feat: Fly.io base integration by aleksandar94ns · Pull Request #2830 · superplanehq/superplane

aleksandar94ns · 2026-02-03T17:19:16Z

Fly.io Base Integration

Description

Adds the base integration scaffolding for Fly.io, an application platform that runs full VMs (Machines) and apps globally.

Relates to: #2785

What's Included

Integration registration (flyio)
Configuration fields:
- API Token (required, sensitive): Bearer token for authentication
- Organization Slug (optional): Default org slug (e.g., personal)
Setup instructions for obtaining API tokens
Sync() implementation to validate token and populate app metadata
ListResources() for apps and machines
HTTP client for https://api.machines.dev

Connection Method

API Token (Bearer) authentication:

Authorization: Bearer <token>
Content-Type: application/json

Tokens can be created via:

Dashboard: Organization → Access Tokens
CLI: fly tokens deploy or fly tokens create

Files Changed

File	Description
`pkg/integrations/flyio/flyio.go`	Main integration definition
`pkg/integrations/flyio/flyio_test.go`	Integration tests
`pkg/integrations/flyio/client.go`	HTTP client for Fly.io API

Checklist

Reference

See Integration & component checklist

Signed-off-by: Aleksandar Radosevic <aradosevicarchon@gmail.com>

pkg/integrations/flyio/flyio.go

pkg/integrations/flyio/client.go

Signed-off-by: Aleksandar Radosevic <aradosevicarchon@gmail.com>

pkg/integrations/flyio/flyio.go

lucaspin · 2026-02-03T23:34:35Z

pkg/integrations/flyio/flyio_test.go

+	"github.com/superplanehq/superplane/pkg/core"
+)
+
+func Test__FlyIO__Name(t *testing.T) {


Static methods do not require unit tests

lucaspin · 2026-02-03T23:34:57Z

pkg/integrations/flyio/flyio_test.go

@@ -0,0 +1,83 @@
+package flyio


Tests for Sync() are required though

lucaspin · 2026-02-03T23:40:35Z

@aleksandar94ns code looks good, left just a few comments regarding unit tests. One issue though: base integrations require 1 component + 1 trigger to be added as part of it. Usually, the trickiest part about building the base integration is to figure out how the events from the integration will be received in SuperPlane, so it's good to do that as part of the base integration.

Signed-off-by: Aleksandar Radosevic <aradosevicarchon@gmail.com>

cursor · 2026-02-04T09:36:01Z

pkg/integrations/flyio/flyio.go

+		for _, app := range metadata.Apps {
+			machines, err := client.ListMachines(app.Name)
+			if err != nil {
+				continue


Silently ignoring machine listing errors hides failures

Medium Severity

In ListResources for the machine resource type, errors from client.ListMachines(app.Name) are silently swallowed with continue. When an API call fails (due to network issues, rate limiting, permissions, or other errors), the user receives a partial result with no indication that some apps' machines couldn't be fetched. This could lead to users making decisions based on incomplete data, believing they have a complete inventory when machines are actually missing.

cursor · 2026-02-04T09:36:01Z

pkg/integrations/flyio/on_app_state_change.go

+
+	// If already set up for this org, skip
+	if metadata.OrgSlug == orgSlug && metadata.AppStates != nil {
+		return nil


Trigger setup skips scheduling poll on restart

High Severity

When Setup is called and metadata already exists for the same org (e.g., after a system restart), the function returns early at line 135 without scheduling the next poll action. The ScheduleActionCall at lines 170-174 is bypassed, causing the polling mechanism to never resume. This effectively breaks the trigger after any restart or re-setup scenario since no new poll will be scheduled.

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

cursor · 2026-02-05T12:34:05Z

pkg/integrations/flyio/client.go

+
+// ListApps retrieves all apps for an organization
+func (c *Client) ListApps(orgSlug string) ([]App, error) {
+	url := fmt.Sprintf("%s/v1/apps?org_slug=%s", c.BaseURL, orgSlug)


URL parameters not escaped in API client

Medium Severity

URL path segments and query parameters are constructed using fmt.Sprintf without URL encoding. Values like orgSlug, appName, machineID, and state are directly interpolated into URLs. If any of these contain special characters (spaces, /, ?, &, #, %), the resulting URL will be malformed or incorrectly parsed. Other integrations in this codebase (e.g., AWS Lambda) correctly use url.PathEscape() and url.Values for this purpose.

