@highstate/k8s 0.14.2 → 0.16.0

package/dist/deployment-HRJGAEJR.js

@@ -0,0 +1,8 @@
+export { Deployment } from './chunk-ZBFWQHE4.js';
+import './chunk-XRIC6EJ3.js';
+import './chunk-TWBMG6TD.js';
+import './chunk-4G6LLC2X.js';
+import './chunk-OBDQONMV.js';
+import './chunk-PZ5AY32C.js';
+//# sourceMappingURL=deployment-HRJGAEJR.js.map
+//# sourceMappingURL=deployment-HRJGAEJR.js.map

package/dist/{deployment-THUD5QUH.js.map → deployment-HRJGAEJR.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"deployment-THUD5QUH.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"deployment-HRJGAEJR.js"}

package/dist/highstate.manifest.json

@@ -3,12 +3,11 @@
     "./dist/index.js": 2212294583,
     "./dist/units/cert-manager/index.js": 2212294583,
     "./dist/units/cluster-patch/index.js": 2212294583,
-    "./dist/units/cluster-dns/index.js": 2212294583,
     "./dist/units/dns01-issuer/index.js": 2212294583,
     "./dist/units/existing-cluster/index.js": 2212294583,
     "./dist/units/gateway-api/index.js": 2212294583,
     "./dist/units/reduced-access-cluster/index.js": 2212294583,
-    "./dist/impl/gateway-route.js": 1611661193,
-    "./dist/impl/tls-certificate.js": 2564120059
+    "./dist/impl/gateway-route.js": 2250615747,
+    "./dist/impl/tls-certificate.js": 3253474514
   }
 }

package/dist/impl/gateway-route.js

@@ -1,10 +1,10 @@
-import { Gateway, HttpRoute, TcpRoute, UdpRoute } from '../chunk-EACAK6W4.js';
-import { Certificate } from '../chunk-C6WHUOC3.js';
-import { Service, l4EndpointToServicePort } from '../chunk-3CKMDTYK.js';
-import '../chunk-VJL2BFKO.js';
-import { Namespace, mapMetadata, getProvider } from '../chunk-SEWB4FUB.js';
+import { Gateway, HttpRoute, TcpRoute, UdpRoute } from '../chunk-DCUMJSO6.js';
+import { Certificate } from '../chunk-BR2CLUUD.js';
+import { Service, l4EndpointToServicePort } from '../chunk-TWBMG6TD.js';
+import '../chunk-4G6LLC2X.js';
+import { Namespace, mapMetadata, getProvider } from '../chunk-OBDQONMV.js';
 import '../chunk-PZ5AY32C.js';
-import { gatewayRouteMediator, filterEndpoints } from '@highstate/common';
+import { gatewayRouteMediator } from '@highstate/common';
 import { k8s } from '@highstate/library';
 import { toPromise } from '@highstate/pulumi';
 import { core } from '@pulumi/kubernetes';
@@ -185,9 +185,9 @@ async function createServiceFromEndpoints(name, namespace, endpointsInput, clust
   if (!endpoints.length) {
     throw new Error(`Gateway route "${name}" has no endpoints to expose.`);
   }
-  const hostnameEndpoints = filterEndpoints(endpoints, void 0, ["hostname"]);
-  const ipEndpoints = filterEndpoints(endpoints, void 0, ["ipv4", "ipv6"]);
-  if (hostnameEndpoints.length > 0 && hostnameEndpoints[0].visibility > ipEndpoints[0]?.visibility) {
+  const hostnameEndpoints = endpoints.filter((endpoint) => endpoint.type === "hostname");
+  const ipEndpoints = endpoints.filter((endpoint) => endpoint.type !== "hostname");
+  if (hostnameEndpoints.length > 0) {
     const hostnamePortInfos = [];
     for (const endpoint of hostnameEndpoints) {
       hostnamePortInfos.push(toServicePortInfoFromEndpoint(endpoint));
@@ -221,7 +221,7 @@ async function createServiceFromEndpoints(name, namespace, endpointsInput, clust
     {
       metadata: mapMetadata({ namespace }, endpointsName),
       subsets: ipEndpoints.map((endpoint) => ({
-        addresses: [{ ip: endpoint.address }],
+        addresses: [{ ip: endpoint.address.value }],
         ports: [l4EndpointToServicePort(endpoint)]
       }))
     },

package/dist/impl/gateway-route.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/impl/gateway-route.ts"],"names":["service","match"],"mappings":";;;;;;;;;;;AAgBO,IAAM,qBAAqB,oBAAA,CAAqB,SAAA;AAAA,EACrD,GAAA,CAAI,iBAAA;AAAA,EACJ,OAAO,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,IAAQ,IAAA,KAAS;AACpC,IAAA,MAAM,SAAA,GACJ,IAAA,CAAK,UAAA,YAAsB,OAAA,GACvB,MAAM,SAAA,CAAU,IAAA,CAAK,UAAA,CAAW,SAAS,IACzC,SAAA,CAAU,GAAA,CAAI,IAAA,CAAK,SAAA,EAAW,KAAK,OAAO,CAAA;AAEhD,IAAA,MAAM,aAAa,MAAM,oBAAA,CAAqB,IAAA,EAAM,SAAA,EAAW,KAAK,cAAc,CAAA;AAElF,IAAA,MAAM,iBAAiB,UAAA,GACnB;AAAA,MACE,IAAA,EAAM,QAAA;AAAA,MACN,KAAA,EAAO,EAAA;AAAA,MACP,IAAA,EAAM,WAAW,QAAA,CAAS;AAAA,KAC5B,GACA,MAAA;AAEJ,IAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAQ;AACxB,MAAA,OAAO,MAAM,sBAAA,CAAuB;AAAA,QAClC,IAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,IAAA,KAAS,KAAA,GAAQ,KAAA,GAAQ,KAAA;AAE/C,IAAA,OAAO,MAAM,oBAAA,CAAqB;AAAA,MAChC,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,SAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH;AACF;AAoBA,eAAe,sBAAA,CAAuB;AAAA,EACpC,IAAA;AAAA,EACA,IAAA;AAAA,EACA,IAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,EAA+B;AAC7B,EAAA,MAAM,cAAA,GACJ,IAAA,CAAK,UAAA,YAAsB,OAAA,GACvB,KAAK,UAAA,GAAA,CACJ,MAAM,0BAAA,CAA2B,IAAA,EAAM,WAAW,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,OAAA,EAAS,IAAI,CAAA,EAClF,OAAA;AAET,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB;AAAA,MACE,IAAA,EAAM,OAAA;AAAA,MACN,MAAM,IAAA,CAAK,SAAA;AAAA,MACX,QAAA,EAAU,OAAA;AAAA,MACV,GAAA,EAAK;AAAA,QACH,IAAA,EAAM,WAAA;AAAA,QACN,eAAA,EAAiB,cAAA,GAAiB,CAAC,cAAc,CAAA,GAAI;AAAA;AACvD;AACF,GACF;AAEA,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,UAAA;AAAA,IAC5B;AAAA,MACE,MAAM,IAAA,CAAK,SAAA;AAAA,MACX,SAAA;AAAA,MACA,kBAAkB,IAAA,CAAK,SAAA;AAAA,MACvB;AAAA,KACF;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,YAAY,IAAI,SAAA;AAAA,IACpB,IAAA;AAAA,IACA;AAAA,MACE,OAAA;AAAA,MACA,IAAA,EAAM;AAAA,QACJ,OAAA,EAAS;AAAA;AACX,KACF;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,SAAA;AAAA,IACV,SAAA,EAAW,MAAM,SAAA,CAAU,OAAA,CAAQ,SAAS;AAAA,GAC9C;AACF;AAWA,eAAe,oBAAA,CAAqB;AAAA,EAClC,IAAA;AAAA,EACA,IAAA;AAAA,EACA,IAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,EAA6B;AAC3B,EAAA,MAAM,WAAA,GACJ,IAAA,CAAK,UAAA,YAAsB,OAAA,GACvB;AAAA,IACE,SAAS,IAAA,CAAK,UAAA;AAAA,IACd,KAAA,EAAO,MAAM,eAAA,CAAgB,IAAA,CAAK,UAAU;AAAA,GAC9C,GACA,MAAM,0BAAA,CAA2B,IAAA,EAAM,WAAW,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,OAAA,EAAS,IAAI,CAAA;AAE1F,EAAA,MAAM,cAAc,MAAM,SAAA,CAAU,WAAA,CAAY,OAAA,CAAQ,SAAS,IAAI,CAAA;AAErE,EAAA,MAAM,WAAA,GAAc,MAAM,iBAAA,CAAkB;AAAA,IAC1C,OAAO,WAAA,CAAY,KAAA;AAAA,IACnB,QAAA;AAAA,IACA,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,WAAA;AAAA,IACA,SAAA,EAAW;AAAA,GACZ,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,MAAM,mBAAA,CAAoB;AAAA,IAC7C,eAAe,IAAA,CAAK,IAAA;AAAA,IACpB,WAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA,EAAW;AAAA,GACZ,CAAA;AAED,EAAA,MAAM,eAAe,CAAA,EAAG,QAAA,CAAS,WAAA,EAAa,IAAI,YAAY,CAAA,CAAA;AAE9D,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,UAAA;AAAA,IAC5B;AAAA,MACE,MAAM,IAAA,CAAK,SAAA;AAAA,MACX,SAAA;AAAA,MACA,kBAAkB,IAAA,CAAK,SAAA;AAAA,MACvB,SAAA,EAAW;AAAA,QACT;AAAA,UACE,IAAA,EAAM,YAAA;AAAA,UACN,IAAA,EAAM,YAAA;AAAA,UACN;AAAA;AACF;AACF,KACF;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,UAAA,GAAa,WAAA,CAAY,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA,QAAA,KAAY;AAChE,IAAA,IAAI,CAAC,UAAU,IAAA,EAAM;AACnB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,SAAA,EAAY,WAAW,CAAA,+BAAA,EAAkC,IAAI,CAAA,uBAAA;AAAA,OAC/D;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,MAAM,QAAA,CAAS,IAAA;AAAA,MACf,WAAW,QAAA,CAAS,SAAA;AAAA,MACpB,MAAM,WAAA,CAAY;AAAA,KACpB;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,SAAA,GAAY,EAAE,GAAG,IAAA,EAAM,QAAQ,OAAA,EAAQ;AAE7C,EAAA,MAAM,KAAA,GACJ,QAAA,KAAa,KAAA,GACT,IAAI,QAAA;AAAA,IACF,IAAA;AAAA,IACA;AAAA,MACE,OAAA;AAAA,MACA,YAAA;AAAA,MACA,OAAA,EAAS;AAAA,KACX;AAAA,IACA;AAAA,MAEF,IAAI,QAAA;AAAA,IACF,IAAA;AAAA,IACA;AAAA,MACE,OAAA;AAAA,MACA,YAAA;AAAA,MACA,OAAA,EAAS;AAAA,KACX;AAAA,IACA;AAAA,GACF;AAEN,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,KAAA;AAAA,IACV,SAAA,EAAW,MAAM,SAAA,CAAU,OAAA,CAAQ,SAAS;AAAA,GAC9C;AACF;AAEA,eAAe,oBAAA,CACb,KAAA,EACA,SAAA,EACA,cAAA,EAC6B;AAC7B,EAAA,MAAM,mBAAA,GAAsB,MAAM,SAAA,CAAU,cAAc,CAAA;AAC1D,EAAA,IAAI,CAAC,mBAAA,EAAqB;AACxB,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,mBAAA,CAAoB,QAAQ,CAAA;AAE7D,EAAA,IAAI,oBAAoB,WAAA,EAAa;AACnC,IAAA,MAAM,gBAAgB,MAAM,SAAA,CAAU,QAAA,CAAS,SAAA,CAAU,SAAS,IAAI,CAAA;AACtE,IAAA,MAAM,gBAAgB,MAAM,SAAA,CAAU,QAAA,CAAS,SAAA,CAAU,QAAQ,EAAE,CAAA;AAEnE,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,SAAA,CAAU,SAAS,IAAI,CAAA;AAC/D,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,SAAA,CAAU,QAAQ,EAAE,CAAA;AAE5D,IAAA,IAAI,aAAA,KAAkB,eAAA,IAAmB,aAAA,KAAkB,eAAA,EAAiB;AAC1E,MAAA,OAAO,MAAM,SAAA,CAAU,QAAA,CAAS,MAAM,CAAA;AAAA,IACxC;AAAA,EACF;AAEA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF;AASA,eAAe,0BAAA,CACb,IAAA,EACA,SAAA,EACA,cAAA,EACA,SACA,IAAA,EACyD;AACzD,EAAA,MAAM,SAAA,GAAY,MAAM,SAAA,CAAU,cAAc,CAAA;AAEhD,EAAA,IAAI,CAAC,UAAU,MAAA,EAAQ;AACrB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,IAAI,CAAA,6BAAA,CAA+B,CAAA;AAAA,EACvE;AAEA,EAAA,MAAM,oBAAoB,eAAA,CAAgB,SAAA,EAAW,MAAA,EAAW,CAAC,UAAU,CAAC,CAAA;AAC5E,EAAA,MAAM,cAAc,eAAA,CAAgB,SAAA,EAAW,QAAW,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAA;AAE1E,EAAA,IACE,iBAAA,CAAkB,MAAA,GAAS,CAAA,IAC3B,iBAAA,CAAkB,CAAC,EAAE,UAAA,GAAa,WAAA,CAAY,CAAC,CAAA,EAAG,UAAA,EAClD;AACA,IAAA,MAAM,oBAAuC,EAAC;AAC9C,IAAA,KAAA,MAAW,YAAY,iBAAA,EAAmB;AACxC,MAAA,iBAAA,CAAkB,IAAA,CAAK,6BAAA,CAA8B,QAAQ,CAAC,CAAA;AAAA,IAChE;AAEA,IAAA,MAAMA,QAAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,CAAA,WAAA,EAAc,IAAI,CAAA,CAAA,EAAI;AAAA,MACnD,SAAA;AAAA,MACA,IAAA,EAAM,cAAA;AAAA,MACN,YAAA,EAAc,iBAAA,CAAkB,CAAC,CAAA,CAAE,QAAA;AAAA,MACnC,KAAA,EAAO,iBAAA,CAAkB,GAAA,CAAI,uBAAuB;AAAA,KACrD,CAAA;AAED,IAAA,OAAO;AAAA,MACL,OAAA,EAAAA,QAAAA;AAAA,MACA,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI,WAAA,CAAY,WAAW,CAAA,EAAG;AAC5B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,IAAI,CAAA,oCAAA,CAAsC,CAAA;AAAA,EAC9E;AAEA,EAAA,MAAM,cAAiC,EAAC;AACxC,EAAA,KAAA,MAAW,YAAY,WAAA,EAAa;AAClC,IAAA,WAAA,CAAY,IAAA,CAAK,6BAAA,CAA8B,QAAQ,CAAC,CAAA;AAAA,EAC1D;AAEA,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,CAAA,WAAA,EAAc,IAAI,CAAA,CAAA,EAAI;AAAA,IACnD,SAAA;AAAA,IACA,IAAA,EAAM,WAAA;AAAA,IACN,KAAA,EAAO,WAAA,CAAY,GAAA,CAAI,uBAAuB;AAAA,GAC/C,CAAA;AAED,EAAA,MAAM,aAAA,GAAgB,cAAc,IAAI,CAAA,CAAA;AAExC,EAAA,IAAI,KAAK,EAAA,CAAG,SAAA;AAAA,IACV,aAAA;AAAA,IACA;AAAA,MACE,QAAA,EAAU,WAAA,CAAY,EAAE,SAAA,IAAa,aAAa,CAAA;AAAA,MAClD,OAAA,EAAS,WAAA,CAAY,GAAA,CAAI,CAAA,QAAA,MAAa;AAAA,QACpC,WAAW,CAAC,EAAE,EAAA,EAAI,QAAA,CAAS,SAAS,CAAA;AAAA,QACpC,KAAA,EAAO,CAAC,uBAAA,CAAwB,QAAQ,CAAC;AAAA,OAC3C,CAAE;AAAA,KACJ;AAAA,IACA,EAAE,GAAG,IAAA,EAAM,QAAA,EAAU,YAAY,OAAO,CAAA,EAAG,QAAQ,OAAA;AAAQ,GAC7D;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,KAAA,EAAO;AAAA,GACT;AACF;AAEA,eAAe,gBAAgB,OAAA,EAA8C;AAC3E,EAAA,MAAM,IAAA,GAAO,MAAM,SAAA,CAAU,OAAA,CAAQ,IAAI,CAAA;AACzC,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,EAAC;AAE7B,EAAA,MAAM,SAA4B,EAAC;AAEnC,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,QAAQ,IAAA,CAAK,IAAA;AACnB,IAAA,MAAM,QAAA,GAAA,CAAY,IAAA,CAAK,QAAA,IAAY,KAAA,EAAO,WAAA,EAAY;AAEtD,IAAA,IAAI,KAAA,KAAU,MAAA,IAAc,QAAA,KAAa,KAAA,IAAS,aAAa,KAAA,EAAQ;AACrE,MAAA;AAAA,IACF;AAEA,IAAA,MAAA,CAAO,IAAA,CAAK;AAAA,MACV,IAAA,EAAM,KAAK,IAAA,IAAQ,MAAA;AAAA,MACnB,IAAA,EAAM,KAAA;AAAA,MACN,QAAA;AAAA,MACA,YAAY,IAAA,CAAK;AAAA,KAClB,CAAA;AAAA,EACH;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,8BAA8B,QAAA,EAA+C;AACpF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,MAAA;AAAA,IACN,MAAM,QAAA,CAAS,IAAA;AAAA,IACf,QAAA,EAAU,QAAA,CAAS,QAAA,CAAS,WAAA,EAAY;AAAA,IACxC,YAAY,QAAA,CAAS;AAAA,GACvB;AACF;AAEA,eAAe,iBAAA,CAAkB;AAAA,EAC/B,KAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAA,EAM6B;AAC3B,EAAA,MAAM,aAAa,KAAA,CAAM,MAAA,CAAO,CAAA,IAAA,KAAQ,IAAA,CAAK,aAAa,QAAQ,CAAA;AAElE,EAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,SAAA,EAAY,WAAW,CAAA,sBAAA,EAAyB,QAAQ,qCAAqC,SAAS,CAAA,EAAA;AAAA,KACxG;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,WAAW,CAAC,CAAA;AAAA,EACrB;AAEA,EAAA,MAAM,cAAA,GAAiB,MAAM,SAAA,CAAU,UAAU,CAAA;AAEjD,EAAA,IAAI,cAAA,KAAmB,MAAA,IAAa,cAAA,KAAmB,IAAA,EAAM;AAC3D,IAAA,OAAO,WAAW,CAAC,CAAA;AAAA,EACrB;AAEA,EAAA,IAAI,OAAO,mBAAmB,QAAA,EAAU;AACtC,IAAA,MAAMC,MAAAA,GAAQ,UAAA,CAAW,IAAA,CAAK,CAAA,SAAA,KAAa;AACzC,MAAA,IAAI,SAAA,CAAU,SAAS,cAAA,EAAgB;AACrC,QAAA,OAAO,IAAA;AAAA,MACT;AAEA,MAAA,IAAI,OAAO,SAAA,CAAU,UAAA,KAAe,QAAA,EAAU;AAC5C,QAAA,OAAO,UAAU,UAAA,KAAe,cAAA;AAAA,MAClC;AAEA,MAAA,OAAO,KAAA;AAAA,IACT,CAAC,CAAA;AAED,IAAA,IAAIA,MAAAA,EAAO;AACT,MAAA,OAAOA,MAAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,kBAAkB,SAAS,CAAA,wBAAA,EAA2B,cAAc,CAAA,eAAA,EAAkB,WAAW,4BAA4B,QAAQ,CAAA,UAAA;AAAA,KACvI;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,OAAO,cAAc,CAAA;AAE1C,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,IAAA,CAAK,CAAA,SAAA,KAAa;AACzC,IAAA,IAAI,SAAA,CAAU,SAAS,YAAA,EAAc;AACnC,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,IAAI,OAAO,SAAA,CAAU,UAAA,KAAe,QAAA,EAAU;AAC5C,MAAA,OAAO,UAAU,UAAA,KAAe,YAAA;AAAA,IAClC;AAEA,IAAA,OAAO,KAAA;AAAA,EACT,CAAC,CAAA;AAED,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR,kBAAkB,SAAS,CAAA,yBAAA,EAA4B,YAAY,CAAA,gBAAA,EAAmB,WAAW,4BAA4B,QAAQ,CAAA,UAAA;AAAA,GACvI;AACF;AAEA,eAAe,mBAAA,CAAoB;AAAA,EACjC,aAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAA,EAKoB;AAClB,EAAA,IAAI,CAAC,aAAA,EAAe;AAClB,IAAA,OAAO,WAAA,CAAY,IAAA;AAAA,EACrB;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,aAAa,CAAA;AAE9C,EAAA,IAAI,QAAA,KAAa,MAAA,IAAa,QAAA,KAAa,IAAA,EAAM;AAC/C,IAAA,OAAO,WAAA,CAAY,IAAA;AAAA,EACrB;AAEA,EAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,QAAQ,CAAA,EAAG;AAC/B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,eAAA,EAAkB,SAAS,CAAA,sCAAA,EAAyC,QAAA,CAAS,aAAa,CAAA,SAAA;AAAA,KAC5F;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAO,OAAO,QAAQ,CAAA;AAE5B,EAAA,IAAI,IAAA,GAAO,CAAA,IAAK,IAAA,GAAO,KAAA,EAAO;AAC5B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,eAAA,EAAkB,SAAS,CAAA,0BAAA,EAA6B,IAAI,CAAA,2CAAA;AAAA,KAC9D;AAAA,EACF;AAEA,EAAA,OAAO,IAAA;AACT","file":"gateway-route.js","sourcesContent":["import type { Secret } from \"../secret\"\nimport {\n  filterEndpoints,\n  type GatewayRouteSpec,\n  gatewayRouteMediator,\n  type TlsCertificate,\n} from \"@highstate/common\"\nimport { k8s, type network } from \"@highstate/library\"\nimport { type ComponentResourceOptions, type Input, toPromise } from \"@highstate/pulumi\"\nimport { core } from \"@pulumi/kubernetes\"\nimport { Gateway, HttpRoute, TcpRoute, UdpRoute } from \"../gateway\"\nimport { Namespace } from \"../namespace\"\nimport { l4EndpointToServicePort, Service } from \"../service\"\nimport { getProvider, mapMetadata } from \"../shared\"\nimport { Certificate } from \"../tls\"\n\nexport const createGatewayRoute = gatewayRouteMediator.implement(\n  k8s.gatewayDataSchema,\n  async ({ name, spec, opts }, data) => {\n    const namespace =\n      spec.nativeData instanceof Service\n        ? await toPromise(spec.nativeData.namespace)\n        : Namespace.for(data.namespace, data.cluster)\n\n    const certSecret = await getCertificateSecret(name, namespace, spec.tlsCertificate)\n\n    const certificateRef = certSecret\n      ? {\n          kind: \"Secret\" as const,\n          group: \"\" as const,\n          name: certSecret.metadata.name,\n        }\n      : undefined\n\n    if (spec.type === \"http\") {\n      return await createHttpGatewayRoute({\n        name,\n        spec,\n        opts,\n        data,\n        namespace,\n        certificateRef,\n      })\n    }\n\n    const protocol = spec.type === \"tcp\" ? \"TCP\" : \"UDP\"\n\n    return await createL4GatewayRoute({\n      name,\n      spec,\n      opts,\n      data,\n      namespace,\n      protocol,\n    })\n  },\n)\n\ntype HttpGatewayRouteSpec = Extract<GatewayRouteSpec, { type: \"http\" }>\ntype L4GatewayRouteSpec = Extract<GatewayRouteSpec, { type: \"tcp\" | \"udp\" }>\n\ntype CreateHttpGatewayRouteArgs = {\n  name: string\n  spec: HttpGatewayRouteSpec\n  opts: ComponentResourceOptions | undefined\n  data: k8s.GatewayData\n  namespace: Namespace\n  certificateRef:\n    | {\n        kind: \"Secret\"\n        group: \"\"\n        name: Input<string>\n      }\n    | undefined\n}\n\nasync function createHttpGatewayRoute({\n  name,\n  spec,\n  opts,\n  data,\n  namespace,\n  certificateRef,\n}: CreateHttpGatewayRouteArgs) {\n  const backendService =\n    spec.nativeData instanceof Service\n      ? spec.nativeData\n      : (await createServiceFromEndpoints(name, namespace, spec.endpoints, data.cluster, opts))\n          .service\n\n  const listeners = [\n    {\n      name: \"https\",\n      port: data.httpsPort,\n      