eoapi-cdk 11.3.1 → 11.4.0

package/.jsii

@@ -4081,7 +4081,7 @@
     "stability": "experimental"
   },
   "homepage": "https://github.com/developmentseed/eoapi-cdk.git",
-  "jsiiVersion": "5.9.10 (build 0e9cf43)",
+  "jsiiVersion": "5.9.34 (build 8773a22)",
   "keywords": [],
   "license": "ISC",
   "metadata": {
@@ -4300,7 +4300,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/database/index.ts",
-        "line": 462
+        "line": 495
       },
       "name": "DatabaseParameters",
       "properties": [
@@ -4313,7 +4313,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 478
+            "line": 511
           },
           "name": "effectiveCacheSize",
           "type": {
@@ -4329,7 +4329,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 488
+            "line": 521
           },
           "name": "maintenanceWorkMem",
           "type": {
@@ -4345,7 +4345,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 466
+            "line": 499
           },
           "name": "maxConnections",
           "type": {
@@ -4361,7 +4361,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 493
+            "line": 526
           },
           "name": "maxLocksPerTransaction",
           "type": {
@@ -4377,7 +4377,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 508
+            "line": 541
           },
           "name": "randomPageCost",
           "type": {
@@ -4393,7 +4393,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 503
+            "line": 536
           },
           "name": "seqPageCost",
           "type": {
@@ -4410,7 +4410,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 473
+            "line": 506
           },
           "name": "sharedBuffers",
           "type": {
@@ -4426,7 +4426,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 498
+            "line": 531
           },
           "name": "tempBuffers",
           "type": {
@@ -4442,7 +4442,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 483
+            "line": 516
           },
           "name": "workMem",
           "type": {
@@ -4988,7 +4988,7 @@
         },
         "locationInModule": {
           "filename": "lib/database/index.ts",
-          "line": 131
+          "line": 130
         },
         "parameters": [
           {
@@ -5014,7 +5014,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/database/index.ts",
-        "line": 119
+        "line": 118
       },
       "methods": [
         {
@@ -5023,7 +5023,7 @@
           },
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 307
+            "line": 308
           },
           "name": "getParameters",
           "parameters": [
@@ -5062,7 +5062,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 125
+            "line": 124
           },
           "name": "connectionTarget",
           "type": {
@@ -5085,7 +5085,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 124
+            "line": 123
           },
           "name": "pgstacVersion",
           "type": {
@@ -5099,7 +5099,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 128
+            "line": 127
           },
           "name": "pgbouncerHealthCheck",
           "optional": true,
@@ -5114,7 +5114,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 129
+            "line": 128
           },
           "name": "pgbouncerInstanceId",
           "optional": true,
@@ -5129,7 +5129,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 127
+            "line": 126
           },
           "name": "secretBootstrapper",
           "optional": true,
@@ -5144,7 +5144,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 126
+            "line": 125
           },
           "name": "securityGroup",
           "optional": true,
@@ -5158,7 +5158,7 @@
           },
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 120
+            "line": 119
           },
           "name": "db",
           "type": {
@@ -5171,7 +5171,7 @@
           },
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 121
+            "line": 120
           },
           "name": "pgstacSecret",
           "type": {
@@ -5194,7 +5194,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/database/index.ts",
-        "line": 347
+        "line": 348
       },
       "name": "PgStacDatabaseProps",
       "properties": [
@@ -5208,7 +5208,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 416
+            "line": 417
           },
           "name": "addPatchManager",
           "optional": true,
@@ -5226,7 +5226,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 381
+            "line": 382
           },
