@serve.zone/appstore 32.27.0 → 33.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.smartconfig.json +4 -1
- package/changelog.md +70 -0
- package/dist_catalog/catalog.digest +1 -0
- package/dist_catalog/catalog.envelope.json +7617 -0
- package/{dist_ts_client/data.generated.js → dist_catalog/catalog.json} +6912 -6908
- package/dist_ts_client/catalog.d.ts +16 -0
- package/dist_ts_client/catalog.js +12 -0
- package/dist_ts_client/index.d.ts +3 -1
- package/dist_ts_client/index.js +4 -2
- package/dist_ts_client/loader.d.ts +69 -0
- package/dist_ts_client/loader.js +361 -0
- package/dist_ts_client/plugins.d.ts +5 -0
- package/dist_ts_client/plugins.js +8 -0
- package/dist_ts_client/projection.d.ts +59 -0
- package/dist_ts_client/projection.js +83 -0
- package/dist_ts_client/storage.d.ts +15 -9
- package/dist_ts_client/storage.js +81 -657
- package/dist_ts_client/types.d.ts +86 -41
- package/dist_ts_client/types.js +1 -1
- package/dist_ts_testing/fixtures.d.ts +83 -0
- package/dist_ts_testing/fixtures.js +146 -0
- package/dist_ts_testing/index.d.ts +1 -0
- package/dist_ts_testing/index.js +2 -0
- package/dist_ts_testing/plugins.d.ts +7 -0
- package/dist_ts_testing/plugins.js +11 -0
- package/package.json +16 -11
- package/readme.md +162 -93
- package/ts_client/catalog.ts +26 -0
- package/ts_client/index.ts +3 -1
- package/ts_client/loader.ts +414 -0
- package/ts_client/plugins.ts +10 -0
- package/ts_client/projection.ts +148 -0
- package/ts_client/readme.md +17 -27
- package/ts_client/storage.ts +93 -882
- package/ts_client/types.ts +102 -42
- package/ts_testing/fixtures.ts +230 -0
- package/ts_testing/index.ts +1 -0
- package/ts_testing/plugins.ts +15 -0
- package/ts_testing/tspublish.json +3 -0
- package/apps/adminer/app.json +0 -10
- package/apps/adminer/versions/1.0.0/config.json +0 -6
- package/apps/cloudly/app.json +0 -14
- package/apps/cloudly/versions/1.0.0/config.json +0 -120
- package/apps/cloudly/versions/1.1.0/config.json +0 -120
- package/apps/cloudly/versions/1.1.1/config.json +0 -120
- package/apps/cloudly/versions/1.1.10/config.json +0 -173
- package/apps/cloudly/versions/1.1.2/config.json +0 -130
- package/apps/cloudly/versions/1.1.3/config.json +0 -130
- package/apps/cloudly/versions/1.1.4/config.json +0 -130
- package/apps/cloudly/versions/1.1.5/config.json +0 -149
- package/apps/cloudly/versions/1.1.6/config.json +0 -149
- package/apps/cloudly/versions/1.1.7/config.json +0 -149
- package/apps/cloudly/versions/1.1.8/config.json +0 -173
- package/apps/cloudly/versions/1.1.9/config.json +0 -173
- package/apps/cloudly/versions/1.10.0/config.json +0 -173
- package/apps/cloudly/versions/1.11.0/config.json +0 -173
- package/apps/cloudly/versions/1.12.0/config.json +0 -173
- package/apps/cloudly/versions/1.13.0/config.json +0 -173
- package/apps/cloudly/versions/1.14.0/config.json +0 -173
- package/apps/cloudly/versions/1.15.0/config.json +0 -173
- package/apps/cloudly/versions/1.16.0/config.json +0 -173
- package/apps/cloudly/versions/1.17.0/config.json +0 -173
- package/apps/cloudly/versions/1.18.0/config.json +0 -173
- package/apps/cloudly/versions/1.19.0/config.json +0 -173
- package/apps/cloudly/versions/1.2.0/config.json +0 -173
- package/apps/cloudly/versions/1.2.1/config.json +0 -173
- package/apps/cloudly/versions/1.20.0/config.json +0 -173
- package/apps/cloudly/versions/1.21.0/config.json +0 -173
- package/apps/cloudly/versions/1.22.0/config.json +0 -173
- package/apps/cloudly/versions/1.23.0/config.json +0 -173
- package/apps/cloudly/versions/1.24.0/config.json +0 -173
- package/apps/cloudly/versions/1.25.0/config.json +0 -173
- package/apps/cloudly/versions/1.26.0/config.json +0 -173
- package/apps/cloudly/versions/1.27.0/config.json +0 -173
- package/apps/cloudly/versions/1.3.0/config.json +0 -173
- package/apps/cloudly/versions/1.4.0/config.json +0 -173
- package/apps/cloudly/versions/1.5.0/config.json +0 -173
