@codiac.io/codiac-cli 1.2.157 → 1.2.165

package/lib/uilogic/cloud-resource-configurators/azure-resource-configurator.js

@@ -1,782 +1,782 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AzureResourceConfigurator = exports.NonEmptyValidator = exports.RegExValidator = void 0;
-const tslib_1 = require("tslib");
-const inversify_1 = require("inversify");
-const _ = require("lodash");
-const cli_tools_1 = require("@codiac.io/cli-tools");
-const codiac_common_1 = require("@codiac.io/codiac-common");
-const contracts_1 = require("../../apis/codiac-api/contracts");
-const codiac_relay_1 = require("../../apis/codiac-relay");
-const extended_relay_client_1 = require("../../relay/extended-relay-client");
-const contracts_2 = require("../../relay/contracts/contracts");
-const codiac_ops_common_1 = require("@codiac.io/codiac-ops-common");
-const cli_common_1 = require("../../cli-common");
-const image_registry_1 = require("@codiac.io/codiac-domain/image-registry");
-const cluster_def_1 = require("@codiac.io/codiac-domain/cluster-def");
-const security_account_1 = require("@codiac.io/codiac-domain/security-account");
-const codiac_constants_1 = require("../../codiac-constants");
-const DEFAULT_STARTING_NODE_COUNT = 2;
-/** Parameters by which to validate a string with a regular expression. */
-class RegExValidator {
-    constructor(rx, whyInvalid, allowUndefined = false) {
-        this.rx = rx;
-        this.whyInvalid = whyInvalid;
-        this.allowUndefined = allowUndefined;
-    }
-    isValid(candidate) {
-        let result = { isValid: false };
-        if (candidate === undefined || candidate === "") {
-            result.isValid = this.allowUndefined;
-        }
-        else {
-            result.isValid = this.rx.test(candidate);
-        }
-        if (!result.isValid) {
-            result.whyInvalid = this.whyInvalid;
-        }
-        return result;
-    }
-}
-exports.RegExValidator = RegExValidator;
-;
-/** Disallows undefined or whitespace */
-class NonEmptyValidator {
-    constructor(whyInvalid) {
-        this.whyInvalid = whyInvalid;
-    }
-    isValid(candidate) {
-        var _a;
-        let result = { isValid: false };
-        result.isValid = Boolean(candidate !== undefined && candidate.replace(/\s+/, "") !== "");
-        if (!result.isValid) {
-            result.whyInvalid = (_a = this.whyInvalid) !== null && _a !== void 0 ? _a : "Value must not be null or whitespace";
-        }
-        return result;
-    }
-}
-exports.NonEmptyValidator = NonEmptyValidator;
-/** Walks the user through the selection of an existing
- * or the declaration of a new image registry.
- */
-let AzureResourceConfigurator = class AzureResourceConfigurator {
-    constructor(relayClient, genRelayClient, codiacUser, _ui, _styler, logger) {
-        this.relayClient = relayClient;
-        this.genRelayClient = genRelayClient;
-        this.codiacUser = codiacUser;
-        this._ui = _ui;
-        this._styler = _styler;
-        this.logger = logger;
-        this.cloudProvider = contracts_1.CloudProviderEnum.azure;
-        /** Currently supporting only a single reg type per cloud provider. */
-        this.regType = contracts_1.ImageRegistryTypes.AzureCr;
-        /** Validates the given name for use as the name of an entity in Azure.
-         *
-         * 1-50
-         * alphanumerics and hyphens,
-         * starting with a letter and ending with an alphanumeric.
-         *
-         * @see https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules
-         */
-        this.azServiceNameValidator = new RegExValidator(/^[a-zA-Z]([\w-]{0,48}\w)?$/, "must be 1-50 alphanumerics or hyphens, starting with a letter, ending with alphanumeric", false);
-        /** Validates the given name for use as the name of an entity in Azure.
-         *
-         *  1-90
-         *  Underscores, hyphens, periods, and letters or digits as defined by the Char.IsLetterOrDigit function.
-         *
-         *  Valid characters are members of the following categories in UnicodeCategory:
-         *  UppercaseLetter,
-         *  LowercaseLetter,
-         *  TitlecaseLetter,
-         *  ModifierLetter,
-         *  OtherLetter,
-         *  DecimalDigitNumber.
-         *
-         *  Can't end with period.
-         *
-         * NOTE: the azure portal says Parentheses `()` are also valid characters in a resource group name.
-         *
-         * @see https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftresources
-         */
-        this.azRgNameValidator = new RegExValidator(/^[a-zA-Z\d_\-\(\)\.]{0,89}[a-zA-Z\d_\-\(\)]$/, "must be 1-90 alphanumerics, hyphens, periods, or parentheses, not ending with a period", false);
-        /** Validates the given name for use as the name of a userAssignedIdentity in Azure.
-         *
-         * 3-128 Alphanumerics, hyphens, and underscores,
-         * starting with a letter or number.
-         *
-         * @see https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftmanagedidentity
-         */
-        this.azIdentityNameValidator = new RegExValidator(/^[a-zA-Z\d][a-zA-Z\d_\-]{0,127}$/, "must be 3-128 alphanumerics, hyphens, or underscores, starting with a letter or number", true);
-        this.cliExec = new cli_tools_1.CliExec(this.logger);
-    }
-    /* ***********************************************************************************
-    *   _                 _
-    *  | |               (_)
-    *  | |     ___   __ _ _ _ __
-    *  | |    / _ \ / _` | | '_ \
-    *  | |___| (_) | (_| | | | | |
-    *  \_____/\___/ \__, |_|_| |_|
-    *                __/ |
-    *               |___/
-    *
-    * ************************************************************************************/
-    promptToLogin(providerSubscriptionId, suppressConfirmations, providedUserName, providedSecret) {
-        var _a, _b;
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            try {
-                let isAuthed = false;
-                let userName = undefined;
-                let secret = undefined;
-                if (!suppressConfirmations) {
-                    this._ui.userMessage(`Enter your credentials for ${this._styler.hilite(this.cloudProvider)}`);
-                    userName = yield this._ui.prompt('regUsername', "Username (Hit enter if using a token):", false);
-                    if (userName === undefined || userName === "")
-                        userName = "<token>"; // TODO: make username nullable on the authPvd, so this becomes the job of the auth provider
-                    secret = yield this._ui.promptPassword('regSecret', `Password (or token):`);
-                }
-                else {
-                    if (!providedUserName || !providedSecret)
-                        throw new Error("Must provide cloud provider username/pwd to login silent mode");
-                    userName = providedUserName;
-                    secret = providedSecret;
-                }
-                try {
-                    this._ui.startSpinner(`Authenticating with ${this.cloudProvider}...`);
-                    // let authResult = await this.relayClient.logIntoCloudProvider(this.cloudProvider, { Username: userName, Secret: secret });
-                    let authResult = yield this.genRelayClient.Call.csp_login({ providerCode: this.cloudProvider, username: userName, secret: secret });
-                    isAuthed = authResult !== undefined; // <-- because authenticate throws on failures.  // authResult.success;
-                    this._ui.stopSpinner("Success!");
-                }
-                catch (err) {
-                    this.logger.debug(`Error authenticating with ${this.cloudProvider}: ${(_a = err.name) !== null && _a !== void 0 ? _a : ""} ${(_b = err.message) !== null && _b !== void 0 ? _b : ""}`);
-                    this._ui.stopSpinner("Failed.");
-                }
-                if (isAuthed)
-                    this._ui.userMessage(`Logged into ${this._styler.hilite(this.cloudProvider)} as [${this._styler.hilite(userName !== null && userName !== void 0 ? userName : "token")}]`);
-                // let subxId = await this.promptForSubscriptionId(userName, providerSubscriptionId);
-                return [isAuthed, userName];
-            }
-            catch (err) {
-                throw err;
-            }
-        });
-    }
-    /* ***********************************************************************************
-    * ______           _     _
-    * | ___ \         (_)   | |
-    * | |_/ /___  __ _ _ ___| |_ _ __ _   _
-    * |    // _ \/ _` | / __| __| '__| | | |
-    * | |\ \  __/ (_| | \__ \ |_| |  | |_| |
-    * \_| \_\___|\__, |_|___/\__|_|   \__, |
-    *             __/ |                __/ |
-    *            |___/                |___/
-    *
-    * ***********************************************************************************/
-    captureImageRegistry() {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                var _a, _b, _c;
-                try {
-                    let registry;
-                    let azUser = yield this.relayClient.getCurrentUserFor(this.cloudProvider);
-                    // /* TODO: use this instead */ 
-                    // const loginResult = await this.genRelayClient.Call.get_current_user_for({ providerCode: this.cloudProvider });
-                    // if (loginResult.error) throw loginResult.error;
-                    // const azUser = loginResult.output;
-                    if (!azUser)
-                        throw new Error(`Cannot capture an azure container registry: No ${this.cloudProvider} account has been authenticated.`);
-                    // Select subscription from the ones the user has access to
-                    let subxId = yield this.promptForSubscriptionId(azUser);
-                    // Select a container registry
-                    this._ui.startSpinner(`Fetching Azure container registries `);
-                    let regResult = yield this.genRelayClient.Call.getAzureAcrs({ subscriptionId: subxId });
-                    let regs = (_a = regResult.output) !== null && _a !== void 0 ? _a : [];
-                    if (regResult.error) {
-                        this._ui.stopSpinner("Error!");
-                        // this.logger.warn(`Error retrieving container registries: ${regResult.error.message ?? regResult.message}`);
-                        throw regResult.error; // Gotta throw - we can't continue if they have no registries to choose from.
