@drunk-pulumi/azure 0.0.19

package/KubeX/Tools/AppHealthzMonitor.d.ts

@@ -0,0 +1,18 @@
+import * as k8s from '@pulumi/kubernetes';
+import { Input, Resource } from '@pulumi/pulumi';
+export interface AppHealthMonitorProps {
+    name?: string;
+    namespace: Input<string>;
+    hostName: string;
+    auth: {
+        azureAD?: boolean;
+    };
+    endpoints?: Array<{
+        name: Input<string>;
+        uri: Input<string>;
+    }>;
+    provider: k8s.Provider;
+    dependsOn?: Input<Input<Resource>[]> | Input<Resource>;
+}
+declare const _default: ({ name, namespace, hostName, auth, endpoints, ...others }: AppHealthMonitorProps) => void;
+export default _default;

package/KubeX/Tools/AppHealthzMonitor.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const Deployment_1 = require("../Deployment");
+const CertHelper_1 = require("../CertHelper");
+const Helpers_1 = require("../../Common/Helpers");
+const dotnetConfig_1 = require("../../Common/AppConfigs/dotnetConfig");
+const Identity_1 = require("../../AzAd/Identity");
+const AzureEnv_1 = require("../../Common/AzureEnv");
+exports.default = ({ name = 'healthz-monitor', namespace, hostName, auth, endpoints = [], ...others }) => {
+    const image = 'baoduy2412/healthz-ui:latest';
+    const callbackUrl = `https://${hostName}/signin-oidc`;
+    const identity = auth?.azureAD
+        ? (0, Identity_1.default)({
+            name,
+            createClientSecret: false,
+            createPrincipal: false,
+            appType: 'spa',
+            replyUrls: [callbackUrl],
+        })
+        : undefined;
+    const configMap = { ...dotnetConfig_1.defaultDotNetConfig };
+    if (identity) {
+        configMap['AzureAd__TenantId'] = AzureEnv_1.tenantId;
+        configMap['AzureAd__ClientId'] = identity?.clientId;
+        configMap['AzureAd__RedirectUri'] = callbackUrl;
+        configMap['AzureAd__PostLogoutRedirectUri'] = `https://${hostName}/signout-callback-oidc`;
+    }
+    endpoints.forEach((e, i) => {
+        configMap[`HealthChecksUI__HealthChecks__${i}__Name`] = e.name;
+        configMap[`HealthChecksUI__HealthChecks__${i}__Uri`] = e.uri;
+    });
+    (0, Deployment_1.default)({
+        name,
+        namespace,
+        configMap,
+        ingressConfig: {
+            type: 'nginx',
+            className: 'nginx',
+            hostNames: [hostName],
+            certManagerIssuer: true,
+            tlsSecretName: (0, CertHelper_1.getTlsName)((0, Helpers_1.getRootDomainFromUrl)(hostName), true),
+        },
+        podConfig: {
+            ports: { http: 8080 },
+            image,
+            resources: { requests: { memory: '1Mi', cpu: '1m' } },
+        },
+        deploymentConfig: { replicas: 1 },
+        ...others,
+    });
+};
+//# sourceMappingURL=data:application/json;base64,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

package/KubeX/Tools/ArgoCD/index.d.ts

@@ -0,0 +1,17 @@
+import { K8sArgs } from '../../types';
+import { DeploymentIngress } from '../../Deployment';
+import { KeyVaultInfo } from '../../../types';
+interface Props extends K8sArgs {
+    name?: string;
+    namespace?: string;
+    storageClassName: string;
+    auth?: {
+        enableAzureAD?: boolean;
+    };
+    ingressConfig?: {
+        hostName: string;
+    } & Omit<DeploymentIngress, 'hostNames'>;
+    vaultInfo?: KeyVaultInfo;
+}
+declare const _default: ({ name, namespace, ingressConfig, auth, storageClassName, vaultInfo, ...others }: Props) => void;
+export default _default;

