@serve.zone/appstore 2.5.0 → 2.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/apps/cloudly/app.json +2 -2
- package/apps/cloudly/versions/1.1.7/config.json +149 -0
- package/apps/cloudly/versions/1.1.8/config.json +173 -0
- package/appstore.json +2 -2
- package/changelog.md +25 -0
- package/dist_ts_client/data.generated.js +334 -5
- package/package.json +2 -2
- package/readme.md +2 -2
- package/ts_client/data.generated.ts +333 -4
package/apps/cloudly/app.json
CHANGED
|
@@ -4,8 +4,8 @@
|
|
|
4
4
|
"description": "Multi-node serve.zone control plane for clusters, workload services, domains, and deployments.",
|
|
5
5
|
"category": "Dev Tools",
|
|
6
6
|
"iconName": "server",
|
|
7
|
-
"latestVersion": "1.1.
|
|
8
|
-
"versions": ["1.0.0", "1.1.0", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.1.5", "1.1.6"],
|
|
7
|
+
"latestVersion": "1.1.8",
|
|
8
|
+
"versions": ["1.0.0", "1.1.0", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.1.5", "1.1.6", "1.1.7", "1.1.8"],
|
|
9
9
|
"maintainer": "serve.zone",
|
|
10
10
|
"links": {
|
|
11
11
|
"Source": "https://code.foss.global/serve.zone/cloudly",
|
|
@@ -0,0 +1,149 @@
|
|
|
1
|
+
{
|
|
2
|
+
"image": "code.foss.global/serve.zone/cloudly@sha256:948b72927d177b8f73be0596017df78437cbaa0e96b5f2ce246590aebbab05e9",
|
|
3
|
+
"targetPorts": [
|
|
4
|
+
{ "name": "web", "port": 3000, "protocol": "http", "default": true }
|
|
5
|
+
],
|
|
6
|
+
"envVars": [
|
|
7
|
+
{
|
|
8
|
+
"key": "SERVEZONE_ENVIRONMENT",
|
|
9
|
+
"value": "production",
|
|
10
|
+
"description": "Cloudly runtime environment.",
|
|
11
|
+
"required": true
|
|
12
|
+
},
|
|
13
|
+
{
|
|
14
|
+
"key": "SERVEZONE_PUBLIC_ORIGIN",
|
|
15
|
+
"value": "https://${SERVICE_DOMAIN}",
|
|
16
|
+
"description": "Canonical public Cloudly origin including protocol and optional public port.",
|
|
17
|
+
"required": true
|
|
18
|
+
},
|
|
19
|
+
{
|
|
20
|
+
"key": "SERVEZONE_LISTENPORT",
|
|
21
|
+
"value": "3000",
|
|
22
|
+
"description": "Internal Cloudly HTTP port inside the container.",
|
|
23
|
+
"required": true
|
|
24
|
+
},
|
|
25
|
+
{
|
|
26
|
+
"key": "SERVEZONE_SSLMODE",
|
|
27
|
+
"value": "external",
|
|
28
|
+
"description": "Use external TLS termination through Onebox or dcrouter.",
|
|
29
|
+
"required": true
|
|
30
|
+
},
|
|
31
|
+
{
|
|
32
|
+
"key": "SERVEZONE_WORKLOADINIT_APPROVAL_PATH",
|
|
33
|
+
"value": "/run/secrets/cloudly-workloadinit-approval.json",
|
|
34
|
+
"description": "Private WorkloadInit release-approval artifact mounted by Onebox for Coreflow secret-runtime registration.",
|
|
35
|
+
"required": true
|
|
36
|
+
},
|
|
37
|
+
{
|
|
38
|
+
"key": "SERVEZONE_WORKLOADINIT_APPROVAL_FILE",
|
|
39
|
+
"description": "Operator-approved WorkloadInit release authority. Onebox stores it encrypted and mounts it only as a root-readable file.",
|
|
40
|
+
"required": true,
|
|
41
|
+
"secret": true,
|
|
42
|
+
"delivery": {
|
|
43
|
