iec-cli 0.6.6

package/dist/templates/crosspod/service-a/helm/{{name}}-service-a/templates/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .Release.Name }}
+  labels:
+    app: {{ .Release.Name }}
+    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+spec:
+  type: {{ .Values.service.type }}
+  ports:
+    - port: {{ .Values.service.port }}
+      targetPort: http
+      protocol: TCP
+      name: http
+  selector:
+    app: {{ .Release.Name }}

package/dist/templates/crosspod/service-a/helm/{{name}}-service-a/values.yaml

@@ -0,0 +1,44 @@
+replicaCount: 1
+
+image:
+  repository: registry.digitalocean.com/insureco/{{name}}-service-a
+  tag: latest
+  pullPolicy: IfNotPresent
+
+imagePullSecrets:
+  - name: insureco
+
+service:
+  type: ClusterIP
+  port: 3000
+
+resources:
+  limits:
+    cpu: 200m
+    memory: 256Mi
+  requests:
+    cpu: 50m
+    memory: 64Mi
+
+ingress:
+  enabled: false
+  className: nginx
+  annotations: {}
+  hosts: []
+  tls: []
+
+secretRef: ""
+
+livenessProbe:
+  httpGet:
+    path: /health
+    port: 3000
+  initialDelaySeconds: 10
+  periodSeconds: 10
+
+readinessProbe:
+  httpGet:
+    path: /health
+    port: 3000
+  initialDelaySeconds: 5
+  periodSeconds: 5

package/dist/templates/crosspod/service-a/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "{{name}}-service-a",
+  "version": "0.1.0",
+  "description": "Provider service - exposes internal data API",
+  "type": "module",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/index.ts",
+    "start": "node dist/index.js",
+    "lint": "eslint src --ext .ts",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "express": "^4.21.0",
+    "cors": "^2.8.5",
+    "helmet": "^8.0.0",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@types/cors": "^2.8.17",
+    "@types/express": "^5.0.0",
+    "@types/node": "^22.0.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.7.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}

package/dist/templates/crosspod/service-a/src/index.ts

@@ -0,0 +1,89 @@
+import express, { type Request, type Response, type NextFunction } from 'express'
+import helmet from 'helmet'
+
+const app = express()
+const PORT = process.env.PORT || 3000
+const SERVICE_NAME = '{{name}}-service-a'
+
+// Middleware
+app.use(helmet())
+app.use(express.json())
+
+// Sample data store
+interface Item {
+  id: string
+  name: string
+  value: number
+  source: string
+}
+
+const items: Item[] = [
+  { id: '1', name: 'Widget A', value: 100, source: SERVICE_NAME },
+  { id: '2', name: 'Widget B', value: 200, source: SERVICE_NAME },
+  { id: '3', name: 'Widget C', value: 300, source: SERVICE_NAME },
+]
+
+// Request logging with caller identification
+app.use((req: Request, _res: Response, next: NextFunction) => {
+  const caller = req.headers['x-service-name'] || 'unknown'
+  const timestamp = new Date().toISOString()
+  process.stdout.write(`[${timestamp}] ${req.method} ${req.path} (caller: ${caller})\n`)
+  next()
+})
+
+// Health check - public
+app.get('/health', (_req: Request, res: Response) => {
+  res.json({
+    status: 'healthy',
+    service: SERVICE_NAME,
+    timestamp: new Date().toISOString(),
+  })
+})
+
+// Internal API - service-to-service only
+// In production, Janus validates the auth: service requirement
+app.get('/api/internal/items', (req: Request, res: Response) => {
+  // Log the service-to-service call
+  const callerService = req.headers['x-service-name'] as string
+  process.stdout.write(`Internal API called by: ${callerService || 'direct'}\n`)
+
+  res.json({
+    success: true,
+    data: items,
+    meta: {
+      source: SERVICE_NAME,
+      timestamp: new Date().toISOString(),
+    },
+  })
+})
+
+app.get('/api/internal/items/:id', (req: Request, res: Response) => {
+  const item = items.find(i => i.id === req.params.id)
+
+  if (!item) {
+    res.status(404).json({
+      success: false,
+      error: { code: 'NOT_FOUND', message: 'Item not found' },
+    })
+    return
+  }
+
+  res.json({
+    success: true,
+    data: item,
+  })
+})
+
+// Error handler
+app.use((err: Error, _req: Request, res: Response, _next: NextFunction) => {
+  process.stderr.write(`Error: ${err.message}\n`)
+  res.status(500).json({
+    success: false,
+    error: { code: 'INTERNAL_ERROR', message: 'Internal error' },
+  })
+})
+
+app.listen(PORT, () => {
+  process.stdout.write(`${SERVICE_NAME} listening on port ${PORT}\n`)
+  process.stdout.write(`This service exposes internal APIs for service-to-service communication\n`)
+})