-                    }
-                    else {
-                        this._ui.stopSpinner(`${(_c = (_b = regResult.output) === null || _b === void 0 ? void 0 : _b.length) !== null && _c !== void 0 ? _c : 0} found.`);
-                        if (regs.length === 0) {
-                            throw new Error(`No registries found.`);
-                        }
-                    }
-                    let regChoices = regs.map(r => { return { name: `${r.name} (resource group: ${r.resourceGroup})`, value: r.id }; });
-                    let regId = (yield this._ui.promptSelect("reg", "Container Registry: ", regChoices));
-                    let reg = (regs.find(r => r.id === regId)); // The "!" operator is ok - We just selected from the list.
-                    // az acr list --query [].name --subscription 37dbb924-5ee5-470b-b2a3-187e9dea7008
-                    // select container registry (login, select subscription), then from that get the scope/registryUrl
-                    // let acrName = await this._ui.prompt<string>('scope', 'Name of the ACR: ', true, /* registry.scope || defaults.scope */);
-                    // // regCode = registry.scope;
-                    // let serverUrl = `${acrName}.azurecr.io`; // <---  HACK!!!!!  Replace this with an ACR selector!!! 
-                    registry = new image_registry_1.AzureContainerRegistry(reg.name, reg.resourceGroup, subxId, reg.location);
-                    // registry = new ImageRegistry(reg.name, reg.loginServer, this.cloudProvider, this.regType);
-                    resolve(registry);
-                }
-                catch (err) {
-                    reject(err);
-                }
-            }));
-        });
-    }
-    promptForSubscriptionId(azUser, defaultValue) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                var _a, _b;
-                let output;
-                try {
-                    let subxResult = yield this.genRelayClient.Call.getAzureSubscriptions({ azUser: azUser });
-                    if (subxResult.error) {
-                        this.logger.warn(`Error retrieving subscriptions: ${(_a = subxResult.error.message) !== null && _a !== void 0 ? _a : subxResult.message}`);
-                    }
-                    let subs = (_b = subxResult.output) !== null && _b !== void 0 ? _b : [];
-                    let found = subs.find(s => s.id === defaultValue);
-                    let keep = false;
-                    if (defaultValue && found) {
-                        keep = yield this._ui.promptConfirm("keepSubx", `Azure Subscription: ${this._styler.hilite(found.name)} (${defaultValue})`);
-                    }
-                    if (keep === true && defaultValue !== undefined) {
-                        output = defaultValue;
-                    }
-                    else {
-                        let choices = [];
-                        if (subs.length > 0) {
-                            choices = subs.filter(s => s.user.name === azUser)
-                                .map(s => { return { name: `${s.name} (...${s.id.substring(s.id.length - 4)})`, value: s.id }; });
-                            // choices = _.orderBy(choices, c => c.name);
-                            if (choices.length > 0) {
-                                output = (yield this._ui.promptSelect("subx", "Azure Subscription: ", choices));
-                            }
-                            else {
-                                this._ui.userMessage(`No Azure subscriptions found for the user [${azUser}].`);
-                                output = (yield this._ui.prompt("subx", "Azure Subscription Id: ", true, defaultValue));
-                            }
-                        }
-                        else {
-                            output = (yield this._ui.prompt("subx", "Azure Subscription Id: ", true, defaultValue));
-                        }
-                    }
-                    resolve(output);
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    /* ***********************************************************************************
-    *   _____ _           _
-    *  /  __ \ |         | |
-    *  | /  \/ |_   _ ___| |_ ___ _ __
-    *  | |   | | | | / __| __/ _ \ '__|
-    *  | \__/\ | |_| \__ \ ||  __/ |
-    *   \____/_|\__,_|___/\__\___|_|
-    *
-    *  ***********************************************************************************/
-    // For info on accessing the Azure Resource Manager REST api,
-    // see: https://docs.microsoft.com/en-us/rest/api/azure/#create-the-request
-    defineCluster(initial, defaults) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-                let output;
-                try {
-                    let workingModel = {};
-                    workingModel.provider = this.cloudProvider;
-                    workingModel.privateOwner = this.codiacUser.tenantCode;
-                    let isValid = true;
-                    // APPLY DEFAULTS FOR THIS CSP
-                    let switchedCsp = Boolean(defaults !== undefined && (defaults.provider !== this.cloudProvider));
-                    if (defaults === undefined || (defaults.provider !== this.cloudProvider)) {
-                        let defaultResult = yield this.genRelayClient.Call.getClusterDefaults({ provider: this.cloudProvider });
-                        if (defaultResult.error) {
-                            this.logger.warn(`Error retrieving defaults for ${this.cloudProvider} cluster: ${(_a = defaultResult.error.name) !== null && _a !== void 0 ? _a : ""} ${(_b = defaultResult.error.message) !== null && _b !== void 0 ? _b : ""}`);
-                        }
-                        defaults = (_c = defaultResult.output) !== null && _c !== void 0 ? _c : {}; // fall back to an empty object if we failed, so that we dont keep looking this up on subsequent calls.
-                        let assignment = (objVal, srcVal) => Boolean(srcVal === undefined) ? objVal : srcVal;
-                        if (switchedCsp) {
-                            initial = _.assignWith({}, defaults, workingModel, { name: initial.name }, assignment); // Throw out any prior cluster properties bc they were set for a diff provider.
-                        }
-                        else {
-                            initial = _.assignWith({}, defaults, initial, assignment);
-                        }
-                    }
-                    // while (cluster.name === undefined || isValid !== true) {
-                    workingModel.name = (yield this._ui.prompt("name", "Cluster Name: ", true, (_d = workingModel.name) !== null && _d !== void 0 ? _d : initial === null || initial === void 0 ? void 0 : initial.name, this.azServiceNameValidator));
-                    //   isValid = this.AZURE_SERVICE_NAME_VALIDATOR.regex.test(cluster.name);
-                    //   if (!isValid) {
-                    //     this._ui.userMessage(`INVALID: ${this.AZURE_SERVICE_NAME_VALIDATOR.desc}`)
-                    //   }
-                    // }
-                    // cluster.providerSubscription = (await this._ui.prompt("providerSubscription", "SubscriptionId: ", true, defaults?.providerSubscription))!;
-                    let azUser = yield this.relayClient.getCurrentUserFor(this.cloudProvider);
-                    if (!azUser)
-                        throw new Error(`Cannot define an azure cluster: No ${this.cloudProvider} account has been authenticated.`);
-                    // Select subscription from the ones the user has access to
-                    // TODO: ask to change before prompting the list
-                    workingModel.providerSubscription = yield this.promptForSubscriptionId(azUser, initial === null || initial === void 0 ? void 0 : initial.providerSubscription);
-                    // cluster.locationName = (await this._ui.prompt("locationName", "Location: ", true, defaults?.locationName))!;
-                    workingModel.locationName = (yield this.promptForLocation(initial === null || initial === void 0 ? void 0 : initial.locationName));
-                    workingModel.providerGroup = yield this.promptForResourceGroup(workingModel.providerSubscription, workingModel.locationName, ((_e = initial === null || initial === void 0 ? void 0 : initial.providerGroup) !== null && _e !== void 0 ? _e : ((_f = workingModel.name) !== null && _f !== void 0 ? _f : initial === null || initial === void 0 ? void 0 : initial.name)) ? `${(_g = workingModel.name) !== null && _g !== void 0 ? _g : initial === null || initial === void 0 ? void 0 : initial.name}-rg` : undefined);
-                    // Generic cluster properties...
-                    // TODO: promptSelect for Vnet and Subnet
-                    // cluster.subnet = (await this._ui.prompt("subnet", "Subnet: ", false, defaults?.subnet));
-                    workingModel.subnet = yield this.promptForVnetSubnet(workingModel.providerSubscription, workingModel.locationName, initial === null || initial === void 0 ? void 0 : initial.subnet);
-                    // TODO: promptSelect for nodeSpec
-                    workingModel.nodeSpec = yield this.promptForNodeSpec(workingModel.locationName, initial === null || initial === void 0 ? void 0 : initial.nodeSpec);
-                    // cluster.nodePools = (await this._ui.prompt("winNodePool", "Add Windows node pool: ", false, false)) ? cluster.nodePools : [];
-                    workingModel.startingNodeCount = (yield this._ui.prompt("startingNodeCount", "Qty nodes: ", true, (_h = initial === null || initial === void 0 ? void 0 : initial.startingNodeCount) !== null && _h !== void 0 ? _h : DEFAULT_STARTING_NODE_COUNT));
-                    // TODO: Set default from AKS (mark it in list, too)
-                    // TODO: ask to change before prompting the list
-                    workingModel.k8sVersion = yield this.promptForK8sVersion(workingModel.locationName, initial === null || initial === void 0 ? void 0 : initial.k8sVersion);
-                    workingModel.ingressDef = initial === null || initial === void 0 ? void 0 : initial.ingressDef;
-                    // --------------------------------------------------------------------------------------------------------------------------------------
-                    // Azure-specific properties...