- package/apps/cloudly/versions/1.6.0/config.json +0 -173
- package/apps/cloudly/versions/1.7.0/config.json +0 -173
- package/apps/cloudly/versions/1.8.0/config.json +0 -173
- package/apps/cloudly/versions/1.9.0/config.json +0 -173
- package/apps/ghost/app.json +0 -10
- package/apps/ghost/versions/1.0.0/config.json +0 -18
- package/apps/gitea/app.json +0 -10
- package/apps/gitea/versions/1.0.0/config.json +0 -16
- package/apps/gitops/app.json +0 -14
- package/apps/gitops/versions/1.0.0/config.json +0 -28
- package/apps/grafana/app.json +0 -10
- package/apps/grafana/versions/1.0.0/config.json +0 -9
- package/apps/mariadb/app.json +0 -10
- package/apps/mariadb/versions/1.0.0/config.json +0 -9
- package/apps/mattermost/app.json +0 -10
- package/apps/mattermost/versions/1.0.0/config.json +0 -6
- package/apps/n8n/app.json +0 -10
- package/apps/n8n/versions/1.0.0/config.json +0 -6
- package/apps/nextcloud/app.json +0 -10
- package/apps/nextcloud/versions/1.0.0/config.json +0 -16
- package/apps/nginx/app.json +0 -10
- package/apps/nginx/versions/1.0.0/config.json +0 -6
- package/apps/openbao/app.json +0 -16
- package/apps/openbao/versions/1.0.0/config.json +0 -52
- package/apps/plausible/app.json +0 -10
- package/apps/plausible/versions/1.0.0/config.json +0 -9
- package/apps/portainer/app.json +0 -10
- package/apps/portainer/versions/1.0.0/config.json +0 -6
- package/apps/postgres/app.json +0 -10
- package/apps/postgres/versions/1.0.0/config.json +0 -11
- package/apps/rustdesk-server/app.json +0 -14
- package/apps/rustdesk-server/versions/1.0.0/config.json +0 -19
- package/apps/siprouter/app.json +0 -14
- package/apps/siprouter/versions/1.0.0/config.json +0 -84
- package/apps/uptime-kuma/app.json +0 -10
- package/apps/uptime-kuma/versions/1.0.0/config.json +0 -6
- package/apps/valkey/app.json +0 -10
- package/apps/valkey/versions/1.0.0/config.json +0 -6
- package/apps/vaultwarden/app.json +0 -10
- package/apps/vaultwarden/versions/1.0.0/config.json +0 -6
- package/apps/wordpress/app.json +0 -10
- package/apps/wordpress/versions/1.0.0/config.json +0 -15
- package/appstore.json +0 -194
- package/dist_ts_client/classes.appstoreresolver.d.ts +0 -59
- package/dist_ts_client/classes.appstoreresolver.js +0 -736
- package/dist_ts_client/data.generated.d.ts +0 -2
- package/ts_client/classes.appstoreresolver.ts +0 -896
- package/ts_client/data.generated.ts +0 -7606
|
@@ -1,130 +0,0 @@
|
|
|
1
|
-
{
|
|
2
|
-
"image": "code.foss.global/serve.zone/cloudly@sha256:330b4f1617616e655eb411c10067367748f543522c2fc59483b3ff7656d972c6",
|
|
3
|
-
"targetPorts": [
|
|
4
|
-
{ "name": "web", "port": 3000, "protocol": "http", "default": true }
|
|
5
|
-
],
|
|
6
|
-
"envVars": [
|
|
7
|
-
{
|
|
8
|
-
"key": "SERVEZONE_ENVIRONMENT",
|
|
9
|
-
"value": "production",
|
|
10
|
-
"description": "Cloudly runtime environment.",
|
|
11
|
-
"required": true
|
|
12
|
-
},
|
|
13
|
-
{
|
|
14
|
-
"key": "SERVEZONE_PUBLIC_ORIGIN",
|
|
15
|
-
"value": "https://${SERVICE_DOMAIN}",
|
|
16
|
-
"description": "Canonical public Cloudly origin including protocol and optional public port.",
|
|
17
|
-
"required": true
|
|
18
|
-
},
|
|
19
|
-
{
|
|
20
|
-
"key": "SERVEZONE_LISTENPORT",
|
|
21
|
-
"value": "3000",
|
|
22
|
-
"description": "Internal Cloudly HTTP port inside the container.",
|
|
23
|
-
"required": true
|
|
24
|
-
},
|
|
25
|
-
{
|
|
26
|
-
"key": "SERVEZONE_SSLMODE",
|
|
27
|
-
"value": "external",
|
|
28
|
-
"description": "Use external TLS termination through Onebox or dcrouter.",
|
|
29
|
-
"required": true
|
|
30
|
-
},
|
|
31
|
-
{
|
|
32
|
-
"key": "MONGODB_URL",
|
|
33
|
-
"value": "${MONGODB_URI}",
|
|
34
|
-
"description": "Authenticated MongoDB wire-protocol URL provisioned by Onebox Corestore.",
|
|
35
|
-
"required": true
|
|
36
|
-
},
|
|
37
|
-
{
|
|
38
|
-
"key": "MONGODB_NAME",
|
|
39
|
-
"value": "${MONGODB_DATABASE}",
|
|
40
|
-
"description": "MongoDB wire-protocol database name provisioned by Onebox Corestore.",
