cyberia 3.0.3 → 3.2.5

package/CLI-HELP.md

@@ -1,4 +1,4 @@
-## underpost ci/cd cli v3.0.3
+## underpost ci/cd cli v3.2.5
 
 ### Usage: `underpost [options] [command]`
   ```
@@ -8,6 +8,7 @@
 
 Commands:
   new [options] [app-name]                                   Initializes a new Underpost project, service, or configuration.
+  client [options] [deploy-id] [sub-conf] [host] [path]      Builds client assets, single replicas, and/or syncs environment ports.
   start [options] <deploy-id> [env]                          Initiates application servers, build pipelines, or other defined services based on the deployment ID.
   clone [options] <uri>                                      Clones a specified GitHub repository into the current directory.
   pull [options] <path> <uri>                                Pulls the latest changes from a specified GitHub repository.
@@ -33,6 +34,7 @@ Commands:
   run [options] <runner-id> [path]                           Runs specified scripts using various runners.
   lxd [options]                                              Manages LXD virtual machines as K3s nodes (control plane or workers).
   baremetal [options] [workflow-id]                          Manages baremetal server operations, including installation, database setup, commissioning, and user management.
+  release [options] [version]                                Release orchestrator for building new versions and deploying releases of the Underpost CLI.
   help [command]                                             display help for command
  
 ```
@@ -62,6 +64,9 @@ Options:
                                     (pwa-microservices-template)
   --sync-conf                       Sync configuration to private repositories
                                     (requires --deploy-id)
+  --sync-start                      Sync start scripts in deploy ID package.json
+                                    with root package.json (use 'dd' as
+                                    --deploy-id to sync all dd.router)
   --purge                           Remove deploy ID conf and all related
                                     repositories (requires --deploy-id)
   --dev                             Sets the development cli context
@@ -73,6 +78,29 @@ Options:
 ```
   
 
+### `client` :
+```
+ Usage: underpost client [options] [deploy-id] [sub-conf] [host] [path]
+
+Builds client assets, single replicas, and/or syncs environment ports.
+
+Arguments:
+  deploy-id         The deployment ID to build. (default: "dd-default")
+  sub-conf          The sub-configuration for the build. (default: "")
+  host              Comma-separated hosts to filter the build. (default: "")
+  path              Comma-separated paths to filter the build. (default: "")
+
+Options:
+  --sync-env-port   Sync environment port assignments across all deploy IDs
+  --single-replica  Build single replica folders instead of full client
+  --build-zip       Create zip files of the builds
+  --lite-build      Skip full build (default is full build)
+  --icons-build     Build icons
+  -h, --help        display help for command
+ 
+```
+  
+
 ### `start` :
 ```
  Usage: underpost start [options] <deploy-id> [env]
@@ -94,6 +122,8 @@ Options:
                                process.
   --underpost-quickly-install  Uses Underpost Quickly Install for dependency
                                installation.
+  --skip-pull-base             Skips cloning repositories, uses current
+                               workspace code directly.
   -h, --help                   display help for command
  
 ```
@@ -110,7 +140,7 @@ Arguments:
 
 Options:
   --bare      Performs a bare clone, downloading only the .git files.
-  -g8         Uses the g8 repository extension for cloning.
+  --g8        Uses the g8 repository extension for cloning.
   -h, --help  display help for command
  
 ```
@@ -128,7 +158,7 @@ Arguments:
   uri         The URI of the GitHub repository (e.g., "username/repository").
 
 Options:
-  -g8         Uses the g8 repository extension for pulling.
+  --g8        Uses the g8 repository extension for pulling.
   -h, --help  display help for command
  
