underpost 3.2.5 → 3.2.9

package/manifests/cronjobs/dd-cron/dd-cron-dns.yaml

@@ -23,7 +23,7 @@ spec:
         spec:
           containers:
             - name: dd-cron-dns
-              image: underpost/underpost-engine:v3.2.5
+              image: underpost/underpost-engine:v3.2.9
               command:
                 - /bin/sh
                 - -c
@@ -42,7 +42,7 @@ spec:
                 type: Directory
               name: underpost-cron-container-volume
             - hostPath:
-                path: /root/.nvm/versions/node/v24.10.0/lib/node_modules/underpost
+                path: /root/.nvm/versions/node/v24.15.0/lib/node_modules/underpost
                 type: DirectoryOrCreate
               name: underpost-share-env
           restartPolicy: OnFailure

package/manifests/deployment/dd-default-development/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-blue
-          image: localhost/rockylinux9-underpost:v3.2.5
+          image: underpost/underpost-engine:v3.2.9
           #          resources:
           #            requests:
           #              memory: "124Ki"
@@ -29,8 +29,6 @@ spec:
             - /bin/sh
             - -c
             - >
-              npm install -g npm@11.2.0 &&
-              npm install -g underpost &&
               cd $(underpost root)/underpost &&
               node bin new --default-conf --conf-workflow-id template &&
               mkdir -p /home/dd &&
@@ -100,7 +98,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-green
-          image: localhost/rockylinux9-underpost:v3.2.5
+          image: underpost/underpost-engine:v3.2.9
           #          resources:
           #            requests:
           #              memory: "124Ki"
@@ -112,8 +110,6 @@ spec:
             - /bin/sh
             - -c
             - >
-              npm install -g npm@11.2.0 &&
-              npm install -g underpost &&
               cd $(underpost root)/underpost &&
               node bin new --default-conf --conf-workflow-id template &&
               mkdir -p /home/dd &&

package/manifests/deployment/dd-test-development/deployment.yaml

@@ -20,7 +20,8 @@ spec:
     spec:
       containers:
         - name: dd-test-development-blue
-          image: localhost/rockylinux9-underpost:v3.2.5
+          image: underpost/underpost-engine:v3.2.9
+          imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:
                 name: underpost-config
@@ -29,8 +30,6 @@ spec:
             - /bin/sh
             - -c
             - >
-              npm install -g npm@11.2.0 &&
-              npm install -g underpost &&
               underpost secret underpost --create-from-env &&
               underpost start --build --run dd-test development
 
@@ -45,50 +44,86 @@ spec:
   selector:
     app: dd-test-development-blue
   ports:
-    - name: 'tcp-4046'
+    - name: 'tcp-4033'
       protocol: TCP
-      port: 4046
-      targetPort: 4046
-    - name: 'udp-4046'
+      port: 4033
+      targetPort: 4033
+    - name: 'udp-4033'
       protocol: UDP
-      port: 4046
-      targetPort: 4046
+      port: 4033
+      targetPort: 4033
 
-    - name: 'tcp-4047'
+    - name: 'tcp-4034'
       protocol: TCP
-      port: 4047
-      targetPort: 4047
-    - name: 'udp-4047'
+      port: 4034
+      targetPort: 4034
+    - name: 'udp-4034'
       protocol: UDP
-      port: 4047
-      targetPort: 4047
+      port: 4034
+      targetPort: 4034
 
-    - name: 'tcp-4048'
+    - name: 'tcp-4035'
       protocol: TCP
-      port: 4048
-      targetPort: 4048
-    - name: 'udp-4048'
+      port: 4035
+      targetPort: 4035
+    - name: 'udp-4035'
       protocol: UDP
-      port: 4048
-      targetPort: 4048
+      port: 4035
+      targetPort: 4035
 
-    - name: 'tcp-4049'
+    - name: 'tcp-4036'
       protocol: TCP
-      port: 4049
-      targetPort: 4049
-    - name: 'udp-4049'
+      port: 4036
+      targetPort: 4036
+    - name: 'udp-4036'
       protocol: UDP
-      port: 4049
-      targetPort: 4049
+      port: 4036
+      targetPort: 4036
 
