Parent stack — one YAML, every service

1
2
3
4
5
6
7

# First time: scaffold and provision the parent
sc init
sc secrets init --generate
sc provision -s my-infra -e prod

# Deploy a child service that uses it
sc deploy -s my-service -e prod

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

# .sc/stacks/my-infra/server.yaml — the parent
provisioner:
  type: pulumi
  config:
    state-storage:    { type: s3-bucket, ... }
    secrets-provider: { type: passphrase, ... }

# Compute templates the platform offers
templates:
  lambda:      { type: aws-lambda }
  static-site: { type: aws-static-website }
  api-fargate: { type: ecs-fargate }

resources:
  # ── account-wide resources (shared across all envs) ────────────
  registrar:
    type: cloudflare
    config: { credentials: "${secret:CLOUDFLARE_API_TOKEN}", ... }

  # ── per-environment defaults + resources ───────────────────────
  resources:
    staging:
      template: lambda                    # default template for this env
      resources:
        mongodb: { type: mongodb-atlas, config: { ... } }
        redis:   { type: kubernetes-helm-redis-operator, config: { ... } }
    prod:
      template: lambda
      resources:
        mongodb: { type: mongodb-atlas, config: { ... } }

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

# .sc/stacks/my-service/client.yaml — a child
stacks:
  prod:
    type: single-image
    template: lambda
    parent: my-org/my-infra
    config:
      domain: api.my-org.com
      uses: [mongodb, redis]
      env:
        MONGO_URI: "${resource:mongodb.uri}"
        REDIS_URL: "${resource:redis.url}"