+
"type": "file",
|
|
44
|
+
"targetPath": "/run/secrets/cloudly-workloadinit-approval.json",
|
|
45
|
+
"uid": 0,
|
|
46
|
+
"gid": 0,
|
|
47
|
+
"mode": 256
|
|
48
|
+
}
|
|
49
|
+
},
|
|
50
|
+
{
|
|
51
|
+
"key": "MONGODB_URL",
|
|
52
|
+
"value": "${MONGODB_URI}",
|
|
53
|
+
"description": "Authenticated MongoDB wire-protocol URL provisioned by Onebox Corestore.",
|
|
54
|
+
"required": true
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"key": "MONGODB_NAME",
|
|
58
|
+
"value": "${MONGODB_DATABASE}",
|
|
59
|
+
"description": "MongoDB wire-protocol database name provisioned by Onebox Corestore.",
|
|
60
|
+
"required": true
|
|
61
|
+
},
|
|
62
|
+
{
|
|
63
|
+
"key": "MONGODB_USER",
|
|
64
|
+
"value": "${MONGODB_USERNAME}",
|
|
65
|
+
"description": "MongoDB wire-protocol username provisioned by Onebox Corestore.",
|
|
66
|
+
"required": true
|
|
67
|
+
},
|
|
68
|
+
{
|
|
69
|
+
"key": "MONGODB_PASS",
|
|
70
|
+
"value": "${MONGODB_PASSWORD}",
|
|
71
|
+
"description": "MongoDB wire-protocol password provisioned by Onebox Corestore.",
|
|
72
|
+
"required": true
|
|
73
|
+
},
|
|
74
|
+
{
|
|
75
|
+
"key": "S3_ENDPOINT",
|
|
76
|
+
"value": "onebox-corestore",
|
|
77
|
+
"description": "S3 endpoint host provisioned by Onebox Corestore.",
|
|
78
|
+
"required": true
|
|
79
|
+
},
|
|
80
|
+
{
|
|
81
|
+
"key": "S3_PORT",
|
|
82
|
+
"value": "9000",
|
|
83
|
+
"description": "S3 endpoint port provisioned by Onebox Corestore.",
|
|
84
|
+
"required": true
|
|
85
|
+
},
|
|
86
|
+
{
|
|
87
|
+
"key": "S3_USESSL",
|
|
88
|
+
"value": "false",
|
|
89
|
+
"description": "Use plain HTTP for internal Corestore S3 traffic on the Onebox network.",
|
|
90
|
+
"required": true
|
|
91
|
+
},
|
|
92
|
+
{
|
|
93
|
+
"key": "S3_BUCKET",
|
|
94
|
+
"value": "${S3_BUCKET}",
|
|
95
|
+
"description": "S3 bucket provisioned by Onebox Corestore for Cloudly's registry.",
|
|
96
|
+
"required": true
|
|
97
|
+
},
|
|
98
|
+
{
|
|
99
|
+
"key": "S3_ACCESSKEY",
|
|
100
|
+
"value": "${S3_ACCESS_KEY}",
|
|
101
|
+
"description": "S3 access key provisioned by Onebox Corestore.",
|
|
102
|
+
"required": true
|
|
103
|
+
},
|
|
104
|
+
{
|
|
105
|
+
"key": "S3_SECRETKEY",
|
|
106
|
+
"value": "${S3_SECRET_KEY}",
|
|
107
|
+
"description": "S3 secret key provisioned by Onebox Corestore.",
|
|
108
|
+
"required": true
|
|
109
|
+
}
|
|
110
|
+
],
|
|
111
|
+
"platformRequirements": {
|
|
112
|
+
"mongodb": true,
|
|
113
|
+
"s3": true
|
|
114
|
+
},
|
|
115
|
+
"platformOidc": {
|
|
116
|
+
"redirectPath": "/auth/oidc/callback",
|
|
117
|
+
"roles": [
|
|
118
|
+
{
|
|
119
|
+
"id": "admin",
|
|
120
|
+
"label": "Administrator",
|
|
121
|
+
"description": "Full Cloudly administration for this hosted instance."
|
|
122
|
+
},
|
|
123
|
+
{
|
|
124
|
+
"id": "user",
|
|
125
|
+
"label": "User",
|
|
126
|
+
"description": "Standard authenticated Cloudly access for this hosted instance."
