feat: deploy to k8s

Author: uditkarode

.dockerignore

@@ -0,0 +1,4 @@
+.git
+.github
+target
+*.md

.github/workflows/deploy.yml

@@ -0,0 +1,71 @@
+name: Deploy Previewer
+
+on:
+  push:
+    branches: [master, main]
+  workflow_dispatch:
+
+env:
+  REGISTRY_PROJECT: batbin
+  IMAGE_NAME: previewer
+  IMAGE_TAG: ${{ github.sha }}
+
+jobs:
+  build-and-deploy:
+    name: Build and Deploy
+    runs-on: ubuntu-latest
+    
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Connect to Tailscale
+        uses: tailscale/github-action@v2
+        with:
+          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
+          oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
+          tags: tag:ci
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ secrets.REGISTRY_URL }}
+          username: ${{ secrets.REGISTRY_USERNAME }}
+          password: ${{ secrets.REGISTRY_PASSWORD }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: |
+            ${{ secrets.REGISTRY_URL }}/${{ env.REGISTRY_PROJECT }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}
+            ${{ secrets.REGISTRY_URL }}/${{ env.REGISTRY_PROJECT }}/${{ env.IMAGE_NAME }}:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Set up kubeconfig
+        run: |
+          mkdir -p ~/.kube
+          echo "${{ secrets.KUBECONFIG }}" > ~/.kube/config
+          chmod 600 ~/.kube/config
+
+      - name: Update deployment image
+        run: |
+          sed -i 's|image: previewer:latest|image: ${{ secrets.REGISTRY_URL }}/${{ env.REGISTRY_PROJECT }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}|g' deploy/previewer.yaml
+
+      - name: Deploy to Kubernetes
+        run: |
+          kubectl apply -f deploy/previewer.yaml
+          
+      - name: Wait for deployment rollout
+        run: |
+          kubectl -n batbin rollout status deployment/batbin-previewer --timeout=120s
+
+      - name: Show deployment status
+        if: always()
+        run: |
+          kubectl -n batbin get pods -l app=batbin-previewer

Cargo.toml

@@ -14,6 +14,7 @@ conv = "0.3.3"
 once_cell = "1.7"
 syntect = { version = "4.4", default_features = false, features = ["assets", "dump-load", "regex-fancy", "parsing"] }
 futures = "0.3"
+reqwest = { version = "0.11", features = ["rustls-tls"], default-features = false }
 
 [profile.release]
 opt-level = 3

Dockerfile

@@ -0,0 +1,52 @@
+# Build stage
+FROM rust:1.75-slim AS builder
+
+WORKDIR /app
+
+# Install dependencies
+RUN apt-get update && apt-get install -y \
+    pkg-config \
+    libssl-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy manifests
+COPY Cargo.toml Cargo.lock ./
+
+# Create dummy src to cache dependencies
+RUN mkdir -p src assets && echo "fn main() {}" > src/main.rs
+RUN cargo build --release || true
+RUN rm -rf src
+
+# Copy actual source
+COPY src ./src
+COPY assets ./assets
+COPY TwoDark.tmTheme ./TwoDark.tmTheme
+COPY editor.png ./editor.png
+
+# Build release
+RUN cargo build --release
+
+# Runtime stage
+FROM debian:bookworm-slim
+
+RUN apt-get update && apt-get install -y \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+# Copy binary
+COPY --from=builder /app/target/release/previewer_batbin /app/previewer
+
+# Copy assets
+RUN mkdir -p /data
+COPY --from=builder /app/TwoDark.tmTheme /data/TwoDark.tmTheme
+COPY --from=builder /app/editor.png /data/editor.png
+
+# Environment variables
+ENV PASTE_API_URL=https://api-umbra.batbin.me
+
+EXPOSE 3030
+
+ENTRYPOINT ["/app/previewer"]
+CMD ["/data"]

deploy/previewer.yaml

@@ -0,0 +1,79 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: batbin-previewer
+  namespace: batbin
+  labels:
+    app: batbin-previewer
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: batbin-previewer
+  template:
+    metadata:
+      labels:
+        app: batbin-previewer
+    spec:
+      containers:
+        - name: previewer
+          image: previewer:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: PASTE_API_URL
+              value: "http://batbin.batbin.svc.cluster.local"
+          ports:
+            - containerPort: 3030
+              name: http
+          resources:
+            requests:
+              memory: "128Mi"
+              cpu: "50m"
+            limits:
+              memory: "512Mi"
+              cpu: "500m"
+          livenessProbe:
+            tcpSocket:
+              port: 3030
+            initialDelaySeconds: 10
+            periodSeconds: 10
+          readinessProbe:
+            tcpSocket:
+              port: 3030
+            initialDelaySeconds: 5
+            periodSeconds: 5
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: batbin-previewer
+  namespace: batbin
+spec:
+  selector:
+    app: batbin-previewer
+  ports:
+    - name: http
+      port: 80
+      targetPort: 3030
+  type: ClusterIP
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: batbin-previewer
+  namespace: batbin
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: web
+spec:
+  ingressClassName: traefik
+  rules:
+    - host: preview-umbra.batbin.me
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: batbin-previewer
+                port:
+                  number: 80

src/app.rs

@@ -3,26 +3,28 @@ use image::{ImageBuffer, Rgba};
 use syntect::parsing::SyntaxSet;
 use syntect::highlighting::{Theme, ThemeSet};
 use std::path::Path;
-use syntect::dumps::{from_binary};
-
+use syntect::dumps::from_binary;
+use reqwest::Client;
 
