New version

Author: APapafragkakis

.github/workflows/cd.yml

@@ -12,9 +12,6 @@ env:
   K8S_NAMESPACE: devops-platform
 
 jobs:
-  # -------------------------------------------------------
-  # Job 1: Deploy to Staging
-  # -------------------------------------------------------
   deploy-staging:
     name: Deploy to Staging
     runs-on: ubuntu-latest
@@ -65,11 +62,8 @@ jobs:
             echo "Smoke test failed — /health returned HTTP $STATUS"
             exit 1
           fi
-          echo "Smoke test passed ✅"
+          echo "Smoke test passed"
 
-  # -------------------------------------------------------
-  # Job 2: Deploy to Production (requires manual approval)
-  # -------------------------------------------------------
   deploy-production:
     name: Deploy to Production
     runs-on: ubuntu-latest
@@ -119,18 +113,18 @@ jobs:
             kubectl rollout undo deployment/devops-platform -n ${{ env.K8S_NAMESPACE }}
             exit 1
           fi
-          echo "Production smoke test passed ✅"
+          echo "Production smoke test passed"
 
       - name: Notify on success
         if: success()
         run: |
-          echo "🚀 Deployed ${{ steps.vars.outputs.IMAGE_TAG }} to production successfully"
+          echo "Deployed ${{ steps.vars.outputs.IMAGE_TAG }} to production successfully"
           # Add Slack/Discord webhook here if needed
-          # curl -X POST ${{ secrets.SLACK_WEBHOOK }} -d '{"text":"Deployed to prod ✅"}'
+          # curl -X POST ${{ secrets.SLACK_WEBHOOK }} -d '{"text":"Deployed to prod successfully"}'
 
       - name: Rollback on failure
         if: failure()
         run: |
-          echo "❌ Deployment failed — rolling back"
+          echo "Deployment failed"
           kubectl rollout undo deployment/devops-platform -n ${{ env.K8S_NAMESPACE }}
 

Makefile

@@ -1,54 +1,48 @@
 .PHONY: help up down build logs test lint clean ps shell migrate
 
-# Default target
-help: ## Show this help
-	@grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | \
-		awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-18s\033[0m %s\n", $$1, $$2}'
+help:
+    @grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | \
+        awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-18s\033[0m %s\n", $$1, $$2}'
 
-# ── Docker ──────────────────────────────────────────────────────────────────
-up: ## Start all services (detached)
-	docker compose up -d --build
+up:
+    docker compose up -d --build
 
-down: ## Stop all services
-	docker compose down
+down:
+    docker compose down
 
-build: ## Build app image only
-	docker compose build app
+build:
+    docker compose build app
 
-logs: ## Follow app logs
-	docker compose logs -f app
+logs:
+    docker compose logs -f app
 
-ps: ## Show running containers
-	docker compose ps
+ps:
+    docker compose ps
 
-shell: ## Open shell in running app container
-	docker compose exec app sh
+shell:
+    docker compose exec app sh
 
-# ── Database ─────────────────────────────────────────────────────────────────
-migrate: ## Run Alembic migrations
-	docker compose exec app alembic upgrade head
+migrate:
+    docker compose exec app alembic upgrade head
 
-migration: ## Create a new migration (usage: make migration msg="add users table")
-	docker compose exec app alembic revision --autogenerate -m "$(msg)"
+migration:
+    docker compose exec app alembic revision --autogenerate -m "$(msg)"
 
-rollback: ## Roll back last migration
-	docker compose exec app alembic downgrade -1
+rollback:
+    docker compose exec app alembic downgrade -1
 
-# ── Testing ───────────────────────────────────────────────────────────────────
-test: ## Run tests with coverage
-	cd app && pytest tests/ -v --cov=. --cov-report=term-missing
+test:
+    cd app && pytest tests/ -v --cov=. --cov-report=term-missing
 
-lint: ## Run flake8 linter
-	flake8 app/ --max-line-length=100 --exclude=app/tests,app/migrations
+lint:
+    flake8 app/ --max-line-length=100 --exclude=app/tests,app/migrations
 
-# ── Ops ───────────────────────────────────────────────────────────────────────
-health: ## Check API health
-	curl -s http://localhost:8000/health | python3 -m json.tool
+health:
+    curl -s http://localhost:8000/health | python3 -m json.tool
 
-metrics: ## Show Prometheus metrics (first 20 lines)
-	curl -s http://localhost:9090/metrics 2>/dev/null | head -20 || \
-		curl -s http://localhost:8000/metrics | head -20
-
-clean: ## Remove volumes and containers
-	docker compose down -v --remove-orphans
+metrics:
+    curl -s http://localhost:9090/metrics 2>/dev/null | head -20 || \
+        curl -s http://localhost:8000/metrics | head -20
 