protocol: \"HTTPS\",\n      tls: {\n        mode: \"Terminate\",\n        certificateRefs: certificateRef ? [certificateRef] : undefined,\n      },\n    },\n  ]\n\n  const gateway = await Gateway.createOnce(\n    {\n      name: data.className,\n      namespace,\n      gatewayClassName: data.className,\n      listeners,\n    },\n    opts,\n  )\n\n  const httpRoute = new HttpRoute(\n    name,\n    {\n      gateway,\n      rule: {\n        backend: backendService,\n      },\n    },\n    opts,\n  )\n\n  return {\n    resource: httpRoute,\n    endpoints: await toPromise(gateway.endpoints),\n  }\n}\n\ntype CreateL4GatewayRouteArgs = {\n  name: string\n  spec: L4GatewayRouteSpec\n  opts: ComponentResourceOptions | undefined\n  data: k8s.GatewayData\n  namespace: Namespace\n  protocol: \"TCP\" | \"UDP\"\n}\n\nasync function createL4GatewayRoute({\n  name,\n  spec,\n  opts,\n  data,\n  namespace,\n  protocol,\n}: CreateL4GatewayRouteArgs) {\n  const serviceData =\n    spec.nativeData instanceof Service\n      ? {\n          service: spec.nativeData,\n          ports: await getServicePorts(spec.nativeData),\n        }\n      : await createServiceFromEndpoints(name, namespace, spec.endpoints, data.cluster, opts)\n\n  const serviceName = await toPromise(serviceData.service.metadata.name)\n\n  const backendPort = await selectBackendPort({\n    ports: serviceData.ports,\n    protocol,\n    targetPort: spec.targetPort,\n    serviceName,\n    routeName: name,\n  })\n\n  const listenerPort = await resolveListenerPort({\n    requestedPort: spec.port,\n    backendPort,\n    protocol,\n    routeName: name,\n  })\n\n  const listenerName = `${protocol.toLowerCase()}-${listenerPort}`\n\n  const gateway = await Gateway.createOnce(\n    {\n      name: data.className,\n      namespace,\n      gatewayClassName: data.className,\n      listeners: [\n        {\n          name: listenerName,\n          port: listenerPort,\n          protocol,\n        },\n      ],\n    },\n    opts,\n  )\n\n  const backendRef = serviceData.service.metadata.apply(metadata => {\n    if (!metadata?.name) {\n      throw new Error(\n        `Service \"${serviceName}\" referenced by gateway route \"${name}\" does not have a name.`,\n      )\n    }\n\n    return {\n      name: metadata.name,\n      namespace: metadata.namespace,\n      port: backendPort.port,\n    }\n  })\n\n  const routeOpts = { ...opts, parent: gateway }\n\n  const route =\n    protocol === \"TCP\"\n      ? new TcpRoute(\n          name,\n          {\n            gateway,\n            listenerName,\n            backend: backendRef,\n          },\n          routeOpts,\n        )\n      : new UdpRoute(\n          name,\n          {\n            gateway,\n            listenerName,\n            backend: backendRef,\n          },\n          routeOpts,\n        )\n\n  return {\n    resource: route,\n    endpoints: await toPromise(gateway.endpoints),\n  }\n}\n\nasync function getCertificateSecret(\n  _name: string,\n  namespace: Namespace,\n  tlsCertificate: Input<TlsCertificate | undefined> | undefined,\n): Promise<Secret | undefined> {\n  const resolvedCertificate = await toPromise(tlsCertificate)\n  if (!resolvedCertificate) {\n    return undefined\n  }\n\n  const resource = await toPromise(resolvedCertificate.resource)\n\n  if (resource instanceof Certificate) {\n    const certNamespace = await toPromise(resource.namespace.metadata.name)\n    const certClusterId = await toPromise(resource.namespace.cluster.id)\n\n    const targetNamespace = await toPromise(namespace.metadata.name)\n    const targetClusterId = await toPromise(namespace.cluster.id)\n\n    if (certNamespace === targetNamespace && certClusterId === targetClusterId) {\n      return await toPromise(resource.secret)\n    }\n  }\n\n  throw new Error(\n    \"Not implemented: copying certificate secret across namespaces/clusters/different systems\",\n  )\n}\n\ntype ServicePortInfo = {\n  name: string | undefined\n  port: number\n  protocol: \"TCP\" | \"UDP\"\n  targetPort?: number | string\n}\n\nasync function createServiceFromEndpoints(\n  name: string,\n  namespace: Namespace,\n  endpointsInput: Input<network.L4Endpoint[]>,\n  cluster: k8s.Cluster,\n  opts: ComponentResourceOptions | undefined,\n): Promise<{ service: Service; ports: ServicePortInfo[] }> {\n  const endpoints = await toPromise(endpointsInput)\n\n  if (!endpoints.length) {\n    throw new Error(`Gateway route \"${name}\" has no endpoints to expose.`)\n  }\n\n  const hostnameEndpoints = filterEndpoints(endpoints, undefined, [\"hostname\"])\n  const ipEndpoints = filterEndpoints(endpoints, undefined, [\"ipv4\", \"ipv6\"])\n\n  if (\n    hostnameEndpoints.length > 0 &&\n    hostnameEndpoints[0].visibility > ipEndpoints[0]?.visibility\n  ) {\n    const hostnamePortInfos: ServicePortInfo[] = []\n    for (const endpoint of hostnameEndpoints) {\n      hostnamePortInfos.push(toServicePortInfoFromEndpoint(endpoint))\n    }\n\n    const service = Service.create(`hs-backend-${name}`, {\n      namespace,\n      type: \"ExternalName\",\n      externalName: hostnameEndpoints[0].hostname,\n      ports: hostnameEndpoints.map(l4EndpointToServicePort),\n    })\n\n    return {\n      service,\n      ports: hostnamePortInfos,\n    }\n  }\n\n  if (ipEndpoints.length === 0) {\n    throw new Error(`Gateway route \"${name}\" requires at least one IP endpoint.