-    - name: 'tcp-4050'
+    - name: 'tcp-4037'
       protocol: TCP
-      port: 4050
-      targetPort: 4050
-    - name: 'udp-4050'
+      port: 4037
+      targetPort: 4037
+    - name: 'udp-4037'
       protocol: UDP
-      port: 4050
-      targetPort: 4050
+      port: 4037
+      targetPort: 4037
+
+    - name: 'tcp-4038'
+      protocol: TCP
+      port: 4038
+      targetPort: 4038
+    - name: 'udp-4038'
+      protocol: UDP
+      port: 4038
+      targetPort: 4038
+
+    - name: 'tcp-4039'
+      protocol: TCP
+      port: 4039
+      targetPort: 4039
+    - name: 'udp-4039'
+      protocol: UDP
+      port: 4039
+      targetPort: 4039
+
+    - name: 'tcp-4040'
+      protocol: TCP
+      port: 4040
+      targetPort: 4040
+    - name: 'udp-4040'
+      protocol: UDP
+      port: 4040
+      targetPort: 4040
+
+    - name: 'tcp-4041'
+      protocol: TCP
+      port: 4041
+      targetPort: 4041
+    - name: 'udp-4041'
+      protocol: UDP
+      port: 4041
+      targetPort: 4041
   type: LoadBalancer
 ---
 apiVersion: apps/v1
@@ -112,7 +147,8 @@ spec:
     spec:
       containers:
         - name: dd-test-development-green
-          image: localhost/rockylinux9-underpost:v3.2.5
+          image: underpost/underpost-engine:v3.2.9
+          imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:
                 name: underpost-config
@@ -121,8 +157,6 @@ spec:
             - /bin/sh
             - -c
             - >
-              npm install -g npm@11.2.0 &&
-              npm install -g underpost &&
               underpost secret underpost --create-from-env &&
               underpost start --build --run dd-test development
 
@@ -137,48 +171,84 @@ spec:
   selector:
     app: dd-test-development-green
   ports:
-    - name: 'tcp-4046'
+    - name: 'tcp-4033'
+      protocol: TCP
+      port: 4033
+      targetPort: 4033
+    - name: 'udp-4033'
+      protocol: UDP
+      port: 4033
+      targetPort: 4033
+
+    - name: 'tcp-4034'
+      protocol: TCP
+      port: 4034
+      targetPort: 4034
+    - name: 'udp-4034'
+      protocol: UDP
+      port: 4034
+      targetPort: 4034
+
+    - name: 'tcp-4035'
+      protocol: TCP
+      port: 4035
+      targetPort: 4035
+    - name: 'udp-4035'
+      protocol: UDP
+      port: 4035
+      targetPort: 4035
+
+    - name: 'tcp-4036'
+      protocol: TCP
+      port: 4036
+      targetPort: 4036
+    - name: 'udp-4036'
+      protocol: UDP
+      port: 4036
+      targetPort: 4036
+
+    - name: 'tcp-4037'
       protocol: TCP
-      port: 4046
-      targetPort: 4046
-    - name: 'udp-4046'
+      port: 4037
+      targetPort: 4037
+    - name: 'udp-4037'
       protocol: UDP
-      port: 4046
-      targetPort: 4046
+      port: 4037
+      targetPort: 4037
 
-    - name: 'tcp-4047'
+    - name: 'tcp-4038'
       protocol: TCP
-      port: 4047
-      targetPort: 4047
-    - name: 'udp-4047'
+      port: 4038
+      targetPort: 4038
+    - name: 'udp-4038'
       protocol: UDP
-      port: 4047
-      targetPort: 4047
+      port: 4038
+      targetPort: 4038
 
-    - name: 'tcp-4048'
+    - name: 'tcp-4039'
       protocol: TCP
-      port: 4048
-      targetPort: 4048
-    - name: 'udp-4048'
+      port: 4039
+      targetPort: 4039
+    - name: 'udp-4039'
       protocol: UDP
-      port: 4048
-      targetPort: 4048
+      port: 4039
+      targetPort: 4039
 
-    - name: 'tcp-4049'
+    - name: 'tcp-4040'
       protocol: TCP
-      port: 4049
-      targetPort: 4049
-    - name: 'udp-4049'
+      port: 4040
+      targetPort: 4040
+    - name: 'udp-4040'
       protocol: UDP
-      port: 4049
-      targetPort: 4049
+      port: 4040
+      targetPort: 4040
 
-    - name: 'tcp-4050'
+    - name: 'tcp-4041'
       protocol: TCP
-      port: 4050
-      targetPort: 4050
-    - name: 'udp-4050'
+      port: 4041
+      targetPort: 4041
+    - name: 'udp-4041'
       protocol: UDP
-      port: 4050
-      targetPort: 4050
+      port: 4041
+      targetPort: 4041
   type: LoadBalancer

package/manifests/deployment/dd-test-development/proxy.yaml

@@ -15,7 +15,7 @@ spec:
       enableWebsockets: true
       services:
         - name: dd-test-development-blue-service
-          port: 4046
+          port: 4033
           weight: 100
     