 ```
@@ -145,8 +175,8 @@ Arguments:
   path                               The absolute or relative directory path of
                                      the repository.
   commit-type                        The type of commit to perform. Options:
-                                     feat, fix, docs, style, refactor, perf,
-                                     ci, cd, infra, build, test, chore, revert,
+                                     feat, fix, docs, style, refactor, perf, ci,
+                                     cd, infra, build, test, chore, revert,
                                      backup.
   module-tag                         Optional: Sets a specific module tag for
                                      the commit.
@@ -154,14 +184,14 @@ Arguments:
                                      message for the commit.
 
 Options:
-  --log <latest-n>                   Shows commit history from the specified
+  --log [latest-n]                   Shows commit history from the specified
                                      number of latest n path commits.
   --last-msg <latest-n>              Displays the last n commit message.
   --empty                            Allows committing with empty files.
   --copy                             Copies the generated commit message to the
                                      clipboard.
-  --info                             Displays information about available
-                                     commit types.
+  --info                             Displays information about available commit
+                                     types.
   --diff                             Shows the current git diff changes.
   --edit                             Edit last commit.
   --deploy-id <deploy-id>            Sets the deployment configuration ID for
@@ -171,8 +201,8 @@ Options:
                                      hashes of commits.
   --extension <extension>            specific file extensions of commits.
   --changelog [latest-n]             Print plain the changelog of the specified
-                                     number of latest n commits, if no number
-                                     is provided it will get the changelog to
+                                     number of latest n commits, if no number is
+                                     provided it will get the changelog to
                                      latest ci integration
   --changelog-build                  Builds a CHANGELOG.md file based on the
                                      commit history
@@ -181,6 +211,14 @@ Options:
   --changelog-no-hash                Excludes commit hashes from the generated
                                      changelog entries (used with
                                      --changelog-build).
+  --unpush                           With --log, automatically sets range to
+                                     unpushed commits ahead of remote.
+  -b                                 Shows the current Git branch name.
+  -p [branch]                        Shows the reflog for the specified branch.
+  --bc <commit-hash>                 Shows branches that contain the specified
+                                     commit.
+  --is-remote-repo <url-repo>        Checks whether a remote Git repository URL
+                                     is reachable. Prints true or false.
   -h, --help                         display help for command
  
 ```
@@ -198,7 +236,7 @@ Arguments:
 
 Options:
   -f          Forces the push, overwriting the remote repository history.
-  -g8         Uses the g8 repository extension for pushing.
+  --g8        Uses the g8 repository extension for pushing.
   -h, --help  display help for command
  
 ```
@@ -282,11 +320,10 @@ Options:
 Manages Underpost configurations using various operators.
 
 Arguments:
-  operator                 The configuration operation to perform. Options:
-                           set, delete, get, list, clean.
+  operator                 The configuration operation to perform. Options: set,
+                           delete, get, list, clean, isInsideContainer.
   key                      Optional: The specific configuration key to manage.
-  value                    Optional: The value to set for the configuration
-                           key.
+  value                    Optional: The value to set for the configuration key.
 
 Options:
   --plain                  Prints the configuration value in plain text.
@@ -295,8 +332,8 @@ Options:
   --deploy-id <deploy-id>  Sets the deployment configuration ID for the
                            operation context.
   --build                  Sets the build context for the operation.
-  --copy                   Copies the configuration value to the clipboard
-                           (only for get operation).
+  --copy                   Copies the configuration value to the clipboard (only
+                           for get operation).
   -h, --help               display help for command
  
 ```
@@ -337,8 +374,8 @@ Options:
   --ban-egress-clear    Clears all banned egress IP addresses.
   --ban-both-add        Adds IP addresses to both banned ingress and egress
                         lists.
-  --ban-both-remove     Removes IP addresses from both banned ingress and
-                        egress lists.
+  --ban-both-remove     Removes IP addresses from both banned ingress and egress
+                        lists.
   -h, --help            display help for command
  
