@gradientedge/cdk-utils 9.43.3 → 9.44.0

package/dist/src/lib/azure/common/constants.d.ts

@@ -2,3 +2,7 @@ export declare enum AzureRemoteBackend {
     local = "local",
     azurerm = "azurerm"
 }
+/**
+ * List of Azure resources that excludes tags
+ */
+export declare const RESOURCES_TO_EXCLUDE_TAGS: Set<string>;

package/dist/src/lib/azure/common/constants.js

@@ -1,8 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AzureRemoteBackend = void 0;
+exports.RESOURCES_TO_EXCLUDE_TAGS = exports.AzureRemoteBackend = void 0;
 var AzureRemoteBackend;
 (function (AzureRemoteBackend) {
     AzureRemoteBackend["local"] = "local";
     AzureRemoteBackend["azurerm"] = "azurerm";
 })(AzureRemoteBackend || (exports.AzureRemoteBackend = AzureRemoteBackend = {}));
+/**
+ * List of Azure resources that excludes tags
+ */
+exports.RESOURCES_TO_EXCLUDE_TAGS = new Set(['ApiManagementNamedValue']);

package/dist/src/lib/azure/common/index.d.ts

@@ -2,4 +2,5 @@ export * from './constants';
 export * from './construct';
 export * from './resource-name-formatter';
 export * from './stack';
+export * from './tagging';
 export * from './types';

package/dist/src/lib/azure/common/index.js

@@ -18,4 +18,5 @@ __exportStar(require("./constants"), exports);
 __exportStar(require("./construct"), exports);
 __exportStar(require("./resource-name-formatter"), exports);
 __exportStar(require("./stack"), exports);
+__exportStar(require("./tagging"), exports);
 __exportStar(require("./types"), exports);

package/dist/src/lib/azure/common/resource-name-formatter.js

@@ -26,7 +26,9 @@ class AzureResourceNameFormatter extends constructs_1.Construct {
             azureResourceNameElements.push(options?.globalSuffix ? this.props.globalSuffix : undefined);
         }
         azureResourceNameElements.push(this.props.stage);
-        return azureResourceNameElements.filter(Boolean).join('-');
+        return azureResourceNameElements
+            .filter(azureResourceNameElements => azureResourceNameElements != undefined)
+            .join('-');
     }
 }
 exports.AzureResourceNameFormatter = AzureResourceNameFormatter;

package/dist/src/lib/azure/common/stack.js

@@ -5,6 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CommonAzureStack = void 0;
 const fs_1 = __importDefault(require("fs"));
+const tagging_1 = require("./tagging");
 const app_root_path_1 = __importDefault(require("app-root-path"));
 const cdktf_1 = require("cdktf");
 const lodash_1 = __importDefault(require("lodash"));
@@ -32,6 +33,7 @@ class CommonAzureStack extends cdktf_1.TerraformStack {
         /* determine extra cdk stage contexts */
         this.determineStageContexts();
         this.props = this.determineConstructProps(props);
+        cdktf_1.Aspects.of(this).add(new tagging_1.TagsAddingAspect(this.props.defaultTags || {}));
     }
     /**
      * @summary Method to determine the core CDK construct properties injected via context cdktf.json

package/dist/src/lib/azure/common/tagging.d.ts

@@ -0,0 +1,7 @@
+import { IAspect } from 'cdktf';
+import { IConstruct } from 'constructs';
+export declare class TagsAddingAspect implements IAspect {
+    private tagsToAdd;
+    constructor(tagsToAdd: Record<string, string>);
+    visit(node: IConstruct): void;
+}

package/dist/src/lib/azure/common/tagging.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TagsAddingAspect = void 0;
+const constants_1 = require("./constants");
+function isTaggableConstruct(node) {
+    return 'tags' in node && 'tagsInput' in node;
+}
+class TagsAddingAspect {
+    tagsToAdd;
+    constructor(tagsToAdd) {
+        this.tagsToAdd = tagsToAdd;
+    }
+    // This method is called on every Construct within the specified scope (resources, data sources, etc.).
+    visit(node) {
+        // We need to take the input value to not create a circular reference
+        if (!isTaggableConstruct(node)) {
+            return;
+        }
+        // Determine if the resource excludes `tags`
+        if (constants_1.RESOURCES_TO_EXCLUDE_TAGS.has(node.constructor.name)) {
+            node.tags = undefined; // Completely remove tags for this resource
+            return;
+        }
+        const currentTags = node.tagsInput || {};
+        node.tags = { ...this.tagsToAdd, ...currentTags };
+    }
+}
+exports.TagsAddingAspect = TagsAddingAspect;

package/dist/src/lib/azure/common/types.d.ts

@@ -15,6 +15,9 @@ export interface CommonAzureStackProps extends BaseProps, AzurermProviderConfig
         [key: string]: AzureResourceNameFormatterProps;
     };
     location?: string;
+    defaultTags?: {
+        [key: string]: string;
+    };
 }
 export interface AzureRemoteBackendProps extends AzurermBackendConfig {
     type: AzureRemoteBackend;

package/dist/src/lib/azure/services/cosmosdb/main.js

@@ -49,6 +49,10 @@ class AzureCosmosDbManager {
             tags: props.tags ?? {
                 environment: scope.props.stage,
             },
+            defaultIdentityType: props.defaultIdentityType || 'SystemAssignedIdentity',
+            identity: props.identity || {
+                type: 'SystemAssigned',
+            },
         });
         (0, utils_1.createAzureTfOutput)(`${id}-cosmosdbAccountName`, scope, cosmosdbAccount.name);
         (0, utils_1.createAzureTfOutput)(`${id}-cosmosdbAccountFriendlyUniqueId`, scope, cosmosdbAccount.friendlyUniqueId);

