Operate one Restate deployment from non-secret colors.yml. Read
references/configuration.md before changing
configuration or running a lifecycle operation.
Compute ownership
The pinned colors-compute library owns provider selection, remote S3/R2
state, deployment coordination, machine keys, network policy and the single
node. This package supplies singleton topology and SSH/HTTP ingress, then
uses the returned address, login user and SSH identity for its application
steps. New provider support belongs in the library; consumers update its pin.
The application needs a supported Ubuntu image and sufficient memory for
Restate and the reference application. Build first to check adapter capabilities.
Use restate-ssh-sources and restate-http-sources for neutral CIDR
allowlists. Existing selected-provider source options remain compatible.
External account key references may use ssh-private-key-path or operator/agent SSH configuration; external
private keys are never generated or removed. The local SSH block writes
IdentityFile only for a managed deployment key.
Existing <profile>/restate-infrastructure.tfstate is refused before
compute mutation. Do not remove it to bypass this check: migrate ownership
explicitly or destroy the old deployment through its original version first.
Unreadable state and provider mismatches fail closed.
The default adapter remains digitalocean. The node requests TCP22/80/443;
Restate ingress, admin and fabric ports remain private to Compose.
Safety
- Keep credentials in gitignored
.envrc.privateasCOLORS_PAR_*variables. - Never set
COLORS_PAR_PROFILEor edit/commit.colors/. - Keep
compute-prevent-destroy: true; deletion requires separate explicit authorization and a one-run environment override. - Build and dry-run before a real create; neither reads
~/.sshor the state backend. - Never publish Restate ports 8080, 9070, or 5122.
./green build
./green create --dry-run
./green create
Real create includes public HTTPS and reboot-during-delay acceptance checks.