           "name": "addPgbouncer",
           "optional": true,
@@ -5244,7 +5244,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 440
+            "line": 473
           },
           "name": "bootstrapperLambdaFunctionOptions",
           "optional": true,
@@ -5255,14 +5255,15 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "A custom resource property is going to be created\nto trigger the boostrapping lambda function. This parameter allows the user to specify additional properties\non top of the defaults ones.",
+            "example": "customResourceProperties: {\n  update_collection_extent: \"TRUE\",\n  use_queue: \"TRUE\",\n  pg_cron_schedule: \"*\\/10 * * * *\",\n}",
+            "remarks": "These are merged with the defaults and forwarded\nto the handler as `event[\"ResourceProperties\"]`.\n\n## Supported pgSTAC settings\n\nEach setting follows honest boolean semantics: `\"TRUE\"` enables, `\"FALSE\"`\ndisables (reverts to pgSTAC's built-in default), and omitting the key\nentirely is a no-op — the database is left as-is. This means upgrading\nwithout changing config never silently alters a manually-managed setting.\n\n| Property                   | Default  | Description |\n|----------------------------|----------|-------------|\n| `context`                  | (unset)  | Enable `CONTEXT=ON` in pgSTAC (item count on search). |\n| `mosaic_index`             | `\"TRUE\"` | Create a partial index on searches of type `mosaic`. Set `\"FALSE\"` to drop it. |\n| `update_collection_extent` | (unset)  | Automatically update collection spatial/temporal extents on item ingest. Combine with `use_queue` to reduce per-transaction overhead. |\n| `use_queue`                | (unset)  | Process extent updates asynchronously via an internal queue. `\"TRUE\"` installs pg_cron and schedules the drain job; `\"FALSE\"` removes the job. Requires `pg_cron` (see below). |\n| `pg_cron_schedule`         | `\"*\\/10 * * * *\"` | Cron schedule for `CALL run_queued_queries()`. Only used when `use_queue` is `\"TRUE\"`. |\n\n## pg_cron requirement\n\nWhen `use_queue` is `\"TRUE\"`, the bootstrapper installs the `pg_cron`\nextension and schedules a job to periodically drain the queue.\n`pg_cron` must be present in `shared_preload_libraries` **before**\ndeployment or the bootstrap will fail. Add it via `props.parameters`:\n\n```\nparameters: { shared_preload_libraries: \"pg_cron\" }\n```",
             "stability": "experimental",
-            "summary": "Lambda function Custom Resource properties."
+            "summary": "Additional properties passed to the bootstrapper Lambda as CloudFormation Custom Resource properties."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 431
+            "line": 464
           },
           "name": "customResourceProperties",
           "optional": true,
@@ -5286,7 +5287,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 459
+            "line": 492
           },
           "name": "forceBootstrap",
           "optional": true,
@@ -5304,7 +5305,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 423
+            "line": 424
           },
           "name": "maintenanceWindow",
           "optional": true,
@@ -5323,7 +5324,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 408
+            "line": 409
           },
           "name": "pgbouncerAmiSsmParameter",
           "optional": true,
@@ -5341,7 +5342,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 388
+            "line": 389
           },
           "name": "pgbouncerInstanceProps",
           "optional": true,
@@ -5359,7 +5360,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 353
+            "line": 354
           },
           "name": "pgstacDbName",
           "optional": true,
@@ -5377,7 +5378,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 374
+            "line": 375
           },
           "name": "pgstacUsername",
           "optional": true,
@@ -5395,7 +5396,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 360
+            "line": 361
           },
           "name": "pgstacVersion",
           "optional": true,
@@ -5413,7 +5414,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 367
+            "line": 368
           },
           "name": "secretsPrefix",
           "optional": true,
@@ -7999,6 +8000,6 @@
       "symbolId": "lib/titiler-pgstac-api/index:TitilerPgstacApiLambdaRuntimeProps"
     }
   },
-  "version": "11.3.1",
-  "fingerprint": "te+s2VXr/r9dyNnAEBlk66pcgb7rMGXcqJypR7IwGVc="
+  "version": "11.4.0",
+  "fingerprint": "XAgc9qDybKGNxcDQS+Srt8N+/5AJbD+nSQHWHr6Q12o="
 }

package/lib/bastion-host/index.js

@@ -158,5 +158,5 @@ class BastionHost extends constructs_1.Construct {
 }
 exports.BastionHost = BastionHost;
 _a = JSII_RTTI_SYMBOL_1;
-BastionHost[_a] = { fqn: "eoapi-cdk.BastionHost", version: "11.3.1" };
+BastionHost[_a] = { fqn: "eoapi-cdk.BastionHost", version: "11.4.0" };
 //# sourceMappingURL=data:application/json;base64,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

package/lib/database/bootstrapper_runtime/handler.py

@@ -17,6 +17,9 @@ from pypgstac.migrate import Migrate
 logger = logging.getLogger("eoapi-bootstrap")
 
 
+DEFAULT_PG_CRON_SCHEDULE = "*/10 * * * *"  # every 10 minutes
+
+
 def send(
     event,
     context,
@@ -143,30 +146,151 @@ def register_extensions(cursor) -> None:
 ###############################################################################
 # PgSTAC Customization
 ###############################################################################
-def customization(cursor, params) -> None:
+def _is_enabled(params: dict, key: str) -> bool:
+    """Parse a string boolean CloudFormation custom resource property.
+
+    CloudFormation custom resource properties are always strings, so boolean
+    flags are passed as ``"TRUE"`` or ``"FALSE"``. Callers must check that the
+    key is present before calling this function; absent keys are a no-op and
+    should not reach this function.
+
+    Args:
+        params: ResourceProperties dict from the CloudFormation event.
+        key: Property name to look up.
+
+    Returns:
+        True if the property value is ``"TRUE"`` (case-insensitive).
     """
-    CUSTOMIZED YOUR PGSTAC DATABASE
+    return str(params.get(key, "FALSE")).upper() == "TRUE"
+
+
+def _apply_pgstac_setting(cursor, name: str, enabled: bool) -> None:
+    """Upsert or delete a row in the pgstac_settings table.
+
+    When ``enabled`` is True, upserts ``'on'``. When False, deletes the row so
+    pgstac reverts to its built-in default. When the setting is absent from
+    params entirely, this function should not be called — absent means no-op.
+
+    Args:
+        cursor: Database cursor with ``search_path`` including the pgstac schema.
+        name: Setting name (primary key in pgstac_settings).
+        enabled: Whether to enable or disable the setting.
+    """
+    if enabled:
+        cursor.execute(
+            sql.SQL(
+                "INSERT INTO pgstac_settings (name, value) VALUES ({name}, 'on') "
+                "ON CONFLICT ON CONSTRAINT pgstac_settings_pkey DO UPDATE SET value = excluded.value;"
+            ).format(name=sql.Literal(name))
+        )
+    else:
+        cursor.execute(
+            sql.SQL("DELETE FROM pgstac_settings WHERE name = {name};").format(
+                name=sql.Literal(name)
+            )
+        )
+
+
+def customization(cursor, params) -> None:
+    """Apply pgSTAC database customizations based on the provided params.
+
+    Each setting follows honest boolean semantics:
+
+    - ``"TRUE"``  → enable (upsert ``'on'`` in pgstac_settings)
+    - ``"FALSE"`` → disable (delete from pgstac_settings, reverting to pgstac default)
+    - absent      → no-op (the database is left exactly as-is)
+
+    This means the flags are safe to use as true booleans, and upgrading without
+    changing config never silently alters a manually-managed setting.
 
