@drunk-pulumi/azure 0.0.19
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/Aks/Helper.d.ts +43 -0
- package/Aks/Helper.js +72 -0
- package/Aks/Identity.d.ts +14 -0
- package/Aks/Identity.js +32 -0
- package/Aks/VmSetAutoScale/index.d.ts +16 -0
- package/Aks/VmSetAutoScale/index.js +132 -0
- package/Aks/VmSetMonitor/index.d.ts +12 -0
- package/Aks/VmSetMonitor/index.js +67 -0
- package/Aks/index.d.ts +100 -0
- package/Aks/index.js +558 -0
- package/Apim/ApiProduct/Api.d.ts +35 -0
- package/Apim/ApiProduct/Api.js +131 -0
- package/Apim/ApiProduct/OpenApi.d.ts +85 -0
- package/Apim/ApiProduct/OpenApi.js +3 -0
- package/Apim/ApiProduct/PolicyBuilder.d.ts +79 -0
- package/Apim/ApiProduct/PolicyBuilder.js +361 -0
- package/Apim/ApiProduct/Product.d.ts +8 -0
- package/Apim/ApiProduct/Product.js +63 -0
- package/Apim/ApiProduct/SwaggerHelper.d.ts +6 -0
- package/Apim/ApiProduct/SwaggerHelper.js +44 -0
- package/Apim/ApiProduct/index.d.ts +9 -0
- package/Apim/ApiProduct/index.js +22 -0
- package/Apim/Helpers.d.ts +0 -0
- package/Apim/Helpers.js +2 -0
- package/Apim/HookProxy/index.d.ts +20 -0
- package/Apim/HookProxy/index.js +27 -0
- package/Apim/index.d.ts +22 -0
- package/Apim/index.js +118 -0
- package/Apps/LogicApp.d.ts +12 -0
- package/Apps/LogicApp.js +19 -0
- package/Automation/AutoAccount.d.ts +5 -0
- package/Automation/AutoAccount.js +20 -0
- package/AzAd/B2C.d.ts +9 -0
- package/AzAd/B2C.js +38 -0
- package/AzAd/ConditionalPolicies/index.d.ts +0 -0
- package/AzAd/ConditionalPolicies/index.js +2 -0
- package/AzAd/EnvRoles.d.ts +12 -0
- package/AzAd/EnvRoles.js +62 -0
- package/AzAd/GraphDefinition.d.ts +14 -0
- package/AzAd/GraphDefinition.js +5136 -0
- package/AzAd/Group.d.ts +29 -0
- package/AzAd/Group.js +70 -0
- package/AzAd/Helper.d.ts +18 -0
- package/AzAd/Helper.js +37 -0
- package/AzAd/Identities/AzDevOps.d.ts +23 -0
- package/AzAd/Identities/AzDevOps.js +61 -0
- package/AzAd/Identities/AzUserAdRevertSync.d.ts +14 -0
- package/AzAd/Identities/AzUserAdRevertSync.js +18 -0
- package/AzAd/Identity.d.ts +51 -0
- package/AzAd/Identity.js +133 -0
- package/AzAd/ManagedIdentity.d.ts +6 -0
- package/AzAd/ManagedIdentity.js +23 -0
- package/AzAd/Role.d.ts +19 -0
- package/AzAd/Role.js +25 -0
- package/AzAd/RoleAssignment.d.ts +79 -0
- package/AzAd/RoleAssignment.js +48 -0
- package/AzAd/RolesBuiltIn.d.ts +62 -0
- package/AzAd/RolesBuiltIn.js +13841 -0
- package/Cdn/index.d.ts +11 -0
- package/Cdn/index.js +47 -0
- package/Certificate/index.d.ts +41 -0
- package/Certificate/index.js +156 -0
- package/Certificate/p12.d.ts +5 -0
- package/Certificate/p12.js +37 -0
- package/Common/AppConfigs/dotnetConfig.d.ts +15 -0
- package/Common/AppConfigs/dotnetConfig.js +20 -0
- package/Common/AutoTags.d.ts +1 -0
- package/Common/AutoTags.js +24 -0
- package/Common/AzureEnv.d.ts +37 -0
- package/Common/AzureEnv.js +94 -0
- package/Common/ConfigHelper.d.ts +5 -0
- package/Common/ConfigHelper.js +14 -0
- package/Common/GlobalEnv.d.ts +14 -0
- package/Common/GlobalEnv.js +38 -0
- package/Common/Helpers.d.ts +10 -0
- package/Common/Helpers.js +30 -0
- package/Common/Location.d.ts +4 -0
- package/Common/Location.js +23 -0
- package/Common/LocationBuiltIn.d.ts +81 -0
- package/Common/LocationBuiltIn.js +1925 -0
- package/Common/Naming/index.d.ts +62 -0
- package/Common/Naming/index.js +146 -0
- package/Common/ResourceEnv.d.ts +16 -0
- package/Common/ResourceEnv.js +29 -0
- package/Common/StackEnv.d.ts +4 -0
- package/Common/StackEnv.js +22 -0
- package/Common/index.d.ts +5 -0
- package/Common/index.js +9 -0
- package/ContainerRegistry/Helper.d.ts +23 -0
- package/ContainerRegistry/Helper.js +47 -0
- package/ContainerRegistry/index.d.ts +28 -0
- package/ContainerRegistry/index.js +103 -0
- package/Core/Helper.d.ts +16 -0
- package/Core/Helper.js +37 -0
- package/Core/KeyGenetators.d.ts +33 -0
- package/Core/KeyGenetators.js +66 -0
- package/Core/Locker.d.ts +13 -0
- package/Core/Locker.js +14 -0
- package/Core/Random.d.ts +40 -0
- package/Core/Random.js +83 -0
- package/Core/ResourceCreator.d.ts +17 -0
- package/Core/ResourceCreator.js +48 -0
- package/Core/ResourceGroup.d.ts +13 -0
- package/Core/ResourceGroup.js +45 -0
- package/CosmosDb/index.d.ts +33 -0
- package/CosmosDb/index.js +129 -0
- package/CustomRoles/index.d.ts +5 -0
- package/CustomRoles/index.js +27 -0
- package/IOT/Hub/index.d.ts +32 -0
- package/IOT/Hub/index.js +208 -0
- package/KeyVault/CustomHelper.d.ts +35 -0
- package/KeyVault/CustomHelper.js +40 -0
- package/KeyVault/Helper.d.ts +33 -0
- package/KeyVault/Helper.js +58 -0
- package/KeyVault/VaultAccess.d.ts +15 -0
- package/KeyVault/VaultAccess.js +47 -0
- package/KeyVault/VaultPermissions.d.ts +26 -0
- package/KeyVault/VaultPermissions.js +169 -0
- package/KeyVault/index.d.ts +28 -0
- package/KeyVault/index.js +136 -0
- package/KubeX/AcrSecret.d.ts +15 -0
- package/KubeX/AcrSecret.js +31 -0
- package/KubeX/Apps/AstroPage.d.ts +12 -0
- package/KubeX/Apps/AstroPage.js +33 -0
- package/KubeX/Apps/KafKa.d.ts +6 -0
- package/KubeX/Apps/KafKa.js +13 -0
- package/KubeX/Apps/Nobelium.d.ts +13 -0
