@drunk-pulumi/azure 0.0.19

package/Aks/index.js

@@ -0,0 +1,558 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VmSizes = void 0;
+const native = require("@pulumi/azure-native");
+const pulumi = require("@pulumi/pulumi");
+const pulumi_1 = require("@pulumi/pulumi");
+const VmSetMonitor_1 = require("./VmSetMonitor");
+const AzureEnv_1 = require("../Common/AzureEnv");
+const Locker_1 = require("../Core/Locker");
+const Identity_1 = require("./Identity");
+const StackEnv_1 = require("../Common/StackEnv");
+const Helpers_1 = require("../Logs/Helpers");
+const Naming_1 = require("../Common/Naming");
+const PrivateDns_1 = require("../VNet/PrivateDns");
+const Helper_1 = require("../VNet/Helper");
+const RoleAssignment_1 = require("../AzAd/RoleAssignment");
+const Group_1 = require("../AzAd/Group");
+const Helper_2 = require("./Helper");
+const CustomHelper_1 = require("../KeyVault/CustomHelper");
+const KeyVaultBase_1 = require("@drunk-pulumi/azure-providers/AzBase/KeyVaultBase");
+const autoScaleFor = ({ enableAutoScaling, nodeType, env, }) => {
+    const nodeCount = 1;
+    const minCount = 1;
+    let maxCount = 3;
+    if (env === AzureEnv_1.Environments.Prd) {
+        switch (nodeType) {
+            case 'User':
+                maxCount = 5;
+                break;
+            case 'Default':
+            case 'System':
+            default:
+                maxCount = 3;
+                break;
+        }
+    }
+    return {
+        enableAutoScaling,
+        nodeCount: enableAutoScaling ? undefined : nodeCount,
+        minCount: enableAutoScaling ? minCount : undefined,
+        maxCount: enableAutoScaling ? maxCount : undefined,
+    };
+};
+const defaultNodePoolProps = {
+    availabilityZones: AzureEnv_1.isPrd ? ['1', '2', '3'] : undefined,
+    type: native.containerservice.AgentPoolType.VirtualMachineScaleSets,
+    vmSize: 'Standard_B2s',
+    maxPods: 50,
+    enableFIPS: false,
+    enableNodePublicIP: false,
+    enableUltraSSD: AzureEnv_1.isPrd,
+    osDiskSizeGB: 128,
+    osDiskType: native.containerservice.OSDiskType.Managed,
+    nodeLabels: {
+        environment: AzureEnv_1.currentEnv,
+        stack: StackEnv_1.stack,
+    },
+    tags: {
+        environment: AzureEnv_1.currentEnv,
+    },
+};
+var VmSizes;
+(function (VmSizes) {
+    /** 32G RAM - 4CPU - $221.92 */
+    VmSizes["Standard_E4as_v4_221"] = "Standard_E4as_v4";
+    /** 8G RAM - 2CPU - $77.38 */
+    VmSizes["Standard_B2ms_77"] = "Standard_B2ms";
+    /** 16G RAM - 4CPU - $154.03 */
+    VmSizes["Standard_B4ms_154"] = "Standard_B4ms";
+    /** 8G RAM - 2CPU - 87.60 */
+    VmSizes["Standard_D2as_v4_87"] = "Standard_D2as_v4";
+    /** 8G RAM - 2CPU - 87.60 */
+    VmSizes["Standard_D2s_v3_87"] = "Standard_D2s_v3";
+    /** 16G RAM - 4CPU - $175.20 */
+    VmSizes["Standard_D4as_v4_175"] = "Standard_D4as_v4";
+    /** 4G RAM - 2CPU - $69.35 */
+    VmSizes["Standard_A2_v2_69"] = "Standard_A2_v2";
+    /** 8G RAM - 4CPU - $144.54 */
+    VmSizes["Standard_A4_v2_144"] = "Standard_A4_v2";
+    /** 32G RAM - 4CPU - $205.13 */
+    VmSizes["Standard_A4m_v2_205"] = "Standard_A4m_v2";
+})(VmSizes || (exports.VmSizes = VmSizes = {}));
+//Using this to enable the preview feature https://azurecloudai.blog/2019/10/16/aks-enabling-and-using-preview-features-such-as-nodepools-using-cli/
+exports.default = async ({ group, nodeResourceGroup, name, linux, 
+//kubernetesVersion,
+defaultNodePool, nodePools, enableAutoScale, network, log, acr, aksAccess, vaultInfo, featureFlags = { enableDiagnosticSetting: true }, addon = {
+    enableAzurePolicy: true,
+    enableAzureKeyVault: true,