-                    // Cluster identity (Service Principal / Managed Identity)
-                    let identityPak = yield this.promptForClusterIdentity(workingModel.name, initial === null || initial === void 0 ? void 0 : initial.identityInstance);
-                    if (identityPak) {
-                        workingModel.identityInstance = identityPak.instance;
-                        workingModel.identitySpec = identityPak.spec;
-                    }
-                    else {
-                        // User chose auto-create (we'd be better off setting this default in the cluster create in the relay, not here)
-                        workingModel.identitySpec = {
-                            type: cluster_def_1.ClusterDefConstants.DEFAULT_IDENTITY_TYPE,
-                            name: cluster_def_1.ClusterDefConstants.buildDefaultIdentityName(workingModel.name)
-                        };
-                    }
-                    let spec = Object.assign({ name: workingModel.name, provider: workingModel.provider, providerSubscription: workingModel.providerSubscription, locationName: workingModel.locationName, providerGroup: workingModel.providerGroup, nodeCount: workingModel.nodeCount, ingressDef: workingModel.ingressDef, privateOwner: workingModel.privateOwner, nodeSpec: workingModel.nodeSpec, startingNodeCount: workingModel.startingNodeCount, identitySpec: (_j = workingModel.identitySpec) !== null && _j !== void 0 ? _j : { type: "", name: "" } }, this.createAuditable());
-                    spec.k8sVersion = workingModel.k8sVersion;
-                    if (workingModel === null || workingModel === void 0 ? void 0 : workingModel.nodePools)
-                        spec.nodePools = workingModel.nodePools;
-                    if (workingModel.defaultFootprint)
-                        spec.defaultFootprint = workingModel.defaultFootprint;
-                    if (workingModel.subnet)
-                        spec.subnet = workingModel.subnet;
-                    if (workingModel.windowsAdmin)
-                        spec.windowsAdmin = workingModel.windowsAdmin;
-                    if (workingModel.identityInstance)
-                        spec.identityInstance = workingModel.identityInstance;
-                    resolve({ spec: spec, defaults: defaults });
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    promptForClusterIdentity(clusterName, defaultValue) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                let output;
-                try {
-                    // TODO: promptConfirm() if they want to skip, set or change the identity
-                    // TODO: ask to autocreate or not, ask all or none
-                    let adAccount;
-                    let keep;
-                    let existingDisplay = defaultValue ? `${defaultValue.name} (id: ${defaultValue.id})` : codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE;
-                    keep = yield this._ui.promptConfirm("setIdentity", `Cluster Identity [${this._styler.hilite(existingDisplay)}]`, true);
-                    if (keep === true) {
-                        adAccount = defaultValue;
-                    }
-                    else {
-                        // adAccount = defaultValue ?? <SecurityAccount>{};
-                        let name = (yield this._ui.prompt("name", "Identity Name (blank to auto-create):", false, defaultValue === null || defaultValue === void 0 ? void 0 : defaultValue.name, this.azIdentityNameValidator));
-                        if (name === undefined || name === "") {
-                            // User requested auto-create
-                        }
-                        else {
-                            // User chose to manually set the identity
-                            let defaultId = (name === (defaultValue === null || defaultValue === void 0 ? void 0 : defaultValue.name)) ? defaultValue.id : undefined; // only default the id if the entered name matches the default value
-                            let id = (yield this._ui.prompt("id", "Identity Id:", false, defaultId, new NonEmptyValidator()));
-                            let systemName = "http://".concat(name);
-                            adAccount = new security_account_1.SecurityAccount(id, name, systemName);
-                            // TODO: Ask first if they want to change the password.
-                            //       Allow them to attempt a password reset on the svc principal
-                            let defaultPassword = (name === (defaultValue === null || defaultValue === void 0 ? void 0 : defaultValue.name)) ? defaultValue.password : undefined;
-                            adAccount.password = yield this._ui.promptPassword("password", "Identity Password: ", defaultPassword);
-                        }
-                    }
-                    // undefined means auto-create
-                    if (adAccount !== undefined) {
-                        let identitySpec = {
-                            type: cluster_def_1.ClusterDefConstants.DEFAULT_IDENTITY_TYPE,
-                            name: (adAccount.name) ? adAccount.name : cluster_def_1.ClusterDefConstants.buildDefaultIdentityName(clusterName)
-                        };
-                        output = { spec: identitySpec, instance: adAccount };
-                    }
-                    resolve(output);
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    promptForVnetSubnet(subxId, location, defaultValue) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                let output;
-                try {
-                    let keep = false;
-                    // if (defaultValue) {
-                    keep = (yield this._ui.promptConfirm("keepSubnet", `Subnet: [${this._styler.hilite(defaultValue !== null && defaultValue !== void 0 ? defaultValue : codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE)}]`));
-                    // }
-                    if (keep === true) {
-                        output = defaultValue;
-                    }
-                    else {
-                        let vnets = yield this.getVnets(subxId, location);
-                        let choices = vnets.map(v => { return { name: `${v.name}`, value: v.name }; });
-                        choices.push({ name: codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE, value: codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE });
-                        let vnetName = (yield this._ui.promptSelect("vnet", `VNet: `, choices, false));
-                        if (vnetName === codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE) {
-                            output = undefined;
-                        }
-                        else {
-                            let vnet = (vnets.find(v => v.name === vnetName));
-                            let subnetChoices = vnet.subnets.map(s => { return { name: `${s.name} [${s.addressPrefix}]`, value: s.name }; });
-                            subnetChoices.push({ name: codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE, value: codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE });
-                            let selectedSubnet = (yield this._ui.promptSelect("subnet", `Subnet: `, subnetChoices, false));
-                            output = (selectedSubnet === codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE) ? undefined : selectedSubnet;
-                        }
-                    }
-                    resolve(output);
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    getVnets(subxId, location) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                var _a, _b;
-                let output;
-                try {
-                    this._ui.startSpinner(`Loading virtual networks in ${location}...`);
-                    // let cmd = `az network vnet list --subscription ${subxId}`;
-                    // cmd = cmd.concat(" --query ", "\"[].{ resourceGuid: resourceGuid, name: name, location: location, subnets: subnets[].{ name: name, addressPrefix: addressPrefix }, resourceGroup: resourceGroup }\"")
-                    // let output = await this.cliExec.execAsyncJson<AzureVNet[]>(cmd, { cwd: process.cwd() }, LogLevel.debug);
-                    let result = yield this.genRelayClient.Call.getAzureVnets({ subscriptionId: subxId, location: location });
-                    output = (_a = result.output) !== null && _a !== void 0 ? _a : [];
-                    if (result.error) {
-                        this._ui.stopSpinner(`Error!`);
-                        this.logger.warn(`Error retrieving virtual netwotks: ${(_b = result.message) !== null && _b !== void 0 ? _b : result.error.message}`);
-                    }
-                    else {
-                        this._ui.stopSpinner(`${output.length} found`);
-                    }
-                    resolve(output);
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    promptForResourceGroup(subscriptionId, clusterLocation, defaultValue) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                let output;
-                try {
-                    // TODO:  Render "(create new)" if the default value is not in the list of existings
-                    let groups = yield this.getResourceGroups(clusterLocation, subscriptionId);
-                    let keep = false;
-                    if (defaultValue) {
-                        let displayName = defaultValue;
-                        if (groups.indexOf(defaultValue) < 0) {
-                            displayName = displayName.concat(" (auto-create)");
-                        }
-                        keep = (yield this._ui.promptConfirm("keepGroup", `Resource Group: [${this._styler.hilite(displayName)}]`));
-                    }
-                    if (keep === true && defaultValue !== undefined) {
-                        output = defaultValue;
-                    }
-                    else {
-                        let choices = [...groups, codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE];
-                        let selected = (yield this._ui.promptSelect("providerGroup", `Resource Group (in ${clusterLocation}): `, choices, false));
-                        if (selected === codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE) {
-                            output = (yield this._ui.prompt("newProviderGroup", "Name: ", true, defaultValue, this.azRgNameValidator));
-                        }
-                        else {
-                            output = selected;
-                        }
-                    }
-                    resolve(output);
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    getResourceGroups(location, subscriptionId) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                var _a, _b;
-                let output;
-                try {
-                    this._ui.startSpinner(`Loading resource groups in ${location}...`);
-                    let result = yield this.genRelayClient.Call.getAzureResourceGroups({ location: location, subscriptionId: subscriptionId });
-                    output = (_a = result.output) !== null && _a !== void 0 ? _a : [];
-                    if (result.error) {
-                        this._ui.stopSpinner(`Error!`);
-                        this.logger.warn(`Error retrieving resource groups: ${(_b = result.message) !== null && _b !== void 0 ? _b : result.error.message}`);
-                    }
-                    else {
-                        this._ui.stopSpinner(`${output.length} found`);
-                    }
-                    resolve(output);
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    /** Asks the user whether to keep the default version, and if not presents a select list. */
-    promptForLocation(defaultValue) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                let output;
-                try {
-                    let availableValues = yield this.getAvailableLocations();
-                    let keepDefault = false;
-                    if (defaultValue && availableValues.find(x => x.name === defaultValue)) {
-                        keepDefault = yield this._ui.promptConfirm("keepLocation", `Location: ${this._styler.hilite(defaultValue)} `);
-                    }
-                    if (keepDefault === true && defaultValue !== undefined) {
-                        output = defaultValue;
-                    }
-                    else {
-                        let byRegion = _.groupBy(availableValues, loc => loc.metadata.geographyGroup);
-                        let geoChoices = Object.keys(byRegion).sort();
-                        let geo = (yield this._ui.promptSelect("geo", "Region", geoChoices));
-                        let locationsInGeo = byRegion[geo];
-                        availableValues = _.orderBy(locationsInGeo, ['longitude', 'latitude', 'name']);
-                        let choices = availableValues
-                            .filter(loc => loc.metadata.physicalLocation !== null)
-                            .map(x => { return { name: `${x.regionalDisplayName}${(x.metadata.physicalLocation) ? ` (${x.metadata.physicalLocation})` : ""}`, value: x.name }; });
-                        choices = _.orderBy(choices, c => c.name);
-                        // output = (await this._ui.promptSelect("locationName", "Location: ", choices))!;
-                        let selector = new cli_common_1.PromptSelectFuzzy(this.logger, this._ui, this._styler);
-                        output = (yield selector.go('locationName', 'Location:', false, undefined, false, () => new Promise(resolve => resolve(choices))));
-                    }
-                    resolve(output);
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    /** Queries data centers under the current user's subscription.
