K8s tests: Add requires_in_process marker in only_localstack tests where needed

nik-localstack · nik-localstack · commit 5b271d76156f · 2025-10-24T14:48:06.000+03:00
diff --git a/tests/aws/services/acm/test_acm.py b/tests/aws/services/acm/test_acm.py
@@ -85,6 +85,7 @@ def _cert_has_required_fields() -> bool:
         result = aws_client.acm.describe_certificate(CertificateArn=certificate_arn)
         snapshot.match("describe-certificate", result)
 
+    @markers.requires_in_process
     @markers.aws.needs_fixing
     def test_boto_wait_for_certificate_validation(
         self, acm_request_certificate, aws_client, monkeypatch
diff --git a/tests/aws/services/apigateway/test_apigateway_basic.py b/tests/aws/services/apigateway/test_apigateway_basic.py
@@ -301,6 +301,7 @@ def test_api_gateway_lambda_integration_aws_type(
     @pytest.mark.parametrize("disable_custom_cors", [True, False])
     @pytest.mark.parametrize("origin", ["http://allowed", "http://denied"])
     @markers.aws.only_localstack
+    @markers.requires_in_process
     def test_invoke_endpoint_cors_headers(
         self, url_type, disable_custom_cors, origin, monkeypatch, aws_client
     ):
diff --git a/tests/aws/services/ec2/test_ec2.py b/tests/aws/services/ec2/test_ec2.py
@@ -668,6 +668,7 @@ def test_create_subnet_with_custom_id_and_vpc_id(self, cleanups, aws_client, cre
         assert subnet["Tags"][0]["Key"] == TAG_KEY_CUSTOM_ID
         assert subnet["Tags"][0]["Value"] == custom_subnet_id
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @pytest.mark.parametrize("strategy", ["tag", "id_manager"])
     @pytest.mark.parametrize("default_vpc", [True, False])
@@ -1006,6 +1007,7 @@ def test_pickle_ec2_backend(pickle_backends, aws_client):
     assert pickle_backends(ec2_backends)
 
 
+@markers.requires_in_process
 @markers.aws.only_localstack
 def test_create_specific_vpc_id(account_id, region_name, create_vpc, set_resource_custom_id):
     cidr_block = "10.0.0.0/16"
diff --git a/tests/aws/services/events/test_events_targets.py b/tests/aws/services/events/test_events_targets.py
@@ -41,6 +41,7 @@
 
 class TestEventsTargetApiDestination:
     # TODO validate against AWS & use common fixtures
+    @markers.requires_in_process  # uses pytest httpserver
     @markers.aws.only_localstack
     @pytest.mark.skipif(is_old_provider(), reason="not supported by the old provider")
     @pytest.mark.parametrize("auth", API_DESTINATION_AUTHS)
diff --git a/tests/aws/services/firehose/test_firehose.py b/tests/aws/services/firehose/test_firehose.py
@@ -38,6 +38,7 @@ def handler(event, context):
 
 @pytest.mark.parametrize("lambda_processor_enabled", [True, False])
 @markers.aws.unknown
+@markers.requires_in_process  # uses pytest httpserver
 def test_kinesis_firehose_http(
     aws_client,
     lambda_processor_enabled: bool,
diff --git a/tests/aws/services/lambda_/test_lambda.py b/tests/aws/services/lambda_/test_lambda.py
@@ -264,6 +264,7 @@ def _check_print_in_logs():
 
         retry(_check_print_in_logs, retries=10)
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_lambda_too_large_response_but_with_custom_limit(
         self, caplog, create_lambda_function, aws_client, monkeypatch
@@ -1970,6 +1971,7 @@ def test_lambda_runtime_wrapper_not_found(self, aws_client, create_lambda_functi
         )
         snapshot.match("invocation_error", result)
 
+    @markers.requires_in_process
     @markers.aws.only_localstack(
         reason="Can only induce Lambda-internal Docker error in LocalStack"
     )
@@ -1999,6 +2001,7 @@ def test_lambda_runtime_startup_timeout(
             r"retries: \d\): \[[^]]*\] Timeout while starting up lambda environment .*"
         )
 
+    @markers.requires_in_process
     @markers.aws.only_localstack(
         reason="Can only induce Lambda-internal Docker error in LocalStack"
     )
diff --git a/tests/aws/services/lambda_/test_lambda_api.py b/tests/aws/services/lambda_/test_lambda_api.py
@@ -4799,6 +4799,7 @@ def test_create_url_config_custom_id_tag(self, create_lambda_function, aws_clien
         # region changes, https vs http, etc
         assert f"://{custom_id_value}.lambda-url." in url_config_created["FunctionUrl"]
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_create_url_config_custom_id_tag_invalid_id(
         self, create_lambda_function, aws_client, caplog
@@ -6855,6 +6856,7 @@ def test_layer_policy_lifecycle(
             "get_layer_version_policy_postdeletes2", get_layer_version_policy_postdeletes2
         )
 
