Add local production infra lab

2026-07-06 12:00:27 +09:00
parent ec261bcbc5
commit fc736aabf1
16 changed files with 623 additions and 23 deletions
@@ -0,0 +1,140 @@
+name: casan-local-prod
+
+services:
+  vault:
+    image: hashicorp/vault:1.15
+    cap_add:
+      - IPC_LOCK
+    environment:
+      VAULT_DEV_ROOT_TOKEN_ID: root
+      VAULT_DEV_LISTEN_ADDRESS: 0.0.0.0:8200
+    ports:
+      - "18200:8200"
+    healthcheck:
+      test: ["CMD", "wget", "-q", "-O", "-", "http://127.0.0.1:8200/v1/sys/health"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  idp:
+    build:
+      context: ./idp
+    environment:
+      CASAN_IDP_PORT: "8080"
+      CASAN_IDP_ISSUER: http://127.0.0.1:18081
+    ports:
+      - "18081:8080"
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/healthz', timeout=2)"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  minio:
+    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
+    command: server /data --console-address ":9001"
+    environment:
+      MINIO_ROOT_USER: casanadmin
+      MINIO_ROOT_PASSWORD: casanadmin123
+      MINIO_BROWSER_REDIRECT_URL: http://127.0.0.1:19091
+    ports:
+      - "19090:9000"
+      - "19091:9001"
+    volumes:
+      - minio-data:/data
+    healthcheck:
+      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:9000/minio/health/live"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  minio-init:
+    image: minio/mc:RELEASE.2025-08-13T08-35-41Z
+    depends_on:
+      minio:
+        condition: service_healthy
+    entrypoint: /bin/sh
+    command:
+      - -c
+      - |
+        set -eu
+        mc alias set local http://minio:9000 casanadmin casanadmin123
+        mc mb --ignore-existing --with-lock local/casan-worm
+        mc retention set --default COMPLIANCE 1d local/casan-worm
+        mc anonymous set none local/casan-worm
+        echo MINIO_WORM_READY bucket=casan-worm mode=COMPLIANCE retention=1d
+
+  minio-mc:
+    image: minio/mc:RELEASE.2025-08-13T08-35-41Z
+    profiles: ["tools"]
+    depends_on:
+      minio:
+        condition: service_healthy
+    entrypoint: /bin/sh
+
+  alert-webhook:
+    build:
+      context: ./mock-http
+    command: ["python", "/app/mock_http.py", "alert"]
+    environment:
+      CASAN_MOCK_PORT: "8080"
+    ports:
+      - "19092:8080"
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/healthz', timeout=2)"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  billing-api:
+    build:
+      context: ./mock-http
+    command: ["python", "/app/mock_http.py", "billing"]
+    environment:
+      CASAN_MOCK_PORT: "8080"
+    ports:
+      - "19093:8080"
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/healthz', timeout=2)"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  dashboard:
+    image: python:3.12-slim
+    working_dir: /workspace
+    command: ["python", ".specify/scripts/bash/dashboard-server.py", "8787"]
+    environment:
+      CASAN_DASHBOARD_BIND: 0.0.0.0
+      CASAN_DASHBOARD_STALE_S: "315360000"
+      CASAN_DASHBOARD_METRICS: /workspace/.specify/logs/cost/metrics.jsonl
+      CASAN_DASHBOARD_HTML: /workspace/docs/output/casan/central-agentops-dashboard.html
+      CASAN_DASHBOARD_ALERTS: /workspace/.specify/agentops/alerts.log
+    volumes:
+      - ../..:/workspace:ro
+    expose:
+      - "8787"
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8787/healthz', timeout=2)"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  dashboard-nginx:
+    image: nginx:1.27-alpine
+    depends_on:
+      dashboard:
+        condition: service_healthy
+    ports:
+      - "18080:80"
+    volumes:
+      - ./nginx/default.conf:/etc/nginx/conf.d/default.conf:ro
+      - ./nginx/htpasswd:/etc/nginx/.htpasswd:ro
+    healthcheck:
+      test: ["CMD", "wget", "-q", "-O", "-", "http://127.0.0.1/healthz"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+volumes:
+  minio-data: