test: pin that clean-deploy configures the apps around the purge

alakazam.py

@@ -135,7 +135,7 @@ def read_config(configpath: str) -> Dict[str, Any]:
         try: 
             yaml_config = yaml.load(file)
         except Exception as e: 
-            logging.error(f"Error reading config file {filepath}: {str(e)}")
+            logging.warning(f"config file {filepath} could not be read and is skipped: {str(e)}")
             return {}
 
         if not yaml_config:
@@ -2475,6 +2475,7 @@ def clean_deploy(recipes: Tuple[str], converge_checks: bool, timeout: int, nonin
     print_all_apps(instance_apps)
     if not (noninteractive or input(f"This deletes all data of these apps. Do you really want to rebuild them? Type YES: ") == "YES"):
         return
+    configure_apps(recipes)
     undeploy_apps(get_apps_by_deployment(recipes, deployed=True))
     purge_apps(instance_apps)
     setup_environment(recipes, converge_checks=converge_checks, timeout=timeout)

tests/test_preflight.py

@@ -61,6 +61,20 @@ class TestCheckConfigReadable:
         assert "\n" not in check_config_readable(path)
 
 
+class TestReadConfigSeverity:
+    """An unreadable file that reaches read_config is out of scope by construction."""
+
+    def test_an_unreadable_config_warns_rather_than_errors(self, config_root, caplog):
+        import logging
+        broken = config_root / "foreign" / "alaka-secrets.yml"
+        broken.parent.mkdir()
+        broken.write_bytes(GIT_CRYPT_HEADER)
+        with caplog.at_level(logging.DEBUG):
+            assert alakazam.read_config(str(broken)) == {}
+        assert [r.levelname for r in caplog.records] == ["WARNING"]
+        assert "is skipped" in caplog.text
+
+
 class TestPreflightConfigs:
     def test_passes_for_readable_configs(self, config_root):
         preflight_configs([config_root / "alaka.yml", config_root / "config-sets.yml"])

tests/test_setup.py

@@ -220,7 +220,24 @@ class TestCleanDeployCommand:
         instance.write_text("")
         result = self.invoke(["-n"], instance, monkeypatch)
         assert result.exit_code == 0, result.exception
-        assert server.steps[:3] == ["undeploy", "purge", "config"]
+        assert server.steps[:4] == ["config", "undeploy", "purge", "config"]
+
+    def test_the_apps_are_configured_before_they_are_purged(self, monkeypatch, tmp_path):
+        """purge_apps() skips an app without a local .env, so a fresh checkout would purge nothing."""
+        server = FakeServer(deployed=["login.a.org"]).install(monkeypatch)
+        instance = tmp_path / "example.com.yml"
+        instance.write_text("")
+        self.invoke(["-n"], instance, monkeypatch)
+        assert server.steps.index("config") < server.steps.index("purge")
+
+    def test_the_apps_are_configured_again_after_the_purge(self, monkeypatch, tmp_path):
+        """'abra app rm' deletes the local .env as well, so setup has to write it a second time."""
+        server = FakeServer(deployed=["login.a.org"]).install(monkeypatch)
+        instance = tmp_path / "example.com.yml"
+        instance.write_text("")
+        self.invoke(["-n"], instance, monkeypatch)
+        assert server.steps.count("config") == 2
+        assert server.steps.index("purge") < len(server.steps) - 1 - server.steps[::-1].index("config")
 
     def test_a_group_directory_is_rejected(self, monkeypatch, tmp_path):
         server = FakeServer().install(monkeypatch)