@drunk-pulumi/azure-components 0.0.6

package/vnet/AzCdn.js

@@ -0,0 +1,276 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AzCdn = void 0;
+const CdnHttpsEnable_1 = __importDefault(require("@drunk-pulumi/azure-providers/CdnHttpsEnable"));
+const cdn = __importStar(require("@pulumi/azure-native/cdn"));
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const base_1 = require("../base");
+const helpers_1 = require("../helpers");
+class AzCdn extends base_1.BaseResourceComponent {
+    profile;
+    endpoint;
+    rsGroup;
+    constructor(name, args, opts) {
+        super('AzCdn', name, args, opts);
+        const profile = this.createProfile();
+        const rules = this.getEndpointRules();
+        const endpoint = new cdn.Endpoint(`${name}-endpoint`, {
+            ...args.rsGroup,
+            profileName: profile.resourceName,
+            origins: [{ name, hostName: args.endpoint.originHost }],
+            originHostHeader: args.endpoint.originHost,
+            optimizationType: 'GeneralWebDelivery',
+            queryStringCachingBehavior: 'IgnoreQueryString',
+            deliveryPolicy: {
+                rules,
+                description: 'Static Website Rules',
+            },
+            isCompressionEnabled: true,
+            contentTypesToCompress: [
+                'text/plain',
+                'text/html',
+                'text/xml',
+                'text/css',
+                'application/xml',
+                'application/xhtml+xml',
+                'application/rss+xml',
+                'application/javascript',
+                'application/x-javascript',
+            ],
+            isHttpAllowed: true,
+            isHttpsAllowed: true,
+        }, { ...opts, parent: this });
+        this.createCertAndDomains(profile, endpoint);
+        this.endpoint = pulumi.output({
+            resourceName: endpoint.name,
+            id: endpoint.id,
+        });
+        this.rsGroup = pulumi.output({
+            resourceGroupName: args.rsGroup.resourceGroupName,
+            location: args.rsGroup.location,
+        });
+        this.registerOutputs();
+    }
+    getOutputs() {
+        return {
+            profile: this.profile,
+            endpoint: this.endpoint,
+            rsGroup: this.rsGroup,
+        };
+    }
+    createCertAndDomains(profile, endpoint) {
+        const { domainNames } = this.args.endpoint;
+        if (!domainNames)
+            return;
+        domainNames.map((d) => {
+            const customDomain = new cdn.CustomDomain(`${this.name}-${d}`, {
+                ...this.args.rsGroup,
+                endpointName: endpoint.name,
+                profileName: profile.resourceName,
+                customDomainName: d.replace(/\./g, '-'),
+                hostName: d,
+            }, { dependsOn: endpoint, parent: this });
+            return new CdnHttpsEnable_1.default(`${this.name}-${d}`, {
+                ...this.args.rsGroup,
+                endpointName: endpoint.name,
+                profileName: profile.resourceName,
+                customDomainName: customDomain.name,
+                subscriptionId: helpers_1.azureEnv.subscriptionId,
+            }, { dependsOn: customDomain, parent: this });
+        });
+    }
+    createProfile() {
+        if (this.args.existingProfile)
+            return this.args.existingProfile;