|
|
41
|
-
"required": true
|
|
42
|
-
},
|
|
43
|
-
{
|
|
44
|
-
"key": "MONGODB_USER",
|
|
45
|
-
"value": "${MONGODB_USERNAME}",
|
|
46
|
-
"description": "MongoDB wire-protocol username provisioned by Onebox Corestore.",
|
|
47
|
-
"required": true
|
|
48
|
-
},
|
|
49
|
-
{
|
|
50
|
-
"key": "MONGODB_PASS",
|
|
51
|
-
"value": "${MONGODB_PASSWORD}",
|
|
52
|
-
"description": "MongoDB wire-protocol password provisioned by Onebox Corestore.",
|
|
53
|
-
"required": true
|
|
54
|
-
},
|
|
55
|
-
{
|
|
56
|
-
"key": "S3_ENDPOINT",
|
|
57
|
-
"value": "onebox-corestore",
|
|
58
|
-
"description": "S3 endpoint host provisioned by Onebox Corestore.",
|
|
59
|
-
"required": true
|
|
60
|
-
},
|
|
61
|
-
{
|
|
62
|
-
"key": "S3_PORT",
|
|
63
|
-
"value": "9000",
|
|
64
|
-
"description": "S3 endpoint port provisioned by Onebox Corestore.",
|
|
65
|
-
"required": true
|
|
66
|
-
},
|
|
67
|
-
{
|
|
68
|
-
"key": "S3_USESSL",
|
|
69
|
-
"value": "false",
|
|
70
|
-
"description": "Use plain HTTP for internal Corestore S3 traffic on the Onebox network.",
|
|
71
|
-
"required": true
|
|
72
|
-
},
|
|
73
|
-
{
|
|
74
|
-
"key": "S3_BUCKET",
|
|
75
|
-
"value": "${S3_BUCKET}",
|
|
76
|
-
"description": "S3 bucket provisioned by Onebox Corestore for Cloudly's registry.",
|
|
77
|
-
"required": true
|
|
78
|
-
},
|
|
79
|
-
{
|
|
80
|
-
"key": "S3_ACCESSKEY",
|
|
81
|
-
"value": "${S3_ACCESS_KEY}",
|
|
82
|
-
"description": "S3 access key provisioned by Onebox Corestore.",
|
|
83
|
-
"required": true
|
|
84
|
-
},
|
|
85
|
-
{
|
|
86
|
-
"key": "S3_SECRETKEY",
|
|
87
|
-
"value": "${S3_SECRET_KEY}",
|
|
88
|
-
"description": "S3 secret key provisioned by Onebox Corestore.",
|
|
89
|
-
"required": true
|
|
90
|
-
}
|
|
91
|
-
],
|
|
92
|
-
"platformRequirements": {
|
|
93
|
-
"mongodb": true,
|
|
94
|
-
"s3": true
|
|
95
|
-
},
|
|
96
|
-
"platformOidc": {
|
|
97
|
-
"redirectPath": "/auth/oidc/callback",
|
|
98
|
-
"roles": [
|
|
99
|
-
{
|
|
100
|
-
"id": "admin",
|
|
101
|
-
"label": "Administrator",
|
|
102
|
-
"description": "Full Cloudly administration for this hosted instance."
|
|
103
|
-
},
|
|
104
|
-
{
|
|
105
|
-
"id": "user",
|
|
106
|
-
"label": "User",
|
|
107
|
-
"description": "Standard authenticated Cloudly access for this hosted instance."
|
|
108
|
-
}
|
|
109
|
-
],
|
|
110
|
-
"environmentVariables": {
|
|
111
|
-
"issuerUrl": "SERVEZONE_PLATFORM_OIDC_ISSUER",
|
|
112
|
-
"clientId": "SERVEZONE_PLATFORM_OIDC_CLIENT_ID",
|
|
113
|
-
"clientSecret": "SERVEZONE_PLATFORM_OIDC_CLIENT_SECRET",
|
|
114
|
-
"redirectUri": "SERVEZONE_PLATFORM_OIDC_REDIRECT_URI",
|
|
115
|
-
"audience": "SERVEZONE_PLATFORM_OIDC_AUDIENCE"
|
|
116
|
-
},
|
|
117
|
-
"clientAuthenticationMethod": "client_secret_basic"
|
|
118
|
-
},
|
|
119
|
-
"minOneboxVersion": "7.2.0",
|
|
120
|
-
"changelog": "Require Onebox's allocation-fenced scratch rehearsal and receipt-bound production preparation for the Cloudly 17.1.0 Secrets v2 cutover.",
|
|
121
|
-
"breaking": true,
|
|
122
|
-
"requiresManualReview": true,
|
|
123
|
-
"migrationRequired": true,
|
|
124
|
-
"backupBeforeUpgrade": true,
|
|
125
|
-
"healthCheck": {
|
|
126
|
-
"path": "/status",
|
|
127
|
-
"port": 3000,
|
|
128
|
-
"expectedStatus": 200
|
|
129
|
-
}
|
|
130
|
-
}
|
|
@@ -1,149 +0,0 @@
|
|
|
1
|
-
{
|
|
2
|
-
"image": "code.foss.global/serve.zone/cloudly@sha256:7aec3b1f553292cefd5fd421a70e6c50463af168b14b1e4b127597991efa30dd",
|
|
3
|
-
"targetPorts": [
|
|
4
|
-
{ "name": "web", "port": 3000, "protocol": "http", "default": true }
|
|
5
|
-
],
|
|
6
|
-
"envVars": [
|
|
7
|
-
{
|
|
8
|
-
"key": "SERVEZONE_ENVIRONMENT",
|
|
9
|
-
"value": "production",
|
|
10
|
-
"description": "Cloudly runtime environment.",
|
|
11
|
-
"required": true
|
|
12
|
-
},
|
|
13
|
-
{
|
|
14
|
-
"key": "SERVEZONE_PUBLIC_ORIGIN",
|
|
15
|
-
"value": "https://${SERVICE_DOMAIN}",
|
|
16