+    enableKubeDashboard: false,
+}, tier = native.containerservice.ManagedClusterSKUTier.Free, lock = true, dependsOn = [], importFrom, }) => {
+    const aksName = (0, Naming_1.getAksName)(name);
+    const secretName = `${aksName}-config`;
+    const acrScope = acr?.enable ? acr.id ?? AzureEnv_1.defaultScope : undefined;
+    const disableLocalAccounts = vaultInfo
+        ? await (0, KeyVaultBase_1.getKeyVaultBase)(vaultInfo.name).checkSecretExist(secretName)
+        : false;
+    console.log(name, { disableLocalAccounts });
+    nodeResourceGroup = nodeResourceGroup || `${aksName}-nodes`;
+    // const appGateway =
+    //   addon.applicationGateway && network.outboundIpAddress
+    //     ? await AppGateway({
+    //         name,
+    //         group,
+    //         publicIpAddressId: network.outboundIpAddress.ipAddressId,
+    //         subnetId: addon.applicationGateway.gatewaySubnetId,
+    //       })
+    //     : undefined;
+    // const podIdentity = featureFlags?.enablePodIdentity
+    //   ? ManagedIdentity({
+    //       name,
+    //       group,
+    //       lock,
+    //     })
+    //   : undefined;
+    const serviceIdentity = featureFlags.createServicePrincipal
+        ? (0, Identity_1.default)({
+            name: aksName,
+            vaultInfo,
+        })
+        : undefined;
+    const adminGroup = aksAccess?.envRoleNames
+        ? (0, Group_1.getAdGroup)(aksAccess.envRoleNames.admin)
+        : undefined;
+    const contributeGroup = aksAccess?.envRoleNames
+        ? (0, Group_1.getAdGroup)(aksAccess.envRoleNames.contributor)
+        : undefined;
+    //const enableAzureRBAC = Boolean(aksAccess?.adminMembers && adminGroup);
+    //=================Validate ===================================/
+    if (!network?.subnetId) {
+        console.error('Aks subnetId is required:', name);
+        return undefined;
+    }
+    if (!linux?.sshKeys || !linux.sshKeys[0]) {
+        console.error('Aks sshKeys is required:', name);
+        return undefined;
+    }
+    //Private DNS Zone for Private CLuster
+    const privateZone = aksAccess?.enablePrivateCluster
+        ? (0, PrivateDns_1.default)({
+            name: 'privatelink.southeastasia.azmk8s.io',
+            group,
+            vnetIds: [(0, pulumi_1.output)(network.subnetId).apply(Helper_1.getVnetIdFromSubnetId)],
+        })
+        : undefined;
+    //Create AKS Cluster
+    const aks = new native.containerservice.ManagedCluster(aksName, {
+        resourceName: aksName,
+        ...group,
+        nodeResourceGroup,
+        dnsPrefix: aksName,
+        //kubernetesVersion,
+        apiServerAccessProfile: {
+            authorizedIPRanges: aksAccess?.enablePrivateCluster
+                ? []
+                : aksAccess?.authorizedIPRanges || [],
+            disableRunCommand: true,
+            enablePrivateCluster: aksAccess?.enablePrivateCluster,
+            privateDNSZone: privateZone?.id,
+        },
+        //fqdnSubdomain: '',
+        addonProfiles: {
+            azureKeyvaultSecretsProvider: {
+                config: addon.enableAzureKeyVault
+                    ? {
+                        enableSecretRotation: 'true',
+                    }
+                    : undefined,
+                enabled: Boolean(addon.enableAzureKeyVault),
+            },
+            azurePolicy: { enabled: Boolean(addon.enableAzurePolicy) },
+            kubeDashboard: { enabled: Boolean(addon.enableKubeDashboard) },
+            //If there is no public P address provided, the public app can access via HTTP app routing only and feature only support HTTP.
