go-duck-cli 1.3.0 → 1.3.3

package/generators/ai_docs.js

@@ -5,6 +5,9 @@ export const generateAIDocs = async (config, entities, outputDir, enums, openEnt
     const aiDocsDir = path.join(outputDir, 'docs', 'ai');
     await fs.ensureDir(aiDocsDir);
 
+    const apiPrefixRaw = config.server?.rest?.['api-path-prefix'] || '/api';
+    const apiPrefix = apiPrefixRaw.endsWith('/') ? apiPrefixRaw.slice(0, -1) : apiPrefixRaw;
+
     // 1. ARCHITECTURE.md
     const appName = config.name || 'go-duck-app';
     const hasMongo = config.datasource?.mongodb?.enabled;
@@ -32,7 +35,7 @@ export const generateAIDocs = async (config, entities, outputDir, enums, openEnt
     archContent += `- **Active**: ${storageActive ? 'Yes' : 'No'}\n`;
     if (storageActive) {
         archContent += `- **Enabled Nodes**: ${Object.keys(config.storage).filter(k => config.storage[k]?.enabled).join(', ')}\n`;
-        archContent += `- **Endpoints**: \n  - Upload: \`POST /api/storage/upload?provider=\`\n  - Exact Retrieve: \`GET /api/storage/download/*key?provider=\`\n  - Cross-Scan Locate: \`GET /api/storage/scan/*key\`\n`;
+        archContent += `- **Endpoints**: \n  - Upload: \`POST ${apiPrefix}/storage/upload?provider=\`\n  - Exact Retrieve: \`GET ${apiPrefix}/storage/download/*key?provider=\`\n  - Cross-Scan Locate: \`GET ${apiPrefix}/storage/scan/*key\`\n`;
     }
     const bootstrapActive = config.storage?.bootstrap?.enabled;
     if (bootstrapActive) {
@@ -43,29 +46,35 @@ export const generateAIDocs = async (config, entities, outputDir, enums, openEnt
     archContent += `- **Elasticsearch Sync**: ${config.search?.elasticsearch?.enabled ? 'Enabled (via @Searchable)' : 'Disabled'}\n`;
     archContent += `- **OpenTelemetry**: ${config.telemetry?.otel?.enabled ? 'Enabled' : 'Disabled'}\n`;
 
+    archContent += `\n## Deployment (Kubernetes)\n`;
+    archContent += `- **Network Isolation**: Strict per-service isolated namespaces (e.g., \`[shortName]-[service]-k8s\`).\n`;
+    archContent += `- **Internal Routing**: Services communicate via explicit Fully Qualified Domain Names (FQDN).\n`;
+    archContent += `- **External Exposure**: Infrastructure services are exposed via explicit NodePort mappings (Range: 30000+).\n`;
+    archContent += `- **Self-Contained Manifests**: All manifests inject their own \`kind: Namespace\` block for auto-provisioning.\n`;
+
     await fs.writeFile(path.join(aiDocsDir, 'ARCHITECTURE.md'), archContent);
 
     // 2. ENDPOINTS.md
     let endpointsContent = `# REST & gRPC API Surface\n\n`;
-    endpointsContent += `## Base Path: \`/api\`\n\n`;
+    endpointsContent += `## Base Path: \`${apiPrefix}\`\n\n`;
     endpointsContent += `### Standard Entity Endpoints\n`;
     for (const entity of entities) {
         const routeName = entity.name.toLowerCase() + 's';
         endpointsContent += `\n#### ${entity.name}\n`;
-        endpointsContent += `- \`GET /api/${routeName}\` (Pagination & dynamic sorting, e.g. \`?page=1&size=10&eager=true&sort=id,asc\`)\n`;
-        endpointsContent += `- \`GET /api/${routeName}/:id\`\n`;
-        endpointsContent += `- \`POST /api/${routeName}\`\n`;
-        endpointsContent += `- \`PUT /api/${routeName}/:id\`\n`;
-        endpointsContent += `- \`DELETE /api/${routeName}/:id\`\n`;
-        endpointsContent += `- \`POST /api/${routeName}/bulk\` (Bulk Create/Update)\n`;
+        endpointsContent += `- \`GET ${apiPrefix}/${routeName}\` (Pagination & dynamic sorting, e.g. \`?page=1&size=10&eager=true&sort=id,asc\`)\n`;
+        endpointsContent += `- \`GET ${apiPrefix}/${routeName}/:id\`\n`;
+        endpointsContent += `- \`POST ${apiPrefix}/${routeName}\`\n`;
+        endpointsContent += `- \`PUT ${apiPrefix}/${routeName}/:id\`\n`;
+        endpointsContent += `- \`DELETE ${apiPrefix}/${routeName}/:id\`\n`;
+        endpointsContent += `- \`POST ${apiPrefix}/${routeName}/bulk\` (Bulk Create/Update)\n`;
         if (entity.isSearchable) {
-            endpointsContent += `- \`GET /api/search/${routeName}?q={query}\` (Elasticsearch)\n`;
+            endpointsContent += `- \`GET ${apiPrefix}/search/${routeName}?q={query}\` (Elasticsearch)\n`;
         }
     }
 
