Update ht sentry

.craft.yml

@@ -0,0 +1,6 @@
+minVersion: "0.23.1"
+changelogPolicy: auto
+artifactProvider:
+  name: none
+targets:
+  - name: github

.editorconfig

@@ -0,0 +1,16 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_style = space
+insert_final_newline = true
+
+[*.sh]
+indent_size = 2
+
+[*.yml]
+indent_size = 2
+
+[nginx/*.conf]
+indent_style = tab

.env

@@ -0,0 +1,12 @@
+COMPOSE_PROJECT_NAME=sentry_onpremise
+SENTRY_EVENT_RETENTION_DAYS=90
+# You can either use a port number or an IP:PORT combo for SENTRY_BIND
+# See https://docs.docker.com/compose/compose-file/#ports for more
+SENTRY_BIND=9000
+# Set SENTRY_MAIL_HOST to a valid FQDN (host/domain name) to be able to send emails!
+# SENTRY_MAIL_HOST=example.com
+SENTRY_IMAGE=getsentry/sentry:nightly
+SNUBA_IMAGE=getsentry/snuba:nightly
+RELAY_IMAGE=getsentry/relay:nightly
+SYMBOLICATOR_IMAGE=getsentry/symbolicator:nightly
+WAL2JSON_VERSION=latest

.gitattributes

@@ -0,0 +1,5 @@
+/.gitattributes export-ignore
+/.gitignore export-ignore
+/.github export-ignore
+/.editorconfig export-ignore
+/.craft.yml export-ignore

.github/ISSUE_TEMPLATE/bug.yml

@@ -0,0 +1,46 @@
+name: 🐞 Bug Report
+description: Tell us about something that's not working the way we (probably) intend.
+body:
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      placeholder: 21.7.0 ← should look like this (check the footer)
+      description: What version of self-hosted Sentry are you running?
+    validations:
+      required: true
+  - type: textarea
+    id: repro
+    attributes:
+      label: Steps to Reproduce
+      description: How can we see what you're seeing? Specific is terrific.
+      placeholder: |-
+        1. foo
+        2. bar
+        3. baz
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected Result
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual Result
+      description: Logs? Screenshots? Yes, please.
+      placeholder: |-
+        e.g.:
+        - latest install logs: `ls -1 sentry_install_log-*.txt | tail -1 | xargs cat`
+        - `docker-compose logs` output
+    validations:
+      required: true
+  - type: markdown
+    attributes:
+      value: |-
+        ## Thanks 🙏
+        Check our [triage docs](https://open.sentry.io/triage/) for what to expect next.
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Question about self-hosting/on-premise
+    url: https://forum.sentry.io
+    about: Please use the community forums for questions
+  - name: Report a security vulnerability
+    url: https://sentry.io/security/#vulnerability-disclosure
+    about: Please see our guide for responsible disclosure.

.github/ISSUE_TEMPLATE/feature.yml

@@ -0,0 +1,28 @@
+name: 💡 Feature Request
+description: Tell us about a problem our software could solve but doesn't.
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem Statement
+      description: What problem could `onpremise` solve that it doesn't?
+      placeholder: |-
+        I want to make whirled peas, but `onpremise` doesn't blend.
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Solution Brainstorm
+      description: We know you have bright ideas to share ... share away, friend.
+      placeholder: |-
+        Add a blender to `onpremise`.
+    validations:
+      required: false
+  - type: markdown
+    attributes:
+      value: |-
+        ## Thanks 🙏
+        Check our [triage docs](https://open.sentry.io/triage/) for what to expect next.
+    validations:
+      required: false