+            //TO enable HTTPS support need to create a cluster with a public IP address.
+            httpApplicationRouting: {
+                enabled: !network.outboundIpAddress?.ipAddressId &&
+                    !network.enableFirewall &&
+                    !aksAccess?.enablePrivateCluster,
+            },
+            aciConnectorLinux: {
+                enabled: Boolean(network.virtualHostSubnetName),
+                config: network.virtualHostSubnetName
+                    ? { SubnetName: network.virtualHostSubnetName }
+                    : undefined,
+            },
+            ingressApplicationGateway: {
+                enabled: Boolean(addon.applicationGateway),
+                config: addon.applicationGateway
+                    ? {
+                        gatewayName: `${name}-gateway`,
+                        subnetId: addon.applicationGateway.gatewaySubnetId,
+                    }
+                    : undefined,
+            },
+            omsAgent: {
+                enabled: Boolean(log?.logWpId),
+                config: log
+                    ? {
+                        logAnalyticsWorkspaceResourceID: log.logWpId,
+                    }
+                    : undefined,
+            },
+        },
+        sku: {
+            name: native.containerservice.ManagedClusterSKUName.Base,
+            tier,
+        },
+        agentPoolProfiles: [
+            {
+                ...defaultNodePoolProps,
+                ...defaultNodePool,
+                ...autoScaleFor({
+                    env: AzureEnv_1.currentEnv,
+                    nodeType: defaultNodePool.mode,
+                    enableAutoScaling: enableAutoScale,
+                }),
+                count: defaultNodePool.mode === 'System' ? 1 : 0,
+                //orchestratorVersion: kubernetesVersion,
+                vnetSubnetID: network.subnetId,
+                kubeletDiskType: 'OS',
+                osSKU: 'Ubuntu',
+                osType: 'Linux',
+                //upgradeSettings: {},
+                tags: {
+                    ...defaultNodePoolProps.tags,
+                    mode: defaultNodePool.mode,
+                },
+            },
+        ],
+        linuxProfile: linux
+            ? {
+                adminUsername: linux.adminUsername,
+                ssh: { publicKeys: linux.sshKeys.map((k) => ({ keyData: k })) },
+            }
+            : undefined,
+        autoScalerProfile: {
+            balanceSimilarNodeGroups: 'true',
+            expander: 'random',
+            maxEmptyBulkDelete: '10',
+            maxGracefulTerminationSec: '600',
+            maxNodeProvisionTime: '15m',
+            maxTotalUnreadyPercentage: '45',
+            newPodScaleUpDelay: '0s',
+            okTotalUnreadyCount: '3',
+            scaleDownDelayAfterAdd: '30m',
+            scaleDownDelayAfterDelete: '60s',
+            scaleDownDelayAfterFailure: '10m',
+            scaleDownUnneededTime: '10m',
+            scaleDownUnreadyTime: '20m',
+            scaleDownUtilizationThreshold: '0.5',
+            scanInterval: '60s',
+            skipNodesWithLocalStorage: 'false',
+            skipNodesWithSystemPods: 'true',
+        },
+        //Still under preview
+        // workloadAutoScalerProfile: enableAutoScale
+        //   ? { keda: { enabled: true } }
+        //   : undefined,
+        servicePrincipalProfile: serviceIdentity
+            ? {
+                clientId: serviceIdentity.clientId,
+                secret: serviceIdentity.clientSecret,
+            }
+            : undefined,
+        securityProfile: {
+            defender: AzureEnv_1.isPrd
+                ? {
+                    logAnalyticsWorkspaceResourceId: log?.logWpId,
+                    securityMonitoring: { enabled: true },
+                }
+                : undefined,
+            imageCleaner: { enabled: true, intervalHours: 24 },
+            workloadIdentity: { enabled: false },
+        },
+        //azureMonitorProfile: { metrics: { enabled } },
+        //Refer here for details https://learn.microsoft.com/en-us/azure/aks/use-managed-identity