     endpointsContent += `\n## Infrastructure & Management APIs (SuperAdmin Protected)\n`;
-    endpointsContent += `- \`GET /api/admin/audit\` (Fetches Global Delta logs from the Centralized Audit Engine)\n`;
-    endpointsContent += `- \`POST /api/admin/metering/limit\` (Set SaaS Quota limits)\n`;
+    endpointsContent += `- \`GET ${apiPrefix}/admin/audit\` (Fetches Global Delta logs from the Centralized Audit Engine)\n`;
+    endpointsContent += `- \`POST ${apiPrefix}/admin/metering/limit\` (Set SaaS Quota limits)\n`;
     endpointsContent += `- \`POST /management/tenant/assign\` (Dynamically initialize new Tenant DBs)\n`;
 
     endpointsContent += `\n## Open APIs (No JWT required)\n`;

package/generators/devops.js

@@ -14,6 +14,8 @@ export const generateDeploymentArtifacts = async (config, projectRootDir) => {
     await fs.ensureDir(githubDir);
 
     const appName = config.name || 'go-duck';
+    const parts = appName.split(/[-_]/);
+    const shortName = (parts.length > 1 ? parts.map(w => w[0]).join('') : appName).substring(0, 10).toLowerCase() || 'goduck';
     const appPort = config.server?.port || 8080;
     const keycloakHost = config.security?.['keycloak-host'] || 'http://localhost:8180';
     const keycloakPort = keycloakHost.includes(':') ? keycloakHost.split(':').pop() : '8080';
@@ -117,6 +119,7 @@ services:
   mosquitto:
     image: eclipse-mosquitto:2.0.18
     container_name: ${appName}-mqtt
+    command: ["sh", "-c", "mosquitto_passwd -c -b /tmp/mosquitto_passwd ${config.messaging?.mqtt?.username || 'dev_user'} ${config.messaging?.mqtt?.password || 'dev_password'} && chown 1883:1883 /tmp/mosquitto_passwd && exec /usr/sbin/mosquitto -c /mosquitto/config/mosquitto.conf"]
     ports:
       - "${mqttPort}:1883"
       - "9001:9001"
@@ -207,10 +210,26 @@ services:
       - GO_DUCK_DATASOURCE_PASSWORD=${config.datasource?.password || 'password'}
       - GO_DUCK_DATASOURCE_DATABASE=${config.datasource?.database || 'go_duck_master'}
       - GO_DUCK_DATASOURCE_PORT=5432
+      - GO_DUCK_DATASOURCE_MONGODB_ENABLED=${config.datasource?.mongodb?.enabled ? 'true' : 'false'}
+      - GO_DUCK_DATASOURCE_MONGODB_URI=mongodb://mongodb:27017
+      - GO_DUCK_DATASOURCE_MONGODB_DATABASE=${config.datasource?.mongodb?.database || 'goduck_document_store'}
       - GO_DUCK_CACHE_REDIS_HOST=redis:6379
+      - GO_DUCK_CACHE_REDIS_PASSWORD=${config.cache?.redis?.password || ''}
       - GO_DUCK_MESSAGING_MQTT_BROKER=tcp://mosquitto:1883
+      - GO_DUCK_MESSAGING_MQTT_USERNAME=${config.messaging?.mqtt?.username || 'dev_user'}
+      - GO_DUCK_MESSAGING_MQTT_PASSWORD=${config.messaging?.mqtt?.password || 'dev_password'}
       - GO_DUCK_TELEMETRY_OTEL_ENDPOINT=otel-collector:4317
       - GO_DUCK_ELASTICSEARCH_ADDRESSES=http://elasticsearch:9200
+      - GO_DUCK_ELASTICSEARCH_USERNAME=${config.elasticsearch?.username || 'elastic'}
+      - GO_DUCK_ELASTICSEARCH_PASSWORD=${config.elasticsearch?.password || 'changeme'}
+      - GO_DUCK_SECURITY_KEYCLOAK_HOST=http://keycloak:8080