+    @markers.requires_in_process
     @markers.aws.only_localstack(reason="Deterministic id generation is LS only")
     def test_layer_deterministic_version(
         self, dummylayer, cleanups, aws_client, account_id, region_name, set_resource_custom_id
diff --git a/tests/aws/services/lambda_/test_lambda_developer_tools.py b/tests/aws/services/lambda_/test_lambda_developer_tools.py
@@ -36,6 +36,7 @@ class TestHotReloading:
         ids=["nodejs20.x", "python3.12"],
     )
     @markers.aws.only_localstack
+    @markers.requires_in_process
     def test_hot_reloading(
         self,
         create_lambda_function_aws,
@@ -165,6 +166,7 @@ def test_hot_reloading_error_path_not_absolute(
                 Runtime=Runtime.python3_12,
             )
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_hot_reloading_environment_placeholder(
         self, create_lambda_function_aws, lambda_su_role, cleanups, aws_client, monkeypatch
@@ -198,6 +200,7 @@ def test_hot_reloading_environment_placeholder(
 
 
 class TestDockerFlags:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_additional_docker_flags(self, create_lambda_function, monkeypatch, aws_client):
         env_value = short_uid()
@@ -214,6 +217,7 @@ def test_additional_docker_flags(self, create_lambda_function, monkeypatch, aws_
         result_data = json.load(result["Payload"])
         assert {"Hello": env_value} == result_data
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_lambda_docker_networks(self, lambda_su_role, monkeypatch, aws_client, cleanups):
         function_name = f"test-network-{short_uid()}"
diff --git a/tests/aws/services/opensearch/test_opensearch.py b/tests/aws/services/opensearch/test_opensearch.py
@@ -640,6 +640,7 @@ def test_search(self, opensearch_endpoint, opensearch_document_path):
             f"search unsuccessful({response.status_code}): {response.text}"
         )
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_endpoint_strategy_path(self, monkeypatch, opensearch_create_domain, aws_client):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "path")
@@ -653,6 +654,7 @@ def test_endpoint_strategy_path(self, monkeypatch, opensearch_create_domain, aws
         endpoint = status["Endpoint"]
         assert endpoint.endswith(f"/{domain_name}")
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_endpoint_strategy_port(self, monkeypatch, opensearch_create_domain, aws_client):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "port")
@@ -688,6 +690,7 @@ def test_cloudformation_deployment(self, deploy_cfn_template, aws_client):
 
 @markers.skip_offline
 class TestEdgeProxiedOpensearchCluster:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_route_through_edge(self):
         cluster_id = f"domain-{short_uid()}"
@@ -784,6 +787,7 @@ def test_custom_endpoint_disabled(
 
 @markers.skip_offline
 class TestMultiClusterManager:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_multi_cluster(self, account_id, monkeypatch):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "domain")
@@ -832,6 +836,7 @@ def test_multi_cluster(self, account_id, monkeypatch):
 
 @markers.skip_offline
 class TestMultiplexingClusterManager:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_multiplexing_cluster(self, account_id, monkeypatch):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "domain")
@@ -880,6 +885,7 @@ def test_multiplexing_cluster(self, account_id, monkeypatch):
 
 @markers.skip_offline
 class TestSingletonClusterManager:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_endpoint_strategy_port_singleton_cluster(self, account_id, monkeypatch):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "port")
@@ -926,6 +932,7 @@ def test_endpoint_strategy_port_singleton_cluster(self, account_id, monkeypatch)
 
 @markers.skip_offline
 class TestCustomBackendManager:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_custom_backend(self, account_id, httpserver, monkeypatch):
         monkeypatch.setattr(config, "OPENSEARCH_ENDPOINT_STRATEGY", "domain")
@@ -992,6 +999,7 @@ def test_custom_backend(self, account_id, httpserver, monkeypatch):
 
         httpserver.check()
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_custom_backend_with_custom_endpoint(
         self,
diff --git a/tests/aws/services/s3/test_s3.py b/tests/aws/services/s3/test_s3.py
@@ -6354,6 +6354,7 @@ def test_put_object(self, s3_bucket, snapshot, aws_client):
         assert response["Body"].read() == b"something"
         snapshot.match("get_object", response)
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_get_request_expires_ignored_if_validation_disabled(
         self, s3_bucket, monkeypatch, patch_s3_skip_signature_validation_false, aws_client
diff --git a/tests/aws/services/secretsmanager/test_secretsmanager.py b/tests/aws/services/secretsmanager/test_secretsmanager.py
@@ -2535,6 +2535,7 @@ def test_get_secret_value(
         )
         sm_snapshot.match("secret_value_http_response", json_response)
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_create_secret_with_custom_id(
         self, account_id, region_name, create_secret, set_resource_custom_id
diff --git a/tests/aws/services/ses/test_ses.py b/tests/aws/services/ses/test_ses.py
@@ -1036,6 +1036,7 @@ def _get_emails():
 
