@drunk-pulumi/azure 0.0.19 → 0.0.20
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/Aks/Helper.d.ts +0 -18
- package/Aks/Helper.js +50 -32
- package/package.json +3 -6
- package/KubeX/AcrSecret.d.ts +0 -15
- package/KubeX/AcrSecret.js +0 -31
- package/KubeX/Apps/AstroPage.d.ts +0 -12
- package/KubeX/Apps/AstroPage.js +0 -33
- package/KubeX/Apps/KafKa.d.ts +0 -6
- package/KubeX/Apps/KafKa.js +0 -13
- package/KubeX/Apps/Nobelium.d.ts +0 -13
- package/KubeX/Apps/Nobelium.js +0 -37
- package/KubeX/Apps/Wikijs.d.ts +0 -30
- package/KubeX/Apps/Wikijs.js +0 -54
- package/KubeX/Apps/WordPress.d.ts +0 -24
- package/KubeX/Apps/WordPress.js +0 -55
- package/KubeX/Apps/YarpProxy/index.d.ts +0 -17
- package/KubeX/Apps/YarpProxy/index.js +0 -107
- package/KubeX/Apps/YarpProxy/type.d.ts +0 -55
- package/KubeX/Apps/YarpProxy/type.js +0 -3
- package/KubeX/CertHelper.d.ts +0 -1
- package/KubeX/CertHelper.js +0 -9
- package/KubeX/CertImports.d.ts +0 -19
- package/KubeX/CertImports.js +0 -70
- package/KubeX/CloudFlare/CertCreator.d.ts +0 -19
- package/KubeX/CloudFlare/CertCreator.js +0 -90
- package/KubeX/CloudFlare/CertImports.d.ts +0 -17
- package/KubeX/CloudFlare/CertImports.js +0 -34
- package/KubeX/CloudFlare/DynamicDns.d.ts +0 -21
- package/KubeX/CloudFlare/DynamicDns.js +0 -39
- package/KubeX/CloudFlare/Tunnel-Helm.d.ts +0 -17
- package/KubeX/CloudFlare/Tunnel-Helm.js +0 -12
- package/KubeX/CloudFlare/Tunnel.d.ts +0 -23
- package/KubeX/CloudFlare/Tunnel.js +0 -54
- package/KubeX/CloudFlare/index.d.ts +0 -13
- package/KubeX/CloudFlare/index.js +0 -36
- package/KubeX/Clusters/K3s/AutoUpgradeController/index.d.ts +0 -6
- package/KubeX/Clusters/K3s/AutoUpgradeController/index.js +0 -60
- package/KubeX/ConfigSecret.d.ts +0 -24
- package/KubeX/ConfigSecret.js +0 -38
- package/KubeX/Core/CertManager/index.d.ts +0 -24
- package/KubeX/Core/CertManager/index.js +0 -96
- package/KubeX/Core/KsCertSecret.d.ts +0 -12
- package/KubeX/Core/KsCertSecret.js +0 -22
- package/KubeX/Core/KsSecret.d.ts +0 -9
- package/KubeX/Core/KsSecret.js +0 -12
- package/KubeX/Core/LoadBalancer/MetalLB.d.ts +0 -7
- package/KubeX/Core/LoadBalancer/MetalLB.js +0 -21
- package/KubeX/Core/Monitoring/index.d.ts +0 -22
- package/KubeX/Core/Monitoring/index.js +0 -322
- package/KubeX/Core/Namespace.d.ts +0 -12
- package/KubeX/Core/Namespace.js +0 -41
- package/KubeX/Core/Nginx/index.d.ts +0 -60
- package/KubeX/Core/Nginx/index.js +0 -109
- package/KubeX/Core/OAuthProxy/index.d.ts +0 -0
- package/KubeX/Core/OAuthProxy/index.js +0 -3
- package/KubeX/Core/ResourceQuota.d.ts +0 -12
- package/KubeX/Core/ResourceQuota.js +0 -13
- package/KubeX/Core/SecurityRules.d.ts +0 -34
- package/KubeX/Core/SecurityRules.js +0 -93
- package/KubeX/Core/StorageClass/azureBlob.d.ts +0 -20
- package/KubeX/Core/StorageClass/azureBlob.js +0 -77
- package/KubeX/Core/StorageClass/azureFile.d.ts +0 -17
- package/KubeX/Core/StorageClass/azureFile.js +0 -45
- package/KubeX/Core/StorageClass/index.d.ts +0 -13
- package/KubeX/Core/StorageClass/index.js +0 -25
- package/KubeX/Core/index.d.ts +0 -57
- package/KubeX/Core/index.js +0 -94
- package/KubeX/Databases/MariaDb.d.ts +0 -11
- package/KubeX/Databases/MariaDb.js +0 -39
- package/KubeX/Databases/MySql.V2.d.ts +0 -11
- package/KubeX/Databases/MySql.V2.js +0 -40
- package/KubeX/Databases/MySql.d.ts +0 -13
- package/KubeX/Databases/MySql.js +0 -55
- package/KubeX/Databases/PostgreSql/PostgreSQL-HA.d.ts +0 -10
- package/KubeX/Databases/PostgreSql/PostgreSQL-HA.js +0 -47
- package/KubeX/Databases/PostgreSql/PostgreSQL.d.ts +0 -10
- package/KubeX/Databases/PostgreSql/PostgreSQL.js +0 -51
- package/KubeX/Databases/PostgreSql/PostgreSql.v1.d.ts +0 -13
- package/KubeX/Databases/PostgreSql/PostgreSql.v1.js +0 -56
- package/KubeX/Databases/PostgreSql/index.d.ts +0 -17
- package/KubeX/Databases/PostgreSql/index.js +0 -6
- package/KubeX/Databases/RedisCache.d.ts +0 -14
- package/KubeX/Databases/RedisCache.js +0 -65
- package/KubeX/Databases/SqlServer.d.ts +0 -15
- package/KubeX/Databases/SqlServer.js +0 -77
- package/KubeX/Deployment/PodAutoscaler.d.ts +0 -14
- package/KubeX/Deployment/PodAutoscaler.js +0 -51
- package/KubeX/Deployment/index.d.ts +0 -136
- package/KubeX/Deployment/index.js +0 -306
- package/KubeX/Helpers.d.ts +0 -4
