@fnndsc/stratus 0.0.0 → 0.2.0

package/dist/cloud/oci/resourceMap.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @file OCI resource records as the driver's generic kinds.
+ *
+ * Every OCI resource answers a display name, an OCID, an upper-case
+ * lifecycle state and two tag maps; these become the fields every kind has.
+ * What is OCI's own (a VCN's CIDR blocks, an NSG's rules) stays in `raw`,
+ * which the tree shows as `info.json`.
+ *
+ * @module
+ */
+import type { CloudResource, ResourceCounts, ResourceKind } from '../driver.js';
+import type { OciResourceRecord, OciSearchRecord } from './resourceApi.js';
+/** Resource Search's type names, as the tree's kinds. */
+export declare const OCI_SEARCH_KINDS: Readonly<Record<string, ResourceKind>>;
+/**
+ * The fields every kind has, from an OCI record.
+ *
+ * @param record - The record.
+ * @param region - The region it was asked in.
+ * @returns The generic resource.
+ */
+export declare function resource_ofRecord(record: OciResourceRecord, region: string): CloudResource;
+/**
+ * The Resource Search query that counts a compartment's resources of every
+ * kind the tree shows.
+ *
+ * @param compartmentId - The compartment.
+ * @returns The structured query.
+ */
+export declare function searchQuery_of(compartmentId: string): string;
+/**
+ * A search's hits counted by kind, gone resources left out.
+ *
+ * @param hits - The hits.
+ * @returns The counts.
+ */
+export declare function searchCounts_of(hits: ReadonlyArray<OciSearchRecord>): ResourceCounts;
+/**
+ * Sorts resources by name, the order every listing keeps.
+ *
+ * @param resources - The resources.
+ * @returns A sorted copy.
+ */
+export declare function byName_sort<T extends CloudResource>(resources: ReadonlyArray<T>): T[];

package/dist/cloud/oci/resourceMap.js

@@ -0,0 +1,70 @@
+import { ociTags_flatten } from './driver.js';
+/** Resource Search's type names, as the tree's kinds. */
+export const OCI_SEARCH_KINDS = {
+    Instance: 'instances',
+    Vcn: 'networks',
+    Subnet: 'subnets',
+    NetworkSecurityGroup: 'securitygroups',
+    LoadBalancer: 'loadbalancers',
+    Volume: 'volumes',
+    BootVolume: 'volumes',
+    Bucket: 'buckets',
+    CustomerDnsZone: 'dns',
+};
+/** The states a search leaves out: what is gone. */
+const GONE_STATES = ['TERMINATED', 'DELETED'];
+/**
+ * The fields every kind has, from an OCI record.
+ *
+ * @param record - The record.
+ * @param region - The region it was asked in.
+ * @returns The generic resource.
+ */
+export function resource_ofRecord(record, region) {
+    return {
+        name: record.displayName,
+        id: record.id,
+        state: record.lifecycleState.toLowerCase(),
+        region,
+        created: record.timeCreated,
+        tags: ociTags_flatten(record.freeformTags, record.definedTags),
+        raw: record.raw,
+    };
+}
+/**
+ * The Resource Search query that counts a compartment's resources of every
+ * kind the tree shows.
+ *
+ * @param compartmentId - The compartment.
+ * @returns The structured query.
+ */
+export function searchQuery_of(compartmentId) {
+    const types = Object.keys(OCI_SEARCH_KINDS).map((type) => type.toLowerCase()).join(', ');
+    return `query ${types} resources where compartmentId = '${compartmentId}'`;
+}
+/**
+ * A search's hits counted by kind, gone resources left out.
+ *
+ * @param hits - The hits.
+ * @returns The counts.
+ */
+export function searchCounts_of(hits) {
+    const counts = {};
+    for (const hit of hits) {
+        const kind = OCI_SEARCH_KINDS[hit.resourceType];
+        if (kind === undefined || GONE_STATES.includes(hit.lifecycleState.toUpperCase()))
+            continue;
+        counts[kind] = (counts[kind] ?? 0) + 1;
+    }
+    return counts;
+}
+/**
+ * Sorts resources by name, the order every listing keeps.
+ *
+ * @param resources - The resources.
+ * @returns A sorted copy.
+ */
+export function byName_sort(resources) {
+    return [...resources].sort((a, b) => a.name.localeCompare(b.name));
+}
+//# sourceMappingURL=resourceMap.js.map