     - conditions:
@@ -24,7 +24,7 @@ spec:
       enableWebsockets: true
       services:
         - name: dd-test-development-blue-service
-          port: 4047
+          port: 4034
           weight: 100
     
     - conditions:
@@ -33,7 +33,43 @@ spec:
       enableWebsockets: true
       services:
         - name: dd-test-development-blue-service
-          port: 4048
+          port: 4035
+          weight: 100
+    
+    - conditions:
+        - prefix: /r1
+      
+      enableWebsockets: true
+      services:
+        - name: dd-test-development-blue-service
+          port: 4036
+          weight: 100
+    
+    - conditions:
+        - prefix: /r1/peer
+      
+      enableWebsockets: true
+      services:
+        - name: dd-test-development-blue-service
+          port: 4037
+          weight: 100
+    
+    - conditions:
+        - prefix: /r2
+      
+      enableWebsockets: true
+      services:
+        - name: dd-test-development-blue-service
+          port: 4038
+          weight: 100
+    
+    - conditions:
+        - prefix: /r2/peer
+      
+      enableWebsockets: true
+      services:
+        - name: dd-test-development-blue-service
+          port: 4039
           weight: 100
     
 ---
@@ -52,7 +88,7 @@ spec:
       enableWebsockets: true
       services:
         - name: dd-test-development-blue-service
-          port: 4049
+          port: 4040
           weight: 100
     
     - conditions:
@@ -61,6 +97,6 @@ spec:
       enableWebsockets: true
       services:
         - name: dd-test-development-blue-service
-          port: 4050
+          port: 4041
           weight: 100
     

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "underpost",
-    "version": "3.2.5",
+    "version": "3.2.9",
     "description": "pwa api rest template",
     "scripts": {
         "start": "node --max-old-space-size=8192 src/server",
@@ -14,8 +14,8 @@
         "dev:api": "NODE_ENV=development nodemon --watch src --ignore src/client src/api",
         "dev:client": "NODE_ENV=development node src/client.dev",
         "dev:proxy": "NODE_ENV=development node src/proxy proxy",
-        "docs": "jsdoc -c jsdoc.json",
-        "install:global": "npm install -g jsdoc && npm install -g prettier",
+        "docs": "typedoc --options typedoc.json",
+        "install:global": "npm install -g prettier",
         "install:test": "npm install -g mocha && npm install -g c8 && npm install -g coveralls-next",
         "install": "npm run install:global && npm run install:test",
         "prettier": "prettier --write .",
@@ -58,42 +58,42 @@
         "@neodrag/vanilla": "^2.3.1",
         "adm-zip": "^0.5.17",
         "ag-grid-community": "^35.2.1",
-        "axios": "^1.14.0",
+        "axios": "^1.16.0",
         "chai": "^6.2.2",
-        "clean-jsdoc-theme": "^4.3.0",
         "clipboardy": "^5.3.1",
-        "cloudinary": "^2.5.1",
+        "cloudinary": "^2.10.0",
         "colors": "^1.4.0",
         "commander": "^14.0.3",
         "compression": "^1.7.4",
         "cookie-parser": "^1.4.7",
         "cors": "^2.8.6",
         "d3": "^7.9.0",
+        "dexie": "^4.2.1",
         "dotenv": "^17.4.2",
-        "easymde": "^2.18.0",
+        "easymde": "^2.21.0",
         "esbuild": "^0.28.0",
         "escape-string-regexp": "^5.0.0",
         "express": "^5.2.1",
         "express-fileupload": "^1.4.3",
-        "express-rate-limit": "^8.3.2",
+        "express-rate-limit": "^8.4.1",
         "express-slow-down": "^3.1.0",
         "fast-json-stable-stringify": "^2.1.0",
         "favicons": "^7.2.0",
-        "fs-extra": "^11.3.4",
+        "fs-extra": "^11.3.5",
         "fullcalendar": "^6.1.15",
         "helmet": "^8.1.0",
         "html-minifier-terser": "^7.2.0",
-        "http-proxy-middleware": "^3.0.5",
-        "ignore-walk": "^8.0.0",
+        "http-proxy-middleware": "^4.0.0",
+        "ignore-walk": "^9.0.0",
         "iovalkey": "^0.3.3",
         "json-colorizer": "^3.0.1",
         "jsonwebtoken": "^9.0.3",
         "mariadb": "^3.2.2",
-        "marked": "^18.0.0",
+        "marked": "^18.0.3",
         "mocha": "^11.3.0",
-        "mongoose": "^9.4.1",
+        "mongoose": "^9.6.2",
         "morgan": "^1.10.0",
-        "nodemailer": "^8.0.3",
+        "nodemailer": "^8.0.7",
         "nodemon": "^3.0.1",
         "peer": "^1.0.2",
         "peerjs": "^1.5.5",
@@ -107,9 +107,18 @@
         "split-file": "^2.3.0",
         "swagger-autogen": "^2.23.7",
         "swagger-ui-express": "^5.0.0",
+        "typedoc": "^0.28.19",
+        "typescript": "^6.0.3",
         "validator": "^13.15.35",
         "vanilla-jsoneditor": "^3.12.0",
-        "winston": "^3.19.0"
+        "winston": "^3.19.0",
+        "workbox-background-sync": "^7.4.1",
+        "workbox-cacheable-response": "^7.4.1",
+        "workbox-core": "^7.4.1",
+        "workbox-expiration": "^7.4.1",
+        "workbox-precaching": "^7.4.1",
+        "workbox-routing": "^7.4.1",
+        "workbox-strategies": "^7.4.1"
     },
     "publishConfig": {
         "provenance": true,

