@drunk-pulumi/azure 0.0.19

package/Aks/Helper.d.ts

@@ -0,0 +1,43 @@
+import { KeyVaultInfo } from '../types';
+/** Get AKS Config from Managed Cluster*/
+export declare const getAksConfig: ({ name, groupName, formattedName, localAccountDisabled, }: {
+    name: string;
+    groupName: string;
+    formattedName?: boolean | undefined;
+    localAccountDisabled?: boolean | undefined;
+}) => Promise<string>;
+/** Get AKS Config from Key Vault*/
+export declare const getAksVaultConfig: ({ name, version, vaultInfo, formattedName, }: {
+    name: string;
+    version?: string | undefined;
+    vaultInfo: KeyVaultInfo;
+    formattedName?: boolean | undefined;
+}) => Promise<string>;
+export declare const getAksIdentitySecrets: ({ name, vaultInfo, }: {
+    name: string;
+    vaultInfo: KeyVaultInfo;
+}) => Promise<{
+    clientId: import("@azure/keyvault-secrets").KeyVaultSecret | undefined;
+    clientSecret: import("@azure/keyvault-secrets").KeyVaultSecret | undefined;
+    principalId: import("@azure/keyvault-secrets").KeyVaultSecret | undefined;
+    principalSecret: import("@azure/keyvault-secrets").KeyVaultSecret | undefined;
+}>;
+interface AksProps {
+    aksName: string;
+    formatedName?: boolean;
+    namespace?: string;
+    groupName: string;
+    localAccountDisabled?: boolean;
+}
+/** Get AKS Provider from Managed Cluster*/
+export declare const createAksProvider: ({ aksName, namespace, groupName, formatedName, localAccountDisabled, }: AksProps) => Promise<import("@pulumi/kubernetes/provider").Provider>;
+/** Get AKS Provider from Key Vault*/
+export declare const createAksVaultProvider: ({ aksName, version, secretName, namespace, base64Encoded, vaultInfo, }: {
+    aksName: string;
+    secretName?: string | undefined;
+    version?: string | undefined;
+    vaultInfo: KeyVaultInfo;
+    base64Encoded?: boolean | undefined;
+    namespace?: string | undefined;
+}) => Promise<import("@pulumi/kubernetes/provider").Provider>;
+export {};