|
|
127
|
+
}
|
|
128
|
+
],
|
|
129
|
+
"environmentVariables": {
|
|
130
|
+
"issuerUrl": "SERVEZONE_PLATFORM_OIDC_ISSUER",
|
|
131
|
+
"clientId": "SERVEZONE_PLATFORM_OIDC_CLIENT_ID",
|
|
132
|
+
"clientSecret": "SERVEZONE_PLATFORM_OIDC_CLIENT_SECRET",
|
|
133
|
+
"redirectUri": "SERVEZONE_PLATFORM_OIDC_REDIRECT_URI",
|
|
134
|
+
"audience": "SERVEZONE_PLATFORM_OIDC_AUDIENCE"
|
|
135
|
+
},
|
|
136
|
+
"clientAuthenticationMethod": "client_secret_basic"
|
|
137
|
+
},
|
|
138
|
+
"minOneboxVersion": "7.14.0",
|
|
139
|
+
"changelog": "Move Cloudly to 25.1.0 on SmartDB 5.5.1 with orchestrator-driven legacy deployment settlement, a direct /status readiness endpoint, and the Alpine-based image. Onebox 7.14.0 settles legacy deployment operations during the fenced Cloudly Secrets v2 cutover before this target is applied.",
|
|
140
|
+
"breaking": true,
|
|
141
|
+
"requiresManualReview": true,
|
|
142
|
+
"migrationRequired": true,
|
|
143
|
+
"backupBeforeUpgrade": true,
|
|
144
|
+
"healthCheck": {
|
|
145
|
+
"path": "/status",
|
|
146
|
+
"port": 3000,
|
|
147
|
+
"expectedStatus": 200
|
|
148
|
+
}
|
|
149
|
+
}
|
|
@@ -0,0 +1,173 @@
|
|
|
1
|
+
{
|
|
2
|
+
"image": "code.foss.global/serve.zone/cloudly@sha256:1ebfebd84d7b8d5a65aba7afda3481fce54d57999d2d9c0ec3716ee969bc47ed",
|
|
3
|
+
"targetPorts": [
|
|
4
|
+
{
|
|
5
|
+
"name": "web",
|
|
6
|
+
"port": 3000,
|
|
7
|
+
"protocol": "http",
|
|
8
|
+
"default": true
|
|
9
|
+
}
|
|
10
|
+
],
|
|
11
|
+
"envVars": [
|
|
12
|
+
{
|
|
13
|
+
"key": "SERVEZONE_ENVIRONMENT",
|
|
14
|
+
"value": "production",
|
|
15
|
+
"description": "Cloudly runtime environment.",
|
|
16
|
+
"required": true
|
|
17
|
+
},
|
|
18
|
+
{
|
|
19
|
+
"key": "SERVEZONE_PUBLIC_ORIGIN",
|
|
20
|
+
"value": "https://${SERVICE_DOMAIN}",
|
|
21
|
+
"description": "Canonical public Cloudly origin including protocol and optional public port.",
|
|
22
|
+
"required": true
|
|
23
|
+
},
|
|
24
|
+
{
|
|
25
|
+
"key": "SERVEZONE_LISTENPORT",
|
|
26
|
+
"value": "3000",
|
|
27
|
+
"description": "Internal Cloudly HTTP port inside the container.",
|
|
28
|
+
"required": true
|
|
29
|
+
},
|
|
30
|
+
{
|
|
31
|
+
"key": "SERVEZONE_SSLMODE",
|
|
32
|
+
"value": "external",
|
|
33
|
+
"description": "Use external TLS termination through Onebox or dcrouter.",
|
|
34
|
+
"required": true
|
|
35
|
+
},
|
|
36
|
+
{
|
|
37
|
+
"key": "SERVEZONE_SECRET_KEYRING_PATH",
|
|
38
|
+
"value": "/run/secrets/cloudly-secrets-v2-keyring.json",
|
|
39
|
+
"description": "Path to the Cloudly Secrets v2 keyring mounted by Onebox; the keyring value is never placed in the public environment.",
|
|
40
|
+
"required": true
|
|
41
|
+
},
|
|
42
|
+
{
|
|
43
|
+
"key": "SERVEZONE_SECRET_KEYRING_FILE",
|
|
44
|
+
"description": "Existing Cloudly Secrets v2 keyring. Onebox stores it encrypted and mounts it only as a root-readable file; retain the existing keyring when upgrading.",
|
|
45
|
+
"required": true,
|
|
46
|
+
"secret": true,
|
|
47
|
+
"delivery": {
|
|
48
|
+
"type": "file",
|
|
49
|
+
"targetPath": "/run/secrets/cloudly-secrets-v2-keyring.json",
|
|
50
|
+
"uid": 0,
|
|
51
|
+
"gid": 0,
|
|
52
|
+
"mode": 256
|
|
53
|
+
}
|
|
54
|
+
},
|
|
55
|
+
{
|
|
56
|
+
"key": "SERVEZONE_WORKLOADINIT_APPROVAL_PATH",
|
|
57
|
+
"value": "/run/secrets/cloudly-workloadinit-approval.json",
|
|
58
|
+