+        enablePodSecurityPolicy: false,
+        podIdentityProfile: featureFlags.enablePodIdentity
+            ? {
+                enabled: featureFlags.enablePodIdentity,
+                //Not allow pod to use kublet command
+                allowNetworkPluginKubenet: false,
+            }
+            : undefined,
+        identity: {
+            type: native.containerservice.ResourceIdentityType.SystemAssigned,
+        },
+        // identityProfile: podIdentity
+        //   ? {
+        //       kubeletidentity: {
+        //         clientId: podIdentity.clientId,
+        //         objectId: podIdentity.principalId,
+        //         resourceId: podIdentity.id,
+        //       },
+        //     }
+        //   : undefined,
+        //Preview Features
+        autoUpgradeProfile: {
+            upgradeChannel: native.containerservice.UpgradeChannel.Patch,
+        },
+        //securityProfile:{},
+        disableLocalAccounts,
+        enableRBAC: true,
+        aadProfile: {
+            enableAzureRBAC: true,
+            managed: true,
+            adminGroupObjectIDs: adminGroup ? [adminGroup.objectId] : undefined,
+            tenantID: AzureEnv_1.tenantId,
+        },
+        storageProfile: {
+            blobCSIDriver: {
+                enabled: true,
+            },
+            diskCSIDriver: {
+                enabled: true,
+            },
+            fileCSIDriver: { enabled: true },
+        },
+        networkProfile: {
+            networkMode: native.containerservice.NetworkMode.Transparent,
+            networkPolicy: native.containerservice.NetworkPolicy.Azure,
+            networkPlugin: native.containerservice.NetworkPlugin.Azure,
+            //dnsServiceIP: '10.0.0.10',
+            //dockerBridgeCidr: '172.17.0.1/16',
+            //serviceCidr: '10.0.0.0/16',
+            outboundType: network.enableFirewall || aksAccess?.enablePrivateCluster
+                ? native.containerservice.OutboundType.UserDefinedRouting
+                : native.containerservice.OutboundType.LoadBalancer,
+            loadBalancerSku: network.outboundIpAddress?.ipAddressId ||
+                network.enableFirewall ||
+                aksAccess?.enablePrivateCluster
+                ? 'Standard'
+                : 'Basic',
+            loadBalancerProfile: network.outboundIpAddress &&
+                !(network.enableFirewall || aksAccess?.enablePrivateCluster)
+                ? {
+                    outboundIPs: {
+                        publicIPs: [{ id: network.outboundIpAddress.ipAddressId }],
+                    },
+                    outboundIPPrefixes: network.outboundIpAddress.ipAddressPrefixId
+                        ? {
+                            publicIPPrefixes: [
+                                { id: network.outboundIpAddress.ipAddressPrefixId },
+                            ],
+                        }
+                        : undefined,
+                }
+                : undefined,
+        },
+        tags: AzureEnv_1.defaultTags,
+    }, {
+        protect: lock,
+        dependsOn: serviceIdentity
+            ? [...dependsOn, serviceIdentity.resource]
+            : dependsOn,
+        import: importFrom,
+        deleteBeforeReplace: true,
+        ignoreChanges: ['privateLinkResources', 'networkProfile', 'linuxProfile'],
+    });
+    if (lock) {
+        (0, Locker_1.default)({ name: aksName, resourceId: aks.id, dependsOn: aks });
+    }
+    if (nodePools) {
+        nodePools.map((p) => new native.containerservice.AgentPool(`${name}-${p.name}`, {
+            //agentPoolName:p.name,
+            resourceName: aks.name,
+            ...group,
+            ...defaultNodePoolProps,
+            ...p,
+            ...autoScaleFor({
+                env: AzureEnv_1.currentEnv,
+                nodeType: p.mode,
+                enableAutoScaling: enableAutoScale,
+            }),
+            count: p.mode === 'System' ? 1 : 0,
+            //orchestratorVersion: kubernetesVersion,
+            vnetSubnetID: network.subnetId,
+            kubeletDiskType: 'OS',
+            osSKU: 'Ubuntu',