- package/KubeX/Apps/Nobelium.js +37 -0
- package/KubeX/Apps/Wikijs.d.ts +30 -0
- package/KubeX/Apps/Wikijs.js +54 -0
- package/KubeX/Apps/WordPress.d.ts +24 -0
- package/KubeX/Apps/WordPress.js +55 -0
- package/KubeX/Apps/YarpProxy/index.d.ts +17 -0
- package/KubeX/Apps/YarpProxy/index.js +107 -0
- package/KubeX/Apps/YarpProxy/type.d.ts +55 -0
- package/KubeX/Apps/YarpProxy/type.js +3 -0
- package/KubeX/CertHelper.d.ts +1 -0
- package/KubeX/CertHelper.js +9 -0
- package/KubeX/CertImports.d.ts +19 -0
- package/KubeX/CertImports.js +70 -0
- package/KubeX/CloudFlare/CertCreator.d.ts +19 -0
- package/KubeX/CloudFlare/CertCreator.js +90 -0
- package/KubeX/CloudFlare/CertImports.d.ts +17 -0
- package/KubeX/CloudFlare/CertImports.js +34 -0
- package/KubeX/CloudFlare/DynamicDns.d.ts +21 -0
- package/KubeX/CloudFlare/DynamicDns.js +39 -0
- package/KubeX/CloudFlare/Tunnel-Helm.d.ts +17 -0
- package/KubeX/CloudFlare/Tunnel-Helm.js +12 -0
- package/KubeX/CloudFlare/Tunnel.d.ts +23 -0
- package/KubeX/CloudFlare/Tunnel.js +54 -0
- package/KubeX/CloudFlare/index.d.ts +13 -0
- package/KubeX/CloudFlare/index.js +36 -0
- package/KubeX/Clusters/K3s/AutoUpgradeController/index.d.ts +6 -0
- package/KubeX/Clusters/K3s/AutoUpgradeController/index.js +60 -0
- package/KubeX/ConfigSecret.d.ts +24 -0
- package/KubeX/ConfigSecret.js +38 -0
- package/KubeX/Core/CertManager/index.d.ts +24 -0
- package/KubeX/Core/CertManager/index.js +96 -0
- package/KubeX/Core/KsCertSecret.d.ts +12 -0
- package/KubeX/Core/KsCertSecret.js +22 -0
- package/KubeX/Core/KsSecret.d.ts +9 -0
- package/KubeX/Core/KsSecret.js +12 -0
- package/KubeX/Core/LoadBalancer/MetalLB.d.ts +7 -0
- package/KubeX/Core/LoadBalancer/MetalLB.js +21 -0
- package/KubeX/Core/Monitoring/index.d.ts +22 -0
- package/KubeX/Core/Monitoring/index.js +322 -0
- package/KubeX/Core/Namespace.d.ts +12 -0
- package/KubeX/Core/Namespace.js +41 -0
- package/KubeX/Core/Nginx/index.d.ts +60 -0
- package/KubeX/Core/Nginx/index.js +109 -0
- package/KubeX/Core/OAuthProxy/index.d.ts +0 -0
- package/KubeX/Core/OAuthProxy/index.js +3 -0
- package/KubeX/Core/ResourceQuota.d.ts +12 -0
- package/KubeX/Core/ResourceQuota.js +13 -0
- package/KubeX/Core/SecurityRules.d.ts +34 -0
- package/KubeX/Core/SecurityRules.js +93 -0
- package/KubeX/Core/StorageClass/azureBlob.d.ts +20 -0
- package/KubeX/Core/StorageClass/azureBlob.js +77 -0
- package/KubeX/Core/StorageClass/azureFile.d.ts +17 -0
- package/KubeX/Core/StorageClass/azureFile.js +45 -0
- package/KubeX/Core/StorageClass/index.d.ts +13 -0
- package/KubeX/Core/StorageClass/index.js +25 -0
- package/KubeX/Core/index.d.ts +57 -0
- package/KubeX/Core/index.js +94 -0
- package/KubeX/Databases/MariaDb.d.ts +11 -0
- package/KubeX/Databases/MariaDb.js +39 -0
- package/KubeX/Databases/MySql.V2.d.ts +11 -0
- package/KubeX/Databases/MySql.V2.js +40 -0
- package/KubeX/Databases/MySql.d.ts +13 -0
- package/KubeX/Databases/MySql.js +55 -0
- package/KubeX/Databases/PostgreSql/PostgreSQL-HA.d.ts +10 -0
- package/KubeX/Databases/PostgreSql/PostgreSQL-HA.js +47 -0
- package/KubeX/Databases/PostgreSql/PostgreSQL.d.ts +10 -0
- package/KubeX/Databases/PostgreSql/PostgreSQL.js +51 -0
- package/KubeX/Databases/PostgreSql/PostgreSql.v1.d.ts +13 -0
- package/KubeX/Databases/PostgreSql/PostgreSql.v1.js +56 -0
- package/KubeX/Databases/PostgreSql/index.d.ts +17 -0
- package/KubeX/Databases/PostgreSql/index.js +6 -0
- package/KubeX/Databases/RedisCache.d.ts +14 -0
- package/KubeX/Databases/RedisCache.js +65 -0
- package/KubeX/Databases/SqlServer.d.ts +15 -0
- package/KubeX/Databases/SqlServer.js +77 -0
- package/KubeX/Deployment/PodAutoscaler.d.ts +14 -0
- package/KubeX/Deployment/PodAutoscaler.js +51 -0
- package/KubeX/Deployment/index.d.ts +136 -0
- package/KubeX/Deployment/index.js +306 -0
- package/KubeX/Helpers.d.ts +4 -0
- package/KubeX/Helpers.js +17 -0
- package/KubeX/Ingress/AppGatewayIngress.d.ts +2 -0
- package/KubeX/Ingress/AppGatewayIngress.js +4 -0
- package/KubeX/Ingress/Conts.d.ts +13 -0
- package/KubeX/Ingress/Conts.js +18 -0
- package/KubeX/Ingress/NginxIngress.d.ts +3 -0
- package/KubeX/Ingress/NginxIngress.js +186 -0
- package/KubeX/Ingress/NginxProxy.d.ts +21 -0
- package/KubeX/Ingress/NginxProxy.js +43 -0
- package/KubeX/Ingress/TraefikIngress/CustomHeader.d.ts +15 -0
- package/KubeX/Ingress/TraefikIngress/CustomHeader.js +15 -0
- package/KubeX/Ingress/TraefikIngress/index.d.ts +11 -0
- package/KubeX/Ingress/TraefikIngress/index.js +95 -0
- package/KubeX/Ingress/index.d.ts +5 -0
- package/KubeX/Ingress/index.js +12 -0
- package/KubeX/Ingress/type.d.ts +82 -0
- package/KubeX/Ingress/type.js +3 -0
- package/KubeX/Providers/index.d.ts +8 -0
- package/KubeX/Providers/index.js +15 -0
- package/KubeX/Storage/Longhorn/index.d.ts +15 -0
- package/KubeX/Storage/Longhorn/index.js +54 -0
- package/KubeX/Storage/index.d.ts +25 -0
- package/KubeX/Storage/index.js +79 -0
- package/KubeX/Tools/AWS/LocalStack.d.ts +7 -0
- package/KubeX/Tools/AWS/LocalStack.js +29 -0
- package/KubeX/Tools/AWS/S3.d.ts +6 -0
- package/KubeX/Tools/AWS/S3.js +44 -0
