@cyc-seattle/platform 1.18.0 → 1.19.0

package/README.md

@@ -36,9 +36,9 @@ app owns. The apps that run on it live in their own repos, such as
 - `ScheduledJob` runs a CronJob on `schedule`, in `America/Los_Angeles` unless `timeZone` says
   otherwise. A run never overlaps the one before it, gets an hour, and doesn't retry, by default.
 - All three run non-root with a read-only root filesystem, no capabilities, and no service account
-  token, on Spot pods in dev only. Their limits equal their requests. Their pods get no IAM; grant
-  roles to `member`, a Workload Identity principal, or set `serviceAccountAnnotations` to run as a
-  Google service account.
+  token, on Spot pods in dev only. Their limits equal their requests, unless `limits` raises one,
+  such as CPU to burst. Their pods get no IAM; grant roles to `member`, a Workload Identity
+  principal, or set `serviceAccountAnnotations` to run as a Google service account.
 - `enableService` enables a Google Cloud API.
 
 `mise run build` builds it into `dist/`, which is all it publishes. `.github/workflows/release.yml`

package/dist/workload.d.ts

@@ -27,11 +27,19 @@ export interface PodArgs {
     image: pulumi.Input<string>;
     command?: string[];
     args?: string[];
-    /** The container's requests, which are also its limits. */
+    /** The container's requests. Autopilot bills a pod by them. */
     requests: {
         cpu: pulumi.Input<string>;
         memory: pulumi.Input<string>;
     };
+    /**
+     * The container's limits, each defaulting to its request. A CPU limit above the request lets the
+     * pod burst into a node's spare CPU. A memory limit above it risks an OOM kill when the node is full.
+     */
+    limits?: {
+        cpu?: pulumi.Input<string>;
+        memory?: pulumi.Input<string>;
+    };
     env?: pulumi.Input<EnvVar>[];
     envFrom?: pulumi.Input<EnvFromSource>[];
     volumes?: WorkloadVolume[];

package/dist/workload.js

@@ -53,7 +53,13 @@ export function podSpec(name, args, serviceAccountName, container = {}) {
                 ...(args.args && { args: args.args }),
                 ...container,
                 // A LimitRange's default limit could otherwise sit below the request, which the API refuses.
-                resources: { requests: args.requests, limits: args.requests },
+                resources: {
+                    requests: args.requests,
+                    limits: {
+                        cpu: args.limits?.cpu ?? args.requests.cpu,
+                        memory: args.limits?.memory ?? args.requests.memory,
+                    },
+                },
                 ...(args.env && { env: args.env }),
                 ...(args.envFrom && { envFrom: args.envFrom }),
                 ...(volumes.length > 0 && {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyc-seattle/platform",
-  "version": "1.18.0",
+  "version": "1.19.0",
   "description": "Pulumi components for CYC's shared Google Cloud platform: WebService, the platform outputs reader, and the stacks that build the platform",
   "author": "CYC Community Sailing Center",
   "license": "Apache-2.0",
@@ -64,6 +64,10 @@
   },
   "devDependencies": {
     "@amiceli/vitest-cucumber": "7.0.0",
+    "@commander-js/extra-typings": "^13.1.0",
+    "@cyc-seattle/clubspot-sdk": "^0.3.0",
+    "@cyc-seattle/commodore": "^0.1.0",
+    "@cyc-seattle/gsuite-sdk": "^0.3.0",
     "@cyc-seattle/ts-config": "^0.1.2",
     "@electric-sql/pglite": "0.5.13",
     "@pulumi/command": "1.2.1",
@@ -75,11 +79,15 @@
     "@pulumi/random": "4.21.4",
     "@types/js-yaml": "4.0.9",
     "@types/node": "^22.19.1",
+    "@types/parse": "^3.0.9",
+    "esbuild": "0.28.2",
     "eslint": "^9.39.5",
     "google-auth-library": "^11.3.0",
+    "googleapis": "^144.0.0",
     "js-yaml": "^5.4.3",
     "prettier": "^3.9.10",
     "typescript": "~5.9.3",
-    "vitest": "^5.0.0"
+    "vitest": "^5.0.0",
+    "winston": "^3.18.3"
   }
 }