package/Aks/Helper.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAksVaultProvider = exports.createAksProvider = exports.getAksIdentitySecrets = exports.getAksVaultConfig = exports.getAksConfig = void 0;
+const containerservice = require("@pulumi/azure-native/containerservice");
+const Naming_1 = require("../Common/Naming");
+const Providers_1 = require("../KubeX/Providers");
+const Helper_1 = require("../KeyVault/Helper");
+const Helper_2 = require("../AzAd/Helper");
+/** Get AKS Config from Managed Cluster*/
+const getAksConfig = async ({ name, groupName, formattedName, localAccountDisabled, }) => {
+    const aksName = formattedName ? name : (0, Naming_1.getAksName)(name);
+    const group = formattedName ? groupName : (0, Naming_1.getResourceGroupName)(groupName);
+    const aks = localAccountDisabled
+        ? await containerservice.listManagedClusterUserCredentials({
+            resourceName: aksName,
+            resourceGroupName: group,
+        })
+        : await containerservice.listManagedClusterAdminCredentials({
+            resourceName: aksName,
+            resourceGroupName: group,
+        });
+    return Buffer.from(aks.kubeconfigs[0].value, 'base64').toString('utf8');
+};
+exports.getAksConfig = getAksConfig;
+/** Get AKS Config from Key Vault*/
+const getAksVaultConfig = async ({ name, version, vaultInfo, formattedName, }) => {
+    const aksName = formattedName ? name : (0, Naming_1.getAksName)(name);
+    const rs = await (0, Helper_1.getSecret)({
+        name: `${aksName}-config`,
+        version,
+        vaultInfo,
+        nameFormatted: false,
+    });
+    return rs?.value || '';
+};
+exports.getAksVaultConfig = getAksVaultConfig;
+const getAksIdentitySecrets = ({ name, vaultInfo, }) => {
+    name = (0, Naming_1.getAksName)(name);
+    return (0, Helper_2.getIdentitySecrets)({ name, vaultInfo });
+};
+exports.getAksIdentitySecrets = getAksIdentitySecrets;
+/** Get AKS Provider from Managed Cluster*/
+const createAksProvider = async ({ aksName, namespace, groupName, formatedName, localAccountDisabled, }) => {
+    return (0, Providers_1.createProvider)({
+        name: aksName,
+        namespace,
+        kubeconfig: await (0, exports.getAksConfig)({
+            name: aksName,
+            groupName,
+            formattedName: formatedName,
+            localAccountDisabled,
+        }),
+    });
+};
+exports.createAksProvider = createAksProvider;
+/** Get AKS Provider from Key Vault*/
+const createAksVaultProvider = async ({ aksName, version, secretName, namespace, base64Encoded, vaultInfo, }) => {
+    const value = await (0, exports.getAksVaultConfig)({
+        name: secretName ?? aksName,
+        version,
+        formattedName: Boolean(secretName),
+        vaultInfo,
+    });
+    return (0, Providers_1.createProvider)({
+        name: aksName,
+        namespace,
+        ignoreChanges: true,
+        kubeconfig: base64Encoded ? Buffer.from(value, 'base64').toString() : value,
+    });
+};
