[repo depot 2/n] sled agent APIs to manage update artifact storage

Cargo.toml

@@ -15,6 +15,7 @@ members = [
     "clients/nexus-client",
     "clients/oxide-client",
     "clients/oximeter-client",
+    "clients/repo-depot-client",
     "clients/sled-agent-client",
     "clients/wicketd-client",
     "cockroach-admin",
@@ -97,6 +98,7 @@ members = [
     "sled-agent",
     "sled-agent/api",
     "sled-agent/bootstrap-agent-api",
+    "sled-agent/repo-depot-api",
     "sled-agent/types",
     "sled-hardware",
     "sled-hardware/types",
@@ -135,6 +137,7 @@ default-members = [
     "clients/nexus-client",
     "clients/oxide-client",
     "clients/oximeter-client",
+    "clients/repo-depot-client",
     "clients/sled-agent-client",
     "clients/wicketd-client",
     "cockroach-admin",
@@ -219,6 +222,7 @@ default-members = [
     "sled-agent",
     "sled-agent/api",
     "sled-agent/bootstrap-agent-api",
+    "sled-agent/repo-depot-api",
     "sled-agent/types",
     "sled-hardware",
     "sled-hardware/types",
@@ -529,6 +533,8 @@ reedline = "0.33.0"
 ref-cast = "1.0"
 regex = "1.10.6"
 regress = "0.9.1"
+repo-depot-api = { path = "sled-agent/repo-depot-api" }
+repo-depot-client = { path = "clients/repo-depot-client" }
 reqwest = { version = "0.12", default-features = false }
 ring = "0.17.8"
 rpassword = "7.3.1"

clients/repo-depot-client/Cargo.toml

@@ -0,0 +1,16 @@
+[package]
+name = "repo-depot-client"
+version = "0.1.0"
+edition = "2021"
+license = "MPL-2.0"
+
+[lints]
+workspace = true
+
+[dependencies]
+omicron-workspace-hack.workspace = true
+progenitor.workspace = true
+reqwest.workspace = true
+schemars.workspace = true
+serde.workspace = true
+slog.workspace = true

clients/repo-depot-client/src/lib.rs

@@ -0,0 +1,24 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
+//! Interface for Sled Agent's Repo Depot to make API requests.
+
+progenitor::generate_api!(
+    spec = "../../openapi/repo-depot.json",
+    inner_type = slog::Logger,
+    pre_hook = (|log: &slog::Logger, request: &reqwest::Request| {
+        slog::debug!(log, "client request";
+            "method" => %request.method(),
+            "uri" => %request.url(),
+            "body" => ?&request.body(),
+        );
+    }),
+    post_hook = (|log: &slog::Logger, result: &Result<_, _>| {
+        slog::debug!(log, "client response"; "result" => ?result);
+    }),
+    derives = [schemars::JsonSchema],
+);
+
+/// A type alias for errors returned by this crate.
+pub type ClientError = crate::Error<crate::types::Error>;

common/src/address.rs

@@ -29,6 +29,7 @@ pub const MIN_PORT: u16 = u16::MIN;
 pub const DNS_PORT: u16 = 53;
 pub const DNS_HTTP_PORT: u16 = 5353;
 pub const SLED_AGENT_PORT: u16 = 12345;
+pub const REPO_DEPOT_PORT: u16 = 12348;
 
 pub const COCKROACH_PORT: u16 = 32221;
 pub const COCKROACH_ADMIN_PORT: u16 = 32222;

dev-tools/openapi-manager/Cargo.toml

@@ -12,9 +12,9 @@ anyhow.workspace = true
 atomicwrites.workspace = true
 bootstrap-agent-api.workspace = true
 camino.workspace = true
+clap.workspace = true
 clickhouse-admin-api.workspace = true
 cockroach-admin-api.workspace = true
-clap.workspace = true
 dns-server-api.workspace = true
 dropshot.workspace = true
 fs-err.workspace = true
@@ -24,13 +24,14 @@ installinator-api.workspace = true
 nexus-external-api.workspace = true
 nexus-internal-api.workspace = true
 omicron-workspace-hack.workspace = true
-openapiv3.workspace = true
 openapi-lint.workspace = true
 openapi-manager-types.workspace = true
+openapiv3.workspace = true
 owo-colors.workspace = true
 oximeter-api.workspace = true
+repo-depot-api.workspace = true
 serde_json.workspace = true
-sled-agent-api.workspace = true
 similar.workspace = true
+sled-agent-api.workspace = true
 supports-color.workspace = true
 wicketd-api.workspace = true

dev-tools/openapi-manager/src/spec.rs

@@ -110,6 +110,15 @@ pub fn all_apis() -> Vec<ApiSpec> {
             filename: "oximeter.json",
             extra_validation: None,
         },
+        ApiSpec {
+            title: "Oxide TUF Repo Depot API",
+            version: "0.0.1",
+            description: "API for fetching update artifacts",
+            boundary: ApiBoundary::Internal,
+            api_description: repo_depot_api::repo_depot_api_mod::stub_api_description,
+            filename: "repo-depot.json",
+            extra_validation: None,
+        },
         ApiSpec {
             title: "Oxide Sled Agent API",
             version: "0.0.1",

openapi/repo-depot.json

@@ -0,0 +1,82 @@
+{
+  "openapi": "3.0.3",
+  "info": {
+    "title": "Oxide TUF Repo Depot API",
+    "description": "API for fetching update artifacts",
+    "contact": {
+      "url": "https://oxide.computer",
+      "email": "[email protected]"
+    },
+    "version": "0.0.1"
+  },
+  "paths": {
+    "/artifact/sha256/{sha256}": {
+      "get": {
+        "summary": "Fetch an artifact from the depot.",
+        "operationId": "artifact_get_by_sha256",
+        "parameters": [
+          {
+            "in": "path",
+            "name": "sha256",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "hex string (32 bytes)"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "",
+            "content": {
+              "*/*": {
+                "schema": {}
+              }
+            }
+          },
+          "4XX": {
+            "$ref": "#/components/responses/Error"
+          },
+          "5XX": {
+            "$ref": "#/components/responses/Error"
+          }
+        }
+      }
+    }
+  },
+  "components": {
+    "schemas": {
+      "Error": {
+        "description": "Error information from a response.",
+        "type": "object",
+        "properties": {
+          "error_code": {
+            "type": "string"
+          },
+          "message": {
+            "type": "string"
+          },
+          "request_id": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "message",
+          "request_id"
+        ]
+      }
+    },
+    "responses": {
+      "Error": {
+        "description": "Error",
+        "content": {
+          "application/json": {
+            "schema": {
+              "$ref": "#/components/schemas/Error"
+            }
+          }
+        }
+      }
+    }
+  }
+}