+clean:
+    docker compose down -v --remove-orphans

app/alembic.ini

@@ -1,119 +1,19 @@
-# A generic, single database configuration.
+
 
 [alembic]
-# path to migration scripts.
-# this is typically a path given in POSIX (e.g. forward slashes)
-# format, relative to the token %(here)s which refers to the location of this
-# ini file
+
 script_location = %(here)s/migrations
 
-# template used to generate migration file names; The default value is %%(rev)s_%%(slug)s
-# Uncomment the line below if you want the files to be prepended with date and time
-# see https://alembic.sqlalchemy.org/en/latest/tutorial.html#editing-the-ini-file
-# for all available tokens
-# file_template = %%(year)d_%%(month).2d_%%(day).2d_%%(hour).2d%%(minute).2d-%%(rev)s_%%(slug)s
-# Or organize into date-based subdirectories (requires recursive_version_locations = true)
-# file_template = %%(year)d/%%(month).2d/%%(day).2d_%%(hour).2d%%(minute).2d_%%(second).2d_%%(rev)s_%%(slug)s
-
-# sys.path path, will be prepended to sys.path if present.
-# defaults to the current working directory.  for multiple paths, the path separator
-# is defined by "path_separator" below.
 prepend_sys_path = .
 
-
-# timezone to use when rendering the date within the migration file
-# as well as the filename.
-# If specified, requires the tzdata library which can be installed by adding
-# `alembic[tz]` to the pip requirements.
-# string value is passed to ZoneInfo()
-# leave blank for localtime
-# timezone =
-
-# max length of characters to apply to the "slug" field
-# truncate_slug_length = 40
-
-# set to 'true' to run the environment during
-# the 'revision' command, regardless of autogenerate
-# revision_environment = false
-
-# set to 'true' to allow .pyc and .pyo files without
-# a source .py file to be detected as revisions in the
-# versions/ directory
-# sourceless = false
-
-# version location specification; This defaults
-# to <script_location>/versions.  When using multiple version
-# directories, initial revisions must be specified with --version-path.
-# The path separator used here should be the separator specified by "path_separator"
-# below.
-# version_locations = %(here)s/bar:%(here)s/bat:%(here)s/alembic/versions
-
-# path_separator; This indicates what character is used to split lists of file
-# paths, including version_locations and prepend_sys_path within configparser
-# files such as alembic.ini.
-# The default rendered in new alembic.ini files is "os", which uses os.pathsep
-# to provide os-dependent path splitting.
-#
-# Note that in order to support legacy alembic.ini files, this default does NOT
-# take place if path_separator is not present in alembic.ini.  If this
-# option is omitted entirely, fallback logic is as follows:
-#
-# 1. Parsing of the version_locations option falls back to using the legacy
-#    "version_path_separator" key, which if absent then falls back to the legacy
-#    behavior of splitting on spaces and/or commas.
-# 2. Parsing of the prepend_sys_path option falls back to the legacy
-#    behavior of splitting on spaces, commas, or colons.
-#
-# Valid values for path_separator are:
-#
-# path_separator = :
-# path_separator = ;
-# path_separator = space
-# path_separator = newline
-#
-# Use os.pathsep. Default configuration used for new projects.
 path_separator = os
 
-# set to 'true' to search source files recursively
-# in each "version_locations" directory
-# new in Alembic version 1.10
-# recursive_version_locations = false
-
-# the output encoding used when revision files
-# are written from script.py.mako
-# output_encoding = utf-8
-
-# database URL.  This is consumed by the user-maintained env.py script only.
-# other means of configuring database URLs may be customized within the env.py
-# file.
 sqlalchemy.url = postgresql://devops:devops@localhost:5432/devopsdb
 
 
 [post_write_hooks]
-# post_write_hooks defines scripts or Python functions that are run
-# on newly generated revision scripts.  See the documentation for further
-# detail and examples
-
-# format using "black" - use the console_scripts runner, against the "black" entrypoint
-# hooks = black
-# black.type = console_scripts
-# black.entrypoint = black
-# black.options = -l 79 REVISION_SCRIPT_FILENAME
-
-# lint with attempts to fix using "ruff" - use the module runner, against the "ruff" module
-# hooks = ruff
-# ruff.type = module
-# ruff.module = ruff
-# ruff.options = check --fix REVISION_SCRIPT_FILENAME
-
-# Alternatively, use the exec runner to execute a binary found on your PATH
-# hooks = ruff
-# ruff.type = exec
-# ruff.executable = ruff
-# ruff.options = check --fix REVISION_SCRIPT_FILENAME
-
-# Logging configuration.  This is also consumed by the user-maintained
-# env.py script only.
+
+
 [loggers]
 keys = root,sqlalchemy,alembic
 

app/main.py

@@ -61,7 +61,6 @@ def get_db():
         db.close()
 