- package/KubeX/Tools/AWS/index.d.ts +7 -0
- package/KubeX/Tools/AWS/index.js +14 -0
- package/KubeX/Tools/AppHealthzMonitor.d.ts +18 -0
- package/KubeX/Tools/AppHealthzMonitor.js +52 -0
- package/KubeX/Tools/ArgoCD/index.d.ts +17 -0
- package/KubeX/Tools/ArgoCD/index.js +131 -0
- package/KubeX/Tools/Dapr/Storage.d.ts +66 -0
- package/KubeX/Tools/Dapr/Storage.js +70 -0
- package/KubeX/Tools/Dapr/index.d.ts +10 -0
- package/KubeX/Tools/Dapr/index.js +31 -0
- package/KubeX/Tools/Echo-App.d.ts +3 -0
- package/KubeX/Tools/Echo-App.js +21 -0
- package/KubeX/Tools/Gitea/GiteaRepo.d.ts +72 -0
- package/KubeX/Tools/Gitea/GiteaRepo.js +184 -0
- package/KubeX/Tools/Gitea/GiteaRunner.d.ts +11 -0
- package/KubeX/Tools/Gitea/GiteaRunner.js +37 -0
- package/KubeX/Tools/Gitea/GiteaRunner.v1.d.ts +11 -0
- package/KubeX/Tools/Gitea/GiteaRunner.v1.js +123 -0
- package/KubeX/Tools/HarborRepo.d.ts +29 -0
- package/KubeX/Tools/HarborRepo.js +78 -0
- package/KubeX/Tools/HelloWorld.d.ts +3 -0
- package/KubeX/Tools/HelloWorld.js +21 -0
- package/KubeX/Tools/KubeCleanup.d.ts +9 -0
- package/KubeX/Tools/KubeCleanup.js +34 -0
- package/KubeX/Tools/NoIp.d.ts +13 -0
- package/KubeX/Tools/NoIp.js +24 -0
- package/KubeX/Tools/OpenLDAP/index.d.ts +12 -0
- package/KubeX/Tools/OpenLDAP/index.js +56 -0
- package/KubeX/Tools/OutlineVpn/index.d.ts +25 -0
- package/KubeX/Tools/OutlineVpn/index.js +256 -0
- package/KubeX/Tools/SqlPad.d.ts +29 -0
- package/KubeX/Tools/SqlPad.js +133 -0
- package/KubeX/Tools/ToolPod.d.ts +10 -0
- package/KubeX/Tools/ToolPod.js +40 -0
- package/KubeX/Tools/UptimeKuma.d.ts +6 -0
- package/KubeX/Tools/UptimeKuma.js +38 -0
- package/KubeX/Tools/index.d.ts +27 -0
- package/KubeX/Tools/index.js +35 -0
- package/KubeX/VairableResolvers/index.d.ts +15 -0
- package/KubeX/VairableResolvers/index.js +49 -0
- package/KubeX/kx/index.d.ts +114 -0
- package/KubeX/kx/index.js +423 -0
- package/KubeX/types.d.ts +49 -0
- package/KubeX/types.js +3 -0
- package/Logs/AppInsight.d.ts +16 -0
- package/Logs/AppInsight.js +48 -0
- package/Logs/Helpers.d.ts +50 -0
- package/Logs/Helpers.js +95 -0
- package/Logs/LogAnalytics.d.ts +17 -0
- package/Logs/LogAnalytics.js +54 -0
- package/Logs/WebTest.d.ts +13 -0
- package/Logs/WebTest.js +68 -0
- package/Logs/index.d.ts +42 -0
- package/Logs/index.js +69 -0
- package/MySql/index.d.ts +20 -0
- package/MySql/index.js +93 -0
- package/Postgresql/index.d.ts +20 -0
- package/Postgresql/index.js +93 -0
- package/ReadMe.md +36 -0
- package/RedisCache/index.d.ts +9 -0
- package/RedisCache/index.js +79 -0
- package/ServiceBus/ServiceBusHelper.d.ts +21 -0
- package/ServiceBus/ServiceBusHelper.js +35 -0
- package/ServiceBus/index.d.ts +98 -0
- package/ServiceBus/index.js +396 -0
- package/SignalR/index.d.ts +20 -0
- package/SignalR/index.js +114 -0
- package/Sql/Auditing.d.ts +0 -0
- package/Sql/Auditing.js +2 -0
- package/Sql/Helper.d.ts +9 -0
- package/Sql/Helper.js +11 -0
- package/Sql/SqlDb.d.ts +14 -0
- package/Sql/SqlDb.js +42 -0
- package/Sql/index.d.ts +44 -0
- package/Sql/index.js +236 -0
- package/Storage/CdnEndpoint.d.ts +12 -0
- package/Storage/CdnEndpoint.js +62 -0
- package/Storage/CdnRules.d.ts +6 -0
- package/Storage/CdnRules.js +134 -0
- package/Storage/Helper.d.ts +28 -0
- package/Storage/Helper.js +66 -0
- package/Storage/ManagementRules.d.ts +70 -0
- package/Storage/ManagementRules.js +32 -0
- package/Storage/index.d.ts +55 -0
- package/Storage/index.js +264 -0
- package/VM/index.d.ts +37 -0
- package/VM/index.js +138 -0
- package/VNet/Bastion.d.ts +8 -0
- package/VNet/Bastion.js +30 -0
- package/VNet/Firewall.d.ts +27 -0
- package/VNet/Firewall.js +87 -0
- package/VNet/FirewallPolicies/AksFirewallPolicy.d.ts +20 -0
- package/VNet/FirewallPolicies/AksFirewallPolicy.js +241 -0
- package/VNet/FirewallPolicies/CloudPCFirewallPolicy.d.ts +14 -0
- package/VNet/FirewallPolicies/CloudPCFirewallPolicy.js +303 -0
- package/VNet/FirewallPolicy.d.ts +28 -0
- package/VNet/FirewallPolicy.js +110 -0
- package/VNet/FirewallRules/AksFirewallRules.d.ts +24 -0
- package/VNet/FirewallRules/AksFirewallRules.js +250 -0
- package/VNet/FirewallRules/DefaultRules.d.ts +2 -0
- package/VNet/FirewallRules/DefaultRules.js +23 -0
- package/VNet/FirewallRules/types.d.ts +20 -0
- package/VNet/FirewallRules/types.js +5 -0
- package/VNet/GlobalNetworkPeering.d.ts +9 -0
- package/VNet/GlobalNetworkPeering.js +17 -0
- package/VNet/Helper.d.ts +33 -0
- package/VNet/Helper.js +86 -0
- package/VNet/IpAddress.d.ts +17 -0
- package/VNet/IpAddress.js +38 -0
- package/VNet/IpAddressPrefix.d.ts +22 -0
- package/VNet/IpAddressPrefix.js +42 -0
- package/VNet/NSGRules/AzADService.d.ts +10 -0
- package/VNet/NSGRules/AzADService.js +45 -0
- package/VNet/NetworkPeering.d.ts +10 -0
- package/VNet/NetworkPeering.js +29 -0
- package/VNet/PrivateDns.d.ts +33 -0
- package/VNet/PrivateDns.js +64 -0
- package/VNet/PrivateEndpoint.d.ts +9 -0
- package/VNet/PrivateEndpoint.js +71 -0
- package/VNet/PublicDns.d.ts +21 -0
- package/VNet/PublicDns.js +59 -0
- package/VNet/RouteTable.d.ts +13 -0
- package/VNet/RouteTable.js +23 -0
