presigned_url_with_different_user_credentials(
         assert response._content == b"test-value"
 
     @markers.aws.validated
+    @markers.requires_in_process  # Patches skip signature validation
     @pytest.mark.parametrize("signature_version", ["s3", "s3v4"])
     def test_s3_get_response_header_overrides(
         self, s3_bucket, signature_version, patch_s3_skip_signature_validation_false, aws_client
@@ -7358,6 +7364,7 @@ def test_presigned_url_signature_authentication(
         ],
     )
     @markers.aws.validated
+    @markers.requires_in_process  # Patches skip signature validation
     def test_presigned_url_signature_authentication_multi_part(
         self,
         s3_create_bucket,
@@ -7622,6 +7629,7 @@ def test_pre_signed_url_forward_slash_bucket(
         ["s3", "s3v4"],
     )
     @markers.aws.validated
+    @markers.requires_in_process  # Patches skip signature validation
     def test_s3_presign_url_encoding(
         self, aws_client, s3_bucket, signature_version, patch_s3_skip_signature_validation_false
     ):
@@ -10651,6 +10659,7 @@ def test_post_request_expires(
         "signature_version",
         ["s3", "s3v4"],
     )
+    @markers.requires_in_process  # Patches skip signature validation
     def test_post_request_malformed_policy(
         self,
         s3_bucket,
@@ -10693,6 +10702,7 @@ def test_post_request_malformed_policy(
         assert exception["Error"]["StringToSign"] == presigned_request["fields"]["policy"]
 
     @markers.aws.validated
+    @markers.requires_in_process  # Patches skip signature validation
     @pytest.mark.parametrize(
         "signature_version",
         ["s3", "s3v4"],
@@ -10734,6 +10744,7 @@ def test_post_request_missing_signature(
         snapshot.match("exception-missing-signature", exception)
 
     @markers.aws.validated
+    @markers.requires_in_process  # Patches skip signature validation
     @pytest.mark.parametrize(
         "signature_version",
         ["s3", "s3v4"],
diff --git a/tests/aws/services/secretsmanager/test_secretsmanager.py b/tests/aws/services/secretsmanager/test_secretsmanager.py
@@ -2535,6 +2535,7 @@ def test_get_secret_value(
         )
         sm_snapshot.match("secret_value_http_response", json_response)
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_create_secret_with_custom_id(
         self, account_id, region_name, create_secret, set_resource_custom_id
diff --git a/tests/aws/services/ses/test_ses.py b/tests/aws/services/ses/test_ses.py
@@ -1036,6 +1036,7 @@ def _get_emails():
 
 @pytest.mark.usefixtures("openapi_validate")
 class TestSESRetrospection:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_send_email_can_retrospect(self, aws_client):
         # Test that sent emails can be retrospected through saved file and API access
@@ -1116,6 +1117,7 @@ def _read_message_from_filesystem(message_id: str) -> dict:
         assert requests.delete(emails_url + f"?id={message2_id}").status_code == 204
         assert requests.get(emails_url).json() == {"messages": []}
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_send_templated_email_can_retrospect(self, create_template, aws_client):
         # Test that sent emails can be retrospected through saved file and API access
diff --git a/tests/aws/services/sns/test_sns.py b/tests/aws/services/sns/test_sns.py
diff --git a/tests/aws/services/sqs/test_sqs.py b/tests/aws/services/sqs/test_sqs.py
diff --git a/tests/aws/services/stepfunctions/v2/mocking/test_aws_scenarios.py b/tests/aws/services/stepfunctions/v2/mocking/test_aws_scenarios.py
diff --git a/tests/aws/test_error_injection.py b/tests/aws/test_error_injection.py
diff --git a/tests/aws/test_network_configuration.py b/tests/aws/test_network_configuration.py

Original file line number	Diff line number	Diff line change
`@@ -474,6 +474,7 @@ def _assert_stack_process_finished():`
`474`	`474`	`]`
`475`	`475`	`assert len(updated_resources) == length_expected`
`476`	`476`
	`477`	`+ @markers.requires_in_process`
`477`	`478`	`@markers.aws.only_localstack`
`478`	`479`	`def test_create_stack_with_custom_id(`
`479`	`480`	`self, aws_client, cleanups, account_id, region_name, set_resource_custom_id`
Original file line number	Diff line number	Diff line change
`@@ -549,6 +549,7 @@ def test_lambda_cfn_run_with_empty_string_replacement_deny_list(`
`549`	`549`	`)`
`550`	`550`
`551`	`551`
	`552`	`+@markers.requires_in_process`
`552`	`553`	`@markers.aws.only_localstack(reason="This is functionality specific to Localstack")`
`553`	`554`	`def test_lambda_cfn_run_with_non_empty_string_replacement_deny_list(`
`554`	`555`	`deploy_cfn_template, aws_client, get_function_envars, monkeypatch`
Original file line number	Diff line number	Diff line change
`@@ -264,6 +264,7 @@ def _check_print_in_logs():`
`264`	`264`
`265`	`265`	`retry(_check_print_in_logs, retries=10)`
`266`	`266`
	`267`	`+ @markers.requires_in_process`
`267`	`268`	`@markers.aws.only_localstack`
`268`	`269`	`def test_lambda_too_large_response_but_with_custom_limit(`
`269`	`270`	`self, caplog, create_lambda_function, aws_client, monkeypatch`
`@@ -1970,6 +1971,7 @@ def test_lambda_runtime_wrapper_not_found(self, aws_client, create_lambda_functi`
`1970`	`1971`	`)`
`1971`	`1972`	`snapshot.match("invocation_error", result)`
`1972`	`1973`
	`1974`	`+ @markers.requires_in_process`
`1973`	`1975`	`@markers.aws.only_localstack(`
`1974`	`1976`	`reason="Can only induce Lambda-internal Docker error in LocalStack"`
`1975`	`1977`	`)`
`@@ -1999,6 +2001,7 @@ def test_lambda_runtime_startup_timeout(`
`1999`	`2001`	`r"retries: \d\): \[[^]]\] Timeout while starting up lambda environment ."`
`2000`	`2002`	`)`
`2001`	`2003`
	`2004`	`+ @markers.requires_in_process`
`2002`	`2005`	`@markers.aws.only_localstack(`
`2003`	`2006`	`reason="Can only induce Lambda-internal Docker error in LocalStack"`
`2004`	`2007`	`)`