@crossdelta/infrastructure 0.8.0 → 0.8.2

package/dist/core/runtime.d.ts

@@ -188,6 +188,8 @@ export interface RuntimeDeploymentConfig {
 export interface RuntimeDeploymentResult {
     /** NATS internal URL */
     natsUrl?: pulumi.Output<string>;
+    /** NATS Helm release resource (for dependsOn in downstream jobs) */
+    natsRelease?: pulumi.Resource;
     /** LoadBalancer IP (if ingress enabled) */
     loadBalancerIp?: pulumi.Output<string>;
     /** Cert manager ready */

package/dist/helpers/stream-job.d.ts

@@ -14,11 +14,11 @@
  */
 import type { Provider } from '@pulumi/kubernetes';
 import * as k8s from '@pulumi/kubernetes';
-import type { Output } from '@pulumi/pulumi';
+import type { Output, Resource } from '@pulumi/pulumi';
 import type { StreamPolicy } from './deploy-streams';
 import { type ResolvedStream } from './stream-setup';
-export type { ResolvedStream };
 export { computeConfigHash, generateSetupScript, msToNatsDuration, resolveStreams } from './stream-setup';
+export type { ResolvedStream };
 export interface MaterializeStreamsConfig {
     /** NATS connection URL (cluster-internal) */
     natsUrl: Output<string>;
@@ -37,8 +37,10 @@ export interface MaterializeStreamsConfig {
     image?: string;
     /** Job TTL after completion in seconds (default: 300) */
     ttlAfterFinished?: number;
-    /** Max retry attempts (default: 3) */
+    /** Max retry attempts (default: 6) */
     backoffLimit?: number;
+    /** Pulumi resources the Job depends on (e.g., NATS Helm release) */
+    dependsOn?: Resource[];
 }
 /**
  * Materialize NATS JetStream streams via a K8s Job.

package/dist/index.cjs

@@ -352,7 +352,7 @@ function deployNginxIngress(provider, config = {}) {
 var k8s3 = __toESM(require("@pulumi/kubernetes"));
 var pulumi2 = __toESM(require("@pulumi/pulumi"));
 var NATS_DEFAULTS = {
-  replicas: 3,
+  replicas: 1,
   jetstream: {
     enabled: true,
     storageSize: "20Gi",
@@ -537,6 +537,7 @@ function deployRuntime(provider, namespace, config, runtimeProvider) {
   if (config.nats?.enabled && providerName === "doks") {
     const nats = deployNats(provider, namespace, config.nats.config || {});
     result.natsUrl = pulumi3.output(nats.internalUrl);
+    result.natsRelease = nats.release;
   }
   if (config.ingress?.enabled && providerName === "doks") {
     const ingress = deployNginxIngress(provider, config.ingress.config || {});
@@ -1011,6 +1012,20 @@ var generateSetupScript = (streams) => {
     `  NATS_OPTS="$NATS_OPTS --user $NATS_USER --password $NATS_PASSWORD"`,
     `fi`,
     ``,
+    `echo "⏳ Waiting for NATS to become available..."`,
+    `RETRIES=0`,
+    `MAX_RETRIES=30`,
+    `until nats $NATS_OPTS server ping --count 1 > /dev/null 2>&1; do`,
+    `  RETRIES=$((RETRIES + 1))`,
+    `  if [ "$RETRIES" -ge "$MAX_RETRIES" ]; then`,
+    `    echo "❌ NATS not available after $MAX_RETRIES attempts"`,
+    `    exit 1`,
+    `  fi`,
+    `  echo "  NATS not ready (attempt $RETRIES/$MAX_RETRIES), retrying in 2s..."`,
+    `  sleep 2`,
+    `done`,
+    `echo "✅ NATS is available"`,
+    ``,
     `echo "\uD83D\uDE80 Materializing ${streams.length} stream(s)..."`,
     `echo ""`,
     ``,
@@ -1045,7 +1060,8 @@ var materializeStreams = (provider, namespace, config) => {
     defaults = DEFAULT_POLICY2,
     image = NATS_BOX_IMAGE,
     ttlAfterFinished = 300,
-    backoffLimit = 3
+    backoffLimit = 6,
+    dependsOn: externalDeps = []
   } = config;
   validateStreamDefinitions(contracts);
   const definitions = collectStreamDefinitions(contracts);
@@ -1110,7 +1126,7 @@ var materializeStreams = (provider, namespace, config) => {
     }
   }, {
     provider,
-    dependsOn: [configMap],
+    dependsOn: [configMap, ...externalDeps],
     deleteBeforeReplace: true
   });
   return job;
@@ -1435,6 +1451,13 @@ var deployK8sService = (provider, namespace, config) => {
     },
     spec: {
       replicas,
+      strategy: {
+        type: "RollingUpdate",
+        rollingUpdate: {
+          maxSurge: normalizedConfig.strategy?.maxSurge ?? 0,
+          maxUnavailable: normalizedConfig.strategy?.maxUnavailable ?? 1
+        }
+      },
       selector: {
         matchLabels: { app: normalizedConfig.name }
       },

