@restatedev/restate-cdk 1.1.0-rc.2 → 1.1.1-pre.6

package/test/__snapshots__/restate-constructs.test.ts.snap

@@ -130,8 +130,10 @@ exports[`Restate constructs [Experimental] Create a self-hosted Restate environm
     Properties:
       ContainerDefinitions:
         - Environment:
-            - Name: RESTATE_OBSERVABILITY__LOG__FORMAT
-              Value: Json
+            - Name: RESTATE_LOG_FORMAT
+              Value: json
+            - Name: RESTATE_NODE_NAME
+              Value: fargate
           Essential: true
           Image: Any<Object>
           LogConfiguration:
@@ -142,7 +144,7 @@ exports[`Restate constructs [Experimental] Create a self-hosted Restate environm
               awslogs-stream-prefix: restate
               awslogs-region: region
           MountPoints:
-            - ContainerPath: /target
+            - ContainerPath: /restate-data
               ReadOnly: false
               SourceVolume: restateStore
           Name: restate-runtime
@@ -424,10 +426,10 @@ exports[`Restate constructs [Experimental] Create a self-hosted Restate environm
     Type: 'AWS::ElasticLoadBalancingV2::TargetGroup'
     Properties:
       HealthCheckIntervalSeconds: 5
-      HealthCheckPath: /grpc.health.v1.Health/Check
+      HealthCheckPath: /restate/health
       HealthCheckTimeoutSeconds: 2
       HealthyThresholdCount: 3
-      Port: 80
+      Port: 8080
       Protocol: HTTP
       TargetGroupAttributes:
         - Key: deregistration_delay.timeout_seconds
@@ -458,7 +460,7 @@ exports[`Restate constructs [Experimental] Create a self-hosted Restate environm
       HealthCheckPath: /health
       HealthCheckTimeoutSeconds: 2
       HealthyThresholdCount: 3
-      Port: 80
+      Port: 9070
       Protocol: HTTP
       TargetGroupAttributes:
         - Key: deregistration_delay.timeout_seconds
@@ -777,9 +779,9 @@ exports[`Restate constructs Create a self-hosted Restate environment deployed on
                         docker run --name restate --restart on-failure --detach
                         --volume /etc/restate:/etc/restate --volume
                         /var/restate:/restate-data --network=host -e
-                        RESTATE_OBSERVABILITY__LOG__FORMAT=Json -e
-                        RUST_LOG=info,restate_worker::partition=warn -e
-                        RESTATE_OBSERVABILITY__TRACING__ENDPOINT=http://localhost:4317
+                        RESTATE_OBSERVABILITY__LOG__FORMAT="Json" -e
+                        RUST_LOG="info" -e
+                        RESTATE_OBSERVABILITY__TRACING__ENDPOINT="http://localhost:4317"
                         --log-driver=awslogs --log-opt awslogs-group=
                       - Ref: RestateLogsFD86ECAE
                       - ' docker.io/restatedev/restate:latest --config-file /etc/restate/config.toml'
@@ -1116,9 +1118,11 @@ exports[`Restate constructs Create a self-hosted Restate environment deployed on
                         docker run --name restate --restart on-failure --detach
                         --volume /etc/restate:/etc/restate --volume
                         /var/restate:/restate-data --network=host -e
-                        RESTATE_OBSERVABILITY__LOG__FORMAT=Json -e
-                        RUST_LOG=info,restate_worker::partition=warn -e
-                        RESTATE_OBSERVABILITY__TRACING__ENDPOINT=http://localhost:4317
+                        RESTATE_OBSERVABILITY__LOG__FORMAT="Json" -e
+                        RUST_LOG="info" -e
+                        RESTATE_OBSERVABILITY__TRACING__ENDPOINT="http://localhost:4317"
+                        -e
+                        RESTATE_INGRESS__ADVERTISED_INGRESS_ENDPOINT="http://restate-ingress"
                         --log-driver=awslogs --log-opt awslogs-group=
                       - Ref: RestateLogsFD86ECAE
                       - ' docker.io/restatedev/restate:custom-version --config-file /etc/restate/config.toml'