Additional Locations (2)

pkg/integrations/flyio/client.go#L197-L198

pkg/integrations/flyio/client.go#L357-L358

lucaspin · 2026-02-05T13:04:06Z

pkg/integrations/flyio/list_apps.go

+	"github.com/superplanehq/superplane/pkg/core"
+)
+
+type ListApps struct{}


We have been discussing List operations in this thread. I'm not so sure I see a concrete real use case for this

lucaspin · 2026-02-05T20:53:30Z

We should consider making SuperPlane a fly.io extension. Fly.io extensions can receive webhooks, so we could create a fly.io extension, which acts like an agent, receives the webhooks, and sends to SuperPlane.

cc @shiroyasha

shiroyasha · 2026-02-06T08:38:28Z

@aleksandar94ns go for it. Let us know what is the complexity of building such an extension.

Finalize implementation of basic flyio

1f11d14

Signed-off-by: Aleksandar Radosevic <aradosevicarchon@gmail.com>

cursor bot reviewed Feb 3, 2026

View reviewed changes

pkg/integrations/flyio/flyio.go Show resolved Hide resolved

pkg/integrations/flyio/flyio.go Show resolved Hide resolved

pkg/integrations/flyio/client.go Show resolved Hide resolved

Fix failing tests

cfd0bda

Signed-off-by: Aleksandar Radosevic <aradosevicarchon@gmail.com>

cursor bot reviewed Feb 3, 2026

View reviewed changes

pkg/integrations/flyio/flyio.go Outdated Show resolved Hide resolved

lucaspin reviewed Feb 3, 2026

View reviewed changes

pkg/integrations/flyio/flyio_test.go

@@ -0,0 +1,83 @@

package flyio

Copy link

Contributor

lucaspin Feb 3, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tests for Sync() are required though

Add component and trigger to finalize the fly implementation

7a7f4aa

Signed-off-by: Aleksandar Radosevic <aradosevicarchon@gmail.com>

cursor bot reviewed Feb 4, 2026

View reviewed changes

Merge branch 'main' into integration/flyio

7d185a3

cursor bot reviewed Feb 5, 2026

View reviewed changes

lucaspin reviewed Feb 5, 2026

View reviewed changes

shiroyasha changed the title ~~Finalize implementation of basic flyio~~ feat: Fly.io base integration Feb 5, 2026

shiroyasha self-requested a review February 6, 2026 09:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: Fly.io base integration#2830

feat: Fly.io base integration#2830
aleksandar94ns wants to merge 4 commits intosuperplanehq:mainfrom
aleksandar94ns:integration/flyio

aleksandar94ns commented Feb 3, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

lucaspin Feb 3, 2026

Uh oh!

lucaspin Feb 3, 2026

Uh oh!

lucaspin commented Feb 3, 2026

Uh oh!

cursor bot Feb 4, 2026

Uh oh!

cursor bot Feb 4, 2026

Uh oh!

cursor bot left a comment

Uh oh!

cursor bot Feb 5, 2026

Uh oh!

lucaspin Feb 5, 2026

Uh oh!

lucaspin commented Feb 5, 2026 •

edited

Loading

Uh oh!

shiroyasha commented Feb 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

aleksandar94ns commented Feb 3, 2026

Fly.io Base Integration

Description

What's Included

Connection Method

Files Changed

Checklist

Reference

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

lucaspin Feb 3, 2026

Choose a reason for hiding this comment

Uh oh!

lucaspin Feb 3, 2026

Choose a reason for hiding this comment

Uh oh!

lucaspin commented Feb 3, 2026

Uh oh!

cursor bot Feb 4, 2026

Choose a reason for hiding this comment

Silently ignoring machine listing errors hides failures

Uh oh!

cursor bot Feb 4, 2026

Choose a reason for hiding this comment

Trigger setup skips scheduling poll on restart

Uh oh!

cursor bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor bot Feb 5, 2026

Choose a reason for hiding this comment

URL parameters not escaped in API client

Uh oh!

lucaspin Feb 5, 2026

Choose a reason for hiding this comment

Uh oh!

lucaspin commented Feb 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

shiroyasha commented Feb 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

lucaspin commented Feb 5, 2026 •

edited

Loading