@digifi/k8s-grpc-js-resolver 0.1.0

package/LICENSE

@@ -0,0 +1,14 @@
+ISC License
+
+Copyright (c) 2026 DigiFi
+
+Permission to use, copy, modify, and/or distribute this software for any purpose with or without
+fee is hereby granted, provided that the above copyright notice and this permission notice appear
+in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS
+SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE
+AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
+NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
+OF THIS SOFTWARE.

package/README.md

@@ -0,0 +1,98 @@
+# @digifi/k8s-grpc-js-resolver
+
+A [`@grpc/grpc-js`](https://www.npmjs.com/package/@grpc/grpc-js) resolver that watches Kubernetes
+EndpointSlices and pushes backend changes into grpc-js. It is intended for headless Services used
+with client-side `round_robin` load balancing.
+
+The stock DNS resolver may keep a subchannel for a terminating pod until the connection fails or
+grpc-js asks DNS to resolve again. This package removes an endpoint as soon as Kubernetes reports
+`ready: false`, `serving: false`, or `terminating: true`, and adds new endpoints on the watch event.
+
+## Install
+
+```sh
+npm install @digifi/k8s-grpc-js-resolver @grpc/grpc-js
+```
+
+The package declares grpc-js as a peer dependency so the application and resolver share the same
+process-wide resolver registry.
+
+## Usage
+
+```ts
+import { credentials } from '@grpc/grpc-js';
+import { resolveGrpcTargetAddress } from '@digifi/k8s-grpc-js-resolver';
+
+const target = resolveGrpcTargetAddress('digifi-users-headless:4004');
+const client = new UsersClient(target, credentials.createInsecure(), {
+  'grpc.service_config': JSON.stringify({
+    loadBalancingConfig: [{ round_robin: {} }],
+  }),
+});
+```
+
+Set `GRPC_K8S_RESOLVER_ENABLED=true` in the client workload. Recognized in-cluster Service
+addresses are rewritten to `k8s://<namespace>/<service>:<port>`. External hosts, IP literals,
+loopback addresses, and targets that already have another scheme are left unchanged.
+
+Explicit `k8s://` targets register the resolver without requiring the feature flag:
+
+```ts
+resolveGrpcTargetAddress('k8s://test4/digifi-users-headless:4004');
+```
+
+### Environment
+
+| Variable                         | Default                        | Purpose                                                       |
+| -------------------------------- | ------------------------------ | ------------------------------------------------------------- |
+| `GRPC_K8S_RESOLVER_ENABLED`      | `false`                        | Rewrites recognized in-cluster `host:port` targets.           |
+| `GRPC_K8S_RESOLVER_DNS_FALLBACK` | `true`                         | Uses headless DNS when initial EndpointSlice discovery fails. |
+| `POD_NAMESPACE`                  | ServiceAccount namespace file  | Overrides the caller pod namespace.                           |
+| `KUBERNETES_CLUSTER_DOMAIN`      | detected, then `cluster.local` | Overrides the cluster domain used by DNS fallback.            |
+| `LogLevel`                       | `info`                         | Controls resolver `error`, `warn`, and `info` output.         |
+
+DNS fallback is used only when EndpointSlice discovery is unavailable. A healthy watch reporting
+zero ready endpoints publishes an empty resolution so grpc-js drops stale subchannels.
+
+## Kubernetes RBAC
+
+The caller pod's ServiceAccount must be able to read EndpointSlices in its namespace:
+
+```yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: grpc-endpointslice-reader
+rules:
+  - apiGroups: [discovery.k8s.io]
+    resources: [endpointslices]
+    verbs: [get, list, watch]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: grpc-endpointslice-reader
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: grpc-endpointslice-reader
+subjects:
+  - kind: ServiceAccount
+    name: default
+    namespace: test4
+```
+
+Prefer a dedicated ServiceAccount in shared environments. The resolver keeps one watch per
+namespace in each Node.js process and shares it across all gRPC targets in that namespace.
+
+## Development
+
+```sh
+npm ci
+npm run check
+npm pack --dry-run
+```
+
+Publishing is configured for the public `@digifi` scope on npm. Update `package.json` to the release
+version, merge it, and publish a GitHub Release. The release workflow expects an `NPM_AUTH_TOKEN`
+repository secret. A manual workflow dispatch can publish the same version under a custom npm tag.