package/dist/cloud/oci/resourceMap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceMap.js","sourceRoot":"","sources":["../../../src/cloud/oci/resourceMap.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,yDAAyD;AACzD,MAAM,CAAC,MAAM,gBAAgB,GAA2C;IACtE,QAAQ,EAAE,WAAW;IACrB,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,SAAS;IACjB,oBAAoB,EAAE,gBAAgB;IACtC,YAAY,EAAE,eAAe;IAC7B,MAAM,EAAE,SAAS;IACjB,UAAU,EAAE,SAAS;IACrB,MAAM,EAAE,SAAS;IACjB,eAAe,EAAE,KAAK;CACvB,CAAC;AAEF,oDAAoD;AACpD,MAAM,WAAW,GAA0B,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB,EAAE,MAAc;IACzE,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,WAAW;QACxB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE;QAC1C,MAAM;QACN,OAAO,EAAE,MAAM,CAAC,WAAW;QAC3B,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC;QAC9D,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,aAAqB;IAClD,MAAM,KAAK,GAAW,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjH,OAAO,SAAS,KAAK,qCAAqC,aAAa,GAAG,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAoC;IAClE,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAA6B,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1E,IAAI,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAC3F,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAA0B,SAA2B;IAC9E,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAI,EAAE,CAAI,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACnF,CAAC"}

package/dist/cloud/oci/rmApi.d.ts

@@ -0,0 +1,74 @@
+/** The Terraform the stacks run: the newest Resource Manager offers. */
+export declare const RM_TERRAFORM_VERSION: string;
+/** A job as Resource Manager reports it. */
+export interface RmJobRecord {
+    readonly id: string;
+    /** `ACCEPTED`, `IN_PROGRESS`, `FAILED`, `SUCCEEDED`, `CANCELING`, `CANCELED`. */
+    readonly state: string;
+    /** Why it failed, in Resource Manager's words. */
+    readonly failure?: string;
+}
+/** A stack as Resource Manager reports it. */
+export interface RmStackRecord {
+    readonly id: string;
+    readonly displayName: string;
+    readonly state: string;
+    readonly compartmentId: string;
+}
+/** What a job is asked to do. */
+export type RmOperation = {
+    readonly kind: 'plan';
+} | {
+    readonly kind: 'apply';
+    readonly planJobId: string;
+} | {
+    readonly kind: 'import';
+    readonly stateBase64: string;
+} | {
+    readonly kind: 'destroy';
+};
+/** The Resource Manager calls, in one region. */
+export interface RmApi {
+    stack_create(request: {
+        compartmentId: string;
+        displayName: string;
+        description: string;
+        zipBase64: string;
+        variables: Record<string, string>;
+        tags: Record<string, string>;
+    }): Promise<RmStackRecord>;
+    stack_update(stackId: string, request: {
+        zipBase64?: string;
+        variables?: Record<string, string>;
+    }): Promise<void>;
+    stack_get(stackId: string): Promise<RmStackRecord>;
+    /** The stacks in a compartment carrying a freeform tag. */
+    stacks_tagged(compartmentId: string, tagKey: string): Promise<Array<RmStackRecord & {
+        tagValue: string;
+    }>>;
+    job_create(stackId: string, operation: RmOperation, displayName: string): Promise<RmJobRecord>;
+    job_get(jobId: string): Promise<RmJobRecord>;
+    /** Asks a job to stop; never forced. */
+    job_cancel(jobId: string): Promise<void>;
+    /** The job's log lines, oldest first. */
+    jobLog_read(jobId: string): Promise<string[]>;
+    /** A plan job's plan, as Terraform's JSON. */
+    jobPlan_read(jobId: string): Promise<unknown>;
+    /** An apply job's outputs, by name. */
+    jobOutputs_read(jobId: string): Promise<Record<string, string>>;
+    /** How many resources a stack's Terraform state holds. */
+    stackResources_count(stackId: string): Promise<number>;
+}
+/** How the calls authenticate: an API-key profile, as the read driver does. */
+export interface RmApiOptions {
+    readonly configFile?: string;
+    readonly profile?: string;
+    readonly region: string;
+}
+/**
+ * The Resource Manager calls over the SDK.
+ *
+ * @param options - The profile and the region.
+ * @returns The calls.
+ */
+export declare function rmApi_make(options: RmApiOptions): RmApi;

