@envsync-cloud/deploy-cli 0.8.8 → 0.8.9

package/dist/index.js

@@ -4334,6 +4334,7 @@ function domainMap(rootDomain) {
     landing: rootDomain,
     app: `app.${rootDomain}`,
     api: `api.${rootDomain}`,
+    manage_api: `manage-api.${rootDomain}`,
     auth: `auth.${rootDomain}`,
     obs: `obs.${rootDomain}`,
     mail: `mail.${rootDomain}`,
@@ -4411,6 +4412,7 @@ function buildRuntimeEnv2(config, generated) {
     ENVSYNC_LICENSE_ROOT_CA_CERT_PATH: oss ? "" : "/etc/envsync/license/root-ca.pem",
     DB_AUTO_MIGRATE: "false",
     PORT: `${config.services.api_port}`,
+    MANAGEMENT_API_PORT: `${config.services.management_api_port}`,
     DATABASE_HOST: "postgres",
     DATABASE_PORT: "5432",
     DATABASE_USER: "postgres",
@@ -4452,6 +4454,7 @@ function buildRuntimeEnv2(config, generated) {
     OPENFGA_STORE_ID: generated.openfga.store_id,
     OPENFGA_MODEL_ID: generated.openfga.model_id,
     OPENFGA_DB_PASSWORD: generated.secrets.openfga_db_password,
+    MANAGEMENT_API_URL: oss ? "" : publicHttpsUrl(config, hosts.manage_api),
     CLICKSTACK_OPERATOR_EMAIL: generated.clickstack.operator_email,
     CLICKSTACK_OPERATOR_PASSWORD: generated.clickstack.operator_password,
     CLICKSTACK_ACCESS_KEY: generated.clickstack.access_key,
@@ -4541,6 +4544,7 @@ function renderTraefikDynamicConfig(config, generated) {
   const activeSlot = generated.deployment.active_slot;
   const apiServiceName = generated.deployment.maintenance_mode ? "envsync-api-maintenance" : "envsync-api";
   const landingEnabled = !isOssConfig(config);
+  const managementEnabled = !isOssConfig(config);
   const otelAllowedOrigins = [
     ...landingEnabled ? publicHttpsOriginVariants(config, hosts.landing) : [],
     ...publicHttpsOriginVariants(config, hosts.app)
@@ -4602,6 +4606,16 @@ function renderTraefikDynamicConfig(config, generated) {
     "      loadBalancer:",
     "        servers:",
     "          - url: http://api_maintenance:8080",
+    ...managementEnabled ? [
+      "    envsync-management-api:",
+      "      loadBalancer:",
+      "        healthCheck:",
+      "          path: /health",
+      "          interval: 5s",
+      "          timeout: 3s",
+      "        servers:",
+      `          - url: http://envsync-management-api:${config.services.management_api_port}`
+    ] : [],
     ...landingEnabled ? [
       "    landing:",
       "      loadBalancer:",
@@ -4629,6 +4643,14 @@ function renderTraefikDynamicConfig(config, generated) {
       "      tls:",
       "        certResolver: letsencrypt"
     ] : [],
+    ...managementEnabled ? [
+      "    management-api-router:",
+      `      rule: Host(\`${hosts.manage_api}\`)`,
+      "      service: envsync-management-api",
+      "      entryPoints: [websecure]",
+      "      tls:",
+      "        certResolver: letsencrypt"
+    ] : [],
     "    web-router:",
     `      rule: Host(\`${hosts.app}\`)`,
     "      service: web",
@@ -4707,10 +4729,12 @@ function renderFrontendRuntimeConfig(config, generated) {
   const hosts = domainMap(config.domain.root_domain);
   const otelEndpoint = publicHttpsUrl(config, hosts.obs);
   const activeReleaseVersion = generated.deployment.slots[generated.deployment.active_slot].release_version || config.release.version;
+  const managementApiUrl = config.edition === "enterprise" ? publicHttpsUrl(config, hosts.manage_api) : "";
   return `window.__ENVSYNC_RUNTIME_CONFIG__ = ${JSON.stringify({
     apiBaseUrl: publicHttpsUrl(config, hosts.api),
     appBaseUrl: publicHttpsUrl(config, hosts.app),
     authBaseUrl: publicHttpsUrl(config, hosts.auth),
+    managementApiUrl,
     keycloakRealm: config.auth.keycloak_realm,
     webClientId: config.auth.web_client_id,
     apiDocsUrl: publicHttpsUrl(config, hosts.api, "/docs"),
@@ -4772,6 +4796,7 @@ function renderStack(config, runtimeEnv, generated, mode, paths) {
   const includeRuntimeInfra = mode !== "base";
   const includeAppServices = mode === "full";
   const landingEnabled = !isOssConfig(config);
+  const managementEnabled = !isOssConfig(config);
   const apiLicenseVolume = landingEnabled ? "\n    volumes:\n      - /etc/envsync/license:/etc/envsync/license:ro" : "";
   const deployment = createSteadyApiDeploymentState(config, generated);
   const stackName = config.services.stack_name;
@@ -4983,6 +5008,17 @@ ${renderEnvList({
       - source: otel_agent_conf
         target: /etc/otel-agent.yaml
     networks: [envsync]
+${includeRuntimeInfra && managementEnabled ? `
+
+  envsync-management-api:
+    image: ${config.images.management_api}
+    environment:
+${renderEnvList({
+    ...apiEnvironment,
+    PORT: `${config.services.management_api_port}`
+  })}
+${apiLicenseVolume}
+    networks: [envsync]` : ""}
 ${includeAppServices ? `
 