package/dist/dns-fallback.d.ts

@@ -0,0 +1,20 @@
+/**
+ * A pod's `search` list contains `svc.<cluster-domain>`, which is the only reliable in-cluster
+ * source for the domain. Falls back to the upstream default when running outside a cluster.
+ */
+export declare const readClusterDomainFromSearchDomains: (searchDomains: string[]) => string | null;
+export declare const readClusterDomain: () => string;
+/**
+ * The trailing dot makes the name absolute. Without it a four-label name stays below the default
+ * `ndots:5` of a pod's resolv.conf and every lookup first walks the whole search list, costing
+ * three NXDOMAIN round trips before the real answer.
+ */
+export declare const buildHeadlessServiceDnsName: (serviceName: string, namespace: string, clusterDomain?: string) => string;
+/**
+ * Uses `resolve*` rather than `lookup`: `lookup` is `getaddrinfo`, which occupies a libuv
+ * threadpool slot shared with file and crypto work, and applies the search list. Both families are
+ * queried because that is what the headless DNS path this falls back to used to return.
+ */
+export declare const resolveHeadlessDnsHosts: (serviceName: string, namespace: string) => Promise<string[]>;
+export declare const resetClusterDomainCache: () => void;
+//# sourceMappingURL=dns-fallback.d.ts.map

package/dist/dns-fallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-fallback.d.ts","sourceRoot":"","sources":["../src/dns-fallback.ts"],"names":[],"mappings":"AAYA;;;GAGG;AACH,eAAO,MAAM,kCAAkC,GAAI,eAAe,MAAM,EAAE,KAAG,MAAM,GAAG,IAUrF,CAAC;AAiBF,eAAO,MAAM,iBAAiB,QAAO,MASpC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,GACtC,aAAa,MAAM,EACnB,WAAW,MAAM,EACjB,gBAAe,MAA4B,KAC1C,MAA6D,CAAC;AAEjE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,GAClC,aAAa,MAAM,EACnB,WAAW,MAAM,KAChB,OAAO,CAAC,MAAM,EAAE,CAmBlB,CAAC;AAEF,eAAO,MAAM,uBAAuB,QAAO,IAE1C,CAAC"}

package/dist/dns-fallback.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetClusterDomainCache = exports.resolveHeadlessDnsHosts = exports.buildHeadlessServiceDnsName = exports.readClusterDomain = exports.readClusterDomainFromSearchDomains = void 0;
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:dns/promises");
+const RESOLV_CONF_PATH = '/etc/resolv.conf';
+const CLUSTER_DOMAIN_ENV = 'KUBERNETES_CLUSTER_DOMAIN';
+const DEFAULT_CLUSTER_DOMAIN = 'cluster.local';
+const SERVICE_SEARCH_DOMAIN_PATTERN = /^svc\.(.+)$/;
+const DNS_TIMEOUT_MS = 5_000;
+const DNS_ATTEMPTS = 2;
+let cachedClusterDomain;
+/**
+ * A pod's `search` list contains `svc.<cluster-domain>`, which is the only reliable in-cluster
+ * source for the domain. Falls back to the upstream default when running outside a cluster.
+ */
+const readClusterDomainFromSearchDomains = (searchDomains) => {
+    for (const searchDomain of searchDomains) {
+        const match = SERVICE_SEARCH_DOMAIN_PATTERN.exec(searchDomain.replace(/\.$/, ''));
+        if (match) {
+            return match[1];
+        }
+    }
+    return null;
+};
+exports.readClusterDomainFromSearchDomains = readClusterDomainFromSearchDomains;
+const readSearchDomains = () => {
+    try {
+        return (0, node_fs_1.readFileSync)(RESOLV_CONF_PATH, 'utf8')
+            .split('\n')
+            .flatMap((line) => {
+            const [directive, ...domains] = line.trim().split(/\s+/);
+            return directive === 'search' ? domains : [];
+        });
+    }
+    catch {
+        // Not running in-cluster, or resolv.conf is unreadable.
+        return [];
+    }
+};
+const readClusterDomain = () => {
+    if (cachedClusterDomain === undefined) {
+        cachedClusterDomain =
+            process.env[CLUSTER_DOMAIN_ENV] ||
+                (0, exports.readClusterDomainFromSearchDomains)(readSearchDomains()) ||
+                DEFAULT_CLUSTER_DOMAIN;
+    }
+    return cachedClusterDomain;
+};
+exports.readClusterDomain = readClusterDomain;
+/**
+ * The trailing dot makes the name absolute. Without it a four-label name stays below the default
+ * `ndots:5` of a pod's resolv.conf and every lookup first walks the whole search list, costing
+ * three NXDOMAIN round trips before the real answer.
+ */
+const buildHeadlessServiceDnsName = (serviceName, namespace, clusterDomain = (0, exports.readClusterDomain)()) => `${serviceName}.${namespace}.svc.${clusterDomain}.`;
+exports.buildHeadlessServiceDnsName = buildHeadlessServiceDnsName;
+/**
+ * Uses `resolve*` rather than `lookup`: `lookup` is `getaddrinfo`, which occupies a libuv
+ * threadpool slot shared with file and crypto work, and applies the search list. Both families are
+ * queried because that is what the headless DNS path this falls back to used to return.
+ */
+const resolveHeadlessDnsHosts = async (serviceName, namespace) => {
+    const hostname = (0, exports.buildHeadlessServiceDnsName)(serviceName, namespace);
+    const resolver = new promises_1.Resolver({ timeout: DNS_TIMEOUT_MS, tries: DNS_ATTEMPTS });
+    const [ipv4, ipv6] = await Promise.allSettled([
+        resolver.resolve4(hostname),
+        resolver.resolve6(hostname),
+    ]);
+    const hosts = [
+        ...(ipv4.status === 'fulfilled' ? ipv4.value : []),
+        ...(ipv6.status === 'fulfilled' ? ipv6.value : []),
+    ];
+    if (hosts.length === 0 && ipv4.status === 'rejected') {
+        throw ipv4.reason;
+    }
+    return hosts;
+};
+exports.resolveHeadlessDnsHosts = resolveHeadlessDnsHosts;
+const resetClusterDomainCache = () => {
+    cachedClusterDomain = undefined;
+};
+exports.resetClusterDomainCache = resetClusterDomainCache;
+//# sourceMappingURL=dns-fallback.js.map