+exports.createAksVaultProvider = createAksVaultProvider;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiSGVscGVyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL0Frcy9IZWxwZXIudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsMEVBQTBFO0FBQzFFLDZDQUFvRTtBQUNwRSxrREFBb0Q7QUFFcEQsK0NBQStDO0FBQy9DLDJDQUFvRDtBQUVwRCx5Q0FBeUM7QUFDbEMsTUFBTSxZQUFZLEdBQUcsS0FBSyxFQUFFLEVBQ2pDLElBQUksRUFDSixTQUFTLEVBQ1QsYUFBYSxFQUNiLG9CQUFvQixHQU1yQixFQUFtQixFQUFFO0lBQ3BCLE1BQU0sT0FBTyxHQUFHLGFBQWEsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxJQUFBLG1CQUFVLEVBQUMsSUFBSSxDQUFDLENBQUM7SUFDeEQsTUFBTSxLQUFLLEdBQUcsYUFBYSxDQUFDLENBQUMsQ0FBQyxTQUFTLENBQUMsQ0FBQyxDQUFDLElBQUEsNkJBQW9CLEVBQUMsU0FBUyxDQUFDLENBQUM7SUFFMUUsTUFBTSxHQUFHLEdBQUcsb0JBQW9CO1FBQzlCLENBQUMsQ0FBQyxNQUFNLGdCQUFnQixDQUFDLGlDQUFpQyxDQUFDO1lBQ3ZELFlBQVksRUFBRSxPQUFPO1lBQ3JCLGlCQUFpQixFQUFFLEtBQUs7U0FDekIsQ0FBQztRQUNKLENBQUMsQ0FBQyxNQUFNLGdCQUFnQixDQUFDLGtDQUFrQyxDQUFDO1lBQ3hELFlBQVksRUFBRSxPQUFPO1lBQ3JCLGlCQUFpQixFQUFFLEtBQUs7U0FDekIsQ0FBQyxDQUFDO0lBRVAsT0FBTyxNQUFNLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxXQUFXLENBQUMsQ0FBQyxDQUFDLENBQUMsS0FBSyxFQUFFLFFBQVEsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxNQUFNLENBQUMsQ0FBQztBQUMxRSxDQUFDLENBQUM7QUF6QlcsUUFBQSxZQUFZLGdCQXlCdkI7QUFFRixtQ0FBbUM7QUFDNUIsTUFBTSxpQkFBaUIsR0FBRyxLQUFLLEVBQUUsRUFDdEMsSUFBSSxFQUNKLE9BQU8sRUFDUCxTQUFTLEVBQ1QsYUFBYSxHQU1kLEVBQW1CLEVBQUU7SUFDcEIsTUFBTSxPQUFPLEdBQUcsYUFBYSxDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLElBQUEsbUJBQVUsRUFBQyxJQUFJLENBQUMsQ0FBQztJQUN4RCxNQUFNLEVBQUUsR0FBRyxNQUFNLElBQUEsa0JBQVMsRUFBQztRQUN6QixJQUFJLEVBQUUsR0FBRyxPQUFPLFNBQVM7UUFDekIsT0FBTztRQUNQLFNBQVM7UUFDVCxhQUFhLEVBQUUsS0FBSztLQUNyQixDQUFDLENBQUM7SUFDSCxPQUFPLEVBQUUsRUFBRSxLQUFLLElBQUksRUFBRSxDQUFDO0FBQ3pCLENBQUMsQ0FBQztBQW5CVyxRQUFBLGlCQUFpQixxQkFtQjVCO0FBRUssTUFBTSxxQkFBcUIsR0FBRyxDQUFDLEVBQ3BDLElBQUksRUFDSixTQUFTLEdBSVYsRUFBRSxFQUFFO0lBQ0gsSUFBSSxHQUFHLElBQUEsbUJBQVUsRUFBQyxJQUFJLENBQUMsQ0FBQztJQUN4QixPQUFPLElBQUEsMkJBQWtCLEVBQUMsRUFBRSxJQUFJLEVBQUUsU0FBUyxFQUFFLENBQUMsQ0FBQztBQUNqRCxDQUFDLENBQUM7QUFUVyxRQUFBLHFCQUFxQix5QkFTaEM7QUFVRiwyQ0FBMkM7QUFDcEMsTUFBTSxpQkFBaUIsR0FBRyxLQUFLLEVBQUUsRUFDdEMsT0FBTyxFQUNQLFNBQVMsRUFDVCxTQUFTLEVBQ1QsWUFBWSxFQUNaLG9CQUFvQixHQUNYLEVBQUUsRUFBRTtJQUNiLE9BQU8sSUFBQSwwQkFBYyxFQUFDO1FBQ3BCLElBQUksRUFBRSxPQUFPO1FBQ2IsU0FBUztRQUNULFVBQVUsRUFBRSxNQUFNLElBQUEsb0JBQVksRUFBQztZQUM3QixJQUFJLEVBQUUsT0FBTztZQUNiLFNBQVM7WUFDVCxhQUFhLEVBQUUsWUFBWTtZQUMzQixvQkFBb0I7U0FDckIsQ0FBQztLQUNILENBQUMsQ0FBQztBQUNMLENBQUMsQ0FBQztBQWpCVyxRQUFBLGlCQUFpQixxQkFpQjVCO0FBRUYscUNBQXFDO0FBQzlCLE1BQU0sc0JBQXNCLEdBQUcsS0FBSyxFQUFFLEVBQzNDLE9BQU8sRUFDUCxPQUFPLEVBQ1AsVUFBVSxFQUNWLFNBQVMsRUFDVCxhQUFhLEVBQ2IsU0FBUyxHQVFWLEVBQUUsRUFBRTtJQUNILE1BQU0sS0FBSyxHQUFHLE1BQU0sSUFBQSx5QkFBaUIsRUFBQztRQUNwQyxJQUFJLEVBQUUsVUFBVSxJQUFJLE9BQU87UUFDM0IsT0FBTztRQUNQLGFBQWEsRUFBRSxPQUFPLENBQUMsVUFBVSxDQUFDO1FBQ2xDLFNBQVM7S0FDVixDQUFDLENBQUM7SUFFSCxPQUFPLElBQUEsMEJBQWMsRUFBQztRQUNwQixJQUFJLEVBQUUsT0FBTztRQUNiLFNBQVM7UUFDVCxhQUFhLEVBQUUsSUFBSTtRQUNuQixVQUFVLEVBQUUsYUFBYSxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLEtBQUssRUFBRSxRQUFRLENBQUMsQ0FBQyxRQUFRLEVBQUUsQ0FBQyxDQUFDLENBQUMsS0FBSztLQUM1RSxDQUFDLENBQUM7QUFDTCxDQUFDLENBQUM7QUE1QlcsUUFBQSxzQkFBc0IsMEJBNEJqQyJ9

