Scaling & Deployment

# Start with the default profile (full) and shared database
cargo xtask dev start --shared-db

# Start with a specific profile
cargo xtask dev start --profile snap-only

# Start with isolated databases (production topology)
cargo xtask dev start --profile isolated-db

cargo xtask dev refresh

# Scale canopy-snap to 3 instances
docker compose --profile full up -d --scale canopy-snap=3

# Scale multiple services
docker compose --profile full up -d \
  --scale canopy-eligibility=2 \
  --scale canopy-snap=3 \
  --scale canopy-persons=2

export COMPOSE_FILE=docker-compose.yml:docker-compose.prebuilt.yml
export CANOPY_PREBUILT_IMAGES=true
export CANOPY_PREBUILT_SERVICE_IMAGE="$CI_REGISTRY_IMAGE:${IMAGE_TAG}"
export CANOPY_PREBUILT_PORTAL_IMAGE="$CI_REGISTRY_IMAGE/portal:${IMAGE_TAG}"

#!/usr/bin/env bash
set -euo pipefail

IMAGE_TAG="${1:?Usage: deploy.sh <image-tag>}"
export COMPOSE_FILE=docker-compose.yml:docker-compose.prebuilt.yml
export CANOPY_PREBUILT_IMAGES=true
export CANOPY_PREBUILT_SERVICE_IMAGE="${CI_REGISTRY_IMAGE:?}:${IMAGE_TAG}"
export CANOPY_PREBUILT_PORTAL_IMAGE="${CI_REGISTRY_IMAGE:?}/portal:${IMAGE_TAG}"
SERVICES=(
  canopy-rules
  canopy-persons
  canopy-applications
  canopy-snap
  canopy-tanf
  canopy-medicaid
  canopy-eligibility
  canopy-enrollment
  canopy-renewals
  canopy-notices
  canopy-appeals
  canopy-reporting
  canopy-security
  canopy-verification
  canopy-web
)

for SERVICE in "${SERVICES[@]}"; do
  echo "Deploying ${SERVICE} with image tag ${IMAGE_TAG}..."

  # Update the service with the new image (pulled from the prebuilt
  # override's registry ref — the base compose file has no image refs)
  docker compose up -d --no-deps --pull always "${SERVICE}"

  # Wait for health check to pass
  echo "Waiting for ${SERVICE} health check..."
  RETRIES=30
  while [ "${RETRIES}" -gt 0 ]; do
    STATUS=$(docker inspect --format='{{.State.Health.Status}}' \
      "$(docker compose ps -q "${SERVICE}" | head -1)" 2>/dev/null || echo "starting")
    if [ "${STATUS}" = "healthy" ]; then
      echo "${SERVICE} is healthy."
      break
    fi
    RETRIES=$((RETRIES - 1))
    sleep 2
  done

  if [ "${RETRIES}" -eq 0 ]; then
    echo "ERROR: ${SERVICE} failed health check. Aborting deployment."
    echo "Run rollback procedure to restore previous version."
    exit 1
  fi
done

echo "All services deployed successfully."

# Check all services
for PORT in 3001 3002 3003 3004 3010 3011 3012 3020 3021 3022 3023 3024 3025 3026 8080; do
  STATUS=$(curl -s -o /dev/null -w "%{http_code}" "http://localhost:${PORT}/healthz")
  echo "Port ${PORT}: ${STATUS}"
done

# Stop all services
docker compose down

# Redeploy the previous known-good immutable ref through the same
# prebuilt override (see "Image references" above)
CANOPY_PREBUILT_SERVICE_IMAGE="$CI_REGISTRY_IMAGE:<previous-short-sha>" \
CANOPY_PREBUILT_PORTAL_IMAGE="$CI_REGISTRY_IMAGE/portal:<previous-short-sha>" \
docker compose up -d

# Roll back canopy-snap to the previous image ref. Requires the "Image
# references" export block active (the override interpolates BOTH image
# vars whole-file, so CANOPY_PREBUILT_PORTAL_IMAGE must be set too).
CANOPY_PREBUILT_SERVICE_IMAGE="$CI_REGISTRY_IMAGE:<previous-short-sha>" \
docker compose up -d --no-deps --pull always canopy-snap

# Verify health
curl -s http://localhost:3010/healthz

# Quick smoke test: create a person, submit an application, run determination
curl -s http://localhost:3002/api/v1/persons \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer ${TOKEN}" \
  -d '{"first_name":"Test","last_name":"User","date_of_birth":"1990-01-01","ssn":"000-00-0000"}'

# Verify the event was published to RabbitMQ
# Check canopy-security for the corresponding audit entry