package/scripts/k3s-node-setup.sh

@@ -32,8 +32,8 @@ curl -o- https://cdn.jsdelivr.net/gh/nvm-sh/nvm@v0.40.1/install.sh | bash
 export NVM_DIR="$([ -z "${XDG_CONFIG_HOME-}" ] && printf %s "${HOME}/.nvm" || printf %s "${XDG_CONFIG_HOME}/nvm")"
 [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
 
-nvm install 24.10.0
-nvm use 24.10.0
+nvm install 24.15.0
+nvm use 24.15.0
 
 echo "
 ██╗░░░██╗███╗░░██╗██████╗░███████╗██████╗░██████╗░░█████╗░░██████╗████████╗

package/scripts/nat-iptables.sh

@@ -1,26 +1,111 @@
 #!/bin/bash
 set -euo pipefail
 
-# Disable firewalld
-sudo systemctl disable --now iptables
-sudo systemctl disable --now ufw
-sudo systemctl disable --now firewalld
+echo "[INFO] Enabling firewalld..."
+sudo systemctl enable --now firewalld
 
+echo "[INFO] Configuring kernel networking..."
 
-# Remove any existing entries, then append exactly one
-sudo sed -i '/^net.ipv4.ip_forward/d' /etc/sysctl.conf
-sudo sed -i '/^net.ipv6.conf.all.forwarding/d' /etc/sysctl.conf
-echo "net.ipv4.ip_forward = 1"               | sudo tee -a /etc/sysctl.conf
-echo "net.ipv6.conf.all.forwarding = 1"       | sudo tee -a /etc/sysctl.conf
-# ---
+sudo tee /etc/sysctl.d/99-kubernetes.conf >/dev/null <<'EOF'
+# Kubernetes networking
+net.ipv4.ip_forward = 1
+net.ipv6.conf.all.forwarding = 1
 
-sudo sysctl -p
+# Required for Kubernetes iptables
+net.bridge.bridge-nf-call-iptables = 1
+net.bridge.bridge-nf-call-ip6tables = 1
 
-# Accept all traffic
-sudo iptables -P INPUT ACCEPT
-sudo iptables -P FORWARD ACCEPT
-sudo iptables -P OUTPUT ACCEPT
+# Better conntrack handling
+net.netfilter.nf_conntrack_max = 131072
+EOF
 