package/Aks/Identity.d.ts

@@ -0,0 +1,14 @@
+import { KeyVaultInfo } from '../types';
+interface Props {
+    name: string;
+    vaultInfo: KeyVaultInfo;
+}
+declare const _default: ({ name, vaultInfo }: Props) => import("../AzAd/Identity").IdentityResult & {
+    vaultNames: {
+        clientIdKeyName: string;
+        clientSecretKeyName: string;
+        principalIdKeyName: string;
+        principalSecretKeyName: string;
+    };
+};
+export default _default;

package/Aks/Identity.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const GraphDefinition_1 = require("../AzAd/GraphDefinition");
+const Identity_1 = require("../AzAd/Identity");
+const RoleAssignment_1 = require("../AzAd/RoleAssignment");
+const AzureEnv_1 = require("../Common/AzureEnv");
+//** The AzAD app Identity for Azure Kubernetes for RBAC */
+exports.default = ({ name, vaultInfo }) => {
+    //AKS need this permission for AAD integration
+    const graphAccess = (0, GraphDefinition_1.getGraphPermissions)({ name: 'User.Read', type: 'Scope' }, { name: 'Group.Read.All', type: 'Scope' }, 
+    //{ name: 'Directory.Read.All', type: 'Scope' },
+    { name: 'Directory.Read.All', type: 'Role' });
+    const serverIdentity = (0, Identity_1.default)({
+        name,
+        createClientSecret: true,
+        createPrincipal: true,
+        requiredResourceAccesses: [graphAccess],
+        publicClient: false,
+        appType: 'api',
+        vaultInfo,
+    });
+    (0, RoleAssignment_1.roleAssignment)({
+        name: `${name}-aks-identity-acr-pull`,
+        principalId: serverIdentity.principalId,
+        principalType: 'ServicePrincipal',
+        roleName: 'AcrPull',
+        scope: AzureEnv_1.defaultScope,
+    });
+    serverIdentity.clientId.apply((i) => console.log(i));
+    return serverIdentity;
+};
+//# sourceMappingURL=data:application/json;base64,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

package/Aks/VmSetAutoScale/index.d.ts

@@ -0,0 +1,16 @@
+import { AzureResourceItem } from '../../Core/Helper';
+import { BasicMonitorArgs, ResourceGroupInfo } from '../../types';
+import { Input, Resource } from '@pulumi/pulumi';
+interface Props extends BasicMonitorArgs {
+    group: ResourceGroupInfo;
+    getCapacity?: typeof defaultGetCapacity;
+    dependsOn?: Input<Input<Resource>[]> | Input<Resource>;
+}
+declare const defaultGetCapacity: (vmScaleSet: AzureResourceItem) => {
+    nightCapacity?: 0 | 1 | number;
+    default: number;
+    minimum: number;
+    maximum: number;
+};
+declare const _default: ({ group, getCapacity, dependsOn, }: Props) => Promise<import("@pulumi/azure-native/insights/autoscaleSetting").AutoscaleSetting[] | undefined>;
+export default _default;