+        const profile = new cdn.Profile(`${this.name}-pfl`, {
+            resourceGroupName: this.args.rsGroup.resourceGroupName,
+            location: 'global',
+            identity: { type: cdn.ManagedServiceIdentityType.SystemAssigned },
+            sku: { name: this.args.sku ?? cdn.SkuName.Standard_Microsoft },
+        }, { parent: this });
+        this.addIdentityToRole('readOnly', profile.identity);
+        this.profile = pulumi.output({
+            resourceName: profile.name,
+            id: profile.id,
+        });
+        return { resourceName: profile.name };
+    }
+    getEndpointRules() {
+        const { endpoint } = this.args;
+        const rules = [this.getEnforceHttpsRules(), this.getIndexFileCacheRules()];
+        if (endpoint.securityResponseHeaders) {
+            rules.push(this.getResponseHeadersRule(endpoint.securityResponseHeaders));
+        }
+        if (endpoint.cors) {
+            rules.push(...this.getCorsRules(endpoint.cors));
+        }
+        //Update rule order
+        rules.forEach((r, i) => (r.order = i + 1));
+        return rules;
+    }
+    getCorsRules(cors) {
+        return cors.map((c, i) => ({
+            name: `allowsCors${i + 1}`,
+            order: 5 + i,
+            conditions: [
+                {
+                    name: 'RequestHeader',
+                    parameters: {
+                        typeName: 'DeliveryRuleRequestHeaderConditionParameters',
+                        selector: 'Origin',
+                        operator: 'Contains',
+                        transforms: [],
+                        matchValues: [c],
+                        negateCondition: false,
+                    },
+                },
+            ],
+            actions: [
+                {
+                    name: 'ModifyResponseHeader',
+                    parameters: {
+                        typeName: 'DeliveryRuleHeaderActionParameters',
+                        headerAction: 'Overwrite',
+                        headerName: 'Access-Control-Allow-Origin',
+                        value: c,
+                    },
+                },
+            ],
+        }));
+    }
+    getSecurityResponseHeaders({ allowOrigins, contentSecurityPolicies, }) {
+        const rs = {
+            'Strict-Transport-Security': 'max-age=86400; includeSubDomains',
+            'X-XSS-Protection': '1; mode=block',
+            'X-Content-Type-Options': 'nosniff',
+        };
+        if (contentSecurityPolicies)
+            rs['Content-Security-Policy'] = contentSecurityPolicies.join(';');
+        if (allowOrigins) {
+            rs['Access-Control-Allow-Origin'] = allowOrigins;
+            rs['Access-Control-Allow-Credentials'] = 'true';
+        }
+        return rs;
+    }
+    getEnforceHttpsRules() {
+        return {
+            name: 'enforceHttps',
+            order: 1,
+            conditions: [
+                {
+                    name: 'RequestScheme',
+                    parameters: {
+                        matchValues: ['HTTP'],
+                        operator: 'Equal',
+                        negateCondition: false,
+                        typeName: 'DeliveryRuleRequestSchemeConditionParameters',
+                    },
+                },
+            ],
+            actions: [
+                {
+                    name: 'UrlRedirect',
+                    parameters: {
