feat: Sync fork by ngudbhav · Pull Request #14 · KingsGambitLab/self-hosted-sentry

ngudbhav · 2024-04-29T09:07:09Z

CodeAnt-AI Description

Add feature-complete install flow with Podman support and new storage setup

What Changed

The installer now supports both Docker and Podman, with updated minimum system requirements and a new option to choose Podman.
The default stack now uses PGBouncer, SeaweedFS for node storage and profiles, and includes setup for JS SDK assets and custom CA certificates.
Install and upgrade flows now handle ClickHouse and Postgres migrations earlier, skip repeated work when possible, and update config files automatically when requested.
The compose stack and docs now reflect the feature-complete setup, with updated services, health checks, and release instructions.
Added coverage for the new install path, storage migration, profile migration, JS SDK assets, custom certificates, and multiple SeaweedFS buckets.

Impact

✅ Easier full-stack installs
✅ Fewer manual upgrade steps
✅ Safer config migrations

🔄 Retrigger CodeAnt AI Review

Details

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

#skip-changelog

# PR Summary This small PR fixes the `datetime` deprecation warnings which you can find in the CI logs: ```python /home/runner/work/_actions/getsentry/self-hosted/master/_integration-test/test_01_basics.py:303: DeprecationWarning: datetime.datetime.utcnow() is deprecated and scheduled for removal in a future version. Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.now(datetime.UTC). ```

…#3690) Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.0.2 to 2.0.6. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](actions/create-github-app-token@3ff1caa...df432ce) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 2.0.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

#skip-changelog

* remove obsolete SENTRY_RELEASE_HEALTH removed in getsentry/sentry#68226 * remove unused feature flags removed in getsentry/sentry#32010 * remove session-replay-enable-canvas removed in getsentry/sentry#87762

Sentry Admin Script always fail because of missing import of lib script. ### Legal Boilerplate Look, I get it. The entity doing business as "Sentry" was incorporated in the State of Delaware in 2015 as Functional Software, Inc. and is gonna need some rights from me in order to utilize my contributions in this here PR. So here's the deal: I retain all rights, title and interest in and to my contributions, and by keeping this boilerplate intact I confirm that Sentry can use, modify, copy, and redistribute my contributions, under Sentry's choice of terms.

#skip-changelog

Fixes problems that appear when Python SDK 3.0 will be released.

a hard stop is in place with this so it can be removed now

* add shellcheck action to lint bash scripts * fix some shellcheck warnings --------- Co-authored-by: ds <ds@local> Co-authored-by: Burak Yigit Kaya <byk@sentry.io>

* Introduce patches with external kafka * Fix pre-commit hooks * Patch relay config file * Documentation for patches stuff * Provide more helpful information for Docker Compose Override file * Fix grep command * ref: rename to 'optional-modifications' * chore(pre-commit): exclude .patch extension * chore(pre-commit): escape backslash * chore(pre-commit): put exclude field on hooks * chore(pre-commit): put exclude field on top level Based on https://pre-commit.com/#top_level-exclude * chore(pre-commit): move to even more top level

PROFILES_DIR was defaulting to `/var/lib/sentry-profiles` which requires root access. When Vroom image decided to go with non-root default user, this started causing permission issues. Now the image is being refactored and it will not use `/var/lib/sentry-profiles` as the default path so we need to explicitly pass it.

…3760) * Revert "fix(vroom): Explicitly set PROFILES_DIR for upcoming change (#3759)" This reverts commit e07445d. It also very importantly changes where we mount the profiles volume which fixes the issue. Our theory is as follows: 1. Vroom Dockerfile had a line doing `mkdirp /var/lib/sentry-profiles` at image build time. This makes the directory owned by `root` 2. When we mount over that directory, and change permissions we can store the permissions changes _in_ the directory but not the directory itself 3. So when we start the vroom image with the new mount, the contents are owned by `vroom` but the main directory is still owned by `root`. This is also why [this approach](https://github.com/getsentry/vroom/pull/601/files/a23a4e395269ca39fd9bd93ecf902cb42530b5cd) worked as the entrypoint script did this at the start of every container instance. --------- Co-authored-by: Burak Yigit Kaya <byk@sentry.io>

codeant-ai · 2026-04-25T23:50:16Z

CodeAnt AI is running Incremental review

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.5 to 46.0.7. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.5...46.0.7) --- updated-dependencies: - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

codeant-ai · 2026-04-25T23:52:18Z

CodeAnt AI Incremental review completed.