package/dist/templates/crosspod/service-a/tsconfig.json

@@ -0,0 +1,14 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true
+  },
+  "include": ["src/**/*"],
+  "exclude": ["node_modules", "dist"]
+}

package/dist/templates/crosspod/service-b/Dockerfile

@@ -0,0 +1,27 @@
+FROM node:22-alpine AS builder
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci
+COPY . .
+RUN npm run build
+
+FROM node:22-alpine
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci --production && npm cache clean --force
+COPY --from=builder /app/dist ./dist
+
+ENV NODE_ENV=production
+ENV PORT=3000
+
+RUN addgroup -g 1001 -S nodejs && \
+    adduser -S nodejs -u 1001 && \
+    chown -R nodejs:nodejs /app
+
+USER nodejs
+EXPOSE 3000
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1
+
+CMD ["node", "dist/index.js"]

package/dist/templates/crosspod/service-b/catalog-info.yaml

@@ -0,0 +1,27 @@
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: {{name}}-service-b
+  description: Consumer service for {{name}} - calls service-a internally
+  tags:
+    - tawa
+    - api
+    - consumer
+  annotations:
+    insureco.io/framework: express
+    insureco.io/language: typescript
+spec:
+  type: service
+  lifecycle: experimental
+  owner: {{owner}}
+  consumesApis:
+    - {{name}}-service-a-api
+  routes:
+    - path: /health
+      methods: [GET]
+      auth: none
+      description: Health check endpoint
+    - path: /api/*
+      methods: [GET, POST]
+      auth: required
+      description: Public API that aggregates data from service-a

package/dist/templates/crosspod/service-b/gitignore

@@ -0,0 +1,5 @@
+node_modules/
+dist/
+.env
+.env.local
+*.log

package/dist/templates/crosspod/service-b/helm/{{name}}-service-b/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: {{name}}-service-b
+description: Consumer service Helm chart
+type: application
+version: 0.1.0
+appVersion: "0.1.0"

package/dist/templates/crosspod/service-b/helm/{{name}}-service-b/templates/deployment.yaml

@@ -0,0 +1,72 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .Release.Name }}
+  labels:
+    app: {{ .Release.Name }}
+    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+spec:
+  replicas: {{ .Values.replicaCount }}
+  selector:
+    matchLabels:
+      app: {{ .Release.Name }}
+  template:
+    metadata:
+      labels:
+        app: {{ .Release.Name }}
+        app.kubernetes.io/name: {{ .Release.Name }}
+        app.kubernetes.io/instance: {{ .Release.Name }}
+    spec:
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      containers:
+        - name: {{ .Chart.Name }}
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          ports:
+            - name: http
+              containerPort: {{ .Values.service.port }}
+              protocol: TCP
+          envFrom:
+            - configMapRef:
+                name: {{ .Release.Name }}-config
+                optional: true
+            - secretRef:
+                name: {{ .Release.Name }}-secrets
+                optional: true
+            {{- if .Values.secretRef }}
+            - secretRef:
+                name: {{ .Values.secretRef }}
+            {{- end }}
+          {{- with .Values.env }}
+          env:
+            {{- range $key, $value := . }}
+            - name: {{ $key }}
+              value: {{ $value | quote }}
+            {{- end }}
+          {{- end }}
+          {{- with .Values.livenessProbe }}
+          livenessProbe:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+          {{- with .Values.readinessProbe }}
+          readinessProbe:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+          resources:
+            {{- toYaml .Values.resources | nindent 12 }}
+      {{- with .Values.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}

package/dist/templates/crosspod/service-b/helm/{{name}}-service-b/templates/ingress.yaml