 ```
@@ -364,8 +401,8 @@ Options:
   --mongodb                            Initializes the cluster with a MongoDB
                                        statefulset.
   --mongo-db-host <host>               Set custom mongo db host
-  --postgresql                         Initializes the cluster with a
-                                       PostgreSQL statefulset.
+  --postgresql                         Initializes the cluster with a PostgreSQL
+                                       statefulset.
   --mongodb4                           Initializes the cluster with a MongoDB
                                        4.4 service.
   --valkey                             Initializes the cluster with a Valkey
@@ -380,10 +417,10 @@ Options:
                                        GPU base resources and environment
                                        settings.
   --ns-use <ns-name>                   Switches the current Kubernetes context
-                                       to the specified namespace (creates if
-                                       it doesn't exist).
-  --kubeadm                            Initializes the cluster using kubeadm
-                                       for control plane management.
+                                       to the specified namespace (creates if it
+                                       doesn't exist).
+  --kubeadm                            Initializes the cluster using kubeadm for
+                                       control plane management.
   --pod-network-cidr <cidr>            Sets custom pod network CIDR for kubeadm
                                        cluster initialization (defaults to
                                        "192.168.0.0/16").
@@ -392,15 +429,15 @@ Options:
                                        to "localhost:6443").
   --grafana                            Initializes the cluster with a Grafana
                                        deployment.
-  --prom [hosts]                       Initializes the cluster with a
-                                       Prometheus Operator deployment and
-                                       monitor scrap for specified hosts.
+  --prom [hosts]                       Initializes the cluster with a Prometheus
+                                       Operator deployment and monitor scrap for
+                                       specified hosts.
   --dev                                Initializes a development-specific
                                        cluster configuration.
   --list-pods                          Displays detailed information about all
                                        pods.
-  --pull-image                         Sets an optional associated image to
-                                       pull during initialization.
+  --pull-image                         Sets an optional associated image to pull
+                                       during initialization.
   --init-host                          Installs necessary Kubernetes node CLI
                                        tools (e.g., kind, kubeadm, docker,
                                        podman, helm).
@@ -414,8 +451,8 @@ Options:
                                        (Lightweight Kubernetes).
   --hosts <hosts>                      A comma-separated list of cluster
                                        hostnames or IP addresses.
-  --remove-volume-host-paths           Removes specified volume host paths
-                                       after execution.
+  --remove-volume-host-paths           Removes specified volume host paths after
+                                       execution.
   --namespace <namespace>              Kubernetes namespace for cluster
                                        operations (defaults to "default").
   --replicas <replicas>                Sets a custom number of replicas for
@@ -479,8 +516,14 @@ Options:
   --status                            Retrieves current network traffic data
                                       from resource deployments and the host
                                       machine network configuration.
-  --kubeadm                           Enables the kubeadm context for
-                                      deployment operations.
+  --kubeadm                           Enables the kubeadm context for deployment
+                                      operations.
+  --k3s                               Enables the k3s context for deployment
+                                      operations.
+  --kind                              Enables the kind context for deployment
+                                      operations.
+  --git-clean                         Runs git clean on volume mount paths
+                                      before copying.
   --etc-hosts                         Enables the etc-hosts context for
                                       deployment operations.
   --restore-hosts                     Restores default `/etc/hosts` entries.
@@ -510,13 +553,17 @@ Manages secrets for various platforms.
 
 Arguments:
   platform                            The secret management platform. Options:
-                                      underpost.
+                                      underpost, globalSecretClean.
 
 Options:
   --init                              Initializes the secrets platform
                                       environment.
   --create-from-file <path-env-file>  Creates secrets from a specified
                                       environment file.
+  --create-from-env                   Creates secrets from container environment
+                                      variables (envFrom: secretRef).
+  --global-clean                      Removes all filesystem traces of secrets
+                                      (engine-private, .env, conf cache).
   --list                              Lists all available secrets for the
                                       platform.
   -h, --help                          display help for command
@@ -533,8 +580,8 @@ clusters.
 
 Options:
   --build                              Builds a Docker image using Podman,
-                                       optionally saves it as a tar archive,
-                                       and loads it into a specified Kubernetes
+                                       optionally saves it as a tar archive, and
+                                       loads it into a specified Kubernetes
                                        cluster (Kind, Kubeadm, or K3s).
   --ls                                 Lists all available Underpost Dockerfile
                                        images.
@@ -551,8 +598,8 @@ Options:
                                        "rockylinux9-underpost" image.
   --spec                               Get current cached list of container
                                        images used by all pods
-  --namespace <namespace>              Kubernetes namespace for image
-                                       operations (defaults to "default").
+  --namespace <namespace>              Kubernetes namespace for image operations
+                                       (defaults to "default").
   --kind                               Set kind cluster env image context
                                        management.
   --kubeadm                            Set kubeadm cluster env image context
@@ -561,8 +608,7 @@ Options:
                                        management.
   --node-name                          Set node name for kubeadm or k3s cluster
                                        env image context management.
-  --reset                              Performs a build without using the
-                                       cache.
+  --reset                              Performs a build without using the cache.
   --dev                                Use development mode.
   --pull-dockerhub <dockerhub-image>   Sets a custom Docker Hub image for base
                                        image pulls.
@@ -617,6 +663,7 @@ Options:
   --kubeadm                                  Enables the kubeadm context for database operations.
   --kind                                     Enables the kind context for database operations.
   --k3s                                      Enables the k3s context for database operations.
+  --repo-backup                              Backs up repositories (git commit+push) inside deployment pods via kubectl exec.
   -h, --help                                 display help for command
  
 ```
@@ -640,6 +687,7 @@ Options:
   --instances  Apply to instance data collection
   --generate   Generate cluster metadata
   --itc        Apply under container execution context
+  --dev        Sets the development cli context
   -h, --help   display help for command
  
 ```
@@ -681,8 +729,6 @@ Options:
   --dry-run                  Preview cron jobs without executing them.
   --create-job-now           After applying manifests, immediately create a Job
                              from each CronJob (requires --apply).
-  --ssh                      Execute backup commands via SSH on the remote node
-                             instead of locally.
   -h, --help                 display help for command
  
 ```
@@ -790,32 +836,30 @@ services.
 
