frisch 0.1.1__tar.gz

frisch-0.1.1/.dockerignore

@@ -0,0 +1,14 @@
+.git
+.tox
+.venv
+venv
+__pycache__
+*.egg-info
+build
+dist
+cover
+htmlcov
+node_modules
+frontend/dist
+.dev
+tests

frisch-0.1.1/.github/workflows/main.yml

@@ -0,0 +1,12 @@
+name: 'Build Release'
+on:
+  push:
+    tags:
+      - '*'
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    uses: NeCTAR-RC/gh-actions/.github/workflows/build-release.yaml@master

frisch-0.1.1/.gitignore

@@ -0,0 +1,18 @@
+*.py[cod]
+__pycache__/
+*.egg-info/
+.eggs/
+build/
+dist/
+.tox/
+.coverage
+.coverage.*
+htmlcov/
+cover/
+.pytest_cache/
+.venv/
+venv/
+node_modules/
+
+# Local dev state: sqlite db and git mirror cache produced by frisch-collect.
+/.dev/

frisch-0.1.1/.gitreview

@@ -0,0 +1,5 @@
+[gerrit]
+host=review.rc.nectar.org.au
+port=29418
+project=NeCTAR-RC/frisch.git
+defaultbranch=master

frisch-0.1.1/.pre-commit-config.yaml

@@ -0,0 +1,35 @@
+---
+default_language_version:
+  # force all unspecified python hooks to run python3
+  python: python3
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: trailing-whitespace
+      - id: mixed-line-ending
+        args: ['--fix', 'lf']
+        exclude: '.*\.(svg)$'
+      - id: fix-byte-order-marker
+      - id: check-executables-have-shebangs
+      - id: check-merge-conflict
+      - id: debug-statements
+      - id: check-yaml
+        files: .*\.(yaml|yml)$
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.16.4
+    hooks:
+      - id: ruff
+        args: ['--fix', '--unsafe-fixes']
+      - id: ruff-format
+  - repo: https://opendev.org/openstack/hacking
+    rev: 7.0.0
+    hooks:
+      - id: hacking
+        additional_dependencies:
+          - flake8-import-order~=0.19.2
+        exclude: '^(doc|releasenotes|tools)/.*$'
+  - repo: https://github.com/crate-ci/typos
+    rev: v1.49.0
+    hooks:
+      - id: typos

frisch-0.1.1/CLAUDE.md

@@ -0,0 +1,59 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## What this is
+
+`frisch` tracks the deployed version of every Nectar service in **test** and
+**prod** and when each environment changed to that version. Data comes from
+three sources: ArgoCD apps repos (git), puppet site repos + shared hieradata
+(git), and the PuppetDB package inventory (live). The full design rationale
+lives in the plan at the repo's inception; the short form is in README.md.
+
+## Commands
+
+```bash
+tox                       # default envlist: py314 (pytest + coverage) and pep8
+tox -e pep8               # lint only
+.venv/bin/pytest tests/test_ingest.py::test_change_appends_event   # single test
+pip install -e '.[test]'  # editable install (needed to refresh CLI entry points)
+frisch db upgrade         # alembic upgrade head against the configured DB
+frisch-collect --backfill --config etc/dev.yaml   # full history rebuild
+```
+
+- `tox -e releasenotes` (reno) needs at least one git commit; not in the
+  default envlist.
+- `tox -e frontend` builds the SPA (needs npm); Python tests never require it.
+
+## Architecture
+
+The pipeline is `collectors -> Observation -> ingest -> DB -> queries -> API/SPA`.
+
+- **`model.py`** holds the `Observation` contract and service-identity
+  resolution. Collectors are pure producers: they emit `Observation`s and
+  never touch the DB. **`ingest.py`** is the single writer; everything else
+  reads via `db/queries.py`.
+- Versions are **opaque strings**: never parse, compare or order them
+  (kolla tags like `2024.1-eom-26-g...` are not semver). Ordering is always
+  by time.
+- Git collectors share `collectors/gitrepo.py` (bare mirror clones, cursor
+  per repo in the `git_cursor` table, `log --first-parent -M -C
+  --name-status` walk, `git show` per blob). Idempotency: `version_event`
+  is unique on `(instance_id, ref)` where ref = commit sha, so re-walking
+  history (or a cursor reset after a force-push) is safe.
+- The deb collector has no git history: `precision="interval"` events with
+  `interval_start`, and the UI must say "changed between X and Y", never a
+  fake exact time. A failed/unavailable source aborts that env's run and
+  keeps prior state -- `frisch-collect` exits non-zero so the CronJob goes
+  red rather than silently serving stale data.
+- The puppet hiera files contain multi-KB `ENC[GPG,...]` blobs and the
+  renovate annotation is a YAML *comment*: the puppet collector line-scans,
+  it must NOT yaml.safe_load site data files.
+- DB is MariaDB in deployments, SQLite in dev/tests (same SQLAlchemy URL
+  mechanism) -- keep column types portable and timestamps naive UTC.
+
+## Conventions
+
+Gerrit review (no branches, no PRs), conventional commits with `-s`, reno
+release notes, ruff line-length 79, tox for tests. The reference sibling
+project for patterns is `nectar-conformance`.