…#4280) Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 3.0.0 to 3.1.1. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](actions/create-github-app-token@f8d387b...1b10c78) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@53b8394...48b55a0) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [j178/prek-action](https://github.com/j178/prek-action) from 2.0.1 to 2.0.2. - [Release notes](https://github.com/j178/prek-action/releases) - [Commits](j178/prek-action@53276d8...cbc2f23) --- updated-dependencies: - dependency-name: j178/prek-action dependency-version: 2.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [pytest](https://github.com/pytest-dev/pytest) from 9.0.1 to 9.0.3. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.1...9.0.3) --- updated-dependencies: - dependency-name: pytest dependency-version: 9.0.3 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Reinaldy Rafli <github@reinaldyrafli.com>

* feat: allow upgrade tests * fix: wrong cache key

codeant-ai · 2026-04-27T06:14:30Z

CodeAnt AI is running Incremental review

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

codeant-ai · 2026-04-27T06:16:41Z

CodeAnt AI Incremental review completed.

The health checks constantly get mis-identified by users as a problem, when they are just the effect of a problem downstream (e.g. connectivity issues, project configs not available ...). In the docker compose environment the healthcheck itself makes little sense. If health checks are failing, Sentry is down. If there is no health check and a problem in the system, Sentry is down. Docker compose does support almost none of the nuance Kubernetes allows for in health checks, and the self hosted install is not load balancing between multiple instances of Relay. There is little point in having these health checks + they lead to constant requests and questions -> turn them off. It may make sense to replace the health check with a liveness probe instead, but even these are not handled well by docker compose. Ordering of services should be good enough by relying on the `started` flag.

codeant-ai · 2026-04-28T00:59:38Z

CodeAnt AI is running Incremental review

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

codeant-ai · 2026-04-28T01:01:44Z

CodeAnt AI Incremental review completed.

If the host container runtime sets these variables, for example behind a corporate proxy, SeaweedFS services are unable to talk to each other by default. Since they have no business talking to the outside world, just force clear these variables.

codeant-ai · 2026-04-29T08:30:34Z

CodeAnt AI is running Incremental review

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

codeant-ai · 2026-04-29T08:32:53Z

CodeAnt AI Incremental review completed.

#skip-changelog

codeant-ai · 2026-05-05T14:30:19Z

CodeAnt AI is running Incremental review

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

codeant-ai · 2026-05-05T14:32:37Z

CodeAnt AI Incremental review completed.

* feat: Add launchpad taskworker container Add a launchpad-taskworker service that shares the existing taskbroker infrastructure with the sentry taskworker. Activations are separated by the `application` value ("launchpad" vs "sentry") so workers only fetch their own tasks. * fix: make launchpad working on self-hosted * feat: add launchpad to feature-complete profile * feat: add required feature flag * feat: integration test for mobile build * fix(test): wrong organization name * feat(test): debug organization token * test: acquire csrf token from login response Investigated and resolved CSRF token issue in integration tests for organization token creation. The organization auth tokens endpoint requires CSRF protection via the X-CSRFToken header, which should be populated with the value from the sc cookie obtained during the login response. This was discovered by examining the sentry codebase's OrganizationAuthTokensEndpoint which uses Django REST Framework's SessionAuthentication that enforces CSRF by default. The solution involves extracting the CSRF token from the client's cookies and passing it to POST requests as a request header. * feat: remove feature flag * fix: cursor review comments --------- Co-authored-by: Reinaldy Rafli <github@reinaldyrafli.com>

codeant-ai · 2026-05-06T10:24:24Z

CodeAnt AI is running Incremental review

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

codeant-ai · 2026-05-06T10:26:42Z

CodeAnt AI Incremental review completed.

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.0.0 to 8.1.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@cec2083...0880764) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Reinaldy Rafli <github@reinaldyrafli.com>

codeant-ai · 2026-05-12T01:44:52Z

Skipping CodeAnt AI review — this PR changes more than 100 files, which usually means a migration, codemod, or vendored drop. Line-level review on diffs this large produces duplicate findings on the same rewrite pattern and drowns out anything that actually matters.

If you still want a review, comment @codeant-ai : review. For better signal, consider splitting the PR into smaller chunks.

Closes #3993

Use environment variables to store GitHub context data instead of directly interpolating them in the run script. This prevents potential script injection attacks. Changes: - Move GitHub context variables to env block - Reference variables using proper shell variable syntax with quotes - Apply to: github.repository, github.run_id, github.event.repository.id, and github.event.number/github.event.inputs.pr Fixes: https://linear.app/getsentry/issue/VULN-1575 Fixes: https://linear.app/getsentry/issue/DI-1872 Co-authored-by: fix-it-felix-sentry[bot] <260785270+fix-it-felix-sentry[bot]@users.noreply.github.com> Co-authored-by: Reinaldy Rafli <github@reinaldyrafli.com>

codeant-ai · 2026-05-15T09:26:01Z

Skipping CodeAnt AI review — this PR changes more than 100 files, which usually means a migration, codemod, or vendored drop. Line-level review on diffs this large produces duplicate findings on the same rewrite pattern and drowns out anything that actually matters.