package/KubeX/Tools/ArgoCD/index.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const Namespace_1 = require("../../Core/Namespace");
+const k8s = require("@pulumi/kubernetes");
+const Ingress_1 = require("../../Ingress");
+const pulumi_1 = require("@pulumi/pulumi");
+const CertHelper_1 = require("../../CertHelper");
+const Helpers_1 = require("../../../Common/Helpers");
+const Identity_1 = require("../../../AzAd/Identity");
+const AzureEnv_1 = require("../../../Common/AzureEnv");
+const Random_1 = require("../../../Core/Random");
+//**
+// https://artifacthub.io/packages/helm/bitnami/argo-cd
+// */
+exports.default = ({ name = 'argo-cd', namespace = 'argo-cd', ingressConfig, auth, storageClassName, vaultInfo, ...others }) => {
+    const ns = (0, Namespace_1.default)({ name, ...others });
+    const url = `https://${ingressConfig?.hostName}`;
+    const identity = auth?.enableAzureAD
+        ? (0, Identity_1.default)({
+            name,
+            createClientSecret: true,
+            createPrincipal: true,
+            publicClient: false,
+            appType: 'web',
+            replyUrls: [`${url}/argo-cd/auth/callback`],
+            vaultInfo,
+        })
+        : undefined;
+    const argoCD = new k8s.helm.v3.Chart(name, {
+        namespace,
+        chart: 'argo-cd',
+        fetchOpts: { repo: 'https://charts.bitnami.com/bitnami' },
+        skipAwait: true,
+        values: {
+            global: {
+                storageClass: storageClassName,
+            },
+            config: {
+                secret: {
+                    argocdServerAdminPassword: (0, Random_1.randomPassword)({
+                        name: `${name}-admin-password`,
+                        policy: false,
+                        length: 25,
+                        vaultInfo,
+                    }).result,
+                },
+            },
+            // redis: {
+            //   auth: {
+            //     existingSecret: randomPassword({
+            //       name: `${name}-redis-pass`,
+            //       policy: false,
+            //     }).result,
+            //   },
+            // },
+            rbac: { create: true },
+            //SSO
+            dex: {
+                image: { tag: 'v2.30.2' },
+                enabled: auth?.enableAzureAD,
+                // extraEnvVars: [
+                //   { name: 'ARGOCD_DEX_SERVER_DISABLE_TLS', value: 'true' },
+                // ],
+            },
+            server: {
+                url,
+                //DEX config
+                config: identity
+                    ? {
+                        'dex.config': (0, pulumi_1.interpolate) `connectors:\n- type: microsoft\n  id: microsoft\n  name:  Azure AD\n  config:\n    clientID: ${identity.clientId}\n    clientSecret: ${identity.clientSecret}\n    redirectURI: ${url}/api/dex/callback\n    tenant: ${AzureEnv_1.tenantId}\n    groups:\n      - AKS-Cluster-Admin\n`,
+                    }
+                    : undefined,
+                //Ingress
+                // ingress: ingressConfig
+                //   ? {
+                //       enabled: true,
+                //       hostname: ingressConfig.hostName,
+                //       ingressClassName: ingressConfig.className || 'nginx',
+                //     }
+                //   : undefined,
+            },
+        },
+        transformations: [
+            (o, op) => {
+                if (o.kind === 'Secret') {
+                    if (o.metadata.name === 'argocd-secret') {
+                        o.data['server.secretkey'] = (0, Random_1.randomPassword)({
+                            name: `${name}-secretkey`,
+                            policy: false,
+                            vaultInfo,
+                        }).result.apply(Helpers_1.toBase64);
+                        if (identity)
+                            o.data['oidc.azure.clientSecret'] =
+                                identity.clientSecret?.apply(Helpers_1.toBase64);
+                        //Ignore fields
+                        op.ignoreChanges = ['admin.password', 'admin.passwordMtime'];
+                    }
+                    if (o.metadata.name === 'argo-cd-redis') {
+                        o.data['redis-password'] = (0, Random_1.randomPassword)({
+                            name: `${name}-redis-password`,
+                            policy: false,
+                            options: { special: false },
+                        }).result.apply(Helpers_1.toBase64);
+                    }
+                }
+            },
+        ],
+    }, { dependsOn: ns, provider: others.provider });
+    if (ingressConfig) {
+        const ingressProps = {
+            ...ingressConfig,
+            className: ingressConfig.className || 'nginx',
+            name: `${name}-ingress`.toLowerCase(),
+            hostNames: [ingressConfig.hostName],
+            tlsSecretName: ingressConfig.tlsSecretName ||
+                (0, CertHelper_1.getTlsName)(ingressConfig.certManagerIssuer
+                    ? (0, Helpers_1.getDomainFromUrl)(ingressConfig.hostName)
+                    : (0, Helpers_1.getRootDomainFromUrl)(ingressConfig.hostName), Boolean(ingressConfig.certManagerIssuer)),
+            proxy: { backendProtocol: 'HTTPS' },
+            pathType: 'ImplementationSpecific',
+            service: {
+                metadata: { name: 'argo-cd-server', namespace },
+                spec: { ports: [{ name: 'https' }] },
+            },
+            ...others,
+            dependsOn: ns,
+        };
+        (0, Ingress_1.NginxIngress)(ingressProps);
+    }
+};
+//# sourceMappingURL=data:application/json;base64,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

