@fnndsc/stratus 0.2.1 → 0.4.0

package/dist/cloud/oci/stackVars.d.ts

@@ -4,8 +4,8 @@
  * is a string, as Resource Manager takes them.
  *
  * The choices: the stack writes no DNS (the zone is long-lived and the dns
- * step writes the three records), the attribution tag namespace lives in the
- * domain's compartment, the API's load balancer is public, the Assisted
+ * step writes the three records), the attribution tag namespace is the one
+ * the tenancy already has, wherever it lives (its name is tenancy-wide), the API's load balancer is public, the Assisted
  * Installer installs. With no workers only `compute_count` is set: the stack
  * still reads `compute_shape` for the image, so its other compute variables
  * keep their defaults and a compact cluster plans unchanged.
@@ -24,7 +24,7 @@ export declare const OCI_DRIVER_VERSION: string;
  * @returns The shape and its ratio.
  * @throws Error - For a family with no flexible shape known.
  */
-export declare function familyShape_of(family: string): {
+export declare function familyShape_resolve(family: string): {
     shape: string;
     vcpuPerOcpu: number;
 };
@@ -34,6 +34,8 @@ export interface StackVarsRequest {
     readonly spec: DomainSpec;
     readonly tenancyId: string;
     readonly compartmentId: string;
+    /** Where the `openshift-tags` namespace lives: a tenancy-wide name, so wherever the first domain made it. */
+    readonly tagNamespaceCompartmentId?: string;
     readonly region: string;
     readonly baseDomain: string;
     /** The discovery image's link; a secret. */

package/dist/cloud/oci/stackVars.js

@@ -10,7 +10,7 @@ export const OCI_DRIVER_VERSION = 'v1.34.0';
  * @returns The shape and its ratio.
  * @throws Error - For a family with no flexible shape known.
  */
-export function familyShape_of(family) {
+export function familyShape_resolve(family) {
     const found = Object.entries(SHAPE_TERMS).find(([, terms]) => terms.family === family);
     if (found === undefined)
         throw new Error(`${family}: no flexible shape known for this family`);
@@ -26,7 +26,7 @@ export function familyShape_of(family) {
  * @throws Error - When the vCPU is not whole OCPUs, or the tier is unknown.
  */
 function pool_variables(prefix, pool, family) {
-    const { shape, vcpuPerOcpu } = familyShape_of(family);
+    const { shape, vcpuPerOcpu } = familyShape_resolve(family);
     if (pool.vcpu % vcpuPerOcpu !== 0)
         throw new Error(`${prefix}: ${pool.vcpu} vCPU is not whole OCPUs on ${family} (${vcpuPerOcpu} vCPU an OCPU)`);
     const vpus = TIER_VPUS[pool.bootTier];
@@ -51,7 +51,7 @@ export function stackVariables_build(request) {
     return {
         tenancy_ocid: request.tenancyId,
         compartment_ocid: request.compartmentId,
-        tag_namespace_compartment_ocid_resource_tagging: request.compartmentId,
+        tag_namespace_compartment_ocid_resource_tagging: request.tagNamespaceCompartmentId ?? request.compartmentId,
         region: request.region,
         cluster_name: request.domain,
         zone_dns: request.baseDomain,