 @pytest.mark.usefixtures("openapi_validate")
 class TestSESRetrospection:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_send_email_can_retrospect(self, aws_client):
         # Test that sent emails can be retrospected through saved file and API access
@@ -1116,6 +1117,7 @@ def _read_message_from_filesystem(message_id: str) -> dict:
         assert requests.delete(emails_url + f"?id={message2_id}").status_code == 204
         assert requests.get(emails_url).json() == {"messages": []}
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_send_templated_email_can_retrospect(self, create_template, aws_client):
         # Test that sent emails can be retrospected through saved file and API access
diff --git a/tests/aws/services/sns/test_sns.py b/tests/aws/services/sns/test_sns.py
@@ -3571,6 +3571,7 @@ def test_message_to_fifo_sqs_ordering(
 
 
 class TestSNSSubscriptionSES:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @skip_if_sns_v2
     def test_topic_email_subscription_confirmation(
@@ -3604,6 +3605,7 @@ def check_subscription():
 
         retry(check_subscription, retries=PUBLICATION_RETRIES, sleep=PUBLICATION_TIMEOUT)
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @skip_if_sns_v2
     def test_email_sender(
@@ -3650,6 +3652,7 @@ def _get_messages(amount: int) -> list[dict]:
 
 
 class TestSNSPlatformEndpoint:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @skip_if_sns_v2
     def test_subscribe_platform_endpoint(
@@ -3808,6 +3811,7 @@ def test_publish_to_gcm(self, sns_create_platform_application, aws_client):
             )
         assert ex.value.response["Error"]["Code"] == "InvalidParameter"
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @skip_if_sns_v2
     def test_publish_to_platform_endpoint_is_dispatched(
@@ -3872,6 +3876,7 @@ def check_message():
 
 
 class TestSNSSMS:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @skip_if_sns_v2
     def test_publish_sms(self, aws_client, account_id, region_name):
@@ -3909,6 +3914,7 @@ def test_subscribe_sms_endpoint(self, sns_create_topic, sns_subscription, snapsh
         )
         snapshot.match("subscribe-sms-attrs", sub_attrs)
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @skip_if_sns_v2
     def test_publish_sms_endpoint(
@@ -4055,6 +4061,7 @@ def test_http_subscription_response(
         )
         snapshot.match("subscription-with-arn", subscription_with_arn)
 
+    @markers.requires_in_process  # uses pytest httpserver
     @markers.aws.manual_setup_required
     @skip_if_sns_v2
     def test_redrive_policy_http_subscription(
@@ -4104,6 +4111,7 @@ def test_redrive_policy_http_subscription(
         assert message["Type"] == "Notification"
         assert json.loads(message["Message"])["message"] == "test_redrive_policy"
 
+    @markers.requires_in_process  # uses pytest httpserver
     @markers.aws.manual_setup_required
     @skip_if_sns_v2
     def test_multiple_subscriptions_http_endpoint(
@@ -4190,6 +4198,7 @@ def handler(_request):
             for server in servers:
                 server.stop()
 
+    @markers.requires_in_process  # uses pytest httpserver
     @markers.aws.manual_setup_required
     @pytest.mark.parametrize("raw_message_delivery", [True, False])
     @markers.snapshot.skip_snapshot_verify(
@@ -4373,6 +4382,7 @@ def _clean_headers(response_headers: dict):
         )
         snapshot.match("unsubscribe-request", payload)
 
+    @markers.requires_in_process  # uses pytest httpserver
     @markers.aws.manual_setup_required
     @pytest.mark.parametrize("raw_message_delivery", [True, False])
     @skip_if_sns_v2
@@ -4460,6 +4470,7 @@ def test_dlq_external_http_endpoint(
         # AWS doesn't send to the DLQ if the UnsubscribeConfirmation fails to be delivered
         assert "Messages" not in response or response["Messages"] == []
 
+    @markers.requires_in_process  # uses pytest httpserver
     @markers.aws.manual_setup_required
     @pytest.mark.parametrize("raw_message_delivery", [True, False])
     @markers.snapshot.skip_snapshot_verify(
@@ -5332,6 +5343,7 @@ def get_log_events():
 
 
 class TestSNSCertEndpoint:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @pytest.mark.parametrize("cert_host", ["", "sns.us-east-1.amazonaws.com"])
     @skip_if_sns_v2
@@ -5379,6 +5391,7 @@ def test_cert_endpoint_host(
 