package/KubeX/Tools/Dapr/Storage.d.ts

@@ -0,0 +1,66 @@
+import { K8sArgs } from '../../types';
+import * as k8s from '@pulumi/kubernetes';
+import { Input } from '@pulumi/pulumi';
+export interface DaprStorage {
+    inMemory?: boolean;
+    azureBlobStorage?: {
+        accountName: Input<string>;
+        accountKey: Input<string>;
+        containerName: Input<string>;
+    };
+    azureTableStorage?: {
+        accountName: Input<string>;
+        accountKey: Input<string>;
+        tableName: Input<string>;
+    };
+    azureCosmosDb?: {
+        url: Input<string>;
+        masterKey: Input<string>;
+        database: Input<string>;
+        collection: Input<string>;
+    };
+    mongoDb?: {
+        host: Input<string>;
+        username: Input<string>;
+        password: Input<string>;
+        databaseName: Input<string>;
+        collectionName: Input<string>;
+        params?: Input<string>;
+        actorStateStore?: boolean;
+    };
+    mySql?: {
+        connectionString: Input<string>;
+        schemaName: Input<string>;
+        tableName: Input<string>;
+        pemContents?: Input<string>;
+        actorStateStore?: boolean;
+    };
+    postgreSql?: {
+        connectionString: Input<string>;
+    };
+    redis?: {
+        redisHost: Input<string>;
+        redisPassword: Input<string>;
+        enableTLS?: boolean;
+    };
+    rethinkDb?: {
+        address: Input<string>;
+        database: Input<string>;
+        table?: Input<string>;
+        username: Input<string>;
+        password: Input<string>;
+        archive?: boolean;
+    };
+    sqlServer?: {
+        connectionString: Input<string>;
+        tableName: Input<string>;
+        schema?: Input<string>;
+    };
+}
+interface Props extends K8sArgs {
+    name: string;
+    namespace: Input<string>;
+    storage: DaprStorage;
+}
+declare const _default: ({ name, namespace, storage, ...others }: Props) => k8s.apiextensions.CustomResource;
+export default _default;

package/KubeX/Tools/Dapr/Storage.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const k8s = require("@pulumi/kubernetes");
+const KsSecret_1 = require("../../Core/KsSecret");
+const secretKeys = [
+    'accountKey',
+    'masterKey',
+    'username',
+    'password',
+    'connectionString',
+    'redisPassword',
+];
+const getStateName = (storage) => {
+    if (storage.azureBlobStorage)
+        return 'state.azure.blobstorage';
+    if (storage.azureTableStorage)
+        return 'state.azure.tablestorage';
+    if (storage.azureCosmosDb)
+        return 'state.azure.cosmosdb';
+    if (storage.mongoDb)
+        return 'state.mongodb';
+    if (storage.mySql)
+        return 'state.mysql';
+    if (storage.postgreSql)
+        return 'state.postgresql';
+    if (storage.redis)
+        return 'state.redis';
+    if (storage.rethinkDb)
+        return 'state.rethinkdb';
+    if (storage.sqlServer)
+        return 'state.sqlserver';
+    //Default
+    return 'state.in-memory';
+};
+const getSpecMetadata = (storage, secretName) => {
+    const secrets = {};
+    const metadata = new Array();
+    const firstStore = Object.values(storage).filter((v) => Boolean(v))[0];
+    if (firstStore && typeof firstStore !== 'boolean') {
+        Object.keys(firstStore).forEach((k) => {
+            const v = firstStore[k];
+            if (secretKeys.includes(k)) {
+                secrets[k] = v;
+                metadata.push({
+                    name: k,
+                    secretKeyRef: { name: secretName, key: k },
+                });
+            }
+            else
+                metadata.push({ name: k, value: v });
+        });
+    }
+    return { secrets, metadata };
+};
+exports.default = ({ name, namespace, storage, ...others }) => {
+    const { secrets, metadata } = getSpecMetadata(storage, name);
+    const spec = {
+        version: 'v1',
+        type: getStateName(storage),
+        metadata,
+    };
+    (0, KsSecret_1.default)({ name, namespace, stringData: secrets, ...others });
+    return new k8s.apiextensions.CustomResource(name, {
+        apiVersion: 'dapr.io/v1alpha1',
+        kind: 'Component',
+        metadata: { name, namespace },
+        spec,
+    }, others);
+};
+//# sourceMappingURL=data:application/json;base64,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

package/KubeX/Tools/Dapr/index.d.ts

@@ -0,0 +1,10 @@
+import { K8sArgs } from '../../types';
+import * as k8s from '@pulumi/kubernetes';
+import { DaprStorage } from './Storage';
+interface Props extends K8sArgs {
+    name?: string;
+    version?: string;
+    storage: DaprStorage;
+}
+declare const _default: ({ name, version, storage, provider, dependsOn, }: Props) => Promise<k8s.helm.v3.Chart>;
+export default _default;