|
-
"description": "Canonical public Cloudly origin including protocol and optional public port.",
|
|
17
|
-
"required": true
|
|
18
|
-
},
|
|
19
|
-
{
|
|
20
|
-
"key": "SERVEZONE_LISTENPORT",
|
|
21
|
-
"value": "3000",
|
|
22
|
-
"description": "Internal Cloudly HTTP port inside the container.",
|
|
23
|
-
"required": true
|
|
24
|
-
},
|
|
25
|
-
{
|
|
26
|
-
"key": "SERVEZONE_SSLMODE",
|
|
27
|
-
"value": "external",
|
|
28
|
-
"description": "Use external TLS termination through Onebox or dcrouter.",
|
|
29
|
-
"required": true
|
|
30
|
-
},
|
|
31
|
-
{
|
|
32
|
-
"key": "SERVEZONE_WORKLOADINIT_APPROVAL_PATH",
|
|
33
|
-
"value": "/run/secrets/cloudly-workloadinit-approval.json",
|
|
34
|
-
"description": "Private WorkloadInit release-approval artifact mounted by Onebox for Coreflow secret-runtime registration.",
|
|
35
|
-
"required": true
|
|
36
|
-
},
|
|
37
|
-
{
|
|
38
|
-
"key": "SERVEZONE_WORKLOADINIT_APPROVAL_FILE",
|
|
39
|
-
"description": "Operator-approved WorkloadInit release authority. Onebox stores it encrypted and mounts it only as a root-readable file.",
|
|
40
|
-
"required": true,
|
|
41
|
-
"secret": true,
|
|
42
|
-
"delivery": {
|
|
43
|
-
"type": "file",
|
|
44
|
-
"targetPath": "/run/secrets/cloudly-workloadinit-approval.json",
|
|
45
|
-
"uid": 0,
|
|
46
|
-
"gid": 0,
|
|
47
|
-
"mode": 256
|
|
48
|
-
}
|
|
49
|
-
},
|
|
50
|
-
{
|
|
51
|
-
"key": "MONGODB_URL",
|
|
52
|
-
"value": "${MONGODB_URI}",
|
|
53
|
-
"description": "Authenticated MongoDB wire-protocol URL provisioned by Onebox Corestore.",
|
|
54
|
-
"required": true
|
|
55
|
-
},
|
|
56
|
-
{
|
|
57
|
-
"key": "MONGODB_NAME",
|
|
58
|
-
"value": "${MONGODB_DATABASE}",
|
|
59
|
-
"description": "MongoDB wire-protocol database name provisioned by Onebox Corestore.",
|
|
60
|
-
"required": true
|
|
61
|
-
},
|
|
62
|
-
{
|
|
63
|
-
"key": "MONGODB_USER",
|
|
64
|
-
"value": "${MONGODB_USERNAME}",
|
|
65
|
-
"description": "MongoDB wire-protocol username provisioned by Onebox Corestore.",
|
|
66
|
-
"required": true
|
|
67
|
-
},
|
|
68
|
-
{
|
|
69
|
-
"key": "MONGODB_PASS",
|
|
70
|
-
"value": "${MONGODB_PASSWORD}",
|
|
71
|
-
"description": "MongoDB wire-protocol password provisioned by Onebox Corestore.",
|
|
72
|
-
"required": true
|
|
73
|
-
},
|
|
74
|
-
{
|
|
75
|
-
"key": "S3_ENDPOINT",
|
|
76
|
-
"value": "onebox-corestore",
|
|
77
|
-
"description": "S3 endpoint host provisioned by Onebox Corestore.",
|
|
78
|
-
"required": true
|
|
79
|
-
},
|
|
80
|
-
{
|
|
81
|
-
"key": "S3_PORT",
|
|
82
|
-
"value": "9000",
|
|
83
|
-
"description": "S3 endpoint port provisioned by Onebox Corestore.",
|
|
84
|
-
"required": true
|
|
85
|
-
},
|
|
86
|
-
{
|
|
87
|
-
"key": "S3_USESSL",
|
|
88
|
-
"value": "false",
|
|
89
|
-
"description": "Use plain HTTP for internal Corestore S3 traffic on the Onebox network.",
|
|
90
|
-
"required": true
|
|
91
|
-
},
|
|
92
|
-
{
|
|
93
|
-
"key": "S3_BUCKET",
|
|
94
|
-
"value": "${S3_BUCKET}",
|
|
95
|
-
"description": "S3 bucket provisioned by Onebox Corestore for Cloudly's registry.",
|
|
96
|
-
"required": true
|
|
97
|
-
},
|
|
98
|
-
{
|
|
99
|
-
"key": "S3_ACCESSKEY",
|
|
100
|
-
"value": "${S3_ACCESS_KEY}",
|
|
101
|
-
"description": "S3 access key provisioned by Onebox Corestore.",
|
|
102
|
-
"required": true
|
|
103
|
-
},
|
|
104
|
-
{
|
|
105
|
-
"key": "S3_SECRETKEY",
|
|
106
|
-
"value": "${S3_SECRET_KEY}",
|
|
107
|
-
"description": "S3 secret key provisioned by Onebox Corestore.",
|
|
108
|
-
"required": true
|
|
109
|
-
}
|
|
110
|
-
],
|
|
111
|
-
"platformRequirements": {
|
|
112
|
-
"mongodb": true,
|
|
113
|
-
"s3": true
|
|
114
|
-
},
|
|
115
|
-
"platformOidc": {
|
|
116
|
-
"redirectPath": "/auth/oidc/callback",
|
|
117
|
-
"roles": [
|
|
118
|
-
{
|
|
119
|
-
"id": "admin",
|
|
120
|
-
"label": "Administrator",
|
|
121
|
-
"description": "Full Cloudly administration for this hosted instance."
