mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbach
de95a95c65
svc-ai-mcp-adapter declares its own probe - http_status on /health,
rendered through container_healthcheck - but the four roles that run it
write their sidecar block inline and dropped both halves. Without a
probe docker calls the container up while the process lives, which says
nothing about whether it answers.
CI named only baserow, because the rule skips a service the inventory
does not deploy and the other three have MCP off there. They carry the
same defect, so all four get the declaration.
The check cannot run locally at all: it sweeps every declared image
through the GHCR mirror, whose prefix only CI writes, so it skips here
by design. make quality-high was green and could not have been anything
else.
e3e81e816f made services.yml the place a probe is declared; the sidecars
were added afterwards and never picked it up.
57 lines
2.7 KiB
Django/Jinja
57 lines
2.7 KiB
Django/Jinja
{% include 'roles/sys-svc-compose/templates/base.yml.j2' %}
|
|
{% set service_name = 'jenkins' %}
|
|
{{ service_name }}:
|
|
{{ lookup('template', 'roles/sys-svc-container/templates/build.yml.j2') | indent(4) }}
|
|
args:
|
|
JENKINS_IMAGE: "{{ JENKINS_IMAGE }}"
|
|
JENKINS_VERSION: "{{ JENKINS_VERSION }}"
|
|
{{ lookup('container_image', application_id, 'jenkins') }}
|
|
{{ lookup('compose_only', 'container_name', JENKINS_CONTAINER) }}
|
|
{% include 'roles/sys-svc-container/templates/base.yml.j2' %}
|
|
environment:
|
|
JAVA_OPTS: "-Djenkins.install.runSetupWizard=false"
|
|
CASC_JENKINS_CONFIG: {{ lookup('volume', 'web-app-jenkins', 'casc').target }}
|
|
{% if JENKINS_MCP_ENABLED | bool %}
|
|
JENKINS_MCP_TOKEN_FILE: "{{ JENKINS_MCP_TOKEN_FILE }}"
|
|
JENKINS_MCP_TOKEN_NAME: "{{ JENKINS_MCP_TOKEN_NAME }}"
|
|
JENKINS_MCP_USERNAME: "{{ JENKINS_MCP_USERNAME }}"
|
|
{% endif %}
|
|
{{ lookup('container_ports', ['jenkins', 'http', DOCKER_BIND_HOST]) | indent(4) }}
|
|
{{ lookup('container_volumes', service_name) | indent(4) }}
|
|
{{ lookup('container_healthcheck', service_name) | indent(4) }}
|
|
{{ lookup('container_networks') | indent(4) }}
|
|
|
|
{% if JENKINS_MCP_ENABLED | bool %}
|
|
{% set service_name = 'jenkinsmcp' %}
|
|
{% set docker_compose_env = [JENKINS_MCP_INSTANCE_DIR, 'upstream.env'] | path_join %}
|
|
{{ service_name }}:
|
|
{% include 'roles/sys-svc-container/templates/base.yml.j2' %}
|
|
{{ lookup('container_image', application_id, 'jenkinsmcp') }}
|
|
build:
|
|
context: {{ JENKINS_MCP_INSTANCE_DIR }}
|
|
dockerfile: Dockerfile
|
|
args:
|
|
MCP_ADAPTER_BASE_IMAGE: {{ lookup('config', application_id, 'services.jenkinsmcp.image') }}
|
|
MCP_ADAPTER_BASE_VERSION: "{{ lookup('config', application_id, 'services.jenkinsmcp.version') }}"
|
|
{{ lookup('compose_only', 'container_name', JENKINS_MCP_CONTAINER) }}
|
|
read_only: true
|
|
cap_drop:
|
|
- ALL
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
environment:
|
|
ADAPTER_CONTRACT: {{ JENKINS_MCP_CONTRACT | to_json | to_json | replace('$', '$$') }}
|
|
ADAPTER_BEARER: {{ JENKINS_MCP_BEARER | to_json }}
|
|
ADAPTER_PORT: "{{ JENKINS_MCP_PORT }}"
|
|
ADAPTER_UPSTREAM_AUTH_HEADER: {{ JENKINS_MCP_UPSTREAM_AUTH_HEADER | to_json }}
|
|
ADAPTER_UPSTREAM_AUTH_FORMAT: {{ JENKINS_MCP_UPSTREAM_AUTH_FORMAT | to_json }}
|
|
expose:
|
|
- "{{ JENKINS_MCP_PORT }}"
|
|
{{ lookup('container_healthcheck', 'jenkinsmcp') | indent(4) }}
|
|
{{ lookup('container_networks', own_network_only=True, provider_self_alias=False) | indent(4) }}
|
|
{{ lookup('depends_on', {'jenkins': 'service_healthy'}) }}
|
|
{% endif %}
|
|
|
|
{{ lookup('compose_volumes') }}
|
|
{{ lookup('compose_networks') }}
|