@gapi/gcli 1.8.248 → 1.8.249

package/README-CLI.md

@@ -33,7 +33,7 @@ Commands:
   mq-trigger:create [options]                          Run a lambda for every message on a RabbitMQ queue
   mq-trigger:update [options]                          Change a message-queue trigger (same flags as create)
   mq-trigger:delete [options]                          Delete a message-queue trigger
-  cluster:create [options]                             Provision a private Talos cluster for a project (runs in the background - takes several minutes; use --wait to block)
+  cluster:create [options]                             Provision a private Talos cluster, or with --virtual a virtual cluster, for a project (runs in the background; use --wait to block)
   cluster:apply [options]                              Make a private cluster match the `cluster:` section of lambforge.yaml: creates it if missing, then applies topology, workers, control planes, load balancer and autoscaling
   cluster:list [options]                               List every private cluster this project has (it may have several - dev/stage/prod, ...)
   cluster:teardown [options]                           Tear down one of a project's clusters (runs in the background - use --wait to block)
@@ -47,7 +47,7 @@ Commands:
   cluster:autoscale [options]                          Change the worker autoscaling policy - only the flags you pass change
   cluster:multi-node [options]                         Convert a single-node cluster to dedicated worker nodes (required for autoscaling)
   cluster:single-node [options]                        Convert a multi-node cluster back to a single node (removes the worker nodes)
-  cluster:load-balancer [options]                      Add or remove the cluster's load balancer (billed per hour while enabled)
+  cluster:load-balancer [options]                      Add or remove the cluster's load balancer (billed per hour while enabled). On a virtual cluster this is its dedicated LB - its own IP; the platform subdomain keeps working either way
   rabbitmq:create [options]                            Provision a RabbitMQ broker for a project (a project may have several)
   rabbitmq:list [options]                              List every RabbitMQ broker for a project
   rabbitmq:delete [options]                            Delete a RabbitMQ broker
@@ -594,7 +594,7 @@ Options:
 --- Subcommand: cluster:create ---
 Usage: gcli cluster:create [options]
 
-Provision a private Talos cluster for a project (runs in the background - takes several minutes; use --wait to block)
+Provision a private Talos cluster, or with --virtual a virtual cluster, for a project (runs in the background; use --wait to block)
 
 Options:
   -p, --project <project>
@@ -605,6 +605,14 @@ Options:
   -l, --location <location>
   --workers <workers>        Worker count (ignored when --singleNode)
   --singleNode               Control plane carries the workload too
+  --virtual                  A virtual cluster (own Kubernetes API + Fission,
+                             no servers, ~2 minutes) instead of a private Talos
+                             cluster
+  --host <host>              With --virtual: name of a private cluster of this
+                             project to run on (default: the shared cluster)
+  --dedicated-lb             With --virtual: give its router its own load
+                             balancer IP (billed per hour); without it lambdas
+                             are served on the platform subdomain
   --wait                     Block until the cluster is ready (or errors)
   -h, --help                 display help for command
 
@@ -770,7 +778,7 @@ Options:
 --- Subcommand: cluster:load-balancer ---
 Usage: gcli cluster:load-balancer [options]
 
-Add or remove the cluster's load balancer (billed per hour while enabled)
+Add or remove the cluster's load balancer (billed per hour while enabled). On a virtual cluster this is its dedicated LB - its own IP; the platform subdomain keeps working either way
 