|
|
122
|
-
},
|
|
123
|
-
{
|
|
124
|
-
"id": "user",
|
|
125
|
-
"label": "User",
|
|
126
|
-
"description": "Standard authenticated Cloudly access for this hosted instance."
|
|
127
|
-
}
|
|
128
|
-
],
|
|
129
|
-
"environmentVariables": {
|
|
130
|
-
"issuerUrl": "SERVEZONE_PLATFORM_OIDC_ISSUER",
|
|
131
|
-
"clientId": "SERVEZONE_PLATFORM_OIDC_CLIENT_ID",
|
|
132
|
-
"clientSecret": "SERVEZONE_PLATFORM_OIDC_CLIENT_SECRET",
|
|
133
|
-
"redirectUri": "SERVEZONE_PLATFORM_OIDC_REDIRECT_URI",
|
|
134
|
-
"audience": "SERVEZONE_PLATFORM_OIDC_AUDIENCE"
|
|
135
|
-
},
|
|
136
|
-
"clientAuthenticationMethod": "client_secret_basic"
|
|
137
|
-
},
|
|
138
|
-
"minOneboxVersion": "7.5.0",
|
|
139
|
-
"changelog": "Bind the Cloudly 19.2.0 Secrets v2 target and require Onebox's fenced WorkloadInit approval staging before a new scratch rehearsal.",
|
|
140
|
-
"breaking": true,
|
|
141
|
-
"requiresManualReview": true,
|
|
142
|
-
"migrationRequired": true,
|
|
143
|
-
"backupBeforeUpgrade": true,
|
|
144
|
-
"healthCheck": {
|
|
145
|
-
"path": "/status",
|
|
146
|
-
"port": 3000,
|
|
147
|
-
"expectedStatus": 200
|
|
148
|
-
}
|
|
149
|
-
}
|
|
@@ -1,149 +0,0 @@
|
|
|
1
|
-
{
|
|
2
|
-
"image": "code.foss.global/serve.zone/cloudly@sha256:7762dc2660d1392220334a44f361ebf50994af675d97fcf2da5b037e7dc37536",
|
|
3
|
-
"targetPorts": [
|
|
4
|
-
{ "name": "web", "port": 3000, "protocol": "http", "default": true }
|
|
5
|
-
],
|
|
6
|
-
"envVars": [
|
|
7
|
-
{
|
|
8
|
-
"key": "SERVEZONE_ENVIRONMENT",
|
|
9
|
-
"value": "production",
|
|
10
|
-
"description": "Cloudly runtime environment.",
|
|
11
|
-
"required": true
|
|
12
|
-
},
|
|
13
|
-
{
|
|
14
|
-
"key": "SERVEZONE_PUBLIC_ORIGIN",
|
|
15
|
-
"value": "https://${SERVICE_DOMAIN}",
|
|
16
|
-
"description": "Canonical public Cloudly origin including protocol and optional public port.",
|
|
17
|
-
"required": true
|
|
18
|
-
},
|
|
19
|
-
{
|
|
20
|
-
"key": "SERVEZONE_LISTENPORT",
|
|
21
|
-
"value": "3000",
|
|
22
|
-
"description": "Internal Cloudly HTTP port inside the container.",
|
|
23
|
-
"required": true
|
|
24
|
-
},
|
|
25
|
-
{
|
|
26
|
-
"key": "SERVEZONE_SSLMODE",
|
|
27
|
-
"value": "external",
|
|
28
|
-
"description": "Use external TLS termination through Onebox or dcrouter.",
|
|
29
|
-
"required": true
|
|
30
|
-
},
|
|
31
|
-
{
|
|
32
|
-
"key": "SERVEZONE_WORKLOADINIT_APPROVAL_PATH",
|
|
33
|
-
"value": "/run/secrets/cloudly-workloadinit-approval.json",
|
|
34
|
-
"description": "Private WorkloadInit release-approval artifact mounted by Onebox for Coreflow secret-runtime registration.",
|
|
35
|
-
"required": true
|
|
36
|
-
},
|
|
37
|
-
{
|
|
38
|
-
"key": "SERVEZONE_WORKLOADINIT_APPROVAL_FILE",
|
|
39
|
-
"description": "Operator-approved WorkloadInit release authority. Onebox stores it encrypted and mounts it only as a root-readable file.",
|
|
40
|
-
"required": true,
|
|
41
|
-
"secret": true,
|
|
42
|
-
