eoapi-cdk 8.0.0 → 8.0.2

package/.jsii

@@ -3932,7 +3932,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/database/index.ts",
-        "line": 280
+        "line": 279
       },
       "name": "DatabaseParameters",
       "properties": [
@@ -3945,7 +3945,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 296
+            "line": 295
           },
           "name": "effectiveCacheSize",
           "type": {
@@ -3961,7 +3961,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 306
+            "line": 305
           },
           "name": "maintenanceWorkMem",
           "type": {
@@ -3977,7 +3977,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 284
+            "line": 283
           },
           "name": "maxConnections",
           "type": {
@@ -3993,7 +3993,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 311
+            "line": 310
           },
           "name": "maxLocksPerTransaction",
           "type": {
@@ -4009,7 +4009,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 326
+            "line": 325
           },
           "name": "randomPageCost",
           "type": {
@@ -4025,7 +4025,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 321
+            "line": 320
           },
           "name": "seqPageCost",
           "type": {
@@ -4042,7 +4042,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 291
+            "line": 290
           },
           "name": "sharedBuffers",
           "type": {
@@ -4058,7 +4058,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 316
+            "line": 315
           },
           "name": "tempBuffers",
           "type": {
@@ -4074,7 +4074,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 301
+            "line": 300
           },
           "name": "workMem",
           "type": {
@@ -4097,7 +4097,7 @@
         },
         "locationInModule": {
           "filename": "lib/stac-api/index.ts",
-          "line": 21
+          "line": 47
         },
         "parameters": [
           {
@@ -4123,7 +4123,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/stac-api/index.ts",
-        "line": 17
+        "line": 43
       },
       "name": "PgStacApiLambda",
       "properties": [
@@ -4134,7 +4134,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/stac-api/index.ts",
-            "line": 18
+            "line": 44
           },
           "name": "url",
           "type": {
@@ -4147,7 +4147,7 @@
           },
           "locationInModule": {
             "filename": "lib/stac-api/index.ts",
-            "line": 19
+            "line": 45
           },
           "name": "stacApiLambdaFunction",
           "type": {
@@ -4167,7 +4167,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/stac-api/index.ts",
-        "line": 76
+        "line": 138
       },
       "name": "PgStacApiLambdaProps",
       "properties": [
@@ -4180,7 +4180,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/stac-api/index.ts",
-            "line": 85
+            "line": 147
           },
           "name": "db",
           "type": {
@@ -4205,7 +4205,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/stac-api/index.ts",
-            "line": 95
+            "line": 157
           },
           "name": "dbSecret",
           "type": {
@@ -4221,7 +4221,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/stac-api/index.ts",
-            "line": 100
+            "line": 162
           },
           "name": "apiEnv",
           "optional": true,
@@ -4234,6 +4234,29 @@
             }
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- query, sort, fields, filter, free_text, pagniation, collection_search",
+            "stability": "experimental",
+            "summary": "List of STAC API extensions to enable."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/stac-api/index.ts",
+            "line": 174
+          },
+          "name": "enabledExtensions",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -4244,7 +4267,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/stac-api/index.ts",
-            "line": 112
+            "line": 181
           },
           "name": "lambdaFunctionOptions",
           "optional": true,
@@ -4261,7 +4284,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/stac-api/index.ts",
-            "line": 105
+            "line": 167
           },
           "name": "stacApiDomainName",
           "optional": true,
@@ -4278,7 +4301,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/stac-api/index.ts",
-            "line": 90
+            "line": 152
           },
           "name": "subnetSelection",
           "optional": true,
@@ -4295,7 +4318,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/stac-api/index.ts",
-            "line": 80
+            "line": 142
           },
           "name": "vpc",
           "optional": true,
@@ -4321,7 +4344,7 @@
         },
         "locationInModule": {
           "filename": "lib/database/index.ts",
-          "line": 44
+          "line": 43
         },
         "parameters": [
           {
@@ -4347,7 +4370,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/database/index.ts",
-        "line": 35
+        "line": 34
       },
       "methods": [
         {
@@ -4356,7 +4379,7 @@
           },
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 186
+            "line": 185
           },
           "name": "getParameters",
           "parameters": [
@@ -4395,7 +4418,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 40
+            "line": 39
           },
           "name": "connectionTarget",
           "type": {