@@ -1264,7 +1268,6 @@ exports[`Restate constructs Deploy a Lambda service handler to Restate Cloud env
         'Fn::GetAtt':
           - RestateInvokerRole42565598
           - Arn
-      removalPolicy: retain
       private: 'false'
       insecure: 'false'
     DependsOn:
@@ -1322,7 +1325,7 @@ exports[`Restate constructs Deploy a Lambda service handler to Restate Cloud env
         'Fn::GetAtt':
           - ServiceDeployerEventHandlerServiceRoleF133584F
           - Arn
-      Runtime: nodejs18.x
+      Runtime: nodejs22.x
       Timeout: 180
     DependsOn:
       - ServiceDeployerEventHandlerServiceRoleDefaultPolicyFE2DC3C9
@@ -1371,6 +1374,12 @@ exports[`Restate constructs Deploy a Lambda service handler to Restate Cloud env
                         - ServiceDeployerEventHandler89EAD25F
                         - Arn
                     - ':*'
+          - Action: 'lambda:GetFunction'
+            Effect: Allow
+            Resource:
+              'Fn::GetAtt':
+                - ServiceDeployerEventHandler89EAD25F
+                - Arn
         Version: '2012-10-17'
       PolicyName: >-
         ServiceDeployerCustomResourceProviderframeworkonEventServiceRoleDefaultPolicy740A65C9
@@ -1522,7 +1531,6 @@ exports[`Restate constructs Deploy a Lambda service handler to existing Restate
         'Fn::GetAtt':
           - InvokerRole4DB2757E
           - Arn
-      removalPolicy: retain
       private: 'false'
       insecure: 'false'
     DependsOn:
@@ -1576,7 +1584,7 @@ exports[`Restate constructs Deploy a Lambda service handler to existing Restate
         'Fn::GetAtt':
           - ServiceDeployerEventHandlerServiceRoleF133584F
           - Arn
-      Runtime: nodejs18.x
+      Runtime: nodejs22.x
       Timeout: 180
     DependsOn:
       - ServiceDeployerEventHandlerServiceRoleDefaultPolicyFE2DC3C9
@@ -1625,6 +1633,12 @@ exports[`Restate constructs Deploy a Lambda service handler to existing Restate
                         - ServiceDeployerEventHandler89EAD25F
                         - Arn
                     - ':*'
+          - Action: 'lambda:GetFunction'
+            Effect: Allow
+            Resource:
+              'Fn::GetAtt':
+                - ServiceDeployerEventHandler89EAD25F
+                - Arn
         Version: '2012-10-17'
       PolicyName: >-
         ServiceDeployerCustomResourceProviderframeworkonEventServiceRoleDefaultPolicy740A65C9
@@ -1714,9 +1728,9 @@ Mappings:
     ca-west-1:
       value: nodejs20.x
     cn-north-1:
-      value: nodejs18.x
+      value: nodejs20.x
     cn-northwest-1:
-      value: nodejs18.x
+      value: nodejs20.x
     eu-central-1:
       value: nodejs20.x
     eu-central-2:
@@ -1750,9 +1764,9 @@ Mappings:
     us-east-2:
       value: nodejs20.x
     us-gov-east-1:
-      value: nodejs18.x
+      value: nodejs20.x
     us-gov-west-1:
-      value: nodejs18.x
+      value: nodejs20.x
     us-iso-east-1:
       value: nodejs18.x
     us-iso-west-1:
@@ -1765,3 +1779,410 @@ Mappings:
       value: nodejs20.x
 "
 `;
+
+exports[`Restate constructs Restate Cloud Environment construct 1`] = `
+"Resources:
+  e1InvokerRoleEEC53B29:
+    Type: 'AWS::IAM::Role'
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          - Action: 'sts:AssumeRole'
+            Condition:
+              StringEquals:
+                'sts:ExternalId': env_e1
+                'aws:PrincipalArn': 'arn:aws:iam::654654156625:role/RestateCloud'
+            Effect: Allow
+            Principal:
+              AWS:
+                'Fn::Join':
+                  - ''
+                  - - 'arn:'
+                    - Ref: 'AWS::Partition'
+                    - ':iam::654654156625:root'
+          - Action: 'sts:TagSession'
+            Effect: Allow
+            Principal:
+              AWS:
+                'Fn::Join':
+                  - ''
+                  - - 'arn:'
+                    - Ref: 'AWS::Partition'
+                    - ':iam::654654156625:root'