- package/KubeX/Helpers.js +0 -17
- package/KubeX/Ingress/AppGatewayIngress.d.ts +0 -2
- package/KubeX/Ingress/AppGatewayIngress.js +0 -4
- package/KubeX/Ingress/Conts.d.ts +0 -13
- package/KubeX/Ingress/Conts.js +0 -18
- package/KubeX/Ingress/NginxIngress.d.ts +0 -3
- package/KubeX/Ingress/NginxIngress.js +0 -186
- package/KubeX/Ingress/NginxProxy.d.ts +0 -21
- package/KubeX/Ingress/NginxProxy.js +0 -43
- package/KubeX/Ingress/TraefikIngress/CustomHeader.d.ts +0 -15
- package/KubeX/Ingress/TraefikIngress/CustomHeader.js +0 -15
- package/KubeX/Ingress/TraefikIngress/index.d.ts +0 -11
- package/KubeX/Ingress/TraefikIngress/index.js +0 -95
- package/KubeX/Ingress/index.d.ts +0 -5
- package/KubeX/Ingress/index.js +0 -12
- package/KubeX/Ingress/type.d.ts +0 -82
- package/KubeX/Ingress/type.js +0 -3
- package/KubeX/Providers/index.d.ts +0 -8
- package/KubeX/Providers/index.js +0 -15
- package/KubeX/Storage/Longhorn/index.d.ts +0 -15
- package/KubeX/Storage/Longhorn/index.js +0 -54
- package/KubeX/Storage/index.d.ts +0 -25
- package/KubeX/Storage/index.js +0 -79
- package/KubeX/Tools/AWS/LocalStack.d.ts +0 -7
- package/KubeX/Tools/AWS/LocalStack.js +0 -29
- package/KubeX/Tools/AWS/S3.d.ts +0 -6
- package/KubeX/Tools/AWS/S3.js +0 -44
- package/KubeX/Tools/AWS/index.d.ts +0 -7
- package/KubeX/Tools/AWS/index.js +0 -14
- package/KubeX/Tools/AppHealthzMonitor.d.ts +0 -18
- package/KubeX/Tools/AppHealthzMonitor.js +0 -52
- package/KubeX/Tools/ArgoCD/index.d.ts +0 -17
- package/KubeX/Tools/ArgoCD/index.js +0 -131
- package/KubeX/Tools/Dapr/Storage.d.ts +0 -66
- package/KubeX/Tools/Dapr/Storage.js +0 -70
- package/KubeX/Tools/Dapr/index.d.ts +0 -10
- package/KubeX/Tools/Dapr/index.js +0 -31
- package/KubeX/Tools/Echo-App.d.ts +0 -3
- package/KubeX/Tools/Echo-App.js +0 -21
- package/KubeX/Tools/Gitea/GiteaRepo.d.ts +0 -72
- package/KubeX/Tools/Gitea/GiteaRepo.js +0 -184
- package/KubeX/Tools/Gitea/GiteaRunner.d.ts +0 -11
- package/KubeX/Tools/Gitea/GiteaRunner.js +0 -37
- package/KubeX/Tools/Gitea/GiteaRunner.v1.d.ts +0 -11
- package/KubeX/Tools/Gitea/GiteaRunner.v1.js +0 -123
- package/KubeX/Tools/HarborRepo.d.ts +0 -29
- package/KubeX/Tools/HarborRepo.js +0 -78
- package/KubeX/Tools/HelloWorld.d.ts +0 -3
- package/KubeX/Tools/HelloWorld.js +0 -21
- package/KubeX/Tools/KubeCleanup.d.ts +0 -9
- package/KubeX/Tools/KubeCleanup.js +0 -34
- package/KubeX/Tools/NoIp.d.ts +0 -13
- package/KubeX/Tools/NoIp.js +0 -24
- package/KubeX/Tools/OpenLDAP/index.d.ts +0 -12
- package/KubeX/Tools/OpenLDAP/index.js +0 -56
- package/KubeX/Tools/OutlineVpn/index.d.ts +0 -25
- package/KubeX/Tools/OutlineVpn/index.js +0 -256
- package/KubeX/Tools/SqlPad.d.ts +0 -29
- package/KubeX/Tools/SqlPad.js +0 -133
- package/KubeX/Tools/ToolPod.d.ts +0 -10
- package/KubeX/Tools/ToolPod.js +0 -40
- package/KubeX/Tools/UptimeKuma.d.ts +0 -6
- package/KubeX/Tools/UptimeKuma.js +0 -38
- package/KubeX/Tools/index.d.ts +0 -27
- package/KubeX/Tools/index.js +0 -35
- package/KubeX/VairableResolvers/index.d.ts +0 -15
- package/KubeX/VairableResolvers/index.js +0 -49
- package/KubeX/kx/index.d.ts +0 -114
- package/KubeX/kx/index.js +0 -423
- package/KubeX/types.d.ts +0 -49
- package/KubeX/types.js +0 -3
package/KubeX/ConfigSecret.d.ts
DELETED
|
@@ -1,24 +0,0 @@
|
|
|
1
|
-
import { DefaultK8sArgs } from './types';
|
|
2
|
-
import * as pulumi from '@pulumi/pulumi';
|
|
3
|
-
import * as kx from './kx';
|
|
4
|
-
import { Input } from '@pulumi/pulumi';
|
|
5
|
-
interface Props extends DefaultK8sArgs {
|
|
6
|
-
fixedName?: boolean;
|
|
7
|
-
configMap?: pulumi.Input<{
|
|
8
|
-
[key: string]: pulumi.Input<string>;
|
|
9
|
-
}>;
|
|
10
|
-
secrets?: pulumi.Input<{
|
|
11
|
-
[key: string]: pulumi.Input<string>;
|
|
12
|
-
}>;
|
|
13
|
-
}
|
|
14
|
-
export declare const ConfigSecret: ({ name, namespace, fixedName, configMap, secrets, provider, dependsOn, }: Props) => {
|
|
15
|
-
config?: kx.ConfigMap | undefined;
|
|
16
|
-
secret?: kx.Secret | undefined;
|
|
17
|
-
};
|
|
18
|
-
interface AzureStorageSecret extends DefaultK8sArgs {
|
|
19
|
-
fixedName?: boolean;
|
|
20
|
-
accountKey: Input<string>;
|
|
21
|
-
accountName: Input<string>;
|
|
22
|
-
}
|
|
23
|
-
export declare const AksAzureStorageSecret: ({ accountKey, accountName, ...props }: AzureStorageSecret) => kx.Secret;