package/dist/dns-fallback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-fallback.js","sourceRoot":"","sources":["../src/dns-fallback.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,gDAA6C;AAE7C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AACvD,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAC/C,MAAM,6BAA6B,GAAG,aAAa,CAAC;AACpD,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB,IAAI,mBAAuC,CAAC;AAE5C;;;GAGG;AACI,MAAM,kCAAkC,GAAG,CAAC,aAAuB,EAAiB,EAAE;IAC3F,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QAElF,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAVW,QAAA,kCAAkC,sCAU7C;AAEF,MAAM,iBAAiB,GAAG,GAAa,EAAE;IACvC,IAAI,CAAC;QACH,OAAO,IAAA,sBAAY,EAAC,gBAAgB,EAAE,MAAM,CAAC;aAC1C,KAAK,CAAC,IAAI,CAAC;aACX,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAChB,MAAM,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAEzD,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;QACxD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEK,MAAM,iBAAiB,GAAG,GAAW,EAAE;IAC5C,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,mBAAmB;YACjB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAC/B,IAAA,0CAAkC,EAAC,iBAAiB,EAAE,CAAC;gBACvD,sBAAsB,CAAC;IAC3B,CAAC;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AATW,QAAA,iBAAiB,qBAS5B;AAEF;;;;GAIG;AACI,MAAM,2BAA2B,GAAG,CACzC,WAAmB,EACnB,SAAiB,EACjB,gBAAwB,IAAA,yBAAiB,GAAE,EACnC,EAAE,CAAC,GAAG,WAAW,IAAI,SAAS,QAAQ,aAAa,GAAG,CAAC;AAJpD,QAAA,2BAA2B,+BAIyB;AAEjE;;;;GAIG;AACI,MAAM,uBAAuB,GAAG,KAAK,EAC1C,WAAmB,EACnB,SAAiB,EACE,EAAE;IACrB,MAAM,QAAQ,GAAG,IAAA,mCAA2B,EAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,mBAAQ,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAEhF,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QAC5C,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC5B,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACrD,MAAM,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAtBW,QAAA,uBAAuB,2BAsBlC;AAEK,MAAM,uBAAuB,GAAG,GAAS,EAAE;IAChD,mBAAmB,GAAG,SAAS,CAAC;AAClC,CAAC,CAAC;AAFW,QAAA,uBAAuB,2BAElC"}