package/dist/cloud/oci/rmApi.js

@@ -0,0 +1,141 @@
+/**
+ * @file The Resource Manager calls the OCI builder makes: stacks made from
+ * a zip, plan, apply, import-state and destroy jobs, and what a job leaves
+ * (its state, its log, its plan as JSON, its outputs). Terraform runs inside
+ * OCI; nothing here runs a host program (docs/stratus.adoc, D3).
+ *
+ * Every call answers plain records, so the builder maps records and its
+ * tests replay recorded answers. One client per region. Only this folder
+ * imports an `oci-*` package (`lint:stratus-deps`).
+ *
+ * @module
+ */
+import * as common from 'oci-common';
+import * as resourcemanager from 'oci-resourcemanager';
+/** The Terraform the stacks run: the newest Resource Manager offers. */
+export const RM_TERRAFORM_VERSION = '1.5.x';
+/**
+ * A readable stream's whole text.
+ *
+ * @param value - The stream the SDK answered with.
+ * @returns Its text.
+ */
+async function stream_text(value) {
+    if (typeof value === 'string')
+        return value;
+    const chunks = [];
+    if (value !== null && typeof value === 'object' && Symbol.asyncIterator in value) {
+        for await (const chunk of value)
+            chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+        return Buffer.concat(chunks).toString('utf-8');
+    }
+    if (value !== null && typeof value === 'object' && 'getReader' in value) {
+        const reader = value.getReader();
+        for (;;) {
+            const read = await reader.read();
+            if (read.done)
+                break;
+            chunks.push(Buffer.from(read.value));
+        }
+        return Buffer.concat(chunks).toString('utf-8');
+    }
+    return String(value);
+}
+/**
+ * The Resource Manager calls over the SDK.
+ *
+ * @param options - The profile and the region.
+ * @returns The calls.
+ */
+export function rmApi_make(options) {
+    const provider = new common.ConfigFileAuthenticationDetailsProvider(options.configFile, options.profile);
+    const client = new resourcemanager.ResourceManagerClient({ authenticationDetailsProvider: provider });
+    client.regionId = options.region;
+    const job_of = (job) => ({
+        id: job.id ?? '',
+        state: String(job.lifecycleState ?? 'UNKNOWN'),
+        ...(job.failureDetails?.message !== undefined ? { failure: job.failureDetails.message } : {}),
+    });
+    const stack_of = (stack) => ({
+        id: stack.id ?? '', displayName: stack.displayName ?? '', state: String(stack.lifecycleState ?? 'UNKNOWN'), compartmentId: stack.compartmentId ?? '',
+    });
+    return {
+        async stack_create(request) {
+            const response = await client.createStack({
+                createStackDetails: {
+                    compartmentId: request.compartmentId,
+                    displayName: request.displayName,
+                    description: request.description,
+                    configSource: { configSourceType: 'ZIP_UPLOAD', zipFileBase64Encoded: request.zipBase64 },
+                    variables: request.variables,
+                    terraformVersion: RM_TERRAFORM_VERSION,
+                    freeformTags: request.tags,
+                },
+            });
+            return stack_of(response.stack);
+        },
+        async stack_update(stackId, request) {
+            await client.updateStack({
+                stackId,
+                updateStackDetails: {
+                    ...(request.zipBase64 !== undefined ? { configSource: { configSourceType: 'ZIP_UPLOAD', zipFileBase64Encoded: request.zipBase64 } } : {}),
+                    ...(request.variables !== undefined ? { variables: request.variables } : {}),
+                },
+            });
+        },
+        async stack_get(stackId) {
+            return stack_of((await client.getStack({ stackId })).stack);
+        },
+        async stacks_tagged(compartmentId, tagKey) {
+            const found = [];
+            for await (const stack of client.listAllStacks({ compartmentId })) {
+                const value = stack.freeformTags?.[tagKey];
+                if (value !== undefined)
+                    found.push({ ...stack_of(stack), tagValue: value });
+            }
+            return found;
+        },
+        async job_create(stackId, operation, displayName) {
+            const details = operation.kind === 'plan' ? { operation: 'PLAN' }
+                : operation.kind === 'apply' ? { operation: 'APPLY', executionPlanStrategy: 'FROM_PLAN_JOB_ID', executionPlanJobId: operation.planJobId }
+                    : operation.kind === 'import' ? { operation: 'IMPORT_TF_STATE', tfStateBase64Encoded: operation.stateBase64 }
+                        : { operation: 'DESTROY', executionPlanStrategy: 'AUTO_APPROVED' };
+            const response = await client.createJob({ createJobDetails: { stackId, displayName, jobOperationDetails: details } });
+            return job_of(response.job);
+        },
+        async job_get(jobId) {
+            return job_of((await client.getJob({ jobId })).job);
+        },
+        async job_cancel(jobId) {
+            await client.cancelJob({ jobId, isForced: false });
+        },
+        async jobLog_read(jobId) {
+            const lines = [];
+            for await (const entry of client.getAllJobLogs({ jobId }))
+                lines.push(entry.message ?? '');
+            return lines;
+        },
+        async jobPlan_read(jobId) {
+            const response = await client.getJobTfPlan({ jobId, tfPlanFormat: resourcemanager.requests.GetJobTfPlanRequest.TfPlanFormat.Json });
+            return JSON.parse(await stream_text(response.value));
+        },
+        async stackResources_count(stackId) {
+            const state = JSON.parse(await stream_text((await client.getStackTfState({ stackId })).value));
+            return (state.resources ?? []).filter((resource) => resource.mode !== 'data').reduce((sum, resource) => sum + (resource.instances?.length ?? 1), 0);
+        },
+        async jobOutputs_read(jobId) {
+            const outputs = {};
+            let page;
+            do {
+                const response = await client.listJobOutputs({ jobId, ...(page !== undefined ? { page } : {}) });
+                for (const output of response.jobOutputsCollection.items ?? []) {
+                    if (output.outputName !== undefined)
+                        outputs[output.outputName] = output.outputValue ?? '';
+                }
+                page = response.opcNextPage || undefined;
+            } while (page !== undefined);
+            return outputs;
+        },
+    };
+}
+//# sourceMappingURL=rmApi.js.map

