feat: master/agent phase 4 — registry polling and version history (#9) #23

2026-10-13T07:02:26Z

shcizo commented

2026-10-13 07:02:26 +00:00

Summary

Version history: new image_versions table fed by the webhook (tag, no digest), registry polling and the agents' running inventory (well-formed sha256 digests only; a bare image is recorded as latest).
Registry polling: the master sends one HEAD per distinct followed repo:tag every POLL_INTERVAL (default 6h) via go-containerregistry, with credentials from DOCKER_CONFIG. A new digest becomes the available suggestion; auto services get a job. Registry-controlled text never reaches last_poll_error (status + error codes, or a fixed text per error class).
Version picker and rollback: the Service page lists the 10 most recent versions with a Deploy action (by version id, repo checked server-side). The agent deploys digest-pinned refs as is (protocol 3; v2 agents fail such jobs with a clear message). A rollback of an auto service stays until the registry shows a digest the tag was never deployed at (last_tag_digest).
Overview badges "follows no tag" and "poll failed"; README, CLAUDE.md, spec (Docker Hub HEAD verified) and phase 4 plan updated.

Closes #9

Test plan

gofmt, go vet ./..., go test ./..., go test -race on agent, master and e2e
Store integration tests against Postgres 16
UI verified in a browser (overview badges, polling row, versions table, Deploy POST with CSRF and version id, 390px)
Migration 0004 applies on the server database
New push of a followed tag shows "update available" (source poll) within one cycle
Auto service gets exactly one poll job; rollback pick holds across cycles; a newer push moves it forward
Private image with bad credentials shows "poll failed" with only registry answered 401 Unauthorized

## Summary - **Version history:** new `image_versions` table fed by the webhook (tag, no digest), registry polling and the agents' running inventory (well-formed `sha256` digests only; a bare image is recorded as `latest`). - **Registry polling:** the master sends one HEAD per distinct followed `repo:tag` every `POLL_INTERVAL` (default 6h) via go-containerregistry, with credentials from `DOCKER_CONFIG`. A new digest becomes the available suggestion; auto services get a job. Registry-controlled text never reaches `last_poll_error` (status + error codes, or a fixed text per error class). - **Version picker and rollback:** the Service page lists the 10 most recent versions with a Deploy action (by version id, repo checked server-side). The agent deploys digest-pinned refs as is (protocol 3; v2 agents fail such jobs with a clear message). A rollback of an auto service stays until the registry shows a digest the tag was never deployed at (`last_tag_digest`). - Overview badges "follows no tag" and "poll failed"; README, CLAUDE.md, spec (Docker Hub HEAD verified) and phase 4 plan updated. Closes #9 ## Test plan - [x] `gofmt`, `go vet ./...`, `go test ./...`, `go test -race` on agent, master and e2e - [x] Store integration tests against Postgres 16 - [x] UI verified in a browser (overview badges, polling row, versions table, Deploy POST with CSRF and version id, 390px) - [ ] Migration 0004 applies on the server database - [ ] New push of a followed tag shows "update available" (source poll) within one cycle - [ ] Auto service gets exactly one poll job; rollback pick holds across cycles; a newer push moves it forward - [ ] Private image with bad credentials shows "poll failed" with only `registry answered 401 Unauthorized`

shcizo added 14 commits 2026-10-13 07:02:27 +00:00

feat(master): record image versions and track poll suggestions in the store (#9 ) af61f17dee

feat(master,agent): deploy digest-pinned refs and route them to protocol 3 agents (#9 ) d0726ca992

feat(master): registry digest lookup and polling loop (#9 ) c6ea2d3710

feat(master): POLL_INTERVAL, poller wiring and version picker in the UI (#9 ) 2390b6151e

test(e2e): pick a pinned version and poll an auto service end to end (#9 ) 687e411052

docs: registry polling, version history and phase 4 plan (#9 ) 2e87d98012

fix(master): say why a pinned pick fails on a protocol 2 agent (#9 ) 92e7646221

fix(master): drop registry response bodies from poll errors (#9 ) f169eddc4c

fix(master): keep rollbacks of auto services until a new digest (#9 ) 7e4b927293

Adds services.last_auto_digest so the poller starts one automatic update per
registry digest, and re-reads the service before starting it. Also records a
bare image's running version as tag latest, only records well-formed
digests, and shows a digest-less version unless a digest row of its tag was
first seen at or after it.

fix(deploy): make the registry credentials mount of the master stack opt-in (#9 ) e2f71521bb

refactor: tidy poller, web test helper and GoDoc line widths (#9 ) 73ac8f613e

docs: auto rollbacks, bare image as latest and registry request scope (#9 ) 53a2a23f1b

fix(master): remember the tag's deployed digest after any tag job (#9 ) 3166874433

Renames last_auto_digest to last_tag_digest. FinishJob sets it to the pinned
digest after any successful job whose to_ref had no digest, so a rollback
holds however the update was started.

fix(master): seed the tag digest from running services and hide registry error text (#9 ) 8fe75b2cbf

shcizo merged commit 1664e47183 into main

2026-10-13 07:02:38 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: shcizo/package-updater#23