Nest repeated playground fields
This commit is contained in:
@@ -16,20 +16,26 @@ in
|
||||
owner = org.teams.checkout;
|
||||
port = 8443;
|
||||
replicas = env.capacity.base_replicas + 2;
|
||||
resources.cpu_milli = env.capacity.cpu_milli;
|
||||
resources.memory_mb = env.capacity.memory_mb;
|
||||
autoscaling.enabled = true;
|
||||
autoscaling.min = env.capacity.base_replicas;
|
||||
autoscaling.max = env.capacity.base_replicas * 4;
|
||||
rollout.strategy = match release.risk {
|
||||
resources = {
|
||||
cpu_milli = env.capacity.cpu_milli;
|
||||
memory_mb = env.capacity.memory_mb;
|
||||
};
|
||||
autoscaling = {
|
||||
enabled = true;
|
||||
min = env.capacity.base_replicas;
|
||||
max = env.capacity.base_replicas * 4;
|
||||
};
|
||||
rollout = {
|
||||
strategy = match release.risk {
|
||||
"high": "canary";
|
||||
"medium": "rolling";
|
||||
_: "all-at-once";
|
||||
};
|
||||
rollout.canary_percent = match release.risk {
|
||||
canary_percent = match release.risk {
|
||||
"high": 10;
|
||||
_: 100;
|
||||
};
|
||||
};
|
||||
ingress.hosts = env.domains.public ++ ["checkout.internal.example.com"];
|
||||
labels = org.common_labels ++ ["service:checkout", "tier:edge"];
|
||||
alerts.pager = org.pagers.checkout;
|
||||
@@ -41,16 +47,24 @@ in
|
||||
owner = String;
|
||||
port = Int & >= 1024 & <= 65535 default 8080;
|
||||
replicas = Int & > 0 default 2;
|
||||
resources.cpu_milli = Int & >= 100 default 500;
|
||||
resources.memory_mb = Int & >= 128 default 512;
|
||||
autoscaling.enabled = Bool default false;
|
||||
autoscaling.min = Int & > 0 default 2;
|
||||
autoscaling.max = Int & > 0 default 4;
|
||||
rollout.strategy = String default "rolling";
|
||||
rollout.canary_percent = Int & >= 0 & <= 100 default 100;
|
||||
observability.metrics = Bool default true;
|
||||
observability.tracing = Bool default true;
|
||||
observability.logs = Bool default true;
|
||||
resources = {
|
||||
cpu_milli = Int & >= 100 default 500;
|
||||
memory_mb = Int & >= 128 default 512;
|
||||
};
|
||||
autoscaling = {
|
||||
enabled = Bool default false;
|
||||
min = Int & > 0 default 2;
|
||||
max = Int & > 0 default 4;
|
||||
};
|
||||
rollout = {
|
||||
strategy = String default "rolling";
|
||||
canary_percent = Int & >= 0 & <= 100 default 100;
|
||||
};
|
||||
observability = {
|
||||
metrics = Bool default true;
|
||||
tracing = Bool default true;
|
||||
logs = Bool default true;
|
||||
};
|
||||
network.public = Bool default false;
|
||||
};
|
||||
`,
|
||||
@@ -64,8 +78,10 @@ domains.public = ["checkout.example.com", "api.example.com"];
|
||||
|
||||
Production = {
|
||||
network.public = true;
|
||||
observability.tracing = true;
|
||||
observability.logs = true;
|
||||
observability = {
|
||||
tracing = true;
|
||||
logs = true;
|
||||
};
|
||||
};
|
||||
`,
|
||||
'org/platform.dcdl': `teams = {
|
||||
@@ -99,12 +115,16 @@ in
|
||||
schema.Tenant & (plans.Enterprise // region.Europe // customer.Acme // {
|
||||
slug = "acme";
|
||||
display_name = "Acme Manufacturing";
|
||||
limits.users = customer.seats + 25;
|
||||
limits.projects = 200;
|
||||
limits.storage_gb = 2048;
|
||||
features.audit_log = true;
|
||||
features.sso = true;
|
||||
features.data_residency = true;
|
||||
limits = {
|
||||
users = customer.seats + 25;
|
||||
projects = 200;
|
||||
storage_gb = 2048;
|
||||
};
|
||||
features = {
|
||||
audit_log = true;
|
||||
sso = true;
|
||||
data_residency = true;
|
||||
};
|
||||
compliance.retention_days = match customer.contract_tier {
