@envsync-cloud/deploy 0.20.9 → 0.20.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/cli.js CHANGED
@@ -426,6 +426,7 @@ function buildRuntimeEnv2(config, generated, options) {
426
426
  OPENFGA_STORE_ID: generated.openfga.store_id,
427
427
  OPENFGA_MODEL_ID: generated.openfga.model_id,
428
428
  OPENFGA_DB_PASSWORD: generated.secrets.openfga_db_password,
429
+ API_URL: publicHttpsUrl(config, hosts.api),
429
430
  MANAGEMENT_API_URL: oss ? "" : publicHttpsUrl(config, hosts.api, "/api/v1/manage"),
430
431
  CLICKSTACK_OPERATOR_EMAIL: generated.clickstack.operator_email,
431
432
  CLICKSTACK_OPERATOR_PASSWORD: generated.clickstack.operator_password,
@@ -2770,9 +2771,10 @@ function writeDeployArtifacts(config, generated) {
2770
2771
  ensureSetupTokenFile(SETUP_TOKEN_FILE, setupToken);
2771
2772
  logInfo(`Setup token fingerprint: ${setupTokenFingerprint(setupToken)} (${SETUP_TOKEN_FILE})`);
2772
2773
  }
2773
- if (generated.secrets.minikms_session_signing_key) {
2774
- writeFileMaybe(MINIKMS_SESSION_SIGNING_KEY_FILE, generated.secrets.minikms_session_signing_key, 384);
2774
+ if (!generated.secrets.minikms_session_signing_key) {
2775
+ generated.secrets.minikms_session_signing_key = generateMinikmsSessionSigningKey();
2775
2776
  }
2777
+ writeFileMaybe(MINIKMS_SESSION_SIGNING_KEY_FILE, generated.secrets.minikms_session_signing_key, 420);
2776
2778
  writeFileMaybe(DEPLOY_ENV, renderEnvFile(runtimeEnv), 384);
2777
2779
  writeFileMaybe(
2778
2780
  INTERNAL_CONFIG_JSON,
@@ -4378,6 +4380,7 @@ ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)
4378
4380
  activateFrontendReleaseForState(config, currentState, config.release.version);
4379
4381
  deployRenderedStack(config, "steady");
4380
4382
  }
4383
+ runMiniKmsMigrate(config, buildRuntimeEnv2(config, currentState));
4381
4384
  waitForHealthyServices(config, [
4382
4385
  { label: "traefik", getHealth: (services) => serviceHealth(services, `${config.services.stack_name}_traefik`) },
4383
4386
  { label: "keycloak", getHealth: (services) => serviceHealth(services, `${config.services.stack_name}_keycloak`) },
package/dist/index.js CHANGED
@@ -427,6 +427,7 @@ function buildRuntimeEnv2(config, generated, options) {
427
427
  OPENFGA_STORE_ID: generated.openfga.store_id,
428
428
  OPENFGA_MODEL_ID: generated.openfga.model_id,
429
429
  OPENFGA_DB_PASSWORD: generated.secrets.openfga_db_password,
430
+ API_URL: publicHttpsUrl(config, hosts.api),
430
431
  MANAGEMENT_API_URL: oss ? "" : publicHttpsUrl(config, hosts.api, "/api/v1/manage"),
431
432
  CLICKSTACK_OPERATOR_EMAIL: generated.clickstack.operator_email,
432
433
  CLICKSTACK_OPERATOR_PASSWORD: generated.clickstack.operator_password,
@@ -2631,9 +2632,10 @@ function writeDeployArtifacts(config, generated) {
2631
2632
  ensureSetupTokenFile(SETUP_TOKEN_FILE, setupToken);
2632
2633
  logInfo(`Setup token fingerprint: ${setupTokenFingerprint(setupToken)} (${SETUP_TOKEN_FILE})`);
2633
2634
  }
2634
- if (generated.secrets.minikms_session_signing_key) {
2635
- writeFileMaybe(MINIKMS_SESSION_SIGNING_KEY_FILE, generated.secrets.minikms_session_signing_key, 384);
2635
+ if (!generated.secrets.minikms_session_signing_key) {
2636
+ generated.secrets.minikms_session_signing_key = generateMinikmsSessionSigningKey();
2636
2637
  }
2638
+ writeFileMaybe(MINIKMS_SESSION_SIGNING_KEY_FILE, generated.secrets.minikms_session_signing_key, 420);
2637
2639
  writeFileMaybe(DEPLOY_ENV, renderEnvFile(runtimeEnv), 384);
2638
2640
  writeFileMaybe(
2639
2641
  INTERNAL_CONFIG_JSON,
@@ -4234,6 +4236,7 @@ ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)
4234
4236
  activateFrontendReleaseForState(config, currentState, config.release.version);
4235
4237
  deployRenderedStack(config, "steady");
4236
4238
  }
4239
+ runMiniKmsMigrate(config, buildRuntimeEnv2(config, currentState));
4237
4240
  waitForHealthyServices(config, [
4238
4241
  { label: "traefik", getHealth: (services) => serviceHealth(services, `${config.services.stack_name}_traefik`) },
4239
4242
  { label: "keycloak", getHealth: (services) => serviceHealth(services, `${config.services.stack_name}_keycloak`) },
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@envsync-cloud/deploy",
3
- "version": "0.20.9",
3
+ "version": "0.20.11",
4
4
  "description": "OSS CLI for self-hosted EnvSync deployment on Docker Swarm",
5
5
  "type": "module",
6
6
  "bin": {
@@ -46,7 +46,7 @@
46
46
  "zod": "^3.25.76"
47
47
  },
48
48
  "devDependencies": {
49
- "@envsync-cloud/deploy-core": "0.20.9",
49
+ "@envsync-cloud/deploy-core": "0.20.11",
50
50
  "tsup": "^8.5.0",
51
51
  "typescript": "^5.9.2"
52
52
  },