+        Version: '2012-10-17'
+  e2InvokerRoleFFCF8E05:
+    Type: 'AWS::IAM::Role'
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          - Action: 'sts:AssumeRole'
+            Condition:
+              StringEquals:
+                'sts:ExternalId': env_e2
+                'aws:PrincipalArn': 'arn:aws:iam::654654156625:role/RestateCloud'
+            Effect: Allow
+            Principal:
+              AWS:
+                'Fn::Join':
+                  - ''
+                  - - 'arn:'
+                    - Ref: 'AWS::Partition'
+                    - ':iam::654654156625:root'
+          - Action: 'sts:TagSession'
+            Effect: Allow
+            Principal:
+              AWS:
+                'Fn::Join':
+                  - ''
+                  - - 'arn:'
+                    - Ref: 'AWS::Partition'
+                    - ':iam::654654156625:root'
+        Version: '2012-10-17'
+"
+`;
+
+exports[`Restate constructs Restate Cloud Environment construct with role reference 1`] = `
+"Resources:
+  RestateServiceHandlerServiceRole07B26D05:
+    Type: 'AWS::IAM::Role'
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          - Action: 'sts:AssumeRole'
+            Effect: Allow
+            Principal:
+              Service: lambda.amazonaws.com
+        Version: '2012-10-17'
+      ManagedPolicyArns:
+        - 'Fn::Join':
+            - ''
+            - - 'arn:'
+              - Ref: 'AWS::Partition'
+              - ':iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'
+  RestateServiceHandler71409CD7:
+    Type: 'AWS::Lambda::Function'
+    Properties:
+      Code: Any<Object>
+      Handler: index.handler
+      Role:
+        'Fn::GetAtt':
+          - RestateServiceHandlerServiceRole07B26D05
+          - Arn
+      Runtime: nodejs18.x
+    DependsOn:
+      - RestateServiceHandlerServiceRole07B26D05
+  RestateServiceHandlerCurrentVersion40030E671fc2ba09c2d7b4ea8c6a3f8fee895a65:
+    Type: 'AWS::Lambda::Version'
+    Properties:
+      FunctionName:
+        Ref: RestateServiceHandler71409CD7
+  RestateServiceHandlerCurrentVersionRestateDeploymentE8F102EB:
+    Type: 'Custom::RestateServiceDeployment'
+    Properties:
+      ServiceToken:
+        'Fn::GetAtt':
+          - ServiceDeployerCustomResourceProviderframeworkonEvent528FE6C2
+          - Arn
+      adminUrl: 'https://e1.env.eu.restate.cloud:9070'
+      authTokenSecretArn:
+        'Fn::Join':
+          - ''
+          - - 'arn:'
+            - Ref: 'AWS::Partition'
+            - ':secretsmanager:region:account-id:secret:secret_name'
+      serviceLambdaArn:
+        Ref: >-
+          RestateServiceHandlerCurrentVersion40030E671fc2ba09c2d7b4ea8c6a3f8fee895a65
+      invokeRoleArn: 'arn:aws:iam::654654156625:role/Invoker'
+      private: 'false'
+      insecure: 'false'
+    DependsOn:
+      - ServiceDeployerInvocationPolicyD09B639D
+    UpdateReplacePolicy: Delete
+    DeletionPolicy: Delete
+  ServiceDeployerEventHandlerServiceRoleF133584F:
+    Type: 'AWS::IAM::Role'
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          - Action: 'sts:AssumeRole'
+            Effect: Allow
+            Principal:
+              Service: lambda.amazonaws.com
+        Version: '2012-10-17'
+      ManagedPolicyArns:
+        - 'Fn::Join':
+            - ''
+            - - 'arn:'
+              - Ref: 'AWS::Partition'
+              - ':iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'
+  ServiceDeployerEventHandlerServiceRoleDefaultPolicyFE2DC3C9:
+    Type: 'AWS::IAM::Policy'
+    Properties:
+      PolicyDocument:
+        Statement:
+          - Action:
+              - 'secretsmanager:GetSecretValue'
+              - 'secretsmanager:DescribeSecret'
+            Effect: Allow
+            Resource:
+              'Fn::Join':
+                - ''
+                - - 'arn:'
+                  - Ref: 'AWS::Partition'
+                  - ':secretsmanager:region:account-id:secret:secret_name-??????'
