@appliance.sh/infra 1.12.0 → 1.13.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appliance.sh/infra",
-  "version": "1.12.0",
+  "version": "1.13.0",
   "description": "Deploy the Appliance Infrastructure",
   "repository": "https://github.com/appliance-sh/appliance.sh",
   "license": "MIT",

package/src/lib/appliance-infra.ts

@@ -36,7 +36,7 @@ export async function applianceInfra() {
     const applianceBase = new baseController(
       `${base}`,
       // eslint-disable-next-line @typescript-eslint/no-explicit-any
-      { config: baseConfig.data as any },
+      { config: baseConfig.data },
       {
         globalProvider: baseGlobalProvider,
         provider: baseRegionalProvider,

package/src/lib/aws/ApplianceBaseAwsPublic.ts

@@ -2,10 +2,10 @@ import * as pulumi from '@pulumi/pulumi';
 import * as aws from '@pulumi/aws';
 import * as awsNative from '@pulumi/aws-native';
 
-import { ApplianceBaseAwsPublicInput } from '@appliance.sh/sdk';
+import { ApplianceBaseConfigInput, ApplianceBaseType } from '@appliance.sh/sdk';
 
 export type ApplianceBaseAwsPublicArgs = {
-  config: ApplianceBaseAwsPublicInput;
+  config: ApplianceBaseConfigInput;
 };
 
 export interface ApplianceBaseAwsPublicOpts extends pulumi.ComponentResourceOptions {
@@ -21,9 +21,15 @@ export class ApplianceBaseAwsPublic extends pulumi.ComponentResource {
   public readonly certificateArn?: pulumi.Output<string>;
   public readonly cloudfrontDistribution?: aws.cloudfront.Distribution;
 
+  public readonly config;
+
   constructor(name: string, args: ApplianceBaseAwsPublicArgs, opts?: ApplianceBaseAwsPublicOpts) {
     super('appliance-infra:appliance-base-aws-public', name, args, opts);
 
+    if (args.config.type !== ApplianceBaseType.ApplianceAwsPublic) {
+      throw new Error('Invalid config');
+    }
+
     if (args.config.dns.createZone) {
       this.zone = new aws.route53.Zone(
         `${name}-zone`,
@@ -91,6 +97,33 @@ export class ApplianceBaseAwsPublic extends pulumi.ComponentResource {
       ).arn;
     }
 
+    const state = new aws.s3.Bucket(
+      `${name}-state`,
+      {
+        acl: 'private',
+        forceDestroy: true,
+      },
+      { parent: this, provider: opts?.provider }
+    );
+
+    new aws.s3.BucketVersioning(
+      `${name}-state-versioning`,
+      {
+        bucket: state.bucket,
+        versioningConfiguration: { status: 'Enabled' },
+      },
+      { parent: this, provider: opts?.provider }
+    );
+
+    new aws.s3.BucketServerSideEncryptionConfiguration(
+      `${name}-state-sse`,
+      {
+        bucket: state.bucket,
+        rules: [{ applyServerSideEncryptionByDefault: { sseAlgorithm: 'AES256' } }],
+      },
+      { parent: this, provider: opts?.provider }
+    );
+
     const lambdaOrigin = new aws.lambda.CallbackFunction(
       `${name}-origin`,
       {
@@ -224,5 +257,24 @@ export class ApplianceBaseAwsPublic extends pulumi.ComponentResource {
       },
       { parent: this, provider: opts?.globalProvider }
     );
+
+    this.config = {
+      name: name,
+      region: args.config.region,
+      stateBackendUrl: pulumi.interpolate`s3://${state.bucket}`,
+      domainName: args.config.dns.domainName,
+    };
+
+    new aws.ssm.Parameter(
+      `${name}-base-config`,
+      {
+        name: `/appliance/base/${name}/config`,
+        type: 'SecureString',
+        value: pulumi.jsonStringify(this.config),
+      },
+      { parent: this, provider: opts?.provider }
+    );
+
+    this.registerOutputs(this.config);
   }
 }

package/src/lib/aws/ApplianceBaseAwsVpc.ts

@@ -1,8 +1,8 @@
 import * as pulumi from '@pulumi/pulumi';
-import { ApplianceBaseAwsVpcInput } from '@appliance.sh/sdk';
+import { ApplianceBaseConfigInput, ApplianceBaseType } from '@appliance.sh/sdk';
 
 export type ApplianceBaseAwsVpcArgs = {
-  config: ApplianceBaseAwsVpcInput;
+  config: ApplianceBaseConfigInput;
 };
 
 export interface ApplianceBaseAwsVpcOpts extends pulumi.ComponentResourceOptions {
@@ -14,5 +14,9 @@ export interface ApplianceBaseAwsVpcOpts extends pulumi.ComponentResourceOptions
 export class ApplianceBaseAwsVpc extends pulumi.ComponentResource {
   constructor(name: string, args: ApplianceBaseAwsVpcArgs, opts?: ApplianceBaseAwsVpcOpts) {
     super('appliance-infra:appliance-base-aws-vpc', name, args, opts);
+
+    if (args.config.type !== ApplianceBaseType.ApplianceAwsVpc) {
+      throw new Error('Invalid config');
+    }
   }
 }