-     *
-     * @see:  https://docs.microsoft.com/en-us/rest/api/resources/subscriptions/listlocations
-     * DEVNOTE:  This uses the subx set in the current user state (az account show), so is it possible that this is NOT the subscription chosen a few steps earlier? */
-    getAvailableLocations() {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                var _a, _b;
-                let output;
-                try {
-                    this._ui.startSpinner("Loading locations...");
-                    let result = yield this.genRelayClient.Call.getAzureLocations({});
-                    output = (_a = result.output) !== null && _a !== void 0 ? _a : [];
-                    if (result.error) {
-                        this._ui.stopSpinner(`Error!`);
-                        this.logger.warn(`Error retrieving available locations: ${(_b = result.message) !== null && _b !== void 0 ? _b : result.error.message}`);
-                    }
-                    else {
-                        this._ui.stopSpinner(`${output.length} found`);
-                    }
-                    resolve(output);
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    /** Asks the user whether to keep the default version, and if not presents a select list. */
-    promptForK8sVersion(location, defaultK8sVersion) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                var _a, _b;
-                let output;
-                try {
-                    this._ui.startSpinner(`Loading K8s versions available in ${location} ...`);
-                    let versResult = yield this.genRelayClient.Call.getAvailableK8sVersions({ provider: this.cloudProvider, location: location });
-                    if (versResult.error)
-                        throw versResult.error;
-                    let k8sVersions = (_b = (_a = versResult.output) === null || _a === void 0 ? void 0 : _a.map(x => x.k8sVersion)) !== null && _b !== void 0 ? _b : [];
-                    this._ui.stopSpinner(`${k8sVersions.length} found`);
-                    let keepVersion = false;
-                    if (defaultK8sVersion && k8sVersions.indexOf(defaultK8sVersion) >= 0) {
-                        keepVersion = yield this._ui.promptConfirm("keepVersion", `Kubernetes version: ${this._styler.hilite(defaultK8sVersion)} `);
-                    }
-                    if (keepVersion === true && defaultK8sVersion !== undefined) {
-                        output = defaultK8sVersion;
-                    }
-                    else {
-                        if (k8sVersions.length > 0) {
-                            output = (yield this._ui.promptSelect("k8sVersion", "Kubernetes version: ", k8sVersions)); // defaults?.k8sVersion;
-                        }
-                        else {
-                            output = (yield this._ui.prompt("k8sVersion", "Kubernetes version: ", true, defaultK8sVersion));
-                        }
-                    }
-                    resolve(output);
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    // see:  https://docs.microsoft.com/en-us/rest/api/compute/resourceskus/list#lists-all-available-resource-skus
-    promptForNodeSpec(location, defaultValue) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                let output;
-                try {
-                    let vmSizes = yield this.getAvailableNodeSizes(location);
-                    let keepVersion = false;
-                    if (defaultValue && vmSizes.find(s => s.name === defaultValue)) {
-                        keepVersion = yield this._ui.promptConfirm("keepNodeSpec", `Node size: ${this._styler.hilite(defaultValue)} `);
-                    }
-                    if (keepVersion === true && defaultValue !== undefined) {
-                        output = defaultValue;
-                    }
-                    else {
-                        if (vmSizes.length > 0) {
-                            let choices = vmSizes.map(s => { return { name: `${s.name.padEnd(25)} (${(s.memoryInMb + " Mb").padStart(12)}, ${(s.numberOfCores + " cores").padStart(10)})`, value: s.name }; });
-                            choices = _.orderBy(choices, c => c.name);
-                            // output = (await this._ui.promptSelect("nodeSpec", "Node type: ", choices))!;
-                            let selector = new cli_common_1.PromptSelectFuzzy(this.logger, this._ui, this._styler);
-                            output = (yield selector.go('nodeSpec', 'Node size:', false, undefined, false, () => new Promise(resolve => resolve(choices))));
-                        }
-                        else {
-                            output = (yield this._ui.prompt("nodeSpec", "Node size: ", true, defaultValue));
-                        }
-                    }
-                    resolve(output);
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    getAvailableNodeSizes(location) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
-                var _a, _b, _c;
-                let output;
-                try {
-                    this._ui.startSpinner(`Loading available node sizes in ${location}...`);
-                    let result = yield this.genRelayClient.Call.getAzureNodeTypes({ location: location });
-                    output = (_a = result.output) !== null && _a !== void 0 ? _a : [];
-                    if (result.error) {
-                        this._ui.stopSpinner(`Error!`);
-                        this.logger.warn(`Error retrieving available node sizes: ${(_b = result.message) !== null && _b !== void 0 ? _b : (_c = result.error) === null || _c === void 0 ? void 0 : _c.message}`);
-                    }
-                    else {
-                        this._ui.stopSpinner(`${output.length} found`);
-                    }
-                    resolve(output);
-                }
-                catch (err) {
-                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
-                    reject(err);
-                }
-            }));
-        });
-    }
-    /* ***********************************************************************************
-     *       _   __             _   _             _ _
-     *      | | / /            | | | |           | | |
-     *      | |/ /  ___ _   _  | | | | __ _ _   _| | |_
-     *      |    \ / _ \ | | | | | | |/ _` | | | | | __|
-     *      | |\  \  __/ |_| | \ \_/ / (_| | |_| | | |_
-     *      \_| \_/\___|\__, |  \___/ \__,_|\__,_|_|\__|
-     *                   __/ |
-     *                  |___/
-     * ************************************************************************************/
-    captureSecretStore(/* storeProv: ISecretStoreProvisioner, */ defaults) {
-        return tslib_1.__awaiter(this, void 0, void 0, function* () {
-            try {
-                let output;
-                const azUser = yield this.relayClient.getCurrentUserFor(this.cloudProvider);
-                // /* TODO: use this instead of relayClient call above ^ */ 
-                // const azUserResult = await this.genRelayClient.Call.get_current_user_for({ providerCode: this.cloudProvider });
-                // if (azUserResult.error) throw azUserResult.error;
-                // const azUser = azUserResult.output;
-                if (!azUser)
-                    throw new Error(`Cannot capture any ${this.cloudProvider} secret store: No ${this.cloudProvider} account has been authenticated.`);
-                let subxId = yield this.promptForSubscriptionId(azUser, defaults === null || defaults === void 0 ? void 0 : defaults.subscriptionId);
-                let crit = { subscriptionId: subxId };
-                // let fetchResult = await storeProv.list(crit);
-                // let otherResult = await this.relayClient.getStorageAccounts(this.cloudProvider, defaults?.subscriptionId ?? "");
-                // let mylist = otherResult.output.map((x,index) => { })
-                let fetchResult = yield this.relayClient.listSecretStores(this.cloudProvider, crit);
-                // /** TODO: use this instead: */  let fetchResult = await this.genRelayClient.Call.GetSecretStores({ provider: this.cloudProvider, spec: crit });
-                if (fetchResult.error) {
-                    throw fetchResult.error;
-                }
-                else if (fetchResult.output === undefined || fetchResult.output.length === 0) {
-                    // this._ui.userMessage(`No secret stores currently exist in ${partial.provider}.  You will need to create one.`);
-                    throw new Error(`No secret stores currently exist in ${this.cloudProvider}.  You will need to create one.`);
-                }
-                else {
-                    let choices = (fetchResult.output).map((s, index) => { return { name: s.name, value: index }; });
-                    let selectedIndex = (yield this._ui.promptSelect("secretStore", "Secret store: ", choices));
-                    let kv = fetchResult.output[selectedIndex]; // CAUTION: Later on this may not be a valid cast/assumption
-                    const sku = "premium"; // TODO:  Get this onto the AzureKeyVault entity.
