@go-to-k/cdkd 0.56.0 → 0.57.0

package/dist/cli.js

@@ -27859,6 +27859,10 @@ import {
   DeleteLoadBalancerCommand,
   DescribeLoadBalancersCommand as DescribeLoadBalancersCommand2,
   DescribeLoadBalancerAttributesCommand,
+  ModifyLoadBalancerAttributesCommand,
+  SetSubnetsCommand,
+  SetSecurityGroupsCommand,
+  SetIpAddressTypeCommand,
   CreateTargetGroupCommand,
   DeleteTargetGroupCommand,
   ModifyTargetGroupCommand,
@@ -27919,7 +27923,9 @@ var ELBv2Provider = class {
         "DefaultActions",
         "Port",
         "Protocol",
-        "SslPolicy"
+        "SslPolicy",
+        "AlpnPolicy",
+        "MutualAuthentication"
       ])
     ]
   ]);
@@ -28027,7 +28033,6 @@ var ELBv2Provider = class {
       this.logger.debug(`Successfully created LoadBalancer ${logicalId}: ${lb.LoadBalancerArn}`);
       const lbAttributes = properties["LoadBalancerAttributes"];
       if (lbAttributes && lbAttributes.length > 0) {
-        const { ModifyLoadBalancerAttributesCommand } = await import("@aws-sdk/client-elastic-load-balancing-v2");
         await this.getClient().send(
           new ModifyLoadBalancerAttributesCommand({
             LoadBalancerArn: lb.LoadBalancerArn,
@@ -28063,42 +28068,95 @@ var ELBv2Provider = class {
     }
   }
   async updateLoadBalancer(logicalId, physicalId, _resourceType, properties, previousProperties) {
-    const newAttrs = properties["LoadBalancerAttributes"] ?? [];
-    const oldAttrs = previousProperties["LoadBalancerAttributes"] ?? [];
-    const stripAttrs = (p) => {
-      const { LoadBalancerAttributes: _, ...rest } = p;
-      return rest;
+    const handledKeys = /* @__PURE__ */ new Set([
+      "LoadBalancerAttributes",
+      "Subnets",
+      "SubnetMappings",
+      "SecurityGroups",
+      "IpAddressType",
+      "Tags"
+    ]);
+    const stripHandled = (p) => {
+      const out = {};
+      for (const [k, v] of Object.entries(p)) {
+        if (!handledKeys.has(k))
+          out[k] = v;
+      }
+      return out;
     };
-    if (JSON.stringify(stripAttrs(properties)) !== JSON.stringify(stripAttrs(previousProperties))) {
+    if (JSON.stringify(stripHandled(properties)) !== JSON.stringify(stripHandled(previousProperties))) {
       throw new ResourceUpdateNotSupportedError(
         "AWS::ElasticLoadBalancingV2::LoadBalancer",
         logicalId,
-        "ELBv2 LoadBalancer in-place updates are only supported for LoadBalancerAttributes; for Name / Type / Scheme / Subnets / SecurityGroups / IpAddressType / Tags, re-deploy with cdkd deploy --replace, or destroy + redeploy the stack"
+        "ELBv2 LoadBalancer in-place updates are supported for LoadBalancerAttributes / Subnets / SubnetMappings / SecurityGroups / IpAddressType / Tags only; for Name / Type / Scheme, re-deploy with cdkd deploy --replace, or destroy + redeploy the stack"
       );
     }
-    const newMap = new Map(newAttrs.map((a) => [a.Key, a.Value]));
-    const oldMap = new Map(oldAttrs.map((a) => [a.Key, a.Value]));
-    const submitted = [];
-    for (const [k, v] of newMap) {
-      if (oldMap.get(k) !== v)
-        submitted.push({ Key: k, Value: v });
-    }
-    for (const [k] of oldMap) {
-      if (!newMap.has(k))
-        submitted.push({ Key: k, Value: "" });
-    }
-    if (submitted.length > 0) {
-      const { ModifyLoadBalancerAttributesCommand } = await import("@aws-sdk/client-elastic-load-balancing-v2");
+    const newAttrs = properties["LoadBalancerAttributes"] ?? [];
+    const oldAttrs = previousProperties["LoadBalancerAttributes"] ?? [];
+    const newAttrMap = new Map(newAttrs.map((a) => [a.Key, a.Value]));
+    const oldAttrMap = new Map(oldAttrs.map((a) => [a.Key, a.Value]));
+    const submittedAttrs = [];
+    for (const [k, v] of newAttrMap) {
+      if (oldAttrMap.get(k) !== v)
+        submittedAttrs.push({ Key: k, Value: v });
+    }
+    for (const [k] of oldAttrMap) {
+      if (!newAttrMap.has(k))
+        submittedAttrs.push({ Key: k, Value: "" });
+    }
+    if (submittedAttrs.length > 0) {
       await this.getClient().send(
         new ModifyLoadBalancerAttributesCommand({
           LoadBalancerArn: physicalId,
-          Attributes: submitted
+          Attributes: submittedAttrs
         })
       );
       this.logger.debug(
-        `Applied ${submitted.length} LoadBalancerAttributes change(s) for ${logicalId}`
+        `Applied ${submittedAttrs.length} LoadBalancerAttributes change(s) for ${logicalId}`
       );
     }
+    const newSubnets = properties["Subnets"];
+    const oldSubnets = previousProperties["Subnets"];
+    const newMappings = properties["SubnetMappings"];
