Haproxy-route-policy add snapcraft.yaml

.github/workflows/test.yaml

@@ -24,3 +24,20 @@ jobs:
       self-hosted-runner-image: "noble"
       working-directory: ${{ matrix.charm.working-directory }}
       with-uv: true
+  build-snap-haproxy-route-policy:
+    name: Build Snap
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          sparse-checkout: haproxy-route-policy
+      - name: Build Snap
+        id: snapcraft
+        uses: snapcore/action-build@v1
+        with:
+          path: haproxy-route-policy
+      - name: Upload Snap Artifact
+        uses: actions/upload-artifact@v5
+        with:
+          name: snap
+          path: ${{ steps.snapcraft.outputs.snap }}

docs/release-notes/artifacts/pr0415.yaml

@@ -0,0 +1,20 @@
+version_schema: 2
+
+changes:
+  - title: Added snap packaging and runtime scripts for haproxy-route-policy
+    author: tphan025
+    type: minor
+    description: >
+      Added snap packaging for the haproxy-route-policy app, including
+      `snap/snapcraft.yaml`, install/configure hooks, and helper scripts to run
+      Gunicorn and Django management commands with snap configuration values.
+      Added Gunicorn as a dependency and configured uv build metadata in
+      `pyproject.toml` for packaging. Updated the app README with a basic setup
+      flow for PostgreSQL and snap configuration.
+    urls:
+      pr:
+        - https://github.com/canonical/haproxy-operator/pull/415
+      related_doc:
+      related_issue:
+    visibility: public
+    highlight: false

haproxy-route-policy/README.md

@@ -0,0 +1,24 @@
+#### Basic setup
+
+Start a PostgreSQL database:
+
+```
+docker run -d --name postgres -p 127.0.0.1:5432:5432 -e POSTGRES_PASSWORD=postgres -e POSTGRES_USERNAME=postgres postgres:latest
+```
+
+Basic snap configurations:
+
+```
+sudo snap set haproxy-route-policy database-password=postgres
+sudo snap set haproxy-route-policy database-host=localhost
+sudo snap set haproxy-route-policy database-port=5432
+sudo snap set haproxy-route-policy database-user=postgres
+sudo snap set haproxy-route-policy database-name=postgres
+```
+
+## Learn more
+* [Read more](https://documentation.ubuntu.com/haproxy-charm/latest/)
+
+## Project and community
+* [Issues](https://github.com/canonical/haproxy-operator/issues)
+* [Matrix](https://matrix.to/#/#charmhub-charmdev:ubuntu.com)

haproxy-route-policy/pyproject.toml

@@ -8,11 +8,20 @@ dependencies = [
     "django>=6.0.3",
     "djangorestframework>=3.16.1",
     "djangorestframework-simplejwt>=5.5.1",
+    "gunicorn>=23.0.0",
     "psycopg2-binary>=2.9.11",
     "validators>=0.35.0",
     "whitenoise>=6.12.0",
 ]
 
+[build-system]
+requires = ["uv_build>=0.7.2,<1"]
+build-backend = "uv_build"
+
+[tool.uv.build-backend]
+module-root = ""
+module-name = ["haproxy_route_policy", "policy"]
+
 [dependency-groups]
 auth = [
     "djangorestframework-simplejwt>=5.5.1",