|
|
24
|
-
export default ConfigSecret;
|
package/KubeX/ConfigSecret.js
DELETED
|
@@ -1,38 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.AksAzureStorageSecret = exports.ConfigSecret = void 0;
|
|
4
|
-
const kx = require("./kx");
|
|
5
|
-
const ConfigSecret = ({ name, namespace, fixedName, configMap, secrets, provider, dependsOn, }) => {
|
|
6
|
-
const configMapName = `${name}-configmap`;
|
|
7
|
-
const secretName = `${name}-secret`;
|
|
8
|
-
const result = {
|
|
9
|
-
config: undefined,
|
|
10
|
-
secret: undefined,
|
|
11
|
-
};
|
|
12
|
-
if (configMap) {
|
|
13
|
-
//Create ConfigMaps
|
|
14
|
-
result.config = new kx.ConfigMap(configMapName, {
|
|
15
|
-
metadata: { name: fixedName ? configMapName : undefined, namespace },
|
|
16
|
-
data: configMap,
|
|
17
|
-
}, { provider, dependsOn });
|
|
18
|
-
}
|
|
19
|
-
if (secrets) {
|
|
20
|
-
//Create Secrets
|
|
21
|
-
result.secret = new kx.Secret(secretName, {
|
|
22
|
-
metadata: { name: fixedName ? secretName : undefined, namespace },
|
|
23
|
-
stringData: secrets,
|
|
24
|
-
}, { provider, dependsOn });
|
|
25
|
-
}
|
|
26
|
-
return result;
|
|
27
|
-
};
|
|
28
|
-
exports.ConfigSecret = ConfigSecret;
|
|
29
|
-
const AksAzureStorageSecret = ({ accountKey, accountName, ...props }) => (0, exports.ConfigSecret)({
|
|
30
|
-
...props,
|
|
31
|
-
secrets: {
|
|
32
|
-
azurestorageaccountkey: accountKey,
|
|
33
|
-
azurestorageaccountname: accountName,
|
|
34
|
-
},
|
|
35
|
-
}).secret;
|
|
36
|
-
exports.AksAzureStorageSecret = AksAzureStorageSecret;
|
|
37
|
-
exports.default = exports.ConfigSecret;
|
|
38
|
-
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiQ29uZmlnU2VjcmV0LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL0t1YmVYL0NvbmZpZ1NlY3JldC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFFQSwyQkFBMkI7QUFhcEIsTUFBTSxZQUFZLEdBQUcsQ0FBQyxFQUMzQixJQUFJLEVBQ0osU0FBUyxFQUNULFNBQVMsRUFDVCxTQUFTLEVBQ1QsT0FBTyxFQUNQLFFBQVEsRUFDUixTQUFTLEdBQ0gsRUFBRSxFQUFFO0lBQ1YsTUFBTSxhQUFhLEdBQUcsR0FBRyxJQUFJLFlBQVksQ0FBQztJQUMxQyxNQUFNLFVBQVUsR0FBRyxHQUFHLElBQUksU0FBUyxDQUFDO0lBRXBDLE1BQU0sTUFBTSxHQUFrRDtRQUM1RCxNQUFNLEVBQUUsU0FBUztRQUNqQixNQUFNLEVBQUUsU0FBUztLQUNsQixDQUFDO0lBRUYsSUFBSSxTQUFTLEVBQUUsQ0FBQztRQUNkLG1CQUFtQjtRQUNuQixNQUFNLENBQUMsTUFBTSxHQUFHLElBQUksRUFBRSxDQUFDLFNBQVMsQ0FDOUIsYUFBYSxFQUNiO1lBQ0UsUUFBUSxFQUFFLEVBQUUsSUFBSSxFQUFFLFNBQVMsQ0FBQyxDQUFDLENBQUMsYUFBYSxDQUFDLENBQUMsQ0FBQyxTQUFTLEVBQUUsU0FBUyxFQUFFO1lBQ3BFLElBQUksRUFBRSxTQUFTO1NBQ2hCLEVBQ0QsRUFBRSxRQUFRLEVBQUUsU0FBUyxFQUFFLENBQ3hCLENBQUM7SUFDSixDQUFDO0lBRUQsSUFBSSxPQUFPLEVBQUUsQ0FBQztRQUNaLGdCQUFnQjtRQUNoQixNQUFNLENBQUMsTUFBTSxHQUFHLElBQUksRUFBRSxDQUFDLE1BQU0sQ0FDM0IsVUFBVSxFQUNWO1lBQ0UsUUFBUSxFQUFFLEVBQUUsSUFBSSxFQUFFLFNBQVMsQ0FBQyxDQUFDLENBQUMsVUFBVSxDQUFDLENBQUMsQ0FBQyxTQUFTLEVBQUUsU0FBUyxFQUFFO1lBQ2pFLFVBQVUsRUFBRSxPQUFPO1NBQ3BCLEVBQ0QsRUFBRSxRQUFRLEVBQUUsU0FBUyxFQUFFLENBQ3hCLENBQUM7SUFDSixDQUFDO0lBRUQsT0FBTyxNQUFNLENBQUM7QUFDaEIsQ0FBQyxDQUFDO0FBMUNXLFFBQUEsWUFBWSxnQkEwQ3ZCO0FBUUssTUFBTSxxQkFBcUIsR0FBRyxDQUFDLEVBQ3BDLFVBQVUsRUFDVixXQUFXLEVBQ1gsR0FBRyxLQUFLLEVBQ1csRUFBRSxFQUFFLENBQ3ZCLElBQUEsb0JBQVksRUFBQztJQUNYLEdBQUcsS0FBSztJQUNSLE9BQU8sRUFBRTtRQUNQLHNCQUFzQixFQUFFLFVBQVU7UUFDbEMsdUJBQXVCLEVBQUUsV0FBVztLQUNyQztDQUNGLENBQUMsQ0FBQyxNQUFPLENBQUM7QUFYQSxRQUFBLHFCQUFxQix5QkFXckI7QUFFYixrQkFBZSxvQkFBWSxDQUFDIn0=
|
|
@@ -1,24 +0,0 @@
|
|
|
1
|
-
import * as pulumi from '@pulumi/pulumi';
|
|
2
|
-
import * as k8s from '@pulumi/kubernetes';
|
|
3
|
-
import { Input, Resource } from '@pulumi/pulumi';
|
|
4
|
-
export interface CertManagerProps {
|
|
5
|
-
name: string;
|
|
6
|
-
email: string;
|
|
7
|
-
version?: string;
|
|
8
|
-
http01Issuer?: {
|
|
9
|
-
publicIngressClass: string;
|
|
10
|
-
domains?: string[];
|
|
11
|
-
};
|
|
12
|
-
azureDnsIssuer?: {
|
|
13
|
-
dnsZoneName: string;
|
|
14
|
-
clientId: string;
|
|
15
|
-
clientSecret: string;
|
|
16
|
-
resourceGroupName: Input<string>;
|
|
17
|
-
subscriptionId: Input<string>;
|
|
18
|
-
tenantId: Input<string>;
|
|
19
|
-
};
|
|
20
|
-
provider: k8s.Provider;
|
|
21
|
-
dependsOn?: pulumi.Input<pulumi.Input<Resource>[]> | pulumi.Input<Resource>;
|
|
22
|
-
}
|
|
23
|
-
declare const _default: ({ name, version, provider, email, http01Issuer, azureDnsIssuer, dependsOn, }: CertManagerProps) => k8s.helm.v3.Chart;