package/Aks/VmSetAutoScale/index.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const insights = require("@pulumi/azure-native/insights");
+const Helper_1 = require("../../Core/Helper");
+const defaultGetCapacity = (vmScaleSet) => {
+    const mode = vmScaleSet.tags ? vmScaleSet.tags['mode'] : 'System';
+    if (mode === 'System')
+        return { nightCapacity: 1, default: 1, minimum: 1, maximum: 3 };
+    return { nightCapacity: 0, default: 0, minimum: 1, maximum: 3 };
+};
+exports.default = async ({ group, getCapacity = defaultGetCapacity, dependsOn, }) => {
+    const vmScaleSets = await (0, Helper_1.findVMScaleSet)(group.resourceGroupName);
+    if (!vmScaleSets)
+        return;
+    return vmScaleSets.map((vm) => {
+        const cap = getCapacity(vm);
+        const profiles = new Array();
+        const timeZone = vm.location === 'southeastasia'
+            ? 'Singapore Standard Time'
+            : 'Singapore Standard Time';
+        if (cap.nightCapacity) {
+            profiles.push({
+                name: 'Scale down at night',
+                capacity: {
+                    default: cap.nightCapacity.toString(),
+                    minimum: cap.nightCapacity.toString(),
+                    maximum: cap.nightCapacity > 0 ? cap.nightCapacity.toString() : '1',
+                },
+                rules: [],
+                recurrence: {
+                    frequency: 'Week',
+                    schedule: {
+                        timeZone,
+                        days: [
+                            'Monday',
+                            'Tuesday',
+                            'Wednesday',
+                            'Thursday',
+                            'Friday',
+                            'Saturday',
+                            'Sunday',
+                        ],
+                        hours: [19],
+                        minutes: [0],
+                    },
+                },
+            });
+        }
+        profiles.push({
+            name: 'auto scale by CPU',
+            capacity: {
+                default: cap.default.toString(),
+                minimum: cap.minimum.toString(),
+                maximum: cap.maximum.toString(),
+            },
+            rules: [
+                {
+                    //Scale Up
+                    metricTrigger: {
+                        metricName: 'Percentage CPU',
+                        metricNamespace: 'microsoft.compute/virtualmachinescalesets',
+                        metricResourceUri: vm.id,
+                        timeGrain: 'PT1M',
+                        statistic: 'Average',
+                        timeWindow: 'PT15M',
+                        timeAggregation: 'Average',
+                        operator: 'GreaterThanOrEqual',
+                        threshold: 75,
+                        dimensions: [],
+                        dividePerInstance: false,
+                    },
+                    scaleAction: {
+                        direction: 'Increase',
+                        type: 'ChangeCount',
+                        value: '1',
+                        cooldown: 'PT30M',
+                    },
+                },
+                {
+                    //Scale down
+                    metricTrigger: {
+                        metricName: 'Percentage CPU',
+                        metricNamespace: 'microsoft.compute/virtualmachinescalesets',
+                        metricResourceUri: vm.id,
+                        timeGrain: 'PT1M',
+                        statistic: 'Average',
+                        timeWindow: 'PT15M',
+                        timeAggregation: 'Average',
+                        operator: 'LessThanOrEqual',
+                        threshold: 50,
+                        dimensions: [],
+                        dividePerInstance: false,
+                    },
+                    scaleAction: {
+                        direction: 'Decrease',
+                        type: 'ChangeCount',
+                        value: '1',
+                        cooldown: 'PT30M',
+                    },
+                },
+            ],
+            recurrence: {
+                frequency: 'Week',
+                schedule: {
+                    timeZone,
+                    days: [
+                        'Monday',
+                        'Tuesday',
+                        'Wednesday',
+                        'Thursday',
+                        'Friday',
+                        //'Saturday',
+                        //'Sunday',
+                    ],
+                    hours: [8],
+                    minutes: [0],
+                },
+            },
+        });
+        //LinuxDiagnostic
+        const autoScale = new insights.AutoscaleSetting(`${vm.name}-AutoScale`, {
+            name: `${vm.name}-AutoScale`,
+            autoscaleSettingName: `${vm.name}-AutoScale`,
+            resourceGroupName: vm.resourceGroupName,
+            targetResourceUri: vm.id,
+            enabled: true,
+            profiles,
+        }, { dependsOn });
+        return autoScale;
+    });
+};
+//# sourceMappingURL=data:application/json;base64,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

package/Aks/VmSetMonitor/index.d.ts

@@ -0,0 +1,12 @@
+import { BasicMonitorArgs, KeyVaultInfo, ResourceGroupInfo } from '../../types';
+import { Input, Resource } from '@pulumi/pulumi';
+interface Props extends BasicMonitorArgs {
+    group: ResourceGroupInfo;
+    vaultInfo: KeyVaultInfo;
+    dependsOn?: Input<Input<Resource>[]> | Input<Resource>;
+}
+declare const _default: ({ group, logWpId, logStorageId, vaultInfo, dependsOn, }: Props) => import("@pulumi/pulumi").Output<{
+    diag: import("@pulumi/azure-native/compute/virtualMachineScaleSetExtension").VirtualMachineScaleSetExtension;
+    oms: import("@pulumi/azure-native/compute/virtualMachineScaleSetExtension").VirtualMachineScaleSetExtension;
+}[] | undefined>;
+export default _default;

