@cyc-seattle/platform 1.2.0 → 1.4.0

package/README.md

@@ -11,7 +11,7 @@ app owns. The apps that run on it live in their own repos, such as
 | [`bootstrap`](stacks/bootstrap) | Service accounts and project IAM, the Pulumi state buckets and KMS keys, and the org's GitHub repos and settings                                                                                                                                                                                                                                                                                                                  | A human with project Owner and `gh` `admin:org`. Never CI.                                                        |
 | [`infra`](stacks/infra)         | The VPC, the cluster subnet and its Cloud NAT on a static address, the private services peering, the prod and dev Cloud SQL instances, the DNS zones, Artifact Registry, the GKE Autopilot cluster, the shared Gateway, its address, certificates, and dev's DNS records, the `dev` and `prod` namespaces with their quotas and network policies, dev's RBAC, the prod Job alerts, and each environment's `platform/outputs.json` | `deploy-runner`, from Actions after approval. A deployer, with `mise run deploy`, when breaking glass.            |
 | [`smoke`](stacks/smoke)         | One `WebService` in dev, at `smoke.dev.cycsail.team`, for the integration tests                                                                                                                                                                                                                                                                                                                                                   | `deploy-dev`, from Actions on every PR. A deployer, with `PULUMI_STACK=dev mise run deploy`, when breaking glass. |
-| [`backend`](stacks/backend)     | Directus, with the schema apply from `schemas/`, its roles, policies, and permission rules, the sync machine users, its OIDC client, and MCP                                                                                                                                                                                                                                                                                      | `deploy-dev`, from Actions on every PR. Dev only, until prod cuts over (cyc-seattle/workplace#6 step 6).          |
+| [`backend`](stacks/backend)     | Directus, with the schema apply from `schemas/`, its roles, policies, and permission rules, the sync machine users, its OIDC client, and MCP, and the clubspot-sync and gsuite-sync CronJobs, with dev's Clubspot and Workspace fakes                                                                                                                                                                                             | `deploy-dev`, from Actions on every PR. Dev only, until prod cuts over (cyc-seattle/workplace#6 step 6).          |
 
 ## @cyc-seattle/platform
 
@@ -47,7 +47,9 @@ releases each merge to `main` with semantic-release, versioned by the convention
 
 Every app runs on the one GKE Autopilot cluster, in its environment's namespace. Prod runs on
 regular capacity, and dev on Spot pods. isthmia's apps (Authentik, Directus, the portal, and the
-two syncs as CronJobs) run in both, and dev adds Mailpit and the Clubspot and Workspace fakes.
+two syncs as CronJobs) run in both, and dev adds Mailpit and the Clubspot and Workspace fakes. In dev,
+platform's `backend` deploys Directus, the syncs, and the fakes, and dev's sync CronJobs are
+suspended: the integration features and `mise run reset` run them as Jobs (cyc-seattle/isthmia#271).
 
 | Stack  | Namespace | Domain             | Deploy identity |
 | ------ | --------- | ------------------ | --------------- |

package/dist/scheduled-job.d.ts

@@ -9,6 +9,11 @@ export interface ScheduledJobArgs extends PodArgs {
     activeDeadlineSeconds?: number;
     /** How many times a failed run retries. Defaults to 0, so the next scheduled run is the retry. */
     backoffLimit?: number;
+    /**
+     * Stops the scheduled runs, while a Job made from the CronJob still runs. Defaults to false. Unset,
+     * it stays out of the spec, so the CronJobs deployed before it existed show no diff.
+     */
+    suspend?: boolean;
 }
 /**
  * A CronJob with the platform's secure defaults, and a Kubernetes ServiceAccount, both named `name`.

package/dist/scheduled-job.js

@@ -22,6 +22,7 @@ export class ScheduledJob extends pulumi.ComponentResource {
                 schedule: args.schedule,
                 timeZone: args.timeZone ?? "America/Los_Angeles",
                 concurrencyPolicy: "Forbid",
+                ...(args.suspend !== undefined && { suspend: args.suspend }),
                 jobTemplate: {
                     metadata: { labels },
                     spec: {

package/dist/web-service.d.ts

@@ -11,6 +11,14 @@ export interface WebServiceArgs extends WorkloadArgs {
     readinessProbe: Probe & {
         httpGet: pulumi.Input<k8s.types.input.core.v1.HTTPGetAction>;
     };
+    /**
+     * The load balancer's check timing. GKE's default is every 5s from each of several probers, which
+     * an app whose readiness check reaches its database may not afford.
+     */
+    healthCheck?: {
+        checkIntervalSec?: number;
+        timeoutSec?: number;
+    };
 }
 /** Returns `hostname` if it is the environment's domain or a name under it, and throws otherwise. */
 export declare function checkHostname(hostname: string, domain: string): string;

package/dist/web-service.js

@@ -51,6 +51,7 @@ export class WebService extends pulumi.ComponentResource {
             metadata,
             spec: {
                 default: {
+                    ...args.healthCheck,
                     config: {
                         type: "HTTP",
                         httpHealthCheck: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyc-seattle/platform",
-  "version": "1.2.0",
+  "version": "1.4.0",
   "description": "Pulumi components for CYC's shared Google Cloud platform: WebService, the platform outputs reader, and the stacks that build the platform",
   "author": "CYC Community Sailing Center",
   "license": "Apache-2.0",