package/dist/endpoint-slice-store.d.ts

@@ -0,0 +1,81 @@
+/**
+ * In-memory projection of Kubernetes EndpointSlices, kept per namespace.
+ *
+ * Deliberately free of I/O so the merge/readiness/notification rules can be tested directly.
+ * The watch driver in `k8s-endpoint-watch` owns the transport and feeds this store.
+ */
+export interface IEndpointSlicePort {
+    portName: string;
+    port: number;
+}
+export interface IRawEndpointConditions {
+    ready?: boolean;
+    serving?: boolean;
+    terminating?: boolean;
+}
+export interface IRawEndpoint {
+    addresses?: string[];
+    conditions?: IRawEndpointConditions;
+}
+export interface IRawEndpointPort {
+    name?: string;
+    port?: number;
+    protocol?: string;
+}
+export interface IRawEndpointSlice {
+    addressType?: string;
+    metadata?: {
+        name?: string;
+        resourceVersion?: string;
+        labels?: Record<string, string>;
+    };
+    endpoints?: IRawEndpoint[];
+    ports?: IRawEndpointPort[];
+}
+export interface INormalizedEndpointSlice {
+    sliceName: string;
+    serviceName: string;
+    hosts: string[];
+    ports: IEndpointSlicePort[];
+}
+/**
+ * `pending` means no successful list has completed yet, so callers must keep waiting instead of
+ * reporting a failure. `ready` and `failed` are both terminal enough to answer a name resolution.
+ */
+export type IServiceResolution = {
+    status: 'pending';
+} | {
+    status: 'ready';
+    hosts: string[];
+    ports: IEndpointSlicePort[];
+} | {
+    status: 'failed';
+    message: string;
+};
+export type IStoreListener = () => void;
+/**
+ * A nil `ready` means "unknown", which consumers are expected to treat as ready. `terminating`
+ * endpoints are the whole point of this resolver: they must leave the pool before the pod dies.
+ */
+export declare const isEndpointReady: (endpoint: IRawEndpoint) => boolean;
+export declare const normalizeEndpointSlice: (endpointSlice: IRawEndpointSlice) => INormalizedEndpointSlice | undefined;
+export declare const addEndpointSliceListener: (namespace: string, serviceName: string, listener: IStoreListener) => void;
+export declare const removeEndpointSliceListener: (namespace: string, serviceName: string, listener: IStoreListener) => void;
+export declare const getListenedServices: (namespace: string) => string[];
+export declare const hasListenedServices: (namespace: string) => boolean;
+/**
+ * Applies a full list result. Every listened service is notified, including services with no
+ * slices at all, so a missing or misspelled service resolves to an error instead of hanging.
+ */
+export declare const replaceNamespaceSlices: (namespace: string, rawSlices: IRawEndpointSlice[]) => void;
+export declare const applyEndpointSliceEvent: (namespace: string, eventType: string, rawSlice: IRawEndpointSlice) => void;
+/**
+ * Records a namespace-level watch failure. Endpoints already known stay in place — a transient
+ * API server blip must not tear down a working pool — so the failure only becomes visible to
+ * callers while the namespace has never been listed successfully.
+ */
+export declare const markNamespaceFailed: (namespace: string, message: string) => void;
+export declare const resetNamespace: (namespace: string) => void;
+export declare const resolveService: (namespace: string, serviceName: string) => IServiceResolution;
+export declare const resetEndpointSliceStore: () => void;
+//# sourceMappingURL=endpoint-slice-store.d.ts.map

package/dist/endpoint-slice-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-slice-store.d.ts","sourceRoot":"","sources":["../src/endpoint-slice-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACjC,CAAC;IACF,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,kBAAkB,EAAE,CAAA;CAAE,GACjE;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC;AAsCxC;;;GAGG;AACH,eAAO,MAAM,eAAe,GAAI,UAAU,YAAY,KAAG,OAUxD,CAAC;AAEF,eAAO,MAAM,sBAAsB,GACjC,eAAe,iBAAiB,KAC/B,wBAAwB,GAAG,SA2B7B,CAAC;AAsBF,eAAO,MAAM,wBAAwB,GACnC,WAAW,MAAM,EACjB,aAAa,MAAM,EACnB,UAAU,cAAc,KACvB,IAMF,CAAC;AAEF,eAAO,MAAM,2BAA2B,GACtC,WAAW,MAAM,EACjB,aAAa,MAAM,EACnB,UAAU,cAAc,KACvB,IAeF,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,WAAW,MAAM,KAAG,MAAM,EAE7D,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,WAAW,MAAM,KAAG,OAEvD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GAAI,WAAW,MAAM,EAAE,WAAW,iBAAiB,EAAE,KAAG,IAgB1F,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAClC,WAAW,MAAM,EACjB,WAAW,MAAM,EACjB,UAAU,iBAAiB,KAC1B,IA2BF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,WAAW,MAAM,EAAE,SAAS,MAAM,KAAG,IAWxE,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,WAAW,MAAM,KAAG,IAElD,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,WAAW,MAAM,EAAE,aAAa,MAAM,KAAG,kBAiCvE,CAAC;AAEF,eAAO,MAAM,uBAAuB,QAAO,IAE1C,CAAC"}