package/dist/cloud/oci/rmApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rmApi.js","sourceRoot":"","sources":["../../../src/cloud/oci/rmApi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,MAAM,MAAM,YAAY,CAAC;AACrC,OAAO,KAAK,eAAe,MAAM,qBAAqB,CAAC;AAEvD,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAW,OAAO,CAAC;AAsDpD;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAI,KAAK,EAAE,CAAC;QACjF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAuC;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACpI,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;QACxE,MAAM,MAAM,GAAI,KAAoC,CAAC,SAAS,EAAE,CAAC;QACjE,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,OAAqB;IAC9C,MAAM,QAAQ,GAAmD,IAAI,MAAM,CAAC,uCAAuC,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACzJ,MAAM,MAAM,GAA0C,IAAI,eAAe,CAAC,qBAAqB,CAAC,EAAE,6BAA6B,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7I,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IACjC,MAAM,MAAM,GAAG,CAAC,GAA+B,EAAe,EAAE,CAAC,CAAC;QAChE,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,SAAS,CAAC;QAC9C,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9F,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,KAAyE,EAAiB,EAAE,CAAC,CAAC;QAC9G,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,SAAS,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;KACrJ,CAAC,CAAC;IACH,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,OAAO;YACxB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;gBACxC,kBAAkB,EAAE;oBAClB,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,YAAY,EAAE,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,OAAO,CAAC,SAAS,EAA+D;oBACtJ,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,gBAAgB,EAAE,oBAAoB;oBACtC,YAAY,EAAE,OAAO,CAAC,IAAI;iBAC3B;aACF,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO;YACjC,MAAM,MAAM,CAAC,WAAW,CAAC;gBACvB,OAAO;gBACP,kBAAkB,EAAE;oBAClB,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,OAAO,CAAC,SAAS,EAA+D,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtM,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7E;aACF,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,OAAO;YACrB,OAAO,QAAQ,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,aAAa,EAAE,MAAM;YACvC,MAAM,KAAK,GAAgD,EAAE,CAAC;YAC9D,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;gBAClE,MAAM,KAAK,GAAuB,KAAK,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC;gBAC/D,IAAI,KAAK,KAAK,SAAS;oBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW;YAC9C,MAAM,OAAO,GACX,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAA0D;gBACvG,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,SAAS,CAAC,SAAS,EAA2D;oBAChM,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,SAAS,CAAC,WAAW,EAAmE;wBAC5K,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB,EAAE,eAAe,EAA6D,CAAC;YACtI,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YACtH,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,OAAO,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,KAAK;YACpB,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK;YACrB,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAC3F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,KAAK;YACtB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe,CAAC,QAAQ,CAAC,mBAAmB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YACpI,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAY,CAAC;QAClE,CAAC;QACD,KAAK,CAAC,oBAAoB,CAAC,OAAO;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAoE,CAAC;YAClK,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAW,EAAE,QAAQ,EAAU,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/K,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,KAAK;YACzB,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,IAAwB,CAAC;YAC7B,GAAG,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACjG,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,oBAAoB,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;oBAC/D,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;wBAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;gBAC7F,CAAC;gBACD,IAAI,GAAG,QAAQ,CAAC,WAAW,IAAI,SAAS,CAAC;YAC3C,CAAC,QAAQ,IAAI,KAAK,SAAS,EAAE;YAC7B,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cloud/oci/stackVars.d.ts

