flyemoji
96b3cc901c
internal/updates is a pure, fakes-tested decision core with no production caller, so nothing could produce its "版本号状态" report. Add internal/updater as that caller: - topology: the fixed platform components and their user-set policies (felis-api and cloudflared Scheduled+manageable; k3s Notify, high-blast-radius single node; velocity Notify, off-cluster and unmanageable). Minecraft is pinned by ABSENCE, never force-tracked here, appended from the live fleet at runtime. - PaperMC Fill v3 release source: the v2 API (api.papermc.io) was retired 2026-07-01 and returns HTTP 410, so this targets fill.papermc.io/v3, sends the required non-generic User-Agent, and returns the newest STABLE version, filtering the -SNAPSHOT/rc prereleases the plan would otherwise suppress. Its test fixture is captured from the live v3 response shape (2026-07-04). - RoutingSource: the single ReleaseSource updates.Run requires, dispatching velocity to PaperMC and returning errGitHubNotWired for the GitHub-backed components so they degrade to "latest unknown" honestly, never a fabricated one. - Runner: gather current versions (seam) -> assemble Components -> updates.Run -> Report; report-only when notifier and applier are nil. Verification boundary: the parse/plan/compose logic is unit-tested (httptest + fakes, fixture grounded in the live v3 shape). Live network/TLS/User-Agent enforcement, the GitHub Releases source, the concrete version gatherer, the notifier and applier, and the felis update CLI/CronJob remain integration work, enumerated in doc.go.
58 lines
3.1 KiB
Go
58 lines
3.1 KiB
Go
package updater
|
|
|
|
import "felis.lolicon.best/internal/updates"
|
|
|
|
// sourceKind is how a component's latest upstream version is discovered.
|
|
type sourceKind int
|
|
|
|
const (
|
|
sourceNone sourceKind = iota // pinned components are never queried
|
|
sourceGitHub // GitHub Releases (Coord = "owner/repo")
|
|
sourcePaperMC // PaperMC Fill v3 (Coord = project id)
|
|
)
|
|
|
|
// Spec is one platform component's static update policy plus how to find its latest
|
|
// upstream version. Current is deliberately NOT here — it is gathered at runtime
|
|
// (integration: an image tag, `k3s --version`, a jar manifest) and combined with the
|
|
// Spec to form an updates.Component. The topology is the pure, testable expression of
|
|
// the user's stated decisions: what Felis keeps current, and how aggressively.
|
|
type Spec struct {
|
|
Name string
|
|
Policy updates.Policy
|
|
Manageable bool
|
|
Source sourceKind
|
|
// Coord is the source-specific coordinate: "owner/repo" for GitHub, the project
|
|
// id for PaperMC, empty for pinned components.
|
|
Coord string
|
|
}
|
|
|
|
// Topology returns the fixed platform components Felis tracks, each with the update
|
|
// policy the user set. The two user red lines shape every entry: "不要强制自动更新"
|
|
// (nothing is force-upgraded — the strongest policy is Scheduled, gated on a
|
|
// SysAdmin window) and "能不动的就别动" (Minecraft is always pinned).
|
|
//
|
|
// - felis-api — the control plane Felis ships. Felis MANAGES it (image bump +
|
|
// rollout), so Scheduled: applied only inside a SysAdmin-set window, else notify.
|
|
// - k3s — the single node the whole platform runs on. Upgrading it is
|
|
// high-blast-radius, so Notify only and NOT manageable: Felis reads its latest to
|
|
// tell the SysAdmin but never applies it; a human drives the node upgrade.
|
|
// - cloudflared — the edge tunnel binary + service Felis manages, so Scheduled.
|
|
// - velocity — the proxy, but off-cluster on an admin-operated macvlan host, so
|
|
// NOT manageable: even under a schedule it can only ever be Notify. Its releases
|
|
// come from PaperMC (Fill v3), not GitHub.
|
|
//
|
|
// Minecraft is deliberately ABSENT: every MC server is Pinned and is appended to the
|
|
// plan at runtime from the live fleet (integration), never force-tracked here.
|
|
// Keeping Minecraft out of the static topology is the code-level expression of the
|
|
// pin — there is no policy path by which Topology can propose changing it.
|
|
func Topology() []Spec {
|
|
return []Spec{
|
|
// Coord "felis/felis" is a placeholder for the operator's own release repo; the
|
|
// GitHub source (which would consume it) is not yet wired, so it is inert today.
|
|
{Name: "felis-api", Policy: updates.PolicyScheduled, Manageable: true, Source: sourceGitHub, Coord: "felis/felis"},
|
|
{Name: "k3s", Policy: updates.PolicyNotify, Manageable: false, Source: sourceGitHub, Coord: "k3s-io/k3s"},
|
|
{Name: "cloudflared", Policy: updates.PolicyScheduled, Manageable: true, Source: sourceGitHub, Coord: "cloudflare/cloudflared"},
|
|
{Name: "velocity", Policy: updates.PolicyNotify, Manageable: false, Source: sourcePaperMC, Coord: "velocity"},
|
|
}
|
|
}
|