"delivery": {
|
|
43
|
-
"type": "file",
|
|
44
|
-
"targetPath": "/run/secrets/cloudly-workloadinit-approval.json",
|
|
45
|
-
"uid": 0,
|
|
46
|
-
"gid": 0,
|
|
47
|
-
"mode": 256
|
|
48
|
-
}
|
|
49
|
-
},
|
|
50
|
-
{
|
|
51
|
-
"key": "MONGODB_URL",
|
|
52
|
-
"value": "${MONGODB_URI}",
|
|
53
|
-
"description": "Authenticated MongoDB wire-protocol URL provisioned by Onebox Corestore.",
|
|
54
|
-
"required": true
|
|
55
|
-
},
|
|
56
|
-
{
|
|
57
|
-
"key": "MONGODB_NAME",
|
|
58
|
-
"value": "${MONGODB_DATABASE}",
|
|
59
|
-
"description": "MongoDB wire-protocol database name provisioned by Onebox Corestore.",
|
|
60
|
-
"required": true
|
|
61
|
-
},
|
|
62
|
-
{
|
|
63
|
-
"key": "MONGODB_USER",
|
|
64
|
-
"value": "${MONGODB_USERNAME}",
|
|
65
|
-
"description": "MongoDB wire-protocol username provisioned by Onebox Corestore.",
|
|
66
|
-
"required": true
|
|
67
|
-
},
|
|
68
|
-
{
|
|
69
|
-
"key": "MONGODB_PASS",
|
|
70
|
-
"value": "${MONGODB_PASSWORD}",
|
|
71
|
-
"description": "MongoDB wire-protocol password provisioned by Onebox Corestore.",
|
|
72
|
-
"required": true
|
|
73
|
-
},
|
|
74
|
-
{
|
|
75
|
-
"key": "S3_ENDPOINT",
|
|
76
|
-
"value": "onebox-corestore",
|
|
77
|
-
"description": "S3 endpoint host provisioned by Onebox Corestore.",
|
|
78
|
-
"required": true
|
|
79
|
-
},
|
|
80
|
-
{
|
|
81
|
-
"key": "S3_PORT",
|
|
82
|
-
"value": "9000",
|
|
83
|
-
"description": "S3 endpoint port provisioned by Onebox Corestore.",
|
|
84
|
-
"required": true
|
|
85
|
-
},
|
|
86
|
-
{
|
|
87
|
-
"key": "S3_USESSL",
|
|
88
|
-
"value": "false",
|
|
89
|
-
"description": "Use plain HTTP for internal Corestore S3 traffic on the Onebox network.",
|
|
90
|
-
"required": true
|
|
91
|
-
},
|
|
92
|
-
{
|
|
93
|
-
"key": "S3_BUCKET",
|
|
94
|
-
"value": "${S3_BUCKET}",
|
|
95
|
-
"description": "S3 bucket provisioned by Onebox Corestore for Cloudly's registry.",
|
|
96
|
-
"required": true
|
|
97
|
-
},
|
|
98
|
-
{
|
|
99
|
-
"key": "S3_ACCESSKEY",
|
|
100
|
-
"value": "${S3_ACCESS_KEY}",
|
|
101
|
-
"description": "S3 access key provisioned by Onebox Corestore.",
|
|
102
|
-
"required": true
|
|
103
|
-
},
|
|
104
|
-
{
|
|
105
|
-
"key": "S3_SECRETKEY",
|
|
106
|
-
"value": "${S3_SECRET_KEY}",
|
|
107
|
-
"description": "S3 secret key provisioned by Onebox Corestore.",
|
|
108
|
-
"required": true
|
|
109
|
-
}
|
|
110
|
-
],
|
|
111
|
-
"platformRequirements": {
|
|
112
|
-
"mongodb": true,
|
|
113
|
-
"s3": true
|
|
114
|
-
},
|
|
115
|
-
"platformOidc": {
|
|
116
|
-
"redirectPath": "/auth/oidc/callback",
|
|
117
|
-
"roles": [
|
|
118
|
-
{
|
|
119
|
-
"id": "admin",
|
|
120
|
-
"label": "Administrator",
|
|
121
|
-
"description": "Full Cloudly administration for this hosted instance."
|
|
122
|
-
},
|
|
123
|
-
{
|
|
124
|
-
"id": "user",
|
|
125
|
-
"label": "User",
|
|
126
|
-
"description": "Standard authenticated Cloudly access for this hosted instance."