package/dist/cloud/oci/stackVars.js.map

@@ -1 +1 @@
-{"version":3,"file":"stackVars.js","sourceRoot":"","sources":["../../../src/cloud/oci/stackVars.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,gFAAgF;AAChF,MAAM,CAAC,MAAM,SAAS,GAAqC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAEpG,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAW,SAAS,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAChG,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,2CAA2C,CAAC,CAAC;IAC/F,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,MAAc,EAAE,IAAc,EAAE,MAAc;IACpE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,IAAI,GAAG,WAAW,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,KAAK,IAAI,CAAC,IAAI,+BAA+B,MAAM,KAAK,WAAW,gBAAgB,CAAC,CAAC;IACjJ,MAAM,IAAI,GAAuB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,eAAe,IAAI,CAAC,QAAQ,kBAAkB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpI,OAAO;QACL,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACvC,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,KAAK;QAC1B,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACnD,CAAC,GAAG,MAAM,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACzC,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7C,CAAC,GAAG,MAAM,0BAA0B,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC;KACpD,CAAC;AACJ,CAAC;AAeD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAyB;IAC5D,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,SAAS;QAC/B,gBAAgB,EAAE,OAAO,CAAC,aAAa;QACvC,+CAA+C,EAAE,OAAO,CAAC,aAAa;QACtE,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,QAAQ,EAAE,OAAO,CAAC,UAAU;QAC5B,mBAAmB,EAAE,UAAU;QAC/B,0BAA0B,EAAE,OAAO,CAAC,OAAO;QAC3C,cAAc,EAAE,OAAO,CAAC,YAAY;QACpC,GAAG,cAAc,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;QACnI,iBAAiB,EAAE,OAAO;QAC1B,kBAAkB,EAAE,OAAO;QAC3B,oBAAoB,EAAE,MAAM;QAC5B,qBAAqB,EAAE,MAAM;QAC7B,kBAAkB,EAAE,kBAAkB;KACvC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"stackVars.js","sourceRoot":"","sources":["../../../src/cloud/oci/stackVars.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,gFAAgF;AAChF,MAAM,CAAC,MAAM,SAAS,GAAqC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAEpG,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAW,SAAS,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAChG,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,2CAA2C,CAAC,CAAC;IAC/F,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,MAAc,EAAE,IAAc,EAAE,MAAc;IACpE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,GAAG,WAAW,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,KAAK,IAAI,CAAC,IAAI,+BAA+B,MAAM,KAAK,WAAW,gBAAgB,CAAC,CAAC;IACjJ,MAAM,IAAI,GAAuB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,eAAe,IAAI,CAAC,QAAQ,kBAAkB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpI,OAAO;QACL,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACvC,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,KAAK;QAC1B,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACnD,CAAC,GAAG,MAAM,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACzC,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7C,CAAC,GAAG,MAAM,0BAA0B,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC;KACpD,CAAC;AACJ,CAAC;AAiBD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAyB;IAC5D,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,SAAS;QAC/B,gBAAgB,EAAE,OAAO,CAAC,aAAa;QACvC,+CAA+C,EAAE,OAAO,CAAC,yBAAyB,IAAI,OAAO,CAAC,aAAa;QAC3G,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,QAAQ,EAAE,OAAO,CAAC,UAAU;QAC5B,mBAAmB,EAAE,UAAU;QAC/B,0BAA0B,EAAE,OAAO,CAAC,OAAO;QAC3C,cAAc,EAAE,OAAO,CAAC,YAAY;QACpC,GAAG,cAAc,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;QACnI,iBAAiB,EAAE,OAAO;QAC1B,kBAAkB,EAAE,OAAO;QAC3B,oBAAoB,EAAE,MAAM;QAC5B,qBAAqB,EAAE,MAAM;QAC7B,kBAAkB,EAAE,kBAAkB;KACvC,CAAC;AACJ,CAAC"}