package/dist/src/lib/azure/services/key-vault/main.js

@@ -44,7 +44,9 @@ class AzureKeyVaultManager {
             name: scope.resourceNameFormatter.format(props.name, scope.props.resourceNameOptions?.keyVault),
             location: resourceGroup.location,
             resourceGroupName: resourceGroup.name,
-            skuName: props.skuName ?? 'standard',
+            skuName: props.skuName || 'standard',
+            enableRbacAuthorization: props.enableRbacAuthorization || true,
+            softDeleteRetentionDays: props.softDeleteRetentionDays || 90,
             tags: props.tags ?? {
                 environment: scope.props.stage,
             },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gradientedge/cdk-utils",
-  "version": "9.43.3",
+  "version": "9.44.0",
   "description": "Utilities for AWS CDK provisioning",
   "main": "dist/index.js",
   "engines": {

package/src/lib/azure/common/constants.ts

@@ -2,3 +2,8 @@ export enum AzureRemoteBackend {
   local = 'local',
   azurerm = 'azurerm',
 }
+
+/**
+ * List of Azure resources that excludes tags
+ */
+export const RESOURCES_TO_EXCLUDE_TAGS = new Set(['ApiManagementNamedValue'])

package/src/lib/azure/common/index.ts

@@ -2,4 +2,5 @@ export * from './constants'
 export * from './construct'
 export * from './resource-name-formatter'
 export * from './stack'
+export * from './tagging'
 export * from './types'

package/src/lib/azure/common/resource-name-formatter.ts

@@ -33,6 +33,8 @@ export class AzureResourceNameFormatter extends Construct {
 
     azureResourceNameElements.push(this.props.stage)
 
-    return azureResourceNameElements.filter(Boolean).join('-')
+    return azureResourceNameElements
+      .filter(azureResourceNameElements => azureResourceNameElements != undefined)
+      .join('-')
   }
 }

package/src/lib/azure/common/stack.ts

@@ -1,9 +1,9 @@
 import fs from 'fs'
 import { CommonAzureConstruct } from './construct'
 import { CommonAzureStackProps } from './types'
-
+import { TagsAddingAspect } from './tagging'
 import appRoot from 'app-root-path'
-import { TerraformStack } from 'cdktf'
+import { Aspects, TerraformStack } from 'cdktf'
 import { Construct } from 'constructs'
 import _ from 'lodash'
 import { isDevStage } from '../../common'
@@ -35,6 +35,8 @@ export class CommonAzureStack extends TerraformStack {
     this.determineStageContexts()
 
     this.props = this.determineConstructProps(props)
+
+    Aspects.of(this).add(new TagsAddingAspect(this.props.defaultTags || {}))
   }
 
   /**

package/src/lib/azure/common/tagging.ts

@@ -0,0 +1,33 @@
+import { IAspect } from 'cdktf'
+import { IConstruct } from 'constructs'
+import { RESOURCES_TO_EXCLUDE_TAGS } from './constants'
+
+type TaggableConstruct = IConstruct & {
+  tags?: { [key: string]: string } | string[]
+  tagsInput?: { [key: string]: string } | string[]
+}
+
+function isTaggableConstruct(node: IConstruct): node is TaggableConstruct {
+  return 'tags' in node && 'tagsInput' in node
+}
+
+export class TagsAddingAspect implements IAspect {
+  constructor(private tagsToAdd: Record<string, string>) {}
+
+  // This method is called on every Construct within the specified scope (resources, data sources, etc.).
+  visit(node: IConstruct) {
+    // We need to take the input value to not create a circular reference
+    if (!isTaggableConstruct(node)) {
+      return
+    }
+
+    // Determine if the resource excludes `tags`
+    if (RESOURCES_TO_EXCLUDE_TAGS.has(node.constructor.name)) {
+      node.tags = undefined // Completely remove tags for this resource
+      return
+    }
+
+    const currentTags = node.tagsInput || {}
+    node.tags = { ...this.tagsToAdd, ...currentTags }
+  }
+}

package/src/lib/azure/common/types.ts

@@ -14,6 +14,7 @@ export interface CommonAzureStackProps extends BaseProps, AzurermProviderConfig
   resourceSuffix?: string
   resourceNameOptions?: { [key: string]: AzureResourceNameFormatterProps }
   location?: string
+  defaultTags?: { [key: string]: string }
 }
 
 export interface AzureRemoteBackendProps extends AzurermBackendConfig {

package/src/lib/azure/services/cosmosdb/main.ts

@@ -50,6 +50,10 @@ export class AzureCosmosDbManager {
       tags: props.tags ?? {
         environment: scope.props.stage,
       },
+      defaultIdentityType: props.defaultIdentityType || 'SystemAssignedIdentity',
+      identity: props.identity || {
+        type: 'SystemAssigned',
+      },
     })
 
     createAzureTfOutput(`${id}-cosmosdbAccountName`, scope, cosmosdbAccount.name)

package/src/lib/azure/services/key-vault/main.ts

@@ -45,7 +45,9 @@ export class AzureKeyVaultManager {
       name: scope.resourceNameFormatter.format(props.name, scope.props.resourceNameOptions?.keyVault),
       location: resourceGroup.location,
       resourceGroupName: resourceGroup.name,
-      skuName: props.skuName ?? 'standard',
+      skuName: props.skuName || 'standard',
+      enableRbacAuthorization: props.enableRbacAuthorization || true,
+      softDeleteRetentionDays: props.softDeleteRetentionDays || 90,
       tags: props.tags ?? {
         environment: scope.props.stage,
       },