haproxy-route-policy/snap/hooks/configure

@@ -0,0 +1,57 @@
+#!/bin/sh
+
+# Copyright 2026 Canonical Ltd.
+# See LICENSE file for licensing details.
+
+DJANGO_DEBUG="$(snapctl get debug)"
+export DJANGO_DEBUG
+
+case "$DJANGO_DEBUG" in
+  "true") ;;
+  "false") ;;
+  *)
+    >&2 echo "'$DJANGO_DEBUG is not a supported value for django_debug. Possible values are true, false"
+    return 1
+    ;;
+esac
+
+DJANGO_LOG_LEVEL="$(snapctl get log-level)"
+export DJANGO_LOG_LEVEL
+
+case "$DJANGO_LOG_LEVEL" in
+  "debug") ;;
+  "info") ;;
+  "warning") ;;
+  "error") ;;
+  "critical") ;;
+  "DEBUG") ;;
+  "INFO") ;;
+  "WARNING") ;;
+  "ERROR") ;;
+  "CRITICAL") ;;
+  *)
+    >&2 echo "'$DJANGO_LOG_LEVEL is not a supported value for debug. Possible values are debug, info, warning, error, critical"
+    return 1
+    ;;
+esac
+
+DJANGO_ALLOWED_HOSTS="$(snapctl get allowed-hosts)"
+export DJANGO_ALLOWED_HOSTS
+DJANGO_DATABASE_PASSWORD="$(snapctl get database-password)"
+export DJANGO_DATABASE_PASSWORD
+DJANGO_DATABASE_HOST="$(snapctl get database-host)"
+export DJANGO_DATABASE_HOST
+DJANGO_DATABASE_PORT="$(snapctl get database-port)"
+export DJANGO_DATABASE_PORT
+DJANGO_DATABASE_USER="$(snapctl get database-user)"
+export DJANGO_DATABASE_USER
+DJANGO_DATABASE_NAME="$(snapctl get database-name)"
+export DJANGO_DATABASE_NAME
+
+if [ -z "$DJANGO_DATABASE_HOST" ] || [ -z "$DJANGO_DATABASE_PORT" ] || [ -z "$DJANGO_DATABASE_USER" ] || [ -z "$DJANGO_DATABASE_PASSWORD" ] || [ -z "$DJANGO_DATABASE_NAME" ]; then
+  >&2 echo "One or more database configuration values are missing. Please ensure database-host, database-port, database-user, database-password, and database-name are all set."
+  return 1
+fi
+
+snapctl stop "$SNAP_INSTANCE_NAME"
+snapctl start "$SNAP_INSTANCE_NAME"

haproxy-route-policy/snap/hooks/install

@@ -0,0 +1,13 @@
+#!/bin/sh
+
+# Copyright 2026 Canonical Ltd.
+# See LICENSE file for licensing details.
+
+set -xe
+
+# set default configuration values
+snapctl set debug='false'
+snapctl set log-level='INFO'
+snapctl set allowed-hosts='["localhost", "127.0.0.1"]'
+SECRET_KEY="$(tr -dc a-zA-Z0-9 < /dev/urandom | head -c 50)"
+snapctl set secret-key="$SECRET_KEY"

haproxy-route-policy/snap/scripts/bin/gunicorn-start

@@ -0,0 +1,38 @@
+#!/bin/sh
+
+# Copyright 2026 Canonical Ltd.
+# See LICENSE file for licensing details.
+
+set -xe
+
+DJANGO_SECRET_KEY="$(snapctl get secret-key)"
+export DJANGO_SECRET_KEY
+DJANGO_DEBUG="$(snapctl get debug)"
+export DJANGO_DEBUG
+DJANGO_ALLOWED_HOSTS="$(snapctl get allowed-hosts)"
+export DJANGO_ALLOWED_HOSTS
+DJANGO_LOG_LEVEL="$(snapctl get log-level)"
+export DJANGO_LOG_LEVEL
+DJANGO_DATABASE_PASSWORD="$(snapctl get database-password)"
+export DJANGO_DATABASE_PASSWORD
+DJANGO_DATABASE_HOST="$(snapctl get database-host)"
+export DJANGO_DATABASE_HOST
+DJANGO_DATABASE_PORT="$(snapctl get database-port)"
+export DJANGO_DATABASE_PORT
+DJANGO_DATABASE_USER="$(snapctl get database-user)"
+export DJANGO_DATABASE_USER
+DJANGO_DATABASE_NAME="$(snapctl get database-name)"
+export DJANGO_DATABASE_NAME
+
+LOG_LEVEL="info"
+if [ "$DJANGO_DEBUG" = "true" ]; then
+  LOG_LEVEL="debug"
+fi
+
+if [ -z "$DJANGO_DATABASE_HOST" ] || [ -z "$DJANGO_DATABASE_PORT" ] || [ -z "$DJANGO_DATABASE_USER" ] || [ -z "$DJANGO_DATABASE_PASSWORD" ] || [ -z "$DJANGO_DATABASE_NAME" ]; then
+  >&2 echo "One or more database configuration values are missing. Please ensure database-host, database-port, database-user, database-password, and database-name are all set."
+  return 1
+fi
+
+exec gunicorn --bind 0.0.0.0:8080 haproxy_route_policy.wsgi \
+  --capture-output --log-level="$LOG_LEVEL"

haproxy-route-policy/snap/scripts/bin/manage

@@ -0,0 +1,35 @@
+#!/bin/sh
+
+# Copyright 2026 Canonical Ltd.
+# See LICENSE file for licensing details.
+
+set -e
+
+DJANGO_SECRET_KEY="$(snapctl get secret-key)"
+export DJANGO_SECRET_KEY
+DJANGO_DEBUG="$(snapctl get debug)"
+export DJANGO_DEBUG
+DJANGO_ALLOWED_HOSTS="$(snapctl get allowed-hosts)"
+if [ -z "$DJANGO_ALLOWED_HOSTS" ]; then
+  DJANGO_ALLOWED_HOSTS="[]"
+fi
+export DJANGO_ALLOWED_HOSTS
+DJANGO_LOG_LEVEL="$(snapctl get log-level)"
+export DJANGO_LOG_LEVEL
+DJANGO_DATABASE_PASSWORD="$(snapctl get database-password)"
+export DJANGO_DATABASE_PASSWORD
+DJANGO_DATABASE_HOST="$(snapctl get database-host)"
+export DJANGO_DATABASE_HOST
+DJANGO_DATABASE_PORT="$(snapctl get database-port)"
+export DJANGO_DATABASE_PORT
+DJANGO_DATABASE_USER="$(snapctl get database-user)"
+export DJANGO_DATABASE_USER
+DJANGO_DATABASE_NAME="$(snapctl get database-name)"
+export DJANGO_DATABASE_NAME
+
+if [ -z "$DJANGO_DATABASE_HOST" ] || [ -z "$DJANGO_DATABASE_PORT" ] || [ -z "$DJANGO_DATABASE_USER" ] || [ -z "$DJANGO_DATABASE_PASSWORD" ] || [ -z "$DJANGO_DATABASE_NAME" ]; then
+  >&2 echo "One or more database configuration values are missing. Please ensure database-host, database-port, database-user, database-password, and database-name are all set."
+  return 1
+fi
+
+exec $SNAP/bin/uv run $SNAP/app/manage.py "$@" --settings=haproxy_route_policy.settings

haproxy-route-policy/snap/snapcraft.yaml

@@ -0,0 +1,54 @@
+# Copyright 2026 Canonical Ltd.
+# See LICENSE file for licensing details.
+
+name: haproxy-route-policy
+base: core24
+version: "0.1"
+license: Apache-2.0
+summary: HAProxy Route Policy API
+description: |
+  This snap bundles the HAProxy Route Policy Django application to be included in the haproxy-route-policy-operator.
+confinement: strict
+platforms:
+  amd64:
+    build-on: [amd64]
+    build-for: [amd64]
+
+system-usernames:
+  _daemon_: shared
+
+parts:
+  haproxy-route-policy:
+    plugin: uv
+    source: .
+    build-snaps:
+      - astral-uv
+    stage-snaps:
+      - astral-uv
+    override-build: |
+      # Also copy the source code to the install directory for the manage.py script
+      cp -r . $SNAPCRAFT_PART_INSTALL/app
+      chown -R 584792:584792 $SNAPCRAFT_PART_INSTALL/app
+      craftctl default
+
+  scripts:
+    plugin: dump
+    source: ./snap/scripts
+    override-prime: |
+      craftctl default
+      chmod -R +rx $CRAFT_PRIME/bin
+
+apps:
+  gunicorn:
+    command: bin/gunicorn-start
+    daemon: simple
+    restart-condition: always
+    plugs:
+      - network
+      - network-bind
+
+  manage:
+    command: bin/manage
+    plugs:
+      - network
+      - network-bind