+      - GO_DUCK_SECURITY_KEYCLOAK_REALM=${config.security?.['keycloak-realm'] || 'go-duck-realm'}
+      - GO_DUCK_SECURITY_KEYCLOAK_APP_CLIENT_ID=${config.security?.['keycloak-app-client-id'] || 'go-duck-app'}
+      - GO_DUCK_SECURITY_KEYCLOAK_SERVICE_CLIENT_ID=${config.security?.['keycloak-service-client-id'] || 'go-duck-service'}
+      - GO_DUCK_SECURITY_KEYCLOAK_SERVICE_SECRET=${config.security?.['keycloak-service-secret'] || 'service-secret-123'}
+      - GO_DUCK_STORAGE_MINIO_ENDPOINT=http://minio:9000
+      - GO_DUCK_STORAGE_MINIO_ACCESS_KEY=${config.storage?.minio?.['access-key'] || 'minioadmin'}
+      - GO_DUCK_STORAGE_MINIO_SECRET_KEY=${config.storage?.minio?.['secret-key'] || 'minioadmin'}
     restart: always
     networks:
       - go-duck-net
@@ -241,10 +260,26 @@ services:
       - GO_DUCK_DATASOURCE_PASSWORD=${config.datasource?.password || 'password'}
       - GO_DUCK_DATASOURCE_DATABASE=${config.datasource?.database || 'go_duck_master'}
       - GO_DUCK_DATASOURCE_PORT=5432
+      - GO_DUCK_DATASOURCE_MONGODB_ENABLED=${config.datasource?.mongodb?.enabled ? 'true' : 'false'}
+      - GO_DUCK_DATASOURCE_MONGODB_URI=mongodb://mongodb:27017
+      - GO_DUCK_DATASOURCE_MONGODB_DATABASE=${config.datasource?.mongodb?.database || 'goduck_document_store'}
       - GO_DUCK_CACHE_REDIS_HOST=redis:6379
+      - GO_DUCK_CACHE_REDIS_PASSWORD=${config.cache?.redis?.password || ''}
       - GO_DUCK_MESSAGING_MQTT_BROKER=tcp://mosquitto:1883
+      - GO_DUCK_MESSAGING_MQTT_USERNAME=${config.messaging?.mqtt?.username || 'dev_user'}
+      - GO_DUCK_MESSAGING_MQTT_PASSWORD=${config.messaging?.mqtt?.password || 'dev_password'}
       - GO_DUCK_TELEMETRY_OTEL_ENDPOINT=otel-collector:4317
       - GO_DUCK_ELASTICSEARCH_ADDRESSES=http://elasticsearch:9200
+      - GO_DUCK_ELASTICSEARCH_USERNAME=${config.elasticsearch?.username || 'elastic'}
+      - GO_DUCK_ELASTICSEARCH_PASSWORD=${config.elasticsearch?.password || 'changeme'}
+      - GO_DUCK_SECURITY_KEYCLOAK_HOST=http://keycloak:8080
+      - GO_DUCK_SECURITY_KEYCLOAK_REALM=${config.security?.['keycloak-realm'] || 'go-duck-realm'}
+      - GO_DUCK_SECURITY_KEYCLOAK_APP_CLIENT_ID=${config.security?.['keycloak-app-client-id'] || 'go-duck-app'}
+      - GO_DUCK_SECURITY_KEYCLOAK_SERVICE_CLIENT_ID=${config.security?.['keycloak-service-client-id'] || 'go-duck-service'}
+      - GO_DUCK_SECURITY_KEYCLOAK_SERVICE_SECRET=${config.security?.['keycloak-service-secret'] || 'service-secret-123'}
+      - GO_DUCK_STORAGE_MINIO_ENDPOINT=http://minio:9000
+      - GO_DUCK_STORAGE_MINIO_ACCESS_KEY=${config.storage?.minio?.['access-key'] || 'minioadmin'}
+      - GO_DUCK_STORAGE_MINIO_SECRET_KEY=${config.storage?.minio?.['secret-key'] || 'minioadmin'}
     depends_on:
       postgres:
         condition: service_healthy
@@ -269,7 +304,8 @@ networks:
 listener 1883
 listener 9001
 protocol websockets
-allow_anonymous true
+allow_anonymous false
+password_file /tmp/mosquitto_passwd
 `;
 
