svcforge: reference implementation

Complete working build of the system learn-python/ teaches.
164 tests, mypy --strict clean, domain coverage 99%.

catalog.yaml

@@ -0,0 +1,77 @@
+# The product catalog: what svcforge will provision, and in which sizes.
+# service_type -> chart / chart_version / security / sizes{name -> replicas + resources}
+#
+# security: true bypasses every tenant's maintenance window for this entry. Set it for a
+# CVE with a public exploit; leave it false and the bump waits for 03:00 Sunday.
+services:
+  elasticsearch:
+    chart: bitnamilegacy/elasticsearch
+    chart_version: 21.3.15
+    security: false
+    sizes:
+      small:
+        replicas: 1
+        resources:
+          requests:
+            cpu: 250m
+            memory: 1Gi
+          limits:
+            cpu: "1"
+            memory: 2Gi
+      medium:
+        replicas: 3
+        resources:
+          requests:
+            cpu: "1"
+            memory: 4Gi
+          limits:
+            cpu: "2"
+            memory: 8Gi
+
+  redis:
+    chart: bitnamilegacy/redis
+    chart_version: 20.6.2
+    security: false
+    sizes:
+      small:
+        replicas: 1
+        resources:
+          requests:
+            cpu: 100m
+            memory: 256Mi
+          limits:
+            cpu: 500m
+            memory: 512Mi
+      medium:
+        replicas: 3
+        resources:
+          requests:
+            cpu: 500m
+            memory: 1Gi
+          limits:
+            cpu: "1"
+            memory: 2Gi
+
+  postgres:
+    chart: bitnamilegacy/postgresql
+    chart_version: 16.4.5
+    security: false
+    sizes:
+      small:
+        replicas: 1
+        resources:
+          requests:
+            cpu: 250m
+            memory: 512Mi
+          limits:
+            cpu: "1"
+            memory: 1Gi
+      medium:
+        replicas: 2
+        resources:
+          requests:
+            cpu: "1"
+            memory: 2Gi
+          limits:
+            cpu: "2"
+            memory: 4Gi