- package/VNet/SecurityGroup.d.ts +8 -0
- package/VNet/SecurityGroup.js +13 -0
- package/VNet/Subnet.d.ts +26 -0
- package/VNet/Subnet.js +48 -0
- package/VNet/VirtualWAN.d.ts +25 -0
- package/VNet/VirtualWAN.js +40 -0
- package/VNet/Vnet.d.ts +51 -0
- package/VNet/Vnet.js +196 -0
- package/VNet/index.d.ts +65 -0
- package/VNet/index.js +198 -0
- package/Web/AppCertOrder.d.ts +16 -0
- package/Web/AppCertOrder.js +34 -0
- package/Web/AppConfig.d.ts +16 -0
- package/Web/AppConfig.js +79 -0
- package/Web/AppGateway.d.ts +15 -0
- package/Web/AppGateway.js +32 -0
- package/Web/FuncApp.d.ts +12 -0
- package/Web/FuncApp.js +24 -0
- package/Web/Helpers.d.ts +6 -0
- package/Web/Helpers.js +36 -0
- package/Web/WebAppPlan.d.ts +7 -0
- package/Web/WebAppPlan.js +26 -0
- package/Web/types.d.ts +169 -0
- package/Web/types.js +3 -0
- package/package.json +34 -0
- package/types.d.ts +69 -0
- package/types.js +3 -0
- package/z_tests/_tools/Mocks.d.ts +2 -0
- package/z_tests/_tools/Mocks.js +47 -0
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import { Input } from '@pulumi/pulumi';
|
|
2
|
+
import { BasicMonitorArgs, PrivateLinkProps } from '../types';
|
|
3
|
+
import { BasicResourceArgs } from '../types';
|
|
4
|
+
import { VaultAccessType } from './VaultAccess';
|
|
5
|
+
interface Props extends BasicResourceArgs {
|
|
6
|
+
/**The default-encryption-key, tenant-id va subscription-id will be added to the secrets and keys*/
|
|
7
|
+
createDefaultValues?: boolean;
|
|
8
|
+
network?: {
|
|
9
|
+
ipAddresses?: Array<Input<string>>;
|
|
10
|
+
subnetIds?: Array<Input<string>>;
|
|
11
|
+
};
|
|
12
|
+
/** The permission and principals that allows to be access to this Key Vault */
|
|
13
|
+
auth?: VaultAccessType;
|
|
14
|
+
}
|
|
15
|
+
declare const _default: ({ name, group, auth, createDefaultValues, network, ...others }: Props) => {
|
|
16
|
+
name: string;
|
|
17
|
+
vault: import("@pulumi/azure-native/keyvault/vault").Vault;
|
|
18
|
+
readOnlyGroup: import("@pulumi/pulumi").Output<import("@pulumi/pulumi").UnwrappedObject<import("@pulumi/azuread").GetGroupResult>> | import("@pulumi/pulumi").Output<import("@pulumi/azuread/group").Group>;
|
|
19
|
+
adminGroup: import("@pulumi/pulumi").Output<import("@pulumi/pulumi").UnwrappedObject<import("@pulumi/azuread").GetGroupResult>> | import("@pulumi/pulumi").Output<import("@pulumi/azuread/group").Group>;
|
|
20
|
+
toVaultInfo: () => {
|
|
21
|
+
name: string;
|
|
22
|
+
group: import("../types").ResourceGroupInfo;
|
|
23
|
+
id: import("@pulumi/pulumi").Output<string>;
|
|
24
|
+
};
|
|
25
|
+
addDiagnostic: (logInfo: BasicMonitorArgs) => import("@pulumi/azure-native/insights/diagnosticSetting").DiagnosticSetting | undefined;
|
|
26
|
+
createPrivateLink: (props: PrivateLinkProps) => import("@pulumi/azure-native/network/privateEndpoint").PrivateEndpoint;
|
|
27
|
+
};
|
|
28
|
+
export default _default;
|
|
@@ -0,0 +1,136 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
const native = require("@pulumi/azure-native");
|
|
4
|
+
const types_1 = require("@pulumi/azure-native/types");
|
|
5
|
+
const AzureEnv_1 = require("../Common/AzureEnv");
|
|
6
|
+
const Naming_1 = require("../Common/Naming");
|
|
7
|
+
const Helpers_1 = require("../Logs/Helpers");
|
|
8
|
+
const PrivateEndpoint_1 = require("../VNet/PrivateEndpoint");
|
|
9
|
+
const CustomHelper_1 = require("./CustomHelper");
|
|
10
|
+
const VaultPermissions_1 = require("./VaultPermissions");
|
|
11
|
+
const VaultAccess_1 = require("./VaultAccess");
|
|
12
|
+
const Helper_1 = require("./Helper");
|
|
13
|
+
exports.default = ({ name,
|
|
14
|
+
//nameConvention,
|
|
15
|
+
group, auth = {
|
|
16
|
+
includeOrganization: true,
|
|
17
|
+
//permissions: new Array<PermissionProps>(),
|
|
18
|
+
}, createDefaultValues, network, ...others }) => {
|
|
19
|
+
const vaultName = (0, Naming_1.getKeyVaultName)(name);
|
|
20
|
+
const { readOnlyGroup, adminGroup } = (0, VaultAccess_1.default)({ name, auth });
|
|
21
|
+
// const accessPolicies =
|
|
22
|
+
// new Array<native.types.input.keyvault.AccessPolicyEntryArgs>();
|
|
23
|
+
//Grant Access permission
|
|
24
|
+
// if (!auth?.enableRbac) {
|
|
25
|
+
// accessPolicies.push({
|
|
26
|
+
// objectId: readOnlyGroup.objectId,
|
|
27
|
+
// tenantId,
|
|
28
|
+
// permissions: KeyVaultReadOnlyPolicy,
|
|
29
|
+
// });
|
|
30
|
+
// accessPolicies.push({
|
|
31
|
+
// objectId: adminGroup.objectId,
|
|
32
|
+
// tenantId,
|
|
33
|
+
// permissions: KeyVaultAdminPolicy,
|
|
34
|
+
// });
|
|
35
|
+
// }
|
|
36
|
+
const resource = new native.keyvault.Vault(vaultName, {
|
|
37
|
+
vaultName,
|
|
38
|
+
...group,
|
|
39
|
+
...others,
|
|
40
|
+
properties: {
|
|
41
|
+
tenantId: AzureEnv_1.tenantId,
|
|
42
|
+
sku: { name: 'standard', family: 'A' },
|
|
43
|
+
createMode: 'default',
|
|
44
|
+
enableRbacAuthorization: true,
|
|
45
|
+
accessPolicies: undefined,
|
|
46
|
+
enablePurgeProtection: true,
|
|
47
|
+
enableSoftDelete: true,
|
|
48
|
+
softDeleteRetentionInDays: 7, //This is not important as pulumi auto restore and update the sift deleted.