If you still want a review, comment @codeant-ai : review. For better signal, consider splitting the PR into smaller chunks.

getsentry-bot and others added 30 commits April 15, 2025 18:06

release: 25.4.0

36d8b2c

Merge branch 'release/25.4.0'

a056cf6

build: Set master version to nightly

92b419b

#skip-changelog

ref: remove SENTRY_USE_BIG_INTS (always True) (#3687)

241b58d

release: 25.5.0

f183e71

Merge branch 'release/25.5.0'

d06b8d0

build: Set master version to nightly

b8b0ee8

#skip-changelog

chore: cleanup obsolete feature flags (#3701)

9e085a0

* remove obsolete SENTRY_RELEASE_HEALTH removed in getsentry/sentry#68226 * remove unused feature flags removed in getsentry/sentry#32010 * remove session-replay-enable-canvas removed in getsentry/sentry#87762

release: 25.5.1

cbebc4f

Merge branch 'release/25.5.1'

9e747cf

build: Set master version to nightly

5173b31

#skip-changelog

Make usage of Python SDK future proof (#3714)

4276f44

Fixes problems that appear when Python SDK 3.0 will be released.

remove index workaround (#3730)

ed04842

a hard stop is in place with this so it can be removed now

chore: prune removed feature flags on main repository (#3731)

e684c7e

fix(profiles): Run the profile chunks consumer (#3739)

1217f46

feat: Add taskbroker + worker + scheduler (#3738)

c8ee02d

feat(features): enable continuous profiling (#3742)

4c973e0

tests: Install version 2.x of Python SDK (#3745)

2f2bb9c

add shellcheck action to lint bash scripts (#3710)

0730d8c

* add shellcheck action to lint bash scripts * fix some shellcheck warnings --------- Co-authored-by: ds <ds@local> Co-authored-by: Burak Yigit Kaya <byk@sentry.io>

feat: migrate to arm64-compatible smtp image (#3746)

2b6bd5f

enable shell linter for more scripts (#3748)

66c057b

release: 25.6.0

45c21c4

ref(js-assets): Simplify how we call nginx container (#3761)

433eed8

Merge branch 'release/25.6.0'

8d3060a

dependabot Bot and others added 5 commits April 26, 2026 06:54

feat: allow upgrade tests (#4288)

abd2dab

* feat: allow upgrade tests * fix: wrong cache key

jjbayer and others added 3 commits May 5, 2026 13:30

release: 26.4.2

a5ca569

Merge branch 'release/26.4.2'

c747456

build: Set master version to nightly

0150544

#skip-changelog

aldy505 and others added 3 commits May 12, 2026 06:37

feat: enable Metrics (#4312)

96f23b5

Closes #3993

Bump nginx 1.31.0-alpine (#4329)

289eecc

Conversation

ngudbhav commented Apr 29, 2024 • edited by codeant-ai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

CodeAnt-AI Description

What Changed

Impact

Checking Your Pull Request

Talking to CodeAnt AI

Example

Preserve Org Learnings with CodeAnt

Example

Retrigger review

Check Your Repository Health

Uh oh!

codeant-ai Bot commented Apr 25, 2026

Thanks for using CodeAnt! 🎉

Uh oh!

codeant-ai Bot commented Apr 25, 2026

Uh oh!

codeant-ai Bot commented Apr 27, 2026

Thanks for using CodeAnt! 🎉

Uh oh!

codeant-ai Bot commented Apr 27, 2026

Uh oh!

codeant-ai Bot commented Apr 28, 2026

Thanks for using CodeAnt! 🎉

Uh oh!

codeant-ai Bot commented Apr 28, 2026

Uh oh!

codeant-ai Bot commented Apr 29, 2026

Thanks for using CodeAnt! 🎉

Uh oh!

codeant-ai Bot commented Apr 29, 2026

Uh oh!

codeant-ai Bot commented May 5, 2026

Thanks for using CodeAnt! 🎉

Uh oh!

codeant-ai Bot commented May 5, 2026

Uh oh!

codeant-ai Bot commented May 6, 2026

Thanks for using CodeAnt! 🎉

Uh oh!

codeant-ai Bot commented May 6, 2026

Uh oh!

codeant-ai Bot commented May 12, 2026

Uh oh!

codeant-ai Bot commented May 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

ngudbhav commented Apr 29, 2024 •

edited by codeant-ai Bot

Loading