package/dist/cluster/chris.d.ts

@@ -0,0 +1,156 @@
+import { type KubeApi } from './kube.js';
+import type { DomainSpec } from '../domain/spec.js';
+/** What is installed, and as whom the smoke journey logs in; `harbor-oci`'s pins. */
+export interface ChrisRelease {
+    readonly namespace: string;
+    readonly release: string;
+    readonly chartVersion: string;
+    readonly chrisomaticImage: string;
+    readonly testUser: string;
+    /** A pip requirement for `chris_smoke`. */
+    readonly smokeSource: string;
+}
+/** The release every domain gets. */
+export declare const CHRIS_RELEASE: ChrisRelease;
+/** The chart's OpenShift values, shipped beside `dist/`. */
+export declare const CHRIS_VALUES: string;
+/** The test user's password, under the domain's `auth/`. */
+export declare const TEST_PASSWORD_FILE: string;
+/** The router's CA, under the domain's `auth/`, for the smoke journey's HTTPS. */
+export declare const ROUTER_CA_FILE: string;
+/** What a host command answered. */
+export interface HostResult {
+    readonly code: number;
+    readonly stdout: string;
+    readonly stderr: string;
+}
+/** How a host command is run. */
+export interface HostRunOptions {
+    readonly env?: Record<string, string>;
+    readonly cwd?: string;
+    /** Each line of its output, as it comes. */
+    readonly line?: (text: string) => void;
+    readonly signal?: AbortSignal;
+}
+/** Runs a command on the host, with no shell between. */
+export type HostRun = (command: string, args: ReadonlyArray<string>, options?: HostRunOptions) => Promise<HostResult>;
+/** How long the waits are, in milliseconds. */
+export interface ChrisWaits {
+    readonly pollMs: number;
+    /** For the nodes to start taking the mirror; a pool that never starts needed no rollout. */
+    readonly mirrorReactMs: number;
+    /** For the nodes to take the mirror. */
+    readonly mirrorWaitMs: number;
+    /** For every workload to roll out; the first pulls images and migrates the database. */
+    readonly rolloutWaitMs: number;
+    /** For the seed job. */
+    readonly seedWaitMs: number;
+}
+/** `harbor-oci`'s waits. */
+export declare const CHRIS_WAITS: ChrisWaits;
+/** What a ChRIS step is handed. */
+export interface ChrisCall {
+    readonly kube: KubeApi;
+    readonly host: HostRun;
+    /** The kubeconfig's path on the host, for `helm`. */
+    readonly kubeconfigPath: string;
+    /** The domain's folder, where the smoke virtualenv lives. */
+    readonly folder: string;
+    /** The CUBE's public host (`cube.apps.<cluster>`). */
+    readonly cubeHost: string;
+    readonly spec: DomainSpec;
+    readonly release: ChrisRelease;
+    readonly waits: ChrisWaits;
+    readonly secret_read: (file: string) => string | null;
+    readonly secret_write: (file: string, text: string) => void;
+    /** A secret's path on the host. */
+    readonly secret_path: (file: string) => string;
+    readonly log: (line: string) => void;
+    readonly signal: AbortSignal;
+}
+/** The three ChRIS steps; the fake world answers them too. */
+export interface ChrisWork {
+    deploy(call: ChrisCall): Promise<string>;
+    seed(call: ChrisCall): Promise<string>;
+    smoke(call: ChrisCall): Promise<string>;
+}
+/**
+ * Runs a command on the host: no shell, its output streamed by line.
+ *
+ * @param command - The program.
+ * @param args - Its arguments.
+ * @param options - Environment, folder, a line reader and a stop.
+ * @returns Its exit code and output.
+ */
+export declare const hostRun_spawn: HostRun;
+/**
+ * The `helm upgrade --install` arguments: the pinned chart, the OpenShift
+ * values, the domain's host, node and the spec's sizes.
+ *
+ * @param call - The step.
+ * @param node - The pinned node.
+ * @returns The arguments after `helm`.
+ */
+export declare function helmInstall_args(call: Pick<ChrisCall, 'kubeconfigPath' | 'release' | 'cubeHost' | 'spec'>, node: string): string[];
+/** A workload's rollout, as far as the wait reads it. */
+interface Workload {
+    metadata?: {
+        generation?: number;
+    };
+    spec?: {
+        replicas?: number;
+    };
+    status?: {
+        observedGeneration?: number;
+        replicas?: number;
+        updatedReplicas?: number;
+        readyReplicas?: number;
+        availableReplicas?: number;
+    };
+}
+/**
+ * Whether a workload has rolled out: its generation seen, every replica
+ * updated and ready.
+ *
+ * @param workload - The deployment or stateful set.
+ * @returns True when done.
+ */
+export declare function rollout_done(workload: Workload | null): boolean;
+/**
+ * The chrisomatic config the seed job runs: the test user, the compute
+ * resource the chart registers (re-declared with its own credentials, so a
+ * re-run converges), and the smoke journey's plugins. YAML strings are
+ * written as JSON strings, which YAML reads the same.
+ *
+ * @param values - The addresses and credentials.
+ * @returns The config's text.
+ */
+export declare function chrisomaticConfig_render(values: {
+    cubeUrl: string;
+    superuserPassword: string;
+    testUser: string;
+    testPassword: string;
+    pfconUrl: string;
+    pfconUser: string;
+    pfconPassword: string;
+}): string;
+/**
+ * The seed job: chrisomatic once over the config in its secret.
+ *
+ * @param release - The release.
+ * @param timeoutSeconds - Its deadline.
+ * @returns The Job.
+ */
+export declare function seedJob_build(release: ChrisRelease, timeoutSeconds: number): unknown;
+/**
+ * The journey's last line in a few words: `chris_smoke` ends with its verdict
+ * as JSON (`pass · 7 steps · 17 s`, or the step that failed); any other line
+ * is kept as it is.
+ *
+ * @param line - The last line it printed.
+ * @returns The words.
+ */
+export declare function smokeVerdict_words(line: string): string;
+/** ChRIS on a real cluster. */
+export declare const chrisWork_cluster: ChrisWork;
+export {};