|
|
24
|
-
export default _default;
|
|
@@ -1,96 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const k8s = require("@pulumi/kubernetes");
|
|
4
|
-
const path = require("path");
|
|
5
|
-
const Namespace_1 = require("../Namespace");
|
|
6
|
-
const KsSecret_1 = require("../KsSecret");
|
|
7
|
-
//run this `kubectl patch crd challenges.acme.cert-manager.io -p '{"metadata":{"finalizers": []}}' --type=merge` if stuck at removing challenges.acme.cert-manager.io
|
|
8
|
-
exports.default = ({ name, version, provider, email, http01Issuer, azureDnsIssuer, dependsOn, }) => {
|
|
9
|
-
const namespace = 'cert-manager';
|
|
10
|
-
const ns = (0, Namespace_1.default)({
|
|
11
|
-
name: namespace,
|
|
12
|
-
labels: { 'cert-manager.io/disable-validation': 'true' },
|
|
13
|
-
provider,
|
|
14
|
-
});
|
|
15
|
-
const certManager = new k8s.helm.v3.Chart(name, {
|
|
16
|
-
namespace,
|
|
17
|
-
chart: 'cert-manager',
|
|
18
|
-
version,
|
|
19
|
-
fetchOpts: { repo: 'https://charts.jetstack.io' },
|
|
20
|
-
values: {
|
|
21
|
-
installCRDs: true,
|
|
22
|
-
ingressShim: {
|
|
23
|
-
defaultIssuerName: 'letsencrypt-prod',
|
|
24
|
-
defaultIssuerKind: 'ClusterIssuer',
|
|
25
|
-
defaultIssuerGroup: 'cert-manager.io',
|
|
26
|
-
},
|
|
27
|
-
//startupapicheck: { timeout: '1m' },
|
|
28
|
-
// extraArgs: {
|
|
29
|
-
// '--dns01-recursive-nameservers-only': 'true',
|
|
30
|
-
// '--dns01-recursive-nameservers': '8.8.8.8:53,1.1.1.1:53',
|
|
31
|
-
// },
|
|
32
|
-
//nodeSelector: { 'kubernetes.io/os': 'linux' },
|
|
33
|
-
},
|
|
34
|
-
}, {
|
|
35
|
-
provider,
|
|
36
|
-
dependsOn: ns,
|
|
37
|
-
});
|
|
38
|
-
if (http01Issuer) {
|
|
39
|
-
new k8s.yaml.ConfigFile(`cluster-issuer`, {
|
|
40
|
-
file: path.resolve(__dirname, 'cluster-issuer.yaml'),
|
|
41
|
-
transformations: [
|
|
42
|
-
(obj) => {
|
|
43
|
-
obj.metadata.namespace = namespace;
|
|
44
|
-
obj.spec.acme.email = email;
|
|
45
|
-
obj.spec.acme.solvers = [
|
|
46
|
-
{
|
|
47
|
-
http01: {
|
|
48
|
-
ingress: {
|
|
49
|
-
class: http01Issuer.publicIngressClass,
|
|
50
|
-
// podTemplate: {
|
|
51
|
-
// spec: { nodeSelector: { 'kubernetes.io/os': 'linux' } },
|
|
52
|
-
// },
|
|
53
|
-
},
|
|
54
|
-
selector: http01Issuer.domains
|
|
55
|
-
? { dnsZones: http01Issuer.domains }
|
|
56
|
-
: undefined,
|
|
57
|
-
},
|
|
58
|
-
},
|
|
59
|
-
];
|
|
60
|
-
},
|
|
61
|
-
],
|
|
62
|
-
}, { provider, dependsOn: [certManager] });
|
|
63
|
-
}
|
|
64
|
-
if (azureDnsIssuer) {
|
|
65
|
-
(0, KsSecret_1.default)({
|
|
66
|
-
name: `${name}-identity`,
|
|
67
|
-
namespace,
|
|
68
|
-
stringData: {
|
|
69
|
-
clientId: azureDnsIssuer.clientId,
|
|
70
|
-
clientSecret: azureDnsIssuer.clientSecret,
|
|
71
|
-
},
|
|
72
|
-
provider,
|
|
73
|
-
dependsOn: [certManager],
|
|
74
|
-
});
|
|
75
|
-
new k8s.yaml.ConfigFile('cluster-issuer-azdns', {
|
|
76
|
-
file: path.resolve(__dirname, 'cluster-issuer-azdns.yaml'),
|
|
77
|
-
transformations: [
|
|
78
|
-
(o) => {
|
|
79
|
-
o.metadata.namespace = namespace;
|
|
80
|
-
o.spec.acme.email = email;
|
|
81
|
-
const providers = o.spec.acme.solvers;
|
|
82
|
-
providers.forEach((p) => {
|
|
83
|
-
p.dns01.azuredns.clientID = azureDnsIssuer.clientId;
|
|
84
|
-
p.dns01.azuredns.hostedZoneName = azureDnsIssuer.dnsZoneName;
|
|
85
|
-
p.dns01.azuredns.resourceGroupName =
|
|
86
|
-
azureDnsIssuer.resourceGroupName;
|
|
87
|
-
p.dns01.azuredns.subscriptionID = azureDnsIssuer.subscriptionId;
|
|
88
|
-
p.dns01.azuredns.tenantID = azureDnsIssuer.tenantId;
|
|
89
|
-
});
|
|
90
|
-
},
|
|
91
|
-
],
|
|
92
|
-
}, { provider, dependsOn: [certManager] });
|
|
93
|
-
}
|
|
94
|
-
return certManager;
|
|
95
|
-
};
|
|
96
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
import { DefaultK8sArgs } from '../types';
|
|
2
|
-
import { Input } from '@pulumi/pulumi';
|
|
3
|
-
interface CertSecretProps extends DefaultK8sArgs {
|
|
4
|
-
certInfo: Input<{
|
|
5
|
-
cert: Input<string>;
|
|
6
|
-
ca?: Input<string>;
|
|
7
|
-
privateKey: Input<string>;
|
|
8
|
-
dhparam?: Input<string>;
|
|
9
|
-
}>;
|
|
10
|
-
}
|
|
11
|
-
declare const _default: ({ name, namespace, certInfo, ...others }: CertSecretProps) => import("@pulumi/pulumi").Output<import("@pulumi/kubernetes/core/v1/secret").Secret>;