|
|
127
|
-
}
|
|
128
|
-
],
|
|
129
|
-
"environmentVariables": {
|
|
130
|
-
"issuerUrl": "SERVEZONE_PLATFORM_OIDC_ISSUER",
|
|
131
|
-
"clientId": "SERVEZONE_PLATFORM_OIDC_CLIENT_ID",
|
|
132
|
-
"clientSecret": "SERVEZONE_PLATFORM_OIDC_CLIENT_SECRET",
|
|
133
|
-
"redirectUri": "SERVEZONE_PLATFORM_OIDC_REDIRECT_URI",
|
|
134
|
-
"audience": "SERVEZONE_PLATFORM_OIDC_AUDIENCE"
|
|
135
|
-
},
|
|
136
|
-
"clientAuthenticationMethod": "client_secret_basic"
|
|
137
|
-
},
|
|
138
|
-
"minOneboxVersion": "7.12.0",
|
|
139
|
-
"changelog": "Advance the fenced Cloudly Secrets v2 cutover to Cloudly 24.1.0 with persisted settlement replay evidence and migration of exact legacy Corestore binding credentials.",
|
|
140
|
-
"breaking": true,
|
|
141
|
-
"requiresManualReview": true,
|
|
142
|
-
"migrationRequired": true,
|
|
143
|
-
"backupBeforeUpgrade": true,
|
|
144
|
-
"healthCheck": {
|
|
145
|
-
"path": "/status",
|
|
146
|
-
"port": 3000,
|
|
147
|
-
"expectedStatus": 200
|
|
148
|
-
}
|
|
149
|
-
}
|
|
@@ -1,149 +0,0 @@
|
|
|
1
|
-
{
|
|
2
|
-
"image": "code.foss.global/serve.zone/cloudly@sha256:948b72927d177b8f73be0596017df78437cbaa0e96b5f2ce246590aebbab05e9",
|
|
3
|
-
"targetPorts": [
|
|
4
|
-
{ "name": "web", "port": 3000, "protocol": "http", "default": true }
|
|
5
|
-
],
|
|
6
|
-
"envVars": [
|
|
7
|
-
{
|
|
8
|
-
"key": "SERVEZONE_ENVIRONMENT",
|
|
9
|
-
"value": "production",
|
|
10
|
-
"description": "Cloudly runtime environment.",
|
|
11
|
-
"required": true
|
|
12
|
-
},
|
|
13
|
-
{
|
|
14
|
-
"key": "SERVEZONE_PUBLIC_ORIGIN",
|
|
15
|
-
"value": "https://${SERVICE_DOMAIN}",
|
|
16
|
-
"description": "Canonical public Cloudly origin including protocol and optional public port.",
|
|
17
|
-
"required": true
|
|
18
|
-
},
|
|
19
|
-
{
|
|
20
|
-
"key": "SERVEZONE_LISTENPORT",
|
|
21
|
-
"value": "3000",
|
|
22
|
-
"description": "Internal Cloudly HTTP port inside the container.",
|
|
23
|
-
"required": true
|
|
24
|
-
},
|
|
25
|
-
{
|
|
26
|
-
"key": "SERVEZONE_SSLMODE",
|
|
27
|
-
"value": "external",
|
|
28
|
-
"description": "Use external TLS termination through Onebox or dcrouter.",
|
|
29
|
-
"required": true
|
|
30
|
-
},
|
|
31
|
-
{
|
|
32
|
-
"key": "SERVEZONE_WORKLOADINIT_APPROVAL_PATH",
|
|
33
|
-
"value": "/run/secrets/cloudly-workloadinit-approval.json",
|
|
34
|
-
"description": "Private WorkloadInit release-approval artifact mounted by Onebox for Coreflow secret-runtime registration.",
|
|
35
|
-
"required": true
|
|
36
|
-
},
|
|
37
|
-
{
|
|
38
|
-
"key": "SERVEZONE_WORKLOADINIT_APPROVAL_FILE",
|
|
39
|
-
"description": "Operator-approved WorkloadInit release authority. Onebox stores it encrypted and mounts it only as a root-readable file.",
|
|
40
|
-
"required": true,
|
|
41
|
-
"secret": true,
|
|
42
|
-
"delivery": {
|
|
43
|
-
"type": "file",
|
|
44
|
-
"targetPath": "/run/secrets/cloudly-workloadinit-approval.json",
|
|
45
|
-
"uid": 0,
|
|
46
|
-
"gid": 0,
|
|
47
|
-
"mode": 256
|
|
48
|
-
}
|
|
49
|
-
},
|
|
50
|
-
{
|
|
51
|
-
"key": "MONGODB_URL",
|
|
52
|
-
"value": "${MONGODB_URI}",
|
|
53
|
-
"description": "Authenticated MongoDB wire-protocol URL provisioned by Onebox Corestore.",
|
|
54
|
-
"required": true
|
|
55
|
-
},
|
|
56
|
-
{
|
|
57
|
-
"key": "MONGODB_NAME",
|
|
58
|
-
"value": "${MONGODB_DATABASE}",
|
|
59
|
-
"description": "MongoDB wire-protocol database name provisioned by Onebox Corestore.",
|
|
60
|
-