 
-# ── Health ────────────────────────────────────────────────────────────────────
 @app.get("/health", tags=["ops"])
 def health_check(db: Session = Depends(get_db)):
     db_ok = True
@@ -86,7 +85,6 @@ def health_check(db: Session = Depends(get_db)):
     }
 
 
-# ── Auth ──────────────────────────────────────────────────────────────────────
 @app.post("/auth/register", response_model=schemas.UserOut, status_code=201, tags=["auth"])
 def register(user: schemas.UserCreate, db: Session = Depends(get_db)):
     if crud.get_user_by_username(db, user.username):
@@ -111,7 +109,6 @@ def login(form_data: OAuth2PasswordRequestForm = Depends(), db: Session = Depend
     return {"access_token": token, "token_type": "bearer"}
 
 
-# ── Items (protected) ─────────────────────────────────────────────────────────
 ITEMS_CACHE_KEY = "items:all"
 
 
@@ -162,4 +159,3 @@ def delete_item(
         raise HTTPException(status_code=404, detail="item not found")
     cache_delete(ITEMS_CACHE_KEY)
     logger.info("item deleted", extra={"item_id": item_id})
-

app/migrations/env.py

@@ -4,15 +4,13 @@
 from sqlalchemy import engine_from_config, pool
 from alembic import context
 
-# Import your models so Alembic can detect schema changes
 import sys
 sys.path.insert(0, os.path.dirname(os.path.dirname(__file__)))
 import models  # noqa: F401
 from database import Base
 
 config = context.config
 
-# Override sqlalchemy.url with environment variable if set
 db_url = os.getenv("DATABASE_URL", config.get_main_option("sqlalchemy.url"))
 config.set_main_option("sqlalchemy.url", db_url)
 

app/schemas.py

@@ -20,7 +20,6 @@ class Item(ItemBase):
     created_at: datetime
 
 
-# Auth schemas
 class UserCreate(BaseModel):
     username: str
     password: str

app/tests/test_main.py

@@ -57,14 +57,12 @@ def auth_headers(token=None):
     return {"Authorization": f"Bearer {token or get_token()}"}
 
 
-# ── Health ────────────────────────────────────────────────────────────────────
 def test_health_check():
     r = client.get("/health")
     assert r.status_code == 200
     assert r.json()["status"] == "healthy"
 
 
-# ── Auth ──────────────────────────────────────────────────────────────────────
 def test_register():
     r = client.post("/auth/register", json={"username": "alice", "password": "secret"})
     assert r.status_code == 201
@@ -90,7 +88,6 @@ def test_login_wrong_password():
     assert r.status_code == 401
 
 
-# ── Items ─────────────────────────────────────────────────────────────────────
 def test_items_require_auth():
     r = client.get("/items")
     assert r.status_code == 401

k8s/service-ingress-hpa.yaml

@@ -1,5 +1,4 @@
 ---
-# Service — internal load balancer for the pods
 apiVersion: v1
 kind: Service
 metadata:
@@ -18,7 +17,7 @@ spec:
   type: ClusterIP
 
 ---
-# Ingress — exposes the service to the outside world via Nginx
+
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -46,7 +45,6 @@ spec:
                   number: 80
 
 ---
-# HPA — auto-scales pods based on CPU usage
 apiVersion: autoscaling/v2
 kind: HorizontalPodAutoscaler
 metadata:
@@ -74,9 +72,6 @@ spec:
           averageUtilization: 80
 
 ---
-# Secret template — in real usage, populate via CI/CD or Vault
-# kubectl create secret generic devops-platform-secrets \
-#   --from-literal=DATABASE_URL="postgresql://..." -n devops-platform
 apiVersion: v1
 kind: Secret
 metadata:

load-tests/smoke.js

@@ -16,7 +16,6 @@ export const options = {
 const BASE_URL = __ENV.BASE_URL || "http://localhost:8000";
 
 export function setup() {
-  // register a test user and get a token
   const reg = http.post(`${BASE_URL}/auth/register`, JSON.stringify({
     username: "loadtest_user",
     password: "loadtest_pass",
@@ -35,16 +34,13 @@ export default function (data) {
     Authorization: `Bearer ${data.token}`,
     "Content-Type": "application/json",
   };
-
-  // health check (no auth needed)
   const health = http.get(`${BASE_URL}/health`);
   check(health, { "health 200": (r) => r.status === 200 });
 
-  // list items
   const list = http.get(`${BASE_URL}/items`, { headers });
   check(list, { "items 200": (r) => r.status === 200 });
 
-  // create item
+
   const create = http.post(`${BASE_URL}/items`,
     JSON.stringify({ name: `item-${Date.now()}`, description: "load test" }),
     { headers }