@@ -0,0 +1,43 @@
+{{- if .Values.ingress.enabled -}}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ .Release.Name }}
+  labels:
+    app: {{ .Release.Name }}
+    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+  {{- with .Values.ingress.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+spec:
+  {{- if .Values.ingress.className }}
+  ingressClassName: {{ .Values.ingress.className }}
+  {{- end }}
+  {{- if .Values.ingress.tls }}
+  tls:
+    {{- range .Values.ingress.tls }}
+    - hosts:
+        {{- range .hosts }}
+        - {{ . | quote }}
+        {{- end }}
+      secretName: {{ .secretName }}
+    {{- end }}
+  {{- end }}
+  rules:
+    {{- range .Values.ingress.hosts }}
+    - host: {{ .host | quote }}
+      http:
+        paths:
+          {{- range .paths }}
+          - path: {{ .path }}
+            pathType: {{ .pathType }}
+            backend:
+              service:
+                name: {{ $.Release.Name }}
+                port:
+                  number: {{ $.Values.service.port }}
+          {{- end }}
+    {{- end }}
+{{- end }}

package/dist/templates/crosspod/service-b/helm/{{name}}-service-b/templates/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .Release.Name }}
+  labels:
+    app: {{ .Release.Name }}
+    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+spec:
+  type: {{ .Values.service.type }}
+  ports:
+    - port: {{ .Values.service.port }}
+      targetPort: http
+      protocol: TCP
+      name: http
+  selector:
+    app: {{ .Release.Name }}

package/dist/templates/crosspod/service-b/helm/{{name}}-service-b/values.yaml

@@ -0,0 +1,47 @@
+replicaCount: 1
+
+image:
+  repository: registry.digitalocean.com/insureco/{{name}}-service-b
+  tag: latest
+  pullPolicy: IfNotPresent
+
+imagePullSecrets:
+  - name: insureco
+
+service:
+  type: ClusterIP
+  port: 3000
+
+resources:
+  limits:
+    cpu: 200m
+    memory: 256Mi
+  requests:
+    cpu: 50m
+    memory: 64Mi
+
+env:
+  SERVICE_A_URL: "http://{{name}}-service-a:3000"
+
+ingress:
+  enabled: false
+  className: nginx
+  annotations: {}
+  hosts: []
+  tls: []
+
+secretRef: ""
+
+livenessProbe:
+  httpGet:
+    path: /health
+    port: 3000
+  initialDelaySeconds: 10
+  periodSeconds: 10
+
+readinessProbe:
+  httpGet:
+    path: /health
+    port: 3000
+  initialDelaySeconds: 5
+  periodSeconds: 5

package/dist/templates/crosspod/service-b/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "{{name}}-service-b",
+  "version": "0.1.0",
+  "description": "Consumer service - calls service-a internally",
+  "type": "module",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/index.ts",
+    "start": "node dist/index.js",
+    "lint": "eslint src --ext .ts",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "express": "^4.21.0",
+    "helmet": "^8.0.0"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.0",
+    "@types/node": "^22.0.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.7.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}