+        Version: '2012-10-17'
+      PolicyName: ServiceDeployerEventHandlerServiceRoleDefaultPolicyFE2DC3C9
+      Roles:
+        - Ref: ServiceDeployerEventHandlerServiceRoleF133584F
+  ServiceDeployerEventHandler89EAD25F:
+    Type: 'AWS::Lambda::Function'
+    Properties:
+      Architectures:
+        - arm64
+      Code: Any<Object>
+      Description: Restate custom registration handler
+      Environment:
+        Variables:
+          NODE_OPTIONS: '--enable-source-maps'
+      Handler: index.handler
+      MemorySize: 128
+      Role:
+        'Fn::GetAtt':
+          - ServiceDeployerEventHandlerServiceRoleF133584F
+          - Arn
+      Runtime: nodejs22.x
+      Timeout: 180
+    DependsOn:
+      - ServiceDeployerEventHandlerServiceRoleDefaultPolicyFE2DC3C9
+      - ServiceDeployerEventHandlerServiceRoleF133584F
+  ServiceDeployerDeploymentLogs5B8BE5D2:
+    Type: 'AWS::Logs::LogGroup'
+    Properties:
+      LogGroupName:
+        'Fn::Join':
+          - ''
+          - - /aws/lambda/
+            - Ref: ServiceDeployerEventHandler89EAD25F
+      RetentionInDays: 30
+    UpdateReplacePolicy: Retain
+    DeletionPolicy: RetainExceptOnCreate
+  ServiceDeployerCustomResourceProviderframeworkonEventServiceRole865AFB0C:
+    Type: 'AWS::IAM::Role'
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          - Action: 'sts:AssumeRole'
+            Effect: Allow
+            Principal:
+              Service: lambda.amazonaws.com
+        Version: '2012-10-17'
+      ManagedPolicyArns:
+        - 'Fn::Join':
+            - ''
+            - - 'arn:'
+              - Ref: 'AWS::Partition'
+              - ':iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'
+  ServiceDeployerCustomResourceProviderframeworkonEventServiceRoleDefaultPolicy740A65C9:
+    Type: 'AWS::IAM::Policy'
+    Properties:
+      PolicyDocument:
+        Statement:
+          - Action: 'lambda:InvokeFunction'
+            Effect: Allow
+            Resource:
+              - 'Fn::GetAtt':
+                  - ServiceDeployerEventHandler89EAD25F
+                  - Arn
+              - 'Fn::Join':
+                  - ''
+                  - - 'Fn::GetAtt':
+                        - ServiceDeployerEventHandler89EAD25F
+                        - Arn
+                    - ':*'
+          - Action: 'lambda:GetFunction'
+            Effect: Allow
+            Resource:
+              'Fn::GetAtt':
+                - ServiceDeployerEventHandler89EAD25F
+                - Arn
+        Version: '2012-10-17'
+      PolicyName: >-
+        ServiceDeployerCustomResourceProviderframeworkonEventServiceRoleDefaultPolicy740A65C9
+      Roles:
+        - Ref: >-
+            ServiceDeployerCustomResourceProviderframeworkonEventServiceRole865AFB0C
+  ServiceDeployerCustomResourceProviderframeworkonEvent528FE6C2:
+    Type: 'AWS::Lambda::Function'
+    Properties:
+      Code: Any<Object>
+      Description: >-
+        AWS CDK resource provider framework - onEvent
+        (RestateCloudStack/ServiceDeployer/CustomResourceProvider)
+      Environment:
+        Variables:
+          USER_ON_EVENT_FUNCTION_ARN:
+            'Fn::GetAtt':
+              - ServiceDeployerEventHandler89EAD25F
+              - Arn
+      Handler: framework.onEvent
+      Role:
+        'Fn::GetAtt':
+          - >-
+            ServiceDeployerCustomResourceProviderframeworkonEventServiceRole865AFB0C