-                    output = new contracts_2.AzureKeyVaultDef(kv.name, kv.resourceGroup, kv.tenantId, kv.subscriptionId, kv.location, sku, kv);
-                }
-                return output;
-            }
-            catch (err) {
-                throw err;
-            }
-        });
-    }
-    createAuditable() {
-        let stamp = new Date(Date.now());
-        return {
-            created: stamp,
-            createdBy: this.codiacUser.username,
-            modified: stamp,
-            modifiedBy: this.codiacUser.username
-        };
-    }
-};
-AzureResourceConfigurator = tslib_1.__decorate([
-    (0, inversify_1.injectable)(),
-    tslib_1.__param(0, (0, inversify_1.inject)(extended_relay_client_1.ExtendedRelayClient)),
-    tslib_1.__param(1, (0, inversify_1.inject)(codiac_relay_1.RelayClient)),
-    tslib_1.__param(2, (0, inversify_1.inject)(codiac_ops_common_1.UserNameTenantCode)),
-    tslib_1.__param(3, (0, inversify_1.inject)(codiac_ops_common_1.INTERFACES_OPS.IUserInputProvider)),
-    tslib_1.__param(4, (0, inversify_1.inject)(codiac_ops_common_1.INTERFACES_OPS.IOutputStyler)),
-    tslib_1.__param(5, (0, inversify_1.inject)(codiac_common_1.INTERFACES.IBetterLogger)),
-    tslib_1.__metadata("design:paramtypes", [extended_relay_client_1.ExtendedRelayClient,
-        codiac_relay_1.RelayClient,
-        codiac_ops_common_1.UserNameTenantCode, Object, Object, Object])
-], AzureResourceConfigurator);
-exports.AzureResourceConfigurator = AzureResourceConfigurator;
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AzureResourceConfigurator = exports.NonEmptyValidator = exports.RegExValidator = void 0;
+const tslib_1 = require("tslib");
+const inversify_1 = require("inversify");
+const _ = require("lodash");
+const cli_tools_1 = require("@codiac.io/cli-tools");
+const codiac_common_1 = require("@codiac.io/codiac-common");
+const contracts_1 = require("../../apis/codiac-api/contracts");
+const codiac_relay_1 = require("../../apis/codiac-relay");
+const extended_relay_client_1 = require("../../relay/extended-relay-client");
+const contracts_2 = require("../../relay/contracts/contracts");
+const codiac_ops_common_1 = require("@codiac.io/codiac-ops-common");
+const cli_common_1 = require("../../cli-common");
+const image_registry_1 = require("@codiac.io/codiac-domain/image-registry");
+const cluster_def_1 = require("@codiac.io/codiac-domain/cluster-def");
+const security_account_1 = require("@codiac.io/codiac-domain/security-account");
+const codiac_constants_1 = require("../../codiac-constants");
+const DEFAULT_STARTING_NODE_COUNT = 2;
+/** Parameters by which to validate a string with a regular expression. */
+class RegExValidator {
+    constructor(rx, whyInvalid, allowUndefined = false) {
+        this.rx = rx;
+        this.whyInvalid = whyInvalid;
+        this.allowUndefined = allowUndefined;
+    }
+    isValid(candidate) {
+        let result = { isValid: false };
+        if (candidate === undefined || candidate === "") {
+            result.isValid = this.allowUndefined;
+        }
+        else {
+            result.isValid = this.rx.test(candidate);
+        }
+        if (!result.isValid) {
+            result.whyInvalid = this.whyInvalid;
+        }
+        return result;
+    }
+}
+exports.RegExValidator = RegExValidator;
+;
+/** Disallows undefined or whitespace */
+class NonEmptyValidator {
+    constructor(whyInvalid) {
+        this.whyInvalid = whyInvalid;
+    }
+    isValid(candidate) {
+        var _a;
+        let result = { isValid: false };
+        result.isValid = Boolean(candidate !== undefined && candidate.replace(/\s+/, "") !== "");
+        if (!result.isValid) {
+            result.whyInvalid = (_a = this.whyInvalid) !== null && _a !== void 0 ? _a : "Value must not be null or whitespace";
+        }
+        return result;
+    }
+}
+exports.NonEmptyValidator = NonEmptyValidator;
+/** Walks the user through the selection of an existing
+ * or the declaration of a new image registry.
+ */
+let AzureResourceConfigurator = class AzureResourceConfigurator {
+    constructor(relayClient, genRelayClient, codiacUser, _ui, _styler, logger) {
+        this.relayClient = relayClient;
+        this.genRelayClient = genRelayClient;
+        this.codiacUser = codiacUser;
+        this._ui = _ui;
+        this._styler = _styler;
+        this.logger = logger;
+        this.cloudProvider = contracts_1.CloudProviderEnum.azure;
+        /** Currently supporting only a single reg type per cloud provider. */
+        this.regType = contracts_1.ImageRegistryTypes.AzureCr;
+        /** Validates the given name for use as the name of an entity in Azure.
+         *
+         * 1-50
+         * alphanumerics and hyphens,
+         * starting with a letter and ending with an alphanumeric.
+         *
+         * @see https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules
+         */
+        this.azServiceNameValidator = new RegExValidator(/^[a-zA-Z]([\w-]{0,48}\w)?$/, "must be 1-50 alphanumerics or hyphens, starting with a letter, ending with alphanumeric", false);
+        /** Validates the given name for use as the name of an entity in Azure.
+         *
+         *  1-90
+         *  Underscores, hyphens, periods, and letters or digits as defined by the Char.IsLetterOrDigit function.
+         *
+         *  Valid characters are members of the following categories in UnicodeCategory:
+         *  UppercaseLetter,
+         *  LowercaseLetter,
+         *  TitlecaseLetter,
+         *  ModifierLetter,
+         *  OtherLetter,
+         *  DecimalDigitNumber.
+         *
+         *  Can't end with period.
+         *
+         * NOTE: the azure portal says Parentheses `()` are also valid characters in a resource group name.
+         *
+         * @see https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftresources
+         */
+        this.azRgNameValidator = new RegExValidator(/^[a-zA-Z\d_\-\(\)\.]{0,89}[a-zA-Z\d_\-\(\)]$/, "must be 1-90 alphanumerics, hyphens, periods, or parentheses, not ending with a period", false);
+        /** Validates the given name for use as the name of a userAssignedIdentity in Azure.
+         *
+         * 3-128 Alphanumerics, hyphens, and underscores,
+         * starting with a letter or number.
+         *
+         * @see https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftmanagedidentity
+         */
+        this.azIdentityNameValidator = new RegExValidator(/^[a-zA-Z\d][a-zA-Z\d_\-]{0,127}$/, "must be 3-128 alphanumerics, hyphens, or underscores, starting with a letter or number", true);
+        this.cliExec = new cli_tools_1.CliExec(this.logger);
+    }
+    /* ***********************************************************************************
+    *   _                 _
+    *  | |               (_)
+    *  | |     ___   __ _ _ _ __
+    *  | |    / _ \ / _` | | '_ \
+    *  | |___| (_) | (_| | | | | |
+    *  \_____/\___/ \__, |_|_| |_|
+    *                __/ |
+    *               |___/
+    *
+    * ************************************************************************************/
+    promptToLogin(providerSubscriptionId, suppressConfirmations, providedUserName, providedSecret) {
+        var _a, _b;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            try {
+                let isAuthed = false;
+                let userName = undefined;
+                let secret = undefined;
+                if (!suppressConfirmations) {
+                    this._ui.userMessage(`Enter your credentials for ${this._styler.hilite(this.cloudProvider)}`);
+                    userName = yield this._ui.prompt('regUsername', "Username (Hit enter if using a token):", false);
+                    if (userName === undefined || userName === "")
+                        userName = "<token>"; // TODO: make username nullable on the authPvd, so this becomes the job of the auth provider
+                    secret = yield this._ui.promptPassword('regSecret', `Password (or token):`);
+                }
+                else {
+                    if (!providedUserName || !providedSecret)
+                        throw new Error("Must provide cloud provider username/pwd to login silent mode");
+                    userName = providedUserName;
+                    secret = providedSecret;
+                }
+                try {
+                    this._ui.startSpinner(`Authenticating with ${this.cloudProvider}...`);
+                    // let authResult = await this.relayClient.logIntoCloudProvider(this.cloudProvider, { Username: userName, Secret: secret });
+                    let authResult = yield this.genRelayClient.Call.csp_login({ providerCode: this.cloudProvider, username: userName, secret: secret });
+                    isAuthed = authResult !== undefined; // <-- because authenticate throws on failures.  // authResult.success;
+                    this._ui.stopSpinner("Success!");
+                }
+                catch (err) {
+                    this.logger.debug(`Error authenticating with ${this.cloudProvider}: ${(_a = err.name) !== null && _a !== void 0 ? _a : ""} ${(_b = err.message) !== null && _b !== void 0 ? _b : ""}`);
+                    this._ui.stopSpinner("Failed.");
+                }
+                if (isAuthed)
+                    this._ui.userMessage(`Logged into ${this._styler.hilite(this.cloudProvider)} as [${this._styler.hilite(userName !== null && userName !== void 0 ? userName : "token")}]`);
+                // let subxId = await this.promptForSubscriptionId(userName, providerSubscriptionId);
+                return [isAuthed, userName];
+            }
+            catch (err) {
+                throw err;
+            }
+        });
+    }
+    /* ***********************************************************************************
+    * ______           _     _
+    * | ___ \         (_)   | |
+    * | |_/ /___  __ _ _ ___| |_ _ __ _   _
+    * |    // _ \/ _` | / __| __| '__| | | |
+    * | |\ \  __/ (_| | \__ \ |_| |  | |_| |
+    * \_| \_\___|\__, |_|___/\__|_|   \__, |
+    *             __/ |                __/ |
+    *            |___/                |___/
+    *
+    * ***********************************************************************************/
+    captureImageRegistry() {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                try {
+                    let registry;
+                    let azUser = yield this.relayClient.getCurrentUserFor(this.cloudProvider);
+                    // /* TODO: use this instead */ 
+                    // const loginResult = await this.genRelayClient.Call.get_current_user_for({ providerCode: this.cloudProvider });
+                    // if (loginResult.error) throw loginResult.error;
+                    // const azUser = loginResult.output;
+                    if (!azUser)
+                        throw new Error(`Cannot capture an azure container registry: No ${this.cloudProvider} account has been authenticated.`);
+                    // Select subscription from the ones the user has access to
+                    let subxId = yield this.promptForSubscriptionId(azUser);
+                    // Select a container registry
+                    this._ui.startSpinner(`Fetching Azure container registries `);
+                    let regResult = yield this.genRelayClient.Call.getAzureAcrs({ subscriptionId: subxId });
+                    let regs = (_a = regResult.output) !== null && _a !== void 0 ? _a : [];
+                    if (regResult.error) {
+                        this._ui.stopSpinner("Error!");
+                        // this.logger.warn(`Error retrieving container registries: ${regResult.error.message ?? regResult.message}`);
+                        throw regResult.error; // Gotta throw - we can't continue if they have no registries to choose from.