|
||||
"regulated": 2555;
|
||||
_: 365;
|
||||
@@ -116,31 +136,45 @@ in
|
||||
slug = String;
|
||||
display_name = String;
|
||||
plan = String default "standard";
|
||||
limits.users = Int & > 0 default 25;
|
||||
limits.projects = Int & > 0 default 20;
|
||||
limits.storage_gb = Int & > 0 default 100;
|
||||
features.sso = Bool default false;
|
||||
features.audit_log = Bool default true;
|
||||
features.data_residency = Bool default false;
|
||||
compliance.region = String default "us";
|
||||
compliance.retention_days = Int & >= 30 default 90;
|
||||
billing.currency = String default "USD";
|
||||
billing.invoice_day = Int & >= 1 & <= 28 default 1;
|
||||
limits = {
|
||||
users = Int & > 0 default 25;
|
||||
projects = Int & > 0 default 20;
|
||||
storage_gb = Int & > 0 default 100;
|
||||
};
|
||||
features = {
|
||||
sso = Bool default false;
|
||||
audit_log = Bool default true;
|
||||
data_residency = Bool default false;
|
||||
};
|
||||
compliance = {
|
||||
region = String default "us";
|
||||
retention_days = Int & >= 30 default 90;
|
||||
};
|
||||
billing = {
|
||||
currency = String default "USD";
|
||||
invoice_day = Int & >= 1 & <= 28 default 1;
|
||||
};
|
||||
};
|
||||
`,
|
||||
'plans.dcdl': `Enterprise = {
|
||||
plan = "enterprise";
|
||||
limits.users = 500;
|
||||
limits.projects = 100;
|
||||
limits.storage_gb = 1024;
|
||||
features.sso = true;
|
||||
features.audit_log = true;
|
||||
limits = {
|
||||
users = 500;
|
||||
projects = 100;
|
||||
storage_gb = 1024;
|
||||
};
|
||||
features = {
|
||||
sso = true;
|
||||
audit_log = true;
|
||||
};
|
||||
billing.invoice_day = 15;
|
||||
};
|
||||
`,
|
||||
'regions/eu.dcdl': `Europe = {
|
||||
compliance.region = "eu-west";
|
||||
compliance.retention_days = 365;
|
||||
compliance = {
|
||||
region = "eu-west";
|
||||
retention_days = 365;
|
||||
};
|
||||
billing.currency = "EUR";
|
||||
};
|
||||
`,
|
||||
@@ -168,14 +202,20 @@ Acme = {
|
||||
in
|
||||
schema.Pipeline & env.Production & {
|
||||
name = "events-rollup";
|
||||
source.kafka_cluster = sources.cluster;
|
||||
source.topic = sources.raw_topic;
|
||||
source.consumer_group = "analytics-events-rollup";
|
||||
sink.table = sinks.daily_events_table;
|
||||
sink.mode = "append";
|
||||
source = {
|
||||
kafka_cluster = sources.cluster;
|
||||
topic = sources.raw_topic;
|
||||
consumer_group = "analytics-events-rollup";
|
||||
};
|
||||
sink = {
|
||||
table = sinks.daily_events_table;
|
||||
mode = "append";
|
||||
};
|
||||
workers = env.scale.worker_count;
|
||||
batch.size = env.scale.batch_size;
|
||||
batch.timeout_seconds = 60 + 30;
|
||||
batch = {
|
||||
size = env.scale.batch_size;
|
||||
timeout_seconds = 60 + 30;
|
||||
};
|
||||
schedule.cron = "*/15 * * * *";
|
||||
transforms = transforms.standard ++ transforms.privacy ++ ["aggregate_daily"];
|
||||
quality.max_lag_seconds = match env.tier {
|
||||
@@ -188,18 +228,26 @@ in
|
||||
`,
|
||||
'schemas/pipeline.dcdl': `Pipeline = {
|
||||
name = String;
|
||||
source.kafka_cluster = String;
|
||||
source.topic = String;
|
||||
source.consumer_group = String;
|
||||
sink.table = String;
|
||||
sink.mode = String default "append";
|
||||
source = {
|
||||
kafka_cluster = String;
|
||||
topic = String;
|
||||
consumer_group = String;
|
||||
};
|
||||
sink = {
|
||||
table = String;
|
||||
mode = String default "append";
|
||||
};
|
||||
workers = Int & > 0 default 2;
|
||||
batch.size = Int & >= 100 default 1000;
|
||||
batch.timeout_seconds = Int & > 0 default 60;
