---
id: w1/m19.1/t008
title: Test coverage — scripted assertion of the self-managed access path
worker: worker1
status: done
estimate: 20m
depends_on: [w1/m19.1/t007]
---

## Objective

Assert the property this milestone shipped — the cluster is reachable and self-managed with **no mgmt-cluster dependency** — as a re-runnable script, not a one-off eyeball.

## Context

- Natural home: extend `scripts/verify-elastic.sh` (m19 t011 extends it further) or a sibling `verify-substrate` check.
- Assertions worth scripting: CP IP discoverable via hcloud API → SSH admin.conf fetch works; `kubectl get machines` in-cluster returns all-Running; CAPI pods on CP nodes; in-cluster autoscaler Running; no `bex-infra` server exists yet `terraform plan` is clean.
- Must assert real behavior/failure modes — no tautologies.

## Steps

1. Write/extend the script; run it green against the pivoted cluster; wire into whatever check-chain verify-elastic already sits in.

## Files

- scripts/verify-elastic.sh (or scripts/verify-substrate.sh)

## Acceptance criteria

- [ ] Script exits non-zero when any self-managed property is broken (spot-check by pointing it at a wrong IP/kubeconfig); green against prod.

## Out of scope

- m19 t011's fuller acceptance suite (elasticity phases) — this covers only m19.1's delta.
