mirror of
https://github.com/block/buzz.git
synced 2026-10-27 12:40:30 +00:00
42b42447b0
A few things to prepare for deploying the Buzz push gateway as implemented in #6269: - Cut `buzz-push-gateway` chart `0.2.0` from the current config (certificate auth, dogfood client) - Datadog-compatible metrics - Align the desired schema, metrics docs, and production ingress guidance with the current dogfood deployment contract ## Links - [BUZZ-17: Publish the MVP-compatible gateway chart](https://linear.app/squareup/issue/BUZZ-17/publish-the-mvp-compatible-gateway-chart) - [BUZZ-26: Add Datadog-compatible push-gateway metrics and correct source drift](https://linear.app/squareup/issue/BUZZ-26/add-datadog-compatible-push-gateway-metrics-and-correct-source-drift) --------- Signed-off-by: Tom Brow <tomb@block.xyz> Co-authored-by: Codex <noreply@openai.com>
51 lines
2.3 KiB
Bash
Executable File
51 lines
2.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
env -u GEM_HOME -u GEM_PATH -u RUBYLIB -u RUBYOPT ruby -ryaml <<'RUBY'
|
|
auto_text = File.read('.github/workflows/auto-tag-on-release-pr-merge.yml')
|
|
publish_text = File.read('.github/workflows/push-gateway-helm-chart.yml')
|
|
deployment_text = File.read('docs/push-gateway-deployment.md')
|
|
chart = YAML.load_file('deploy/charts/buzz-push-gateway/Chart.yaml')
|
|
# Parse first, then pin the tag producer and consumer strings whose agreement
|
|
# makes this a reachable lane rather than an orphan publisher.
|
|
YAML.load(auto_text)
|
|
YAML.load(publish_text)
|
|
version = chart.fetch('version').to_s
|
|
raise "gateway chart version is not semver: #{version}" unless version.match?(/\A\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?\z/)
|
|
workspace_package = File.read('Cargo.toml').match(/\[workspace\.package\](.*?)(?=\n\[|\z)/m)
|
|
raise "workspace package metadata is missing" unless workspace_package
|
|
binary_version = workspace_package[1].match(/^version\s*=\s*"([^"]+)"/)&.[](1)
|
|
raise "workspace package version is missing" unless binary_version
|
|
unless chart.fetch('appVersion').to_s == binary_version
|
|
raise "gateway chart appVersion does not match packaged binary #{binary_version}"
|
|
end
|
|
[
|
|
'push-chart-release/*)',
|
|
'VERSION="${BRANCH#push-chart-release/}"',
|
|
'TAG_PREFIX="push-chart-v"',
|
|
'- name: Create and push tag',
|
|
'TAG: ${{ steps.release.outputs.tag }}',
|
|
'refs/tags/$TAG',
|
|
'-f sha="$TARGET_SHA"',
|
|
].each do |needle|
|
|
raise "missing auto-tag gateway chart contract: #{needle}" unless auto_text.include?(needle)
|
|
end
|
|
[
|
|
'tags: ["push-chart-v[0-9]*"]',
|
|
'version="${INPUT_VERSION:-${REF_NAME#push-chart-v}}"',
|
|
'refs/tags/push-chart-v${version}^{commit}',
|
|
'deploy/charts/buzz-push-gateway',
|
|
].each do |needle|
|
|
raise "missing gateway chart publisher contract: #{needle}" unless publish_text.include?(needle)
|
|
end
|
|
[
|
|
'inspect and fetch the published chart version',
|
|
'helm show chart oci://ghcr.io/block/buzz/charts/buzz-push-gateway --version X.Y.Z',
|
|
'helm pull oci://ghcr.io/block/buzz/charts/buzz-push-gateway --version X.Y.Z',
|
|
].each do |needle|
|
|
raise "missing gateway chart retrieval guidance: #{needle}" unless deployment_text.include?(needle)
|
|
end
|
|
if deployment_text.include?('verify the immutable chart artifact')
|
|
raise 'gateway chart retrieval guidance overstates authenticity verification'
|
|
end
|
|
RUBY
|