A+B 複合 — asyncio.TaskGroup × except* ExceptionGroup × frozen dataclass（Ch4/Ch10/Ch11）× GKE Autopilot Gateway API + HTTPRoute カナリアデプロイ

📋 コピーimport asyncio

async def main():
    payloads = [
        {"recipient": "user1@example.com", "subject": "セール開始", "body_html": "<p>50%OFF</p>", "campaign_id": "camp-2026-summer"},
        {"recipient": "user2@example.com", "subject": "セール開始", "body_html": "<p>50%OFF</p>", "campaign_id": "camp-2026-summer"},
    ]
    result = await bulk_send(payloads, "https://hooks.example.com/send")

    print(result.sent)          # 2
    print(result.failed)        # 0
    print(result.success_rate)  # 1.0
    print(result.total)         # 2
    print(result.errors)        # []

    # バリデーションエラーのケース
    invalid = [{"recipient": "not-email", "subject": "X", "body_html": "", "campaign_id": "ab"}]
    r2 = await bulk_send(invalid, "https://hooks.example.com/send")
    print(r2.sent)    # 0
    print(r2.failed)  # 1  ← バリデーションエラーとしてカウント
    print(r2.errors)  # ["バリデーションエラー: ..."]

asyncio.run(main())

📋 コピー# terraform/modules/gke-gateway/main.tf
# GKE Autopilot Gateway API × ManagedCertificate × HTTPRoute カナリアデプロイ

locals {
  namespace = "mops"
  domain    = "api.mops.example.com"
}

# ── GatewayClass（GKE L7 外部ロードバランサを指定）──────────────────────────
resource "kubernetes_manifest" "gatewayclass" {
  manifest = {
    apiVersion = "gateway.networking.k8s.io/v1"
    kind       = "GatewayClass"
    metadata = {
      name = "gke-l7-external"
    }
    spec = {
      # GKE コントローラー: このクラスを持つ Gateway に Cloud LB を自動プロビジョニング
      controllerName = "networking.gke.io/gateway"
    }
  }
}

# ── Google マネージド TLS 証明書（自動更新・手動管理不要）──────────────────
resource "kubernetes_manifest" "managed_cert" {
  manifest = {
    apiVersion = "networking.gke.io/v1"
    kind       = "ManagedCertificate"
    metadata = {
      name      = "mops-managed-cert"
      namespace = local.namespace
    }
    spec = {
      domains = [local.domain]  # Google CA が証明書を発行・90日ごとに自動更新
    }
  }
}

# ── Gateway（LB 設定: HTTPS 443 + HTTP 80 の2リスナー）────────────────────
resource "kubernetes_manifest" "gateway" {
  depends_on = [kubernetes_manifest.gatewayclass, kubernetes_manifest.managed_cert]

  manifest = {
    apiVersion = "gateway.networking.k8s.io/v1"
    kind       = "Gateway"
    metadata = {
      name      = "mops-gateway"
      namespace = local.namespace
    }
    spec = {
      gatewayClassName = "gke-l7-external"
      listeners = [
        {
          name     = "https"
          port     = 443
          protocol = "HTTPS"
          tls = {
            mode = "Terminate"  # LB で TLS を終端（Pods へは HTTP で転送）
            options = {
              # GKE マネージド証明書を参照（PEM の手動貼り付け不要）
              "networking.gke.io/pre-shared-certs" = "mops-managed-cert"
            }
          }
        },
        {
          name     = "http"
          port     = 80
          protocol = "HTTP"
          # HTTP リクエストは HTTPRoute 側で HTTPS にリダイレクト
        }
      ]
    }
  }
}

# ── HTTPRoute: delivery-api カナリアルーティング（90/10 重み分散）──────────
resource "kubernetes_manifest" "route_delivery" {
  manifest = {
    apiVersion = "gateway.networking.k8s.io/v1"
    kind       = "HTTPRoute"
    metadata = {
      name      = "delivery-route"
      namespace = local.namespace
    }
    spec = {
      parentRefs = [{
        name      = "mops-gateway"
        namespace = local.namespace
      }]
      hostnames = [local.domain]
      rules = [
        {
          matches = [{
            path = {
              type  = "PathPrefix"
              value = "/api/delivery"
            }
          }]
          backendRefs = [
            {
              name   = "delivery-api"        # 安定版（本番）
              port   = 8080
              weight = 90                    # 90%のトラフィックを安定版へ
            },
            {
              name   = "delivery-api-canary" # カナリア版（新バージョン検証中）
              port   = 8080
              weight = 10                    # 10%のトラフィックをカナリアへ
            }
          ]
        }
      ]
    }
  }
}

# ── HTTPRoute: segment-api（独立ルート・別チームが独立デプロイ可能）─────────
resource "kubernetes_manifest" "route_segment" {
  manifest = {
    apiVersion = "gateway.networking.k8s.io/v1"
    kind       = "HTTPRoute"
    metadata = {
      name      = "segment-route"
      namespace = local.namespace
    }
    spec = {
      parentRefs = [{
        name      = "mops-gateway"
        namespace = local.namespace
      }]
      hostnames = [local.domain]
      rules = [
        {
          matches = [{
            path = {
              type  = "PathPrefix"
              value = "/api/segment"
            }
          }]
          backendRefs = [{
            name   = "segment-api"
            port   = 8080
            weight = 100  # 全トラフィックを segment-api へ（カナリアなし）
          }]
        }
      ]
    }
  }
}

# ── HTTPRoute: template-api（独立ルート）──────────────────────────────────
resource "kubernetes_manifest" "route_template" {
  manifest = {
    apiVersion = "gateway.networking.k8s.io/v1"
    kind       = "HTTPRoute"
    metadata = {
      name      = "template-route"
      namespace = local.namespace
    }
    spec = {
      parentRefs = [{
        name      = "mops-gateway"
        namespace = local.namespace
      }]
      hostnames = [local.domain]
      rules = [
        {
          matches = [{
            path = {
              type  = "PathPrefix"
              value = "/api/template"
            }
          }]
          backendRefs = [{
            name   = "template-api"
            port   = 8080
            weight = 100
          }]
        }
      ]
    }
  }
}