package/dist/endpoint-slice-store.js

@@ -0,0 +1,201 @@
+"use strict";
+/**
+ * In-memory projection of Kubernetes EndpointSlices, kept per namespace.
+ *
+ * Deliberately free of I/O so the merge/readiness/notification rules can be tested directly.
+ * The watch driver in `k8s-endpoint-watch` owns the transport and feeds this store.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetEndpointSliceStore = exports.resolveService = exports.resetNamespace = exports.markNamespaceFailed = exports.applyEndpointSliceEvent = exports.replaceNamespaceSlices = exports.hasListenedServices = exports.getListenedServices = exports.removeEndpointSliceListener = exports.addEndpointSliceListener = exports.normalizeEndpointSlice = exports.isEndpointReady = void 0;
+const SERVICE_NAME_LABEL = 'kubernetes.io/service-name';
+/** `FQDN` slices carry hostnames rather than addresses and are not usable as dial targets. */
+const IP_ADDRESS_TYPES = new Set(['IPv4', 'IPv6']);
+const namespaceStates = new Map();
+const createNamespaceState = () => ({
+    status: 'pending',
+    failureMessage: '',
+    slicesByName: new Map(),
+    listenersByService: new Map(),
+});
+const getOrCreateNamespaceState = (namespace) => {
+    const existing = namespaceStates.get(namespace);
+    if (existing) {
+        return existing;
+    }
+    const created = createNamespaceState();
+    namespaceStates.set(namespace, created);
+    return created;
+};
+/**
+ * A nil `ready` means "unknown", which consumers are expected to treat as ready. `terminating`
+ * endpoints are the whole point of this resolver: they must leave the pool before the pod dies.
+ */
+const isEndpointReady = (endpoint) => {
+    const conditions = endpoint.conditions;
+    if (!conditions) {
+        return true;
+    }
+    return (conditions.ready !== false && conditions.serving !== false && conditions.terminating !== true);
+};
+exports.isEndpointReady = isEndpointReady;
+const normalizeEndpointSlice = (endpointSlice) => {
+    const sliceName = endpointSlice.metadata?.name;
+    if (!sliceName) {
+        return undefined;
+    }
+    if (endpointSlice.addressType !== undefined && !IP_ADDRESS_TYPES.has(endpointSlice.addressType)) {
+        return undefined;
+    }
+    const hosts = (endpointSlice.endpoints ?? [])
+        .filter(exports.isEndpointReady)
+        .flatMap((endpoint) => endpoint.addresses ?? []);
+    const ports = (endpointSlice.ports ?? [])
+        .filter((port) => {
+        return port.protocol === 'TCP' && typeof port.port === 'number';
+    })
+        .map((port) => ({ portName: port.name ?? '', port: port.port }));
+    return {
+        sliceName,
+        serviceName: endpointSlice.metadata?.labels?.[SERVICE_NAME_LABEL] ?? '',
+        hosts,
+        ports,
+    };
+};
+exports.normalizeEndpointSlice = normalizeEndpointSlice;
+const notifyServices = (namespace, serviceNames) => {
+    const state = namespaceStates.get(namespace);
+    if (!state) {
+        return;
+    }
+    for (const serviceName of serviceNames) {
+        const listeners = state.listenersByService.get(serviceName);
+        if (!listeners) {
+            continue;
+        }
+        for (const listener of listeners) {
+            listener();
+        }
+    }
+};
+const addEndpointSliceListener = (namespace, serviceName, listener) => {
+    const state = getOrCreateNamespaceState(namespace);
+    const listeners = state.listenersByService.get(serviceName) ?? new Set();
+    listeners.add(listener);
+    state.listenersByService.set(serviceName, listeners);
+};
+exports.addEndpointSliceListener = addEndpointSliceListener;
+const removeEndpointSliceListener = (namespace, serviceName, listener) => {
+    const state = namespaceStates.get(namespace);
+    const listeners = state?.listenersByService.get(serviceName);
+    if (!listeners) {
+        return;
+    }
+    listeners.delete(listener);
+    if (listeners.size > 0) {
+        return;
+    }
+    state?.listenersByService.delete(serviceName);
+};
+exports.removeEndpointSliceListener = removeEndpointSliceListener;
+const getListenedServices = (namespace) => {
+    return Array.from(namespaceStates.get(namespace)?.listenersByService.keys() ?? []);
+};
+exports.getListenedServices = getListenedServices;
+const hasListenedServices = (namespace) => {
+    return (namespaceStates.get(namespace)?.listenersByService.size ?? 0) > 0;
+};
+exports.hasListenedServices = hasListenedServices;
+/**
+ * Applies a full list result. Every listened service is notified, including services with no
+ * slices at all, so a missing or misspelled service resolves to an error instead of hanging.
+ */
+const replaceNamespaceSlices = (namespace, rawSlices) => {
+    const state = getOrCreateNamespaceState(namespace);
+    state.status = 'ready';
+    state.failureMessage = '';
+    state.slicesByName = new Map();
+    for (const rawSlice of rawSlices) {
+        const normalized = (0, exports.normalizeEndpointSlice)(rawSlice);
+        if (normalized) {
+            state.slicesByName.set(normalized.sliceName, normalized);
+        }
+    }
+    notifyServices(namespace, state.listenersByService.keys());
+};
+exports.replaceNamespaceSlices = replaceNamespaceSlices;
+const applyEndpointSliceEvent = (namespace, eventType, rawSlice) => {
+    const normalized = (0, exports.normalizeEndpointSlice)(rawSlice);
+    if (!normalized) {
+        return;
+    }
+    const state = getOrCreateNamespaceState(namespace);
+    const previous = state.slicesByName.get(normalized.sliceName);
+    const affectedServices = new Set();
+    // A slice can be relabelled onto another service, so the previous owner has to be notified too.
+    if (previous?.serviceName) {
+        affectedServices.add(previous.serviceName);
+    }
+    if (eventType === 'DELETED') {
+        state.slicesByName.delete(normalized.sliceName);
+    }
+    else {
+        state.slicesByName.set(normalized.sliceName, normalized);
+        if (normalized.serviceName) {
+            affectedServices.add(normalized.serviceName);
+        }
+    }
+    notifyServices(namespace, affectedServices);
+};
+exports.applyEndpointSliceEvent = applyEndpointSliceEvent;
+/**
+ * Records a namespace-level watch failure. Endpoints already known stay in place — a transient
+ * API server blip must not tear down a working pool — so the failure only becomes visible to
+ * callers while the namespace has never been listed successfully.
+ */
+const markNamespaceFailed = (namespace, message) => {
+    const state = getOrCreateNamespaceState(namespace);
+    if (state.status === 'ready') {
+        return;
+    }
+    state.status = 'failed';
+    state.failureMessage = message;
+    notifyServices(namespace, (0, exports.getListenedServices)(namespace));
+};
+exports.markNamespaceFailed = markNamespaceFailed;
+const resetNamespace = (namespace) => {
+    namespaceStates.delete(namespace);
+};
+exports.resetNamespace = resetNamespace;
+const resolveService = (namespace, serviceName) => {
+    const state = namespaceStates.get(namespace);
+    if (!state || state.status === 'pending') {
+        return { status: 'pending' };
+    }
+    if (state.status === 'failed') {
+        return { status: 'failed', message: state.failureMessage };
+    }
+    const hosts = new Set();
+    const portsByNumber = new Map();
+    for (const slice of state.slicesByName.values()) {
+        if (slice.serviceName !== serviceName) {
+            continue;
+        }
+        for (const host of slice.hosts) {
+            hosts.add(host);
+        }
+        for (const port of slice.ports) {
+            portsByNumber.set(port.port, port);
+        }
+    }
+    return {
+        status: 'ready',
+        hosts: Array.from(hosts),
+        ports: Array.from(portsByNumber.values()),
+    };
+};
+exports.resolveService = resolveService;
+const resetEndpointSliceStore = () => {
+    namespaceStates.clear();
+};
+exports.resetEndpointSliceStore = resetEndpointSliceStore;
+//# sourceMappingURL=endpoint-slice-store.js.map