+                    }
+                    else {
+                        this._ui.stopSpinner(`${(_c = (_b = regResult.output) === null || _b === void 0 ? void 0 : _b.length) !== null && _c !== void 0 ? _c : 0} found.`);
+                        if (regs.length === 0) {
+                            throw new Error(`No registries found.`);
+                        }
+                    }
+                    let regChoices = regs.map(r => { return { name: `${r.name} (resource group: ${r.resourceGroup})`, value: r.id }; });
+                    let regId = (yield this._ui.promptSelect("reg", "Container Registry: ", regChoices));
+                    let reg = (regs.find(r => r.id === regId)); // The "!" operator is ok - We just selected from the list.
+                    // az acr list --query [].name --subscription 37dbb924-5ee5-470b-b2a3-187e9dea7008
+                    // select container registry (login, select subscription), then from that get the scope/registryUrl
+                    // let acrName = await this._ui.prompt<string>('scope', 'Name of the ACR: ', true, /* registry.scope || defaults.scope */);
+                    // // regCode = registry.scope;
+                    // let serverUrl = `${acrName}.azurecr.io`; // <---  HACK!!!!!  Replace this with an ACR selector!!! 
+                    registry = new image_registry_1.AzureContainerRegistry(reg.name, reg.resourceGroup, subxId, reg.location);
+                    // registry = new ImageRegistry(reg.name, reg.loginServer, this.cloudProvider, this.regType);
+                    resolve(registry);
+                }
+                catch (err) {
+                    reject(err);
+                }
+            }));
+        });
+    }
+    promptForSubscriptionId(azUser, defaultValue) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b;
+                let output;
+                try {
+                    let subxResult = yield this.genRelayClient.Call.getAzureSubscriptions({ azUser: azUser });
+                    if (subxResult.error) {
+                        this.logger.warn(`Error retrieving subscriptions: ${(_a = subxResult.error.message) !== null && _a !== void 0 ? _a : subxResult.message}`);
+                    }
+                    let subs = (_b = subxResult.output) !== null && _b !== void 0 ? _b : [];
+                    let found = subs.find(s => s.id === defaultValue);
+                    let keep = false;
+                    if (defaultValue && found) {
+                        keep = yield this._ui.promptConfirm("keepSubx", `Azure Subscription: ${this._styler.hilite(found.name)} (${defaultValue})`);
+                    }
+                    if (keep === true && defaultValue !== undefined) {
+                        output = defaultValue;
+                    }
+                    else {
+                        let choices = [];
+                        if (subs.length > 0) {
+                            choices = subs.filter(s => s.user.name === azUser)
+                                .map(s => { return { name: `${s.name} (...${s.id.substring(s.id.length - 4)})`, value: s.id }; });
+                            // choices = _.orderBy(choices, c => c.name);
+                            if (choices.length > 0) {
+                                output = (yield this._ui.promptSelect("subx", "Azure Subscription: ", choices));
+                            }
+                            else {
+                                this._ui.userMessage(`No Azure subscriptions found for the user [${azUser}].`);
+                                output = (yield this._ui.prompt("subx", "Azure Subscription Id: ", true, defaultValue));
+                            }
+                        }
+                        else {
+                            output = (yield this._ui.prompt("subx", "Azure Subscription Id: ", true, defaultValue));
+                        }
+                    }
+                    resolve(output);
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    /* ***********************************************************************************
+    *   _____ _           _
+    *  /  __ \ |         | |
+    *  | /  \/ |_   _ ___| |_ ___ _ __
+    *  | |   | | | | / __| __/ _ \ '__|
+    *  | \__/\ | |_| \__ \ ||  __/ |
+    *   \____/_|\__,_|___/\__\___|_|
+    *
+    *  ***********************************************************************************/
+    // For info on accessing the Azure Resource Manager REST api,
+    // see: https://docs.microsoft.com/en-us/rest/api/azure/#create-the-request
+    defineCluster(initial, defaults) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+                let output;
+                try {
+                    let workingModel = {};
+                    workingModel.provider = this.cloudProvider;
+                    workingModel.privateOwner = this.codiacUser.tenantCode;
+                    let isValid = true;
+                    // APPLY DEFAULTS FOR THIS CSP
+                    let switchedCsp = Boolean(defaults !== undefined && (defaults.provider !== this.cloudProvider));
+                    if (defaults === undefined || (defaults.provider !== this.cloudProvider)) {
+                        let defaultResult = yield this.genRelayClient.Call.getClusterDefaults({ provider: this.cloudProvider });
+                        if (defaultResult.error) {
+                            this.logger.warn(`Error retrieving defaults for ${this.cloudProvider} cluster: ${(_a = defaultResult.error.name) !== null && _a !== void 0 ? _a : ""} ${(_b = defaultResult.error.message) !== null && _b !== void 0 ? _b : ""}`);
+                        }
+                        defaults = (_c = defaultResult.output) !== null && _c !== void 0 ? _c : {}; // fall back to an empty object if we failed, so that we dont keep looking this up on subsequent calls.
+                        let assignment = (objVal, srcVal) => Boolean(srcVal === undefined) ? objVal : srcVal;
+                        if (switchedCsp) {
+                            initial = _.assignWith({}, defaults, workingModel, { name: initial.name }, assignment); // Throw out any prior cluster properties bc they were set for a diff provider.
+                        }
+                        else {
+                            initial = _.assignWith({}, defaults, initial, assignment);
+                        }
+                    }
+                    // while (cluster.name === undefined || isValid !== true) {
+                    workingModel.name = (yield this._ui.prompt("name", "Cluster Name: ", true, (_d = workingModel.name) !== null && _d !== void 0 ? _d : initial === null || initial === void 0 ? void 0 : initial.name, this.azServiceNameValidator));
+                    //   isValid = this.AZURE_SERVICE_NAME_VALIDATOR.regex.test(cluster.name);
+                    //   if (!isValid) {
+                    //     this._ui.userMessage(`INVALID: ${this.AZURE_SERVICE_NAME_VALIDATOR.desc}`)
+                    //   }
+                    // }
+                    // cluster.providerSubscription = (await this._ui.prompt("providerSubscription", "SubscriptionId: ", true, defaults?.providerSubscription))!;
+                    let azUser = yield this.relayClient.getCurrentUserFor(this.cloudProvider);
+                    if (!azUser)
+                        throw new Error(`Cannot define an azure cluster: No ${this.cloudProvider} account has been authenticated.`);
+                    // Select subscription from the ones the user has access to
+                    // TODO: ask to change before prompting the list
+                    workingModel.providerSubscription = yield this.promptForSubscriptionId(azUser, initial === null || initial === void 0 ? void 0 : initial.providerSubscription);
+                    // cluster.locationName = (await this._ui.prompt("locationName", "Location: ", true, defaults?.locationName))!;
+                    workingModel.locationName = (yield this.promptForLocation(initial === null || initial === void 0 ? void 0 : initial.locationName));
+                    workingModel.providerGroup = yield this.promptForResourceGroup(workingModel.providerSubscription, workingModel.locationName, ((_e = initial === null || initial === void 0 ? void 0 : initial.providerGroup) !== null && _e !== void 0 ? _e : ((_f = workingModel.name) !== null && _f !== void 0 ? _f : initial === null || initial === void 0 ? void 0 : initial.name)) ? `${(_g = workingModel.name) !== null && _g !== void 0 ? _g : initial === null || initial === void 0 ? void 0 : initial.name}-rg` : undefined);
+                    // Generic cluster properties...
+                    // TODO: promptSelect for Vnet and Subnet
+                    // cluster.subnet = (await this._ui.prompt("subnet", "Subnet: ", false, defaults?.subnet));
+                    workingModel.subnet = yield this.promptForVnetSubnet(workingModel.providerSubscription, workingModel.locationName, initial === null || initial === void 0 ? void 0 : initial.subnet);
+                    // TODO: promptSelect for nodeSpec
+                    workingModel.nodeSpec = yield this.promptForNodeSpec(workingModel.locationName, initial === null || initial === void 0 ? void 0 : initial.nodeSpec);
+                    // cluster.nodePools = (await this._ui.prompt("winNodePool", "Add Windows node pool: ", false, false)) ? cluster.nodePools : [];
+                    workingModel.startingNodeCount = (yield this._ui.prompt("startingNodeCount", "Qty nodes: ", true, (_h = initial === null || initial === void 0 ? void 0 : initial.startingNodeCount) !== null && _h !== void 0 ? _h : DEFAULT_STARTING_NODE_COUNT));
+                    // TODO: Set default from AKS (mark it in list, too)
+                    // TODO: ask to change before prompting the list
+                    workingModel.k8sVersion = yield this.promptForK8sVersion(workingModel.locationName, initial === null || initial === void 0 ? void 0 : initial.k8sVersion);
+                    workingModel.ingressDef = initial === null || initial === void 0 ? void 0 : initial.ingressDef;
+                    // --------------------------------------------------------------------------------------------------------------------------------------
+                    // Azure-specific properties...