|
|
49
|
+
enabledForDeployment: true,
|
|
50
|
+
enabledForDiskEncryption: true,
|
|
51
|
+
networkAcls: network
|
|
52
|
+
? {
|
|
53
|
+
bypass: 'AzureServices',
|
|
54
|
+
defaultAction: types_1.enums.keyvault.NetworkRuleAction.Deny,
|
|
55
|
+
ipRules: network.ipAddresses
|
|
56
|
+
? network.ipAddresses.map((i) => ({ value: i }))
|
|
57
|
+
: [],
|
|
58
|
+
virtualNetworkRules: network.subnetIds
|
|
59
|
+
? network.subnetIds.map((s) => ({ id: s }))
|
|
60
|
+
: undefined,
|
|
61
|
+
}
|
|
62
|
+
: {
|
|
63
|
+
bypass: 'AzureServices',
|
|
64
|
+
defaultAction: types_1.enums.keyvault.NetworkRuleAction.Allow,
|
|
65
|
+
},
|
|
66
|
+
},
|
|
67
|
+
tags: AzureEnv_1.defaultTags,
|
|
68
|
+
});
|
|
69
|
+
//Grant RBAC permission
|
|
70
|
+
//if (auth?.enableRbac) {
|
|
71
|
+
(0, VaultPermissions_1.grantVaultRbacPermission)({
|
|
72
|
+
name: `${name}-ReadOnlyGroup`,
|
|
73
|
+
scope: resource.id,
|
|
74
|
+
objectId: readOnlyGroup.objectId,
|
|
75
|
+
permission: 'ReadOnly',
|
|
76
|
+
principalType: 'Group',
|
|
77
|
+
});
|
|
78
|
+
(0, VaultPermissions_1.grantVaultRbacPermission)({
|
|
79
|
+
name: `${name}-AdminGroup`,
|
|
80
|
+
scope: resource.id,
|
|
81
|
+
objectId: adminGroup.objectId,
|
|
82
|
+
permission: 'ReadWrite',
|
|
83
|
+
principalType: 'Group',
|
|
84
|
+
});
|
|
85
|
+
//}
|
|
86
|
+
//To Vault Info
|
|
87
|
+
const toVaultInfo = () => ({ name: vaultName, group, id: resource.id });
|
|
88
|
+
//Add Diagnostic
|
|
89
|
+
const addDiagnostic = (logInfo) => (0, Helpers_1.createDiagnostic)({
|
|
90
|
+
name,
|
|
91
|
+
targetResourceId: resource.id,
|
|
92
|
+
...logInfo,
|
|
93
|
+
logsCategories: ['AuditEvent'],
|
|
94
|
+
});
|
|
95
|
+
// Create Private Link
|
|
96
|
+
const createPrivateLink = (props) => (0, PrivateEndpoint_1.default)({
|
|
97
|
+
name: (0, Naming_1.getPrivateEndpointName)(name),
|
|
98
|
+
group,
|
|
99
|
+
...props,
|
|
100
|
+
resourceId: resource.id,
|
|
101
|
+
privateDnsZoneName: 'privatelink.vaultcore.azure.net',
|
|
102
|
+
linkServiceGroupIds: ['keyVault'],
|
|
103
|
+
});
|
|
104
|
+
if (createDefaultValues) {
|
|
105
|
+
const vaultInfo = toVaultInfo();
|
|
106
|
+
(0, CustomHelper_1.addCustomSecret)({
|
|
107
|
+
name: 'tenant-id',
|
|
108
|
+
value: AzureEnv_1.tenantId,
|
|
109
|
+
vaultInfo,
|
|
110
|
+
contentType: 'KeyVault Default Values',
|
|
111
|
+
dependsOn: resource,
|
|
112
|
+
});
|
|
113
|
+
(0, CustomHelper_1.addCustomSecret)({
|
|
114
|
+
name: 'subscription-id',
|
|
115
|
+
value: AzureEnv_1.subscriptionId,
|
|
116
|
+
vaultInfo,
|
|
117
|
+
contentType: 'KeyVault Default Values',
|
|
118
|
+
dependsOn: resource,
|
|
119
|
+
});
|
|
120
|
+
(0, Helper_1.addKey)({
|
|
121
|
+
name: 'default-encryption-key',
|
|
122
|
+
vaultInfo,
|
|
123
|
+
dependsOn: resource,
|
|
124
|
+
});
|
|
125
|
+
}
|
|
126
|
+
return {
|
|
127
|
+
name: vaultName,
|
|
128
|
+
vault: resource,
|
|
129
|
+
readOnlyGroup,
|
|
130
|
+
adminGroup,
|
|
131
|
+
toVaultInfo,
|
|
132
|
+
addDiagnostic,
|
|
133
|
+
createPrivateLink,
|
|
134
|
+
};
|
|
135
|
+
};
|
|
136
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
import { K8sArgs } from './types';
|
|
2
|
+
import { Input } from '@pulumi/pulumi';
|
|
3
|
+
interface AcrProps extends K8sArgs {
|
|
4
|
+
name: string;
|
|
5
|
+
acrName?: string;
|
|
6
|
+
namespaces: string[];
|
|
7
|
+
}
|
|
8
|
+
interface DockerConfigProps extends Omit<AcrProps, 'acrName'> {
|
|
9
|
+
url: string;
|
|
10
|
+
username: string;
|
|
11
|
+
password: Input<string>;
|
|
12
|
+
}
|
|
13
|
+
export declare const DockerConfigSecret: ({ namespaces, name, url, username, password, ...others }: DockerConfigProps) => import("@pulumi/kubernetes/core/v1/secret").Secret[];
|
|
14
|
+
export declare const AcrSecret: ({ acrName, ...others }: AcrProps) => Promise<import("@pulumi/kubernetes/core/v1/secret").Secret[]>;
|
|
15
|
+
export {};
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.AcrSecret = exports.DockerConfigSecret = void 0;
|
|
4
|
+
const Helper_1 = require("../ContainerRegistry/Helper");
|
|
5
|
+
const StackEnv_1 = require("../Common/StackEnv");
|
|
6
|
+
const kubernetes_1 = require("@pulumi/kubernetes");
|
|
7
|
+
const pulumi_1 = require("@pulumi/pulumi");
|
|
8
|
+
const DockerConfigSecret = ({ namespaces, name, url, username, password, ...others }) => {
|
|
9
|
+
const base64JsonEncodedCredentials = (0, pulumi_1.output)(password).apply((p) => {
|
|
10
|
+
const base64Credentials = Buffer.from(username + ':' + p).toString('base64');
|
|
11
|
+
const json = `{"auths":{"${url}":{"auth":"${base64Credentials}"}}}`;
|
|
12
|
+
return Buffer.from(json).toString('base64');
|
|
13
|
+
});
|
|
14
|
+
return namespaces.map((n) => new kubernetes_1.core.v1.Secret(`${name}-${n}`, {
|
|
15
|
+
metadata: {
|
|
16
|
+
name,
|
|
17
|
+
namespace: n,
|
|
18
|
+
},
|
|
19
|
+
type: 'kubernetes.io/dockerconfigjson',
|
|
20
|
+
data: {
|
|
21
|
+
'.dockerconfigjson': base64JsonEncodedCredentials,
|
|
22
|
+
},
|
|
23
|
+
}, others));
|
|
24
|
+
};
|
|
25
|
+
exports.DockerConfigSecret = DockerConfigSecret;
|