frisch-0.1.1/Dockerfile

@@ -0,0 +1,47 @@
+# syntax=docker/dockerfile:1
+# Single image for the web Deployment (frisch-web), the collector CronJob
+# (frisch-collect) and the admin CLI (frisch) -- same image, different command.
+
+# --- Stage 1: build the SPA -------------------------------------------------
+FROM node:26-alpine AS frontend
+WORKDIR /build
+COPY frontend/package.json frontend/package-lock.json* ./
+RUN npm install
+COPY frontend/ ./
+RUN npm run build
+
+# --- Stage 2: python runtime ------------------------------------------------
+FROM python:3.14-slim AS runtime
+ENV PYTHONUNBUFFERED=1 \
+    PIP_NO_CACHE_DIR=1 \
+    FRISCH_WEB_STATIC=/app/web-static \
+    FRISCH_GIT_CACHE_DIR=/var/cache/frisch/git
+
+# The git collectors shell out to git against bare mirror clones.
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends git openssh-client \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+# Install the package. setuptools-scm derives the version from git, but .git is
+# not in the build context, so the Makefile passes the git-derived version in and
+# we hand it to setuptools-scm. ARG (not ENV) keeps it out of the final image's
+# environment.
+ARG VERSION
+COPY pyproject.toml README.md ./
+COPY frisch/ ./frisch/
+RUN SETUPTOOLS_SCM_PRETEND_VERSION_FOR_FRISCH="$VERSION" pip install .
+
+# Drop in the built SPA; the web app picks it up via FRISCH_WEB_STATIC.
+COPY --from=frontend /build/dist/ /app/web-static/
+
+# Run unprivileged. The git cache dir is the PVC mount point in k8s; created here
+# so local runs work too.
+RUN useradd --system --uid 42420 app \
+    && mkdir -p /var/cache/frisch/git /var/lib/frisch \
+    && chown -R app:app /var/cache/frisch /var/lib/frisch
+USER app
+
+EXPOSE 8080
+CMD ["frisch-web", "--host", "0.0.0.0", "--port", "8080"]

frisch-0.1.1/LICENSE

@@ -0,0 +1,176 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+

frisch-0.1.1/Makefile

@@ -0,0 +1,19 @@
+PROJECT=frisch
+REPO=registry.rc.nectar.org.au/nectar
+DESCRIBE=$(shell git describe --tags)
+# PEP 440-safe package version for setuptools-scm. Docker tags can't contain '+',
+# so the image tag keeps the raw `git describe` form while the package version
+# rewrites `<tag>-<n>-g<sha>` into the local-version form `<tag>+<n>.g<sha>`.
+VERSION := $(shell git describe --tags | sed -e 's/-/+/' -e 's/-/./g')
+IMAGE_TAG := $(if $(TAG),$(TAG),$(DESCRIBE))
+IMAGE=$(REPO)/$(PROJECT):$(IMAGE_TAG)
+BUILDER=docker
+BUILDER_ARGS=
+build:
+	echo "Derived image tag: $(DESCRIBE)"
+	echo "Actual image tag: $(IMAGE_TAG)"
+	echo "Package version: $(VERSION)"
+	$(BUILDER) build $(BUILDER_ARGS) --build-arg VERSION=$(VERSION) -t $(IMAGE) .
+push:
+	$(BUILDER) push $(IMAGE)
+.PHONY: build push