+          - Arn
+      Runtime: nodejs18.x
+      Timeout: 900
+    DependsOn:
+      - >-
+        ServiceDeployerCustomResourceProviderframeworkonEventServiceRoleDefaultPolicy740A65C9
+      - ServiceDeployerCustomResourceProviderframeworkonEventServiceRole865AFB0C
+  ServiceDeployerInvocationPolicyD09B639D:
+    Type: 'AWS::IAM::Policy'
+    Properties:
+      PolicyDocument:
+        Statement:
+          - Action: 'lambda:InvokeFunction'
+            Effect: Allow
+            Resource:
+              - 'Fn::GetAtt':
+                  - RestateServiceHandler71409CD7
+                  - Arn
+              - 'Fn::Join':
+                  - ''
+                  - - 'Fn::GetAtt':
+                        - RestateServiceHandler71409CD7
+                        - Arn
+                    - ':*'
+        Version: '2012-10-17'
+      PolicyName: ServiceDeployerInvocationPolicyD09B639D
+      Roles:
+        - Invoker
+"
+`;
+
+exports[`Restate constructs Service Deployer overrides 1`] = `
+"Resources:
+  ServiceDeployerEventHandlerServiceRoleF133584F:
+    Type: 'AWS::IAM::Role'
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          - Action: 'sts:AssumeRole'
+            Effect: Allow
+            Principal:
+              Service: lambda.amazonaws.com
+        Version: '2012-10-17'
+      ManagedPolicyArns:
+        - 'Fn::Join':
+            - ''
+            - - 'arn:'
+              - Ref: 'AWS::Partition'
+              - ':iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'
+  ServiceDeployerEventHandler89EAD25F:
+    Type: 'AWS::Lambda::Function'
+    Properties:
+      Architectures:
+        - arm64
+      Code:
+        S3Bucket: cdk-hnb659fds-assets-account-id-region
+        S3Key: 9b2f401811d992475d0f265d5bf5fdfd2f1fbbe762760b5674e60f80274bc089.zip
+      Description: Restate custom registration handler
+      Environment:
+        Variables:
+          NODE_OPTIONS: '--enable-source-maps'
+      Handler: index.handler
+      MemorySize: 128
+      Role:
+        'Fn::GetAtt':
+          - ServiceDeployerEventHandlerServiceRoleF133584F
+          - Arn
+      Runtime: nodejs22.x
+      Timeout: 180
+    DependsOn:
+      - ServiceDeployerEventHandlerServiceRoleF133584F
+  ServiceDeployerDeploymentLogs5B8BE5D2:
+    Type: 'AWS::Logs::LogGroup'
+    Properties:
+      LogGroupName:
+        'Fn::Join':
+          - ''
+          - - /aws/lambda/
+            - Ref: ServiceDeployerEventHandler89EAD25F
+      RetentionInDays: 30
+    UpdateReplacePolicy: Retain
+    DeletionPolicy: RetainExceptOnCreate
+  ServiceDeployerCustomResourceProviderframeworkonEventServiceRole865AFB0C:
+    Type: 'AWS::IAM::Role'
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          - Action: 'sts:AssumeRole'
+            Effect: Allow
+            Principal:
+              Service: lambda.amazonaws.com
+        Version: '2012-10-17'
+      ManagedPolicyArns:
+        - 'Fn::Join':
+            - ''
+            - - 'arn:'
+              - Ref: 'AWS::Partition'
+              - ':iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'
+  ServiceDeployerCustomResourceProviderframeworkonEventServiceRoleDefaultPolicy740A65C9:
+    Type: 'AWS::IAM::Policy'
+    Properties:
+      PolicyDocument:
+        Statement:
+          - Action: 'lambda:InvokeFunction'
+            Effect: Allow
+            Resource:
