feat: zero-idle gite runners infra

2026-08-27 12:34:23 +00:00
parent 56c033a541
commit c5026d3e9d
14 changed files with 1491 additions and 4 deletions
@@ -0,0 +1,77 @@
+#!/bin/dash
+# Log helper for gitea-runner-controller.
+# Verbosity via GCR_LOG env: "<level>[;<ns>=<level>]..." e.g. "info;alloc=debug".
+
+MAGENTA='\033[0;35m'
+BLUE='\033[0;34m'
+GREEN='\033[0;32m'
+CYAN='\033[0;36m'
+YELLOW='\033[0;33m'
+RED='\033[0;31m'
+WHITE='\033[0;37m'
+NC='\033[0m'
+
+gcr_log_enabled() {
+    level="$1"
+    ns="${2:-core}"
+    conf="${GCR_LOG:-info}"
+    ns_level=""
+    default_level=""
+    oldIFS="$IFS"
+    IFS=';'
+    for pair in $conf; do
+        case "$pair" in
+            *=*) ns_name="${pair%%=*}"; ns_level="${pair#*=}"
+                 [ "$ns_name" = "$ns" ] && { IFS="$oldIFS"; echo "$ns_level"; return 0; } ;;
+            *)   default_level="$pair" ;;
+        esac
+    done
+    IFS="$oldIFS"
+    echo "${default_level:-info}"
+}
+
+gcr_log_level_rank() {
+    case "$1" in
+        trace)  echo 0 ;;
+        debug)  echo 1 ;;
+        info)   echo 2 ;;
+        notice) echo 3 ;;
+        warn)   echo 4 ;;
+        error)  echo 5 ;;
+        panic)  echo 6 ;;
+        *)      echo 7 ;;
+    esac
+}
+
+gcr_log() {
+    level="$1"; shift
+    ns="core"
+    case "$1" in
+        --ns=*) ns="${1#--ns=}"; shift ;;
+    esac
+
+    want="$(gcr_log_enabled "$level" "$ns")"
+    [ "$(gcr_log_level_rank "$level")" -ge "$(gcr_log_level_rank "$want")" ] || return 0
+
+    ts="$(date -u '+%Y-%m-%dT%H:%M:%SZ')"
+    msg="$1"
+    case "$level" in
+        trace)  color="$WHITE"   ;;
+        debug)  color="$BLUE"    ;;
+        info)   color="$GREEN"   ;;
+        notice) color="$CYAN"    ;;
+        warn)   color="$YELLOW"  ;;
+        error)  color="$RED"     ;;
+        panic)  color="$MAGENTA" ;;
+        *)      color="$WHITE"   ;;
+    esac
+    printf '%b\n' "${color}${ts} ${level}[${ns}]${NC} $msg" >&2
+}
+
+# Security: keep credential values out of logs; keys containing TOKEN/SECRET
+# and Authorization token headers are rewritten to <redacted>.
+gcr_redact() {
+    sed -E \
+        -e 's/([A-Za-z0-9_]*(TOKEN|SECRET)[A-Za-z0-9_]*)(=|: ?"?)[^ "]+/\1\3<redacted>/g' \
+        -e 's/(Authorization: *token )[^ ]+/\1<redacted>/g'
+}