@tdk-landscape/tdk-cli-core 1.3.120 → 1.3.122

package/engine/topologies/platform/docker/networking/traefik.star

@@ -83,6 +83,22 @@ def get_frontend_traefik_labels(res_name, domain, base_path, port, traefik_host=
 
     return labels
 
+def _stack_is_shared(manifest):
+    """True when this backend shares its stack with another routable backend (`_stackBackendCount`, set by register_compose_resources).
+
+    The stack-scoped routers (the host/`pathPrefix` router and `<name>-management`) carry one rule per stack. With two backends in
+    one stack they would carry the same rule, so Traefik would pick between them arbitrarily. Each backend keeps its own
+    `<name>-project` router (`/api/<name>`).
+    """
+    return bool(manifest) and manifest.get('_stackBackendCount', 1) > 1
+
+
+def _explicit_backend_route(manifest):
+    """The `traefik.host` / `traefik.pathPrefix` a manifest set on purpose, as (host, path); either may be empty."""
+    traefik_cfg = (manifest.get('traefik') or {}) if manifest else {}
+    return traefik_cfg.get('host') or '', traefik_cfg.get('pathPrefix') or ''
+
+
 def get_backend_traefik_labels(
     resource_entry_name,
     traefik_host,
@@ -123,12 +139,31 @@ def get_backend_traefik_labels(
         # No middleware if path is empty - router has no middlewares
         middleware_config = ""
 
-    labels = """      - "{traefik_enable_label}"
-      - "traefik.http.routers.{resource_entry_name}.rule={backend_route_rule}"
+    stack_shared = _stack_is_shared(manifest)
+    explicit_host, explicit_path = _explicit_backend_route(manifest)
+    if stack_shared:
+        # Another backend in this stack would match the same stack rule, so it is not emitted. The service labels stay (the
+        # -project router points at the service). A manifest that set its own host or pathPrefix keeps a router, but one whose
+        # rule is only what it set, never the shared stack host or path.
+        backend_route_rule = backend_rule(explicit_host, explicit_path)
+
+    if stack_shared and not backend_route_rule:
+        backend_router_labels = ""
+    else:
+        backend_router_labels = """      - "traefik.http.routers.{resource_entry_name}.rule={backend_route_rule}"
       - "traefik.http.routers.{resource_entry_name}.entrypoints={backend_entrypoints}"
       - "traefik.http.routers.{resource_entry_name}.service={traefik_resource_name}"
 {middleware_config}
-      - "traefik.http.services.{traefik_resource_name}.loadbalancer.server.port={internal_port}"
+""".format(
+            resource_entry_name=resource_entry_name,
+            backend_route_rule=backend_route_rule,
+            backend_entrypoints=backend_entrypoints,
+            traefik_resource_name=traefik_resource_name,
+            middleware_config=middleware_config,
+        )
+
+    labels = """      - "{traefik_enable_label}"
+{backend_router_labels}      - "traefik.http.services.{traefik_resource_name}.loadbalancer.server.port={internal_port}"
       - "traefik.http.services.{traefik_resource_name}.loadbalancer.healthcheck.path={health_path}"
       - "traefik.http.services.{traefik_resource_name}.loadbalancer.healthcheck.interval={health_interval}"
       - "traefik.http.services.{traefik_resource_name}.loadbalancer.healthcheck.timeout={health_timeout}"
@@ -137,10 +172,8 @@ def get_backend_traefik_labels(
 """.format(
         resource_entry_name=resource_entry_name,
         traefik_enable_label=TRAEFIK_ENABLE_LABEL,
-        backend_route_rule=backend_route_rule,
-        backend_entrypoints=backend_entrypoints,
+        backend_router_labels=backend_router_labels,
         traefik_resource_name=traefik_resource_name,
-        middleware_config=middleware_config,
         internal_port=internal_port,
         health_path=health_path,
         health_interval=TRAEFIK_HEALTHCHECK_INTERVAL,
@@ -188,7 +221,7 @@ def get_backend_traefik_labels(
             router_priority=router_priority,
         )
 