@@ -4418,7 +4441,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 42
+            "line": 41
           },
           "name": "secretBootstrapper",
           "optional": true,
@@ -4433,7 +4456,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 41
+            "line": 40
           },
           "name": "securityGroup",
           "optional": true,
@@ -4447,7 +4470,7 @@
           },
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 36
+            "line": 35
           },
           "name": "db",
           "type": {
@@ -4460,7 +4483,7 @@
           },
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 37
+            "line": 36
           },
           "name": "pgstacSecret",
           "type": {
@@ -4483,7 +4506,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/database/index.ts",
-        "line": 226
+        "line": 225
       },
       "name": "PgStacDatabaseProps",
       "properties": [
@@ -4497,7 +4520,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 260
+            "line": 259
           },
           "name": "addPgbouncer",
           "optional": true,
@@ -4515,7 +4538,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 277
+            "line": 276
           },
           "name": "bootstrapperLambdaFunctionOptions",
           "optional": true,
@@ -4533,7 +4556,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 268
+            "line": 267
           },
           "name": "customResourceProperties",
           "optional": true,
@@ -4556,7 +4579,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 232
+            "line": 231
           },
           "name": "pgstacDbName",
           "optional": true,
@@ -4574,7 +4597,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 253
+            "line": 252
           },
           "name": "pgstacUsername",
           "optional": true,
@@ -4592,7 +4615,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 239
+            "line": 238
           },
           "name": "pgstacVersion",
           "optional": true,
@@ -4610,7 +4633,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/database/index.ts",
-            "line": 246
+            "line": 245
           },
           "name": "secretsPrefix",
           "optional": true,
@@ -4917,7 +4940,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/ingestor-api/index.ts",
-        "line": 265
+        "line": 273
       },
       "name": "StacIngestorProps",
       "properties": [
@@ -4930,7 +4953,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 269
+            "line": 277
           },
           "name": "dataAccessRole",
           "type": {
@@ -4946,7 +4969,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 284
+            "line": 292
           },
           "name": "stacDbSecret",
           "type": {
@@ -4962,7 +4985,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 294
+            "line": 302
           },
           "name": "stacDbSecurityGroup",
           "type": {
@@ -4978,7 +5001,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 274
+            "line": 282
           },
           "name": "stacUrl",
           "type": {
@@ -4994,7 +5017,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 279
+            "line": 287
           },
           "name": "stage",
           "type": {
@@ -5010,7 +5033,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 309
+            "line": 317
           },
           "name": "apiEndpointConfiguration",
           "optional": true,
@@ -5027,7 +5050,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 304
+            "line": 312
           },
           "name": "apiEnv",
           "optional": true,
@@ -5050,7 +5073,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 326
+            "line": 334
           },
           "name": "apiLambdaFunctionOptions",
           "optional": true,
@@ -5067,7 +5090,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 314
+            "line": 322
           },
           "name": "apiPolicy",
           "optional": true,
@@ -5084,7 +5107,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 319
+            "line": 327
           },
           "name": "ingestorDomainNameOptions",
           "optional": true,
@@ -5102,7 +5125,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 333
+            "line": 341
           },
           "name": "ingestorLambdaFunctionOptions",
           "optional": true,
@@ -5110,6 +5133,24 @@
             "primitive": "any"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- default settings are defined in the construct",
+            "stability": "experimental",
+            "summary": "pgstac version - must match the version installed on the pgstac database."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "lib/ingestor-api/index.ts",
+            "line": 348
+          },
+          "name": "pgstacVersion",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -5119,7 +5160,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 299
+            "line": 307
           },
           "name": "subnetSelection",
           "optional": true,
@@ -5136,7 +5177,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/ingestor-api/index.ts",
-            "line": 289
+            "line": 297
           },
           "name": "vpc",
           "optional": true,
@@ -5618,6 +5659,6 @@
       "symbolId": "lib/titiler-pgstac-api/index:TitilerPgstacApiLambda"
     }
   },
-  "version": "8.0.0",
-  "fingerprint": "/k8xnh54INJJWLVNyDW3e0dw7v2v/omysQ1NLeey9Ck="
+  "version": "8.0.2",
+  "fingerprint": "BlIi9cM3OjG858To0exIYzoPPxbdVqZryx+/sGygDqY="
 }

