jochen
f87f4cdfe5
mesh/merge-gate pass: builds baserow, grafana, mailu, matrix, mongodb, mosquitto, nodered, postgres, redis, step-ca, supabase, website → ace, novox; no bus…
mesh/repo-check pass: its merge-check.sh passed
mesh/delivery delivered
mesh/delivery-group group feat/health-the-first-declarations delivered: every member is delivered
Seven modules' images ship a check the mesh never read. Adopted by name where it says healthy on the live mesh today: nine of mail's containers (not its antivirus, whose six-minute start is past the five-minute bound, nor its cache, whose image ships none), the certificate authority, the spreadsheet app, four of the database suite's (the studio among them, with the address it binds fixed), the flow editor and the chat client. And the endpoints four services already declare, looked at from the machine: tcp on the database, the cache, the document store and the broker; http on the website and the dashboards. The count of undeclared falls from 93 to 70.
147 lines
3.0 KiB
JSON
147 lines
3.0 KiB
JSON
{
|
|
"module": "redis",
|
|
"version": "1",
|
|
"provides": [
|
|
{
|
|
"name": "redis-cache",
|
|
"scope": "mesh",
|
|
"identity": {
|
|
"in": "a Redis ACL user and key prefix"
|
|
}
|
|
}
|
|
],
|
|
"requires": [
|
|
"secret"
|
|
],
|
|
"capabilities": [
|
|
"container-runtime"
|
|
],
|
|
"emits": [
|
|
"cache.provisioned",
|
|
"cache.deprovisioned"
|
|
],
|
|
"consumes": [
|
|
"redis.cache.provisioned",
|
|
"redis.cache.deprovisioned"
|
|
],
|
|
"serves": {
|
|
"redis-cache": {
|
|
"port": 6379
|
|
}
|
|
},
|
|
"receives": {
|
|
"redis-cache": "${dir:grants}/mesh.json"
|
|
},
|
|
"grants": {
|
|
"redis-cache": "${dir:grants}"
|
|
},
|
|
"secrets": {
|
|
"secret": "${dir:state}/default.secret"
|
|
},
|
|
"listens": [
|
|
{
|
|
"name": "cache",
|
|
"port": 6379,
|
|
"protocol": "tcp",
|
|
"from": "mesh",
|
|
"why": "modules on any machine that were granted a cache"
|
|
}
|
|
],
|
|
"data": {
|
|
"own": [
|
|
{
|
|
"id": "data",
|
|
"path": "${dir:data}",
|
|
"class": "cache",
|
|
"why": "the cache's own snapshot"
|
|
}
|
|
],
|
|
"consumers": {
|
|
"redis-cache": {
|
|
"class": "cache",
|
|
"why": "a cache: nothing in this mesh requires it, and a consumer that kept data in it would be using a cache as a store"
|
|
}
|
|
}
|
|
},
|
|
"resources": [
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"place": "."
|
|
},
|
|
{
|
|
"id": "grants",
|
|
"type": "directory",
|
|
"mode": "0700"
|
|
},
|
|
{
|
|
"id": "data",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"owner": "999:1000"
|
|
},
|
|
{
|
|
"id": "server-conf",
|
|
"type": "file",
|
|
"path": "${dir:state}/redis.conf",
|
|
"mode": "0600",
|
|
"content": "requirepass ${secret:secret}\nappendonly yes\ndir /data\n",
|
|
"owner": "999:1000"
|
|
},
|
|
{
|
|
"id": "net",
|
|
"type": "network",
|
|
"name": "redis"
|
|
},
|
|
{
|
|
"id": "server",
|
|
"type": "container",
|
|
"name": "redis",
|
|
"image": "redis@sha256:520775a41a63e77e06c73e35d2fd9cc15921a609516818796b4ecbb813078bc7",
|
|
"health": {
|
|
"kind": "tcp",
|
|
"endpoint": "cache"
|
|
},
|
|
"network": "redis",
|
|
"ports": [
|
|
"6379"
|
|
],
|
|
"volumes": [
|
|
"${dir:data}:/data",
|
|
"${dir:state}/redis.conf:/etc/redis/redis.conf:ro"
|
|
],
|
|
"args": [
|
|
"/etc/redis/redis.conf"
|
|
],
|
|
"restart-on": [
|
|
"server-conf"
|
|
]
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "code",
|
|
"kind": "bundle",
|
|
"language": "typescript",
|
|
"entrypoints": [
|
|
"index.js",
|
|
"tools/index.js",
|
|
"provisioner/index.js"
|
|
],
|
|
"loads": [
|
|
"index.js",
|
|
"tools/index.js",
|
|
"provisioner/index.js"
|
|
],
|
|
"env": {
|
|
"MESH_RECEIVES": "${dir:grants}/mesh.json",
|
|
"MESH_PROVISION_REDIS": "127.0.0.1:${port:6379}",
|
|
"MESH_PROVISION_PASSWORD_FILE": "${dir:state}/default.secret"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|