+            osType: 'Linux',
+            //upgradeSettings: {},
+            tags: {
+                ...defaultNodePoolProps.tags,
+                mode: p.mode,
+            },
+        }));
+    }
+    if (vaultInfo) {
+        aks.id.apply(async (id) => {
+            if (!id)
+                return;
+            const config = await (0, Helper_2.getAksConfig)({
+                name: aksName,
+                groupName: group.resourceGroupName,
+                formattedName: true,
+                localAccountDisabled: disableLocalAccounts,
+            });
+            (0, CustomHelper_1.addCustomSecret)({
+                name: secretName,
+                value: config,
+                dependsOn: aks,
+                ignoreChange: true,
+                contentType: name,
+                vaultInfo,
+            });
+        });
+    }
+    //Grant permission for Group
+    aks.id.apply(async (id) => {
+        if (!id)
+            return;
+        //Admin
+        if (adminGroup) {
+            await Promise.all([
+                {
+                    shortName: 'Admin-Contributor-Role',
+                    name: 'Azure Kubernetes Service Contributor Role',
+                },
+                {
+                    shortName: 'Admin-RBAC-Cluster-Admin',
+                    name: 'Azure Kubernetes Service RBAC Cluster Admin',
+                },
+                {
+                    shortName: 'Admin-Cluster-Admin-Role',
+                    name: 'Azure Kubernetes Service Cluster Admin Role',
+                },
+                {
+                    shortName: 'Admin-Cluster-Monitoring-User',
+                    name: 'Azure Kubernetes Service Cluster Monitoring User',
+                },
+                {
+                    shortName: 'Admin-Cluster-User-Role',
+                    name: 'Azure Kubernetes Service Cluster User Role',
+                },
+            ].map((r) => (0, RoleAssignment_1.roleAssignment)({
+                name: `${name}-${r.shortName}`,
+                principalId: adminGroup.objectId,
+                principalType: 'Group',
+                roleName: r.name,
+                scope: id,
+            })));
+        }
+        //Contributor
+        if (contributeGroup) {
+            await Promise.all([
+                {
+                    shortName: 'Contributor-Contributor-Role',
+                    name: 'Azure Kubernetes Service Contributor Role',
+                },
+                {
+                    shortName: 'Contributor-RBAC-Admin',
+                    name: 'Azure Kubernetes Service RBAC Admin',
+                },
+                {
+                    shortName: 'Contributor-RBAC-Reader',
+                    name: 'Azure Kubernetes Service RBAC Reader',
+                },
+                {
+                    shortName: 'Contributor-RBAC-Writer',
+                    name: 'Azure Kubernetes Service RBAC Writer',
+                },
+            ].map((r) => (0, RoleAssignment_1.roleAssignment)({
+                name: `${name}-${r.shortName}`,
+                principalId: contributeGroup.objectId,
+                principalType: 'Group',
+                roleName: r.name,
+                scope: id,
+            })));
+        }
+        //Diagnostic
+        if (featureFlags.enableDiagnosticSetting) {
+            (0, Helpers_1.createDiagnostic)({
+                name,
+                targetResourceId: id,
+                ...log,
+                logsCategories: [
+                    'guard',
+                    'kube-controller-manager',
+                    'kube-audit-admin',
+                    'kube-audit',
+                    'kube-scheduler',
+                    'cluster-autoscaler',
+                ],
+            });
+        }
+    });
+    //Grant Permission for Identity
+    pulumi
+        .all([aks.identity, aks.identityProfile, network.subnetId])
+        .apply(([identity, identityProfile, sId]) => {
+        console.log('Grant RBAC for cluster:', name);
+        //Already assigned when creating the service
+        // if (serviceIdentity?.principalId) {
