OpenAPI service env, port, and domain handlers raise raw validation and nil errors

[RainBondsongyg]

Summary

Sentry captured OpenAPI service configuration endpoints raising raw exceptions for missing optional fields, missing service/app state, and serializer validation errors.

De-duplication note

Existing #2619 covered missing team/app initialization on OpenAPI list endpoints. These groups are newer service config mutation paths and were not present in that batch.

Sentry evidence

• RAINBOND-CONSOLE-J7 - Sentry issue 923 - 7 event(s) - first 2026-06-30T07:58:27Z - last 2026-06-30T09:29:08Z - route /openapi/v1/teams/{team_id}/regions/{region_name}/apps/{app_id}/services/{service_id}/envs - release v6.9.2-release-esgz-5e8bbce-2026-06-24-07 - Sentry
  • Error: KeyError: 'note'
• RAINBOND-CONSOLE-JJ - Sentry issue 935 - 1 event(s) - first 2026-06-30T09:05:23Z - last 2026-06-30T09:05:23Z - route /openapi/v1/teams/{team_id}/regions/{region_name}/apps/{app_id}/services/{service_id}/ports/{port} - release v6.9.2-release-esgz-5e8bbce-2026-06-24-07 - Sentry
  • Error: AttributeError: 'NoneType' object has no attribute 'app_id'
• RAINBOND-CONSOLE-JH - Sentry issue 934 - 1 event(s) - first 2026-06-30T09:05:03Z - last 2026-06-30T09:05:03Z - route /openapi/v1/teams/{team_id}/regions/{region_name}/apps/{app_id}/services/{service_id}/ports - release v6.9.2-release-esgz-5e8bbce-2026-06-24-07 - Sentry
  • Error: {'port_alias': [ErrorDetail(string='该字段不能为空。', code='blank')]}
• RAINBOND-CONSOLE-JF - Sentry issue 932 - 1 event(s) - first 2026-06-30T09:03:16Z - last 2026-06-30T09:03:16Z - route /openapi/v1/teams/{team_id}/regions/{region_name}/apps/{app_id}/httpdomains - release v6.9.2-release-esgz-5e8bbce-2026-06-24-07 - Sentry
  • Error: {'configuration': {'set_headers': [ErrorDetail(string='该字段是必填项。', code='required')]}}
• RAINBOND-CONSOLE-JE - Sentry issue 931 - 1 event(s) - first 2026-06-30T09:03:15Z - last 2026-06-30T09:03:15Z - route /openapi/v1/teams/{team_id}/regions/{region_name}/apps/{app_id}/services/{service_id}/ports - release v6.9.2-release-esgz-5e8bbce-2026-06-24-07 - Sentry
  • Error: {'port': [ErrorDetail(string='该字段是必填项。', code='required')]}

Impact

OpenAPI callers receive server errors or raw validation payloads instead of stable 4xx responses. These paths affect service env updates, port creation, and HTTP domain creation.

Suggested next steps

• Normalize optional env fields such as note before indexing request payloads.
• Return structured validation responses for missing port, port_alias, and configuration.set_headers instead of capturing them as server errors.
• Add nil checks before dereferencing service/app fields such as app_id.
• Add OpenAPI regression tests for omitted optional env metadata and incomplete port/domain payloads.

Source: Sentry production unresolved scan on 2026-06-30. This consolidates new groups after checking existing Rainbond issues, including closed Sentry batch issues #2610-#2621.

[RainBondsongyg]

/claude fix issues

[rainbond-bot]

Claude finished @RainBondsongyg's task in 3m 7s —— View job

---

I'll analyze this and get back to you.

[RainBondsongyg]

/codex fix issues

[rainbond-bot]

I investigated #2642 and prepared a scoped fix in rainbond-console for the affected OpenAPI service configuration paths, but I am not opening a PR because the required quality gates do not pass in this checkout.

Prepared changes locally under /tmp/rainbond-console on branch codex/issue-2642-openapi-validation:

• make service env updates tolerate omitted optional note metadata instead of raising KeyError;
• make HTTP gateway advanced configuration.set_headers optional with an empty-list default;
• normalize DRF validation errors into compact HTTP 400 payloads without traceback fields;
• add managed regression tests for env note omission, gateway config without set_headers, and validation error response shape.

Verification:

• PASS: python3 scripts/run_pytest.py console/tests/openapi_service_config_validation_test.py (3 tests)
• PASS: python3 scripts/validate_test_manifest.py --repo-root . --manifest test-manifest.json
• PASS: flake8 --max-line-length 129 --extend-ignore=W605 console/tests/openapi_service_config_validation_test.py
• FAIL: make check due to existing repo-wide flake8 violations unrelated to this patch.
• FAIL: full python3 scripts/run_pytest.py due to existing environment/baseline failures, mostly missing generated openapi_client imports and unrelated test patch target errors.

No PR was opened, following the instruction to stop when required quality gates fail.

[RainBondsongyg]

/codex 审阅本次修改的代码

[Issues-translate-bot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

/codex Review the code for this modification

[rainbond-bot]

代码审阅结论：目前没有可审阅的已发布 diff。

我检查了可用状态：

• goodrain/rainbond-console 没有找到 codex/issue-2642-openapi-validation 或其它与 OpenAPI service env, port, and domain handlers raise raw validation and nil errors #2642 对应的远端分支；
• 当前会话里也没有上一轮提到的 /tmp/rainbond-console 本地改动，因此无法做逐行 changed-code review。

基于 rainbond-console/main 的相关代码路径，我确认上一轮描述的两个修改方向是必要的：

• console/services/app_config/env_service.py 的 update_or_create_envs() 当前仍直接读取 env["note"]，和 Sentry 的 KeyError: 'note' 对应；
• console/services/app_config/domain_service.py 的 update_http_rule_config() 当前仍直接读取 configs["set_headers"]，和 HTTP domain advanced configuration 缺少 set_headers 的错误对应；
• DRF ValidationError 当前响应里包含 error_trace，确实会把原始校验异常细节暴露给 OpenAPI 调用方。

Residual risk / 需要补充确认：

1. 如果修复只改 serializer 让 set_headers 默认 []，建议同时确认所有调用 update_http_rule_config() 的入口都会经过该 serializer；否则 service 层仍应使用 configs.get("set_headers", []) 防止内部调用再次触发 KeyError。
2. issue 中还包含 /services/{service_id}/ports/{port} 的 NoneType.app_id Sentry 组。当前 TeamAppServiceAPIView.initial() 在 app/service 不存在时会抛 404 类型的 ServiceHandleException，但最终修复的回归测试应覆盖这个路径，确认不会再落到原始 AttributeError。
3. 若修改全局 custom_exception_handler() 来压缩 ValidationError 响应，需要确认现有 console/openapi 客户端没有依赖 error_trace 或 err 的旧字段形状；更稳妥的是保持字段兼容或把断言限制在 OpenAPI 入口。

在没有实际 diff/PR 的情况下，我不建议给出“通过审阅”的结论。请先推送分支或打开 PR，我可以继续做逐行 review。