|
|
12
|
-
export default _default;
|
|
@@ -1,22 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const pulumi_1 = require("@pulumi/pulumi");
|
|
4
|
-
const KsSecret_1 = require("./KsSecret");
|
|
5
|
-
exports.default = ({ name, namespace, certInfo, ...others }) => (0, pulumi_1.all)([namespace, certInfo]).apply(([ns, info]) => {
|
|
6
|
-
const stringData = {
|
|
7
|
-
'tls.crt': info.cert,
|
|
8
|
-
'tls.key': info.privateKey,
|
|
9
|
-
};
|
|
10
|
-
if (info.ca)
|
|
11
|
-
stringData['tls.ca'] = info.ca;
|
|
12
|
-
if (info.dhparam)
|
|
13
|
-
stringData['tls.dhparam'] = info.dhparam;
|
|
14
|
-
return (0, KsSecret_1.default)({
|
|
15
|
-
name: `${name}-${ns}`,
|
|
16
|
-
namespace: ns,
|
|
17
|
-
type: 'kubernetes.io/tls',
|
|
18
|
-
stringData,
|
|
19
|
-
...others,
|
|
20
|
-
});
|
|
21
|
-
});
|
|
22
|
-
//# sourceMappingURL=data:application/json;base64,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
|
package/KubeX/Core/KsSecret.d.ts
DELETED
|
@@ -1,9 +0,0 @@
|
|
|
1
|
-
import { DefaultK8sArgs } from '../types';
|
|
2
|
-
import { Input } from '@pulumi/pulumi';
|
|
3
|
-
declare const _default: ({ name, namespace, type, stringData, ...others }: DefaultK8sArgs & {
|
|
4
|
-
type?: Input<string> | undefined;
|
|
5
|
-
stringData: Input<{
|
|
6
|
-
[key: string]: Input<string>;
|
|
7
|
-
}>;
|
|
8
|
-
}) => import("@pulumi/kubernetes/core/v1/secret").Secret;
|
|
9
|
-
export default _default;
|
package/KubeX/Core/KsSecret.js
DELETED
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const k8s = require("@pulumi/kubernetes");
|
|
4
|
-
exports.default = ({ name = 'Secret', namespace, type, stringData, ...others }) => new k8s.core.v1.Secret(name, {
|
|
5
|
-
metadata: {
|
|
6
|
-
name,
|
|
7
|
-
namespace,
|
|
8
|
-
},
|
|
9
|
-
type,
|
|
10
|
-
stringData,
|
|
11
|
-
}, others);
|
|
12
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
import * as k8s from '@pulumi/kubernetes';
|
|
2
|
-
import { K8sArgs } from '../../types';
|
|
3
|
-
export interface MetalLBProps extends K8sArgs {
|
|
4
|
-
version?: string;
|
|
5
|
-
}
|
|
6
|
-
declare const _default: ({ version, ...others }: MetalLBProps) => k8s.helm.v3.Chart;
|
|
7
|
-
export default _default;
|
|
@@ -1,21 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const k8s = require("@pulumi/kubernetes");
|
|
4
|
-
const Namespace_1 = require("../Namespace");
|
|
5
|
-
exports.default = ({ version, ...others }) => {
|
|
6
|
-
const name = 'metallb';
|
|
7
|
-
const namespace = 'metallb';
|
|
8
|
-
const ns = (0, Namespace_1.default)({ name: namespace, ...others });
|
|
9
|
-
//Deployment
|
|
10
|
-
return new k8s.helm.v3.Chart(name, {
|
|
11
|
-
namespace,
|
|
12
|
-
chart: 'metallb',
|
|
13
|
-
version,
|
|
14
|
-
fetchOpts: {
|
|
15
|
-
repo: 'https://charts.bitnami.com/bitnami',
|
|
16
|
-
},
|
|
17
|
-
skipAwait: true,
|
|
18
|
-
values: {},
|
|
19
|
-
}, { provider: others.provider, dependsOn: ns });
|
|
20
|
-
};
|
|
21
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,22 +0,0 @@
|
|
|
1
|
-
import * as pulumi from '@pulumi/pulumi';
|
|
2
|
-
import * as k8s from '@pulumi/kubernetes';
|
|
3
|
-
import { KeyVaultInfo } from '../../../types';
|
|
4
|
-
export interface MonitoringProps {
|
|
5
|
-
namespace?: string;
|
|
6
|
-
provider: k8s.Provider;
|
|
7
|
-
nodeSelector?: pulumi.Input<{
|
|
8
|
-
[key: string]: pulumi.Input<string>;
|
|
9
|
-
}>;
|
|
10
|
-
enablePrometheus?: boolean;
|
|
11
|
-
enableGrafana?: {
|
|
12
|
-
hostName: string;
|
|
13
|
-
auth?: {
|
|
14
|
-
azureAD?: boolean;
|
|
15
|
-
};
|
|
16
|
-
};
|
|
17
|
-
enableAlertManager?: boolean;
|
|
18
|
-
vaultInfo?: KeyVaultInfo;
|
|
19
|
-
dependsOn?: pulumi.Input<pulumi.Input<pulumi.Resource>[]> | pulumi.Input<pulumi.Resource>;
|
|
20
|
-
}
|
|
21
|
-
declare const _default: ({ namespace, nodeSelector, enableAlertManager, enablePrometheus, enableGrafana, vaultInfo, provider, }: MonitoringProps) => Promise<k8s.helm.v3.Chart>;
|
|
22
|
-
export default _default;
|
|
@@ -1,322 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const pulumi = require("@pulumi/pulumi");
|
|
4
|
-
const k8s = require("@pulumi/kubernetes");
|
|
5
|
-
const NginxIngress_1 = require("../../../KubeX/Ingress/NginxIngress");
|
|
6
|
-