`)\n  }\n\n  const ipPortInfos: ServicePortInfo[] = []\n  for (const endpoint of ipEndpoints) {\n    ipPortInfos.push(toServicePortInfoFromEndpoint(endpoint))\n  }\n\n  const service = Service.create(`hs-backend-${name}`, {\n    namespace,\n    type: \"ClusterIP\",\n    ports: ipEndpoints.map(l4EndpointToServicePort),\n  })\n\n  const endpointsName = `hs-backend-${name}`\n\n  new core.v1.Endpoints(\n    endpointsName,\n    {\n      metadata: mapMetadata({ namespace }, endpointsName),\n      subsets: ipEndpoints.map(endpoint => ({\n        addresses: [{ ip: endpoint.address }],\n        ports: [l4EndpointToServicePort(endpoint)],\n      })),\n    },\n    { ...opts, provider: getProvider(cluster), parent: service },\n  )\n\n  return {\n    service,\n    ports: ipPortInfos,\n  }\n}\n\nasync function getServicePorts(service: Service): Promise<ServicePortInfo[]> {\n  const spec = await toPromise(service.spec)\n  const ports = spec.ports ?? []\n\n  const result: ServicePortInfo[] = []\n\n  for (const port of ports) {\n    const value = port.port\n    const protocol = (port.protocol ?? \"TCP\").toUpperCase()\n\n    if (value === undefined || (protocol !== \"TCP\" && protocol !== \"UDP\")) {\n      continue\n    }\n\n    result.push({\n      name: port.name ?? undefined,\n      port: value,\n      protocol: protocol as \"TCP\" | \"UDP\",\n      targetPort: port.targetPort as number | string | undefined,\n    })\n  }\n\n  return result\n}\n\nfunction toServicePortInfoFromEndpoint(endpoint: network.L4Endpoint): ServicePortInfo {\n  return {\n    name: undefined,\n    port: endpoint.port,\n    protocol: endpoint.protocol.toUpperCase() as \"TCP\" | \"UDP\",\n    targetPort: endpoint.port,\n  }\n}\n\nasync function selectBackendPort({\n  ports,\n  protocol,\n  targetPort,\n  serviceName,\n  routeName,\n}: {\n  ports: ServicePortInfo[]\n  protocol: \"TCP\" | \"UDP\"\n  targetPort: Input<string | number | undefined> | undefined\n  serviceName: string\n  routeName: string\n}): Promise<ServicePortInfo> {\n  const candidates = ports.filter(port => port.protocol === protocol)\n\n  if (candidates.length === 0) {\n    throw new Error(\n      `Service \"${serviceName}\" does not expose any ${protocol} ports required by gateway route \"${routeName}\".`,\n    )\n  }\n\n  if (!targetPort) {\n    return candidates[0]\n  }\n\n  const resolvedTarget = await toPromise(targetPort)\n\n  if (resolvedTarget === undefined || resolvedTarget === null) {\n    return candidates[0]\n  }\n\n  if (typeof resolvedTarget === \"number\") {\n    const match = candidates.find(candidate => {\n      if (candidate.port === resolvedTarget) {\n        return true\n      }\n\n      if (typeof candidate.targetPort === \"number\") {\n        return candidate.targetPort === resolvedTarget\n      }\n\n      return false\n    })\n\n    if (match) {\n      return match\n    }\n\n    throw new Error(\n      `Gateway route \"${routeName}\" requested target port ${resolvedTarget}, but service \"${serviceName}\" does not expose it for ${protocol} backends.`,\n    )\n  }\n\n  const targetString = String(resolvedTarget)\n\n  const match = candidates.find(candidate => {\n    if (candidate.name === targetString) {\n      return true\n    }\n\n    if (typeof candidate.targetPort === \"string\") {\n      return candidate.targetPort === targetString\n    }\n\n    return false\n  })\n\n  if (match) {\n    return match\n  }\n\n  throw new Error(\n    `Gateway route \"${routeName}\" requested target port \"${targetString}\", but service \"${serviceName}\" does not expose it for ${protocol} backends.`,\n  )\n}\n\nasync function resolveListenerPort({\n  requestedPort,\n  backendPort,\n  protocol,\n  routeName,\n}: {\n  requestedPort: Input<number | undefined> | undefined\n  backendPort: ServicePortInfo\n  protocol: \"TCP\" | \"UDP\"\n  routeName: string\n}): Promise<number> {\n  if (!requestedPort) {\n    return backendPort.port\n  }\n\n  const resolved = await toPromise(requestedPort)\n\n  if (resolved === undefined || resolved === null) {\n    return backendPort.port\n  }\n\n  if (!Number.isInteger(resolved)) {\n    throw new Error(\n      `Gateway route \"${routeName}\" must use integer listener ports for ${protocol.toLowerCase()} traffic.`,\n    )\n  }\n\n  const port = Number(resolved)\n\n  if (port < 1 || port > 65535) {\n    throw new Error(\n      `Gateway route \"${routeName}\" specified listener port ${port}, which is outside the valid range 1-65535.`,\n    )\n  }\n\n  return port\n}\n"]}
+{"version":3,"sources":["../../src/impl/gateway-route.ts"],"names":["service","match"],"mappings":";;;;;;;;;;;AAWO,IAAM,qBAAqB,oBAAA,CAAqB,SAAA;AAAA,EACrD,GAAA,CAAI,iBAAA;AAAA,EACJ,OAAO,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,IAAQ,IAAA,KAAS;AACpC,IAAA,MAAM,SAAA,GACJ,IAAA,CAAK,UAAA,YAAsB,OAAA,GACvB,MAAM,SAAA,CAAU,IAAA,CAAK,UAAA,CAAW,SAAS,IACzC,SAAA,CAAU,GAAA,CAAI,IAAA,CAAK,SAAA,EAAW,KAAK,OAAO,CAAA;AAEhD,IAAA,MAAM,aAAa,MAAM,oBAAA,CAAqB,IAAA,EAAM,SAAA,EAAW,KAAK,cAAc,CAAA;AAElF,IAAA,MAAM,iBAAiB,UAAA,GACnB;AAAA,MACE,IAAA,EAAM,QAAA;AAAA,MACN,KAAA,EAAO,EAAA;AAAA,MACP,IAAA,EAAM,WAAW,QAAA,CAAS;AAAA,KAC5B,GACA,MAAA;AAEJ,IAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAQ;AACxB,MAAA,OAAO,MAAM,sBAAA,CAAuB;AAAA,QAClC,IAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,IAAA,KAAS,KAAA,GAAQ,KAAA,GAAQ,KAAA;AAE/C,IAAA,OAAO,MAAM,oBAAA,CAAqB;AAAA,MAChC,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,SAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH;AACF;AAoBA,eAAe,sBAAA,CAAuB;AAAA,EACpC,IAAA