mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
kevinveenbirkenbach
c1a4660a8b
replace env.sh usage with scripts/meta/env/all.sh, add env directory README, and switch purge entity python resolution to scripts/meta/env/python.sh
145 lines
4.5 KiB
Bash
Executable File
145 lines
4.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# scripts/meta/resolve/apps.sh
|
|
set -euo pipefail
|
|
|
|
# Purpose (SRP): Return JSON list of apps based on deployment type,
|
|
# optionally filtered by lifecycle and CI storage constraints.
|
|
#
|
|
# Inputs via env:
|
|
# TEST_DEPLOY_TYPE = server|workstation|universal (required)
|
|
# WHITELIST = optional space-separated list of app ids to keep
|
|
#
|
|
# Output:
|
|
# JSON array to stdout (single line, always valid)
|
|
|
|
: "${TEST_DEPLOY_TYPE:?TEST_DEPLOY_TYPE is required (server|workstation|universal)}"
|
|
|
|
PYTHON="${PYTHON:-python3}"
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
REPO_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)"
|
|
cd "$REPO_ROOT"
|
|
|
|
# ------------------------------------------------------------
|
|
# Load default environment (safe if already loaded via BASH_ENV)
|
|
# ------------------------------------------------------------
|
|
if [[ -f "scripts/meta/env/all.sh" ]]; then
|
|
# shellcheck source=scripts/meta/env/all.sh
|
|
source "scripts/meta/env/all.sh"
|
|
fi
|
|
|
|
# ------------------------------------------------------------
|
|
# Helpers (JSON-only, no text roundtrips)
|
|
# ------------------------------------------------------------
|
|
|
|
json_compact_array() {
|
|
# Read JSON from stdin, ensure it's an array, output compact single-line JSON.
|
|
jq -c 'if type=="array" then . else [] end'
|
|
}
|
|
|
|
jq_exclude_regex() {
|
|
# Args: regex
|
|
# Reads JSON array from stdin, filters out entries matching regex, outputs compact JSON.
|
|
local re="$1"
|
|
if [[ -z "${re}" ]]; then
|
|
json_compact_array
|
|
return 0
|
|
fi
|
|
jq -c --arg re "${re}" 'map(select(test($re) | not))'
|
|
}
|
|
|
|
jq_whitelist_filter() {
|
|
# Args: whitelist (space-separated app ids)
|
|
# Reads JSON array from stdin, keeps only entries in whitelist, outputs compact JSON.
|
|
local wl="${1:-}"
|
|
if [[ -z "${wl// /}" ]]; then
|
|
json_compact_array
|
|
return 0
|
|
fi
|
|
local wl_json
|
|
wl_json="$(printf '%s' "${wl}" | jq -Rc 'split(" ") | map(select(length>0))')"
|
|
jq -c --argjson wl "${wl_json}" 'map(select(. as $a | ($wl | index($a)) != null))'
|
|
}
|
|
|
|
compose_ci_exec() {
|
|
local -a compose_args=(docker compose --env-file env.ci)
|
|
|
|
if [[ -f "env.development" ]]; then
|
|
compose_args+=(--env-file env.development)
|
|
fi
|
|
|
|
compose_args+=(--profile ci exec -T infinito)
|
|
|
|
NIX_CONFIG="${NIX_CONFIG:-}" \
|
|
INFINITO_DISTRO="${INFINITO_DISTRO}" \
|
|
"${compose_args[@]}" "$@"
|
|
}
|
|
|
|
# ------------------------------------------------------------
|
|
# Lifecycle handling (always-on, original set)
|
|
# ------------------------------------------------------------
|
|
lifecycles_args=(--lifecycles alpha beta rc stable)
|
|
|
|
# ------------------------------------------------------------
|
|
# 1) Get JSON list from container (keep as JSON)
|
|
# ------------------------------------------------------------
|
|
apps_json="$(
|
|
compose_ci_exec \
|
|
"${PYTHON}" -m cli.meta.applications.type \
|
|
--format json \
|
|
--type "${TEST_DEPLOY_TYPE}" \
|
|
"${lifecycles_args[@]}" |
|
|
json_compact_array
|
|
)"
|
|
|
|
# ------------------------------------------------------------
|
|
# 2) Global hard excludes (regex over app ids)
|
|
# ------------------------------------------------------------
|
|
apps_json="$(
|
|
printf '%s\n' "${apps_json}" |
|
|
jq_exclude_regex '^(web-opt-rdr-www|web-app-oauth2-proxy)$'
|
|
)"
|
|
|
|
# ------------------------------------------------------------
|
|
# 3) CI storage filter (JSON-only)
|
|
# ------------------------------------------------------------
|
|
if [[ -n "${GITHUB_ACTIONS:-}" && -z "${ACT:-}" ]]; then
|
|
required_storage="60GB"
|
|
|
|
# Extract roles from JSON to pass as args (safe: one per line -> bash array)
|
|
mapfile -t roles < <(printf '%s\n' "${apps_json}" | jq -r '.[]')
|
|
if [[ "${#roles[@]}" -gt 0 ]]; then
|
|
# Warnings pass (best-effort)
|
|
compose_ci_exec \
|
|
"${PYTHON}" -m cli.meta.applications.sufficient_storage \
|
|
--roles "${roles[@]}" \
|
|
--required-storage "${required_storage}" \
|
|
--warnings \
|
|
--format json \
|
|
>/dev/null || true
|
|
|
|
# Real filter (JSON output)
|
|
apps_json="$(
|
|
compose_ci_exec \
|
|
"${PYTHON}" -m cli.meta.applications.sufficient_storage \
|
|
--roles "${roles[@]}" \
|
|
--required-storage "${required_storage}" \
|
|
--format json |
|
|
json_compact_array
|
|
)"
|
|
fi
|
|
fi
|
|
|
|
# ------------------------------------------------------------
|
|
# 3b) Optional whitelist filter (space-separated list of app ids)
|
|
# ------------------------------------------------------------
|
|
apps_json="$(
|
|
printf '%s\n' "${apps_json}" |
|
|
jq_whitelist_filter "${WHITELIST:-}"
|
|
)"
|
|
|
|
# ------------------------------------------------------------
|
|
# 4) Final safety: compact JSON array, single line
|
|
# ------------------------------------------------------------
|
|
printf '%s\n' "${apps_json}" | json_compact_array
|