@aws-cdk/lambda-layer-kubectl-v33 2.0.0

package/layer/.dockerignore

@@ -0,0 +1 @@
+build.sh

package/layer/Dockerfile

@@ -0,0 +1,49 @@
+# base lambda image
+FROM public.ecr.aws/lambda/provided:latest
+
+#
+# versions
+#
+
+ARG KUBECTL_VERSION=1.33.0
+ARG HELM_VERSION=3.18.0
+
+USER root
+RUN mkdir -p /opt
+WORKDIR /tmp
+
+#
+# tools
+#
+
+RUN dnf update -y \
+    && dnf install -y zip unzip wget tar gzip
+
+#
+# kubectl
+#
+
+RUN mkdir -p /opt/kubectl
+RUN cd /opt/kubectl && curl -LO "https://dl.k8s.io/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl"
+RUN chmod +x /opt/kubectl/kubectl
+RUN /opt/kubectl/kubectl config view
+
+#
+# helm
+#
+
+RUN mkdir -p /tmp/helm && wget -qO- https://get.helm.sh/helm-v${HELM_VERSION}-linux-amd64.tar.gz | tar -xvz -C /tmp/helm
+RUN mkdir -p /opt/helm && cp /tmp/helm/linux-amd64/helm /opt/helm/helm
+RUN /opt/helm/helm version
+
+#
+# create the bundle
+#
+
+RUN cd /opt \
+    && zip --symlinks -r ../layer.zip * \
+    && echo "/layer.zip is ready" \
+    && ls -alh /layer.zip;
+
+WORKDIR /
+ENTRYPOINT [ "/bin/bash" ]

package/layer/build.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+set -euo pipefail
+
+cd $(dirname $0)
+
+mkdir -p ../lib
+
+echo ">> Building AWS Lambda layer inside a docker image..."
+
+TAG='aws-lambda-layer'
+
+docker build -t ${TAG} .
+
+echo ">> Extrating layer.zip from the build container..."
+CONTAINER=$(docker run -d ${TAG} false)
+docker cp ${CONTAINER}:/layer.zip ../lib/layer.zip
+
+echo ">> Stopping container..."
+docker rm -f ${CONTAINER}
+echo ">> lib/layer.zip is ready"

package/lib/_asset.d.ts

@@ -0,0 +1,2 @@
+export declare const ASSET_FILE: string;
+export declare function assetHash(): string;

package/lib/_asset.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ASSET_FILE = void 0;
+exports.assetHash = assetHash;
+const crypto = require("crypto");
+const fs = require("fs");
+const path = require("path");
+exports.ASSET_FILE = path.join(__dirname, 'layer.zip');
+// we hash the Dockerfile (it contains the tools versions) because hashing the zip is non-deterministic
+function assetHash() {
+    // This could be calculated at build time
+    return hashFile(path.join(__dirname, '..', 'layer', 'Dockerfile'));
+}
+function hashFile(fileName) {
+    return crypto
+        .createHash('sha256')
+        .update(fs.readFileSync(fileName))
+        .digest('hex');
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/index.d.ts

@@ -0,0 +1 @@
+export * from './kubectl-layer';

package/lib/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./kubectl-layer"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLGtEQUFnQyIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gJy4va3ViZWN0bC1sYXllcic7XG4iXX0=

package/lib/kubectl-layer.d.ts

@@ -0,0 +1,8 @@
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import { Construct } from 'constructs';
+/**
+ * A CDK Asset construct that contains `kubectl` and `helm`.
+ */
+export declare class KubectlV33Layer extends lambda.LayerVersion {
+    constructor(scope: Construct, id: string);
+}