 Options:
   -p, --project <project>

package/README.md

@@ -217,12 +217,22 @@ A virtual cluster has its own Kubernetes API and Fission but no servers: it
 runs in one namespace of the shared Lambforge cluster, or of one of your
 private clusters, and is ready in about two minutes. Everything else
 (environments, lambdas, `--clusterName`, `cluster:kubeconfig`,
-`cluster:teardown`) works the same as for a private cluster; scaling and
-load balancer commands don't apply.
+`cluster:teardown`) works the same as for a private cluster; scaling
+commands don't apply.
+
+Its lambdas are served on a platform subdomain (`https://vc-<id>.lambforge.com`,
+shown in the `router` column of `cluster:list`) at no extra cost. A
+**dedicated load balancer** gives its router an IP of its own, billed per
+started hour like any load balancer; the subdomain keeps working.
+`cluster:kubeconfig` gives you admin access through
+`https://k-<id>.lambforge.com` (the `api` column).
 
 ```bash
 gcli cluster:create --virtual --name dev                  # on the shared cluster
 gcli cluster:create --virtual --name stage --host prod    # on your private cluster "prod"
+gcli cluster:create --virtual --name demo --dedicated-lb  # with its own IP
+gcli cluster:load-balancer --cluster <id> --enable        # add the dedicated LB later
+gcli cluster:load-balancer --cluster <id> --disable       # release it (subdomain stays)
 ```
 
 ```yaml
@@ -230,8 +240,13 @@ cluster:
   name: dev
   provider: vcluster
   host: prod          # optional - omitted = the shared cluster
+  loadBalancer: true  # optional - dedicated LB; cluster:apply adds/removes it
 ```
 
+`cluster:apply` creates the virtual cluster (with the load balancer if set)
+and later adds or removes the dedicated load balancer when `loadBalancer`
+changes; removing it is skipped unless you pass `--yes`.
+
 ### RabbitMQ Brokers
 
 A project may have several RabbitMQ brokers, each optionally scoped to one of its private clusters.

package/docs/changelog.d/2026-10-28-virtual-clusters-cluster-create-dedicated-lb-loadbalancer-for-virtual-cluster.md

@@ -0,0 +1,23 @@
+## 2026-10-28 - virtual-clusters: cluster:create --dedicated-lb, loadBalancer for virtual clusters, cluster:list URLs
+
+**Feature:** virtual-clusters · **Type:** feat
+
+- `cluster:create --virtual --dedicated-lb` -> provisionProjectVirtualCluster
+  `dedicatedLoadBalancer`; `lambforge.yaml` `loadBalancer: true` on a
+  `provider: vcluster` cluster is now accepted (no longer in
+  VIRTUAL_UNSUPPORTED): created with it, later added/removed by
+  `cluster:apply` (removal = destructive, `--yes`).
+- `cluster:load-balancer` help explains the virtual case (dedicated LB, the
+  subdomain stays) - the backend already handles vClusters.
+- `cluster:list`: type, router (lambda URL), api, loadBalancer columns;
+  `ClusterFragment` + `routerUrl withLoadBalancer loadBalancerIp`.
+- README virtual-clusters section, README-CLI regenerated (it was also
+  missing --virtual/--host), public docs gcli page + What's new.
+- **Test:** `npx jest --coverage=false test/cluster-apply` (plan: create
+  with LB in one step, add, destructive remove; command: spec ->
+  `dedicatedLoadBalancer: true`).
+- **Debug:** `gcli cluster:apply --dry-run` prints the planned LB step;
+  `cluster:list` shows `loadBalancer` pending while the re-apply runs.
+- **Verification:** 119/119 tests, tsc clean, eslint clean; built CLI shows
+  `--dedicated-lb` in `cluster:create --help`. Not run against a live
+  server (gcli is logged into production).

package/docs/features/virtual-clusters.md

@@ -1,6 +1,6 @@
 # Virtual clusters (slice)
 
-**Status:** built and tested end to end on minikube 2026-10-28, not deployed. Feature slug `virtual-clusters`.
+**Status:** in production since 2026-10-28 (shared cluster host, subdomain routing, dedicated LB add-on, token kubeconfig). Feature slug `virtual-clusters`.
 Canonical doc (how it works, test, debug, limits):
 [`graphql-server-functions/docs/features/virtual-clusters.md`](../../../../../graphql-server-functions/docs/features/virtual-clusters.md).
 
@@ -9,4 +9,18 @@ cluster or one of the project's private clusters, `provider: 'vcluster'`.
 
