@cyc-seattle/platform 0.2.3 → 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -3
- package/package.json +2 -1
package/README.md
CHANGED
|
@@ -53,9 +53,13 @@ Kubernetes API's service proxy, which the integration tests use, and denies egre
|
|
|
53
53
|
(25, 465, 587) outside the cluster. `cluster` writes dev's A records; each prod app writes its own,
|
|
54
54
|
pointing at `gatewayAddress`.
|
|
55
55
|
|
|
56
|
-
`deploy-dev`
|
|
57
|
-
|
|
58
|
-
|
|
56
|
+
`deploy-dev` reads Secret Manager secrets whose IDs start with `dev-`. Read them with
|
|
57
|
+
`gcp.secretmanager.getSecretVersionAccess`, which needs only the accessor role.
|
|
58
|
+
|
|
59
|
+
`cloud` creates each app's dev database, user, and password secret (`dev-db-<name>-password`) on
|
|
60
|
+
`cyc-dev`, for each name in `cloud:devDatabases`. To add an app's dev database, add its name there in a
|
|
61
|
+
platform PR: Cloud SQL ignores IAM conditions on its user and database calls, so `deploy-dev` can't
|
|
62
|
+
hold a role scoped to `cyc-dev`.
|
|
59
63
|
|
|
60
64
|
A Job that fails in `prod`, or a CronJob there with no successful Job in 3 hours, raises an alert.
|
|
61
65
|
It emails each address in `cluster:alertEmails`, which is unset for now (#20).
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cyc-seattle/platform",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.4.0",
|
|
4
4
|
"description": "Pulumi components for CYC's shared Google Cloud platform: WebService, the platform outputs reader, and the stacks that build the platform",
|
|
5
5
|
"author": "CYC Community Sailing Center",
|
|
6
6
|
"license": "Apache-2.0",
|
|
@@ -50,6 +50,7 @@
|
|
|
50
50
|
"@pulumi/github": "6.15.0",
|
|
51
51
|
"@pulumi/kubernetes": "4.34.2",
|
|
52
52
|
"@pulumi/pulumi": "3.264.0",
|
|
53
|
+
"@pulumi/random": "4.21.3",
|
|
53
54
|
"@types/js-yaml": "4.0.9",
|
|
54
55
|
"@types/node": "^22.19.1",
|
|
55
56
|
"eslint": "^9.39.5",
|