     ref: https://github.com/stac-utils/pgstac/blob/main/docs/src/pgstac.md
+    """
+    if "context" in params:
+        _apply_pgstac_setting(cursor, "context", _is_enabled(params, "context"))
+
+    if "mosaic_index" in params:
+        if _is_enabled(params, "mosaic_index"):
+            cursor.execute(
+                sql.SQL(
+                    "CREATE INDEX IF NOT EXISTS searches_mosaic ON searches ((true)) "
+                    "WHERE metadata->>'type'='mosaic';"
+                )
+            )
+        else:
+            cursor.execute(sql.SQL("DROP INDEX IF EXISTS searches_mosaic;"))
+
+    # Enable automatic spatial/temporal extent updates on item ingest.
+    # For large ingests, combine with use_queue=TRUE to reduce transaction overhead.
+    if "update_collection_extent" in params:
+        _apply_pgstac_setting(
+            cursor,
+            "update_collection_extent",
+            _is_enabled(params, "update_collection_extent"),
+        )
+
+    # Enable asynchronous queue processing for extent updates.
+    # Requires pg_cron to periodically invoke CALL pgstac.run_queued_queries().
+    if "use_queue" in params:
+        _apply_pgstac_setting(cursor, "use_queue", _is_enabled(params, "use_queue"))
+
+
+def unregister_pg_cron(cursor) -> None:
+    """Remove the run_queued_queries pg_cron job if it exists.
+
+    Safe to call even if pg_cron is not installed or the job does not exist.
 
+    Args:
+        cursor: Database cursor connected to the ``postgres`` database as a superuser.
     """
-    if str(params.get("context", "FALSE")).upper() == "TRUE":
-        # Add CONTEXT=ON
-        pgstac_settings = """
-        INSERT INTO pgstac_settings (name, value)
-        VALUES ('context', 'on')
-        ON CONFLICT ON CONSTRAINT pgstac_settings_pkey DO UPDATE SET value = excluded.value;"""
-        cursor.execute(sql.SQL(pgstac_settings))
-
-    if str(params.get("mosaic_index", "TRUE")).upper() == "TRUE":
-        # Create index of searches with `mosaic`` type
+    cursor.execute(sql.SQL("SELECT 1 FROM pg_extension WHERE extname = 'pg_cron';"))
+    if cursor.fetchone():
         cursor.execute(
             sql.SQL(
-                "CREATE INDEX IF NOT EXISTS searches_mosaic ON searches ((true)) WHERE metadata->>'type'='mosaic';"
+                "SELECT cron.unschedule(jobid) FROM cron.job "
+                "WHERE jobname = 'pgstac-run-queued-queries';"
             )
         )
 
 
+def register_pg_cron(cursor, db_name: str, schedule: str) -> None:
+    """Install the pg_cron extension and schedule run_queued_queries.
+
+    pg_cron can only be installed in the ``postgres`` database, so the cursor
+    must be connected there as a superuser. ``cron.schedule_in_database`` is
+    used to run the job against the pgSTAC database. The job is upserted by
+    name so repeated bootstrap runs are safe.
+
+    pg_cron must be listed in ``shared_preload_libraries`` in the RDS parameter
+    group before this will succeed.
+
+    Side effect: sets ``search_path = pgstac, public`` as the default for all
+    connections to ``db_name`` via ``ALTER DATABASE``. This is required because
+    pg_cron background worker sessions start with no ``search_path``, and
+    prepending ``SET search_path`` to the cron command would open a transaction
+    that prevents ``run_queued_queries()`` from issuing its own ``COMMIT``.
+
+    Args:
+        cursor: Database cursor connected to the ``postgres`` database as a superuser.
+        db_name: Name of the pgSTAC database where run_queued_queries will run.
+        schedule: Cron schedule expression (e.g. ``"*/5 * * * *"``).
+    """
+    cursor.execute(sql.SQL("CREATE EXTENSION IF NOT EXISTS pg_cron;"))
+    cursor.execute(
+        sql.SQL("ALTER DATABASE {db_name} SET search_path TO pgstac, public;").format(
+            db_name=sql.Identifier(db_name),
+        )
+    )
+    cursor.execute(
+        sql.SQL(
+            "SELECT cron.schedule_in_database({job_name}, {schedule}, 'CALL pgstac.run_queued_queries();', {db_name});"
+        ).format(
+            job_name=sql.Literal("pgstac-run-queued-queries"),
+            schedule=sql.Literal(schedule),
+            db_name=sql.Literal(db_name),
+        )
+    )
+
+
 def handler(event, context):
     """Lambda Handler."""
     print(f"Handling {event}")
@@ -213,6 +337,26 @@ def handler(event, context):
                     password=eoapi_params["password"],
                 )
 