+        //   await roleAssignment({
+        //     name: `${name}-aks-identity-acr-pull`,
+        //     principalId: serviceIdentity?.principalId,
+        //     principalType: 'ServicePrincipal',
+        //     roleName: 'AcrPull',
+        //     scope: defaultScope,
+        //   });
+        // }
+        if (acrScope && identityProfile && identityProfile['kubeletidentity']) {
+            (0, RoleAssignment_1.roleAssignment)({
+                name: `${name}-aks-identity-profile-pull`,
+                principalId: identityProfile['kubeletidentity'].objectId,
+                principalType: 'ServicePrincipal',
+                roleName: 'AcrPull',
+                scope: acrScope,
+            });
+            if (vaultInfo) {
+                (0, CustomHelper_1.addCustomSecret)({
+                    name: `${name}-identity-clientId`,
+                    value: identityProfile['kubeletidentity'].clientId,
+                    dependsOn: aks,
+                    contentType: name,
+                    vaultInfo,
+                });
+            }
+        }
+        // if (identity?.principalId) {
+        //   await roleAssignment({
+        //     name: `${name}-system-acr-pull`,
+        //     principalId: identity.principalId,
+        //     principalType: 'ServicePrincipal',
+        //     roleName: 'AcrPull',
+        //     scope: defaultScope,
+        //   });
+        // }
+        if (network.subnetId && identity) {
+            (0, RoleAssignment_1.roleAssignment)({
+                name: `${name}-system-net`,
+                principalId: identity.principalId,
+                roleName: 'Contributor',
+                principalType: 'ServicePrincipal',
+                scope: (0, AzureEnv_1.getResourceIdFromInfo)({
+                    group: (0, AzureEnv_1.getResourceInfoFromId)(sId).group,
+                }),
+            });
+        }
+        if (privateZone && identity) {
+            (0, RoleAssignment_1.roleAssignment)({
+                name: `${name}-private-dns`,
+                principalId: identity.principalId,
+                roleName: 'Private DNS Zone Contributor',
+                principalType: 'ServicePrincipal',
+                scope: privateZone.id,
+            });
+        }
+    });
+    //Apply monitoring for VMScale Sets
+    (0, VmSetMonitor_1.default)({
+        group: { resourceGroupName: nodeResourceGroup },
+        ...log,
+        vaultInfo,
+        dependsOn: aks,
+    });
+    return { aks, serviceIdentity, adminGroup, privateZone };
+};
+//# sourceMappingURL=data:application/json;base64,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

package/Apim/ApiProduct/Api.d.ts

@@ -0,0 +1,35 @@
+import { ApimInfo } from '../../types';
+import * as apim from '@pulumi/azure-native/apimanagement';
+import { Input } from '@pulumi/pulumi';
+import { input as inputs } from '@pulumi/azure-native/types';
+import { PoliciesProps } from './PolicyBuilder';
+interface OperationProps {
+    apimInfo: ApimInfo;
+    apiId: Input<string>;
+    name: string;
+    method: 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' | 'HEAD' | 'OPTIONS';
+    urlTemplate: Input<string>;
+    policies?: PoliciesProps;
+    /** Create a dummy response */
+    responses?: Input<Input<inputs.apimanagement.ResponseContractArgs>[]>;
+}
+export interface ApiProps {
+    name: string;
+    product: apim.Product;
+    apimInfo: ApimInfo;
+    serviceUrl: string;
+    versions?: Array<{
+        name: string;
+        swaggerUrl?: string;
+    }>;
+    subscriptionRequired?: boolean;
+    policies?: PoliciesProps;
+    authHeaderKey?: string;
+    operations?: Array<Omit<OperationProps, 'apiId' | 'apimInfo'>>;
+    enableApiSet?: boolean;
+}
+export declare const createApi: ({ name, apimInfo, versions, product, serviceUrl, authHeaderKey, policies, subscriptionRequired, operations, enableApiSet, }: ApiProps) => Promise<{
+    set: import("@pulumi/azure-native/apimanagement/apiVersionSet").ApiVersionSet | undefined;
+    apis: import("@pulumi/azure-native/apimanagement/api").Api[];
+}>;
+export {};