frisch-0.1.1/PKG-INFO

@@ -0,0 +1,99 @@
+Metadata-Version: 2.4
+Name: frisch
+Version: 0.1.1
+Summary: Deployment version visibility dashboard for the Nectar Research Cloud
+Author: ARDC Nectar Core Services
+License: Apache-2.0
+Requires-Python: >=3.12
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: httpx>=0.24
+Requires-Dist: PyYAML>=6
+Requires-Dist: SQLAlchemy>=2
+Requires-Dist: alembic>=1.13
+Requires-Dist: PyMySQL>=1.1
+Requires-Dist: cliff>=4
+Requires-Dist: fastapi>=0.110
+Requires-Dist: uvicorn[standard]>=0.27
+Requires-Dist: prometheus-client>=0.19
+Provides-Extra: test
+Requires-Dist: pytest>=7; extra == "test"
+Requires-Dist: pytest-cov>=4; extra == "test"
+Requires-Dist: respx>=0.20; extra == "test"
+Dynamic: license-file
+
+# frisch
+
+Deployment version visibility for the Nectar Research Cloud.
+
+Nectar services are deployed three ways: ArgoCD applications on kubernetes,
+docker containers on puppet-managed VMs, and debian packages on VMs and bare
+metal, each in a test and a prod environment (test is upgraded first). frisch
+collects the deployed version of every service in both environments, records
+when each environment changed to that version, and serves a dashboard that
+shows the version matrix and per-service history, making promotion lag from
+test to prod visible at a glance.
+
+## How it works
+
+```
+collectors -> Observation -> ingest (single writer) -> MariaDB -> API -> SPA
+```
+
+Three collectors, one normalised record:
+
+- **argocd** (git-declared): walks the history of the per-environment
+  ArgoCD apps repos, parsing each Application CRD's
+  `spec.source.targetRevision` (and `spec.sources` for multi-source apps).
+  Change dates are exact git commit times; the full history is backfillable.
+- **puppet** (git-declared): walks the puppet site repos (one per
+  environment) and the shared `hieradata` repo, scanning hiera
+  `*::image_tag` keys and their
+  `# renovate:` annotations. Also exact, backfillable.
+- **deb** (live): queries the PuppetDB package inventory in each environment
+  for configured package names/patterns. Package versions are not in git, so
+  frisch's own records are the only durable history; change times are
+  intervals ("changed between X and Y"), bounded by the collection interval.
+
+Versions are opaque strings everywhere -- they are never compared or ordered,
+only equality-checked and timestamped.
+
+## Running
+
+```
+pip install -e '.[test]'
+frisch db upgrade                       # create/upgrade the schema
+frisch-collect --backfill               # first run: full git history
+frisch-collect                          # incremental (the CronJob entry point)
+frisch-web                              # serve the dashboard on :8080
+frisch show matrix                      # the same table, in a terminal
+```
+
+Configuration is layered: `FRISCH_*` environment variables over a YAML config
+file (`--config`, `FRISCH_CONFIG`, `~/.config/frisch/frisch.yaml` or
+`/etc/frisch/frisch.yaml`) over defaults. See `etc/frisch.yaml.sample`.
+For local development, point the repo urls at your existing checkouts and use
+the default SQLite database.
+
+The SPA lives in `frontend/` (vite + React); `npm run dev` proxies `/api` to a
+locally running `frisch-web`. In the container image the built bundle is
+served by the backend.
+
+## Deployment prerequisites
+
+- A database and user on the MariaDB cluster in each environment.
+- A read-only deploy key for the five source repos.
+- PuppetDB package inventory enabled (`package_inventory_enabled` on agents)
+  and network/auth access to the PuppetDB endpoints; until then the deb
+  source reports itself unavailable on the status page.
+
+## Development
+
+```
+tox            # unit tests and lint
+tox -e pep8    # lint only
+tox -e frontend  # build the SPA (needs npm)
+```
+
+Releases use [reno](https://docs.openstack.org/reno/) for release notes.
+Contributions go through gerrit; use conventional commits and `git commit -s`.

frisch-0.1.1/README.md

@@ -0,0 +1,75 @@
+# frisch
+
+Deployment version visibility for the Nectar Research Cloud.
+
+Nectar services are deployed three ways: ArgoCD applications on kubernetes,
+docker containers on puppet-managed VMs, and debian packages on VMs and bare
+metal, each in a test and a prod environment (test is upgraded first). frisch
+collects the deployed version of every service in both environments, records
+when each environment changed to that version, and serves a dashboard that
+shows the version matrix and per-service history, making promotion lag from
+test to prod visible at a glance.
+
+## How it works
+
+```
+collectors -> Observation -> ingest (single writer) -> MariaDB -> API -> SPA
+```
+
+Three collectors, one normalised record:
+
+- **argocd** (git-declared): walks the history of the per-environment
+  ArgoCD apps repos, parsing each Application CRD's
+  `spec.source.targetRevision` (and `spec.sources` for multi-source apps).
+  Change dates are exact git commit times; the full history is backfillable.
+- **puppet** (git-declared): walks the puppet site repos (one per
+  environment) and the shared `hieradata` repo, scanning hiera
+  `*::image_tag` keys and their
+  `# renovate:` annotations. Also exact, backfillable.
+- **deb** (live): queries the PuppetDB package inventory in each environment
+  for configured package names/patterns. Package versions are not in git, so
+  frisch's own records are the only durable history; change times are
+  intervals ("changed between X and Y"), bounded by the collection interval.
+
+Versions are opaque strings everywhere -- they are never compared or ordered,
+only equality-checked and timestamped.
+
+## Running
+
+```
+pip install -e '.[test]'
+frisch db upgrade                       # create/upgrade the schema
+frisch-collect --backfill               # first run: full git history
+frisch-collect                          # incremental (the CronJob entry point)
+frisch-web                              # serve the dashboard on :8080
+frisch show matrix                      # the same table, in a terminal
+```
+
+Configuration is layered: `FRISCH_*` environment variables over a YAML config
+file (`--config`, `FRISCH_CONFIG`, `~/.config/frisch/frisch.yaml` or
+`/etc/frisch/frisch.yaml`) over defaults. See `etc/frisch.yaml.sample`.
+For local development, point the repo urls at your existing checkouts and use
+the default SQLite database.
+
+The SPA lives in `frontend/` (vite + React); `npm run dev` proxies `/api` to a
+locally running `frisch-web`. In the container image the built bundle is
+served by the backend.
+
+## Deployment prerequisites
+
+- A database and user on the MariaDB cluster in each environment.
+- A read-only deploy key for the five source repos.
+- PuppetDB package inventory enabled (`package_inventory_enabled` on agents)
+  and network/auth access to the PuppetDB endpoints; until then the deb
+  source reports itself unavailable on the status page.
+
+## Development
+
+```
+tox            # unit tests and lint
+tox -e pep8    # lint only
+tox -e frontend  # build the SPA (needs npm)
+```
+
+Releases use [reno](https://docs.openstack.org/reno/) for release notes.
+Contributions go through gerrit; use conventional commits and `git commit -s`.