+                if "use_queue" in params:
+                    if _is_enabled(params, "use_queue"):
+                        schedule = params.get(
+                            "pg_cron_schedule", DEFAULT_PG_CRON_SCHEDULE
+                        )
+                        print(
+                            f"Scheduling pg_cron job 'pgstac-run-queued-queries' "
+                            f"with schedule '{schedule}'..."
+                        )
+                        register_pg_cron(
+                            cursor=cur,
+                            db_name=eoapi_params["dbname"],
+                            schedule=schedule,
+                        )
+                    else:
+                        print(
+                            "Removing pg_cron job 'pgstac-run-queued-queries' if present..."
+                        )
+                        unregister_pg_cron(cursor=cur)
+
         # Install postgis and pgstac on the eoapi database with
         # superuser permissions
         print(f"Connecting to eoAPI '{eoapi_params['dbname']}' database...")

package/lib/database/index.d.ts

@@ -127,10 +127,42 @@ export interface PgStacDatabaseProps extends rds.DatabaseInstanceProps {
      */
     readonly maintenanceWindow?: ssm.CfnMaintenanceWindow;
     /**
-     * Lambda function Custom Resource properties. A custom resource property is going to be created
-     * to trigger the boostrapping lambda function. This parameter allows the user to specify additional properties
-     * on top of the defaults ones.
-     *
+     * Additional properties passed to the bootstrapper Lambda as CloudFormation
+     * Custom Resource properties. These are merged with the defaults and forwarded
+     * to the handler as `event["ResourceProperties"]`.
+     *
+     * ## Supported pgSTAC settings
+     *
+     * Each setting follows honest boolean semantics: `"TRUE"` enables, `"FALSE"`
+     * disables (reverts to pgSTAC's built-in default), and omitting the key
+     * entirely is a no-op — the database is left as-is. This means upgrading
+     * without changing config never silently alters a manually-managed setting.
+     *
+     * | Property                   | Default  | Description |
+     * |----------------------------|----------|-------------|
+     * | `context`                  | (unset)  | Enable `CONTEXT=ON` in pgSTAC (item count on search). |
+     * | `mosaic_index`             | `"TRUE"` | Create a partial index on searches of type `mosaic`. Set `"FALSE"` to drop it. |
+     * | `update_collection_extent` | (unset)  | Automatically update collection spatial/temporal extents on item ingest. Combine with `use_queue` to reduce per-transaction overhead. |
+     * | `use_queue`                | (unset)  | Process extent updates asynchronously via an internal queue. `"TRUE"` installs pg_cron and schedules the drain job; `"FALSE"` removes the job. Requires `pg_cron` (see below). |
+     * | `pg_cron_schedule`         | `"*\/10 * * * *"` | Cron schedule for `CALL run_queued_queries()`. Only used when `use_queue` is `"TRUE"`. |
+     *
+     * ## pg_cron requirement
+     *
+     * When `use_queue` is `"TRUE"`, the bootstrapper installs the `pg_cron`
+     * extension and schedules a job to periodically drain the queue.
+     * `pg_cron` must be present in `shared_preload_libraries` **before**
+     * deployment or the bootstrap will fail. Add it via `props.parameters`:
+     *
+     * ```
+     * parameters: { shared_preload_libraries: "pg_cron" }
+     * ```
+     *
+     * @example
+     * customResourceProperties: {
+     *   update_collection_extent: "TRUE",
+     *   use_queue: "TRUE",
+     *   pg_cron_schedule: "*\/10 * * * *",
+     * }
      */
     readonly customResourceProperties?: {
         [key: string]: any;