package/Aks/VmSetMonitor/index.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const native = require("@pulumi/azure-native");
+const Helper_1 = require("../../Core/Helper");
+const fs = require("fs");
+const pulumi_1 = require("@pulumi/pulumi");
+const Helpers_1 = require("../../Common/Helpers");
+const Helpers_2 = require("../../Logs/Helpers");
+const Helper_2 = require("../../Storage/Helper");
+exports.default = ({ group, logWpId, logStorageId, vaultInfo, dependsOn, }) => (0, pulumi_1.all)([logWpId, logStorageId]).apply(async ([lId, sId]) => {
+    const vmScaleSets = await (0, Helper_1.findVMScaleSet)(group.resourceGroupName);
+    if (!vmScaleSets)
+        return;
+    const logWp = lId
+        ? await (0, Helpers_2.getLogWpSecretsById)({ logWpId: lId, vaultInfo })
+        : undefined;
+    const logStorage = sId
+        ? await (0, Helper_2.getStorageSecretsById)({
+            storageId: sId,
+            vaultInfo,
+            //globalResource: true,
+        })
+        : undefined;
+    if (!logWp || !logStorage)
+        return;
+    const logSAS = await (0, Helper_2.getAccountSAS)(logStorage.info);
+    const originalSetting = fs.readFileSync(__dirname + '/config.json', 'utf8');
+    return vmScaleSets.map((vm) => {
+        let settings = originalSetting;
+        settings = (0, Helpers_1.replaceAll)(settings, '__DIAGNOSTIC_STORAGE_ACCOUNT__', logStorage.info.name);
+        settings = (0, Helpers_1.replaceAll)(settings, '__VM_OR_VMSS_RESOURCE_ID__', vm.id);
+        //LinuxDiagnostic
+        const diag = new native.compute.VirtualMachineScaleSetExtension(`${vm.name}-LinuxDiagnostic`, {
+            resourceGroupName: vm.resourceGroupName,
+            vmScaleSetName: vm.name,
+            name: `LinuxDiagnostic`,
+            type: 'LinuxDiagnostic',
+            typeHandlerVersion: '3.0',
+            publisher: 'Microsoft.Azure.Diagnostics',
+            autoUpgradeMinorVersion: true,
+            protectedSettings: `{
+          "storageAccountName": "${logStorage.info.name}",
+          "storageAccountSasToken": "${logSAS.accountSasToken.substring(logSAS.accountSasToken.indexOf('?') + 1)}"
+        }`,
+            settings,
+        }, 
+        //Ignore changes on this field as API never returns it back
+        { ignoreChanges: ['protectedSettings'], dependsOn });
+        const oms = new native.compute.VirtualMachineScaleSetExtension(`${vm.name}-OmsAgentForLinux`, {
+            name: `OmsAgentForLinux`,
+            resourceGroupName: vm.resourceGroupName,
+            vmScaleSetName: vm.name,
+            type: 'OmsAgentForLinux',
+            typeHandlerVersion: '1.0',
+            publisher: 'Microsoft.EnterpriseCloud.Monitoring',
+            autoUpgradeMinorVersion: true,
+            //enableAutomaticUpgrade: true,
+            //DefaultWorkspace-63a31b41-eb5d-4160-9fc9-d30fc00286c9-SEA
+            protectedSettings: `{"workspaceKey":"${logWp.secrets.primaryKey}"}`,
+            settings: `{"workspaceId": "${logWp.info.id}"}`,
+        }, 
+        //Ignore changes on this field as API never returns it back
+        { ignoreChanges: ['protectedSettings'], dependsOn });
+        return { diag, oms };
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/Aks/index.d.ts