     // --- 6. GitHub Actions CI/CD ---
@@ -454,7 +490,7 @@ spec:
             - name: GO_DUCK_SERVER_REST_PORT
               value: "${appPort}"
             - name: GO_DUCK_DATASOURCE_HOST
-              value: postgres
+              value: postgres.${shortName}-postgres-k8s.svc.cluster.local
             - name: GO_DUCK_DATASOURCE_USERNAME
               value: "${config.datasource?.username || 'postgres'}"
             - name: GO_DUCK_DATASOURCE_PASSWORD
@@ -463,18 +499,48 @@ spec:
               value: "${config.datasource?.database || 'go_duck_master'}"
             - name: GO_DUCK_DATASOURCE_PORT
               value: "5432"
+            - name: GO_DUCK_DATASOURCE_MONGODB_ENABLED
+              value: "${config.datasource?.mongodb?.enabled ? 'true' : 'false'}"
+            - name: GO_DUCK_DATASOURCE_MONGODB_URI
+              value: mongodb://mongodb.${shortName}-mongodb-k8s.svc.cluster.local:27017
+            - name: GO_DUCK_DATASOURCE_MONGODB_DATABASE
+              value: "${config.datasource?.mongodb?.database || 'goduck_document_store'}"
             - name: GO_DUCK_CACHE_REDIS_HOST
-              value: redis:6379
+              value: redis.${shortName}-redis-k8s.svc.cluster.local:6379
+            - name: GO_DUCK_CACHE_REDIS_PASSWORD
+              value: "${config.cache?.redis?.password || ''}"
             - name: GO_DUCK_MESSAGING_MQTT_BROKER
-              value: tcp://mosquitto:1883
+              value: tcp://mosquitto.${shortName}-mosquitto-k8s.svc.cluster.local:1883
+            - name: GO_DUCK_MESSAGING_MQTT_USERNAME
+              value: "${config.messaging?.mqtt?.username || 'dev_user'}"
+            - name: GO_DUCK_MESSAGING_MQTT_PASSWORD
+              value: "${config.messaging?.mqtt?.password || 'dev_password'}"
             - name: GO_DUCK_MESSAGING_NATS_URL
-              value: nats://nats:4222
+              value: nats://nats.${shortName}-nats-k8s.svc.cluster.local:4222
             - name: GO_DUCK_TELEMETRY_OTEL_ENDPOINT
-              value: otel-collector:4317
+              value: otel-collector.${shortName}-otel-collector-k8s.svc.cluster.local:4317
             - name: GO_DUCK_ELASTICSEARCH_ADDRESSES
-              value: http://elasticsearch:9200
+              value: http://elasticsearch.${shortName}-elasticsearch-k8s.svc.cluster.local:9200
+            - name: GO_DUCK_ELASTICSEARCH_USERNAME
+              value: "${config.elasticsearch?.username || 'elastic'}"
+            - name: GO_DUCK_ELASTICSEARCH_PASSWORD
+              value: "${config.elasticsearch?.password || 'changeme'}"
             - name: GO_DUCK_SECURITY_KEYCLOAK_HOST
-              value: http://keycloak:8080
+              value: http://keycloak.${shortName}-keycloak-k8s.svc.cluster.local:8080
+            - name: GO_DUCK_SECURITY_KEYCLOAK_REALM
+              value: "${config.security?.['keycloak-realm'] || 'go-duck-realm'}"
+            - name: GO_DUCK_SECURITY_KEYCLOAK_APP_CLIENT_ID
+              value: "${config.security?.['keycloak-app-client-id'] || 'go-duck-app'}"
+            - name: GO_DUCK_SECURITY_KEYCLOAK_SERVICE_CLIENT_ID
+              value: "${config.security?.['keycloak-service-client-id'] || 'go-duck-service'}"
+            - name: GO_DUCK_SECURITY_KEYCLOAK_SERVICE_SECRET
+              value: "${config.security?.['keycloak-service-secret'] || 'service-secret-123'}"
+            - name: GO_DUCK_STORAGE_MINIO_ENDPOINT
+              value: "http://minio.${shortName}-minio-k8s.svc.cluster.local:9000"
+            - name: GO_DUCK_STORAGE_MINIO_ACCESS_KEY
+              value: "${config.storage?.minio?.['access-key'] || 'minioadmin'}"
+            - name: GO_DUCK_STORAGE_MINIO_SECRET_KEY