package/KubeX/Tools/Dapr/index.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const k8s = require("@pulumi/kubernetes");
+const Namespace_1 = require("../../Core/Namespace");
+const Storage_1 = require("./Storage");
+const AzureEnv_1 = require("../../../Common/AzureEnv");
+exports.default = async ({ name = 'dapr', version = '1.10', storage, provider, dependsOn, }) => {
+    const ns = (0, Namespace_1.default)({ name: 'dapr-system', provider, dependsOn });
+    const dapr = new k8s.helm.v3.Chart(name, {
+        namespace: ns.metadata.name,
+        chart: 'dapr',
+        //version,
+        fetchOpts: { repo: 'https://dapr.github.io/helm-charts' },
+        skipAwait: true,
+        values: {
+            global: {
+                //tag: `${version}-mariner`,
+                ha: { enabled: !AzureEnv_1.isLocal && !AzureEnv_1.isDev },
+            },
+        },
+    }, { dependsOn: ns, provider });
+    (0, Storage_1.default)({
+        name: `${name}-storage`,
+        namespace: ns.metadata.name,
+        storage,
+        provider,
+        dependsOn: dapr,
+    });
+    return dapr;
+};
+//# sourceMappingURL=data:application/json;base64,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

package/KubeX/Tools/Echo-App.d.ts

@@ -0,0 +1,3 @@
+import { DefaultKsAppArgs } from '../types';
+declare const _default: ({ namespace, ingress, ...others }: DefaultKsAppArgs) => void;
+export default _default;

package/KubeX/Tools/Echo-App.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const Deployment_1 = require("../Deployment");
+exports.default = ({ namespace, ingress, ...others }) => {
+    const name = 'echo-app';
+    const image = 'ealen/echo-server';
+    const port = 80;
+    (0, Deployment_1.default)({
+        name,
+        namespace,
+        podConfig: {
+            image,
+            ports: { http: port },
+            resources: { requests: { memory: '1Mi', cpu: '1m' } },
+        },
+        deploymentConfig: { replicas: 1 },
+        ingressConfig: ingress,
+        ...others,
+    });
+};
+//# sourceMappingURL=data:application/json;base64,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

package/KubeX/Tools/Gitea/GiteaRepo.d.ts

@@ -0,0 +1,72 @@
+import { DefaultK8sArgs } from '../../types';
+import * as k8s from '@pulumi/kubernetes';
+import { Input } from '@pulumi/pulumi';
+import { KeyVaultInfo } from '../../../types';
+type CaptchaType = {
+    type: 'image' | 'recaptcha' | 'hcaptcha' | 'mcaptcha' | 'cfturnstile';
+    siteKey: Input<string>;
+    secret: Input<string>;
+    url?: Input<string>;
+};
+type GroupMapType = {
+    azureGroupId: Input<string>;
+    giteaOrganization: Input<string>;
+    giteaTeam: Input<string>;
+};
+type GroupMapsType = Array<GroupMapType>;
+interface HarborRepoProps extends DefaultK8sArgs {
+    vaultInfo?: KeyVaultInfo;
+    storageClass: Input<string>;
+    host: string;
+    auth?: {
+        localAdmin?: {
+            username: string;
+            email: string;
+        };
+        disableRegistration?: boolean;
+        enableAzureAD?: {
+            enabled: true;
+            groupMap?: GroupMapsType;
+        };
+        oauth?: {
+            name: string;
+            iconUrl?: Input<string>;
+            key: Input<string>;
+            secret: Input<string>;
+            scopes?: Input<string>;
+            autoDiscoverUrl?: Input<string>;
+            useCustomUrls?: Input<string>;
+            customAuthUrl?: Input<string>;
+            customTokenUrl?: Input<string>;
+            customProfileUrl?: Input<string>;
+            customEmailUrl?: Input<string>;
+        };
+        ldap?: {
+            name: string;
+            iconUrl?: Input<string>;
+            securityProtocol: Input<string>;
+            host: Input<string>;
+            port: Input<string>;
+            userSearchBase: Input<string>;
+            userFilter: Input<string>;
+            adminFilter: Input<string>;
+            emailAttribute: Input<string>;
+            bindDn: Input<string>;
+            bindPassword: Input<string>;
+            usernameAttribute: Input<string>;
+            publicSSHKeyAttribute: Input<string>;
+        };
+    };
+    captcha?: CaptchaType;
+    enabledActions?: boolean;
+    postgres: {
+        host: Input<string>;
+        port: Input<number>;
+        database: Input<string>;
+        username: Input<string>;
+        password: Input<string>;
+        sslmode?: boolean;
+    };
+}
+declare const _default: ({ name, namespace, host, auth, captcha, storageClass, postgres, enabledActions, vaultInfo, provider, dependsOn, }: HarborRepoProps) => k8s.helm.v3.Chart;
+export default _default;