package/dist/endpoint-slice-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-slice-store.js","sourceRoot":"","sources":["../src/endpoint-slice-store.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AA8DH,MAAM,kBAAkB,GAAG,4BAA4B,CAAC;AACxD,8FAA8F;AAC9F,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEnD,MAAM,eAAe,GAAG,IAAI,GAAG,EAA2B,CAAC;AAE3D,MAAM,oBAAoB,GAAG,GAAoB,EAAE,CAAC,CAAC;IACnD,MAAM,EAAE,SAAS;IACjB,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,IAAI,GAAG,EAAE;IACvB,kBAAkB,EAAE,IAAI,GAAG,EAAE;CAC9B,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAAC,SAAiB,EAAmB,EAAE;IACvE,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEhD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;IAEvC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAExC,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF;;;GAGG;AACI,MAAM,eAAe,GAAG,CAAC,QAAsB,EAAW,EAAE;IACjE,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IAEvC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,UAAU,CAAC,KAAK,KAAK,KAAK,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,IAAI,UAAU,CAAC,WAAW,KAAK,IAAI,CAC9F,CAAC;AACJ,CAAC,CAAC;AAVW,QAAA,eAAe,mBAU1B;AAEK,MAAM,sBAAsB,GAAG,CACpC,aAAgC,EACM,EAAE;IACxC,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC;IAE/C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,aAAa,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;QAChG,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,EAAE,CAAC;SAC1C,MAAM,CAAC,uBAAe,CAAC;SACvB,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;SACtC,MAAM,CAAC,CAAC,IAAI,EAA+C,EAAE;QAC5D,OAAO,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;IAClE,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEnE,OAAO;QACL,SAAS;QACT,WAAW,EAAE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE;QACvE,KAAK;QACL,KAAK;KACN,CAAC;AACJ,CAAC,CAAC;AA7BW,QAAA,sBAAsB,0BA6BjC;AAEF,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAE,YAA8B,EAAQ,EAAE;IACjF,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAE5D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEK,MAAM,wBAAwB,GAAG,CACtC,SAAiB,EACjB,WAAmB,EACnB,QAAwB,EAClB,EAAE;IACR,MAAM,KAAK,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;IAEzF,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC,CAAC;AAVW,QAAA,wBAAwB,4BAUnC;AAEK,MAAM,2BAA2B,GAAG,CACzC,SAAiB,EACjB,WAAmB,EACnB,QAAwB,EAClB,EAAE;IACR,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAE7D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE3B,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IAED,KAAK,EAAE,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAChD,CAAC,CAAC;AAnBW,QAAA,2BAA2B,+BAmBtC;AAEK,MAAM,mBAAmB,GAAG,CAAC,SAAiB,EAAY,EAAE;IACjE,OAAO,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACrF,CAAC,CAAC;AAFW,QAAA,mBAAmB,uBAE9B;AAEK,MAAM,mBAAmB,GAAG,CAAC,SAAiB,EAAW,EAAE;IAChE,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC5E,CAAC,CAAC;AAFW,QAAA,mBAAmB,uBAE9B;AAEF;;;GAGG;AACI,MAAM,sBAAsB,GAAG,CAAC,SAAiB,EAAE,SAA8B,EAAQ,EAAE;IAChG,MAAM,KAAK,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAEnD,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC;IACvB,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC;IAC1B,KAAK,CAAC,YAAY,GAAG,IAAI,GAAG,EAAE,CAAC;IAE/B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAA,8BAAsB,EAAC,QAAQ,CAAC,CAAC;QAEpD,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC,CAAC;AAhBW,QAAA,sBAAsB,0BAgBjC;AAEK,MAAM,uBAAuB,GAAG,CACrC,SAAiB,EACjB,SAAiB,EACjB,QAA2B,EACrB,EAAE;IACR,MAAM,UAAU,GAAG,IAAA,8BAAsB,EAAC,QAAQ,CAAC,CAAC;IAEpD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,gGAAgG;IAChG,IAAI,QAAQ,EAAE,WAAW,EAAE,CAAC;QAC1B,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAEzD,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3B,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,cAAc,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;AAC9C,CAAC,CAAC;AA/BW,QAAA,uBAAuB,2BA+BlC;AAEF;;;;GAIG;AACI,MAAM,mBAAmB,GAAG,CAAC,SAAiB,EAAE,OAAe,EAAQ,EAAE;IAC9E,MAAM,KAAK,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAEnD,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC;IACxB,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC;IAE/B,cAAc,CAAC,SAAS,EAAE,IAAA,2BAAmB,EAAC,SAAS,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC;AAXW,QAAA,mBAAmB,uBAW9B;AAEK,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAQ,EAAE;IACxD,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC,CAAC;AAFW,QAAA,cAAc,kBAEzB;AAEK,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAE,WAAmB,EAAsB,EAAE;IAC3F,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE7C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,aAAa,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE5D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACtC,SAAS;QACX,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACxB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC,CAAC;AAjCW,QAAA,cAAc,kBAiCzB;AAEK,MAAM,uBAAuB,GAAG,GAAS,EAAE;IAChD,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC,CAAC;AAFW,QAAA,uBAAuB,2BAElC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { registerK8sResolver, resolveGrpcTargetAddress } from './resolve-grpc-target-address';
+export { GRPC_K8S_RESOLVER_DNS_FALLBACK_ENV, GRPC_K8S_RESOLVER_ENABLED_ENV, K8S_RESOLVER_SCHEME, } from './resolver.constants';
+export { extractServiceAndNamespace, isK8sResolverEnabled, parseHostPortAddress, rewriteGrpcAddressIfEnabled, toK8sResolverAddress, } from './rewrite-grpc-address';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9F,OAAO,EACL,kCAAkC,EAClC,6BAA6B,EAC7B,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toK8sResolverAddress = exports.rewriteGrpcAddressIfEnabled = exports.parseHostPortAddress = exports.isK8sResolverEnabled = exports.extractServiceAndNamespace = exports.K8S_RESOLVER_SCHEME = exports.GRPC_K8S_RESOLVER_ENABLED_ENV = exports.GRPC_K8S_RESOLVER_DNS_FALLBACK_ENV = exports.resolveGrpcTargetAddress = exports.registerK8sResolver = void 0;
+var resolve_grpc_target_address_1 = require("./resolve-grpc-target-address");
+Object.defineProperty(exports, "registerK8sResolver", { enumerable: true, get: function () { return resolve_grpc_target_address_1.registerK8sResolver; } });
+Object.defineProperty(exports, "resolveGrpcTargetAddress", { enumerable: true, get: function () { return resolve_grpc_target_address_1.resolveGrpcTargetAddress; } });
+var resolver_constants_1 = require("./resolver.constants");
+Object.defineProperty(exports, "GRPC_K8S_RESOLVER_DNS_FALLBACK_ENV", { enumerable: true, get: function () { return resolver_constants_1.GRPC_K8S_RESOLVER_DNS_FALLBACK_ENV; } });
+Object.defineProperty(exports, "GRPC_K8S_RESOLVER_ENABLED_ENV", { enumerable: true, get: function () { return resolver_constants_1.GRPC_K8S_RESOLVER_ENABLED_ENV; } });
+Object.defineProperty(exports, "K8S_RESOLVER_SCHEME", { enumerable: true, get: function () { return resolver_constants_1.K8S_RESOLVER_SCHEME; } });
+var rewrite_grpc_address_1 = require("./rewrite-grpc-address");
+Object.defineProperty(exports, "extractServiceAndNamespace", { enumerable: true, get: function () { return rewrite_grpc_address_1.extractServiceAndNamespace; } });
+Object.defineProperty(exports, "isK8sResolverEnabled", { enumerable: true, get: function () { return rewrite_grpc_address_1.isK8sResolverEnabled; } });
+Object.defineProperty(exports, "parseHostPortAddress", { enumerable: true, get: function () { return rewrite_grpc_address_1.parseHostPortAddress; } });
+Object.defineProperty(exports, "rewriteGrpcAddressIfEnabled", { enumerable: true, get: function () { return rewrite_grpc_address_1.rewriteGrpcAddressIfEnabled; } });
+Object.defineProperty(exports, "toK8sResolverAddress", { enumerable: true, get: function () { return rewrite_grpc_address_1.toK8sResolverAddress; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,6EAA8F;AAArF,kIAAA,mBAAmB,OAAA;AAAE,uIAAA,wBAAwB,OAAA;AACtD,2DAI8B;AAH5B,wIAAA,kCAAkC,OAAA;AAClC,mIAAA,6BAA6B,OAAA;AAC7B,yHAAA,mBAAmB,OAAA;AAErB,+DAMgC;AAL9B,kIAAA,0BAA0B,OAAA;AAC1B,4HAAA,oBAAoB,OAAA;AACpB,4HAAA,oBAAoB,OAAA;AACpB,mIAAA,2BAA2B,OAAA;AAC3B,4HAAA,oBAAoB,OAAA"}