"description": "Private WorkloadInit release-approval artifact mounted by Onebox for Coreflow secret-runtime registration.",
|
|
59
|
+
"required": true
|
|
60
|
+
},
|
|
61
|
+
{
|
|
62
|
+
"key": "SERVEZONE_WORKLOADINIT_APPROVAL_FILE",
|
|
63
|
+
"description": "Operator-approved WorkloadInit release authority. Onebox stores it encrypted and mounts it only as a root-readable file.",
|
|
64
|
+
"required": true,
|
|
65
|
+
"secret": true,
|
|
66
|
+
"delivery": {
|
|
67
|
+
"type": "file",
|
|
68
|
+
"targetPath": "/run/secrets/cloudly-workloadinit-approval.json",
|
|
69
|
+
"uid": 0,
|
|
70
|
+
"gid": 0,
|
|
71
|
+
"mode": 256
|
|
72
|
+
}
|
|
73
|
+
},
|
|
74
|
+
{
|
|
75
|
+
"key": "MONGODB_URL",
|
|
76
|
+
"value": "${MONGODB_URI}",
|
|
77
|
+
"description": "Authenticated MongoDB wire-protocol URL provisioned by Onebox Corestore.",
|
|
78
|
+
"required": true
|
|
79
|
+
},
|
|
80
|
+
{
|
|
81
|
+
"key": "MONGODB_NAME",
|
|
82
|
+
"value": "${MONGODB_DATABASE}",
|
|
83
|
+
"description": "MongoDB wire-protocol database name provisioned by Onebox Corestore.",
|
|
84
|
+
"required": true
|
|
85
|
+
},
|
|
86
|
+
{
|
|
87
|
+
"key": "MONGODB_USER",
|
|
88
|
+
"value": "${MONGODB_USERNAME}",
|
|
89
|
+
"description": "MongoDB wire-protocol username provisioned by Onebox Corestore.",
|
|
90
|
+
"required": true
|
|
91
|
+
},
|
|
92
|
+
{
|
|
93
|
+
"key": "MONGODB_PASS",
|
|
94
|
+
"value": "${MONGODB_PASSWORD}",
|
|
95
|
+
"description": "MongoDB wire-protocol password provisioned by Onebox Corestore.",
|
|
96
|
+
"required": true
|
|
97
|
+
},
|
|
98
|
+
{
|
|
99
|
+
"key": "S3_ENDPOINT",
|
|
100
|
+
"value": "onebox-corestore",
|
|
101
|
+
"description": "S3 endpoint host provisioned by Onebox Corestore.",
|
|
102
|
+
"required": true
|
|
103
|
+
},
|
|
104
|
+
{
|
|
105
|
+
"key": "S3_PORT",
|
|
106
|
+
"value": "9000",
|
|
107
|
+
"description": "S3 endpoint port provisioned by Onebox Corestore.",
|
|
108
|
+
"required": true
|
|
109
|
+
},
|
|
110
|
+
{
|
|
111
|
+
"key": "S3_USESSL",
|
|
112
|
+
"value": "false",
|
|
113
|
+
"description": "Use plain HTTP for internal Corestore S3 traffic on the Onebox network.",
|
|
114
|
+
"required": true
|
|
115
|
+
},
|
|
116
|
+
{
|
|
117
|
+
"key": "S3_BUCKET",
|
|
118
|
+
"value": "${S3_BUCKET}",
|
|
119
|
+
"description": "S3 bucket provisioned by Onebox Corestore for Cloudly's registry.",
|
|
120
|
+
"required": true
|
|
121
|
+
},
|
|
122
|
+
{
|
|
123
|
+
"key": "S3_ACCESSKEY",
|
|
124
|
+
"value": "${S3_ACCESS_KEY}",
|
|
125
|
+
"description": "S3 access key provisioned by Onebox Corestore.",
|
|
126
|
+
"required": true
|
|
127
|
+
},
|
|
128
|
+
{
|
|
129
|
+
"key": "S3_SECRETKEY",
|
|
130
|
+
"value": "${S3_SECRET_KEY}",
|
|
131
|
+
"description": "S3 secret key provisioned by Onebox Corestore.",
|
|
132
|
+
"required": true
|
|
133
|
+
}
|
|
134
|
+
],
|
|
135
|
+
"platformRequirements": {
|
|
136
|
+
"mongodb": true,
|
|
137
|
+
"s3": true
|
|
138
|
+
},
|
|
139
|
+
"platformOidc": {
|
|
140
|
+
"redirectPath": "/auth/oidc/callback",
|
|
141
|
+
"roles": [
|
|
142
|
+
{
|
|
143
|
+
"id": "admin",
|
|
144
|
+
"label": "Administrator",
|
|
145
|
+
"description": "Full Cloudly administration for this hosted instance."
|
|
146
|
+
},
|
|
147
|
+
{
|
|
148
|
+
"id": "user",
|
|
149
|
+
"label": "User",
|
|
150
|
+
"description": "Standard authenticated Cloudly access for this hosted instance."