const SecurityRules_1 = require("../SecurityRules");
|
|
7
|
-
const Namespace_1 = require("../Namespace");
|
|
8
|
-
const CertHelper_1 = require("../../CertHelper");
|
|
9
|
-
const Helpers_1 = require("../../../Common/Helpers");
|
|
10
|
-
const Random_1 = require("../../../Core/Random");
|
|
11
|
-
const Identity_1 = require("../../../AzAd/Identity");
|
|
12
|
-
const AzureEnv_1 = require("../../../Common/AzureEnv");
|
|
13
|
-
const createIdentity = async ({ callbackUrl, name, vaultInfo, }) => {
|
|
14
|
-
//Create Azure AD Identity for Authentication
|
|
15
|
-
return await (0, Identity_1.default)({
|
|
16
|
-
name,
|
|
17
|
-
appRoleAssignmentRequired: true,
|
|
18
|
-
appRoles: [
|
|
19
|
-
{
|
|
20
|
-
id: '819acdc5-3b86-4a9e-a6ea-1ce87b229ce6',
|
|
21
|
-
allowedMemberTypes: ['User'],
|
|
22
|
-
description: 'Grafana org admin Users',
|
|
23
|
-
displayName: 'Grafana Org Admin',
|
|
24
|
-
enabled: true,
|
|
25
|
-
value: 'Admin',
|
|
26
|
-
},
|
|
27
|
-
{
|
|
28
|
-
id: '225f546a-935c-4552-b2f5-97ae976f14e7',
|
|
29
|
-
allowedMemberTypes: ['User'],
|
|
30
|
-
description: 'Grafana read only Users',
|
|
31
|
-
displayName: 'Grafana Viewer',
|
|
32
|
-
enabled: true,
|
|
33
|
-
value: 'Viewer',
|
|
34
|
-
},
|
|
35
|
-
{
|
|
36
|
-
id: 'a482ac2e-68f1-4655-8875-2e84b9f13ef9',
|
|
37
|
-
allowedMemberTypes: ['User'],
|
|
38
|
-
description: 'Grafana Editor Users',
|
|
39
|
-
displayName: 'Grafana Editor',
|
|
40
|
-
enabled: true,
|
|
41
|
-
value: 'Editor',
|
|
42
|
-
},
|
|
43
|
-
],
|
|
44
|
-
// requiredResourceAccesses: [
|
|
45
|
-
// getGraphPermissions({ name: 'User.Read', type: 'Scope' }),
|
|
46
|
-
// ],
|
|
47
|
-
createClientSecret: true,
|
|
48
|
-
createPrincipal: false,
|
|
49
|
-
appType: 'web',
|
|
50
|
-
replyUrls: [callbackUrl],
|
|
51
|
-
vaultInfo,
|
|
52
|
-
});
|
|
53
|
-
};
|
|
54
|
-
exports.default = async ({ namespace = 'monitoring',
|
|
55
|
-
/**Select AKS node that is not Virtual Node*/
|
|
56
|
-
nodeSelector = {}, enableAlertManager = false, enablePrometheus = true, enableGrafana, vaultInfo, provider, }) => {
|
|
57
|
-
const name = 'prometheus';
|
|
58
|
-
//TODO: Setup grafana with Azure AD authentication
|
|
59
|
-
//Sample https://github.com/fabianlee/k3s-cluster-kvm/blob/main/roles/kube-prometheus-stack/files/prom-sparse.expanded.yaml
|
|
60
|
-
/** https://github.com/cablespaghetti/k3s-monitoring
|
|
61
|
-
*
|
|
62
|
-
* Monitor Rules Creating issue
|
|
63
|
-
* - kubectl delete validatingwebhookconfigurations.admissionregistration.k8s.io prometheus-prometheus-oper-admission
|
|
64
|
-
* - kubectl delete MutatingWebhookConfiguration prometheus-prometheus-oper-admission
|
|
65
|
-
*
|
|
66
|
-
* kube-proxy issue refer here: https://github.com/prometheus-community/helm-charts/blob/61e7d540b686fa0df428933a42136f7084223ee2/charts/kube-prometheus-stack/README.md
|
|
67
|
-
*/
|
|
68
|
-
const rootUrl = `https://${enableGrafana?.hostName}`;
|
|
69
|
-
const ns = (0, Namespace_1.default)({ name: namespace, provider });
|
|
70
|
-
const password = (0, Random_1.randomPassword)({ name, policy: 'yearly', vaultInfo }).result;
|
|
71
|
-
const adIdentity = Boolean(enableGrafana?.auth?.azureAD)
|
|
72
|
-
? await createIdentity({
|
|
73
|
-
name,
|
|
74
|
-
callbackUrl: `${rootUrl}/login/azuread`,
|
|
75
|
-
vaultInfo,
|
|
76
|
-
})
|
|
77
|
-
: undefined;
|
|
78
|
-
const prometheus = new k8s.helm.v3.Chart(name, {
|
|
79
|
-
chart: 'kube-prometheus-stack',
|
|
80
|
-
namespace,
|
|
81
|
-
fetchOpts: { repo: 'https://prometheus-community.github.io/helm-charts' },
|
|
82
|
-
values: {
|
|
83
|
-
defaultRules: {
|
|
84
|
-
create: enablePrometheus,
|
|
85
|
-
rules: {
|
|
86
|
-
alertmanager: enableAlertManager,
|
|
87
|
-
etcd: false,
|
|
88
|
-
configReloaders: false,
|
|
89
|
-
general: true,
|
|
90
|
-
k8s: false,
|
|
91
|
-
kubeApiserverAvailability: false,
|
|
92
|
-
kubeApiserverBurnrate: false,
|
|
93
|
-
kubeApiserverHistogram: true,
|
|
94
|
-
kubeApiserverSlos: false,
|
|
95
|
-
kubeControllerManager: false,
|
|
96
|
-
kubelet: false,
|
|
97
|
-
kubeProxy: false,
|
|
98
|
-
kubePrometheusGeneral: enablePrometheus,
|
|
99
|
-
kubePrometheusNodeRecording: enablePrometheus,
|
|
100
|
-
kubernetesApps: enablePrometheus,
|
|
101
|
-
kubernetesResources: enablePrometheus,
|
|