package/lib/kubectl-layer.js

@@ -0,0 +1,25 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KubectlV33Layer = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const lambda = require("aws-cdk-lib/aws-lambda");
+const _asset_1 = require("./_asset");
+/**
+ * A CDK Asset construct that contains `kubectl` and `helm`.
+ */
+class KubectlV33Layer extends lambda.LayerVersion {
+    constructor(scope, id) {
+        super(scope, id, {
+            code: lambda.Code.fromAsset(_asset_1.ASSET_FILE, {
+                assetHash: (0, _asset_1.assetHash)(),
+            }),
+            description: '/opt/kubectl/kubectl 1.33.0; /opt/helm/helm 3.18.0',
+            license: 'Apache-2.0',
+        });
+    }
+}
+exports.KubectlV33Layer = KubectlV33Layer;
+_a = JSII_RTTI_SYMBOL_1;
+KubectlV33Layer[_a] = { fqn: "@aws-cdk/lambda-layer-kubectl-v33.KubectlV33Layer", version: "2.0.0" };
+//# sourceMappingURL=data:application/json;base64,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

package/new-kubectl-layer.sh

@@ -0,0 +1,115 @@
+#!/bin/bash
+# First argument should be kubectl version we're bumping to
+# Second argument should be helm version we're bumping to
+set -euo pipefail
+
+PREV_KUBECTL_VERSION=$(echo "$1 - 1" | bc)
+PREV_HELM_VERSION=$(echo "$2 - 1" | bc)
+
+echo "Before running this script, please ensure you have signed in and have valid AWS credentials, and that your Docker daemon is running."
+read -p "Do you have valid credentials in your account && Docker daemon is running?  (Y/n)" hasValidCreds
+if [[ "$hasValidCreds" =~ ^[nN]$ ]]; then
+  echo "Please obtain valid AWS credentials before running this script. Terminating..."
+  exit 1
+fi
+
+# Check if previous version branch exists
+if ! git rev-parse --verify "kubectl-v$PREV_KUBECTL_VERSION/main" >/dev/null 2>&1; then
+  echo "Error: kubectl-v$PREV_KUBECTL_VERSION does not exist. Cannot produce kubectl-v$1"
+  exit 1
+fi
+
+# Check if kubectl version exists
+echo "Checking if kubectl v$1 exists..."
+if ! curl -L -f -s "https://dl.k8s.io/v1.$1.0/bin/linux/amd64/kubectl" > /dev/null; then
+  echo "Error: kubectl v$1 does not exist at https://dl.k8s.io"
+  exit 1
+fi
+echo "It does!"
+
+# Check if corresponding helm version exists
+echo "Checking if Helm v$2 exists..."
+if ! curl -L -f -s "https://get.helm.sh/helm-v3.$2.0-linux-amd64.tar.gz" > /dev/null; then
+  echo "Error: Helm v$2 does not exist at https://dl.k8s.io"
+  exit 1
+fi
+echo "It does!"
+
+echo "Bumping from Kubectl v$PREV_KUBECTL_VERSION to Kubectl v$1..."
+git clean -fqdx .
+
+# Install dependencies
+yarn install --frozen-lockfile
+
+# Make a new branch and clean it
+git checkout -b kubectl-v${1}/main kubectl-v$PREV_KUBECTL_VERSION/main
+
+# Define files to update
+files=(
+  "README.md"