|
||||
batch = {
|
||||
size = Int & >= 100 default 1000;
|
||||
timeout_seconds = Int & > 0 default 60;
|
||||
};
|
||||
schedule.cron = String;
|
||||
quality.max_lag_seconds = Int & > 0 default 300;
|
||||
dead_letter.enabled = Bool default true;
|
||||
dead_letter.topic = String default "events.dead_letter";
|
||||
dead_letter = {
|
||||
enabled = Bool default true;
|
||||
topic = String default "events.dead_letter";
|
||||
};
|
||||
};
|
||||
`,
|
||||
'env/prod.dcdl': `tier = "gold";
|
||||
@@ -238,26 +286,38 @@ in
|
||||
schema.EdgeApplication & security.StrictHeaders & {
|
||||
name = "docs-and-playground";
|
||||
domains = domains.primary ++ domains.aliases;
|
||||
origin.host = "origin-docs.internal.example.com";
|
||||
origin.port = 443;
|
||||
origin = {
|
||||
host = "origin-docs.internal.example.com";
|
||||
port = 443;
|
||||
};
|
||||
tls.mode = "strict";
|
||||
cache.default_ttl_seconds = 60 * 60;
|
||||
cache.static_ttl_seconds = 60 * 60 * 24;
|
||||
cache.bypass_preview = env != "production";
|
||||
routing.docs_paths = ["/docs/*", "/assets/*"];
|
||||
routing.playground_paths = ["/playground/*"];
|
||||
waf.enabled = true;
|
||||
waf.rules = security.managed_rules ++ ["block-country:kp", "rate-limit-login"];
|
||||
cache = {
|
||||
default_ttl_seconds = 60 * 60;
|
||||
static_ttl_seconds = 60 * 60 * 24;
|
||||
bypass_preview = env != "production";
|
||||
};
|
||||
routing = {
|
||||
docs_paths = ["/docs/*", "/assets/*"];
|
||||
playground_paths = ["/playground/*"];
|
||||
};
|
||||
waf = {
|
||||
enabled = true;
|
||||
rules = security.managed_rules ++ ["block-country:kp", "rate-limit-login"];
|
||||
};
|
||||
}
|
||||
`,
|
||||
'schemas/edge.dcdl': `EdgeApplication = {
|
||||
name = String;
|
||||
origin.host = String;
|
||||
origin.port = Int & >= 1 & <= 65535 default 443;
|
||||
origin = {
|
||||
host = String;
|
||||
port = Int & >= 1 & <= 65535 default 443;
|
||||
};
|
||||
tls.mode = String default "strict";
|
||||
cache.default_ttl_seconds = Int & >= 0 default 300;
|
||||
cache.static_ttl_seconds = Int & >= 0 default 86400;
|
||||
cache.bypass_preview = Bool default false;
|
||||
cache = {
|
||||
default_ttl_seconds = Int & >= 0 default 300;
|
||||
static_ttl_seconds = Int & >= 0 default 86400;
|
||||
bypass_preview = Bool default false;
|
||||
};
|
||||
waf.enabled = Bool default true;
|
||||
};
|
||||
`,
|
||||
@@ -267,9 +327,11 @@ aliases = ["www.decodal.example.com", "docs.decodal.example.com"];
|
||||
'security.dcdl': `managed_rules = ["owasp-core", "known-bots", "credential-stuffing"];
|
||||
|
||||
StrictHeaders = {
|
||||
headers.hsts = "max-age=31536000; includeSubDomains; preload";
|
||||
headers.referrer_policy = "same-origin";
|
||||
headers.frame_options = "DENY";
|
||||
headers = {
|
||||
hsts = "max-age=31536000; includeSubDomains; preload";
|
||||
referrer_policy = "same-origin";
|
||||
frame_options = "DENY";
|
||||
};
|
||||
};
|
||||
`,
|
||||
},
|
||||
@@ -296,12 +358,14 @@ in
|
||||
"sev2": 15;
|
||||
_: 60;
|
||||
};
|
||||
escalation.after_minutes = match severity {
|
||||
escalation = {
|
||||
after_minutes = match severity {
|
||||
"sev1": 10;
|
||||
"sev2": 30;
|
||||
_: 120;
|
||||
};
|
||||
escalation.targets = teams.platform_secondary ++ calendar.executive_watch;
|
||||
targets = teams.platform_secondary ++ calendar.executive_watch;
|
||||
};
|
||||
runbooks = ["runbooks/payments-api", "runbooks/database-failover"];
|
||||
}
|
||||
`,
|
||||
|
||||
Reference in New Issue
Block a user