 ## This repo
 
-`gcli cluster:create --virtual [--host <private-cluster>]`; in `lambforge.yaml`: `cluster: { name: dev, provider: vcluster, host: prod }` for `cluster:create` / `cluster:apply` (no host = shared cluster; node settings are rejected). Code: `src/commands/cluster/helpers/virtual-cluster.ts`, `helpers/plan.ts`. Test: `npx jest --coverage=false test/cluster-apply`.
+- `gcli cluster:create --virtual [--host <private-cluster>] [--dedicated-lb]`;
+  in `lambforge.yaml`: `cluster: { name: dev, provider: vcluster, host: prod,
+  loadBalancer: true }` for `cluster:create` / `cluster:apply` (no host =
+  shared cluster; node settings are rejected).
+- `loadBalancer` on a virtual cluster = its **dedicated** LB (own IP,
+  billed). `cluster:apply` creates with it in one step, later adds/removes it
+  (removal is destructive -> needs `--yes`); `cluster:load-balancer
+  --enable|--disable` does the same by hand (the backend routes
+  enable/disableLoadBalancerProjectCluster to the vCluster re-apply).
+- `cluster:list` columns: `type`, `router` (lambda base URL, the
+  `vc-<id>` subdomain), `api` (endpoint - `k-<id>` for vClusters on the
+  shared host), `loadBalancer` (IP / pending / off). `ClusterFragment`
+  selects `routerUrl withLoadBalancer loadBalancerIp`.
+- Code: `src/commands/cluster/helpers/virtual-cluster.ts`, `helpers/plan.ts`,
+  `create.ts`, `apply.ts`, `list.ts`. Test: `npx jest --coverage=false test/cluster-apply`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gapi/gcli",
-  "version": "1.8.248",
+  "version": "1.8.249",
   "repository": {
     "type": "git",
     "url": "https://github.com/Stradivario/gapi.git"