+    const oldMappings = previousProperties["SubnetMappings"];
+    const subnetsChanged = JSON.stringify(newSubnets) !== JSON.stringify(oldSubnets);
+    const mappingsChanged = JSON.stringify(newMappings) !== JSON.stringify(oldMappings);
+    if (subnetsChanged || mappingsChanged) {
+      await this.getClient().send(
+        new SetSubnetsCommand({
+          LoadBalancerArn: physicalId,
+          ...newMappings && newMappings.length > 0 ? { SubnetMappings: newMappings } : { Subnets: newSubnets }
+        })
+      );
+      this.logger.debug(`Updated Subnets / SubnetMappings for ${logicalId}`);
+    }
+    const newSGs = properties["SecurityGroups"];
+    const oldSGs = previousProperties["SecurityGroups"];
+    if (JSON.stringify(newSGs) !== JSON.stringify(oldSGs)) {
+      await this.getClient().send(
+        new SetSecurityGroupsCommand({
+          LoadBalancerArn: physicalId,
+          SecurityGroups: newSGs ?? []
+        })
+      );
+      this.logger.debug(`Updated SecurityGroups for ${logicalId}`);
+    }
+    const newIpType = properties["IpAddressType"];
+    const oldIpType = previousProperties["IpAddressType"];
+    if (newIpType !== void 0 && newIpType !== oldIpType) {
+      await this.getClient().send(
+        new SetIpAddressTypeCommand({
+          LoadBalancerArn: physicalId,
+          IpAddressType: newIpType
+        })
+      );
+      this.logger.debug(`Updated IpAddressType for ${logicalId}`);
+    }
+    await this.applyTagDiff(
+      physicalId,
+      previousProperties["Tags"],
+      properties["Tags"]
+    );
     return { physicalId, wasReplaced: false };
   }
   async deleteLoadBalancer(logicalId, physicalId, resourceType, context) {
@@ -28270,6 +28328,8 @@ var ELBv2Provider = class {
       const certificates = this.convertCertificates(
         properties["Certificates"]
       );
+      const alpnPolicy = properties["AlpnPolicy"];
+      const mutualAuth = properties["MutualAuthentication"];
       const response = await this.getClient().send(
         new CreateListenerCommand({
           LoadBalancerArn: properties["LoadBalancerArn"],
@@ -28278,6 +28338,8 @@ var ELBv2Provider = class {
           SslPolicy: properties["SslPolicy"],
           DefaultActions: defaultActions ?? [],
           ...certificates && { Certificates: certificates },
+          ...alpnPolicy && alpnPolicy.length > 0 && { AlpnPolicy: alpnPolicy },
+          ...mutualAuth !== void 0 && { MutualAuthentication: mutualAuth },
           ...tags.length > 0 && { Tags: tags }
         })
       );
@@ -28312,6 +28374,8 @@ var ELBv2Provider = class {
       const certificates = this.convertCertificates(
         properties["Certificates"]
       );
+      const alpnPolicy = properties["AlpnPolicy"];
+      const mutualAuth = properties["MutualAuthentication"];
       await this.getClient().send(
         new ModifyListenerCommand({
           ListenerArn: physicalId,
@@ -28319,7 +28383,15 @@ var ELBv2Provider = class {
           Protocol: properties["Protocol"],
           SslPolicy: properties["SslPolicy"],
           ...defaultActions && { DefaultActions: defaultActions },
-          ...certificates && { Certificates: certificates }
+          ...certificates && { Certificates: certificates },
+          // AlpnPolicy is a TLS-listener-only field; only forward it
+          // when the diff actually carries values (CFn template-side it
+          // is an array of one entry). An empty array would be rejected
+          // by AWS on non-TLS listeners.
+          ...alpnPolicy && alpnPolicy.length > 0 && { AlpnPolicy: alpnPolicy },
+          // MutualAuthentication is HTTPS-listener-only. Forward when
+          // the user templated it; AWS will reject on non-HTTPS.
+          ...mutualAuth !== void 0 && { MutualAuthentication: mutualAuth }
         })
       );
       await this.applyTagDiff(
@@ -28606,6 +28678,8 @@ var ELBv2Provider = class {
     result["DefaultActions"] = (listener.DefaultActions ?? []).map(
       (a) => a
     );
+    result["AlpnPolicy"] = listener.AlpnPolicy ?? [];
+    result["MutualAuthentication"] = listener.MutualAuthentication ?? {};
     await this.attachTags(result, physicalId);
     return result;
   }
@@ -46176,7 +46250,7 @@ function reorderArgs(argv) {
 }
 async function main() {
   const program = new Command14();
-  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.56.0");
+  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.57.0");
   program.addCommand(createBootstrapCommand());
   program.addCommand(createSynthCommand());
   program.addCommand(createListCommand());