fix(devops): enforce graph count limit

devops/internal/service/container.go

@@ -65,7 +65,7 @@ func (s *containerServiceImpl) AddGraphInfo(rootGN string, rootGI *compose.Graph
 	s.mu.Lock()
 	defer s.mu.Unlock()
 
-	if s.totalGraphNum > maxGraphNum {
+	if s.totalGraphNum >= maxGraphNum {
 		return "", fmt.Errorf("too many graph, max=%d", maxGraphNum)
 	}
 

devops/internal/service/container_test.go

@@ -67,6 +67,26 @@ func Test_containerServiceImpl_AddGraphInfo(t *testing.T) {
 		assert.Equal(t, s.graphNameCounter[mockGraphName], 10)
 	})
 
+	t.Run("reject graph beyond limit", func(t *testing.T) {
+		mockGraphName := "mock_graph"
+		s := &containerServiceImpl{
+			container:        map[string]*model.GraphContainer{},
+			graphNameCounter: map[string]int{},
+		}
+
+		for i := 0; i < maxGraphNum; i++ {
+			_, err := s.AddGraphInfo(mockGraphName, &compose.GraphInfo{})
+			if !assert.NoError(t, err) {
+				return
+			}
+		}
+
+		_, err := s.AddGraphInfo(mockGraphName, &compose.GraphInfo{})
+		assert.EqualError(t, err, fmt.Sprintf("too many graph, max=%d", maxGraphNum))
+		assert.Equal(t, maxGraphNum, s.totalGraphNum)
+		assert.Len(t, s.container, maxGraphNum)
+	})
+
 	t.Run("add graph info with subGraph, once", func(t *testing.T) {
 		mockGraphName := "mock_graph"
 		s := &containerServiceImpl{