@appliance.sh/api-server 1.7.0 → 1.9.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appliance.sh/api-server",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "description": "",
   "author": "Eliot Lim",
   "repository": "https://github.com/appliance-sh/appliance.sh",
@@ -23,8 +23,8 @@
     "@nestjs/common": "^11.0.1",
     "@nestjs/core": "^11.0.1",
     "@nestjs/platform-express": "^11.0.1",
-    "@pulumi/aws": "^6.56.0",
-    "@pulumi/pulumi": "^3.150.0",
+    "@pulumi/aws": "^7.15.0",
+    "@pulumi/pulumi": "^3.213.0",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.8.1"
   },

package/src/pulumi/ApplianceStack.ts

@@ -0,0 +1,86 @@
+import * as pulumi from '@pulumi/pulumi';
+import * as aws from '@pulumi/aws';
+
+export interface ApplianceStackArgs {
+  tags?: Record<string, string>;
+}
+
+export interface ApplianceStackOpts extends pulumi.ComponentResourceOptions {
+  globalProvider: aws.Provider;
+  provider: aws.Provider;
+}
+
+export class ApplianceStack extends pulumi.ComponentResource {
+  lambdaRole: aws.iam.Role;
+  lambdaRolePolicy: aws.iam.Policy;
+  lambda: aws.lambda.Function;
+  lambdaUrl: aws.lambda.FunctionUrl;
+
+  constructor(name: string, args: ApplianceStackArgs, opts: ApplianceStackOpts) {
+    super('appliance:aws:ApplianceStack', name, args, opts);
+
+    const defaultOpts = { parent: this, provider: opts.provider };
+    const defaultTags = { stack: name, managed: 'appliance', ...args.tags };
+
+    this.lambdaRole = new aws.iam.Role(`${name}-role`, {
+      path: `/appliance/${name}/`,
+      assumeRolePolicy: aws.iam.assumeRolePolicyForPrincipal({ Service: 'lambda.amazonaws.com' }),
+      tags: defaultTags,
+    });
+
+    this.lambdaRolePolicy = new aws.iam.Policy(`${name}-policy`, {
+      path: `/appliance/${name}/`,
+      policy: {
+        Version: '2012-10-17',
+        Statement: [{ Effect: 'Allow', Action: 'logs:CreateLogGroup', Resource: '*' }],
+      },
+    });
+
+    new aws.iam.RolePolicyAttachment(`${name}-role-policy-attachment`, {
+      role: this.lambdaRole.name,
+      policyArn: this.lambdaRolePolicy.arn,
+    });
+
+    this.lambda = new aws.lambda.CallbackFunction(
+      `${name}-handler`,
+      {
+        runtime: 'nodejs22.x',
+        callback: async () => {
+          return { statusCode: 200, body: JSON.stringify({ message: 'Hello world!' }) };
+        },
+        tags: defaultTags,
+      },
+      defaultOpts
+    );
+
+    // lambda url
+    this.lambdaUrl = new aws.lambda.FunctionUrl(
+      `${name}-url`,
+      {
+        functionName: this.lambda.name,
+        authorizationType: 'NONE',
+      },
+      defaultOpts
+    );
+
+    new aws.lambda.Permission(`${name}-url-invoke-url-permission`, {
+      function: this.lambda.name,
+      action: 'lambda:InvokeFunctionUrl',
+      principal: '*',
+      functionUrlAuthType: 'NONE',
+      statementId: 'FunctionURLAllowPublicAccess',
+    });
+
+    new aws.lambda.Permission(`${name}-url-invoke-lambda-permission`, {
+      function: this.lambda.name,
+      action: 'lambda:InvokeFunction',
+      principal: '*',
+      statementId: 'FunctionURLAllowInvokeAction',
+    });
+
+    this.registerOutputs({
+      lambda: this.lambda,
+      lambdaUrl: this.lambdaUrl,
+    });
+  }
+}

package/src/pulumi/pulumi.service.ts

@@ -3,6 +3,7 @@ import * as path from 'node:path';
 import * as fs from 'node:fs';
 import * as auto from '@pulumi/pulumi/automation';
 import * as aws from '@pulumi/aws';
+import { ApplianceStack } from './ApplianceStack';
 
 export type PulumiAction = 'deploy' | 'destroy';
 
@@ -28,12 +29,32 @@ export class PulumiService {
 
   private inlineProgram() {
     return async () => {
+      const name = 'appliance';
+      const regionalProvider = new aws.Provider(`${name}-regional`, {
+        region: 'ap-southeast-1',
+      });
+      const globalProvider = new aws.Provider(`${name}-global`, {
+        region: 'us-east-1',
+      });
+
+      const applianceStack = new ApplianceStack(
+        `${name}-stack`,
+        {
+          tags: { project: name },
+        },
+        {
+          globalProvider,
+          provider: regionalProvider,
+        }
+      );
+
       const bucket = new aws.s3.Bucket('dummy-bucket', {
         forceDestroy: true,
         versioning: { enabled: true },
         tags: { app: 'appliance-api' },
       });
       return {
+        applianceStack,
         bucketName: bucket.bucket,
       };
     };