.github/workflows/issue-routing-helper.yml

@@ -0,0 +1,46 @@
+name: Issue Routing Helper
+on:
+  issues:
+    types: [labeled]
+env:
+  # Use GH_RELEASE_PAT as github-actions bot is not allowed to ping teams
+  GH_TOKEN: ${{ secrets.GH_RELEASE_PAT }}
+  GH_REPO: ${{ github.repository }}
+jobs:
+  route:
+    runs-on: ubuntu-latest
+    if: >-
+      github.event.issue.state == 'open'
+      &&
+      startsWith(github.event.label.name, 'Team: ')
+      &&
+      !contains(github.event.issue.labels.*.name, 'Status: Backlog')
+      &&
+      !contains(github.event.issue.labels.*.name, 'Status: In Progress')
+    steps:
+      - name: "Ensure a single 'Team: *' label with 'Status: Untriaged'"
+        run: |
+          labels_to_remove=$(gh api --paginate "/repos/$GH_REPO/labels" -q '[.[].name | select((startswith("Team: ") or startswith("Status: ")) and . != "${{ github.event.label.name }}" and . != "Status: Untriaged")] | join(",")')
+          gh issue edit ${{ github.event.issue.number }} --remove-label "$labels_to_remove" --add-label '${{ github.event.label.name }},Status: Untriaged'
+      - name: "Mention/ping assigned team for triage"
+        run: |
+          # Get team label mention name:
+          team_label='${{ github.event.label.name }}'
+          team_name="${team_label:6}" # Strip the first 6 chars, which is the 'Team: ' part
+          team_slug="${team_name// /-}" # Replace spaces with hyphens for url/slug friendliness
+          mention_slug=$(gh api "/orgs/getsentry/teams/$team_slug" -q .slug || true)
+
+          if [[ -z "$mention_slug" ]]; then
+            echo "Couldn't find team mention from slug, trying the label description"
+            team_slug=$(gh api "/repos/$GH_REPO/labels/$team_label" -q '.description')
+            mention_slug=$(gh api "/orgs/getsentry/teams/$team_slug" -q .slug || true)
+          fi
+
+          if [[ -n "$mention_slug" ]]; then
+            echo "Routing to @getsentry/$mention_slug for [triage](https://develop.sentry.dev/processing-tickets/#3-triage). ⏲️" > comment_body
+          else
+            echo "[Failed]($GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID) to route to \`${{ github.event.label.name }}\`.  😕" > comment_body
+            echo "" >> comment_body
+            echo "Defaulting to @getsentry/open-source for [triage](https://develop.sentry.dev/processing-tickets/#3-triage). ⏲️" >> comment_body
+          fi
+          gh issue comment ${{ github.event.issue.number }} --body-file comment_body

.github/workflows/issue-status-helper.yml

@@ -0,0 +1,16 @@
+name: Issue Status Helper
+on:
+  issues:
+    types: [labeled]
+jobs:
+  ensure_one_status:
+    runs-on: ubuntu-latest
+    if: "startsWith(github.event.label.name, 'Status: ')"
+    steps:
+      - name: "Ensure a single 'Status: *' label"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_REPO: ${{ github.repository }}
+        run: |
+          labels_to_remove=$(gh api --paginate "/repos/$GH_REPO/labels" -q '[.[].name | select(startswith("Status: ") and . != "${{ github.event.label.name }}")] | join(",")')
+          gh issue edit ${{ github.event.issue.number }} --remove-label "$labels_to_remove" --add-label "${{ github.event.label.name }}"

.github/workflows/lock.yml

@@ -0,0 +1,16 @@
+name: 'Lock closed issues/PRs'
+on:
+  schedule:
+    - cron: '11 3 * * *'
+  workflow_dispatch:
+jobs:
+  lock:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: getsentry/forked-action-lock-threads@master
+        with:
+          github-token: ${{ github.token }}
+          issue-lock-inactive-days: 15
+          issue-lock-reason: ''
+          pr-lock-inactive-days: 15
+          pr-lock-reason: ''

.github/workflows/release.yml

@@ -0,0 +1,32 @@
+name: Release
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: Version to release (optional)
+        required: false
+      force:
+        description: Force a release even when there are release-blockers (optional)
+        required: false
+  schedule:
+    # We want the release to be at 10 or 11am Pacific Time
+    # We also make this an hour after all others such as Sentry,
+    # Snuba, and Relay to make sure their releases finish.
+    - cron: "0 18 15 * *"
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    name: "Release a new version"
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          token: ${{ secrets.GH_RELEASE_PAT }}
+          fetch-depth: 0
+      - name: Prepare release
+        uses: getsentry/action-prepare-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GH_RELEASE_PAT }}
+        with:
+          version: ${{ github.event.inputs.version }}
+          force: ${{ github.event.inputs.force }}
+          calver: true