+              value: "${config.storage?.minio?.['secret-key'] || 'minioadmin'}"
           ports:
             - name: http
               containerPort: ${appPort}
@@ -486,13 +552,16 @@ kind: Service
 metadata:
   name: ${appName}
 spec:
+  type: NodePort
   ports:
     - name: http
       port: ${appPort}
       targetPort: http
+      nodePort: 30080
     - name: grpc
       port: 9000
       targetPort: grpc
+      nodePort: 30090
   selector:
     app: ${appName}
 `;
@@ -549,8 +618,10 @@ kind: Service
 metadata:
   name: postgres
 spec:
+  type: NodePort
   ports:
     - port: 5432
+      nodePort: 30432
   selector:
     app: postgres
 `;
@@ -582,8 +653,10 @@ kind: Service
 metadata:
   name: redis
 spec:
+  type: NodePort
   ports:
     - port: 6379
+      nodePort: 30379
   selector:
     app: redis
 `;
@@ -615,8 +688,10 @@ kind: Service
 metadata:
   name: nats
 spec:
+  type: NodePort
   ports:
     - port: 4222
+      nodePort: 30222
   selector:
     app: nats
 `;
@@ -630,7 +705,8 @@ data:
     listener 1883
     listener 9001
     protocol websockets
-    allow_anonymous true
+    allow_anonymous false
+    password_file /tmp/mosquitto_passwd
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -651,6 +727,7 @@ spec:
       containers:
         - name: mosquitto
           image: eclipse-mosquitto:2.0.18
+          command: ["sh", "-c", "mosquitto_passwd -c -b /tmp/mosquitto_passwd ${config.messaging?.mqtt?.username || 'dev_user'} ${config.messaging?.mqtt?.password || 'dev_password'} && chown 1883:1883 /tmp/mosquitto_passwd && exec /usr/sbin/mosquitto -c /mosquitto/config/mosquitto.conf"]
           ports:
             - containerPort: 1883
             - containerPort: 9001
@@ -668,11 +745,14 @@ kind: Service
 metadata:
   name: mosquitto
 spec:
+  type: NodePort
   ports:
     - name: mqtt
       port: 1883
+      nodePort: 31883
     - name: ws
       port: 9001
+      nodePort: 30001
   selector:
     app: mosquitto
 `;
@@ -711,8 +791,10 @@ kind: Service
 metadata:
   name: elasticsearch
 spec:
+  type: NodePort
   ports:
     - port: 9200
+      nodePort: 30200
   selector:
     app: elasticsearch
 `;
@@ -748,11 +830,14 @@ kind: Service
 metadata:
   name: jaeger
 spec:
+  type: NodePort
   ports:
     - name: ui
       port: 16686
+      nodePort: 30686
     - name: otlp-grpc
       port: 4317
+      nodePort: 30317
   selector:
     app: jaeger
 `;
@@ -824,11 +909,14 @@ kind: Service
 metadata:
   name: otel-collector
 spec:
+  type: NodePort
   ports:
     - name: otlp-grpc
       port: 4317
+      nodePort: 30317
     - name: otlp-http
       port: 4318
+      nodePort: 30318
   selector:
     app: otel-collector
 `;
@@ -890,8 +978,10 @@ kind: Service
 metadata:
   name: keycloak
 spec:
+  type: NodePort
   ports:
     - port: 8080
+      nodePort: 30880
   selector:
     app: keycloak
 `;
@@ -909,17 +999,33 @@ spec:
     await fs.writeFile(path.join(devopsDir, 'app.yml'), appYaml);
     await fs.writeFile(path.join(devopsDir, 'docker-compose.yml'), dockerCompose);
     await fs.writeFile(path.join(k8sDir, 'mosquitto.conf'), mosquittoConf);
+    // Namespace calculation: unique namespace per service
+    const applyNs = (yamlString, serviceName) => {
+        const nsName = `${shortName}-${serviceName}-k8s`;
+        const nsBlock = `apiVersion: v1\nkind: Namespace\nmetadata:\n  name: ${nsName}\n---\n`;
+        return nsBlock + yamlString.replace(/^metadata:$/gm, `metadata:\n  namespace: ${nsName}`);
+    };
+
+    const servicesList = ['app', 'postgres', 'redis', 'nats', 'mosquitto', 'elasticsearch', 'jaeger', 'otel-collector', 'keycloak'];
+    if (config.datasource?.mongodb?.enabled) servicesList.push('mongodb');
     