+  "layer/Dockerfile" 
+  "src/kubectl-layer.ts"
+  "test/kubectl-layer.test.ts"
+  "test/kubectl-layer.integ.ts"
+)
+
+# Define patterns and replacements
+patterns=(
+  "s/1.$PREV_KUBECTL_VERSION\.[0-9]/1.$1.0/g"
+  "s/3.$PREV_HELM_VERSION\.[0-9]/3.$2.0/g"
+  "s/KubectlV${PREV_KUBECTL_VERSION}Layer/KubectlV${1}Layer/g"
+  "s/KubeCtl v1.$PREV_KUBECTL_VERSION/KubeCtl v1.$1/"  # this one only in README.md
+)
+
+# Update .projenrc.ts
+echo "Updating .projenrc.ts..."
+sed -i "" "s/SPEC_VERSION = '$PREV_KUBECTL_VERSION'/SPEC_VERSION = '$1'/" .projenrc.ts
+
+# Update the other files
+for file in "${files[@]}"; do
+  echo "Updating $file..."
+  for pattern in "${patterns[@]}"; do
+    sed -i "" "$pattern" "$file"
+  done
+done
+
+echo "All files updated."
+
+# Run npx projen commands and ensure everything properly builds
+echo "Compiling..."
+npx projen compile
+echo "Running npx projen..."
+npx projen
+echo "Building..."
+npx projen pre-compile
+echo "Deploying integ test..."
+if ! yes | npx projen integ:kubectl-layer:deploy; then
+  echo "Command failed, but continuing script execution..."  # May fail due to notices, as "destroy" doesn't use --no-notices
+fi
+echo "Checking that the snapshot was updated..."
+if ! npx projen integ:kubectl-layer:assert; then
+  echo "It was not. Updating now..."
+  npx projen integ:kubectl-layer:snapshot
+fi
+echo "Verifying build..."
+if ! yarn build; then
+  echo "The build has failed. Please review the error messages above and determine if it is due to your local environment."
+  read -p "A PR will be created. Please ensure the 'build' test on that passes before merging. Press enter to continue."
+fi
+
+# Remind user to make a new branch in go library as well
+echo "Please visit $(tput setaf 3)https://github.com/cdklabs/awscdk-asset-kubectl/branches$(tput sgr0) and create a new branch titled '$(tput setaf 3)kubectl-v$1/main$(tput sgr0)'."
+read -p "Press Enter to continue..."
+
+echo "Please visit $(tput setaf 3)https://github.com/cdklabs/awscdk-kubectl-go/branches$(tput sgr0) and create a new branch titled '$(tput setaf 3)kubectl.$1$(tput sgr0)'."
+read -p "Press Enter to continue..."
+
+# Commit changes and push PR
+git add .
+git commit -m "feat: support v1.$1"
+git push origin kubectl-v${1}/main
+echo "=========="
+echo "Please visit the link above and open your pull request. Ensure the PR passes all stages of execution and all tests pass."
+echo "Take caution that you are targeting the correct upstream branch (kubectl-v$1/main). Please also ensure one other engineer approves of the changes before merging in."
+echo "⚠️ATTENTION⚠️ when the new version merges in, UPDATE THE REPOSITORY'S DEFAULT BRANCH TO THAT VERSION (kubectl-v$1/main)."
+echo "Thank you for your contribution!"