@@ -0,0 +1,49 @@
+/**
+ * @file A new domain's stack variables: the spec in OCI's units, and the
+ * choices `harbor-oci` made for every build (its `tfvars_build`). Every value
+ * is a string, as Resource Manager takes them.
+ *
+ * The choices: the stack writes no DNS (the zone is long-lived and the dns
+ * step writes the three records), the attribution tag namespace lives in the
+ * domain's compartment, the API's load balancer is public, the Assisted
+ * Installer installs. With no workers only `compute_count` is set: the stack
+ * still reads `compute_shape` for the image, so its other compute variables
+ * keep their defaults and a compact cluster plans unchanged.
+ *
+ * @module
+ */
+import type { DomainSpec } from '../../domain/spec.js';
+/** Volume performance units per GB for each tier, as `harbor-oci` sets them. */
+export declare const TIER_VPUS: Readonly<Record<string, number>>;
+/** The OCI cloud controller and CSI driver release the stack installs. */
+export declare const OCI_DRIVER_VERSION: string;
+/**
+ * The flexible shape a family runs on, and its vCPU per OCPU.
+ *
+ * @param family - The family (`E5`).
+ * @returns The shape and its ratio.
+ * @throws Error - For a family with no flexible shape known.
+ */
+export declare function familyShape_of(family: string): {
+    shape: string;
+    vcpuPerOcpu: number;
+};
+/** What a new stack's variables are made from. */
+export interface StackVarsRequest {
+    readonly domain: string;
+    readonly spec: DomainSpec;
+    readonly tenancyId: string;
+    readonly compartmentId: string;
+    readonly region: string;
+    readonly baseDomain: string;
+    /** The discovery image's link; a secret. */
+    readonly isoLink: string;
+    readonly sshPublicKey: string;
+}
+/**
+ * A new domain's stack variables.
+ *
+ * @param request - The domain, its spec, where it goes, the image and the key.
+ * @returns The variables, each a string.
+ */
+export declare function stackVariables_build(request: StackVarsRequest): Record<string, string>;

package/dist/cloud/oci/stackVars.js

@@ -0,0 +1,70 @@
+import { SHAPE_TERMS } from './prices.js';
+/** Volume performance units per GB for each tier, as `harbor-oci` sets them. */
+export const TIER_VPUS = { balanced: 10, higher: 20, ultra: 100 };
+/** The OCI cloud controller and CSI driver release the stack installs. */
+export const OCI_DRIVER_VERSION = 'v1.34.0';
+/**
+ * The flexible shape a family runs on, and its vCPU per OCPU.
+ *
+ * @param family - The family (`E5`).
+ * @returns The shape and its ratio.
+ * @throws Error - For a family with no flexible shape known.
+ */
+export function familyShape_of(family) {
+    const found = Object.entries(SHAPE_TERMS).find(([, terms]) => terms.family === family);
+    if (found === undefined)
+        throw new Error(`${family}: no flexible shape known for this family`);
+    return { shape: found[0], vcpuPerOcpu: found[1].vcpuPerOcpu };
+}
+/**
+ * One pool as the stack's `<prefix>_*` variables.
+ *
+ * @param prefix - `control_plane` or `compute`.
+ * @param pool - The pool.
+ * @param family - The family.
+ * @returns The variables.
+ * @throws Error - When the vCPU is not whole OCPUs, or the tier is unknown.
+ */
+function pool_variables(prefix, pool, family) {
+    const { shape, vcpuPerOcpu } = familyShape_of(family);
+    if (pool.vcpu % vcpuPerOcpu !== 0)
+        throw new Error(`${prefix}: ${pool.vcpu} vCPU is not whole OCPUs on ${family} (${vcpuPerOcpu} vCPU an OCPU)`);
+    const vpus = TIER_VPUS[pool.bootTier];
+    if (vpus === undefined)
+        throw new Error(`${prefix}: boot tier ${pool.bootTier} is not one of ${Object.keys(TIER_VPUS).join(', ')}`);
+    return {
+        [`${prefix}_count`]: String(pool.count),
+        [`${prefix}_shape`]: shape,
+        [`${prefix}_ocpu`]: String(pool.vcpu / vcpuPerOcpu),
+        [`${prefix}_memory`]: String(pool.ramGib),
+        [`${prefix}_boot_size`]: String(pool.bootGib),
+        [`${prefix}_boot_volume_vpus_per_gb`]: String(vpus),
+    };
+}
+/**
+ * A new domain's stack variables.
+ *
+ * @param request - The domain, its spec, where it goes, the image and the key.
+ * @returns The variables, each a string.
+ */
+export function stackVariables_build(request) {
+    return {
+        tenancy_ocid: request.tenancyId,
+        compartment_ocid: request.compartmentId,
+        tag_namespace_compartment_ocid_resource_tagging: request.compartmentId,
+        region: request.region,
+        cluster_name: request.domain,
+        zone_dns: request.baseDomain,
+        installation_method: 'Assisted',
+        openshift_image_source_uri: request.isoLink,
+        public_ssh_key: request.sshPublicKey,
+        ...pool_variables('control_plane', request.spec.controlPlane, request.spec.family),
+        ...(request.spec.workers.count > 0 ? pool_variables('compute', request.spec.workers, request.spec.family) : { compute_count: '0' }),
+        create_public_dns: 'false',
+        create_private_dns: 'false',
+        enable_public_api_lb: 'true',
+        enable_public_apps_lb: 'true',
+        oci_driver_version: OCI_DRIVER_VERSION,
+    };
+}
+//# sourceMappingURL=stackVars.js.map

