fix(ci): bound a stalled bun install and let the helm test probe wait for routing

Author: waleedlatif1

.github/actions/setup/action.yml

@@ -66,6 +66,19 @@ runs:
         key: ${{ github.repository }}-${{ inputs.turbo-cache-key }}-${{ github.event_name }}${{ github.event.pull_request.head.repo.fork && '-fork' || '' }}
         path: ./.turbo
 
+    # Bun retries a failed request itself, but a registry connection that stalls
+    # without failing leaves `bun install` waiting until the job's own timeout
+    # cancels it, the whole budget spent on one hung step. Healthy installs finish
+    # in under three minutes cold, so an attempt past five is stalled: kill it and
+    # retry. Any other failure is real and fails at once.
     - name: Install dependencies
       shell: bash
-      run: bun install --frozen-lockfile --ignore-scripts
+      run: |
+        for attempt in 1 2 3; do
+          timeout --kill-after=30s 5m bun install --frozen-lockfile --ignore-scripts && exit 0
+          status=$?
+          if [ "$status" -ne 124 ] && [ "$status" -ne 137 ]; then exit "$status"; fi
+          echo "::warning title=bun install stalled::attempt ${attempt} of 3 ran past 5 minutes"
+        done
+        echo "::error title=bun install stalled::all 3 attempts ran past 5 minutes"
+        exit 1

.github/workflows/helm.yml

@@ -188,6 +188,11 @@ jobs:
             --values helm/sim/ci/kind-overlay.yaml \
             --wait --timeout 15m
 
+      # `--logs` prints the probe's output, so a failure says which URL refused.
+      - name: Run helm test
+        run: helm test sim --namespace sim --timeout 5m --logs
+
+      # After the test, so it also explains a failed probe, not only a failed install.
       - name: Diagnostics on failure
         if: failure()
         run: |
@@ -196,9 +201,7 @@ jobs:
           kubectl -n sim describe pods | tail -100 || true
           kubectl -n sim logs deploy/sim-app -c migrations --tail=50 || true
           kubectl -n sim logs deploy/sim-app --tail=80 || true
-
-      - name: Run helm test
-        run: helm test sim --namespace sim --timeout 5m
+          kubectl -n sim logs deploy/sim-realtime --tail=80 || true
 
   # Resolved once and shared, so the two publish paths cannot package the same
   # immutable chart version with different appVersions -- they run in parallel,

helm/sim/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: sim
 description: A Helm chart for Sim - the open-source AI workspace where teams build, deploy, and manage AI agents
 type: application
-version: 1.11.8
+version: 1.11.9
 appVersion: "v0.8.26"
 kubeVersion: ">=1.25.0-0"
 home: https://sim.ai

helm/sim/templates/tests/test-connection.yaml

@@ -40,15 +40,26 @@ spec:
         - -c
         - |
           set -eu
-          APP_URL="http://{{ include "sim.fullname" . }}-app:{{ .Values.app.service.port }}/"
-          echo "Probing $APP_URL"
-          wget -q -T {{ .Values.tests.timeoutSeconds }} --tries=1 --spider "$APP_URL"
+          # A pod turns Ready before every node routes its Service to it, so a
+          # probe sent the moment `helm install --wait` returns can be refused.
+          # Each URL gets a minute to answer before the test fails.
+          probe() {
+            attempt=1
+            while ! wget -q -T {{ .Values.tests.timeoutSeconds }} --spider "$1"; do
+              if [ "$attempt" -ge 12 ]; then
+                echo "FAILED: $1 did not answer after $attempt attempts"
+                return 1
+              fi
+              echo "Attempt $attempt: $1 did not answer; retrying in 5s"
+              attempt=$((attempt + 1))
+              sleep 5
+            done
+            echo "OK: $1"
+          }
+          probe "http://{{ include "sim.fullname" . }}-app:{{ .Values.app.service.port }}/"
           {{- if .Values.realtime.enabled }}
-          RT_URL="http://{{ include "sim.fullname" . }}-realtime:{{ .Values.realtime.service.port }}/health"
-          echo "Probing $RT_URL"
-          wget -q -T {{ .Values.tests.timeoutSeconds }} --tries=1 --spider "$RT_URL"
+          probe "http://{{ include "sim.fullname" . }}-realtime:{{ .Values.realtime.service.port }}/health"
           {{- end }}
-          echo "OK"
       resources:
         {{- toYaml .Values.tests.resources | nindent 8 }}
 {{- end }}