hello-api: platform se scaffold

.trivyignore

@@ -0,0 +1,2 @@
+# Yahan sirf wo CVE daalo jinka business ne risk accept kiya hai.
+# Format: CVE-2024-XXXXX

Dockerfile

@@ -0,0 +1,19 @@
+FROM python:3.12-slim
+
+# Base image purana ho sakta hai. Security updates yahin lagao warna
+# pipeline ka Trivy gate HIGH/CRITICAL par build rok dega.
+RUN apt-get update && apt-get upgrade -y \
+ && apt-get autoremove -y --purge \
+ && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /srv
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+COPY app/ ./app/
+ARG APP_VERSION=dev
+ENV APP_VERSION=${APP_VERSION}
+RUN useradd -r -u 1001 appuser
+USER appuser
+EXPOSE 8000
+HEALTHCHECK --interval=30s --timeout=3s CMD python -c "import urllib.request;urllib.request.urlopen('http://127.0.0.1:8000/health')"
+CMD ["gunicorn", "--bind", "0.0.0.0:8000", "--workers", "2", "app.main:app"]

Jenkinsfile

@@ -0,0 +1,9 @@
+// Poori pipeline devops-platform shared library me hai.
+@Library('devops-platform') _
+
+devopsPipeline(
+    module:       'hello-api',
+    gitops:       true,
+    deployVM:     false,
+    k8sVerifyUrl: 'http://192.168.124.179:30894/version'
+)

app/main.py

@@ -0,0 +1,15 @@
+import os
+from flask import Flask, jsonify
+
+app = Flask(__name__)
+
+
+@app.get("/health")
+def health():
+    return jsonify(status="ok")
+
+
+@app.get("/version")
+def version():
+    # Pipeline ka verify stage isi field ko check karta hai.
+    return jsonify(app="hello-api", version=os.environ.get("APP_VERSION", "dev"))

requirements-dev.txt

@@ -0,0 +1,2 @@
+pytest
+flask

requirements.txt

@@ -0,0 +1,2 @@
+flask
+gunicorn

sonar-project.properties

@@ -0,0 +1,4 @@
+sonar.projectKey=swim-hello-api
+sonar.sources=app
+sonar.tests=tests
+sonar.python.version=3.12

tests/test_app.py

@@ -0,0 +1,11 @@
+from app.main import app
+
+
+def test_health():
+    c = app.test_client()
+    assert c.get("/health").status_code == 200
+
+
+def test_version():
+    c = app.test_client()
+    assert c.get("/version").get_json()["app"] == "hello-api"