+                    // Cluster identity (Service Principal / Managed Identity)
+                    let identityPak = yield this.promptForClusterIdentity(workingModel.name, initial === null || initial === void 0 ? void 0 : initial.identityInstance);
+                    if (identityPak) {
+                        workingModel.identityInstance = identityPak.instance;
+                        workingModel.identitySpec = identityPak.spec;
+                    }
+                    else {
+                        // User chose auto-create (we'd be better off setting this default in the cluster create in the relay, not here)
+                        workingModel.identitySpec = {
+                            type: cluster_def_1.ClusterDefConstants.DEFAULT_IDENTITY_TYPE,
+                            name: cluster_def_1.ClusterDefConstants.buildDefaultIdentityName(workingModel.name)
+                        };
+                    }
+                    let spec = Object.assign({ name: workingModel.name, provider: workingModel.provider, providerSubscription: workingModel.providerSubscription, locationName: workingModel.locationName, providerGroup: workingModel.providerGroup, nodeCount: workingModel.nodeCount, ingressDef: workingModel.ingressDef, privateOwner: workingModel.privateOwner, nodeSpec: workingModel.nodeSpec, startingNodeCount: workingModel.startingNodeCount, identitySpec: (_j = workingModel.identitySpec) !== null && _j !== void 0 ? _j : { type: "", name: "" } }, this.createAuditable());
+                    spec.k8sVersion = workingModel.k8sVersion;
+                    if (workingModel === null || workingModel === void 0 ? void 0 : workingModel.nodePools)
+                        spec.nodePools = workingModel.nodePools;
+                    if (workingModel.defaultFootprint)
+                        spec.defaultFootprint = workingModel.defaultFootprint;
+                    if (workingModel.subnet)
+                        spec.subnet = workingModel.subnet;
+                    if (workingModel.windowsAdmin)
+                        spec.windowsAdmin = workingModel.windowsAdmin;
+                    if (workingModel.identityInstance)
+                        spec.identityInstance = workingModel.identityInstance;
+                    resolve({ spec: spec, defaults: defaults });
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    promptForClusterIdentity(clusterName, defaultValue) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                let output;
+                try {
+                    // TODO: promptConfirm() if they want to skip, set or change the identity
+                    // TODO: ask to autocreate or not, ask all or none
+                    let adAccount;
+                    let keep;
+                    let existingDisplay = defaultValue ? `${defaultValue.name} (id: ${defaultValue.id})` : codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE;
+                    keep = yield this._ui.promptConfirm("setIdentity", `Cluster Identity [${this._styler.hilite(existingDisplay)}]`, true);
+                    if (keep === true) {
+                        adAccount = defaultValue;
+                    }
+                    else {
+                        // adAccount = defaultValue ?? <SecurityAccount>{};
+                        let name = (yield this._ui.prompt("name", "Identity Name (blank to auto-create):", false, defaultValue === null || defaultValue === void 0 ? void 0 : defaultValue.name, this.azIdentityNameValidator));
+                        if (name === undefined || name === "") {
+                            // User requested auto-create
+                        }
+                        else {
+                            // User chose to manually set the identity
+                            let defaultId = (name === (defaultValue === null || defaultValue === void 0 ? void 0 : defaultValue.name)) ? defaultValue.id : undefined; // only default the id if the entered name matches the default value
+                            let id = (yield this._ui.prompt("id", "Identity Id:", false, defaultId, new NonEmptyValidator()));
+                            let systemName = "http://".concat(name);
+                            adAccount = new security_account_1.SecurityAccount(id, name, systemName);
+                            // TODO: Ask first if they want to change the password.
+                            //       Allow them to attempt a password reset on the svc principal
+                            let defaultPassword = (name === (defaultValue === null || defaultValue === void 0 ? void 0 : defaultValue.name)) ? defaultValue.password : undefined;
+                            adAccount.password = yield this._ui.promptPassword("password", "Identity Password: ", defaultPassword);
+                        }
+                    }
+                    // undefined means auto-create
+                    if (adAccount !== undefined) {
+                        let identitySpec = {
+                            type: cluster_def_1.ClusterDefConstants.DEFAULT_IDENTITY_TYPE,
+                            name: (adAccount.name) ? adAccount.name : cluster_def_1.ClusterDefConstants.buildDefaultIdentityName(clusterName)
+                        };
+                        output = { spec: identitySpec, instance: adAccount };
+                    }
+                    resolve(output);
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    promptForVnetSubnet(subxId, location, defaultValue) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                let output;
+                try {
+                    let keep = false;
+                    // if (defaultValue) {
+                    keep = (yield this._ui.promptConfirm("keepSubnet", `Subnet: [${this._styler.hilite(defaultValue !== null && defaultValue !== void 0 ? defaultValue : codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE)}]`));
+                    // }
+                    if (keep === true) {
+                        output = defaultValue;
+                    }
+                    else {
+                        let vnets = yield this.getVnets(subxId, location);
+                        let choices = vnets.map(v => { return { name: `${v.name}`, value: v.name }; });
+                        choices.push({ name: codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE, value: codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE });
+                        let vnetName = (yield this._ui.promptSelect("vnet", `VNet: `, choices, false));
+                        if (vnetName === codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE) {
+                            output = undefined;
+                        }
+                        else {
+                            let vnet = (vnets.find(v => v.name === vnetName));
+                            let subnetChoices = vnet.subnets.map(s => { return { name: `${s.name} [${s.addressPrefix}]`, value: s.name }; });
+                            subnetChoices.push({ name: codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE, value: codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE });
+                            let selectedSubnet = (yield this._ui.promptSelect("subnet", `Subnet: `, subnetChoices, false));
+                            output = (selectedSubnet === codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE) ? undefined : selectedSubnet;
+                        }
+                    }
+                    resolve(output);
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    getVnets(subxId, location) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b;
+                let output;
+                try {
+                    this._ui.startSpinner(`Loading virtual networks in ${location}...`);
+                    // let cmd = `az network vnet list --subscription ${subxId}`;
+                    // cmd = cmd.concat(" --query ", "\"[].{ resourceGuid: resourceGuid, name: name, location: location, subnets: subnets[].{ name: name, addressPrefix: addressPrefix }, resourceGroup: resourceGroup }\"")
+                    // let output = await this.cliExec.execAsyncJson<AzureVNet[]>(cmd, { cwd: process.cwd() }, LogLevel.debug);
+                    let result = yield this.genRelayClient.Call.getAzureVnets({ subscriptionId: subxId, location: location });
+                    output = (_a = result.output) !== null && _a !== void 0 ? _a : [];
+                    if (result.error) {
+                        this._ui.stopSpinner(`Error!`);
+                        this.logger.warn(`Error retrieving virtual netwotks: ${(_b = result.message) !== null && _b !== void 0 ? _b : result.error.message}`);
+                    }
+                    else {
+                        this._ui.stopSpinner(`${output.length} found`);
+                    }
+                    resolve(output);
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    promptForResourceGroup(subscriptionId, clusterLocation, defaultValue) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                let output;
+                try {
+                    // TODO:  Render "(create new)" if the default value is not in the list of existings
+                    let groups = yield this.getResourceGroups(clusterLocation, subscriptionId);
+                    let keep = false;
+                    if (defaultValue) {
+                        let displayName = defaultValue;
+                        if (groups.indexOf(defaultValue) < 0) {
+                            displayName = displayName.concat(" (auto-create)");
+                        }
+                        keep = (yield this._ui.promptConfirm("keepGroup", `Resource Group: [${this._styler.hilite(displayName)}]`));
+                    }
+                    if (keep === true && defaultValue !== undefined) {
+                        output = defaultValue;
+                    }
+                    else {
+                        let choices = [...groups, codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE];
+                        let selected = (yield this._ui.promptSelect("providerGroup", `Resource Group (in ${clusterLocation}): `, choices, false));
+                        if (selected === codiac_constants_1.CliConstants.CHOICE_VALUE_FOR_AUTOCREATE) {
+                            output = (yield this._ui.prompt("newProviderGroup", "Name: ", true, defaultValue, this.azRgNameValidator));
+                        }
+                        else {
+                            output = selected;
+                        }
+                    }
+                    resolve(output);
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    getResourceGroups(location, subscriptionId) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b;
+                let output;
+                try {
+                    this._ui.startSpinner(`Loading resource groups in ${location}...`);
+                    let result = yield this.genRelayClient.Call.getAzureResourceGroups({ location: location, subscriptionId: subscriptionId });
+                    output = (_a = result.output) !== null && _a !== void 0 ? _a : [];
+                    if (result.error) {
+                        this._ui.stopSpinner(`Error!`);
+                        this.logger.warn(`Error retrieving resource groups: ${(_b = result.message) !== null && _b !== void 0 ? _b : result.error.message}`);
+                    }
+                    else {
+                        this._ui.stopSpinner(`${output.length} found`);
+                    }
+                    resolve(output);
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    /** Asks the user whether to keep the default version, and if not presents a select list. */
+    promptForLocation(defaultValue) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                let output;
+                try {
+                    let availableValues = yield this.getAvailableLocations();
+                    let keepDefault = false;
+                    if (defaultValue && availableValues.find(x => x.name === defaultValue)) {
+                        keepDefault = yield this._ui.promptConfirm("keepLocation", `Location: ${this._styler.hilite(defaultValue)} `);
+                    }
+                    if (keepDefault === true && defaultValue !== undefined) {
+                        output = defaultValue;
+                    }
+                    else {
+                        let byRegion = _.groupBy(availableValues, loc => loc.metadata.geographyGroup);
+                        let geoChoices = Object.keys(byRegion).sort();
+                        let geo = (yield this._ui.promptSelect("geo", "Region", geoChoices));
+                        let locationsInGeo = byRegion[geo];
+                        availableValues = _.orderBy(locationsInGeo, ['longitude', 'latitude', 'name']);
+                        let choices = availableValues
+                            .filter(loc => loc.metadata.physicalLocation !== null)
+                            .map(x => { return { name: `${x.regionalDisplayName}${(x.metadata.physicalLocation) ? ` (${x.metadata.physicalLocation})` : ""}`, value: x.name }; });
+                        choices = _.orderBy(choices, c => c.name);
+                        // output = (await this._ui.promptSelect("locationName", "Location: ", choices))!;
+                        let selector = new cli_common_1.PromptSelectFuzzy(this.logger, this._ui, this._styler);
+                        output = (yield selector.go('locationName', 'Location:', false, undefined, false, () => new Promise(resolve => resolve(choices))));
+                    }
+                    resolve(output);
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    /** Queries data centers under the current user's subscription.