+              - 'Fn::GetAtt':
+                  - ServiceDeployerEventHandler89EAD25F
+                  - Arn
+              - 'Fn::Join':
+                  - ''
+                  - - 'Fn::GetAtt':
+                        - ServiceDeployerEventHandler89EAD25F
+                        - Arn
+                    - ':*'
+          - Action: 'lambda:GetFunction'
+            Effect: Allow
+            Resource:
+              'Fn::GetAtt':
+                - ServiceDeployerEventHandler89EAD25F
+                - Arn
+        Version: '2012-10-17'
+      PolicyName: >-
+        ServiceDeployerCustomResourceProviderframeworkonEventServiceRoleDefaultPolicy740A65C9
+      Roles:
+        - Ref: >-
+            ServiceDeployerCustomResourceProviderframeworkonEventServiceRole865AFB0C
+  ServiceDeployerCustomResourceProviderframeworkonEvent528FE6C2:
+    Type: 'AWS::Lambda::Function'
+    Properties:
+      Code:
+        S3Bucket: cdk-hnb659fds-assets-account-id-region
+        S3Key: bdc104ed9cab1b5b6421713c8155f0b753380595356f710400609664d3635eca.zip
+      Description: >-
+        AWS CDK resource provider framework - onEvent
+        (RestateCloudStack/ServiceDeployer/CustomResourceProvider)
+      Environment:
+        Variables:
+          USER_ON_EVENT_FUNCTION_ARN:
+            'Fn::GetAtt':
+              - ServiceDeployerEventHandler89EAD25F
+              - Arn
+      Handler: framework.onEvent
+      Role:
+        'Fn::GetAtt':
+          - >-
+            ServiceDeployerCustomResourceProviderframeworkonEventServiceRole865AFB0C
+          - Arn
+      Runtime: nodejs18.x
+      Timeout: 900
+    DependsOn:
+      - >-
+        ServiceDeployerCustomResourceProviderframeworkonEventServiceRoleDefaultPolicy740A65C9
+      - ServiceDeployerCustomResourceProviderframeworkonEventServiceRole865AFB0C
+"
+`;

package/test/e2e/README.md

@@ -0,0 +1,11 @@
+## Restate CDK e2e tests
+
+The CDK stacks in this directory serve a dual purpose of providing usage examples, and validation targets during development.
+
+Some of these are wrapped in e2e tests you can run with:
+
+```shell
+npm run test:e2e
+```
+
+To run the automated e2e tests, you'll generally need valid AWS or Restate Cloud credentials. To speed things up you can set `RETAIN_STACK=true`.

package/test/handlers/build.mts

@@ -0,0 +1,19 @@
+/*
+ * Copyright (c) 2023-2025 - Restate Software, Inc., Restate GmbH
+ *
+ * This file is part of the Restate CDK Construct Library,
+ * which is released under the MIT license.
+ *
+ * You can find a copy of the license in file LICENSE in the root
+ * directory of this repository or package, or at
+ * https://github.com/restatedev/sdk-typescript/blob/main/LICENSE
+ */
+
+import { $, cd } from "zx";
+import * as path from "path";
+import { fileURLToPath } from "url";
+
+$.verbose = true;
+
+cd(path.dirname(fileURLToPath(import.meta.url)));
+await $`npx esbuild --bundle --platform=node handler.js --outfile=dist/bundle.js`;

package/test/handlers/handler.js

@@ -1,7 +1,7 @@
 /*
- * Copyright (c) 2024 - Restate Software, Inc., Restate GmbH
+ * Copyright (c) 2023-2025 - Restate Software, Inc., Restate GmbH
  *
- * This file is part of the Restate SDK for Node.js/TypeScript,
+ * This file is part of the Restate CDK Construct Library,
  * which is released under the MIT license.
  *
  * You can find a copy of the license in file LICENSE in the root