|
26
|
+
const AcrSecret = async ({ acrName = StackEnv_1.organization, ...others }) => {
|
|
27
|
+
const acrInfo = await (0, Helper_1.getAcrCredentials)(acrName);
|
|
28
|
+
return (0, exports.DockerConfigSecret)({ ...acrInfo, ...others });
|
|
29
|
+
};
|
|
30
|
+
exports.AcrSecret = AcrSecret;
|
|
31
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiQWNyU2VjcmV0LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL0t1YmVYL0FjclNlY3JldC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFDQSx3REFBZ0U7QUFDaEUsaURBQWtEO0FBQ2xELG1EQUEwQztBQUMxQywyQ0FBK0M7QUFjeEMsTUFBTSxrQkFBa0IsR0FBRyxDQUFDLEVBQ2pDLFVBQVUsRUFDVixJQUFJLEVBQ0osR0FBRyxFQUNILFFBQVEsRUFDUixRQUFRLEVBQ1IsR0FBRyxNQUFNLEVBQ1MsRUFBRSxFQUFFO0lBQ3RCLE1BQU0sNEJBQTRCLEdBQUcsSUFBQSxlQUFNLEVBQUMsUUFBUSxDQUFDLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUU7UUFDaEUsTUFBTSxpQkFBaUIsR0FBRyxNQUFNLENBQUMsSUFBSSxDQUFDLFFBQVEsR0FBRyxHQUFHLEdBQUcsQ0FBQyxDQUFDLENBQUMsUUFBUSxDQUNoRSxRQUFRLENBQ1QsQ0FBQztRQUVGLE1BQU0sSUFBSSxHQUFHLGNBQWMsR0FBRyxjQUFjLGlCQUFpQixNQUFNLENBQUM7UUFDcEUsT0FBTyxNQUFNLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsQ0FBQztJQUM5QyxDQUFDLENBQUMsQ0FBQztJQUVILE9BQU8sVUFBVSxDQUFDLEdBQUcsQ0FDbkIsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUNKLElBQUksaUJBQUksQ0FBQyxFQUFFLENBQUMsTUFBTSxDQUNoQixHQUFHLElBQUksSUFBSSxDQUFDLEVBQUUsRUFDZDtRQUNFLFFBQVEsRUFBRTtZQUNSLElBQUk7WUFDSixTQUFTLEVBQUUsQ0FBQztTQUNiO1FBQ0QsSUFBSSxFQUFFLGdDQUFnQztRQUN0QyxJQUFJLEVBQUU7WUFDSixtQkFBbUIsRUFBRSw0QkFBNEI7U0FDbEQ7S0FDRixFQUNELE1BQU0sQ0FDUCxDQUNKLENBQUM7QUFDSixDQUFDLENBQUM7QUFsQ1csUUFBQSxrQkFBa0Isc0JBa0M3QjtBQUVLLE1BQU0sU0FBUyxHQUFHLEtBQUssRUFBRSxFQUM5QixPQUFPLEdBQUcsdUJBQVksRUFDdEIsR0FBRyxNQUFNLEVBQ0EsRUFBRSxFQUFFO0lBQ2IsTUFBTSxPQUFPLEdBQUcsTUFBTSxJQUFBLDBCQUFpQixFQUFDLE9BQU8sQ0FBQyxDQUFDO0lBQ2pELE9BQU8sSUFBQSwwQkFBa0IsRUFBQyxFQUFFLEdBQUcsT0FBTyxFQUFFLEdBQUcsTUFBTSxFQUFFLENBQUMsQ0FBQztBQUN2RCxDQUFDLENBQUM7QUFOVyxRQUFBLFNBQVMsYUFNcEIifQ==
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { DefaultKsAppArgs } from '../types';
|
|
2
|
+
import { Input } from '@pulumi/pulumi';
|
|
3
|
+
export interface AstroPageProps extends DefaultKsAppArgs {
|
|
4
|
+
googleSiteVerification?: Input<string>;
|
|
5
|
+
replicas?: number;
|
|
6
|
+
}
|
|
7
|
+
declare const _default: ({ name, namespace, replicas, ingress, provider, googleSiteVerification, }: AstroPageProps) => {
|
|
8
|
+
deployment: import("../kx").Deployment | undefined;
|
|
9
|
+
service: import("../kx").Service | undefined;
|
|
10
|
+
jobs: (import("@pulumi/kubernetes/batch/v1/cronJob").CronJob | import("../kx").Job)[] | undefined;
|
|
11
|
+
};
|
|
12
|
+
export default _default;
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
const Deployment_1 = require("../Deployment");
|
|
4
|
+
exports.default = ({ name = 'astro-page', namespace, replicas, ingress, provider, googleSiteVerification, }) => {
|
|
5
|
+
const configMap = {};
|
|
6
|
+
if (googleSiteVerification)
|
|
7
|
+
configMap['PUBLIC_GOOGLE_SITE_VERIFICATION'] = googleSiteVerification;
|
|
8
|
+
return (0, Deployment_1.default)({
|
|
9
|
+
name,
|
|
10
|
+
namespace,
|
|
11
|
+
provider,
|
|
12
|
+
configMap,
|
|
13
|
+
podConfig: {
|
|
14
|
+
ports: { http: 80 },
|
|
15
|
+
image: 'baoduy2412/astro-blog:latest',
|
|
16
|
+
imagePullPolicy: 'Always',
|
|
17
|
+
//podSecurityContext: { readOnlyRootFilesystem: false },
|
|
18
|
+
},
|
|
19
|
+
deploymentConfig: {
|
|
20
|
+
replicas,
|
|
21
|
+
},
|
|
22
|
+
ingressConfig: ingress
|
|
23
|
+
? {
|
|
24
|
+
...ingress,
|
|
25
|
+
responseHeaders: {
|
|
26
|
+
'Content-Security-Policy': `default-src 'self' https://*.notion.so https://*.googletagmanager.com https://cusdis.com data: 'unsafe-inline' 'unsafe-eval';`,
|
|
27
|
+
'referrer-policy': 'no-referrer',
|
|
28
|
+
},
|
|
29
|
+
}
|
|
30
|
+
: undefined,
|
|
31
|
+
});
|
|
32
|
+
};
|
|
33
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiQXN0cm9QYWdlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL0t1YmVYL0FwcHMvQXN0cm9QYWdlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQ0EsOENBQXVDO0FBWXZDLGtCQUFlLENBQUMsRUFDZCxJQUFJLEdBQUcsWUFBWSxFQUNuQixTQUFTLEVBQ1QsUUFBUSxFQUNSLE9BQU8sRUFDUCxRQUFRLEVBQ1Isc0JBQXNCLEdBRVYsRUFBRSxFQUFFO0lBQ2hCLE1BQU0sU0FBUyxHQUFRLEVBQUUsQ0FBQztJQUMxQixJQUFJLHNCQUFzQjtRQUN4QixTQUFTLENBQUMsaUNBQWlDLENBQUMsR0FBRyxzQkFBc0IsQ0FBQztJQUV4RSxPQUFPLElBQUEsb0JBQVUsRUFBQztRQUNoQixJQUFJO1FBQ0osU0FBUztRQUNULFFBQVE7UUFFUixTQUFTO1FBRVQsU0FBUyxFQUFFO1lBQ1QsS0FBSyxFQUFFLEVBQUMsSUFBSSxFQUFFLEVBQUUsRUFBQztZQUNqQixLQUFLLEVBQUUsOEJBQThCO1lBQ3JDLGVBQWUsRUFBRSxRQUFRO1lBQ3pCLHdEQUF3RDtTQUN6RDtRQUVELGdCQUFnQixFQUFFO1lBQ2hCLFFBQVE7U0FDVDtRQUVELGFBQWEsRUFBRSxPQUFPO1lBQ3BCLENBQUMsQ0FBQztnQkFDRSxHQUFHLE9BQU87Z0JBQ1YsZUFBZSxFQUFFO29CQUNmLHlCQUF5QixFQUFFLCtIQUErSDtvQkFDMUosaUJBQWlCLEVBQUUsYUFBYTtpQkFDakM7YUFDRjtZQUNILENBQUMsQ0FBQyxTQUFTO0tBQ2QsQ0FBQyxDQUFDO0FBQ0wsQ0FBQyxDQUFDIn0=
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
const k8s = require("@pulumi/kubernetes");
|
|
4
|
+
exports.default = ({ name = 'kafka', namespace, provider }) => {
|
|
5
|
+
const kafka = new k8s.helm.v3.Chart(name, {