 @pytest.mark.usefixtures("openapi_validate")
 class TestSNSRetrospectionEndpoints:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @skip_if_sns_v2
     def test_publish_to_platform_endpoint_can_retrospect(
@@ -5536,6 +5549,7 @@ def check_message():
         ).json()
         assert not msg_with_region["platform_endpoint_messages"]
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @skip_if_sns_v2
     def test_publish_sms_can_retrospect(
@@ -5640,6 +5654,7 @@ def check_message():
         msg_with_region = requests.get(msgs_url, params={"region": region_name}).json()
         assert not msg_with_region["sms_messages"]
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     @skip_if_sns_v2
     def test_subscription_tokens_can_retrospect(
diff --git a/tests/aws/services/sqs/test_sqs.py b/tests/aws/services/sqs/test_sqs.py
@@ -82,6 +82,7 @@ def aws_sqs_client(aws_client, request: str) -> "SQSClient":
 
 
 class TestSqsProvider:
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_get_queue_url_contains_localstack_host(
         self,
@@ -228,6 +229,7 @@ def test_create_queue_recently_deleted(self, sqs_create_queue, monkeypatch, aws_
             "You must wait 60 seconds after deleting a queue before you can create another with the same name."
         )
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_create_queue_recently_deleted_cache(
         self,
@@ -1642,6 +1644,7 @@ def collect_messages():
         bodies = {message["Body"] for message in messages}
         assert bodies == {"0", "1", "2", "3", "4", "5", "6", "7", "8"}
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_external_endpoint(self, monkeypatch, sqs_create_queue, aws_sqs_client):
         external_host = "external-host"
@@ -1662,6 +1665,7 @@ def test_external_endpoint(self, monkeypatch, sqs_create_queue, aws_sqs_client):
         receive_result = aws_sqs_client.receive_message(QueueUrl=queue_url)
         assert receive_result["Messages"][0]["Body"] == message_body
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_external_hostname_via_host_header(self, monkeypatch, sqs_create_queue, region_name):
         """test making a request with a different external hostname/port being returned"""
@@ -4122,6 +4126,7 @@ def test_remove_message_with_old_receipt_handle(self, sqs_create_queue, aws_sqs_
         )
         assert int(approx_nr_of_messages["Attributes"]["ApproximateNumberOfMessages"]) == 0
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_list_queues_multi_region_without_endpoint_strategy(
         self, aws_client_factory, cleanups, monkeypatch
@@ -5325,6 +5330,7 @@ def test_endpoint_strategy_with_multi_region(
         assert response.ok
         assert "foobar" in response.text
 
+    @markers.requires_in_process
     @markers.aws.only_localstack
     def test_queue_url_format_path_strategy(
         self, sqs_create_queue, account_id, region_name, monkeypatch
diff --git a/tests/aws/services/stepfunctions/v2/mocking/test_aws_scenarios.py b/tests/aws/services/stepfunctions/v2/mocking/test_aws_scenarios.py
diff --git a/tests/aws/test_error_injection.py b/tests/aws/test_error_injection.py
diff --git a/tests/aws/test_network_configuration.py b/tests/aws/test_network_configuration.py

Original file line number	Diff line number	Diff line change
`@@ -264,6 +264,7 @@ def _check_print_in_logs():`
`264`	`264`
`265`	`265`	`retry(_check_print_in_logs, retries=10)`
`266`	`266`
	`267`	`+ @markers.requires_in_process`
`267`	`268`	`@markers.aws.only_localstack`
`268`	`269`	`def test_lambda_too_large_response_but_with_custom_limit(`
`269`	`270`	`self, caplog, create_lambda_function, aws_client, monkeypatch`
`@@ -1970,6 +1971,7 @@ def test_lambda_runtime_wrapper_not_found(self, aws_client, create_lambda_functi`
`1970`	`1971`	`)`
`1971`	`1972`	`snapshot.match("invocation_error", result)`
`1972`	`1973`
	`1974`	`+ @markers.requires_in_process`
`1973`	`1975`	`@markers.aws.only_localstack(`
`1974`	`1976`	`reason="Can only induce Lambda-internal Docker error in LocalStack"`
`1975`	`1977`	`)`
`@@ -1999,6 +2001,7 @@ def test_lambda_runtime_startup_timeout(`
`1999`	`2001`	`r"retries: \d\): \[[^]]\] Timeout while starting up lambda environment ."`
`2000`	`2002`	`)`
`2001`	`2003`
	`2004`	`+ @markers.requires_in_process`
`2002`	`2005`	`@markers.aws.only_localstack(`
`2003`	`2006`	`reason="Can only induce Lambda-internal Docker error in LocalStack"`
`2004`	`2007`	`)`