package/dist/k8s-api-client.d.ts

@@ -0,0 +1,18 @@
+export declare const SA_TOKEN_PATH = "/var/run/secrets/kubernetes.io/serviceaccount/token";
+export declare const SA_CA_PATH = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt";
+export declare const SA_NAMESPACE_PATH = "/var/run/secrets/kubernetes.io/serviceaccount/namespace";
+export interface IKubernetesResponse {
+    statusCode: number;
+    body: string;
+}
+export declare class KubernetesApiError extends Error {
+    readonly statusCode?: number | undefined;
+    constructor(message: string, statusCode?: number | undefined);
+    get isExpiredResourceVersion(): boolean;
+}
+export declare const readServiceAccountNamespace: () => string | null;
+export declare const requestJson: <T>(path: string, signal: AbortSignal, idleTimeoutMs: number) => Promise<T>;
+/** Resolves when the server closes the stream, which it does routinely once the watch times out. */
+export declare const streamLines: (path: string, signal: AbortSignal, idleTimeoutMs: number, onChunk: (chunk: string) => void) => Promise<void>;
+export declare const resetClusterConnectionCache: () => void;
+//# sourceMappingURL=k8s-api-client.d.ts.map

package/dist/k8s-api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-api-client.d.ts","sourceRoot":"","sources":["../src/k8s-api-client.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,aAAa,wDAA0B,CAAC;AACrD,eAAO,MAAM,UAAU,yDAA2B,CAAC;AACnD,eAAO,MAAM,iBAAiB,4DAA8B,CAAC;AAE7D,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAOD,qBAAa,kBAAmB,SAAQ,KAAK;aAGzB,UAAU,CAAC,EAAE,MAAM;gBADnC,OAAO,EAAE,MAAM,EACC,UAAU,CAAC,EAAE,MAAM,YAAA;IAMrC,IAAW,wBAAwB,IAAI,OAAO,CAE7C;CACF;AAsCD,eAAO,MAAM,2BAA2B,QAAO,MAAM,GAAG,IAUvD,CAAC;AAyFF,eAAO,MAAM,WAAW,GAAU,CAAC,EACjC,MAAM,MAAM,EACZ,QAAQ,WAAW,EACnB,eAAe,MAAM,KACpB,OAAO,CAAC,CAAC,CAMX,CAAC;AAEF,oGAAoG;AACpG,eAAO,MAAM,WAAW,GACtB,MAAM,MAAM,EACZ,QAAQ,WAAW,EACnB,eAAe,MAAM,EACrB,SAAS,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,KAC/B,OAAO,CAAC,IAAI,CAEd,CAAC;AAEF,eAAO,MAAM,2BAA2B,QAAO,IAG9C,CAAC"}