"required": true
|
|
61
|
-
},
|
|
62
|
-
{
|
|
63
|
-
"key": "MONGODB_USER",
|
|
64
|
-
"value": "${MONGODB_USERNAME}",
|
|
65
|
-
"description": "MongoDB wire-protocol username provisioned by Onebox Corestore.",
|
|
66
|
-
"required": true
|
|
67
|
-
},
|
|
68
|
-
{
|
|
69
|
-
"key": "MONGODB_PASS",
|
|
70
|
-
"value": "${MONGODB_PASSWORD}",
|
|
71
|
-
"description": "MongoDB wire-protocol password provisioned by Onebox Corestore.",
|
|
72
|
-
"required": true
|
|
73
|
-
},
|
|
74
|
-
{
|
|
75
|
-
"key": "S3_ENDPOINT",
|
|
76
|
-
"value": "onebox-corestore",
|
|
77
|
-
"description": "S3 endpoint host provisioned by Onebox Corestore.",
|
|
78
|
-
"required": true
|
|
79
|
-
},
|
|
80
|
-
{
|
|
81
|
-
"key": "S3_PORT",
|
|
82
|
-
"value": "9000",
|
|
83
|
-
"description": "S3 endpoint port provisioned by Onebox Corestore.",
|
|
84
|
-
"required": true
|
|
85
|
-
},
|
|
86
|
-
{
|
|
87
|
-
"key": "S3_USESSL",
|
|
88
|
-
"value": "false",
|
|
89
|
-
"description": "Use plain HTTP for internal Corestore S3 traffic on the Onebox network.",
|
|
90
|
-
"required": true
|
|
91
|
-
},
|
|
92
|
-
{
|
|
93
|
-
"key": "S3_BUCKET",
|
|
94
|
-
"value": "${S3_BUCKET}",
|
|
95
|
-
"description": "S3 bucket provisioned by Onebox Corestore for Cloudly's registry.",
|
|
96
|
-
"required": true
|
|
97
|
-
},
|
|
98
|
-
{
|
|
99
|
-
"key": "S3_ACCESSKEY",
|
|
100
|
-
"value": "${S3_ACCESS_KEY}",
|
|
101
|
-
"description": "S3 access key provisioned by Onebox Corestore.",
|
|
102
|
-
"required": true
|
|
103
|
-
},
|
|
104
|
-
{
|
|
105
|
-
"key": "S3_SECRETKEY",
|
|
106
|
-
"value": "${S3_SECRET_KEY}",
|
|
107
|
-
"description": "S3 secret key provisioned by Onebox Corestore.",
|
|
108
|
-
"required": true
|
|
109
|
-
}
|
|
110
|
-
],
|
|
111
|
-
"platformRequirements": {
|
|
112
|
-
"mongodb": true,
|
|
113
|
-
"s3": true
|
|
114
|
-
},
|
|
115
|
-
"platformOidc": {
|
|
116
|
-
"redirectPath": "/auth/oidc/callback",
|
|
117
|
-
"roles": [
|
|
118
|
-
{
|
|
119
|
-
"id": "admin",
|
|
120
|
-
"label": "Administrator",
|
|
121
|
-
"description": "Full Cloudly administration for this hosted instance."
|
|
122
|
-
},
|
|
123
|
-
{
|
|
124
|
-
"id": "user",
|
|
125
|
-
"label": "User",
|
|
126
|
-
"description": "Standard authenticated Cloudly access for this hosted instance."
|
|
127
|
-
}
|
|
128
|
-
],
|
|
129
|
-
"environmentVariables": {
|
|
130
|
-
"issuerUrl": "SERVEZONE_PLATFORM_OIDC_ISSUER",
|
|
131
|
-
"clientId": "SERVEZONE_PLATFORM_OIDC_CLIENT_ID",
|
|
132
|
-
"clientSecret": "SERVEZONE_PLATFORM_OIDC_CLIENT_SECRET",
|
|
133
|
-
"redirectUri": "SERVEZONE_PLATFORM_OIDC_REDIRECT_URI",
|
|
134
|
-
"audience": "SERVEZONE_PLATFORM_OIDC_AUDIENCE"
|
|
135
|
-
},
|
|
136
|
-
"clientAuthenticationMethod": "client_secret_basic"
|
|
137
|
-
},
|
|
138
|
-
"minOneboxVersion": "7.14.0",
|
|
139
|
-
"changelog": "Move Cloudly to 25.1.0 on SmartDB 5.5.1 with orchestrator-driven legacy deployment settlement, a direct /status readiness endpoint, and the Alpine-based image. Onebox 7.14.0 settles legacy deployment operations during the fenced Cloudly Secrets v2 cutover before this target is applied.",
|
|
140
|
-
"breaking": true,
|
|
141
|
-
"requiresManualReview": true,
|
|
142
|
-
"migrationRequired": true,
|
|
143
|
-
"backupBeforeUpgrade": true,
|
|
144
|
-
"healthCheck": {
|
|
145
|
-
"path": "/status",
|
|
146
|
-
"port": 3000,
|
|
147
|
-
"expectedStatus": 200
|
|
148
|
-
}
|
|
149
|
-
}
|