102
|
-
kubernetesStorage: enablePrometheus,
|
|
103
|
-
kubernetesSystem: enablePrometheus,
|
|
104
|
-
kubeSchedulerAlerting: enableAlertManager,
|
|
105
|
-
kubeSchedulerRecording: enablePrometheus,
|
|
106
|
-
kubeStateMetrics: enablePrometheus,
|
|
107
|
-
network: enablePrometheus,
|
|
108
|
-
node: enablePrometheus,
|
|
109
|
-
nodeExporterAlerting: enableAlertManager,
|
|
110
|
-
nodeExporterRecording: enablePrometheus,
|
|
111
|
-
prometheus: enablePrometheus,
|
|
112
|
-
prometheusOperator: enablePrometheus,
|
|
113
|
-
},
|
|
114
|
-
},
|
|
115
|
-
//Required for use in managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico),
|
|
116
|
-
//because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working
|
|
117
|
-
hostNetwork: false,
|
|
118
|
-
nodeSelector,
|
|
119
|
-
coreDns: { enabled: enablePrometheus },
|
|
120
|
-
kubeDns: { enabled: false },
|
|
121
|
-
kubelet: { enabled: false },
|
|
122
|
-
//Disable etcd monitoring. See https://github.com/cablespaghetti/k3s-monitoring/issues/4
|
|
123
|
-
kubeEtcd: { enabled: false },
|
|
124
|
-
//Disable kube-controller-manager and kube-scheduler monitoring. See https://github.com/cablespaghetti/k3s-monitoring/issues/2
|
|
125
|
-
kubeControllerManager: { enabled: false },
|
|
126
|
-
kubeScheduler: { enabled: false },
|
|
127
|
-
kubeProxy: { enabled: false },
|
|
128
|
-
kubernetesServiceMonitors: { enabled: enablePrometheus },
|
|
129
|
-
kubeApiServer: { enabled: enablePrometheus },
|
|
130
|
-
kubeletService: { enabled: enablePrometheus },
|
|
131
|
-
kubeStateMetrics: { enabled: enablePrometheus },
|
|
132
|
-
nodeExporter: { enabled: enablePrometheus },
|
|
133
|
-
networkPolicy: { enabled: false },
|
|
134
|
-
prometheus: { enabled: enablePrometheus },
|
|
135
|
-
prometheusOperator: { enabled: enablePrometheus },
|
|
136
|
-
prometheusSpec: {
|
|
137
|
-
retention: '7d',
|
|
138
|
-
storageSpec: {
|
|
139
|
-
volumeClaimTemplate: {
|
|
140
|
-
spec: {
|
|
141
|
-
accessModes: ['ReadWriteOnce'],
|
|
142
|
-
resources: {
|
|
143
|
-
requests: {
|
|
144
|
-
storage: '5Gi',
|
|
145
|
-
},
|
|
146
|
-
},
|
|
147
|
-
},
|
|
148
|
-
},
|
|
149
|
-
},
|
|
150
|
-
},
|
|
151
|
-
grafana: {
|
|
152
|
-
enabled: Boolean(enableGrafana),
|
|
153
|
-
adminPassword: password,
|
|
154
|
-
plugins: ['grafana-piechart-panel'],
|
|
155
|
-
env: {
|
|
156
|
-
GF_SERVER_ROOT_URL: rootUrl,
|
|
157
|
-
GF_SERVER_DOMAIN: enableGrafana?.hostName,
|
|
158
|
-
GF_SERVER_SERVE_FROM_SUB_PATH: 'true',
|
|
159
|
-
},
|
|
160
|
-
},
|
|
161
|
-
alertmanager: {
|
|
162
|
-
enabled: enableAlertManager,
|
|
163
|
-
// config: {
|
|
164
|
-
// global: {
|
|
165
|
-
// smtp_from: 'you@gmail.com',
|
|
166
|
-
// smtp_smarthost: 'mailhog:1025',
|
|
167
|
-
// smtp_require_tls: false,
|
|
168
|
-
// },
|
|
169
|
-
// route: {
|
|
170
|
-
// group_by: ['job'],
|
|
171
|
-
// group_wait: '30s',
|
|
172
|
-
// group_interval: '5m',
|
|
173
|
-
// repeat_interval: '1h',
|
|
174
|
-
// receiver: 'email',
|
|
175
|
-
// routes: [
|
|
176
|
-
// {
|
|
177
|
-
// match: {
|
|
178
|
-
// alertname: 'Watchdog',
|
|
179
|
-
// },
|
|
180
|
-
// receiver: 'null',
|
|
181
|
-
// },
|
|
182
|
-
// {
|
|
183
|
-
// match: {
|
|
184
|
-
// alertname: 'CPUThrottlingHigh',
|
|
185
|
-
// },
|
|
186
|
-
// receiver: 'null',
|
|
187
|
-
// },
|
|
188
|
-
// {
|
|
189
|
-
// match: {
|
|
190
|
-
// alertname: 'KubeMemoryOvercommit',
|
|
191
|
-
// },
|
|
192
|
-
// receiver: 'null',
|
|
193
|
-
// },
|
|
194
|
-
// {
|
|
195
|
-
// match: {
|
|
196
|
-
// alertname: 'KubeCPUOvercommit',
|
|
197
|
-
// },
|
|
198
|
-
// receiver: 'null',
|
|
199
|
-
// },
|
|
200
|
-
// {
|
|
201
|
-
// match: {
|
|
202
|
-
// alertname: 'KubeletTooManyPods',
|
|
203
|
-
// },
|
|
204
|
-
// receiver: 'null',
|
|
205
|
-
// },
|
|
206
|
-
// ],
|
|
207
|
-
// },
|
|
208
|
-
// receivers: [
|
|
209
|
-
// {
|
|
210
|
-
// name: 'null',
|
|
211
|
-
// },
|
|
212
|
-
// {
|
|
213
|
-
// name: 'email',
|
|
214
|
-
// email_configs: [
|
|
215
|
-
// {
|
|
216
|
-
// send_resolved: true,
|
|
217
|
-
// to: 'youremail@gmail.com',
|
|
218
|
-
// },
|
|
219
|
-
// ],
|
|
220
|
-
// },
|
|
221
|
-
// ],
|
|
222
|
-
// //Inhibition rules allow to mute a set of alerts given that another alert is firing.
