@caelo-cms/provisioning 0.10.44 → 0.10.46

package/stacks/self-hosted/index.ts

@@ -35,10 +35,17 @@ const ownerEmail = cfg.require("ownerEmail");
 const caeloDir = cfg.get("caeloDir") ?? "./.caelo";
 // #553 — same knob as every adapter; undefined = stack-contract default.
 const adminMemory = cfg.get("adminMemory");
+// #696 — the prebuilt, cosign-verified release images, pinned by digest
+// (`ghcr.io/caelo-cms/<svc>@sha256:…`; the generator refuses anything else).
+// `cms-provision init` resolves + verifies them and records them in
+// .caelo/release.json; copy those values here.
+const adminImage = cfg.require("adminImage");
+const gatewayImage = cfg.require("gatewayImage");
 
 const composePath = resolve(caeloDir, "docker-compose.yml");
 const caddyPath = resolve(caeloDir, "Caddyfile");
-const tokenPath = resolve(caeloDir, "pending-token.json");
+// The admin container mounts only `<caeloDir>/bootstrap/` (compose.ts).
+const tokenPath = resolve(caeloDir, "bootstrap", "pending-token.json");
 
 // Mint secrets at preview time. Pulumi's secret-handling encrypts these
 // in the state file; `pulumi stack output --show-secrets postgresPassword`
@@ -71,6 +78,7 @@ const composeYaml = pulumi
       resendApiKey: process.env.RESEND_API_KEY,
       diskSize: "20Gi",
       ...(adminMemory ? { adminMemory } : {}),
+      images: { mode: "release", admin: adminImage, gateway: gatewayImage },
     }),
   );
 
@@ -94,7 +102,7 @@ const tokenInfo = generateBootstrapToken();
 // Stage all three files via a single local.Command so a destroy
 // removes them transactionally.
 const writeFiles = new local.Command("caeloConfigFile", {
-  create: pulumi.interpolate`mkdir -p ${caeloDir} && cat > ${composePath} <<'EOF'
+  create: pulumi.interpolate`mkdir -p ${caeloDir}/bootstrap && cat > ${composePath} <<'EOF'
 ${composeYaml}
 EOF
 cat > ${caddyPath} <<'EOF'