frisch-0.1.1/alembic.ini

@@ -0,0 +1,39 @@
+# Dev convenience for running `alembic` directly; `frisch db upgrade` builds
+# this configuration programmatically and takes the URL from frisch config.
+[alembic]
+script_location = frisch/migrations
+sqlalchemy.url = sqlite:///.dev/frisch.db
+
+[loggers]
+keys = root,sqlalchemy,alembic
+
+[handlers]
+keys = console
+
+[formatters]
+keys = generic
+
+[logger_root]
+level = WARNING
+handlers = console
+qualname =
+
+[logger_sqlalchemy]
+level = WARNING
+handlers =
+qualname = sqlalchemy.engine
+
+[logger_alembic]
+level = INFO
+handlers =
+qualname = alembic
+
+[handler_console]
+class = StreamHandler
+args = (sys.stderr,)
+level = NOTSET
+formatter = generic
+
+[formatter_generic]
+format = %(levelname)-5.5s [%(name)s] %(message)s
+datefmt = %H:%M:%S

frisch-0.1.1/compose.yaml

@@ -0,0 +1,60 @@
+# Local dev / demo: MariaDB + web + a looping collector -- the docker-compose
+# analogue of the k8s web Deployment + collector CronJob + MariaDB cluster.
+#
+#   docker compose up --build
+#   open http://localhost:8080
+#
+# The collector reads the repos configured in etc/frisch.yaml.sample; for a
+# local demo, bind-mount your checkouts and point a config copy at them, e.g.
+# uncomment the volumes below and set the repo urls to /repos/<name>.
+services:
+  db:
+    image: mariadb:10.11
+    environment:
+      MARIADB_DATABASE: frisch
+      MARIADB_USER: frisch
+      MARIADB_PASSWORD: frisch
+      MARIADB_RANDOM_ROOT_PASSWORD: '1'
+    healthcheck:
+      test: ['CMD', 'healthcheck.sh', '--connect', '--innodb_initialized']
+      interval: 5s
+      timeout: 5s
+      retries: 12
+
+  web:
+    build:
+      context: .
+      args:
+        VERSION: '${VERSION:-0.0.0}'
+    command: ['frisch-web', '--host', '0.0.0.0', '--port', '8080']
+    environment: &env
+      FRISCH_CONFIG: /etc/frisch/frisch.yaml
+      FRISCH_DATABASE_URL: mysql+pymysql://frisch:frisch@db/frisch?charset=utf8mb4
+    volumes:
+      - ./etc/frisch.yaml.sample:/etc/frisch/frisch.yaml:ro
+      # - ~/src/argo-apps-test:/repos/argo-apps-test:ro
+      # - ~/src/argo-apps-prod:/repos/argo-apps-prod:ro
+    ports:
+      - '8080:8080'
+    depends_on:
+      db:
+        condition: service_healthy
+
+  collector:
+    build:
+      context: .
+      args:
+        VERSION: '${VERSION:-0.0.0}'
+    command: ['frisch-collect', '--interval', '300']
+    environment: *env
+    volumes:
+      - ./etc/frisch.yaml.sample:/etc/frisch/frisch.yaml:ro
+      - git-cache:/var/cache/frisch/git
+      # - ~/src/argo-apps-test:/repos/argo-apps-test:ro
+      # - ~/src/argo-apps-prod:/repos/argo-apps-prod:ro
+    depends_on:
+      db:
+        condition: service_healthy
+
+volumes:
+  git-cache: