Erich Blume
0439fbb704
## Summary - Migrate devpi PyPI caching proxy from indri LaunchAgent to Kubernetes - Custom container image with devpi-server + devpi-web + auto-init - StatefulSet with 50Gi PVC, Tailscale Ingress at pypi.tail8d86e.ts.net - Remove devpi from ansible playbooks and update CLAUDE.md with k8s workflow ## Key Changes - Add CRI-O registry mirror config for registry.tail8d86e.ts.net - Change ArgoCD apps to manual sync (was auto-sync causing issues) - 2Gi memory limit for Whoosh indexer (reclaimed after startup) ## Deployment and Testing - [x] devpi pod healthy in k8s - [x] pip install through proxy works - [x] mcquack 1.0.0 uploaded and installable - [x] Old devpi stopped on indri ## Post-Merge Reset ArgoCD to main: ``` argocd app set apps --revision main && argocd app sync apps argocd app set devpi --revision main && argocd app sync devpi ``` 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/34
72 lines
1.7 KiB
Markdown
72 lines
1.7 KiB
Markdown
# devpi PyPI Caching Proxy
|
|
|
|
devpi-server running in Kubernetes, providing:
|
|
- PyPI caching proxy at `root/pypi`
|
|
- Private package hosting at `eblume/dev`
|
|
|
|
## Setup
|
|
|
|
### 1. Create the root password secret
|
|
|
|
```fish
|
|
kubectl create namespace devpi
|
|
op inject -i argocd/manifests/devpi/secret-root.yaml.tpl | kubectl apply -f -
|
|
```
|
|
|
|
### 2. Deploy via ArgoCD
|
|
|
|
```fish
|
|
argocd app sync apps
|
|
argocd app sync devpi
|
|
```
|
|
|
|
The container will auto-initialize on first startup using the root password from the secret.
|
|
|
|
### 3. Create user and index (first time only)
|
|
|
|
After the pod is running:
|
|
|
|
```fish
|
|
# Login to devpi as root
|
|
uvx --from devpi-client devpi use https://pypi.tail8d86e.ts.net
|
|
uvx --from devpi-client devpi login root
|
|
# Enter root password when prompted
|
|
|
|
# Create eblume user (prompts for password - use the one from 1Password)
|
|
uvx --from devpi-client devpi user -c eblume email=blume.erich@gmail.com
|
|
|
|
# Create private index inheriting from PyPI
|
|
uvx --from devpi-client devpi index -c eblume/dev bases=root/pypi
|
|
```
|
|
|
|
## Usage
|
|
|
|
### As pip index (caching proxy)
|
|
|
|
Configure `~/.config/pip/pip.conf`:
|
|
|
|
```ini
|
|
[global]
|
|
index-url = https://pypi.tail8d86e.ts.net/root/pypi/+simple/
|
|
trusted-host = pypi.tail8d86e.ts.net
|
|
```
|
|
|
|
### Upload private packages
|
|
|
|
```fish
|
|
cd ~/code/personal/your-package
|
|
uv build
|
|
uv publish --publish-url https://pypi.tail8d86e.ts.net/eblume/dev/
|
|
```
|
|
|
|
## URLs
|
|
|
|
- Web UI: https://pypi.tail8d86e.ts.net
|
|
- PyPI cache: https://pypi.tail8d86e.ts.net/root/pypi/+simple/
|
|
- Private index: https://pypi.tail8d86e.ts.net/eblume/dev/+simple/
|
|
|
|
## Credentials
|
|
|
|
Stored in 1Password vault `blumeops`, item `kyhzfifryqnuk7jeyibmmjvxxm`:
|
|
- `root password` - devpi root user
|
|
- `password` - eblume user password
|