|
|
223
|
-
// //We use this to mute any warning-level notifications if the same alert is already critical.
|
|
224
|
-
// inhibit_rules: [
|
|
225
|
-
// {
|
|
226
|
-
// source_match: {
|
|
227
|
-
// severity: 'critical',
|
|
228
|
-
// },
|
|
229
|
-
// target_match: {
|
|
230
|
-
// severity: 'warning',
|
|
231
|
-
// },
|
|
232
|
-
// equal: ['alertname', 'namespace'],
|
|
233
|
-
// },
|
|
234
|
-
// ],
|
|
235
|
-
// },
|
|
236
|
-
// alertmanagerSpec: {
|
|
237
|
-
// storage: {
|
|
238
|
-
// volumeClaimTemplate: {
|
|
239
|
-
// spec: {
|
|
240
|
-
// accessModes: ['ReadWriteOnce'],
|
|
241
|
-
// resources: {
|
|
242
|
-
// requests: {
|
|
243
|
-
// storage: '1Gi',
|
|
244
|
-
// },
|
|
245
|
-
// },
|
|
246
|
-
// },
|
|
247
|
-
// },
|
|
248
|
-
// },
|
|
249
|
-
// },
|
|
250
|
-
},
|
|
251
|
-
ingress: { enabled: false },
|
|
252
|
-
ingressPerReplica: { enabled: false },
|
|
253
|
-
},
|
|
254
|
-
transformations: [
|
|
255
|
-
(obj) => {
|
|
256
|
-
(0, SecurityRules_1.applyDeploymentRules)(obj, { ignoredKinds: ['Job'] });
|
|
257
|
-
//Enable OpenID auth for grafana
|
|
258
|
-
if (enableGrafana?.auth &&
|
|
259
|
-
obj.kind === 'ConfigMap' &&
|
|
260
|
-
obj.metadata.name === 'prometheus-grafana') {
|
|
261
|
-
//Azure AD
|
|
262
|
-
if (enableGrafana.auth.azureAD) {
|
|
263
|
-
let current = obj.data['grafana.ini'];
|
|
264
|
-
obj.data['grafana.ini'] = pulumi.interpolate `
|
|
265
|
-
${current}
|
|
266
|
-
|
|
267
|
-
[auth]
|
|
268
|
-
azure_auth_enabled = true
|
|
269
|
-
disable_login_form = true
|
|
270
|
-
|
|
271
|
-
[auth.anonymous]
|
|
272
|
-
enabled = false
|
|
273
|
-
|
|
274
|
-
[auth.basic]
|
|
275
|
-
enabled = false
|
|
276
|
-
|
|
277
|
-
[auth.azuread]
|
|
278
|
-
name = Azure AD
|
|
279
|
-
enabled = true
|
|
280
|
-
allow_sign_up = true
|
|
281
|
-
auto_login = true
|
|
282
|
-
client_id = ${adIdentity?.clientId}
|
|
283
|
-
client_secret = ${adIdentity?.clientSecret ?? ''}
|
|
284
|
-
scopes = openid email profile
|
|
285
|
-
auth_url = https://login.microsoftonline.com/${AzureEnv_1.tenantId}/oauth2/v2.0/authorize
|
|
286
|
-
token_url = https://login.microsoftonline.com/${AzureEnv_1.tenantId}/oauth2/v2.0/token
|
|
287
|
-
allowed_domains =
|
|
288
|
-
allowed_groups =
|
|
289
|
-
allowed_organizations = ${AzureEnv_1.tenantId}
|
|
290
|
-
role_attribute_strict = true
|
|
291
|
-
allow_assign_grafana_admin = false
|
|
292
|
-
skip_org_role_sync = false
|
|
293
|
-
use_pkce = false
|
|
294
|
-
force_use_graph_api = false
|
|
295
|
-
|
|
296
|
-
`;
|
|
297
|
-
}
|
|
298
|
-
}
|
|
299
|
-
},
|
|
300
|
-
],
|
|
301
|
-
}, { provider, dependsOn: ns });
|
|
302
|
-
if (enableGrafana) {
|
|
303
|
-
(0, NginxIngress_1.default)({
|
|
304
|
-
name: 'prometheus-grafana',
|
|
305
|
-
hostNames: [enableGrafana.hostName],
|
|
306
|
-
certManagerIssuer: true,
|
|
307
|
-
className: 'nginx',
|
|
308
|
-
tlsSecretName: (0, CertHelper_1.getTlsName)((0, Helpers_1.getRootDomainFromUrl)(enableGrafana.hostName), true),
|
|
309
|
-
service: {
|
|
310
|
-
metadata: {
|
|
311
|
-
name: pulumi.interpolate `prometheus-grafana`,
|
|
312
|
-
namespace,
|
|
313
|
-
},
|
|
314
|
-
spec: { ports: [{ port: 80 }] },
|
|
315
|
-
},
|
|
316
|
-
dependsOn: prometheus,
|
|
317
|
-
provider,
|
|
318
|
-
});
|
|
319
|
-
}
|
|
320
|
-
return prometheus;
|
|
321
|
-
};
|
|
322
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
import * as pulumi from '@pulumi/pulumi';
|
|
2
|
-
import { K8sArgs } from '../types';
|
|
3
|
-
import { ResourceQuotaSpec } from './ResourceQuota';
|
|
4
|
-
interface Props extends K8sArgs {
|
|
5
|
-
name: string;
|
|
6
|
-
labels?: pulumi.Input<{
|
|
7
|
-
[key: string]: pulumi.Input<string>;
|
|
8
|
-
}>;
|
|
9
|
-
quota?: ResourceQuotaSpec;
|
|
10
|
-
}
|
|
11
|
-
declare const _default: ({ name, labels, quota, provider, dependsOn, }: Props) => import("@pulumi/kubernetes/core/v1/namespace").Namespace;
|
|
12
|
-
export default _default;
|