package/dist/cloud/oci/stackVars.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stackVars.js","sourceRoot":"","sources":["../../../src/cloud/oci/stackVars.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,gFAAgF;AAChF,MAAM,CAAC,MAAM,SAAS,GAAqC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAEpG,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAW,SAAS,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAChG,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,2CAA2C,CAAC,CAAC;IAC/F,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,MAAc,EAAE,IAAc,EAAE,MAAc;IACpE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,IAAI,GAAG,WAAW,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,KAAK,IAAI,CAAC,IAAI,+BAA+B,MAAM,KAAK,WAAW,gBAAgB,CAAC,CAAC;IACjJ,MAAM,IAAI,GAAuB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,eAAe,IAAI,CAAC,QAAQ,kBAAkB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpI,OAAO;QACL,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACvC,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,KAAK;QAC1B,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACnD,CAAC,GAAG,MAAM,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACzC,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7C,CAAC,GAAG,MAAM,0BAA0B,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC;KACpD,CAAC;AACJ,CAAC;AAeD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAyB;IAC5D,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,SAAS;QAC/B,gBAAgB,EAAE,OAAO,CAAC,aAAa;QACvC,+CAA+C,EAAE,OAAO,CAAC,aAAa;QACtE,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,QAAQ,EAAE,OAAO,CAAC,UAAU;QAC5B,mBAAmB,EAAE,UAAU;QAC/B,0BAA0B,EAAE,OAAO,CAAC,OAAO;QAC3C,cAAc,EAAE,OAAO,CAAC,YAAY;QACpC,GAAG,cAAc,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;QACnI,iBAAiB,EAAE,OAAO;QAC1B,kBAAkB,EAAE,OAAO;QAC3B,oBAAoB,EAAE,MAAM;QAC5B,qBAAqB,EAAE,MAAM;QAC7B,kBAAkB,EAAE,kBAAkB;KACvC,CAAC;AACJ,CAAC"}

package/dist/cluster/fakeKube.d.ts

@@ -0,0 +1,43 @@
+/**
+ * @file A fake cluster answering the Kubernetes API calls `verify` makes, a
+ * healthy one unless told otherwise, and the fake world's DNS and HTTPS
+ * around it. What `stratus --fake` verifies against, and the tests.
+ *
+ * @module
+ */
+import type { KubeApi } from './kube.js';
+import type { VerifyReach } from '../commands/verify.js';
+/** One fake node. */
+export interface FakeNode {
+    readonly name: string;
+    readonly zone: string;
+    readonly shape: string;
+}
+/** How the fake cluster answers. */
+export interface FakeClusterOptions {
+    readonly nodes: ReadonlyArray<FakeNode>;
+    /** Operators that are not settled. */
+    readonly degraded?: ReadonlyArray<string>;
+    /** Whether the volume probe's pod succeeds. */
+    readonly probeSucceeds?: boolean;
+}
+/** A fake cluster, keeping what the volume probe makes. */
+export declare class FakeKube implements KubeApi {
+    private readonly options;
+    readonly made: string[];
+    readonly deleted: string[];
+    private readonly namespaces;
+    constructor(options: FakeClusterOptions);
+    json_get(path: string): Promise<unknown>;
+    text_get(path: string): Promise<string>;
+    json_post(path: string, body: unknown): Promise<unknown>;
+    delete(path: string): Promise<void>;
+}
+/**
+ * The fake world's reach for `verify`: a healthy cluster of the given nodes,
+ * the fake build's load-balancer addresses in DNS, a console that answers.
+ *
+ * @param nodes_of - The nodes of a domain's cluster, from its kubeconfig's text.
+ * @returns The reach.
+ */
+export declare function fakeVerifyReach(nodes_of: (kubeconfig: string) => FakeNode[]): VerifyReach;