package/dist/index.js

@@ -258,7 +258,7 @@ function deployNginxIngress(provider, config = {}) {
 import * as k8s3 from "@pulumi/kubernetes";
 import * as pulumi2 from "@pulumi/pulumi";
 var NATS_DEFAULTS = {
-  replicas: 3,
+  replicas: 1,
   jetstream: {
     enabled: true,
     storageSize: "20Gi",
@@ -443,6 +443,7 @@ function deployRuntime(provider, namespace, config, runtimeProvider) {
   if (config.nats?.enabled && providerName === "doks") {
     const nats = deployNats(provider, namespace, config.nats.config || {});
     result.natsUrl = pulumi3.output(nats.internalUrl);
+    result.natsRelease = nats.release;
   }
   if (config.ingress?.enabled && providerName === "doks") {
     const ingress = deployNginxIngress(provider, config.ingress.config || {});
@@ -917,6 +918,20 @@ var generateSetupScript = (streams) => {
     `  NATS_OPTS="$NATS_OPTS --user $NATS_USER --password $NATS_PASSWORD"`,
     `fi`,
     ``,
+    `echo "⏳ Waiting for NATS to become available..."`,
+    `RETRIES=0`,
+    `MAX_RETRIES=30`,
+    `until nats $NATS_OPTS server ping --count 1 > /dev/null 2>&1; do`,
+    `  RETRIES=$((RETRIES + 1))`,
+    `  if [ "$RETRIES" -ge "$MAX_RETRIES" ]; then`,
+    `    echo "❌ NATS not available after $MAX_RETRIES attempts"`,
+    `    exit 1`,
+    `  fi`,
+    `  echo "  NATS not ready (attempt $RETRIES/$MAX_RETRIES), retrying in 2s..."`,
+    `  sleep 2`,
+    `done`,
+    `echo "✅ NATS is available"`,
+    ``,
     `echo "\uD83D\uDE80 Materializing ${streams.length} stream(s)..."`,
     `echo ""`,
     ``,
@@ -951,7 +966,8 @@ var materializeStreams = (provider, namespace, config) => {
     defaults = DEFAULT_POLICY2,
     image = NATS_BOX_IMAGE,
     ttlAfterFinished = 300,
-    backoffLimit = 3
+    backoffLimit = 6,
+    dependsOn: externalDeps = []
   } = config;
   validateStreamDefinitions(contracts);
   const definitions = collectStreamDefinitions(contracts);
@@ -1016,7 +1032,7 @@ var materializeStreams = (provider, namespace, config) => {
     }
   }, {
     provider,
-    dependsOn: [configMap],
+    dependsOn: [configMap, ...externalDeps],
     deleteBeforeReplace: true
   });
   return job;
@@ -1341,6 +1357,13 @@ var deployK8sService = (provider, namespace, config) => {
     },
     spec: {
       replicas,
+      strategy: {
+        type: "RollingUpdate",
+        rollingUpdate: {
+          maxSurge: normalizedConfig.strategy?.maxSurge ?? 0,
+          maxUnavailable: normalizedConfig.strategy?.maxUnavailable ?? 1
+        }
+      },
       selector: {
         matchLabels: { app: normalizedConfig.name }
       },

package/dist/runtimes/doks/types.d.ts

@@ -256,6 +256,18 @@ export interface K8sServiceConfig {
     healthCheck?: K8sHealthCheck;
     /** Resource requests and limits */
     resources?: K8sResourceConfig;
+    /**
+     * Deployment strategy for rolling updates.
+     *
+     * Defaults to `maxSurge: 0, maxUnavailable: 1` which avoids memory spikes
+     * during rollouts by replacing pods one-at-a-time without surge.
+     */
+    strategy?: {
+        /** Max extra pods during rollout (default: 0) */
+        maxSurge?: number;
+        /** Max unavailable pods during rollout (default: 1) */
+        maxUnavailable?: number;
+    };
     /** Volume mounts for persistent storage */
     volumes?: K8sVolumeMount[];
     /** Command to run (overrides container entrypoint) */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossdelta/infrastructure",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "type": "module",
   "license": "MIT",
   "publishConfig": {
@@ -35,7 +35,7 @@
     }
   },
   "dependencies": {
-    "@crossdelta/cloudevents": "^0.7.13"
+    "@crossdelta/cloudevents": "^0.7.18"
   },
   "peerDependencies": {
     "@pulumi/digitalocean": "^4.0.0",