 Options:
   --deploy-id <deploy-id>  Sets deploy id context for ssh operations.
-  --generate               Generates new ssh credential and stores it in
-                           current private keys file storage.
+  --generate               Generates new ssh credential and stores it in current
+                           private keys file storage.
   --user <user>            Sets custom ssh user
   --password <password>    Sets custom ssh password
   --host <host>            Sets custom ssh host
   --port <port>            Sets custom ssh port
   --filter <filter>        Filters ssh user credentials from current private
                            keys file storage.
-  --groups <groups>        Sets comma-separated ssh user groups for the ssh
-                           user credential.
+  --groups <groups>        Sets comma-separated ssh user groups for the ssh user
+                           credential.
   --user-add               Adds a new ssh user credential to current private
                            keys file storage.
   --user-remove            Removes an existing ssh user credential from current
                            private keys file storage.
   --user-ls                Lists all ssh user credentials from current private
                            keys file storage.
-  --start                  Starts an SSH session with the specified
-                           credentials.
+  --start                  Starts an SSH session with the specified credentials.
   --reset                  Resets ssh configuration and deletes all stored
                            credentials.
   --keys-list              Lists all ssh keys from current private keys file
                            storage.
   --hosts-list             Lists all ssh hosts from current private keys file
                            storage.
-  --disable-password       Disables password authentication for the SSH
-                           session.
+  --disable-password       Disables password authentication for the SSH session.
   --key-test               Tests the SSH key using ssh-keygen.
   --stop                   Stops the SSH service.
   --status                 Checks the status of the SSH service.
@@ -833,7 +877,7 @@ Options:
 Runs specified scripts using various runners.
 
 Arguments:
-  runner-id                                       The runner ID to run. Options: dev-cluster,ipfs-expose,metadata,svc-ls,svc-rm,ssh-deploy-info,dev-hosts-expose,dev-hosts-restore,cluster-build,template-deploy,template-deploy-image,clean,pull,release-deploy,ssh-deploy,ide,crypto-policy,sync,stop,ssh-deploy-stop,ssh-deploy-db-rollback,ssh-deploy-db,ssh-deploy-db-status,tz,get-proxy,instance-promote,instance,ls-deployments,host-update,dd-container,ip-info,db-client,git-conf,promote,metrics,cluster,deploy,disk-clean,disk-devices,disk-usage,dev,service,etc-hosts,sh,log,ps,ptls,release-cmt,deploy-test,sync-replica,tf-vae-test,spark-template,rmi,kill,secret,underpost-config,gpu-env,tf-gpu-test,deploy-job.
+  runner-id                                       The runner ID to run. Options: dev-cluster,ipfs-expose,metadata,svc-ls,svc-rm,ssh-deploy-info,dev-hosts-expose,dev-hosts-restore,cluster-build,template-deploy,template-deploy-local,template-deploy-image,docker-image,clean,pull,release-deploy,ssh-deploy,ide,crypto-policy,sync,stop,ssh-deploy-stop,ssh-deploy-db-rollback,ssh-deploy-db,ssh-deploy-db-status,tz,get-proxy,instance-promote,instance,ls-deployments,host-update,dd-container,ip-info,db-client,git-conf,promote,metrics,cluster,deploy,disk-clean,disk-devices,disk-usage,dev,service,etc-hosts,sh,log,ps,pid-info,background,ports,deploy-test,tf-vae-test,spark-template,rmi,kill,generate-pass,secret,underpost-config,gpu-env,tf-gpu-test,deploy-job.
   path                                            The input value, identifier, or path for the operation.
 