   api_maintenance:
@@ -5218,6 +5254,7 @@ var DEFAULT_SOURCE_REPO_URL = "https://github.com/EnvSync-Cloud/envsync.git";
 var DEFAULT_ENTERPRISE_LICENSE_SERVER_URL = "https://license.envsync.cloud";
 var MANAGED_VERSIONED_IMAGE_PREFIXES = {
   api: "ghcr.io/envsync-cloud/envsync-api:",
+  management_api: "ghcr.io/envsync-cloud/envsync-management-api:",
   keycloak: "envsync-keycloak:",
   web: "ghcr.io/envsync-cloud/envsync-web-static:",
   landing: "ghcr.io/envsync-cloud/envsync-landing-static:"
@@ -5424,6 +5461,7 @@ function domainMap2(rootDomain) {
     landing: rootDomain,
     app: `app.${rootDomain}`,
     api: `api.${rootDomain}`,
+    manage_api: `manage-api.${rootDomain}`,
     auth: `auth.${rootDomain}`,
     obs: `obs.${rootDomain}`,
     mail: `mail.${rootDomain}`,
@@ -5599,6 +5637,7 @@ function versionedImages(version) {
   assertSemverVersion(version);
   return {
     api: `ghcr.io/envsync-cloud/envsync-api:${version}`,
+    management_api: `ghcr.io/envsync-cloud/envsync-management-api:${version}`,
     keycloak: `envsync-keycloak:${version}`,
     web: `ghcr.io/envsync-cloud/envsync-web-static:${version}`,
     landing: `ghcr.io/envsync-cloud/envsync-landing-static:${version}`
@@ -5664,6 +5703,7 @@ function normalizeConfig(raw) {
     },
     images: {
       api: !raw.images?.api || isManagedVersionedImage(raw.images.api, "api") ? derivedImages.api : raw.images.api,
+      management_api: !raw.images?.management_api || isManagedVersionedImage(raw.images.management_api, "management_api") ? derivedImages.management_api : raw.images.management_api,
       keycloak: !raw.images?.keycloak || isManagedVersionedImage(raw.images.keycloak, "keycloak") ? derivedImages.keycloak : raw.images.keycloak,
       web: !raw.images?.web || isManagedVersionedImage(raw.images.web, "web") ? derivedImages.web : raw.images.web,
       landing: !raw.images?.landing || isManagedVersionedImage(raw.images.landing, "landing") ? derivedImages.landing : raw.images.landing,
@@ -5674,6 +5714,7 @@ function normalizeConfig(raw) {
     services: {
       stack_name: stackName,
       api_port: requireDefined(raw.services?.api_port, "services.api_port"),
+      management_api_port: raw.services?.management_api_port ?? 4001,
       public_http_port: raw.services?.public_http_port ?? 80,
       public_https_port: raw.services?.public_https_port ?? 443,
       clickstack_ui_port: requireDefined(raw.services?.clickstack_ui_port, "services.clickstack_ui_port"),
@@ -7148,6 +7189,7 @@ async function cmdSetup() {
     domain: { root_domain: rootDomain, acme_email: acmeEmail },
     images: {
       api: releaseImages.api,
+      management_api: releaseImages.management_api,
       keycloak: releaseImages.keycloak,
       web: releaseImages.web,
       landing: releaseImages.landing,
@@ -7158,6 +7200,7 @@ async function cmdSetup() {
     services: {
       stack_name: "envsync",
       api_port: 4e3,
+      management_api_port: 4001,
       public_http_port: 80,
       public_https_port: 443,
       clickstack_ui_port: 8080,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@envsync-cloud/deploy-cli",
-  "version": "0.8.8",
+  "version": "0.8.9",
   "description": "CLI for self-hosted EnvSync deployment on Docker Swarm",
   "type": "module",
   "bin": {