+                        redirectType: 'Found',
+                        destinationProtocol: 'Https',
+                        typeName: 'DeliveryRuleUrlRedirectActionParameters',
+                    },
+                },
+            ],
+        };
+    }
+    getIndexFileCacheRules() {
+        return {
+            name: 'indexCache',
+            order: 2,
+            conditions: [
+                {
+                    name: 'UrlFileName',
+                    parameters: {
+                        operator: 'Contains',
+                        negateCondition: false,
+                        matchValues: ['index.html'],
+                        transforms: ['Lowercase'],
+                        typeName: 'DeliveryRuleUrlFilenameConditionParameters',
+                    },
+                },
+            ],
+            actions: [
+                {
+                    name: 'CacheExpiration',
+                    parameters: {
+                        cacheBehavior: 'Override',
+                        cacheType: 'All',
+                        cacheDuration: '08:00:00',
+                        typeName: 'DeliveryRuleCacheExpirationActionParameters',
+                    },
+                },
+            ],
+        };
+    }
+    getResponseHeadersRule = (rules) => {
+        return {
+            name: 'defaultResponseHeaders',
+            order: 3,
+            conditions: [
+                {
+                    name: 'UrlPath',
+                    parameters: {
+                        operator: 'Any',
+                        negateCondition: false,
+                        matchValues: [],
+                        transforms: [],
+                        typeName: 'DeliveryRuleUrlPathMatchConditionParameters',
+                    },
+                },
+            ],
+            actions: Object.keys(rules).map((k) => ({
+                name: 'ModifyResponseHeader',
+                parameters: {
+                    headerAction: 'Overwrite',
+                    headerName: k,
+                    value: rules[k],
+                    typeName: 'DeliveryRuleHeaderActionParameters',
+                },
+            })),
+        };
+    };
+}
+exports.AzCdn = AzCdn;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiQXpDZG4uanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvdm5ldC9BekNkbi50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSxrR0FBMEU7QUFDMUUsOERBQWdEO0FBRWhELHVEQUF5QztBQUN6QyxrQ0FBMEQ7QUFDMUQsd0NBQXNDO0FBb0J0QyxNQUFhLEtBQU0sU0FBUSw0QkFBZ0M7SUFDbEQsT0FBTyxDQUErQjtJQUM3QixRQUFRLENBQThCO0lBQ3RDLE9BQU8sQ0FBeUM7SUFFaEUsWUFBWSxJQUFZLEVBQUUsSUFBZSxFQUFFLElBQXNDO1FBQy9FLEtBQUssQ0FBQyxPQUFPLEVBQUUsSUFBSSxFQUFFLElBQUksRUFBRSxJQUFJLENBQUMsQ0FBQztRQUVqQyxNQUFNLE9BQU8sR0FBRyxJQUFJLENBQUMsYUFBYSxFQUFFLENBQUM7UUFDckMsTUFBTSxLQUFLLEdBQUcsSUFBSSxDQUFDLGdCQUFnQixFQUFFLENBQUM7UUFFdEMsTUFBTSxRQUFRLEdBQUcsSUFBSSxHQUFHLENBQUMsUUFBUSxDQUMvQixHQUFHLElBQUksV0FBVyxFQUNsQjtZQUNFLEdBQUcsSUFBSSxDQUFDLE9BQU87WUFDZixXQUFXLEVBQUUsT0FBTyxDQUFDLFlBQVk7WUFFakMsT0FBTyxFQUFFLENBQUMsRUFBRSxJQUFJLEVBQUUsUUFBUSxFQUFFLElBQUksQ0FBQyxRQUFRLENBQUMsVUFBVSxFQUFFLENBQUM7WUFDdkQsZ0JBQWdCLEVBQUUsSUFBSSxDQUFDLFFBQVEsQ0FBQyxVQUFVO1lBRTFDLGdCQUFnQixFQUFFLG9CQUFvQjtZQUN0QywwQkFBMEIsRUFBRSxtQkFBbUI7WUFFL0MsY0FBYyxFQUFFO2dCQUNkLEtBQUs7Z0JBQ0wsV0FBVyxFQUFFLHNCQUFzQjthQUNwQztZQUVELG9CQUFvQixFQUFFLElBQUk7WUFDMUIsc0JBQXNCLEVBQUU7Z0JBQ3RCLFlBQVk7Z0JBQ1osV0FBVztnQkFDWCxVQUFVO2dCQUNWLFVBQVU7Z0JBQ1YsaUJBQWlCO2dCQUNqQix1QkFBdUI7Z0JBQ3ZCLHFCQUFxQjtnQkFDckIsd0JBQXdCO2dCQUN4QiwwQkFBMEI7YUFDM0I7WUFFRCxhQUFhLEVBQUUsSUFBSTtZQUNuQixjQUFjLEVBQUUsSUFBSTtTQUNyQixFQUNELEVBQUUsR0FBRyxJQUFJLEVBQUUsTUFBTSxFQUFFLElBQUksRUFBRSxDQUMxQixDQUFDO1FBRUYsSUFBSSxDQUFDLG9CQUFvQixDQUFDLE9BQU8sRUFBRSxRQUFRLENBQUMsQ0FBQztRQUU3QyxJQUFJLENBQUMsUUFBUSxHQUFHLE1BQU0sQ0FBQyxNQUFNLENBQUM7WUFDNUIsWUFBWSxFQUFFLFFBQVEsQ0FBQyxJQUFJO1lBQzNCLEVBQUUsRUFBRSxRQUFRLENBQUMsRUFBRTtTQUNoQixDQUFDLENBQUM7UUFDSCxJQUFJLENBQUMsT0FBTyxHQUFHLE1BQU0sQ0FBQyxNQUFNLENBQUM7WUFDM0IsaUJBQWlCLEVBQUUsSUFBSSxDQUFDLE9BQU8sQ0FBQyxpQkFBaUI7WUFDakQsUUFBUSxFQUFFLElBQUksQ0FBQyxPQUFPLENBQUMsUUFBUTtTQUNoQyxDQUFDLENBQUM7UUFFSCxJQUFJLENBQUMsZUFBZSxFQUFFLENBQUM7SUFDekIsQ0FBQztJQUVNLFVBQVU7UUFDZixPQUFPO1lBQ0wsT0FBTyxFQUFFLElBQUksQ0FBQyxPQUFPO1lBQ3JCLFFBQVEsRUFBRSxJQUFJLENBQUMsUUFBUTtZQUN2QixPQUFPLEVBQUUsSUFBSSxDQUFDLE9BQU87U0FDdEIsQ0FBQztJQUNKLENBQUM7SUFFTyxvQkFBb0IsQ0FBQyxPQUE0QixFQUFFLFFBQXNCO1FBQy9FLE1BQU0sRUFBRSxXQUFXLEVBQUUsR0FBRyxJQUFJLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQztRQUMzQyxJQUFJLENBQUMsV0FBVztZQUFFLE9BQU87UUFDekIsV0FBVyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFO1lBQ3BCLE1BQU0sWUFBWSxHQUFHLElBQUksR0FBRyxDQUFDLFlBQVksQ0FDdkMsR0FBRyxJQUFJLENBQUMsSUFBSSxJQUFJLENBQUMsRUFBRSxFQUNuQjtnQkFDRSxHQUFHLElBQUksQ0FBQyxJQUFJLENBQUMsT0FBTztnQkFDcEIsWUFBWSxFQUFFLFFBQVEsQ0FBQyxJQUFJO2dCQUMzQixXQUFXLEVBQUUsT0FBTyxDQUFDLFlBQVk7Z0JBQ2pDLGdCQUFnQixFQUFFLENBQUMsQ0FBQyxPQUFPLENBQUMsS0FBSyxFQUFFLEdBQUcsQ0FBQztnQkFDdkMsUUFBUSxFQUFFLENBQUM7YUFDWixFQUNELEVBQUUsU0FBUyxFQUFFLFFBQVEsRUFBRSxNQUFNLEVBQUUsSUFBSSxFQUFFLENBQ3RDLENBQUM7WUFFRixPQUFPLElBQUksd0JBQWMsQ0FDdkIsR0FBRyxJQUFJLENBQUMsSUFBSSxJQUFJLENBQUMsRUFBRSxFQUNuQjtnQkFDRSxHQUFHLElBQUksQ0FBQyxJQUFJLENBQUMsT0FBTztnQkFDcEIsWUFBWSxFQUFFLFFBQVEsQ0FBQyxJQUFJO2dCQUMzQixXQUFXLEVBQUUsT0FBTyxDQUFDLFlBQVk7Z0JBQ2pDLGdCQUFnQixFQUFFLFlBQVksQ0FBQyxJQUFJO2dCQUNuQyxjQUFjLEVBQUUsa0JBQVEsQ0FBQyxjQUFjO2FBQ3hDLEVBQ0QsRUFBRSxTQUFTLEVBQUUsWUFBWSxFQUFFLE1BQU0sRUFBRSxJQUFJLEVBQUUsQ0FDMUMsQ0FBQztRQUNKLENBQUMsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUVPLGFBQWE7UUFDbkIsSUFBSSxJQUFJLENBQUMsSUFBSSxDQUFDLGVBQWU7WUFBRSxPQUFPLElBQUksQ0FBQyxJQUFJLENBQUMsZUFBZSxDQUFDO1FBRWhFLE1BQU0sT0FBTyxHQUFHLElBQUksR0FBRyxDQUFDLE9BQU8sQ0FDN0IsR0FBRyxJQUFJLENBQUMsSUFBSSxNQUFNLEVBQ2xCO1lBQ0UsaUJBQWlCLEVBQUUsSUFBSSxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsaUJBQWlCO1lBQ3RELFFBQVEsRUFBRSxRQUFRO1lBQ2xCLFFBQVEsRUFBRSxFQUFFLElBQUksRUFBRSxHQUFHLENBQUMsMEJBQTBCLENBQUMsY0FBYyxFQUFFO1lBQ2pFLEdBQUcsRUFBRSxFQUFFLElBQUksRUFBRSxJQUFJLENBQUMsSUFBSSxDQUFDLEdBQUcsSUFBSSxHQUFHLENBQUMsT0FBTyxDQUFDLGtCQUFrQixFQUFFO1NBQy9ELEVBQ0QsRUFBRSxNQUFNLEVBQUUsSUFBSSxFQUFFLENBQ2pCLENBQUM7UUFFRixJQUFJLENBQUMsaUJBQWlCLENBQUMsVUFBVSxFQUFFLE9BQU8sQ0FBQyxRQUFRLENBQUMsQ0FBQztRQUVyRCxJQUFJLENBQUMsT0FBTyxHQUFHLE1BQU0sQ0FBQyxNQUFNLENBQUM7WUFDM0IsWUFBWSxFQUFFLE9BQU8sQ0FBQyxJQUFJO1lBQzFCLEVBQUUsRUFBRSxPQUFPLENBQUMsRUFBRTtTQUNmLENBQUMsQ0FBQztRQUVILE9BQU8sRUFBRSxZQUFZLEVBQUUsT0FBTyxDQUFDLElBQUksRUFBRSxDQUFDO0lBQ3hDLENBQUM7SUFFTyxnQkFBZ0I7UUFDdEIsTUFBTSxFQUFFLFFBQVEsRUFBRSxHQUFHLElBQUksQ0FBQyxJQUFJLENBQUM7UUFDL0IsTUFBTSxLQUFLLEdBQUcsQ0FBQyxJQUFJLENBQUMsb0JBQW9CLEVBQUUsRUFBRSxJQUFJLENBQUMsc0JBQXNCLEVBQUUsQ0FBQyxDQUFDO1FBQzNFLElBQUksUUFBUSxDQUFDLHVCQUF1QixFQUFFLENBQUM7WUFDckMsS0FBSyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsc0JBQXNCLENBQUMsUUFBUSxDQUFDLHVCQUF1QixDQUFDLENBQUMsQ0FBQztRQUM1RSxDQUFDO1FBQ0QsSUFBSSxRQUFRLENBQUMsSUFBSSxFQUFFLENBQUM7WUFDbEIsS0FBSyxDQUFDLElBQUksQ0FBQyxHQUFHLElBQUksQ0FBQyxZQUFZLENBQUMsUUFBUSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUM7UUFDbEQsQ0FBQztRQUNELG1CQUFtQjtRQUNuQixLQUFLLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDLENBQUMsS0FBSyxHQUFHLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFDO1FBQzNDLE9BQU8sS0FBSyxDQUFDO0lBQ2YsQ0FBQztJQUVPLFlBQVksQ0FBQyxJQUFjO1FBQ2pDLE9BQU8sSUFBSSxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUM7WUFDekIsSUFBSSxFQUFFLGFBQWEsQ0FBQyxHQUFHLENBQUMsRUFBRTtZQUMxQixLQUFLLEVBQUUsQ0FBQyxHQUFHLENBQUM7WUFDWixVQUFVLEVBQUU7Z0JBQ1Y7b0JBQ0UsSUFBSSxFQUFFLGVBQWU7b0JBQ3JCLFVBQVUsRUFBRTt3QkFDVixRQUFRLEVBQUUsOENBQThDO3dCQUN4RCxRQUFRLEVBQUUsUUFBUTt3QkFDbEIsUUFBUSxFQUFFLFVBQVU7d0JBQ3BCLFVBQVUsRUFBRSxFQUFFO3dCQUNkLFdBQVcsRUFBRSxDQUFDLENBQUMsQ0FBQzt3QkFDaEIsZUFBZSxFQUFFLEtBQUs7cUJBQ3ZCO2lCQUNGO2FBQ0Y7WUFDRCxPQUFPLEVBQUU7Z0JBQ1A7b0JBQ0UsSUFBSSxFQUFFLHNCQUFzQjtvQkFDNUIsVUFBVSxFQUFFO3dCQUNWLFFBQVEsRUFBRSxvQ0FBb0M7d0JBQzlDLFlBQVksRUFBRSxXQUFXO3dCQUN6QixVQUFVLEVBQUUsNkJBQTZCO3dCQUN6QyxLQUFLLEVBQUUsQ0FBQztxQkFDVDtpQkFDRjthQUNGO1NBQ0YsQ0FBQyxDQUFDLENBQUM7SUFDTixDQUFDO0lBRU8sMEJBQTBCLENBQUMsRUFDakMsWUFBWSxFQUNaLHVCQUF1QixHQUl4QjtRQUNDLE1BQU0sRUFBRSxHQUEyQjtZQUNqQywyQkFBMkIsRUFBRSxrQ0FBa0M7WUFDL0Qsa0JBQWtCLEVBQUUsZUFBZTtZQUNuQyx3QkFBd0IsRUFBRSxTQUFTO1NBQ3BDLENBQUM7UUFDRixJQUFJLHVCQUF1QjtZQUFFLEVBQUUsQ0FBQyx5QkFBeUIsQ0FBQyxHQUFHLHVCQUF1QixDQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsQ0FBQztRQUMvRixJQUFJLFlBQVksRUFBRSxDQUFDO1lBQ2pCLEVBQUUsQ0FBQyw2QkFBNkIsQ0FBQyxHQUFHLFlBQVksQ0FBQztZQUNqRCxFQUFFLENBQUMsa0NBQWtDLENBQUMsR0FBRyxNQUFNLENBQUM7UUFDbEQsQ0FBQztRQUNELE9BQU8sRUFBRSxDQUFDO0lBQ1osQ0FBQztJQUVPLG9CQUFvQjtRQUMxQixPQUFPO1lBQ0wsSUFBSSxFQUFFLGNBQWM7WUFDcEIsS0FBSyxFQUFFLENBQUM7WUFDUixVQUFVLEVBQUU7Z0JBQ1Y7b0JBQ0UsSUFBSSxFQUFFLGVBQWU7b0JBQ3JCLFVBQVUsRUFBRTt3QkFDVixXQUFXLEVBQUUsQ0FBQyxNQUFNLENBQUM7d0JBQ3JCLFFBQVEsRUFBRSxPQUFPO3dCQUNqQixlQUFlLEVBQUUsS0FBSzt3QkFDdEIsUUFBUSxFQUFFLDhDQUE4QztxQkFDekQ7aUJBQ0Y7YUFDRjtZQUNELE9BQU8sRUFBRTtnQkFDUDtvQkFDRSxJQUFJLEVBQUUsYUFBYTtvQkFDbkIsVUFBVSxFQUFFO3dCQUNWLFlBQVksRUFBRSxPQUFPO3dCQUNyQixtQkFBbUIsRUFBRSxPQUFPO3dCQUM1QixRQUFRLEVBQUUseUNBQXlDO3FCQUNwRDtpQkFDRjthQUNGO1NBQ0YsQ0FBQztJQUNKLENBQUM7SUFFTyxzQkFBc0I7UUFDNUIsT0FBTztZQUNMLElBQUksRUFBRSxZQUFZO1lBQ2xCLEtBQUssRUFBRSxDQUFDO1lBQ1IsVUFBVSxFQUFFO2dCQUNWO29CQUNFLElBQUksRUFBRSxhQUFhO29CQUNuQixVQUFVLEVBQUU7d0JBQ1YsUUFBUSxFQUFFLFVBQVU7d0JBQ3BCLGVBQWUsRUFBRSxLQUFLO3dCQUN0QixXQUFXLEVBQUUsQ0FBQyxZQUFZLENBQUM7d0JBQzNCLFVBQVUsRUFBRSxDQUFDLFdBQVcsQ0FBQzt3QkFDekIsUUFBUSxFQUFFLDRDQUE0QztxQkFDdkQ7aUJBQ0Y7YUFDRjtZQUNELE9BQU8sRUFBRTtnQkFDUDtvQkFDRSxJQUFJLEVBQUUsaUJBQWlCO29CQUN2QixVQUFVLEVBQUU7d0JBQ1YsYUFBYSxFQUFFLFVBQVU7d0JBQ3pCLFNBQVMsRUFBRSxLQUFLO3dCQUNoQixhQUFhLEVBQUUsVUFBVTt3QkFDekIsUUFBUSxFQUFFLDZDQUE2QztxQkFDeEQ7aUJBQ0Y7YUFDRjtTQUNGLENBQUM7SUFDSixDQUFDO0lBRU8sc0JBQXNCLEdBQUcsQ0FBQyxLQUE2QixFQUErQixFQUFFO1FBQzlGLE9BQU87WUFDTCxJQUFJLEVBQUUsd0JBQXdCO1lBQzlCLEtBQUssRUFBRSxDQUFDO1lBQ1IsVUFBVSxFQUFFO2dCQUNWO29CQUNFLElBQUksRUFBRSxTQUFTO29CQUNmLFVBQVUsRUFBRTt3QkFDVixRQUFRLEVBQUUsS0FBSzt3QkFDZixlQUFlLEVBQUUsS0FBSzt3QkFDdEIsV0FBVyxFQUFFLEVBQUU7d0JBQ2YsVUFBVSxFQUFFLEVBQUU7d0JBQ2QsUUFBUSxFQUFFLDZDQUE2QztxQkFDeEQ7aUJBQ0Y7YUFDRjtZQUNELE9BQU8sRUFBRSxNQUFNLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQztnQkFDdEMsSUFBSSxFQUFFLHNCQUFzQjtnQkFDNUIsVUFBVSxFQUFFO29CQUNWLFlBQVksRUFBRSxXQUFXO29CQUN6QixVQUFVLEVBQUUsQ0FBQztvQkFDYixLQUFLLEVBQUUsS0FBSyxDQUFDLENBQUMsQ0FBQztvQkFDZixRQUFRLEVBQUUsb0NBQW9DO2lCQUMvQzthQUNGLENBQUMsQ0FBQztTQUNKLENBQUM7SUFDSixDQUFDLENBQUM7Q0FDSDtBQWpSRCxzQkFpUkMifQ==

