@toa.io/operations 1.0.0-alpha.305 → 1.0.0-alpha.306

package/CHANGELOG.md

@@ -3,6 +3,14 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [1.0.0-alpha.306](https://github.com/toa-io/toa/compare/v1.0.0-alpha.305...v1.0.0-alpha.306) (2026-09-14)
+
+**Note:** Version bump only for package @toa.io/operations
+
+
+
+
+
 # [1.0.0-alpha.305](https://github.com/toa-io/toa/compare/v1.0.0-alpha.304...v1.0.0-alpha.305) (2026-09-13)
 
 **Note:** Version bump only for package @toa.io/operations

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toa.io/operations",
-  "version": "1.0.0-alpha.305",
+  "version": "1.0.0-alpha.306",
   "type": "module",
   "description": "Toa Deployment",
   "homepage": "https://toa.io",
@@ -30,9 +30,9 @@
   "dependencies": {
     "@toa.io/generic": "1.0.0-alpha.304",
     "@toa.io/kubernetes": "1.0.0-alpha.301",
-    "@toa.io/norm": "1.0.0-alpha.305",
+    "@toa.io/norm": "1.0.0-alpha.306",
     "oxc-parser": "0.149.0",
     "paseto": "4.0.1"
   },
-  "gitHead": "6a28476303826e2484cc2ea6306efee6f19fb594"
+  "gitHead": "0693d180a8053a7d07dca879dac2a3c4784d6d45"
 }

package/src/deployment/.deployment/describe.js

@@ -1,3 +1,6 @@
+import { map } from '@toa.io/norm'
+import { MAP_DIRECTORY, MAP_FILE } from '@toa.io/definitions'
+
 import * as desc from './.describe/index.js'
 import { addVariables } from './.describe/variables.js'
 import { addMounts } from './.describe/mounts.js'
@@ -92,6 +95,7 @@ export const describe = (context, compositions, dependency, image) => {
       components: mono.components,
       services: [],
       credentials,
+      map: versions(context),
       mono
     }
 
@@ -109,7 +113,8 @@ export const describe = (context, compositions, dependency, image) => {
     compositions,
     components,
     services,
-    credentials
+    credentials,
+    map: versions(context)
   }
 
   resources(context, values)
@@ -160,3 +165,13 @@ function unit(context, dependency) {
 
   return mono
 }
+
+/**
+ * The component map every workload mounts: which version of a component a process asks what that
+ * component provides. Named rather than found, because a ConfigMap mounts as a directory.
+ *
+ * @param {toa.norm.Context} context
+ */
+function versions(context) {
+  return { directory: MAP_DIRECTORY, file: MAP_FILE, components: map(context) }
+}

package/src/deployment/chart/templates/components.configmap.yaml

@@ -0,0 +1,12 @@
+{{- if .Values.map }}
+# Which version of each component a process asks what that component provides. Mounted rather
+# than rendered into a workload's environment: a variable would replace every pod of the context
+# on every deployment, and a pod that came up between two of them could not be told.
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: components
+data:
+  {{ .Values.map.file }}: |
+{{ .Values.map.components | toPrettyJson | indent 4 }}
+{{- end }}

package/src/deployment/chart/templates/compositions.yaml

@@ -90,12 +90,17 @@ spec:
             timeoutSeconds: 3
             failureThreshold: 5
           {{- end }}
-          {{- if .mounts }}
+          {{- if or .mounts $.Values.map }}
           volumeMounts:
             {{- range .mounts }}
             - name: {{ .name }}
               mountPath: {{ .path }}
             {{- end }}
+            {{- if $.Values.map }}
+            - name: components
+              mountPath: {{ $.Values.map.directory }}
+              readOnly: true
+            {{- end }}
           {{- end }}
           lifecycle:
             preStop:
@@ -106,13 +111,18 @@ spec:
       imagePullSecrets:
         - name: {{ $.Values.credentials }}
       {{- end }}
-      {{- if .mounts }}
+      {{- if or .mounts $.Values.map }}
       volumes:
         {{- range .mounts }}
         - name: {{ .name }}
           persistentVolumeClaim:
             claimName: {{ .claim }}
         {{- end }}
+        {{- if $.Values.map }}
+        - name: components
+          configMap:
+            name: components
+        {{- end }}
       {{- end }}
       topologySpreadConstraints:
         - maxSkew: 1

