unkin-agent
abc81e60c8
Single Go binary with embedded Bootstrap 3 + jQuery UI, querying logs.raw over the ClickHouse HTTP interface as the readonly logreader user. Runs behind oauth2-proxy; the app does no auth itself. Server-side enforced time bounds (15m default, 72h max), parameterized queries, raw-SQL WHERE fragment wrapped with enforced bounds and LIMIT, tail polling with a clamped cursor, facets, healthz. Woodpecker build/test plus tag-driven image push to artifactapi docker-internal.
46 lines
1.2 KiB
YAML
46 lines
1.2 KiB
YAML
when:
|
|
- event: [pull_request, push]
|
|
|
|
steps:
|
|
- name: test
|
|
image: golang:1.25
|
|
commands:
|
|
- go vet ./...
|
|
- test -z "$(gofmt -l .)"
|
|
- go test -race ./...
|
|
backend_options:
|
|
kubernetes:
|
|
serviceAccountName: default
|
|
resources:
|
|
requests:
|
|
memory: 512Mi
|
|
cpu: 1
|
|
limits:
|
|
memory: 2Gi
|
|
cpu: 2
|
|
|
|
# Validate the image builds without pushing. The CA-baked buildx plugin trusts
|
|
# the internal registry's CA; the plain woodpeckerci plugin fails x509 here.
|
|
- name: build-check
|
|
image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest
|
|
settings:
|
|
repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/logviewer
|
|
dockerfile: Dockerfile
|
|
dry_run: true
|
|
platforms: linux/amd64
|
|
build_args:
|
|
VERSION: ${CI_COMMIT_SHA}
|
|
buildkit_config: |
|
|
[registry."artifactapi.k8s.syd1.au.unkin.net"]
|
|
ca = ["/etc/docker/certs.d/artifactapi.k8s.syd1.au.unkin.net/ca.crt"]
|
|
backend_options:
|
|
kubernetes:
|
|
serviceAccountName: default
|
|
resources:
|
|
requests:
|
|
memory: 1Gi
|
|
cpu: 1
|
|
limits:
|
|
memory: 4Gi
|
|
cpu: 2
|