William Gill
12bf35caf8
Greenfield Go multi-tenant IPFS Pinning Service wire-compatible with the
IPFS Pinning Services API spec. Paired 1:1 with Kubo over localhost RPC,
clustered via embedded NATS JetStream, Postgres source-of-truth with
RLS-enforced tenancy, Fiber + huma v2 for the HTTP surface, Authentik
OIDC for session login with kid-rotated HS256 JWT API tokens.
Feature-complete against the 22-milestone build plan, including the
ship-it v1.0 gap items:
* admin CLIs: drain/uncordon, maintenance, mint-token, rotate-key,
prune-denylist, rebalance --dry-run, cache-stats, cluster-presences
* TTL leader election via NATS KV, fence tokens, JetStream dedup
* rebalancer (plan/apply split), reconciler, requeue sweeper
* ristretto caches with NATS-backed cross-node invalidation
(placements live-nodes + token denylist)
* maintenance watchdog for stuck cluster-pause flag
* Prometheus /metrics with CIDR ACL, HTTP/pin/scheduler/cache gauges
* rate limiting: session (10/min) + anonymous global (120/min)
* integration tests: rebalance, refcount multi-org, RLS belt
* goreleaser (tar + deb/rpm/apk + Alpine Docker) targeting Gitea
Stack: Cobra/Viper, Fiber v2 + huma v2, embedded NATS JetStream,
pgx/sqlc/golang-migrate, ristretto, TypeID, prometheus/client_golang,
testcontainers-go.
101 lines
3.0 KiB
Go
101 lines
3.0 KiB
Go
package cmd
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/spf13/cobra"
|
|
|
|
"anchorage/internal/pkg/config"
|
|
"anchorage/internal/pkg/store/postgres"
|
|
)
|
|
|
|
// newMigrateCmd groups schema-migration subcommands under `anchorage migrate`.
|
|
func newMigrateCmd(flags *globalFlags) *cobra.Command {
|
|
migrate := &cobra.Command{
|
|
Use: "migrate",
|
|
Short: "Manage the anchorage Postgres schema",
|
|
}
|
|
migrate.AddCommand(newMigrateUpCmd(flags))
|
|
migrate.AddCommand(newMigrateDownCmd(flags))
|
|
migrate.AddCommand(newMigrateStatusCmd(flags))
|
|
return migrate
|
|
}
|
|
|
|
func newMigrateUpCmd(flags *globalFlags) *cobra.Command {
|
|
return &cobra.Command{
|
|
Use: "up",
|
|
Short: "Apply all pending migrations",
|
|
Args: cobra.NoArgs,
|
|
RunE: func(cmd *cobra.Command, _ []string) error {
|
|
cfg, err := loadConfigForMigrate(flags)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if err := postgres.MigrateDSN(cmd.Context(), cfg.Postgres.DSN, postgres.MigrateUp, postgres.MigrateOptions{}); err != nil {
|
|
return fmt.Errorf("migrate up: %w", err)
|
|
}
|
|
fmt.Fprintln(cmd.OutOrStdout(), "migrate: up OK")
|
|
return nil
|
|
},
|
|
}
|
|
}
|
|
|
|
func newMigrateDownCmd(flags *globalFlags) *cobra.Command {
|
|
var yes bool
|
|
c := &cobra.Command{
|
|
Use: "down",
|
|
Short: "Revert every applied migration (destructive; dev/test only)",
|
|
Args: cobra.NoArgs,
|
|
RunE: func(cmd *cobra.Command, _ []string) error {
|
|
if !yes {
|
|
return fmt.Errorf("refusing to run destructive migration; pass --yes to confirm")
|
|
}
|
|
cfg, err := loadConfigForMigrate(flags)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if err := postgres.MigrateDSN(cmd.Context(), cfg.Postgres.DSN, postgres.MigrateDown, postgres.MigrateOptions{}); err != nil {
|
|
return fmt.Errorf("migrate down: %w", err)
|
|
}
|
|
fmt.Fprintln(cmd.OutOrStdout(), "migrate: down OK")
|
|
return nil
|
|
},
|
|
}
|
|
c.Flags().BoolVar(&yes, "yes", false, "confirm that you understand this drops the whole schema")
|
|
return c
|
|
}
|
|
|
|
func newMigrateStatusCmd(flags *globalFlags) *cobra.Command {
|
|
return &cobra.Command{
|
|
Use: "status",
|
|
Short: "Print the currently-applied migration version",
|
|
Args: cobra.NoArgs,
|
|
RunE: func(cmd *cobra.Command, _ []string) error {
|
|
cfg, err := loadConfigForMigrate(flags)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
v, dirty, err := postgres.MigrationVersion(cmd.Context(), cfg.Postgres.DSN)
|
|
if err != nil {
|
|
return fmt.Errorf("read migration version: %w", err)
|
|
}
|
|
fmt.Fprintf(cmd.OutOrStdout(), "migrate: version=%d dirty=%v\n", v, dirty)
|
|
return nil
|
|
},
|
|
}
|
|
}
|
|
|
|
// loadConfigForMigrate loads the config with AllowMissing=true (so --config
|
|
// being absent is fine if the DSN comes from env) but rejects the run if
|
|
// there's still no DSN.
|
|
func loadConfigForMigrate(flags *globalFlags) (*config.Config, error) {
|
|
cfg, err := config.Load(config.LoadOptions{Path: flags.configPath, AllowMissing: true})
|
|
if err != nil {
|
|
return nil, fmt.Errorf("load config: %w", err)
|
|
}
|
|
if cfg.Postgres.DSN == "" {
|
|
return nil, fmt.Errorf("postgres.dsn is required (config file or ANCHORAGE_POSTGRES_DSN)")
|
|
}
|
|
return cfg, nil
|
|
}
|