.github/workflows/stale.yml

@@ -0,0 +1,47 @@
+name: 'Close stale issues/PRs'
+on:
+  schedule:
+    - cron: '* */6 * * *'
+  workflow_dispatch:
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/stale@87c2b794b9b47a9bec68ae03c01aeb572ffebdb1
+        with:
+          repo-token: ${{ github.token }}
+          days-before-stale: 21
+          days-before-close: 7
+          only-labels: ""
+          operations-per-run: 100
+          remove-stale-when-updated: true
+          debug-only: false
+          ascending: false
+
+          exempt-issue-labels: "Status: Backlog,Status: In Progress"
+          stale-issue-label: "Status: Stale"
+          stale-issue-message: |-
+            This issue has gone three weeks without activity. In another week, I will close it.
+
+            But! If you comment or otherwise update it, I will reset the clock, and if you label it `Status: Backlog` or `Status: In Progress`, I will leave it alone ... forever!
+
+            ----
+
+            "A weed is but an unloved flower." ― _Ella Wheeler Wilcox_ 🥀
+          skip-stale-issue-message: false
+          close-issue-label: ""
+          close-issue-message: ""
+
+          exempt-pr-labels: "Status: Backlog,Status: In Progress"
+          stale-pr-label: "Status: Stale"
+          stale-pr-message: |-
+            This pull request has gone three weeks without activity. In another week, I will close it.
+
+            But! If you comment or otherwise update it, I will reset the clock, and if you label it `Status: Backlog` or `Status: In Progress`, I will leave it alone ... forever!
+
+            ----
+
+            "A weed is but an unloved flower." ― _Ella Wheeler Wilcox_ 🥀
+          skip-stale-pr-message: false
+          close-pr-label:
+          close-pr-message: ""

.github/workflows/test.yml

@@ -0,0 +1,67 @@
+name: Test
+on:
+  # Run CI on all pushes to the master and release/** branches, and on all new
+  # pull requests, and on all pushes to pull requests (even if a pull request
+  # is not against master).
+  push:
+    branches:
+      - "master"
+      - "release/**"
+  pull_request:
+defaults:
+  run:
+    shell: bash
+jobs:
+  unit-test:
+    runs-on: ubuntu-20.04
+    name: "unit tests"
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Unit Tests
+        working-directory: install
+        run: find ./ -type f -name "*-test.sh" -exec "./{}" \;
+
+  integration-test:
+    runs-on: ubuntu-20.04
+    name: "integration test"
+    strategy:
+      max-parallel: 1
+      fail-fast: false
+      matrix:
+        include:
+          - compose_version: '1.28.0'
+            compose_path: '/usr/local/bin'
+          - compose_version: 'v2.0.1'
+            compose_path: '/usr/local/lib/docker/cli-plugins'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Get Compose
+        run: |
+          # Always remove `docker compose` support as that's the newer version
+          # and comes installed by default nowadays.
+          sudo rm -f "/usr/local/lib/docker/cli-plugins/docker-compose"
+          sudo rm -f "${{ matrix.compose_path }}/docker-compose"
+          sudo mkdir -p "${{ matrix.compose_path }}"
+          sudo curl -L https://github.com/docker/compose/releases/download/${{ matrix.compose_version }}/docker-compose-`uname -s`-`uname -m` -o "${{ matrix.compose_path }}/docker-compose"
+          sudo chmod +x "${{ matrix.compose_path }}/docker-compose"
+
+      - name: Integration Test
+        run: |
+          echo "Testing initial install"
+          ./install.sh
+          ./_integration-test/run.sh
+          echo "Testing in-place upgrade"
+          # Also test plugin installation here
+          echo "sentry-auth-oidc" >> sentry/requirements.txt
+          ./install.sh --minimize-downtime
+          ./_integration-test/run.sh
+
+      - name: Inspect failure
+        if: failure()
+        run: |
+          docker compose ps
+          docker compose logs