package/vnet/Basion.d.ts

@@ -0,0 +1,19 @@
+import * as nw from '@pulumi/azure-native/network';
+import * as pulumi from '@pulumi/pulumi';
+import { BaseComponent } from '../base/BaseComponent';
+import * as types from '../types';
+export interface BasionArgs extends types.WithResourceGroupInputs, Pick<nw.BastionHostArgs, 'disableCopyPaste' | 'dnsName' | 'enableFileCopy' | 'enableIpConnect' | 'enableKerberos' | 'enablePrivateOnlyBastion' | 'enableSessionRecording' | 'enableShareableLink' | 'enableTunneling' | 'scaleUnits' | 'zones' | 'tags'> {
+    sku: nw.BastionHostSkuName;
+    publicIPAddress: types.SubResourceInputs;
+    subnetId: pulumi.Input<string>;
+    network?: Pick<types.NetworkArgs, 'ipRules'>;
+}
+export declare class Basion extends BaseComponent<BasionArgs> {
+    readonly id: pulumi.Output<string>;
+    readonly resourceName: pulumi.Output<string>;
+    constructor(name: string, args: BasionArgs, opts?: pulumi.ComponentResourceOptions);
+    getOutputs(): {
+        id: pulumi.Output<string>;
+        resourceName: pulumi.Output<string>;
+    };
+}

package/vnet/Basion.js

@@ -0,0 +1,78 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Basion = void 0;
+const nw = __importStar(require("@pulumi/azure-native/network"));
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const BaseComponent_1 = require("../base/BaseComponent");
+const helpers_1 = require("../base/helpers");
+class Basion extends BaseComponent_1.BaseComponent {
+    id;
+    resourceName;
+    constructor(name, args, opts) {
+        super((0, helpers_1.getComponentResourceType)('Basion'), name, args, opts);
+        const { rsGroup, sku, network, publicIPAddress, subnetId, ...props } = args;
+        const bs = new nw.BastionHost(name, {
+            ...props,
+            ...rsGroup,
+            sku: { name: sku },
+            ipConfigurations: [
+                {
+                    name: 'IpConfig',
+                    publicIPAddress: sku !== 'Developer' ? publicIPAddress : undefined,
+                    subnet: { id: subnetId },
+                    privateIPAllocationMethod: nw.IPAllocationMethod.Dynamic,
+                },
+            ],
+            networkAcls: network?.ipRules
+                ? { ipRules: pulumi.output(network.ipRules).apply((ips) => ips.map((ip) => ({ addressPrefix: ip }))) }
+                : undefined,
+        }, {
+            ...opts,
+            parent: this,
+        });
+        this.id = bs.id;
+        this.resourceName = bs.name;
+        this.registerOutputs(this.getOutputs());
+    }
+    getOutputs() {
+        return {
+            id: this.id,
+            resourceName: this.resourceName,
+        };
+    }
+}
+exports.Basion = Basion;
+//# sourceMappingURL=data:application/json;base64,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

package/vnet/DnsZone.d.ts

@@ -0,0 +1,36 @@
+import * as dns from '@pulumi/azure-native/dns';
+import * as pulumi from '@pulumi/pulumi';
+import { BaseComponent } from '../base/BaseComponent';
+import { DnsRecordTypes, WithResourceGroupInputs } from '../types';