package/src/deployment/chart/templates/mono.yaml

@@ -80,12 +80,17 @@ spec:
             timeoutSeconds: 3
             failureThreshold: 5
           {{- end }}
-          {{- if .mounts }}
+          {{- if or .mounts $.Values.map }}
           volumeMounts:
             {{- range .mounts }}
             - name: {{ .name }}
               mountPath: {{ .path }}
             {{- end }}
+            {{- if $.Values.map }}
+            - name: components
+              mountPath: {{ $.Values.map.directory }}
+              readOnly: true
+            {{- end }}
           {{- end }}
           lifecycle:
             preStop:
@@ -96,13 +101,18 @@ spec:
       imagePullSecrets:
         - name: {{ $.Values.credentials }}
       {{- end }}
-      {{- if .mounts }}
+      {{- if or .mounts $.Values.map }}
       volumes:
         {{- range .mounts }}
         - name: {{ .name }}
           persistentVolumeClaim:
             claimName: {{ .claim }}
         {{- end }}
+        {{- if $.Values.map }}
+        - name: components
+          configMap:
+            name: components
+        {{- end }}
       {{- end }}
       topologySpreadConstraints:
         - maxSkew: 1

package/src/deployment/chart/templates/services.yaml

@@ -73,10 +73,22 @@ spec:
             timeoutSeconds: 3
             failureThreshold: 5
           {{- end }}
+          {{- if $.Values.map }}
+          volumeMounts:
+            - name: components
+              mountPath: {{ $.Values.map.directory }}
+              readOnly: true
+          {{- end }}
           lifecycle:
             preStop:
               exec:
                 command: [sleep, "5"]
+      {{- if $.Values.map }}
+      volumes:
+        - name: components
+          configMap:
+            name: components
+      {{- end }}
       terminationGracePeriodSeconds: 45
       topologySpreadConstraints:
         - maxSkew: 1

package/src/deployment/images/composition.Dockerfile

@@ -8,4 +8,4 @@ COPY --link . /composition
 
 # no USER: the runtime drops to `node` itself, and only a process that started as root can
 # close its environment under /proc — see runtime/runtime/bin/toa
-CMD toa compose *
+CMD toa compose * --map {{map.file}}

package/src/deployment/images/dependencies.test.js

@@ -213,7 +213,7 @@ describe('prepare', () => {
     assert.deepStrictEqual(lines, [
       `FROM ${image.dependencies.reference}`,
       'COPY --link . /composition',
-      'CMD toa compose *'
+      'CMD toa compose * --map /etc/toa/components.json'
     ])
 
     const entries = (await readdir(context, { recursive: true })).sort()

package/src/deployment/images/image.js

@@ -3,6 +3,7 @@ import { readFile as read, writeFile as write } from 'node:fs/promises'
 import { createHash } from 'node:crypto'
 
 import { overwrite } from '@toa.io/generic'
+import { MAP } from '@toa.io/definitions'
 import { mkdir } from 'node:fs/promises'
 
 /**
@@ -104,6 +105,7 @@ export class Image {
   }
 
   #setValues() {
+    this.#values.map = { file: MAP }
     this.#values.runtime = this.#runtime
     this.#values.build = overwrite(
       {

package/src/deployment/images/mono.Dockerfile

@@ -8,4 +8,4 @@ COPY --link . /composition
 
 # no USER: the runtime drops to `node` itself, and only a process that started as root can
 # close its environment under /proc — see runtime/runtime/bin/toa
-CMD toa mono *
+CMD toa mono * --map {{map.file}}

package/src/deployment/images/service.Dockerfile

@@ -23,4 +23,4 @@ RUN --mount=type=cache,target=/root/.npm,sharing=locked \
 
 # no USER: the runtime drops to `node` itself, and only a process that started as root can
 # close its environment under /proc — see runtime/runtime/bin/toa
-CMD toa serve .
+CMD toa serve . --map {{map.file}}