Describe what you need us to do:
The devpi tool is a caching proxy for PyPI.
PyPI has been known to be down sometimes, and software sometimes disappears there too. By using devpi, we would make it much more reliable and reproducible to deploy our Python software without RPMs, ie by creating images that would download dependencies at build time.
When do you need this? (YYYY/MM/DD)
No deadline. It's easy to configure a system to use an alternative PyPI server (it's a configuration file or an env var). So it'll be easy to switch to it even after we have a functioning pipeline to build images for our apps.
When is this no longer needed or useful? (YYYY/MM/DD)
When we decide on yet another deployment method. So it'll stay useful for the forseeable future.
If we cannot complete your request, what is the impact?
Image builds of Python apps may be unreliable because one dependency is gone from PyPI. Or PyPI is down altogether.
The software is: https://www.devpi.net/
Security officer: @puiterwijk
I found: https://github.com/saily/openshift-devpi which may be at least a good starting point...
Metadata Update from @kevin:
- Issue assigned to kevin
- Issue priority set to: Waiting on Assignee (was: Needs Review)
to comment on this ticket.