+type DnsZoneRecordArgs = Omit<dns.RecordSetArgs, 'zoneName' | 'relativeRecordSetName' | 'resourceGroupName' | 'ttl' | 'recordType'> & {
+    name: string;
+    recordType: DnsRecordTypes;
+};
+type DnsZoneProps = {
+    name: string;
+    records?: DnsZoneRecordArgs[];
+};
+export interface DnsZoneArgs extends WithResourceGroupInputs, DnsZoneProps {
+    children?: DnsZoneProps[];
+}
+export declare class DnsZone extends BaseComponent<DnsZoneArgs> {
+    private _rsName;
+    readonly id: pulumi.Output<string>;
+    readonly resourceName: pulumi.Output<string>;
+    constructor(name: string, args: DnsZoneArgs, opts?: pulumi.ComponentResourceOptions);
+    getOutputs(): {
+        id: pulumi.Output<string>;
+        resourceName: pulumi.Output<string>;
+    };
+    private createZone;
+    addARecords(zone: dns.Zone, aRecords: Array<{
+        name: string;
+        ipv4Address: pulumi.Input<pulumi.Input<string>[]>;
+    }>): import("@pulumi/azure-native/dns/recordSet").RecordSet[];
+    addRecordSet(zone: dns.Zone, name: string, props: Omit<dns.RecordSetArgs, 'zoneName' | 'relativeRecordSetName' | 'resourceGroupName' | 'ttl'>): import("@pulumi/azure-native/dns/recordSet").RecordSet;
+    protected getRsGroupInfo(): {
+        resourceGroupName: pulumi.Input<string>;
+        location: string;
+    };
+}
+export {};

package/vnet/DnsZone.js

@@ -0,0 +1,113 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DnsZone = void 0;
+const dns = __importStar(require("@pulumi/azure-native/dns"));
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const BaseComponent_1 = require("../base/BaseComponent");
+const helpers_1 = require("../base/helpers");
+const helpers_2 = require("./helpers");
+class DnsZone extends BaseComponent_1.BaseComponent {
+    _rsName;
+    id;
+    resourceName;
+    constructor(name, args, opts) {
+        super((0, helpers_1.getComponentResourceType)('DnsZone'), name, args, opts);
+        this._rsName = name.replace(/\./g, '-');
+        const { rsGroup, children, ...props } = args;
+        const zone = this.createZone(props);
+        if (children) {
+            children.map((child) => {
+                this.createZone(child, zone);
+            });
+        }
+        this.id = zone.id;
+        this.resourceName = zone.name;
+        this.registerOutputs(this.getOutputs());
+    }
+    getOutputs() {
+        return {
+            id: this.id,
+            resourceName: this.resourceName,
+        };
+    }
+    createZone({ name, records }, parent) {
+        const group = this.getRsGroupInfo();
+        const zone = new dns.Zone(name, {
+            resourceGroupName: group.resourceGroupName,
+            location: group.location,
+            zoneName: this.name,
+        }, { ...this.opts, dependsOn: parent ? parent : this.opts?.dependsOn, parent: this });
+        if (records) {
+            records.map((record) => {
+                this.addRecordSet(zone, `${name}-${record.name}`, record);
+            });
+        }
+        if (parent) {
+            zone.nameServers.apply((ns) => {
+                this.addRecordSet(parent, `${this.name}-${name}-ns`, {
+                    recordType: 'NS',
+                    nsRecords: ns.map((s) => ({ nsdname: s })),
+                });
+            });
+        }
+        return zone;
+    }
+    addARecords(zone, aRecords) {
+        return aRecords.map((aRecord) => this.addRecordSet(zone, aRecord.name, {
+            recordType: 'A',