package/dist/cluster/fakeKube.js

@@ -0,0 +1,86 @@
+import { KubeError } from './kube.js';
+/** A fake cluster, keeping what the volume probe makes. */
+export class FakeKube {
+    options;
+    made = [];
+    deleted = [];
+    namespaces = new Set();
+    constructor(options) {
+        this.options = options;
+    }
+    async json_get(path) {
+        if (path === '/apis/config.openshift.io/v1/clusterversions/version') {
+            return { status: { desired: { version: '4.22.3' }, conditions: [{ type: 'Available', status: 'True' }, { type: 'Failing', status: 'False' }] } };
+        }
+        if (path === '/api/v1/nodes') {
+            return {
+                items: this.options.nodes.map((node) => ({
+                    metadata: { name: node.name, labels: { 'node.kubernetes.io/instance-type': node.shape, 'topology.kubernetes.io/zone': node.zone } },
+                    spec: { providerID: `oci://ocid1.instance.${node.name}` },
+                    status: { conditions: [{ type: 'Ready', status: 'True' }], allocatable: { cpu: '7500m' } },
+                })),
+            };
+        }
+        if (path === '/apis/config.openshift.io/v1/clusteroperators') {
+            const names = ['console', 'dns', 'ingress', 'storage', ...(this.options.degraded ?? [])];
+            return {
+                items: names.map((name) => ({
+                    metadata: { name },
+                    status: { conditions: (this.options.degraded ?? []).includes(name)
+                            ? [{ type: 'Available', status: 'True' }, { type: 'Progressing', status: 'False' }, { type: 'Degraded', status: 'True' }]
+                            : [{ type: 'Available', status: 'True' }, { type: 'Progressing', status: 'False' }, { type: 'Degraded', status: 'False' }] },
+                })),
+            };
+        }
+        if (path === '/apis/storage.k8s.io/v1/storageclasses') {
+            return { items: [{ metadata: { name: 'oci-bv', annotations: { 'storageclass.kubernetes.io/is-default-class': 'true' } } }, { metadata: { name: 'oci-bv-encrypted' } }] };
+        }
+        if (path === '/api/v1/pods') {
+            return { items: this.options.nodes.map((node) => ({ spec: { nodeName: node.name, containers: [{ resources: { requests: { cpu: '3' } } }] }, status: { phase: 'Running' } })) };
+        }
+        if (path === '/api/v1/namespaces/openshift-ingress-operator/secrets/router-ca') {
+            return { data: { 'tls.crt': Buffer.from('-----BEGIN CERTIFICATE-----\nfake\n-----END CERTIFICATE-----\n').toString('base64') } };
+        }
+        const pod = /^\/api\/v1\/namespaces\/([^/]+)\/pods\/probe$/.exec(path);
+        if (pod !== null && this.namespaces.has(pod[1]))
+            return { status: { phase: this.options.probeSucceeds === false ? 'Failed' : 'Succeeded' } };
+        throw new KubeError(404, `GET ${path}: HTTP 404 not found`);
+    }
+    async text_get(path) {
+        if (path === '/readyz')
+            return 'ok';
+        if (/\/pods\/probe\/log$/.test(path))
+            return 'stratus\n';
+        throw new KubeError(404, `GET ${path}: HTTP 404 not found`);
+    }
+    async json_post(path, body) {
+        this.made.push(path);
+        if (path === '/api/v1/namespaces')
+            this.namespaces.add(body.metadata.name);
+        return body;
+    }
+    async delete(path) {
+        const ns = /^\/api\/v1\/namespaces\/([^/]+)$/.exec(path);
+        if (ns === null || !this.namespaces.has(ns[1]))
+            throw new KubeError(404, `DELETE ${path}: HTTP 404 not found`);
+        this.namespaces.delete(ns[1]);
+        this.deleted.push(path);
+    }
+}
+/**
+ * The fake world's reach for `verify`: a healthy cluster of the given nodes,
+ * the fake build's load-balancer addresses in DNS, a console that answers.
+ *
+ * @param nodes_of - The nodes of a domain's cluster, from its kubeconfig's text.
+ * @returns The reach.
+ */
+export function fakeVerifyReach(nodes_of) {
+    return {
+        kube_make: (kubeconfig) => new FakeKube({ nodes: nodes_of(kubeconfig) }),
+        resolve: async (name) => [name.startsWith('api-int.') ? '10.0.0.11' : name.startsWith('api.') ? '10.0.0.10' : '10.0.0.12'],
+        https_status: async () => 200,
+        probeTimeoutMs: 1000,
+        pollMs: 0,
+    };
+}
+//# sourceMappingURL=fakeKube.js.map

