bvandeusen
a7a281cb11
First-party plugins (host_agent, http, snmp, traefik, unifi, docker) are now tracked under plugins/ and baked into the image, so they version atomically with core — ending the cross-repo import drift the roundtable->steward rename exposed. History for these files is preserved in the archived Roundtable-plugins repo. Plugin discovery becomes multi-root: PLUGIN_DIR (single) -> PLUGIN_DIRS (bundled first, then external) + PLUGIN_INSTALL_DIR. Bundled ships in the image; third-party plugins still mount at runtime into the external root (STEWARD_PLUGIN_DIR, default /data/plugins) and downloads/installs land there. Bundled shadows external on a name collision. - config.py: load_bootstrap returns plugin_dirs + plugin_install_dir - app.py: iterate PLUGIN_DIRS at the migration + load sites - migration_runner.py: discover_all_in() unions every plugin root - plugin_manager.py: resolve_plugin_path() (pure, first-root-wins); load / install / hot-reload span all roots; installs target the external root - settings/routes.py: _discover_plugins scans all roots, dedup bundled-first - Dockerfile: COPY plugins/ ; docker-compose: drop host bind, document external - tests/test_plugin_dirs.py: resolution, multi-root discovery, bootstrap split Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
106 lines
3.2 KiB
Python
106 lines
3.2 KiB
Python
# plugins/http/checker.py
|
|
"""Core HTTP check logic — runs a single monitor check and returns a result dict."""
|
|
from __future__ import annotations
|
|
import asyncio
|
|
import json
|
|
import logging
|
|
import ssl
|
|
import time
|
|
from datetime import datetime, timezone
|
|
from urllib.parse import urlparse
|
|
|
|
import httpx
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
async def _get_tls_expiry(hostname: str, port: int) -> datetime | None:
|
|
"""Attempt a bare TLS handshake to extract the certificate expiry date."""
|
|
ctx = ssl.create_default_context()
|
|
try:
|
|
reader, writer = await asyncio.wait_for(
|
|
asyncio.open_connection(hostname, port, ssl=ctx),
|
|
timeout=5.0,
|
|
)
|
|
cert = writer.get_extra_info("ssl_object").getpeercert()
|
|
writer.close()
|
|
try:
|
|
await writer.wait_closed()
|
|
except Exception:
|
|
pass
|
|
exp_str = cert.get("notAfter", "")
|
|
if not exp_str:
|
|
return None
|
|
# Format: "Mar 22 12:00:00 2027 GMT"
|
|
return datetime.strptime(exp_str, "%b %d %H:%M:%S %Y %Z").replace(
|
|
tzinfo=timezone.utc
|
|
)
|
|
except Exception as exc:
|
|
logger.debug("TLS check failed for %s:%d — %s", hostname, port, exc)
|
|
return None
|
|
|
|
|
|
async def run_check(
|
|
url: str,
|
|
method: str = "GET",
|
|
expected_status: int = 200,
|
|
content_match: str = "",
|
|
headers: dict | None = None,
|
|
timeout_seconds: int = 10,
|
|
follow_redirects: bool = True,
|
|
verify_ssl: bool = True,
|
|
) -> dict:
|
|
"""
|
|
Perform one HTTP check. Returns a dict with:
|
|
is_up, status_code, response_ms, content_matched, error_msg, tls_expires_at
|
|
"""
|
|
result: dict = {
|
|
"is_up": False,
|
|
"status_code": None,
|
|
"response_ms": None,
|
|
"content_matched": None,
|
|
"error_msg": None,
|
|
"tls_expires_at": None,
|
|
}
|
|
|
|
parsed = urlparse(url)
|
|
is_https = parsed.scheme.lower() == "https"
|
|
|
|
t0 = time.monotonic()
|
|
try:
|
|
async with httpx.AsyncClient(
|
|
follow_redirects=follow_redirects,
|
|
verify=verify_ssl,
|
|
timeout=timeout_seconds,
|
|
) as client:
|
|
response = await client.request(
|
|
method,
|
|
url,
|
|
headers=headers or {},
|
|
)
|
|
result["response_ms"] = round((time.monotonic() - t0) * 1000, 1)
|
|
result["status_code"] = response.status_code
|
|
|
|
status_ok = response.status_code == expected_status
|
|
if content_match:
|
|
matched = content_match in response.text
|
|
result["content_matched"] = matched
|
|
result["is_up"] = status_ok and matched
|
|
else:
|
|
result["is_up"] = status_ok
|
|
|
|
except httpx.TimeoutException:
|
|
result["response_ms"] = round((time.monotonic() - t0) * 1000, 1)
|
|
result["error_msg"] = "Timeout"
|
|
except httpx.ConnectError as exc:
|
|
result["error_msg"] = f"Connection error: {exc}"
|
|
except Exception as exc:
|
|
result["error_msg"] = str(exc)[:512]
|
|
|
|
# TLS expiry — only for HTTPS, and only when the check succeeded or we got a response
|
|
if is_https and result["status_code"] is not None:
|
|
port = parsed.port or 443
|
|
result["tls_expires_at"] = await _get_tls_expiry(parsed.hostname, port)
|
|
|
|
return result
|