+            aRecords: pulumi.output(aRecord.ipv4Address).apply((ips) => ips.map((i) => ({ ipv4Address: i }))),
+        }));
+    }
+    addRecordSet(zone, name, props) {
+        const group = this.getRsGroupInfo();
+        return new dns.RecordSet(`${this._rsName}-${(0, helpers_2.getDnsRecordName)(name)}-${props.recordType}`, {
+            ...props,
+            ...group,
+            zoneName: zone.name,
+            relativeRecordSetName: name,
+            ttl: 3600,
+        }, { dependsOn: zone, parent: this });
+    }
+    getRsGroupInfo() {
+        const group = this.args.rsGroup;
+        return {
+            resourceGroupName: group.resourceGroupName,
+            location: 'global',
+        };
+    }
+}
+exports.DnsZone = DnsZone;
+//# sourceMappingURL=data:application/json;base64,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

package/vnet/Firewall.d.ts

@@ -0,0 +1,53 @@
+import * as network from '@pulumi/azure-native/network';
+import * as inputs from '@pulumi/azure-native/types/input';
+import * as pulumi from '@pulumi/pulumi';
+import { BaseResourceComponent, CommonBaseArgs } from '../base';
+import * as types from '../types';
+export type RulePolicyArgs = {
+    priority: number;
+    name: string;
+    ruleCollections?: pulumi.Input<pulumi.Input<inputs.network.FirewallPolicyFilterRuleCollectionArgs | inputs.network.FirewallPolicyNatRuleCollectionArgs>[]>;
+};
+export interface FirewallArgs extends CommonBaseArgs, types.WithUserAssignedIdentity, types.WithEncryptionEnabler, Pick<network.AzureFirewallArgs, 'autoscaleConfiguration' | 'tags' | 'virtualHub' | 'zones' | 'managementIpConfiguration' | 'ipConfigurations' | 'hubIPAddresses' | 'threatIntelMode'> {
+    sku: {
+        name: network.AzureFirewallSkuName;
+        tier: network.AzureFirewallSkuTier;
+    };
+    additionalProperties?: Record<string, pulumi.Input<string>>;
+    snat?: {
+        routeServerId?: pulumi.Input<string>;
+    };
+    policy: Pick<network.FirewallPolicyArgs, 'dnsSettings' | 'explicitProxy' | 'insights' | 'intrusionDetection' | 'sql' | 'threatIntelMode' | 'threatIntelWhitelist'> & {
+        basePolicy?: types.ResourceInputs;
+        transportSecurityCA?: pulumi.Input<inputs.network.FirewallPolicyCertificateAuthorityArgs>;
+        /** The rule collections for this Firewall. Recommend to use "FirewallPolicyBuilder" to build this rules */
+        rules?: Array<RulePolicyArgs>;
+    };
+    logs?: {
+        defaultWorkspace: types.ResourceInputs;
+        regionalWorkspaces?: Array<{
+            id: pulumi.Input<string>;
+            region: pulumi.Input<string>;
+        }>;
+    };
+}
+export declare class Firewall extends BaseResourceComponent<FirewallArgs> {
+    readonly firewall: types.ResourceOutputs;
+    readonly policy: types.ResourceOutputs;
+    readonly privateIpAddress: pulumi.Output<string>;
+    constructor(name: string, args: FirewallArgs, opts?: pulumi.ComponentResourceOptions);
+    getOutputs(): {
+        firewall: {
+            resourceName: pulumi.Output<string>;
+            id: pulumi.Output<string>;
+        };
+        policy: {
+            resourceName: pulumi.Output<string>;
+            id: pulumi.Output<string>;
+        };
+        privateIpAddress: pulumi.Output<string>;
+    };
+    private createPolicy;
+    private createFirewall;
+    private createPolicyRuleGroup;
+}