 Options:
@@ -864,7 +908,6 @@ Options:
   --force                                         Forces operation, overriding any warnings or conflicts.
   --tls                                           Enables TLS for the runner execution.
   --reset                                         Resets the runner state before execution.
-  --terminal                                      Enables terminal mode for interactive script execution.
   --dev-proxy-port-offset <port-offset>           Sets a custom port offset for development proxy.
   --host-network                                  Enables host network mode for the runner execution.
   --requests-memory <requests-memory>             Requests memory limit for the runner execution.
@@ -881,6 +924,7 @@ Options:
   --kubeadm                                       Sets the kubeadm cluster context for the runner execution.
   --k3s                                           Sets the k3s cluster context for the runner execution.
   --kind                                          Sets the kind cluster context for the runner execution.
+  --git-clean                                     Runs git clean on volume mount paths before copying.
   --log-type <log-type>                           Sets the log type for the runner execution.
   --deploy-id <deploy-id>                         Sets deploy id context for the runner execution.
   --user <user>                                   Sets user context for the runner execution.
@@ -898,8 +942,10 @@ Options:
   --monitor-status-delta-ms <milliseconds>        Sets the polling interval in milliseconds for status monitoring (default: 1000).
   --monitor-status-max-attempts <attempts>        Sets the maximum number of status check attempts (default: 600).
   --dry-run                                       Preview operations without executing them.
+  --from-n-commit <n>                             Number of commits back to use for message propagation in template-deploy (default: 1, last commit only).
   --create-job-now                                After applying cron manifests, immediately create a Job from each CronJob (forwarded to cron runner).
   --host-aliases <host-aliases>                   Adds entries to the Pod /etc/hosts via hostAliases. Format: semicolon-separated entries of "ip=hostname1,hostname2" (e.g., "127.0.0.1=foo.local,bar.local;10.1.2.3=foo.remote,bar.remote").
+  --copy                                          Copies the runner output to the clipboard (supported by: generate-pass, template-deploy-local).
   -h, --help                                      display help for command
  
 ```
@@ -931,8 +977,8 @@ Options:
   --delete-vm <vm-name>            Stop and delete the specified VM.
   --init-vm <vm-name>              Run k3s-node-setup.sh on the specified VM
                                    (use with --control or --worker).
-  --info-vm <vm-name>              Display full configuration and status for
-                                   the specified VM.
+  --info-vm <vm-name>              Display full configuration and status for the
+                                   specified VM.
   --test <vm-name>                 Run connectivity and health checks on the
                                    specified VM.
   --root-size <gb-size>            Root disk size in GiB for --create-vm
@@ -947,8 +993,7 @@ Options:
                                    "k3s-control:80,443").
   --workflow-id <workflow-id>      Workflow ID to execute via runWorkflow.
   --vm-id <vm-name>                Target VM name for workflow execution.
-  --deploy-id <deploy-id>          Deployment ID context for workflow
-                                   execution.
+  --deploy-id <deploy-id>          Deployment ID context for workflow execution.
   --namespace <namespace>          Kubernetes namespace context (defaults to
                                    "default").
   -h, --help                       display help for command
@@ -1013,4 +1058,34 @@ Options:
   -h, --help                                    display help for command
  
 ```
+  
+
+### `release` :
+```
+ Usage: underpost release [options] [version]
+
+Release orchestrator for building new versions and deploying releases of the
+Underpost CLI.
+
+Arguments:
+  version                The new version string to set (e.g., "3.1.4"). Defaults
+                         to current version.
+
+Options:
+  --build                Builds a new version: tests template, bumps versions,
+                         rebuilds manifests and configs.
+  --deploy               Deploys the release: syncs secrets, commits, and pushes
+                         to remote repositories.
+  --ci-push <deploy-id>  Local equivalent of engine-*.ci.yml: builds
+                         dd-{deploy-id} and pushes to the engine-{deploy-id}
+                         repository. Accepts the suffix (e.g., "cyberia"),
+                         "dd-cyberia", or "engine-cyberia".
+  --message <message>    Commit message for --ci-push or --pwa-build (defaults
+                         to last commit of the engine repository).
+  --pwa-build            Runs the pwa-microservices-template update flow: always
+                         re-clones, syncs engine sources, installs, builds, and
+                         pushes.
+  -h, --help             display help for command
+ 
+```
   

package/Dockerfile

@@ -34,9 +34,11 @@ RUN npm --version
 RUN npm install -g underpost
 RUN underpost --version
 
+# Create non-root user for secure container execution (cron jobs, init containers)
+# Deployment containers override to root via securityContext when npm install -g is needed
+RUN useradd -m -u 1000 -s /bin/bash dd
+
 # Create working directory
-RUN mkdir /home/dd
-VOLUME /home/dd
 WORKDIR /home/dd
 
 # Expose necessary ports