-# List iptables rules and forwarding flag
-sudo iptables -L -n
-sysctl net.ipv4.ip_forward net.ipv6.conf.all.forwarding
+# Load br_netfilter immediately
+sudo modprobe br_netfilter
+
+# Apply sysctl
+sudo sysctl --system
+
+echo "[INFO] Opening common WAN/public services..."
+
+# Public services
+sudo firewall-cmd --permanent --zone=public --add-service=ssh
+sudo firewall-cmd --permanent --zone=public --add-service=http
+sudo firewall-cmd --permanent --zone=public --add-service=https
+
+echo "[INFO] Opening Kubernetes control plane ports..."
+
+# Kubernetes API Server
+sudo firewall-cmd --permanent --zone=public --add-port=6443/tcp
+
+# etcd
+sudo firewall-cmd --permanent --zone=public --add-port=2379-2380/tcp
+
+# kubelet API
+sudo firewall-cmd --permanent --zone=public --add-port=10250/tcp
+
+# kube-scheduler
+sudo firewall-cmd --permanent --zone=public --add-port=10259/tcp
+
+# kube-controller-manager
+sudo firewall-cmd --permanent --zone=public --add-port=10257/tcp
+
+echo "[INFO] Opening Kubernetes networking ports..."
+
+# CoreDNS
+sudo firewall-cmd --permanent --zone=public --add-port=53/tcp
+sudo firewall-cmd --permanent --zone=public --add-port=53/udp
+
+# NodePort Services
+sudo firewall-cmd --permanent --zone=public --add-port=30000-32767/tcp
+sudo firewall-cmd --permanent --zone=public --add-port=30000-32767/udp
+
+# Calico VXLAN
+sudo firewall-cmd --permanent --zone=public --add-port=4789/udp
+
+# Calico BGP
+sudo firewall-cmd --permanent --zone=public --add-port=179/tcp
+
+# Calico Typha (required for multi-node Calico deployments)
+sudo firewall-cmd --permanent --zone=public --add-port=5473/tcp
+
+# Calico WireGuard (optional encrypted overlay)
+sudo firewall-cmd --permanent --zone=public --add-port=51820/udp
+sudo firewall-cmd --permanent --zone=public --add-port=51821/udp
+
+# Flannel VXLAN (UDP, required if using Flannel CNI)
+sudo firewall-cmd --permanent --zone=public --add-port=8472/udp
+
+# kube-proxy healthz
+sudo firewall-cmd --permanent --zone=public --add-port=10256/tcp
+
+# metrics-server
+sudo firewall-cmd --permanent --zone=public --add-port=4443/tcp
+
+echo "[INFO] Configuring trusted zone for inter-node pod/service CIDRs..."
+# Allow all traffic from the default pod CIDR and service CIDR so that
+# cross-node pod-to-pod and service routing works without explicit per-port rules.
+sudo firewall-cmd --permanent --zone=trusted --add-source=192.168.0.0/16
+sudo firewall-cmd --permanent --zone=trusted --add-source=10.96.0.0/12
+
+echo "[INFO] Enabling masquerade and forwarding..."
+
+sudo firewall-cmd --permanent --zone=public --add-masquerade
+
+echo "[INFO] Reloading firewall..."
+
+sudo firewall-cmd --reload
+
+echo
+echo "[INFO] Sysctl status:"
+sudo sysctl \
+  net.ipv4.ip_forward \
+  net.ipv6.conf.all.forwarding \
+  net.bridge.bridge-nf-call-iptables \
+  net.bridge.bridge-nf-call-ip6tables
+
+echo
+echo "[INFO] Firewall status:"
+sudo firewall-cmd --zone=public --list-all
+
+echo
+echo "[INFO] Kubernetes firewall configuration completed."

package/src/api/core/core.controller.js

@@ -3,8 +3,8 @@ import { CoreService } from './core.service.js';
 
 const logger = loggerFactory(import.meta);
 
-const CoreController = {
-  post: async (req, res, options) => {
+class CoreController {
+  static post = async (req, res, options) => {
     try {
       const result = await CoreService.post(req, res, options);
       return res.status(200).json({
@@ -18,8 +18,8 @@ const CoreController = {
         message: error.message,
       });
     }
-  },
-  get: async (req, res, options) => {
+  };
+  static get = async (req, res, options) => {
     try {
       const result = await CoreService.put(req, res, options);
       return res.status(200).json({
@@ -33,8 +33,8 @@ const CoreController = {
         message: error.message,
       });
     }
-  },
-  put: async (req, res, options) => {
+  };
+  static put = async (req, res, options) => {
     try {
       const result = await CoreService.get(req, res, options);
       return res.status(200).json({
@@ -48,8 +48,8 @@ const CoreController = {
         message: error.message,
       });
     }
-  },
-  delete: async (req, res, options) => {
+  };
+  static delete = async (req, res, options) => {
     try {
       const result = await CoreService.delete(req, res, options);
       return res.status(200).json({
@@ -63,7 +63,7 @@ const CoreController = {
         message: error.message,
       });
     }
-  },
-};
+  };
+}
 
 export { CoreController };