@bluedynamics/cdk8s-plone 0.1.43 → 0.1.44

package/examples/{production-volto → volto}/main.ts

@@ -5,7 +5,7 @@ import * as kplus from 'cdk8s-plus-30';
 import * as path from 'path';
 import { IngressChart } from './ingress';
 import { config } from 'dotenv';
-import { PGBitnamiChart } from './postgres.bitnami';
+import { PGPlainChart } from './postgres.plain';
 import { PGCloudNativePGChart } from './postgres.cloudnativepg';
 
 
@@ -17,10 +17,10 @@ export class ExampleChart extends Chart {
 
     // ================================================================================================================
     // Postgresql
-    let db: PGBitnamiChart | PGCloudNativePGChart;
+    let db: PGPlainChart | PGCloudNativePGChart;
     let postgresql_username;
     let postgresql_password;
-    if ((process.env.DATABASE ?? 'bitnami') == 'cloudnativepg') {
+    if ((process.env.DATABASE ?? 'plain') == 'cloudnativepg') {
       const cloudnativepgDb = new PGCloudNativePGChart(this, 'db');
       db = cloudnativepgDb;
       // CloudNativePG creates secrets with format: {cluster-name}-app
@@ -29,10 +29,11 @@ export class ExampleChart extends Chart {
       postgresql_username = { valueFrom: { secretKeyRef: { name: secretName, key: 'username' }}};
       postgresql_password = { valueFrom: { secretKeyRef: { name: secretName, key: 'password' }}};
     } else {
-      const bitnamiDb = new PGBitnamiChart(this, 'db');
-      db = bitnamiDb;
-      postgresql_username = { value: 'plone' };
-      postgresql_password = { valueFrom: { secretKeyRef: { name: `${bitnamiDb.dbServiceName}`, key: 'password' }}};
+      // Operator-free single-instance PostgreSQL using the official image.
+      const plainDb = new PGPlainChart(this, 'db');
+      db = plainDb;
+      postgresql_username = { valueFrom: { secretKeyRef: { name: plainDb.secretName, key: 'username' }}};
+      postgresql_password = { valueFrom: { secretKeyRef: { name: plainDb.secretName, key: 'password' }}};
     }
 
     // ================================================================================================================

package/examples/{production-volto → volto}/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "cdk8s-plone-example-production-volto",
+  "name": "cdk8s-plone-example-volto",
   "version": "1.0.0",
   "description": "Production-ready Plone deployment example using cdk8s-plone",
   "main": "main.js",

package/examples/volto/postgres.plain.ts

@@ -0,0 +1,115 @@
+import { Construct } from 'constructs';
+import * as k8s from './imports/k8s';
+
+/**
+ * Operator-free PostgreSQL for the example.
+ *
+ * Deploys a single-instance PostgreSQL StatefulSet using the official
+ * `postgres` Docker image. No operator and no third-party Helm chart are
+ * required, which keeps the dependency surface minimal. It is intended for
+ * development and small production setups; for high availability, point-in-time
+ * recovery, and automated failover use the CloudNativePG variant instead.
+ */
+export class PGPlainChart extends Construct {
+    public readonly dbServiceName: string;
+    public readonly secretName: string;
+
+    constructor(scope: Construct, id: string) {
+        super(scope, id);
+
+        const dbname = 'plone';
+        const dbuser = 'plone';
+        const dbpass = 'admin@plone';
+
+        const labels = {
+            'app.kubernetes.io/name': 'plone-postgresql',
+            'app.kubernetes.io/instance': 'postgresql',
+            'app.kubernetes.io/component': 'database',
+            'app.kubernetes.io/part-of': 'plone',
+        };
+
+        const secret = new k8s.KubeSecret(this, 'secret', {
+            metadata: { labels },
+            stringData: { username: dbuser, password: dbpass, database: dbname },
+        });
+        this.secretName = secret.name;
+
+        const service = new k8s.KubeService(this, 'service', {
+            metadata: { labels },
+            spec: {
+                selector: labels,
+                ports: [
+                    { port: 5432, targetPort: k8s.IntOrString.fromNumber(5432), name: 'postgresql' },
+                ],
+            },
+        });
+        this.dbServiceName = service.name;
+
+        new k8s.KubeStatefulSet(this, 'db', {
+            metadata: { labels },
+            spec: {
+                serviceName: service.name,
+                replicas: 1,
+                selector: { matchLabels: labels },
+                template: {
+                    metadata: { labels },
+                    spec: {
+                        // The official postgres image runs as uid/gid 999.
+                        // fsGroup makes the mounted volume group-writable for it.
+                        securityContext: { fsGroup: 999 },
+                        containers: [
+                            {
+                                name: 'postgresql',
+                                image: 'postgres:18',
+                                ports: [{ containerPort: 5432, name: 'postgresql' }],
+                                env: [
+                                    { name: 'POSTGRES_USER', valueFrom: { secretKeyRef: { name: secret.name, key: 'username' } } },
+                                    { name: 'POSTGRES_PASSWORD', valueFrom: { secretKeyRef: { name: secret.name, key: 'password' } } },
+                                    { name: 'POSTGRES_DB', valueFrom: { secretKeyRef: { name: secret.name, key: 'database' } } },
+                                    // Keep PGDATA in a subdirectory so the volume root can hold lost+found.
+                                    { name: 'PGDATA', value: '/var/lib/postgresql/data/pgdata' },
+                                ],
+                                volumeMounts: [
+                                    { name: 'data', mountPath: '/var/lib/postgresql/data' },
+                                ],
+                                readinessProbe: {
+                                    exec: { command: ['pg_isready', '-U', dbuser, '-d', dbname] },
+                                    initialDelaySeconds: 10,
+                                    periodSeconds: 10,
+                                    timeoutSeconds: 5,
+                                },
+                                livenessProbe: {
+                                    exec: { command: ['pg_isready', '-U', dbuser, '-d', dbname] },
+                                    initialDelaySeconds: 30,
+                                    periodSeconds: 15,
+                                    timeoutSeconds: 5,
+                                },
+                                resources: {
+                                    requests: {
+                                        cpu: k8s.Quantity.fromString('100m'),
+                                        memory: k8s.Quantity.fromString('256Mi'),
+                                    },
+                                    limits: {
+                                        cpu: k8s.Quantity.fromString('1'),
+                                        memory: k8s.Quantity.fromString('1Gi'),
+                                    },
+                                },
+                            },
+                        ],
+                    },
+                },
+                volumeClaimTemplates: [
+                    {
+                        metadata: { name: 'data', labels },
+                        spec: {
+                            accessModes: ['ReadWriteOnce'],
+                            resources: {
+                                requests: { storage: k8s.Quantity.fromString('10Gi') },
+                            },
+                        },
+                    },
+                ],
+            },
+        });
+    }
+}

package/examples/volto/tsconfig.json

@@ -0,0 +1,33 @@
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "ES2020"
+    ],
+    "module": "CommonJS",
+    "noEmit": false,
+    "noEmitOnError": true,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2020"
+  },
+  "include": [
+    "**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ]
+}

package/lib/httpcache.js

@@ -56,7 +56,7 @@ const constructs_1 = require("constructs");
  * });
  */
 class PloneHttpcache extends constructs_1.Construct {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@bluedynamics/cdk8s-plone.PloneHttpcache", version: "0.1.43" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@bluedynamics/cdk8s-plone.PloneHttpcache", version: "0.1.44" };
     /**
      * Name of the Varnish service created by the Helm chart.
      * Use this to reference the cache service from ingress or other constructs.