+    // We conditionally add minio if storage is enabled (or any blob provider), but for safety we'll just generate its namespace always.
+    servicesList.push('minio');
+
+    const k8sNamespaceYaml = servicesList.map(svc => `apiVersion: v1\nkind: Namespace\nmetadata:\n  name: ${shortName}-${svc}-k8s`).join('\n---\n');
+
+    await fs.writeFile(path.join(k8sDir, 'namespace.yaml'), k8sNamespaceYaml);
+
     // Write Kubernetes manifest assets
-    await fs.writeFile(path.join(k8sDir, 'app.yaml'), k8sAppYaml);
-    await fs.writeFile(path.join(k8sDir, 'postgres.yaml'), k8sPostgresYaml);
-    await fs.writeFile(path.join(k8sDir, 'redis.yaml'), k8sRedisYaml);
-    await fs.writeFile(path.join(k8sDir, 'nats.yaml'), k8sNatsYaml);
-    await fs.writeFile(path.join(k8sDir, 'mosquitto.yaml'), k8sMosquittoYaml);
-    await fs.writeFile(path.join(k8sDir, 'elasticsearch.yaml'), k8sElasticsearchYaml);
-    await fs.writeFile(path.join(k8sDir, 'jaeger.yaml'), k8sJaegerYaml);
-    await fs.writeFile(path.join(k8sDir, 'otel-collector-k8s.yaml'), k8sOtelCollectorYaml);
-    await fs.writeFile(path.join(k8sDir, 'keycloak.yaml'), k8sKeycloakYaml);
+    await fs.writeFile(path.join(k8sDir, 'app.yaml'), applyNs(k8sAppYaml, 'app'));
+    await fs.writeFile(path.join(k8sDir, 'postgres.yaml'), applyNs(k8sPostgresYaml, 'postgres'));
+    await fs.writeFile(path.join(k8sDir, 'redis.yaml'), applyNs(k8sRedisYaml, 'redis'));
+    await fs.writeFile(path.join(k8sDir, 'nats.yaml'), applyNs(k8sNatsYaml, 'nats'));
+    await fs.writeFile(path.join(k8sDir, 'mosquitto.yaml'), applyNs(k8sMosquittoYaml, 'mosquitto'));
+    await fs.writeFile(path.join(k8sDir, 'elasticsearch.yaml'), applyNs(k8sElasticsearchYaml, 'elasticsearch'));
+    await fs.writeFile(path.join(k8sDir, 'jaeger.yaml'), applyNs(k8sJaegerYaml, 'jaeger'));
+    await fs.writeFile(path.join(k8sDir, 'otel-collector-k8s.yaml'), applyNs(k8sOtelCollectorYaml, 'otel-collector'));
+    await fs.writeFile(path.join(k8sDir, 'keycloak.yaml'), applyNs(k8sKeycloakYaml, 'keycloak'));
 
