feat: harden control-plane deployment

control-plane/server_test.go

@@ -19,6 +19,7 @@ func TestReactFrontendIsEmbedded(t *testing.T) {
 	}
 	httpServer := httptest.NewServer(server.Handler())
 	defer httpServer.Close()
+	defer server.Close()
 	response, err := http.Get(httpServer.URL + "/")
 	if err != nil {
 		t.Fatal(err)
@@ -70,6 +71,7 @@ func TestNodeWebTaskAndEventFlow(t *testing.T) {
 	}
 	httpServer := httptest.NewServer(server.Handler())
 	defer httpServer.Close()
+	defer server.Close()
 	client := httpServer.Client()
 
 	if response := doJSON(t, client, http.MethodGet, httpServer.URL+"/v1/nodes", "", nil); response.Code != http.StatusUnauthorized {
@@ -195,6 +197,9 @@ func TestNodeWebTaskAndEventFlow(t *testing.T) {
 		t.Fatalf("expected two account-scoped events, got %d", len(eventList.Events))
 	}
 
+	if err := server.Close(); err != nil {
+		t.Fatal(err)
+	}
 	restarted, err := NewServer(ServerConfig{DataFile: dataFile, NodeTokens: map[string]string{"node-1": "node-secret"}, WebUsers: map[string]string{"admin": "web-secret"}})
 	if err != nil {
 		t.Fatal(err)
@@ -226,6 +231,7 @@ func TestRemoteReadRoutesUseTheTaskQueueAndRetainReadContent(t *testing.T) {
 	}
 	httpServer := httptest.NewServer(server.Handler())
 	defer httpServer.Close()
+	defer server.Close()
 	client := httpServer.Client()
 
 	login := doJSON(t, client, http.MethodPost, httpServer.URL+"/v1/auth/login", "", map[string]string{"username": "admin", "password": "web-secret"})