package/dist/templates/crosspod/service-b/src/index.ts

@@ -0,0 +1,143 @@
+import express, { type Request, type Response, type NextFunction } from 'express'
+import helmet from 'helmet'
+
+const app = express()
+const PORT = process.env.PORT || 3000
+const SERVICE_NAME = '{{name}}-service-b'
+
+// Service A URL - uses Kubernetes internal DNS
+// Format: http://<service-name>.<namespace>.svc.cluster.local:<port>
+// Simplified: http://<service-name>:<port> when in same namespace
+const SERVICE_A_URL = process.env.SERVICE_A_URL || 'http://{{name}}-service-a:3000'
+
+// Middleware
+app.use(helmet())
+app.use(express.json())
+
+// Request logging
+app.use((req: Request, _res: Response, next: NextFunction) => {
+  const timestamp = new Date().toISOString()
+  process.stdout.write(`[${timestamp}] ${req.method} ${req.path}\n`)
+  next()
+})
+
+// Health check
+app.get('/health', (_req: Request, res: Response) => {
+  res.json({
+    status: 'healthy',
+    service: SERVICE_NAME,
+    timestamp: new Date().toISOString(),
+  })
+})
+
+// Helper function to call service-a
+async function callServiceA(path: string): Promise<unknown> {
+  const url = `${SERVICE_A_URL}${path}`
+  process.stdout.write(`Calling service-a: ${url}\n`)
+
+  const response = await fetch(url, {
+    headers: {
+      'Content-Type': 'application/json',
+      // Identify ourselves for logging/tracing
+      'X-Service-Name': SERVICE_NAME,
+      // In production, include service credentials for auth: service routes
+      // 'Authorization': `Bearer ${process.env.SERVICE_TOKEN}`,
+    },
+  })
+
+  if (!response.ok) {
+    throw new Error(`Service A returned ${response.status}`)
+  }
+
+  return response.json()
+}
+
+// Public API that aggregates data from service-a
+app.get('/api/data', async (_req: Request, res: Response) => {
+  try {
+    // Call service-a's internal API
+    const serviceAResponse = await callServiceA('/api/internal/items') as {
+      success: boolean
+      data: Array<{ id: string; name: string; value: number; source: string }>
+      meta: { source: string; timestamp: string }
+    }
+
+    // Process and transform the data
+    const processedData = {
+      items: serviceAResponse.data.map(item => ({
+        ...item,
+        processedBy: SERVICE_NAME,
+        displayValue: `$${item.value.toFixed(2)}`,
+      })),
+      totalValue: serviceAResponse.data.reduce((sum, item) => sum + item.value, 0),
+    }
+
+    res.json({
+      success: true,
+      data: processedData,
+      meta: {
+        aggregator: SERVICE_NAME,
+        source: serviceAResponse.meta.source,
+        timestamp: new Date().toISOString(),
+      },
+    })
+  } catch (error) {
+    process.stderr.write(`Error calling service-a: ${error}\n`)
+    res.status(502).json({
+      success: false,
+      error: {
+        code: 'UPSTREAM_ERROR',
+        message: 'Failed to retrieve data from upstream service',
+      },
+    })
+  }
+})
+
+// Get specific item with enrichment
+app.get('/api/data/:id', async (req: Request, res: Response) => {
+  try {
+    const response = await callServiceA(`/api/internal/items/${req.params.id}`) as {
+      success: boolean
+      data: { id: string; name: string; value: number; source: string }
+    }
+
+    const enrichedItem = {
+      ...response.data,
+      processedBy: SERVICE_NAME,
+      displayValue: `$${response.data.value.toFixed(2)}`,
+      retrievedAt: new Date().toISOString(),
+    }
+
+    res.json({
+      success: true,
+      data: enrichedItem,
+    })
+  } catch (error) {
+    const err = error as Error
+    if (err.message.includes('404')) {
+      res.status(404).json({
+        success: false,
+        error: { code: 'NOT_FOUND', message: 'Item not found' },
+      })
+      return
+    }
+    res.status(502).json({
+      success: false,
+      error: { code: 'UPSTREAM_ERROR', message: 'Failed to retrieve item' },
+    })
+  }
+})
+
+// Error handler
+app.use((err: Error, _req: Request, res: Response, _next: NextFunction) => {
+  process.stderr.write(`Error: ${err.message}\n`)
+  res.status(500).json({
+    success: false,
+    error: { code: 'INTERNAL_ERROR', message: 'Internal error' },
+  })
+})
+
+app.listen(PORT, () => {
+  process.stdout.write(`${SERVICE_NAME} listening on port ${PORT}\n`)
+  process.stdout.write(`Configured to call service-a at: ${SERVICE_A_URL}\n`)
+})

package/dist/templates/crosspod/service-b/tsconfig.json

@@ -0,0 +1,14 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true
+  },
+  "include": ["src/**/*"],
+  "exclude": ["node_modules", "dist"]
+}

package/dist/templates/mga/{{name}}-api/.env.example

@@ -0,0 +1,5 @@
+PORT=3000
+NODE_ENV=development
+MONGODB_URI=mongodb://localhost:27017/{{name}}
+BIO_ID_URL=http://localhost:6100
+JWT_SECRET=dev-secret-change-in-production

package/dist/templates/mga/{{name}}-api/Dockerfile

@@ -0,0 +1,45 @@
+FROM node:22-alpine AS builder
+
+WORKDIR /app
+
+# Copy package files
+COPY package*.json ./
+
+# Install dependencies
+RUN npm ci
+
+# Copy source code
+COPY . .
+
+# Build TypeScript
+RUN npm run build
+
+# Production stage
+FROM node:22-alpine
+
+WORKDIR /app
+
+# Copy package files and install production deps only
+COPY package*.json ./
+RUN npm ci --production && npm cache clean --force
+
+# Copy built application
+COPY --from=builder /app/dist ./dist
+
+# Set environment
+ENV NODE_ENV=production
+ENV PORT=3000
+
+# Create non-root user
+RUN addgroup -g 1001 -S nodejs && \
+    adduser -S nodejs -u 1001 && \
+    chown -R nodejs:nodejs /app
+
+USER nodejs
+
+EXPOSE 3000
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1
+
+CMD ["node", "dist/index.js"]