     // Additional optional services manifests
     const k8sMongoYaml = `apiVersion: apps/v1
@@ -949,8 +1055,10 @@ kind: Service
 metadata:
   name: mongodb
 spec:
+  type: NodePort
   ports:
     - port: 27017
+      nodePort: 30017
   selector:
     app: mongodb`;
     const k8sMinioYaml = `apiVersion: apps/v1
@@ -988,12 +1096,14 @@ kind: Service
 metadata:
   name: minio
 spec:
+  type: NodePort
   ports:
     - port: 9000
+      nodePort: 30900
   selector:
     app: minio`;
-    await fs.writeFile(path.join(k8sDir, 'mongodb.yaml'), k8sMongoYaml);
-    await fs.writeFile(path.join(k8sDir, 'minio.yaml'), k8sMinioYaml);
+    await fs.writeFile(path.join(k8sDir, 'mongodb.yaml'), applyNs(k8sMongoYaml, 'mongodb'));
+    await fs.writeFile(path.join(k8sDir, 'minio.yaml'), applyNs(k8sMinioYaml, 'minio'));
 
     await fs.writeFile(path.join(githubDir, 'ci.yml'), ciWorkflow);
     await fs.writeFile(path.join(githubDir, 'cd.yml'), cdWorkflow);

package/generators/postman.js

@@ -4,6 +4,9 @@ import chalk from 'chalk';
 
 export const generatePostmanCollection = async (config, entities, outputDir, openEntities = []) => {
     const docsDir = path.join(outputDir, 'docs');
+    const apiPrefixRaw = config.server?.rest?.['api-path-prefix'] || '/api';
+    const apiPrefix = apiPrefixRaw.endsWith('/') ? apiPrefixRaw.slice(0, -1) : apiPrefixRaw;
+    const apiPathArr = apiPrefix.split('/').filter(p => p !== '');
     await fs.ensureDir(docsDir);
 
     const collection = {
@@ -140,11 +143,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/admin/audit",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/admin/audit`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "admin", "audit"]
+                        path: [...apiPathArr, "admin", "audit"]
                     }
                 }
             },
@@ -157,11 +160,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/metering/usage",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/metering/usage`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "metering", "usage"]
+                        path: [...apiPathArr, "metering", "usage"]
                     }
                 }
             }
@@ -390,7 +393,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/open/api/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", "api", `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
+                    url: { raw: `http://{{host}}:{{port}}/open${apiPrefix}/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", ...apiPathArr, `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
                 }
             });
             publicItems.push({
@@ -398,7 +401,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/open/api/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", "api", `${name}s`, "1"] }
+                    url: { raw: `http://{{host}}:{{port}}/open${apiPrefix}/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", ...apiPathArr, `${name}s`, "1"] }
                 }
             });
         }
@@ -409,7 +412,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                     method: "POST",
                     header: [ { key: "X-Tenant-ID", value: "{{tenant}}" }, { key: "Content-Type", value: "application/json" } ],
                     body: { mode: "raw", raw: generateDummyJson(entity.fields) },
-                    url: { raw: `http://{{host}}:{{port}}/open/api/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", "api", `${name}s`] }
+                    url: { raw: `http://{{host}}:{{port}}/open${apiPrefix}/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["open", ...apiPathArr, `${name}s`] }
                 }
             });
         }
@@ -425,7 +428,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/${name}s?page=1&size=10&eager=true&sort=id,asc`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, `${name}s`], query: [ { key: "page", value: "1" }, { key: "size", value: "10" }, { key: "eager", value: "true" }, { key: "sort", value: "id,asc" } ] }
                 }
             },
             {
@@ -434,7 +437,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                     method: "POST",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" }, { key: "Content-Type", value: "application/json" } ],
                     body: { mode: "raw", raw: generateDummyJson(entity.fields) },
-                    url: { raw: `http://{{host}}:{{port}}/api/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", `${name}s`] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/${name}s`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, `${name}s`] }
                 }
             },
             {
@@ -442,7 +445,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", `${name}s`, "1"] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/${name}s/1`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, `${name}s`, "1"] }
                 }
             },
             {
@@ -450,7 +453,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/rpc/${name}?id=gt.0`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", "rpc", name], query: [ { key: "id", value: "gt.0" } ] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/rpc/${name}?id=gt.0`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, "rpc", name], query: [ { key: "id", value: "gt.0" } ] }
                 }
             }
         ];
@@ -461,7 +464,7 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                 request: {
                     method: "GET",
                     header: [ { key: "Authorization", value: "Bearer {{token}}" }, { key: "X-Tenant-ID", value: "{{tenant}}" } ],
-                    url: { raw: `http://{{host}}:{{port}}/api/search/${name}?q=Sample`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: ["api", "search", name], query: [ { key: "q", value: "Sample" } ] }
+                    url: { raw: `http://{{host}}:{{port}}${apiPrefix}/search/${name}?q=Sample`, protocol: "http", host: ["{{host}}"], port: "{{port}}", path: [...apiPathArr, "search", name], query: [ { key: "q", value: "Sample" } ] }
                 }
             });
         }
@@ -513,11 +516,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         ]
                     },
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/storage/upload?provider=sftp",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/storage/upload?provider=sftp`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "storage", "upload"],
+                        path: [...apiPathArr, "storage", "upload"],
                         query: [{ key: "provider", value: "sftp" }]
                     }
                 }
@@ -531,11 +534,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/storage/download/farm/animals/photo.jpg?provider=sftp",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/storage/download/farm/animals/photo.jpg?provider=sftp`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "storage", "download", "farm", "animals", "photo.jpg"],
+                        path: [...apiPathArr, "storage", "download", "farm", "animals", "photo.jpg"],
                         query: [{ key: "provider", value: "sftp" }]
                     }
                 }
@@ -549,11 +552,11 @@ export const generatePostmanCollection = async (config, entities, outputDir, ope
                         { key: "X-Tenant-ID", value: "{{tenant}}" }
                     ],
                     url: {
-                        raw: "http://{{host}}:{{port}}/api/storage/scan/farm/animals/photo.jpg",
+                        raw: `http://{{host}}:{{port}}${apiPrefix}/storage/scan/farm/animals/photo.jpg`,
                         protocol: "http",
                         host: ["{{host}}"],
                         port: "{{port}}",
-                        path: ["api", "storage", "scan", "farm", "animals", "photo.jpg"]
+                        path: [...apiPathArr, "storage", "scan", "farm", "animals", "photo.jpg"]
                     }
                 }
             }