 pub struct AppState {
-    pub pastes: String,
+    pub api_url: String,
     pub base_img: ImageBuffer<Rgba<u8>, Vec<u8>>,
     pub font: Font<'static>,
     pub syntaxes: SyntaxSet,
     pub highlight_theme: Theme,
+    pub http_client: Client,
 }
 
 impl AppState {
-    pub fn new(pastes: String, base_img: ImageBuffer<Rgba<u8>, Vec<u8>>, font: Font<'static>) -> Self {
-        let theme_path = format!("{}/{}", &pastes, "TwoDark.tmTheme");
+    pub fn new(api_url: String, assets_path: String, base_img: ImageBuffer<Rgba<u8>, Vec<u8>>, font: Font<'static>) -> Self {
+        let theme_path = format!("{}/{}", &assets_path, "TwoDark.tmTheme");
         Self {
-            pastes,
+            api_url,
             base_img,
             font,
             syntaxes: from_binary::<SyntaxSet>(include_bytes!("../assets/syntaxes.bin")),
-            highlight_theme: ThemeSet::get_theme(Path::new(&theme_path)).unwrap_or_else(|_| panic!("Couldn't load the TwoDark theme!"))
+            highlight_theme: ThemeSet::get_theme(Path::new(&theme_path)).unwrap_or_else(|_| panic!("Couldn't load the TwoDark theme!")),
+            http_client: Client::new(),
         }
     }
 }

src/handlers/mod.rs

@@ -1,16 +1,36 @@
 use crate::{app::AppState, syntax};
 use tokio::task;
-use tokio::fs;
-
 
 async fn get_preview(state: &'static AppState, uuid: String, ext: Option<String>) -> Result<impl warp::Reply, warp::Rejection> {
-    let f = format!("{}/{}", &state.pastes, uuid);
-    let code = fs::read_to_string(f).await.map_err(|_| warp::reject())?;
+    // Fetch paste content from API
+    let url = format!("{}/api/v2/paste/{}", &state.api_url, uuid);
+    
+    let response = state.http_client
+        .get(&url)
+        .send()
+        .await
+        .map_err(|e| {
+            eprintln!("Failed to fetch paste {}: {}", uuid, e);
+            warp::reject()
+        })?;
+    
+    if !response.status().is_success() {
+        eprintln!("API returned {} for paste {}", response.status(), uuid);
+        return Err(warp::reject());
+    }
+    
+    let code = response
+        .text()
+        .await
+        .map_err(|e| {
+            eprintln!("Failed to read response body for {}: {}", uuid, e);
+            warp::reject()
+        })?;
 
     let rendered = task::spawn_blocking(move || -> Result<Vec<u8>, warp::Rejection> {
         let res = syntax::render_preview(state, &code, ext);
         return if let Err(e) = res {
-            eprintln!("err while trying to fetch preview for {}: {}", uuid, e);
+            eprintln!("err while trying to render preview for {}: {}", uuid, e);
             Err(warp::reject())
         } else {
             Ok(res.unwrap())

src/main.rs

@@ -13,24 +13,30 @@ use std::env;
 
 #[tokio::main]
 async fn main() {
-    let arg = if env::args().count() == 2 {
+    // Get API URL from environment or use default
+    let api_url = env::var("PASTE_API_URL")
+        .unwrap_or_else(|_| "https://api-umbra.batbin.me".to_string());
+    
+    // Get assets path from command line or use default
+    let assets_path = if env::args().count() >= 2 {
         env::args().nth(1).unwrap()
     } else {
-        panic!("Absolute path of pastes directory *without* trailing slash was not passed!")
+        "/data".to_string()
     };
 
     let mut png_header = HeaderMap::new();
     png_header.insert("Content-type", HeaderValue::from_static("image/png"));
 
-    let image = image::open(format!("{}/{}", arg, "editor.png"))
+    let image = image::open(format!("{}/{}", &assets_path, "editor.png"))
                         .expect("ERR No template image found at provided path")
                         .to_rgba8();
 
     let font: Font<'static> = Font::try_from_bytes(include_bytes!("FiraCode-Retina.ttf") as &[u8]).unwrap();
 
-    utils::init_state(arg, image, font);
+    utils::init_state(api_url.clone(), assets_path, image, font);
 
     println!("Starting warp server on port 3030");
+    println!("Using paste API: {}", api_url);
 
     let p = warp::path("p");
     let ap = utils::with_state()
@@ -44,6 +50,6 @@ async fn main() {
                         .and_then(handlers::root_handler_known);
 
     warp::serve(p.and(ap).or(pk.and(apk)).with(warp::reply::with::headers(png_header)))
-        .run(([127, 0, 0, 1], 3030))
+        .run(([0, 0, 0, 0], 3030))
         .await;
 }

src/utils.rs

@@ -18,9 +18,9 @@ fn init_space_width(font: &Font<'static>) {
     SPACE_WIDTH.set(width).ok().expect("INVALID INIT STATE!!");
 }
 
-pub fn init_state(pastes: String, base_img: ImageBuffer<Rgba<u8>, Vec<u8>>, font: Font<'static>) {
+pub fn init_state(api_url: String, assets_path: String, base_img: ImageBuffer<Rgba<u8>, Vec<u8>>, font: Font<'static>) {
     init_space_width(&font);
-    STATE.set(AppState::new(pastes, base_img, font)).ok().expect("INVALID INIT STATE!!");
+    STATE.set(AppState::new(api_url, assets_path, base_img, font)).ok().expect("INVALID INIT STATE!!");
 }
 
 pub fn space_width() -> i32 {