|
|
151
|
+
}
|
|
152
|
+
],
|
|
153
|
+
"environmentVariables": {
|
|
154
|
+
"issuerUrl": "SERVEZONE_PLATFORM_OIDC_ISSUER",
|
|
155
|
+
"clientId": "SERVEZONE_PLATFORM_OIDC_CLIENT_ID",
|
|
156
|
+
"clientSecret": "SERVEZONE_PLATFORM_OIDC_CLIENT_SECRET",
|
|
157
|
+
"redirectUri": "SERVEZONE_PLATFORM_OIDC_REDIRECT_URI",
|
|
158
|
+
"audience": "SERVEZONE_PLATFORM_OIDC_AUDIENCE"
|
|
159
|
+
},
|
|
160
|
+
"clientAuthenticationMethod": "client_secret_basic"
|
|
161
|
+
},
|
|
162
|
+
"minOneboxVersion": "8.3.3",
|
|
163
|
+
"changelog": "Move Cloudly to 25.2.0 with ledger-backed startup migrations and authenticated legacy tombstone cleanup. Requires completed Secrets v2 cutover retirement and a fresh verified restorable checkpoint. Preserve the encrypted keyring and WorkloadInit approval as dedicated root-readable files. Rollback requires a full restore.",
|
|
164
|
+
"breaking": true,
|
|
165
|
+
"requiresManualReview": true,
|
|
166
|
+
"migrationRequired": true,
|
|
167
|
+
"backupBeforeUpgrade": true,
|
|
168
|
+
"healthCheck": {
|
|
169
|
+
"path": "/status",
|
|
170
|
+
"port": 3000,
|
|
171
|
+
"expectedStatus": 200
|
|
172
|
+
}
|
|
173
|
+
}
|
package/appstore.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
|
-
"updatedAt": "2026-
|
|
3
|
+
"updatedAt": "2026-09-04T00:00:00Z",
|
|
4
4
|
"apps": [
|
|
5
5
|
{
|
|
6
6
|
"id": "nginx",
|
|
@@ -152,7 +152,7 @@
|
|
|
152
152
|
"description": "Multi-node serve.zone control plane for clusters, workload services, domains, and deployments.",
|
|
153
153
|
"category": "Dev Tools",
|
|
154
154
|
"iconName": "server",
|
|
155
|
-
"latestVersion": "1.1.
|
|
155
|
+
"latestVersion": "1.1.8",
|
|
156
156
|
"tags": ["serve.zone", "control-plane", "clusters", "deployments"]
|
|
157
157
|
},
|
|
158
158
|
{
|
package/changelog.md
CHANGED
|
@@ -1,5 +1,30 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 2026-09-04 - 2.7.0
|
|
4
|
+
|
|
5
|
+
### Features
|
|
6
|
+
|
|
7
|
+
- publish Cloudly 1.1.8 ledger migration target (cloudly)
|
|
8
|
+
- Add Cloudly app version 1.1.8 pinned to the Cloudly 25.2.0 image digest and mark it as the latest catalog version.
|
|
9
|
+
- Raise the Cloudly minimum Onebox requirement to 8.3.3 with manual review, migration, backup, and full-restore-only rollback gates.
|
|
10
|
+
- Require the existing Secrets v2 keyring and WorkloadInit approval as separate root-readable encrypted file inputs.
|
|
11
|
+
- Regenerate bundled client data, README guidance, and regression coverage for the new target.
|
|
12
|
+
|
|
13
|
+
## 2026-09-03 - 2.6.0
|
|
14
|
+
|
|
15
|
+
### Features
|
|
16
|
+
|
|
17
|
+
- publish Cloudly 1.1.7 legacy deployment settlement target (cloudly)
|
|
18
|
+
- Add Cloudly app version 1.1.7 pinned to the Cloudly 25.1.0 image digest and mark it as the latest catalog version.
|
|
19
|
+
- Raise the Cloudly minimum Onebox requirement to 7.14.0 while keeping the 1.1.6 runtime contract, manual review, migration, backup, and health-check gates.
|
|
20
|
+
- Regenerate client data and update the README and regression coverage for the new target.
|
|
21
|
+
|
|
22
|
+
### Fixes
|
|
23
|
+
|
|
24
|
+
- update Node.js types and pnpm versions (deps)
|
|
25
|
+
- Bump @types/node from ^26.2.0 to ^26.4.1
|
|
26
|
+
- Bump pnpm from 11.22.0 to 11.25.0
|
|
27
|
+
|
|
3
28
|
## 2026-08-17 - 2.5.0
|
|
4
29
|
|
|
5
30
|
### Features
|