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [8.0.2](https://github.com/developmentseed/eoapi-cdk/compare/v8.0.1...v8.0.2) (2025-03-11)
+
+
+### Bug Fixes
+
+* refactor to keep database pgstac and ingestor pypgstac in sync ([#137](https://github.com/developmentseed/eoapi-cdk/issues/137)) ([cdf1a66](https://github.com/developmentseed/eoapi-cdk/commit/cdf1a6629905384b697ef00c39b1a6b10d15b592))
+
+## [8.0.1](https://github.com/developmentseed/eoapi-cdk/compare/v8.0.0...v8.0.1) (2025-03-11)
+
+
+### Bug Fixes
+
+* disable transaction extensions by default ([#136](https://github.com/developmentseed/eoapi-cdk/issues/136)) ([18822f0](https://github.com/developmentseed/eoapi-cdk/commit/18822f09cb6794020cf348a361939e234db4b834))
+
 # [8.0.0](https://github.com/developmentseed/eoapi-cdk/compare/v7.6.3...v8.0.0) (2025-03-11)
 
 

package/integration_tests/cdk/app.py

@@ -1,13 +1,16 @@
-from aws_cdk import App, RemovalPolicy, Stack, aws_ec2, aws_rds
+from aws_cdk import App, RemovalPolicy, Stack, aws_ec2, aws_iam, aws_rds
 from config import AppConfig, build_app_config
 from constructs import Construct
 from eoapi_cdk import (
     PgStacApiLambda,
     PgStacDatabase,
+    StacIngestor,
     TiPgApiLambda,
     TitilerPgstacApiLambda,
 )
 
+PGSTAC_VERSION = "0.9.5"
+
 
 class VpcStack(Stack):
     def __init__(
@@ -81,7 +84,7 @@ class pgStacInfraStack(Stack):
             instance_type=aws_ec2.InstanceType(app_config.db_instance_type),
             add_pgbouncer=True,
             removal_policy=RemovalPolicy.DESTROY,
-            pgstac_version="0.9.2",
+            pgstac_version=PGSTAC_VERSION,
         )
 
         assert pgstac_db.security_group
@@ -137,6 +140,31 @@ class pgStacInfraStack(Stack):
             },
         )
 
+        s3_read_only_role = aws_iam.Role(
+            self,
+            "S3ReadOnlyRole",
+            assumed_by=aws_iam.ServicePrincipal("lambda.amazonaws.com"),
+            description="Role with read-only access to S3 buckets",
+        )
+
+        s3_read_only_role.add_managed_policy(
+            aws_iam.ManagedPolicy.from_aws_managed_policy_name("AmazonS3ReadOnlyAccess")
+        )
+
+        StacIngestor(
+            self,
+            "ingestor",
+            data_access_role=s3_read_only_role,
+            stac_db_secret=pgstac_db.pgstac_secret,
+            stac_db_security_group=pgstac_db.security_group,
+            stac_url=stac_api.url,
+            stage="test",
+            pgstac_version=PGSTAC_VERSION,
+            api_env={
+                "JWKS_URL": "",  # no authentication!
+            },
+        )
+
 
 app = App()
 

package/lib/bastion-host/index.js

@@ -158,5 +158,5 @@ class BastionHost extends constructs_1.Construct {
 }
 exports.BastionHost = BastionHost;
 _a = JSII_RTTI_SYMBOL_1;
-BastionHost[_a] = { fqn: "eoapi-cdk.BastionHost", version: "8.0.0" };
+BastionHost[_a] = { fqn: "eoapi-cdk.BastionHost", version: "8.0.2" };
 //# sourceMappingURL=data:application/json;base64,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