package/dist/cluster/fakeKube.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fakeKube.js","sourceRoot":"","sources":["../../src/cluster/fakeKube.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAmBtC,2DAA2D;AAC3D,MAAM,OAAO,QAAQ;IAKU;IAJpB,IAAI,GAAa,EAAE,CAAC;IACpB,OAAO,GAAa,EAAE,CAAC;IACf,UAAU,GAAgB,IAAI,GAAG,EAAE,CAAC;IAErD,YAA6B,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAE5D,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,IAAI,IAAI,KAAK,sDAAsD,EAAE,CAAC;YACpE,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACnJ,CAAC;QACD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC;oBACjD,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,kCAAkC,EAAE,IAAI,CAAC,KAAK,EAAE,6BAA6B,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE;oBACnI,IAAI,EAAE,EAAE,UAAU,EAAE,wBAAwB,IAAI,CAAC,IAAI,EAAE,EAAE;oBACzD,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;iBAC3F,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,+CAA+C,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAa,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;YACnG,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;oBAClC,QAAQ,EAAE,EAAE,IAAI,EAAE;oBAClB,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;4BAChE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;4BACzH,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;iBAC/H,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,wCAAwC,EAAE,CAAC;YACtD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,6CAA6C,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3K,CAAC;QACD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3L,CAAC;QACD,IAAI,IAAI,KAAK,iEAAiE,EAAE,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACnI,CAAC;QACD,MAAM,GAAG,GAA4B,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChG,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAW,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACvJ,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,IAAI,sBAAsB,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,WAAW,CAAC;QACzD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,IAAI,sBAAsB,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAa;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,oBAAoB;YAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAE,IAAuC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/G,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,EAAE,GAA4B,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAW,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,UAAU,IAAI,sBAAsB,CAAC,CAAC;QACzH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAW,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,QAA4C;IAC1E,OAAO;QACL,SAAS,EAAE,CAAC,UAAkB,EAAW,EAAE,CAAC,IAAI,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACzF,OAAO,EAAE,KAAK,EAAE,IAAY,EAAqB,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;QACrJ,YAAY,EAAE,KAAK,IAAqB,EAAE,CAAC,GAAG;QAC9C,cAAc,EAAE,IAAI;QACpB,MAAM,EAAE,CAAC;KACV,CAAC;AACJ,CAAC"}

package/dist/cluster/kube.d.ts

@@ -0,0 +1,40 @@
+/** How a kubeconfig reaches its cluster: the server, its CA, and who we are. */
+export interface KubeAccess {
+    /** The API server's address. */
+    readonly server: string;
+    /** The CA that signs the server's certificate, PEM, or null to trust the system's. */
+    readonly ca: string | null;
+    /** A client certificate and key, PEM. */
+    readonly cert: string | null;
+    readonly key: string | null;
+    /** A bearer token. */
+    readonly token: string | null;
+}
+/** A Kubernetes API answer that was not a success. */
+export declare class KubeError extends Error {
+    readonly status: number;
+    /**
+     * @param status - The HTTP status.
+     * @param message - What the server said.
+     */
+    constructor(status: number, message: string);
+}
+/** The Kubernetes API, as `verify` calls it. */
+export interface KubeApi {
+    /** A path's JSON (`/api/v1/nodes`). */
+    json_get(path: string): Promise<unknown>;
+    /** A path's text (`/readyz`, a pod's log). */
+    text_get(path: string): Promise<string>;
+    /** Creates an object under a path. */
+    json_post(path: string, body: unknown): Promise<unknown>;
+    /** Deletes the object at a path. */
+    delete(path: string): Promise<void>;
+}
+/**
+ * Reads a kubeconfig: the current context's cluster and user.
+ *
+ * @param text - The kubeconfig.
+ * @returns How to reach the cluster.
+ * @throws Error - When it names no cluster to reach.
+ */
+export declare function kubeconfig_read(text: string): KubeAccess;