69 lines
4.0 KiB
Go
69 lines
4.0 KiB
Go
package updater
|
|
|
|
import "felis.lolicon.best/internal/updates"
|
|
|
|
// sourceKind is how a component's latest upstream version is discovered.
|
|
type sourceKind int
|
|
|
|
const (
|
|
sourceNone sourceKind = iota // pinned components are never queried
|
|
sourceGitHub // GitHub Releases (Coord = "owner/repo")
|
|
sourcePaperMC // PaperMC Fill v3 (Coord = project id)
|
|
sourceTemurin // adoptium/temurin<feature>-binaries, feature from Current
|
|
sourcePostgres // postgresql.org/versions.json, within Current's major
|
|
)
|
|
|
|
// Spec is one platform component's static update policy plus how to find its latest
|
|
// upstream version. Current is deliberately NOT here — it is gathered at runtime
|
|
// (integration: an image tag, `k3s --version`, a jar manifest) and combined with the
|
|
// Spec to form an updates.Component. The topology is the pure, testable expression of
|
|
// the user's stated decisions: what Felis keeps current, and how aggressively.
|
|
type Spec struct {
|
|
Name string
|
|
Policy updates.Policy
|
|
Manageable bool
|
|
Source sourceKind
|
|
// Coord is the source-specific coordinate: "owner/repo" for GitHub, the project
|
|
// id for PaperMC, empty for pinned components.
|
|
Coord string
|
|
}
|
|
|
|
// Topology returns the fixed platform components Felis tracks, each with the update
|
|
// policy the user set. The two user red lines shape every entry: "不要强制自动更新"
|
|
// (nothing is force-upgraded — the strongest policy is Scheduled, gated on a
|
|
// SysAdmin window) and "能不动的就别动" (Minecraft is always pinned).
|
|
//
|
|
// - felis-api — the control plane Felis ships. Felis MANAGES it (image bump +
|
|
// rollout), so Scheduled: applied only inside a SysAdmin-set window, else notify.
|
|
// - k3s — the single node the whole platform runs on. Upgrading it is
|
|
// high-blast-radius, so Notify only and NOT manageable: Felis reads its latest to
|
|
// tell the SysAdmin but never applies it; a human drives the node upgrade.
|
|
// - cloudflared — the edge tunnel binary + service Felis manages, so Scheduled.
|
|
// - velocity — the proxy, but off-cluster on an admin-operated macvlan host, so
|
|
// NOT manageable: even under a schedule it can only ever be Notify. Its releases
|
|
// come from PaperMC (Fill v3), not GitHub.
|
|
// - jre — the Temurin runtime Velocity runs on. The installer pins its patch
|
|
// build, so a newer build reaches a host through a Felis release: Notify only.
|
|
// - postgresql — the control-plane database, from the distribution's packages.
|
|
// Notify only; a minor release is a package update, a major one a pg_upgrade.
|
|
//
|
|
// Minecraft is deliberately ABSENT: every MC server is Pinned and is appended to the
|
|
// plan at runtime from the live fleet (integration), never force-tracked here.
|
|
// Keeping Minecraft out of the static topology is the code-level expression of the
|
|
// pin — there is no policy path by which Topology can propose changing it.
|
|
func Topology() []Spec {
|
|
return []Spec{
|
|
// Felis's own release repo, and the same slug deploy/bootstrap.sh clones from
|
|
// (FELIS_REPO_URL). It is PRIVATE today, which is why the github source carries an
|
|
// optional token: unauthenticated, this coord answers 404 — the status GitHub uses
|
|
// to hide a repo's existence — and felis-api is the one tracked component where
|
|
// that happens. k3s and cloudflared are public and need no credential.
|
|
{Name: "felis-api", Policy: updates.PolicyScheduled, Manageable: true, Source: sourceGitHub, Coord: "FelisMC/Felis"},
|
|
{Name: "k3s", Policy: updates.PolicyNotify, Manageable: false, Source: sourceGitHub, Coord: "k3s-io/k3s"},
|
|
{Name: "cloudflared", Policy: updates.PolicyScheduled, Manageable: true, Source: sourceGitHub, Coord: "cloudflare/cloudflared"},
|
|
{Name: "velocity", Policy: updates.PolicyNotify, Manageable: false, Source: sourcePaperMC, Coord: "velocity"},
|
|
{Name: "jre", Policy: updates.PolicyNotify, Manageable: false, Source: sourceTemurin},
|
|
{Name: "postgresql", Policy: updates.PolicyNotify, Manageable: false, Source: sourcePostgres},
|
|
}
|
|
}
|