+     *
+     * @see:  https://docs.microsoft.com/en-us/rest/api/resources/subscriptions/listlocations
+     * DEVNOTE:  This uses the subx set in the current user state (az account show), so is it possible that this is NOT the subscription chosen a few steps earlier? */
+    getAvailableLocations() {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b;
+                let output;
+                try {
+                    this._ui.startSpinner("Loading locations...");
+                    let result = yield this.genRelayClient.Call.getAzureLocations({});
+                    output = (_a = result.output) !== null && _a !== void 0 ? _a : [];
+                    if (result.error) {
+                        this._ui.stopSpinner(`Error!`);
+                        this.logger.warn(`Error retrieving available locations: ${(_b = result.message) !== null && _b !== void 0 ? _b : result.error.message}`);
+                    }
+                    else {
+                        this._ui.stopSpinner(`${output.length} found`);
+                    }
+                    resolve(output);
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    /** Asks the user whether to keep the default version, and if not presents a select list. */
+    promptForK8sVersion(location, defaultK8sVersion) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b;
+                let output;
+                try {
+                    this._ui.startSpinner(`Loading K8s versions available in ${location} ...`);
+                    let versResult = yield this.genRelayClient.Call.getAvailableK8sVersions({ provider: this.cloudProvider, location: location });
+                    if (versResult.error)
+                        throw versResult.error;
+                    let k8sVersions = (_b = (_a = versResult.output) === null || _a === void 0 ? void 0 : _a.map(x => x.k8sVersion)) !== null && _b !== void 0 ? _b : [];
+                    this._ui.stopSpinner(`${k8sVersions.length} found`);
+                    let keepVersion = false;
+                    if (defaultK8sVersion && k8sVersions.indexOf(defaultK8sVersion) >= 0) {
+                        keepVersion = yield this._ui.promptConfirm("keepVersion", `Kubernetes version: ${this._styler.hilite(defaultK8sVersion)} `);
+                    }
+                    if (keepVersion === true && defaultK8sVersion !== undefined) {
+                        output = defaultK8sVersion;
+                    }
+                    else {
+                        if (k8sVersions.length > 0) {
+                            output = (yield this._ui.promptSelect("k8sVersion", "Kubernetes version: ", k8sVersions)); // defaults?.k8sVersion;
+                        }
+                        else {
+                            output = (yield this._ui.prompt("k8sVersion", "Kubernetes version: ", true, defaultK8sVersion));
+                        }
+                    }
+                    resolve(output);
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    // see:  https://docs.microsoft.com/en-us/rest/api/compute/resourceskus/list#lists-all-available-resource-skus
+    promptForNodeSpec(location, defaultValue) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                let output;
+                try {
+                    let vmSizes = yield this.getAvailableNodeSizes(location);
+                    let keepVersion = false;
+                    if (defaultValue && vmSizes.find(s => s.name === defaultValue)) {
+                        keepVersion = yield this._ui.promptConfirm("keepNodeSpec", `Node size: ${this._styler.hilite(defaultValue)} `);
+                    }
+                    if (keepVersion === true && defaultValue !== undefined) {
+                        output = defaultValue;
+                    }
+                    else {
+                        if (vmSizes.length > 0) {
+                            let choices = vmSizes.map(s => { return { name: `${s.name.padEnd(25)} (${(s.memoryInMb + " Mb").padStart(12)}, ${(s.numberOfCores + " cores").padStart(10)})`, value: s.name }; });
+                            choices = _.orderBy(choices, c => c.name);
+                            // output = (await this._ui.promptSelect("nodeSpec", "Node type: ", choices))!;
+                            let selector = new cli_common_1.PromptSelectFuzzy(this.logger, this._ui, this._styler);
+                            output = (yield selector.go('nodeSpec', 'Node size:', false, undefined, false, () => new Promise(resolve => resolve(choices))));
+                        }
+                        else {
+                            output = (yield this._ui.prompt("nodeSpec", "Node size: ", true, defaultValue));
+                        }
+                    }
+                    resolve(output);
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    getAvailableNodeSizes(location) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                let output;
+                try {
+                    this._ui.startSpinner(`Loading available node sizes in ${location}...`);
+                    let result = yield this.genRelayClient.Call.getAzureNodeTypes({ location: location });
+                    output = (_a = result.output) !== null && _a !== void 0 ? _a : [];
+                    if (result.error) {
+                        this._ui.stopSpinner(`Error!`);
+                        this.logger.warn(`Error retrieving available node sizes: ${(_b = result.message) !== null && _b !== void 0 ? _b : (_c = result.error) === null || _c === void 0 ? void 0 : _c.message}`);
+                    }
+                    else {
+                        this._ui.stopSpinner(`${output.length} found`);
+                    }
+                    resolve(output);
+                }
+                catch (err) {
+                    // this.logger.error(`${err.name ?? ''} ${err.message ?? ''}`, err.stack);
+                    reject(err);
+                }
+            }));
+        });
+    }
+    /* ***********************************************************************************
+     *       _   __             _   _             _ _
+     *      | | / /            | | | |           | | |
+     *      | |/ /  ___ _   _  | | | | __ _ _   _| | |_
+     *      |    \ / _ \ | | | | | | |/ _` | | | | | __|
+     *      | |\  \  __/ |_| | \ \_/ / (_| | |_| | | |_
+     *      \_| \_/\___|\__, |  \___/ \__,_|\__,_|_|\__|
+     *                   __/ |
+     *                  |___/
+     * ************************************************************************************/
+    captureSecretStore(/* storeProv: ISecretStoreProvisioner, */ defaults) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            try {
+                let output;
+                const azUser = yield this.relayClient.getCurrentUserFor(this.cloudProvider);
+                // /* TODO: use this instead of relayClient call above ^ */ 
+                // const azUserResult = await this.genRelayClient.Call.get_current_user_for({ providerCode: this.cloudProvider });
+                // if (azUserResult.error) throw azUserResult.error;
+                // const azUser = azUserResult.output;
+                if (!azUser)
+                    throw new Error(`Cannot capture any ${this.cloudProvider} secret store: No ${this.cloudProvider} account has been authenticated.`);
+                let subxId = yield this.promptForSubscriptionId(azUser, defaults === null || defaults === void 0 ? void 0 : defaults.subscriptionId);
+                let crit = { subscriptionId: subxId };
+                // let fetchResult = await storeProv.list(crit);
+                // let otherResult = await this.relayClient.getStorageAccounts(this.cloudProvider, defaults?.subscriptionId ?? "");
+                // let mylist = otherResult.output.map((x,index) => { })
+                let fetchResult = yield this.relayClient.listSecretStores(this.cloudProvider, crit);
+                // /** TODO: use this instead: */  let fetchResult = await this.genRelayClient.Call.GetSecretStores({ provider: this.cloudProvider, spec: crit });
+                if (fetchResult.error) {
+                    throw fetchResult.error;
+                }
+                else if (fetchResult.output === undefined || fetchResult.output.length === 0) {
+                    // this._ui.userMessage(`No secret stores currently exist in ${partial.provider}.  You will need to create one.`);
+                    throw new Error(`No secret stores currently exist in ${this.cloudProvider}.  You will need to create one.`);
+                }
+                else {
+                    let choices = (fetchResult.output).map((s, index) => { return { name: s.name, value: index }; });
+                    let selectedIndex = (yield this._ui.promptSelect("secretStore", "Secret store: ", choices));
+                    let kv = fetchResult.output[selectedIndex]; // CAUTION: Later on this may not be a valid cast/assumption
+                    const sku = "premium"; // TODO:  Get this onto the AzureKeyVault entity.
+                    output = new contracts_2.AzureKeyVaultDef(kv.name, kv.resourceGroup, kv.tenantId, kv.subscriptionId, kv.location, sku, kv);
+                }
+                return output;
+            }
+            catch (err) {
+                throw err;
+            }
+        });
+    }
+    createAuditable() {
+        let stamp = new Date(Date.now());
+        return {
+            created: stamp,
+            createdBy: this.codiacUser.username,
+            modified: stamp,
+            modifiedBy: this.codiacUser.username
+        };
+    }
+};
+AzureResourceConfigurator = tslib_1.__decorate([
+    (0, inversify_1.injectable)(),
+    tslib_1.__param(0, (0, inversify_1.inject)(extended_relay_client_1.ExtendedRelayClient)),
+    tslib_1.__param(1, (0, inversify_1.inject)(codiac_relay_1.RelayClient)),
+    tslib_1.__param(2, (0, inversify_1.inject)(codiac_ops_common_1.UserNameTenantCode)),
+    tslib_1.__param(3, (0, inversify_1.inject)(codiac_ops_common_1.INTERFACES_OPS.IUserInputProvider)),
+    tslib_1.__param(4, (0, inversify_1.inject)(codiac_ops_common_1.INTERFACES_OPS.IOutputStyler)),
+    tslib_1.__param(5, (0, inversify_1.inject)(codiac_common_1.INTERFACES.IBetterLogger)),
+    tslib_1.__metadata("design:paramtypes", [extended_relay_client_1.ExtendedRelayClient,
+        codiac_relay_1.RelayClient,
+        codiac_ops_common_1.UserNameTenantCode, Object, Object, Object])
+], AzureResourceConfigurator);
+exports.AzureResourceConfigurator = AzureResourceConfigurator;
 //# sourceMappingURL=azure-resource-configurator.js.map