@@ -0,0 +1,100 @@
+import * as native from '@pulumi/azure-native';
+import * as pulumi from '@pulumi/pulumi';
+import { Input } from '@pulumi/pulumi';
+import { BasicMonitorArgs, BasicResourceArgs, KeyVaultInfo } from '../types';
+import { EnvRoleNamesType } from '../AzAd/EnvRoles';
+import * as inputs from '@pulumi/azure-native/types/input';
+export declare enum VmSizes {
+    /** 32G RAM - 4CPU - $221.92 */
+    Standard_E4as_v4_221 = "Standard_E4as_v4",
+    /** 8G RAM - 2CPU - $77.38 */
+    Standard_B2ms_77 = "Standard_B2ms",
+    /** 16G RAM - 4CPU - $154.03 */
+    Standard_B4ms_154 = "Standard_B4ms",
+    /** 8G RAM - 2CPU - 87.60 */
+    Standard_D2as_v4_87 = "Standard_D2as_v4",
+    /** 8G RAM - 2CPU - 87.60 */
+    Standard_D2s_v3_87 = "Standard_D2s_v3",
+    /** 16G RAM - 4CPU - $175.20 */
+    Standard_D4as_v4_175 = "Standard_D4as_v4",
+    /** 4G RAM - 2CPU - $69.35 */
+    Standard_A2_v2_69 = "Standard_A2_v2",
+    /** 8G RAM - 4CPU - $144.54 */
+    Standard_A4_v2_144 = "Standard_A4_v2",
+    /** 32G RAM - 4CPU - $205.13 */
+    Standard_A4m_v2_205 = "Standard_A4m_v2"
+}
+interface NodePoolProps extends Partial<inputs.containerservice.ManagedClusterAgentPoolProfileArgs> {
+    name: string;
+    mode: native.containerservice.AgentPoolMode;
+    vmSize: VmSizes;
+    osDiskSizeGB: number;
+    maxPods: number;
+    enableEncryptionAtHost?: boolean;
+}
+interface AksProps extends BasicResourceArgs {
+    nodeResourceGroup?: string;
+    tier?: native.containerservice.ManagedClusterSKUTier;
+    addon?: {
+        enableAzureKeyVault?: boolean;
+        enableAzurePolicy?: boolean;
+        enableKubeDashboard?: boolean;
+        enableVirtualHost?: boolean;
+        applicationGateway?: {
+            gatewaySubnetId: pulumi.Input<string>;
+        };
+    };
+    linux?: {
+        adminUsername: Input<string>;
+        sshKeys: Array<pulumi.Input<string>>;
+    };
+    defaultNodePool: Omit<NodePoolProps, 'subnetId' | 'aksId'>;
+    nodePools?: Array<Omit<NodePoolProps, 'subnetId' | 'aksId'>>;
+    enableAutoScale?: boolean;
+    featureFlags?: {
+        createServicePrincipal?: boolean;
+        enablePodIdentity?: boolean;
+        enableDiagnosticSetting?: boolean;
+    };
+    acr?: {
+        enable: boolean;
+        id?: Input<string>;
+    };
+    aksAccess?: {
+        envRoleNames: EnvRoleNamesType;
+        adminMembers?: Array<{
+            objectId: Input<string>;
+        }>;
+        enablePrivateCluster?: boolean;
+        authorizedIPRanges?: Input<string>[];
+    };
+    network: {
+        subnetId?: pulumi.Input<string>;
+        virtualHostSubnetName?: pulumi.Input<string>;
+        enableFirewall?: boolean;
+        outboundIpAddress?: {
+            ipAddressId: pulumi.Input<string>;
+            ipAddressPrefixId?: pulumi.Input<string>;
+        };
+    };
+    vaultInfo: KeyVaultInfo;
+    log?: Pick<BasicMonitorArgs, 'logWpId'>;
+    /**Lock resource from delete*/
+    lock?: boolean;
+    dependsOn?: pulumi.Input<pulumi.Resource>[];
+    importFrom?: string;
+}
+declare const _default: ({ group, nodeResourceGroup, name, linux, defaultNodePool, nodePools, enableAutoScale, network, log, acr, aksAccess, vaultInfo, featureFlags, addon, tier, lock, dependsOn, importFrom, }: AksProps) => Promise<{
+    aks: import("@pulumi/azure-native/containerservice/managedCluster").ManagedCluster;
+    serviceIdentity: (import("../AzAd/Identity").IdentityResult & {
+        vaultNames: {
+            clientIdKeyName: string;
+            clientSecretKeyName: string;
+            principalIdKeyName: string;
+            principalSecretKeyName: string;
+        };
+    }) | undefined;
+    adminGroup: pulumi.Output<pulumi.UnwrappedObject<import("@pulumi/azuread").GetGroupResult>> | undefined;
+    privateZone: import("@pulumi/azure-native/network/privateZone").PrivateZone | undefined;
+} | undefined>;
+export default _default;