package/generators/swagger.js

@@ -6,6 +6,9 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
     const docsDir = path.join(outputDir, 'docs');
     await fs.ensureDir(docsDir);
 
+    const apiPrefixRaw = config.server?.rest?.['api-path-prefix'] || '/api';
+    const apiPrefix = apiPrefixRaw.endsWith('/') ? apiPrefixRaw.slice(0, -1) : apiPrefixRaw;
+
     const swagger = {
         openapi: '3.0.0',
         info: {
@@ -201,14 +204,14 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
         };
 
         // 1a. Secured Paths
-        addEntityOperations('/api', false);
+        addEntityOperations(apiPrefix, false);
 
         // 1b. Public Paths (if marked as open)
-        addEntityOperations('/open/api', true);
+        addEntityOperations('/open' + apiPrefix, true);
     }
 
     // 2. Add System Paths
-    swagger.paths['/api/rpc/{table}'] = {
+    swagger.paths[`${apiPrefix}/rpc/{table}`] = {
         get: {
             tags: ['Search Engine'],
             summary: 'Generic PostgREST RPC Engine',
@@ -240,7 +243,7 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
         }
     };
 
-    swagger.paths['/api/admin/audit'] = {
+    swagger.paths[`${apiPrefix}/admin/audit`] = {
         get: {
             tags: ['Observability'],
             summary: 'Fetch Audit Trail',
@@ -281,7 +284,7 @@ export const generateSwaggerDocs = async (config, entities, outputDir, openEntit
     };
 
     if (config.elasticsearch?.enabled) {
-        swagger.paths['/api/search/{entity}'] = {
+        swagger.paths[`${apiPrefix}/search/{entity}`] = {
             get: {
                 tags: ['Search Engine'],
                 summary: 'Elasticsearch Global Search',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "go-duck-cli",
-  "version": "1.3.0",
+  "version": "1.3.3",
   "description": "The Ultimate Evolutionary Go Microservice Scaffolder.",
   "main": "index.js",
   "type": "module",

package/templates/docs/pages/index.hbs

@@ -120,6 +120,16 @@
                         <span class="px-4 py-1.5 bg-orange-100 text-orange-700 text-[9px] font-black rounded-lg">WSO2 REST PROXY</span>
                     </div>
                 </div>
+
+                <div class="lg:col-span-12 bg-white p-10 rounded-[2.5rem] border border-fuchsia-100 shadow-sm hover:shadow-2xl transition-all group relative overflow-hidden cursor-crosshair bg-gradient-to-br from-white to-fuchsia-50/30">
+                    <p class="text-[9px] font-bold text-fuchsia-600 uppercase tracking-widest mb-4">Elite Extension (+12%)</p>
+                    <h4 class="text-2xl font-black text-slate-900 mb-3 tracking-tight italic">K8s Network Isolation & NodePorts</h4>
+                    <p class="text-slate-600 leading-relaxed mb-8">Deploys every microservice component into its own dynamically generated namespace. Uses internal FQDN routing for secure communication and predictable NodePorts for host access.</p>
+                    <div class="flex gap-3">
+                        <span class="px-4 py-1.5 bg-fuchsia-100 text-fuchsia-700 text-[9px] font-black rounded-lg">ISOLATED NAMESPACES</span>
+                        <span class="px-4 py-1.5 bg-fuchsia-100 text-fuchsia-700 text-[9px] font-black rounded-lg">FQDN ROUTING</span>
+                    </div>
+                </div>
             </div>
         </div>
     </section>