package/release/index.js

@@ -36155,6 +36155,9 @@ topology {
   singleNode
 }
 endpoint
+routerUrl
+withLoadBalancer
+loadBalancerIp
 error
 `;
   }
@@ -36946,8 +36949,8 @@ var init_gql_client = __esm({
         }).pipe((0, import_operators.map)((res) => res.provisionProjectCluster));
       }
       /** A virtual cluster (vCluster) on the shared cluster or on one of the
-          project's private clusters. routerUrl/hostNamespace are selected here
-          only, not in ClusterFragment, so older servers keep working. */
+          project's private clusters. `dedicatedLoadBalancer` gives its router
+          its own IP (billed); the platform subdomain works either way. */
       static provisionProjectVirtualCluster(projectId, input) {
         return this.query({
           query: gql`
@@ -36955,14 +36958,15 @@ var init_gql_client = __esm({
           $projectId: String!
           $name: String!
           $hostClusterId: String
+          $dedicatedLoadBalancer: Boolean
         ) {
           provisionProjectVirtualCluster(
             projectId: $projectId
             name: $name
             hostClusterId: $hostClusterId
+            dedicatedLoadBalancer: $dedicatedLoadBalancer
           ) {
             ${ClusterFragment}
-            routerUrl
             hostNamespace
           }
         }
@@ -254759,7 +254763,7 @@ var init_virtual_cluster = __esm({
   "src/commands/cluster/helpers/virtual-cluster.ts"() {
     import_rxjs8 = __toESM(require_cjs());
     init_gql_client();
-    provisionVirtualCluster = async (projectId, name2, host) => {
+    provisionVirtualCluster = async (projectId, name2, host, dedicatedLoadBalancer) => {
       let hostClusterId;
       if (host) {
         const clusters = await (0, import_rxjs8.lastValueFrom)(
@@ -254777,7 +254781,8 @@ var init_virtual_cluster = __esm({
       return (0, import_rxjs8.lastValueFrom)(
         GraphqlClienAPI.provisionProjectVirtualCluster(projectId, {
           name: name2,
-          hostClusterId
+          hostClusterId,
+          ...dedicatedLoadBalancer === void 0 ? {} : { dedicatedLoadBalancer }
         })
       );
     };
@@ -254819,7 +254824,8 @@ var init_create = __esm({
               provisionVirtualCluster(
                 projectId,
                 cmd.name || data.name,
-                cmd.host ?? data.host
+                cmd.host ?? data.host,
+                cmd.dedicatedLb ?? data.loadBalancer
               )
             ) : GraphqlClienAPI.provisionProjectCluster(projectId, {
               name: cmd.name || data.name,
@@ -254960,7 +254966,6 @@ var init_plan = __esm({
       "singleNode",
       "workers",
       "controlPlanes",
-      "loadBalancer",
       "autoscale"
     ];
     intIn = (v, min, max) => Number.isInteger(v) && v >= min && v <= max;
@@ -255022,8 +255027,21 @@ var init_plan = __esm({
         if (!current) {
           steps.push({
             kind: "create",
-            description: `create virtual cluster "${desired.name}" on ${desired.host ? `"${desired.host}"` : "the shared cluster"}`
+            description: `create virtual cluster "${desired.name}" on ${desired.host ? `"${desired.host}"` : "the shared cluster"}${desired.loadBalancer ? " with a dedicated load balancer" : ""}`
           });
+        } else if (desired.loadBalancer !== void 0 && !!current.withLoadBalancer !== desired.loadBalancer) {
+          steps.push(
+            desired.loadBalancer ? {
+              kind: "load-balancer",
+              enabled: true,
+              description: "add a dedicated load balancer (its own IP, billed; the subdomain stays)"
+            } : {
+              kind: "load-balancer",
+              enabled: false,
+              description: "remove the dedicated load balancer (its IP is released; the subdomain stays)",
+              destructive: true
+            }
+          );
         }
         return { steps, notes };
       }
@@ -255208,7 +255226,12 @@ var init_apply = __esm({
         }
         Logger.info(`-> ${step.description}`);
         if (step.kind === "create") {
-          const created = desired.provider === "vcluster" ? await provisionVirtualCluster(projectId, desired.name, desired.host) : await (0, import_rxjs12.lastValueFrom)(
+          const created = desired.provider === "vcluster" ? await provisionVirtualCluster(
+            projectId,
+            desired.name,
+            desired.host,
+            desired.loadBalancer
+          ) : await (0, import_rxjs12.lastValueFrom)(
             GraphqlClienAPI.provisionProjectCluster(projectId, {
               name: desired.name,
               imageId: desired.imageId,
@@ -255293,14 +255316,20 @@ var init_list = __esm({
               "No private clusters for this project yet - this project runs on the shared cluster. See cluster:create."
             );
           } else {
-            Logger.table(clusters, [
-              "id",
-              "name",
-              "status",
-              "region",
-              "serverType",
-              "endpoint"
-            ]);
+            Logger.table(
+              clusters.map((c) => {
+                const x2 = c;
+                return {
+                  id: x2.id,
+                  name: x2.name,
+                  type: x2.provider === "vcluster" ? "virtual" : x2.provider,
+                  status: x2.status,
+                  router: x2.routerUrl ?? "-",
+                  api: x2.endpoint ?? "-",
+                  loadBalancer: x2.withLoadBalancer ? x2.loadBalancerIp ?? "pending" : "off"
+                };
+              })
+            );
           }
           Logger.log("-------------------");
         })
@@ -323006,6 +323035,9 @@ function registerClusterCommands(program2) {
   ).option(
     "--host <host>",
     "With --virtual: name of a private cluster of this project to run on (default: the shared cluster)"
+  ).option(
+    "--dedicated-lb",
+    "With --virtual: give its router its own load balancer IP (billed per hour); without it lambdas are served on the platform subdomain"
   ).option("--wait", "Block until the cluster is ready (or errors)").action(lazy(() => Promise.resolve().then(() => (init_create(), create_exports)).then((m2) => m2.default)));
   program2.command("cluster:apply").description(
     "Make a private cluster match the `cluster:` section of lambforge.yaml: creates it if missing, then applies topology, workers, control planes, load balancer and autoscaling"
@@ -323072,7 +323104,7 @@ function registerClusterCommands(program2) {
   ).option("--wait", "Block until the cluster settles").action(lazy(() => Promise.resolve().then(() => (init_single_node(), single_node_exports)).then((m2) => m2.default)));
   target(
     program2.command("cluster:load-balancer").description(
-      "Add or remove the cluster's load balancer (billed per hour while enabled)"
+      "Add or remove the cluster's load balancer (billed per hour while enabled). On a virtual cluster this is its dedicated LB - its own IP; the platform subdomain keeps working either way"
     )
   ).option("--enable", "Add the load balancer").option("--disable", "Remove the load balancer").option("--wait", "Block until the cluster settles").action(lazy(() => Promise.resolve().then(() => (init_load_balancer(), load_balancer_exports)).then((m2) => m2.default)));
 }