fd0f4a0365
6d224861 came from a --no-checkout worktree whose empty index made the
commit drop every file except two. This restores 05b50d2b's full tree and
correctly adds stacks/stem95su/gdrive-sync.tf + the service-catalog stem95su
entry. Forward-only (parent=6d224861, no force-push); [ci skip] since the
live infra was never applied from the broken commit.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
68 lines
2.3 KiB
Python
68 lines
2.3 KiB
Python
#!/usr/bin/env python3
|
|
"""Tiny HTTP server that exposes /api/snapshot, gated by a bearer token.
|
|
|
|
Runs as a sidecar in the chrome-service pod. Reads the persisted storage
|
|
state written hourly by the snapshot-harvester CronJob and returns it to
|
|
authenticated callers (the dev-box `playwright-snapshot-refresh` timer).
|
|
|
|
Token is read from the PW_TOKEN env var, same secret the legacy WS path
|
|
used. The endpoint is mounted behind Traefik on `chrome.viktorbarzin.me`
|
|
at the `/api/snapshot` path (auth=none at the ingress; the bearer check
|
|
is here).
|
|
"""
|
|
|
|
import os
|
|
import sys
|
|
from http.server import HTTPServer, BaseHTTPRequestHandler
|
|
|
|
TOKEN = os.environ.get("PW_TOKEN")
|
|
SNAPSHOT_PATH = os.environ.get(
|
|
"SNAPSHOT_PATH", "/profile/snapshots/storage-state.json"
|
|
)
|
|
PORT = int(os.environ.get("PORT", "8088"))
|
|
|
|
|
|
class Handler(BaseHTTPRequestHandler):
|
|
server_version = "chrome-snapshot/1"
|
|
|
|
def _short(self, status: int, body: bytes = b"") -> None:
|
|
self.send_response(status)
|
|
self.send_header("Content-Length", str(len(body)))
|
|
self.end_headers()
|
|
if body:
|
|
self.wfile.write(body)
|
|
|
|
def do_GET(self):
|
|
if self.path == "/healthz":
|
|
self._short(200, b"ok\n")
|
|
return
|
|
if self.path != "/api/snapshot":
|
|
self._short(404)
|
|
return
|
|
if TOKEN is None:
|
|
self._short(503, b"{\"error\":\"token not configured\"}\n")
|
|
return
|
|
if self.headers.get("Authorization", "") != f"Bearer {TOKEN}":
|
|
self._short(401, b"{\"error\":\"invalid bearer\"}\n")
|
|
return
|
|
try:
|
|
with open(SNAPSHOT_PATH, "rb") as f:
|
|
data = f.read()
|
|
except FileNotFoundError:
|
|
self._short(404, b"{\"error\":\"snapshot not yet available\"}\n")
|
|
return
|
|
self.send_response(200)
|
|
self.send_header("Content-Type", "application/json")
|
|
self.send_header("Cache-Control", "no-cache")
|
|
self.send_header("Content-Length", str(len(data)))
|
|
self.end_headers()
|
|
self.wfile.write(data)
|
|
|
|
def log_message(self, fmt, *args):
|
|
sys.stderr.write(
|
|
"[snapshot-server] %s - %s\n" % (self.address_string(), fmt % args)
|
|
)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
HTTPServer(("0.0.0.0", PORT), Handler).serve_forever()
|