|
|
6
|
+
namespace,
|
|
7
|
+
chart: 'kafka',
|
|
8
|
+
fetchOpts: { repo: 'https://charts.bitnami.com/bitnami' },
|
|
9
|
+
values: {},
|
|
10
|
+
}, { provider });
|
|
11
|
+
return kafka;
|
|
12
|
+
};
|
|
13
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
import { DefaultKsAppArgs } from '../types';
|
|
2
|
+
import { Input } from '@pulumi/pulumi';
|
|
3
|
+
export interface NobeliumProps extends DefaultKsAppArgs {
|
|
4
|
+
notionPageId: Input<string>;
|
|
5
|
+
googleSiteVerification?: Input<string>;
|
|
6
|
+
googleAnalyticId?: Input<string>;
|
|
7
|
+
}
|
|
8
|
+
declare const _default: ({ name, namespace, ingress, provider, notionPageId, googleAnalyticId, googleSiteVerification, }: NobeliumProps) => {
|
|
9
|
+
deployment: import("../kx").Deployment | undefined;
|
|
10
|
+
service: import("../kx").Service | undefined;
|
|
11
|
+
jobs: (import("@pulumi/kubernetes/batch/v1/cronJob").CronJob | import("../kx").Job)[] | undefined;
|
|
12
|
+
};
|
|
13
|
+
export default _default;
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
const Deployment_1 = require("../Deployment");
|
|
4
|
+
exports.default = ({ name = 'nobelium', namespace, ingress, provider, notionPageId, googleAnalyticId, googleSiteVerification, }) => {
|
|
5
|
+
const configMap = {
|
|
6
|
+
NOTION_PAGE_ID: notionPageId,
|
|
7
|
+
};
|
|
8
|
+
if (googleAnalyticId)
|
|
9
|
+
configMap['GG_ANALYTIC_ID'] = googleAnalyticId;
|
|
10
|
+
if (googleSiteVerification)
|
|
11
|
+
configMap['GG_SITE_VERIFICATION'] = googleSiteVerification;
|
|
12
|
+
return (0, Deployment_1.default)({
|
|
13
|
+
name,
|
|
14
|
+
namespace,
|
|
15
|
+
provider,
|
|
16
|
+
configMap,
|
|
17
|
+
podConfig: {
|
|
18
|
+
ports: { http: 3000 },
|
|
19
|
+
image: 'baoduy2412/nobelium:latest',
|
|
20
|
+
imagePullPolicy: 'Always',
|
|
21
|
+
//podSecurityContext: { readOnlyRootFilesystem: false },
|
|
22
|
+
},
|
|
23
|
+
deploymentConfig: {
|
|
24
|
+
replicas: 1,
|
|
25
|
+
},
|
|
26
|
+
ingressConfig: ingress
|
|
27
|
+
? {
|
|
28
|
+
...ingress,
|
|
29
|
+
responseHeaders: {
|
|
30
|
+
'Content-Security-Policy': `default-src 'self' https://*.notion.so https://*.googletagmanager.com https://cusdis.com data: 'unsafe-inline' 'unsafe-eval';`,
|
|
31
|
+
'referrer-policy': 'no-referrer',
|
|
32
|
+
},
|
|
33
|
+
}
|
|
34
|
+
: undefined,
|
|
35
|
+
});
|
|
36
|
+
};
|
|
37
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
import { DefaultKsAppArgs } from '../types';
|
|
2
|
+
import { Input } from '@pulumi/pulumi';
|
|
3
|
+
import { KeyVaultInfo } from '../../types';
|
|
4
|
+
export interface WikiJsProps extends DefaultKsAppArgs {
|
|
5
|
+
vaultInfo?: KeyVaultInfo;
|
|
6
|
+
createAzureAdIdentity?: boolean;
|
|
7
|
+
useVirtualHost?: boolean;
|
|
8
|
+
postgresql: {
|
|
9
|
+
host: Input<string>;
|
|
10
|
+
database: Input<string>;
|
|
11
|
+
username: Input<string>;
|
|
12
|
+
password: Input<string>;
|
|
13
|
+
};
|
|
14
|
+
}
|
|
15
|
+
declare const _default: ({ name, namespace, ingress, createAzureAdIdentity, useVirtualHost, vaultInfo, postgresql, provider, }: WikiJsProps) => Promise<{
|
|
16
|
+
wiki: {
|
|
17
|
+
deployment: import("../kx").Deployment | undefined;
|
|
18
|
+
service: import("../kx").Service | undefined;
|
|
19
|
+
jobs: (import("@pulumi/kubernetes/batch/v1/cronJob").CronJob | import("../kx").Job)[] | undefined;
|
|
20
|
+
};
|
|
21
|
+
identity: (import("../../AzAd/Identity").IdentityResult & {
|
|
22
|
+
vaultNames: {
|
|
23
|
+
clientIdKeyName: string;
|
|
24
|
+
clientSecretKeyName: string;
|
|
25
|
+
principalIdKeyName: string;
|
|
26
|
+
principalSecretKeyName: string;
|
|
27
|
+
};
|
|
28
|
+
}) | undefined;
|
|
29
|
+
}>;
|
|
30
|
+
export default _default;
|
|
@@ -0,0 +1,54 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
const Deployment_1 = require("../Deployment");
|
|
4
|
+
const Identity_1 = require("../../AzAd/Identity");
|
|
5
|
+
const GraphDefinition_1 = require("../../AzAd/GraphDefinition");
|
|
6
|
+
exports.default = async ({ name = 'wiki', namespace, ingress, createAzureAdIdentity, useVirtualHost, vaultInfo, postgresql, provider, }) => {
|
|
7
|
+
const hostName = ingress?.hostNames[0];
|
|
8
|
+
const graphAccess = (0, GraphDefinition_1.getGraphPermissions)({ name: 'User.Read.All', type: 'Role' }, { name: 'User.Read', type: 'Scope' }, { name: 'email', type: 'Scope' }, { name: 'openid', type: 'Scope' }, { name: 'profile', type: 'Scope' });
|
|
9
|
+
const identity = createAzureAdIdentity
|
|
10
|
+
? (0, Identity_1.default)({
|
|
11
|
+
name,
|
|
12
|
+
createClientSecret: true,
|
|
13
|
+
vaultInfo,
|
|
14
|
+
allowMultiOrg: false,
|
|
15
|
+
replyUrls: [`https://${hostName}/login/azure/callback`],
|
|
16
|
+
homepage: `https://${hostName}`,
|
|
17
|
+
appType: 'web',
|
|
18
|
+
requiredResourceAccesses: [graphAccess],
|
|
19
|
+
})
|
|
20
|
+
: undefined;
|
|
21
|
+
const wiki = (0, Deployment_1.default)({
|
|
22
|
+
name,
|
|
23
|
+
namespace,
|
|
24
|
+
provider,
|
|
25
|
+
secrets: {
|
|
26
|
+
DB_TYPE: 'postgres',
|
|
27
|
+
DB_PORT: '5432',
|
|
28
|
+