-        if management_path and management_path != api_path:
+        if management_path and management_path != api_path and not stack_shared:
             labels += """
       - "traefik.http.routers.{resource_entry_name}-management.rule=Host(`{api_host}`) && PathPrefix(`{management_path}`)"
       - "traefik.http.routers.{resource_entry_name}-management.entrypoints={project_entrypoints}"

package/engine/topologies/platform/docker/networking/traefik_helpers.star

@@ -64,7 +64,7 @@ def frontend_rule(res_name, base_path, traefik_host):
 
 def backend_rule(traefik_host, traefik_path):
     parts = []
-    if TRAEFIK_ENABLE_BACKEND_HOST_RULE:
+    if TRAEFIK_ENABLE_BACKEND_HOST_RULE and traefik_host:
         parts.append("Host(`{host}`)".format(host=traefik_host))
     if TRAEFIK_ENABLE_BACKEND_PATH_RULE and traefik_path:
         parts.append("PathPrefix(`{path}`)".format(path=traefik_path))

package/engine/topologies/tilt/resources/infra-loader.star

@@ -70,7 +70,7 @@ services:
       POSTGRES_PASSWORD: ${{DB_PASSWORD}}
       POSTGRES_DB: postgres
     ports:
-      - "{host_port}:5432"
+      - "{bind_address}:{host_port}:5432"
     volumes:
       - {name}_postgres_data:/var/lib/postgresql/data
     networks:
@@ -88,7 +88,7 @@ networks:
 
 volumes:
   {name}_postgres_data:
-""".format(name=name, database_network=database_network, host_port=os.environ.get('TDK_POSTGRES_PORT', '15432'))
+""".format(name=name, database_network=database_network, host_port=os.environ.get('TDK_POSTGRES_PORT', '15432'), bind_address=os.environ.get('TDK_BIND_ADDRESS', '127.0.0.1'))
 
 
 def _ensure_database_management_compose(root_prefix, write_fn):
@@ -236,6 +236,7 @@ def _load_standalone_traefik(root_prefix, env_file, write_fn):
         sablier_enabled,
         os.environ.get('TDK_HTTP_PORT', '8080'),
         os.environ.get('TDK_HTTPS_PORT', '8443'),
+        os.environ.get('TDK_BIND_ADDRESS', '127.0.0.1'),
     )
     if write_fn:
         write_fn(compose_rel, content)

package/engine/topologies/tilt/resources/orchestrator/apply_compose_resource_registration.star

@@ -632,6 +632,21 @@ def _build_resource_config(res, manifest, resource_config, full_res_path, infra_
     }
 
 
+def count_routable_backends_by_stack(resource_config, resource_manifests, default_stack):
+    """Count the backends of each stack that get a Traefik route (workers, frontends, SDKs, libraries and unproxied BYO do not)."""
+    counts = {}
+    for resource in resource_config.get('resources', []):
+        manifest = resource_manifests.get(resource['name'], {})
+        app_type = manifest.get('appType', 'backend')
+        if resource.get('frontend', False) or app_type in ['frontend', 'worker', 'library', 'sdk', 'infra']:
+            continue
+        if app_type == 'bring-your-own' and not manifest.get('exposeViaProxy', True):
+            continue
+        stack = manifest.get('stack', default_stack)
+        counts[stack] = counts.get(stack, 0) + 1
+    return counts
+
+
 def register_compose_resources(resource_config, ctx, runtime_flags, manifest_state):
     """Register all compose resources for a service."""
     resource_name = resource_config.get('name', '')
@@ -695,6 +710,7 @@ def register_compose_resources(resource_config, ctx, runtime_flags, manifest_sta
 
     resource_entries = []
     resource_configs = []
+    stack_backend_counts = count_routable_backends_by_stack(resource_config, resource_manifests, resource_name)
 
     for res in resource_config.get('resources', []):
         if _should_skip_frontend(res, should_enable):
@@ -702,6 +718,10 @@ def register_compose_resources(resource_config, ctx, runtime_flags, manifest_sta
         
         full_res_path = res.get('_resource_path', resource_path + '/' + res['name'])
         manifest = resource_manifests.get(res['name'], {})
+        if manifest:
+            # Tell the Traefik label generator how many routable backends share this stack (see _stack_is_shared in networking/traefik.star).
+            manifest = dict(manifest)
+            manifest['_stackBackendCount'] = stack_backend_counts.get(manifest.get('stack', resource_name), 1)
         
         # Skip non-app resources - they don't use the golden app Dockerfile pipeline.
         # infra (e.g. verdaccio) is loaded via registries/verdaccio_loader.star instead.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tdk-landscape/tdk-cli-core",
-  "version": "1.3.120",
+  "version": "1.3.122",
   "description": "TDK CLI — start services on your laptop.",
   "homepage": "https://tdk-landscape.github.io/tdk-website",
   "repository": {