@ankhorage/infra 0.4.2 → 1.0.0

package/src/adapters/minikube/authz/cerbos/index.ts

@@ -2,19 +2,40 @@ import type { AppManifest, NavigatorSpec, RouteDefinition } from '@ankhorage/con
 import { resolveAuthFlow } from '@ankhorage/contracts/auth';
 
 import type { InfraManifestInput } from '../../../../types';
-import type { MinikubeAdapterArtifacts } from '../../contracts';
+import type { MinikubeAdapterArtifacts, MinikubeProviderLifecycle } from '../../contracts';
+
+const CERBOS_NAMESPACE = 'cerbos';
 
 export function generateCerbosAuthzArtifacts(args: {
   manifest: InfraManifestInput;
   namespace: string;
   appManifest?: CerbosAppManifest;
 }): MinikubeAdapterArtifacts {
-  const { manifest, namespace, appManifest } = args;
+  const { manifest, appManifest } = args;
+  const namespace = CERBOS_NAMESPACE;
 
   const root = 'infra/minikube/k8s/authz/cerbos';
   const resourceRoot = 'authz/cerbos';
   const intent = buildCerbosPolicyIntent({ manifest, appManifest });
 
+  const endpointUrl = `http://cerbos.${namespace}.svc.cluster.local:3592`;
+  const lifecycle: MinikubeProviderLifecycle = {
+    id: 'cerbos',
+    namespace,
+    endpoints: [{ name: 'http', url: endpointUrl }],
+    readinessChecks: [
+      {
+        label: 'cerbos',
+        namespace,
+        resource: 'deployment/cerbos',
+        timeoutSeconds: 180,
+      },
+    ],
+    migrationCommands: [],
+    reconciliationCommands: [],
+    statusChecks: [],
+  };
+
   return {
     files: [
       {
@@ -40,7 +61,8 @@ export function generateCerbosAuthzArtifacts(args: {
       `${resourceRoot}/cerbos.deployment.yaml`,
       `${resourceRoot}/cerbos.service.yaml`,
     ],
-    envEntries: ['CERBOS_URL=http://cerbos:3592'],
+    providerLifecycle: [lifecycle],
+    envEntries: [`CERBOS_URL=${endpointUrl}`],
     warnings: [],
   };
 }