DB_HOST: postgresql.host,
|
|
29
|
+
DB_USER: postgresql.username,
|
|
30
|
+
DB_PASS: postgresql.password,
|
|
31
|
+
DB_NAME: postgresql.database,
|
|
32
|
+
},
|
|
33
|
+
podConfig: {
|
|
34
|
+
ports: { http: 3000 },
|
|
35
|
+
image: 'requarks/wiki:latest',
|
|
36
|
+
podSecurityContext: { readOnlyRootFilesystem: false },
|
|
37
|
+
},
|
|
38
|
+
deploymentConfig: {
|
|
39
|
+
replicas: 1,
|
|
40
|
+
useVirtualHost,
|
|
41
|
+
},
|
|
42
|
+
ingressConfig: ingress
|
|
43
|
+
? {
|
|
44
|
+
...ingress,
|
|
45
|
+
responseHeaders: {
|
|
46
|
+
'Content-Security-Policy': `default-src 'self' *.diagrams.net *.msecnd.net *.services.visualstudio.com data: 'unsafe-inline' 'unsafe-eval'`,
|
|
47
|
+
'referrer-policy': 'no-referrer',
|
|
48
|
+
},
|
|
49
|
+
}
|
|
50
|
+
: undefined,
|
|
51
|
+
});
|
|
52
|
+
return { wiki, identity };
|
|
53
|
+
};
|
|
54
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
import { DefaultK8sArgs } from '../types';
|
|
2
|
+
import { Input } from '@pulumi/pulumi';
|
|
3
|
+
interface Props extends DefaultK8sArgs {
|
|
4
|
+
hostNames: string[];
|
|
5
|
+
volume?: {
|
|
6
|
+
storageClass: string;
|
|
7
|
+
};
|
|
8
|
+
database: {
|
|
9
|
+
host: Input<string>;
|
|
10
|
+
username: Input<string>;
|
|
11
|
+
password: Input<string>;
|
|
12
|
+
database: Input<string>;
|
|
13
|
+
requiredSSL?: boolean;
|
|
14
|
+
};
|
|
15
|
+
options?: {
|
|
16
|
+
enableDebug?: boolean;
|
|
17
|
+
};
|
|
18
|
+
}
|
|
19
|
+
declare const _default: ({ name, namespace, hostNames, volume, database, provider, options, }: Props) => {
|
|
20
|
+
deployment: import("../kx").Deployment | undefined;
|
|
21
|
+
service: import("../kx").Service | undefined;
|
|
22
|
+
jobs: (import("@pulumi/kubernetes/batch/v1/cronJob").CronJob | import("../kx").Job)[] | undefined;
|
|
23
|
+
};
|
|
24
|
+
export default _default;
|
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
const Deployment_1 = require("../Deployment");
|
|
4
|
+
const Storage_1 = require("../Storage");
|
|
5
|
+
const Helpers_1 = require("../../Common/Helpers");
|
|
6
|
+
exports.default = ({ name = 'wp', namespace, hostNames, volume, database, provider, options = {}, }) => {
|
|
7
|
+
const claim = volume
|
|
8
|
+
? (0, Storage_1.createPVCForStorageClass)({
|
|
9
|
+
name,
|
|
10
|
+
namespace,
|
|
11
|
+
provider,
|
|
12
|
+
storageClassName: volume.storageClass,
|
|
13
|
+
})
|
|
14
|
+
: undefined;
|
|
15
|
+
const domains = (0, Helpers_1.getRootDomainFromUrl)(hostNames[0]);
|
|
16
|
+
return (0, Deployment_1.default)({
|
|
17
|
+
name,
|
|
18
|
+
namespace,
|
|
19
|
+
configMap: { WORDPRESS_DEBUG: options.enableDebug ? '1' : '' },
|
|
20
|
+
secrets: {
|
|
21
|
+
WORDPRESS_DB_HOST: database.host,
|
|
22
|
+
WORDPRESS_DB_USER: database.username,
|
|
23
|
+
WORDPRESS_DB_PASSWORD: database.password,
|
|
24
|
+
WORDPRESS_DB_NAME: database.database,
|
|
25
|
+
WORDPRESS_CONFIG_EXTRA: database.requiredSSL
|
|
26
|
+
? "define('MYSQL_CLIENT_FLAGS', MYSQLI_CLIENT_SSL);"
|
|
27
|
+
: '',
|
|
28
|
+
},
|
|
29
|
+
podConfig: {
|
|
30
|
+
ports: { http: 80 },
|
|
31
|
+
image: 'wordpress:latest',
|
|
32
|
+
volumes: volume
|
|
33
|
+
? [
|
|
34
|
+
{
|
|
35
|
+
name: 'data-wp',
|
|
36
|
+
persistentVolumeClaim: claim.metadata.name,
|
|
37
|
+
mountPath: '/var/www/html',
|
|
38
|
+
},
|
|
39
|
+
]
|
|
40
|
+
: undefined,
|
|
41
|
+
},
|
|
42
|
+
deploymentConfig: { replicas: 1 },
|
|
43
|
+
ingressConfig: {
|
|
44
|
+
type: 'nginx',
|
|
45
|
+
certManagerIssuer: true,
|
|
46
|
+
hostNames: hostNames,
|
|
47
|
+
responseHeaders: {
|
|
48
|
+
'Content-Security-Policy': `default-src 'self' ${hostNames.concat(' ')} *.githubusercontent.com codesandbox.io *.gravatar.com *.wp.com *.w.org wp-themes.com *.rating-widget.com rating-widget.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.google.com *.cloudflare.com data: 'unsafe-inline' 'unsafe-eval'; frame-src *.${domains} wp-themes.com codesandbox.io *.google.com;`,
|
|
49
|
+
'referrer-policy': 'no-referrer',
|
|
50
|
+
},
|
|
51
|
+
},
|
|
52
|
+
provider,
|
|
53
|
+
});
|
|
54
|
+
};
|
|
55
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
import { DefaultKsAppArgs } from '../../types';
|
|
2
|
+
import { KeyVaultInfo } from '../../../types';
|
|
3
|
+
import { ForwardedProxy, ReverseProxy } from './type';
|
|
4
|
+
interface Props extends DefaultKsAppArgs {
|
|
5
|
+
reverseProxy?: ReverseProxy;
|
|
6
|
+
forwardedProxy?: ForwardedProxy[];
|
|
7
|
+
vaultInfo?: KeyVaultInfo;
|
|
8
|
+
enableHA?: boolean;
|
|
9
|
+
enableDebug?: boolean;
|
|
10
|
+
}
|
|
11
|
+
/** YARP Reverse Proxy https://microsoft.github.io/reverse-proxy */
|
|
12
|
+
declare const _default: ({ reverseProxy, forwardedProxy, namespace, ingress, name, enableDebug, enableHA, vaultInfo, ...others }: Props) => Promise<{
|
|
13
|
+
deployment: import("../../kx").Deployment | undefined;
|
|
14
|
+
service: import("../../kx").Service | undefined;
|
|
15
|
+
jobs: (import("@pulumi/kubernetes/batch/v1/cronJob").CronJob | import("../../kx").Job)[] | undefined;
|
|
16
|
+
}>;
|
|
17
|
+
export default _default;
|