package/package.json

@@ -0,0 +1,160 @@
+{
+  "name": "@aws-cdk/lambda-layer-kubectl-v33",
+  "description": "A Lambda Layer that contains kubectl v1.33",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/cdklabs/awscdk-asset-kubectl.git"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "clobber": "npx projen clobber",
+    "compat": "npx projen compat",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "docgen": "npx projen docgen",
+    "eject": "npx projen eject",
+    "eslint": "npx projen eslint",
+    "integ:kubectl-layer:assert": "npx projen integ:kubectl-layer:assert",
+    "integ:kubectl-layer:deploy": "npx projen integ:kubectl-layer:deploy",
+    "integ:kubectl-layer:destroy": "npx projen integ:kubectl-layer:destroy",
+    "integ:kubectl-layer:snapshot": "npx projen integ:kubectl-layer:snapshot",
+    "integ:kubectl-layer:watch": "npx projen integ:kubectl-layer:watch",
+    "integ:snapshot-all": "npx projen integ:snapshot-all",
+    "package": "npx projen package",
+    "package-all": "npx projen package-all",
+    "package:dotnet": "npx projen package:dotnet",
+    "package:go": "npx projen package:go",
+    "package:java": "npx projen package:java",
+    "package:js": "npx projen package:js",
+    "package:python": "npx projen package:python",
+    "post-compile": "npx projen post-compile",
+    "post-upgrade": "npx projen post-upgrade",
+    "pre-compile": "npx projen pre-compile",
+    "release:kubectl-v33/main": "npx projen release:kubectl-v33/main",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "upgrade": "npx projen upgrade",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "email": "aws-cdk-dev@amazon.com",
+    "organization": false
+  },
+  "devDependencies": {
+    "@stylistic/eslint-plugin": "^2",
+    "@types/jest": "^27",
+    "@types/node": "^16 <= 16.18.78",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "aws-cdk": "^2",
+    "aws-cdk-lib": "2.94.0",
+    "commit-and-tag-version": "^12",
+    "constructs": "10.0.5",
+    "eslint": "^9",
+    "eslint-import-resolver-typescript": "^3.10.1",
+    "eslint-plugin-import": "^2.31.0",
+    "jest": "^27",
+    "jest-junit": "^16",
+    "jsii": "~5.6.0",
+    "jsii-diff": "^1.112.0",
+    "jsii-docgen": "^10.5.0",
+    "jsii-pacmak": "^1.112.0",
+    "jsii-rosetta": "~5.6.0",
+    "projen": "^0.92.6",
+    "ts-jest": "^27",
+    "ts-node": "^10.9.2",
+    "typescript": "^4.9.5"
+  },
+  "peerDependencies": {
+    "aws-cdk-lib": "^2.94.0",
+    "constructs": "^10.0.5"
+  },
+  "keywords": [
+    "cdk"
+  ],
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/cdklabs/awscdk-asset-kubectl#readme",
+  "publishConfig": {
+    "access": "public"
+  },
+  "version": "2.0.0",
+  "jest": {
+    "coverageProvider": "v8",
+    "testMatch": [
+      "<rootDir>/@(src|test)/**/*(*.)@(spec|test).ts?(x)",
+      "<rootDir>/@(src|test)/**/__tests__/**/*.ts?(x)",
+      "<rootDir>/@(projenrc)/**/*(*.)@(spec|test).ts?(x)",
+      "<rootDir>/@(projenrc)/**/__tests__/**/*.ts?(x)"
+    ],
+    "clearMocks": true,
+    "collectCoverage": true,
+    "coverageReporters": [
+      "json",
+      "lcov",
+      "clover",
+      "cobertura",
+      "text"
+    ],
+    "coverageDirectory": "coverage",
+    "coveragePathIgnorePatterns": [
+      "/node_modules/"
+    ],
+    "testPathIgnorePatterns": [
+      "/node_modules/"
+    ],
+    "watchPathIgnorePatterns": [
+      "/node_modules/"
+    ],
+    "reporters": [
+      "default",
+      [
+        "jest-junit",
+        {
+          "outputDirectory": "test-reports"
+        }
+      ]
+    ],
+    "preset": "ts-jest",
+    "globals": {
+      "ts-jest": {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    }
+  },
+  "types": "lib/index.d.ts",
+  "stability": "stable",
+  "jsii": {
+    "outdir": "dist",
+    "targets": {
+      "java": {
+        "package": "software.amazon.awscdk.cdk.lambdalayer.kubectl.v33",
+        "maven": {
+          "groupId": "software.amazon.awscdk",
+          "artifactId": "cdk-lambda-layer-kubectl-v33"
+        }
+      },
+      "python": {
+        "distName": "aws-cdk.lambda-layer-kubectl-v33",
+        "module": "aws_cdk.lambda_layer_kubectl_v33"
+      },
+      "dotnet": {
+        "namespace": "Amazon.CDK.LambdaLayer.KubectlV33",
+        "packageId": "Amazon.CDK.LambdaLayer.KubectlV33"
+      },
+      "go": {
+        "moduleName": "github.com/cdklabs/awscdk-kubectl-go",
+        "packageName": "kubectlv33"
+      }
+    },
+    "tsc": {
+      "outDir": "lib",
+      "rootDir": "src"
+    }
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.ts and run \"npx projen\"."
+}