;AAAA,EACA,IAAA;AAAA,EACA,IAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,EAA+B;AAC7B,EAAA,MAAM,cAAA,GACJ,IAAA,CAAK,UAAA,YAAsB,OAAA,GACvB,KAAK,UAAA,GAAA,CACJ,MAAM,0BAAA,CAA2B,IAAA,EAAM,WAAW,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,OAAA,EAAS,IAAI,CAAA,EAClF,OAAA;AAET,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB;AAAA,MACE,IAAA,EAAM,OAAA;AAAA,MACN,MAAM,IAAA,CAAK,SAAA;AAAA,MACX,QAAA,EAAU,OAAA;AAAA,MACV,GAAA,EAAK;AAAA,QACH,IAAA,EAAM,WAAA;AAAA,QACN,eAAA,EAAiB,cAAA,GAAiB,CAAC,cAAc,CAAA,GAAI;AAAA;AACvD;AACF,GACF;AAEA,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,UAAA;AAAA,IAC5B;AAAA,MACE,MAAM,IAAA,CAAK,SAAA;AAAA,MACX,SAAA;AAAA,MACA,kBAAkB,IAAA,CAAK,SAAA;AAAA,MACvB;AAAA,KACF;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,YAAY,IAAI,SAAA;AAAA,IACpB,IAAA;AAAA,IACA;AAAA,MACE,OAAA;AAAA,MACA,IAAA,EAAM;AAAA,QACJ,OAAA,EAAS;AAAA;AACX,KACF;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,SAAA;AAAA,IACV,SAAA,EAAW,MAAM,SAAA,CAAU,OAAA,CAAQ,SAAS;AAAA,GAC9C;AACF;AAWA,eAAe,oBAAA,CAAqB;AAAA,EAClC,IAAA;AAAA,EACA,IAAA;AAAA,EACA,IAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,EAA6B;AAC3B,EAAA,MAAM,WAAA,GACJ,IAAA,CAAK,UAAA,YAAsB,OAAA,GACvB;AAAA,IACE,SAAS,IAAA,CAAK,UAAA;AAAA,IACd,KAAA,EAAO,MAAM,eAAA,CAAgB,IAAA,CAAK,UAAU;AAAA,GAC9C,GACA,MAAM,0BAAA,CAA2B,IAAA,EAAM,WAAW,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,OAAA,EAAS,IAAI,CAAA;AAE1F,EAAA,MAAM,cAAc,MAAM,SAAA,CAAU,WAAA,CAAY,OAAA,CAAQ,SAAS,IAAI,CAAA;AAErE,EAAA,MAAM,WAAA,GAAc,MAAM,iBAAA,CAAkB;AAAA,IAC1C,OAAO,WAAA,CAAY,KAAA;AAAA,IACnB,QAAA;AAAA,IACA,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,WAAA;AAAA,IACA,SAAA,EAAW;AAAA,GACZ,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,MAAM,mBAAA,CAAoB;AAAA,IAC7C,eAAe,IAAA,CAAK,IAAA;AAAA,IACpB,WAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA,EAAW;AAAA,GACZ,CAAA;AAED,EAAA,MAAM,eAAe,CAAA,EAAG,QAAA,CAAS,WAAA,EAAa,IAAI,YAAY,CAAA,CAAA;AAE9D,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,UAAA;AAAA,IAC5B;AAAA,MACE,MAAM,IAAA,CAAK,SAAA;AAAA,MACX,SAAA;AAAA,MACA,kBAAkB,IAAA,CAAK,SAAA;AAAA,MACvB,SAAA,EAAW;AAAA,QACT;AAAA,UACE,IAAA,EAAM,YAAA;AAAA,UACN,IAAA,EAAM,YAAA;AAAA,UACN;AAAA;AACF;AACF,KACF;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,UAAA,GAAa,WAAA,CAAY,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA,QAAA,KAAY;AAChE,IAAA,IAAI,CAAC,UAAU,IAAA,EAAM;AACnB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,SAAA,EAAY,WAAW,CAAA,+BAAA,EAAkC,IAAI,CAAA,uBAAA;AAAA,OAC/D;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,MAAM,QAAA,CAAS,IAAA;AAAA,MACf,WAAW,QAAA,CAAS,SAAA;AAAA,MACpB,MAAM,WAAA,CAAY;AAAA,KACpB;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,SAAA,GAAY,EAAE,GAAG,IAAA,EAAM,QAAQ,OAAA,EAAQ;AAE7C,EAAA,MAAM,KAAA,GACJ,QAAA,KAAa,KAAA,GACT,IAAI,QAAA;AAAA,IACF,IAAA;AAAA,IACA;AAAA,MACE,OAAA;AAAA,MACA,YAAA;AAAA,MACA,OAAA,EAAS;AAAA,KACX;AAAA,IACA;AAAA,MAEF,IAAI,QAAA;AAAA,IACF,IAAA;AAAA,IACA;AAAA,MACE,OAAA;AAAA,MACA,YAAA;AAAA,MACA,OAAA,EAAS;AAAA,KACX;AAAA,IACA;AAAA,GACF;AAEN,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,KAAA;AAAA,IACV,SAAA,EAAW,MAAM,SAAA,CAAU,OAAA,CAAQ,SAAS;AAAA,GAC9C;AACF;AAEA,eAAe,oBAAA,CACb,KAAA,EACA,SAAA,EACA,cAAA,EAC6B;AAC7B,EAAA,MAAM,mBAAA,GAAsB,MAAM,SAAA,CAAU,cAAc,CAAA;AAC1D,EAAA,IAAI,CAAC,mBAAA,EAAqB;AACxB,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,mBAAA,CAAoB,QAAQ,CAAA;AAE7D,EAAA,IAAI,oBAAoB,WAAA,EAAa;AACnC,IAAA,MAAM,gBAAgB,MAAM,SAAA,CAAU,QAAA,CAAS,SAAA,CAAU,SAAS,IAAI,CAAA;AACtE,IAAA,MAAM,gBAAgB,MAAM,SAAA,CAAU,QAAA,CAAS,SAAA,CAAU,QAAQ,EAAE,CAAA;AAEnE,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,SAAA,CAAU,SAAS,IAAI,CAAA;AAC/D,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,SAAA,CAAU,QAAQ,EAAE,CAAA;AAE5D,IAAA,IAAI,aAAA,KAAkB,eAAA,IAAmB,aAAA,KAAkB,eAAA,EAAiB;AAC1E,MAAA,OAAO,MAAM,SAAA,CAAU,QAAA,CAAS,MAAM,CAAA;AAAA,IACxC;AAAA,EACF;AAEA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF;AASA,eAAe,0BAAA,CACb,IAAA,EACA,SAAA,EACA,cAAA,EACA,SACA,IAAA,EACyD;AACzD,EAAA,MAAM,SAAA,GAAY,MAAM,SAAA,CAAU,cAAc,CAAA;AAEhD,EAAA,IAAI,CAAC,UAAU,MAAA,EAAQ;AACrB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,IAAI,CAAA,6BAAA,CAA+B,CAAA;AAAA,EACvE;AAEA,EAAA,MAAM,oBAAoB,SAAA,CAAU,MAAA,CAAO,CAAA,QAAA,KAAY,QAAA,CAAS,SAAS,UAAU,CAAA;AACnF,EAAA,MAAM,cAAc,SAAA,CAAU,MAAA,CAAO,CAAA,QAAA,KAAY,QAAA,CAAS,SAAS,UAAU,CAAA;AAE7E,EAAA,IAAI,iBAAA,CAAkB,SAAS,CAAA,EAAG;AAChC,IAAA,MAAM,oBAAuC,EAAC;AAC9C,IAAA,KAAA,MAAW,YAAY,iBAAA,EAAmB;AACxC,MAAA,iBAAA,CAAkB,IAAA,CAAK,6BAAA,CAA8B,QAAQ,CAAC,CAAA;AAAA,IAChE;AAEA,IAAA,MAAMA,QAAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,CAAA,WAAA,EAAc,IAAI,CAAA,CAAA,EAAI;AAAA,MACnD,SAAA;AAAA,MACA,IAAA,EAAM,cAAA;AAAA,MACN,YAAA,EAAc,iBAAA,CAAkB,CAAC,CAAA,CAAE,QAAA;AAAA,MACnC,KAAA,EAAO,iBAAA,CAAkB,GAAA,CAAI,uBAAuB;AAAA,KACrD,CAAA;AAED,IAAA,OAAO;AAAA,MACL,OAAA,EAAAA,QAAAA;AAAA,MACA,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI,WAAA,CAAY,WAAW,CAAA,EAAG;AAC5B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,IAAI,CAAA,oCAAA,CAAsC,CAAA;AAAA,EAC9E;AAEA,EAAA,MAAM,cAAiC,EAAC;AACxC,EAAA,KAAA,MAAW,YAAY,WAAA,EAAa;AAClC,IAAA,WAAA,CAAY,IAAA,CAAK,6BAAA,CAA8B,QAAQ,CAAC,CAAA;AAAA,EAC1D;AAEA,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,CAAA,WAAA,EAAc,IAAI,CAAA,CAAA,EAAI;AAAA,IACnD,SAAA;AAAA,IACA,IAAA,EAAM,WAAA;AAAA,IACN,KAAA,EAAO,WAAA,CAAY,GAAA,CAAI,uBAAuB;AAAA,GAC/C,CAAA;AAED,EAAA,MAAM,aAAA,GAAgB,cAAc,IAAI,CAAA,CAAA;AAExC,EAAA,IAAI,KAAK,EAAA,CAAG,SAAA;AAAA,IACV,aAAA;AAAA,IACA;AAAA,MACE,QAAA,EAAU,WAAA,CAAY,EAAE,SAAA,IAAa,aAAa,CAAA;AAAA,MAClD,OAAA,EAAS,WAAA,CAAY,GAAA,CAAI,CAAA,QAAA,MAAa;AAAA,QACpC,WAAW,CAAC,EAAE,IAAI,QAAA,CAAS,OAAA,CAAQ,OAAO,CAAA;AAAA,QAC1C,KAAA,EAAO,CAAC,uBAAA,CAAwB,QAAQ,CAAC;AAAA,OAC3C,CAAE;AAAA,KACJ;AAAA,IACA,EAAE,GAAG,IAAA,EAAM,QAAA,EAAU,YAAY,OAAO,CAAA,EAAG,QAAQ,OAAA;AAAQ,GAC7D;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,KAAA,EAAO;AAAA,GACT;AACF;AAEA,eAAe,gBAAgB,OAAA,EAA8C;AAC3E,EAAA,MAAM,IAAA,GAAO,MAAM,SAAA,CAAU,OAAA,CAAQ,IAAI,CAAA;AACzC,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,EAAC;AAE7B,EAAA,MAAM,SAA4B,EAAC;AAEnC,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,QAAQ,IAAA,CAAK,IAAA;AACnB,IAAA,MAAM,QAAA,GAAA,CAAY,IAAA,CAAK,QAAA,IAAY,KAAA,EAAO,WAAA,EAAY;AAEtD,IAAA,IAAI,KAAA,KAAU,MAAA,IAAc,QAAA,KAAa,KAAA,IAAS,aAAa,KAAA,EAAQ;AACrE,MAAA;AAAA,IACF;AAEA,IAAA,MAAA,CAAO,IAAA,CAAK;AAAA,MACV,IAAA,EAAM,KAAK,IAAA,IAAQ,MAAA;AAAA,MACnB,IAAA,EAAM,KAAA;AAAA,MACN,QAAA;AAAA,MACA,YAAY,IAAA,CAAK;AAAA,KAClB,CAAA;AAAA,EACH;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,8BAA8B,QAAA,EAA+C;AACpF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,MAAA;AAAA,IACN,MAAM,QAAA,CAAS,IAAA;AAAA,IACf,QAAA,EAAU,QAAA,CAAS,QAAA,CAAS,WAAA,EAAY;AAAA,IACxC,YAAY,QAAA,CAAS;AAAA,GACvB;AACF;AAEA,eAAe,iBAAA,CAAkB;AAAA,EAC/B,KAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAA,EAM6B;AAC3B,EAAA,MAAM,aAAa,KAAA,CAAM,MAAA,CAAO,CAAA,IAAA,KAAQ,IAAA,CAAK,aAAa,QAAQ,CAAA;AAElE,EAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,SAAA,EAAY,WAAW,CAAA,sBAAA,EAAyB,QAAQ,qCAAqC,SAAS,CAAA,EAAA;AAAA,KACxG;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,WAAW,CAAC,CAAA;AAAA,EACrB;AAEA,EAAA,MAAM,cAAA,GAAiB,MAAM,SAAA,CAAU,UAAU,CAAA;AAEjD,EAAA,IAAI,cAAA,KAAmB,MAAA,IAAa,cAAA,KAAmB,IAAA,EAAM;AAC3D,IAAA,OAAO,WAAW,CAAC,CAAA;AAAA,EACrB;AAEA,EAAA,IAAI,OAAO,mBAAmB,QAAA,EAAU;AACtC,IAAA,MAAMC,MAAAA,GAAQ,UAAA,CAAW,IAAA,CAAK,CAAA,SAAA,KAAa;AACzC,MAAA,IAAI,SAAA,CAAU,SAAS,cAAA,EAAgB;AACrC,QAAA,OAAO,IAAA;AAAA,MACT;AAEA,MAAA,IAAI,OAAO,SAAA,CAAU,UAAA,KAAe,QAAA,EAAU;AAC5C,QAAA,OAAO,UAAU,UAAA,KAAe,cAAA;AAAA,MAClC;AAEA,MAAA,OAAO,KAAA;AAAA,IACT,CAAC,CAAA;AAED,IAAA,IAAIA,MAAAA,EAAO;AACT,MAAA,OAAOA,MAAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,kBAAkB,SAAS,CAAA,wBAAA,EAA2B,cAAc,CAAA,eAAA,EAAkB,WAAW,4BAA4B,QAAQ,CAAA,UAAA;AAAA,KACvI;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,OAAO,cAAc,CAAA;AAE1C,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,IAAA,CAAK,CAAA,SAAA,KAAa;AACzC,IAAA,IAAI,SAAA,CAAU,SAAS,YAAA,EAAc;AACnC,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,IAAI,OAAO,SAAA,CAAU,UAAA,KAAe,QAAA,EAAU;AAC5C,MAAA,OAAO,UAAU,UAAA,KAAe,YAAA;AAAA,IAClC;AAEA,IAAA,OAAO,KAAA;AAAA,EACT,CAAC,CAAA;AAED,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR,kBAAkB,SAAS,CAAA,yBAAA,EAA4B,YAAY,CAAA,gBAAA,EAAmB,WAAW,4BAA4B,QAAQ,CAAA,UAAA;AAAA,GACvI;AACF;AAEA,eAAe,mBAAA,CAAoB;AAAA,EACjC,aAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAA,EAKoB;AAClB,EAAA,IAAI,CAAC,aAAA,EAAe;AAClB,IAAA,OAAO,WAAA,CAAY,IAAA;AAAA,EACrB;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,aAAa,CAAA;AAE9C,EAAA,IAAI,QAAA,KAAa,MAAA,IAAa,QAAA,KAAa,IAAA,EAAM;AAC/C,IAAA,OAAO,WAAA,CAAY,IAAA;AAAA,EACrB;AAEA,EAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,QAAQ,CAAA,EAAG;AAC/B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,eAAA,EAAkB,SAAS,CAAA,sCAAA,EAAyC,QAAA,CAAS,aAAa,CAAA,SAAA;AAAA,KAC5F;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAO,OAAO,QAAQ,CAAA;AAE5B,EAAA,IAAI,IAAA,GAAO,CAAA,IAAK,IAAA,GAAO,KAAA,EAAO;AAC5B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,eAAA,EAAkB,SAAS,CAAA,0BAAA,EAA6B,IAAI,CAAA,2CAAA;AAAA,KAC9D;AAAA,EACF;AAEA,EAAA,OAAO,IAAA;AACT","file":"gateway-route.js","sourcesContent":["import type { Secret } from \"../secret\"\nimport { type GatewayRouteSpec, gatewayRouteMediator, type TlsCertificate } from \"@highstate/common\"\nimport { k8s, type network } from \"@highstate/library\"\nimport { type ComponentResourceOptions, type Input, toPromise } from \"@highstate/pulumi\"\nimport { core } from \"@pulumi/kubernetes\"\nimport { Gateway, HttpRoute, TcpRoute, UdpRoute } from \"../gateway\"\nimport { Namespace } from \"../namespace\"\nimport { l4EndpointToServicePort, Service } from \"../service\"\nimport { getProvider, mapMetadata } from \"../shared\"\nimport { Certificate } from \"../tls\"\n\nexport const createGatewayRoute = gatewayRouteMediator.implement(\n  k8s.gatewayDataSchema,\n  async ({ name, spec, opts }, data) => {\n    const namespace =\n      spec.nativeData instanceof Service\n        ? await toPromise(spec.nativeData.namespace)\n        : Namespace.for(data.namespace, data.cluster)\n\n    const certSecret = await getCertificateSecret(name, namespace, spec.tlsCertificate)\n\n    const certificateRef = certSecret\n      ? {\n          kind: \"Secret\" as const,\n          group: \"\" as const,\n          name: certSecret.metadata.name,\n        }\n      : undefined\n\n    if (spec.type === \"http\") {\n      return await createHttpGatewayRoute({\n        name,\n        spec,\n        opts,\n        data,\n        namespace,\n        certificateRef,\n      })\n    }\n\n    const protocol = spec.type === \"tcp\" ? \"TCP\" : \"UDP\"\n\n    return await createL4GatewayRoute({\n      name,\n      spec,\n      opts,\n      data,\n      namespace,\n      protocol,\n    })\n  },\n)\n\ntype HttpGatewayRouteSpec = Extract<GatewayRouteSpec, { type: \"http\" }>\ntype L4GatewayRouteSpec = Extract<GatewayRouteSpec, { type: \"tcp\" | \"udp\" }>\n\ntype CreateHttpGatewayRouteArgs = {\n  name: string\n  spec: HttpGatewayRouteSpec\n  opts: ComponentResourceOptions | undefined\n  data: k8s.GatewayData\n  namespace: Namespace\n  certificateRef:\n    | {\n        kind: \"Secret\"\n        group: \"\"\n        name: Input<string>\n      }\n    | undefined\n}\n\nasync function createHttpGatewayRoute({\n  name,\n  spec,\n  opts,\n  data,\n  namespace,\n  certificateRef,\n}: CreateHttpGatewayRouteArgs) {\n  const backendService =\n    spec.nativeData instanceof Service\n      ? spec.nativeData\n      : (await createServiceFromEndpoints(name, namespace, spec.endpoints, data.cluster, opts))\n          .service\n\n  const listeners = [\n    {\n      name: \"https\",\n      port: data.httpsPort,\n      protocol: \"HTTPS\",\n      tls: {\n        mode: \"Terminate\",\n        certificateRefs: certificateRef ? [certificateRef] : undefined,\n      },\n    },\n  ]\n\n  const gateway = await Gateway.createOnce(\n    {\n      name: data.className,\n      namespace,\n      gatewayClassName: data.className,\n      listeners,\n    },\n    opts,\n  )\n\n  const httpRoute = new HttpRoute(\n    name,\n    {\n      gateway,\n      rule: {\n        backend: backendService,\n      },\n    },\n    opts,\n  )\n\n  return {\n    resource: httpRoute,\n    endpoints: await toPromise(gateway.endpoints),\n  }\n}\n\ntype CreateL4GatewayRouteArgs = {\n  name: string\n  spec: L4GatewayRouteSpec\n  opts: ComponentResourceOptions | undefined\n  data: k8s.GatewayData\n  namespace: Namespace\n  protocol: \"TCP\" | \"UDP\"\n}\n\nasync function createL4GatewayRoute({\n  name,\n  spec,\n  opts,\n  data,\n  namespace,\n  protocol,\n}: CreateL4GatewayRouteArgs) {\n  const serviceData =\n    spec.nativeData instanceof Service\n      ? {\n          service: spec.nativeData,\n          ports: await getServicePorts(spec.nativeData),\n        }\n      : await createServiceFromEndpoints(name, namespace, spec.endpoints, data.cluster, opts)\n\n  const serviceName = await toPromise(serviceData.service.metadata.name)\n\n  const backendPort = await selectBackendPort({\n    ports: serviceData.ports,\n    protocol,\n    targetPort: spec.targetPort,\n    serviceName,\n    routeName: name,\n  })\n\n  const listenerPort = await resolveListenerPort({\n    requestedPort: spec.port,\n    backendPort,\n    protocol,\n    routeName: name,\n  })\n\n  const listenerName = `${protocol.toLowerCase()}-${listenerPort}`\n\n  const gateway = await Gateway.createOnce(\n    {\n      name: data.className,\n      namespace,\n      gatewayClassName: data.className,\n      listeners: [\n        {\n          name: listenerName,\n          port: listenerPort,\n          protocol,\n        },\n      ],\n    },\n    opts,\n  )\n\n  const backendRef = serviceData.service.metadata.apply(metadata => {\n    if (!metadata?.name) {\n      throw new Error(\n        `Service \"${serviceName}\" referenced by gateway route \"${name}\" does not have a name.`,\n      )\n    }\n\n    return {\n      name: metadata.name,\n      namespace: metadata.namespace,\n      port: backendPort.port,\n    }\n  })\n\n  const routeOpts = { ...opts, parent: gateway }\n\n  const route =\n    protocol === \"TCP\"\n      ? new TcpRoute(\n          name,\n          {\n            gateway,\n            listenerName,\n            backend: backendRef,\n          },\n          routeOpts,\n        )\n      : new UdpRoute(\n          name,\n          {\n            gateway,\n            listenerName,\n            backend: backendRef,\n          },\n          routeOpts,\n        )\n\n  return {\n    resource: route,\n    endpoints: await toPromise(gateway.endpoints),\n  }\n}\n\nasync function getCertificateSecret(\n  _name: string,\n  namespace: Namespace,\n  tlsCertificate: Input<TlsCertificate | undefined> | undefined,\n): Promise<Secret | undefined> {\n  const resolvedCertificate = await toPromise(tlsCertificate)\n  if (!resolvedCertificate) {\n    return undefined\n  }\n\n  const resource = await toPromise(resolvedCertificate.resource)\n\n  if (resource instanceof Certificate) {\n    const certNamespace = await toPromise(resource.namespace.metadata.name)\n    const certClusterId = await toPromise(resource.namespace.cluster.id)\n\n    const targetNamespace = await toPromise(namespace.metadata.name)\n    const targetClusterId = await toPromise(namespace.cluster.id)\n\n    if (certNamespace === targetNamespace && certClusterId === targetClusterId) {\n      return await toPromise(resource.secret)\n    }\n  }\n\n  throw new Error(\n    \"Not implemented: copying certificate secret across namespaces/clusters/different systems\",\n  )\n}\n\ntype ServicePortInfo = {\n  name: string | undefined\n  port: number\n  protocol: \"TCP\" | \"UDP\"\n  targetPort?: number | string\n}\n\nasync function createServiceFromEndpoints(\n  name: string,\n  namespace: Namespace,\n  endpointsInput: Input<network.L4Endpoint[]>,\n  cluster: k8s.Cluster,\n  opts: ComponentResourceOptions | undefined,\n): Promise<{ service: Service; ports: ServicePortInfo[] }> {\n  const endpoints = await toPromise(endpointsInput)\n\n  if (!endpoints.length) {\n    throw new Error(`Gateway route \"${name}\" has no endpoints to expose.`)\n  }\n\n  const hostnameEndpoints = endpoints.filter(endpoint => endpoint.type === \"hostname\")\n  const ipEndpoints = endpoints.filter(endpoint => endpoint.type !== \"hostname\")\n\n  if (hostnameEndpoints.length > 0) {\n    const hostnamePortInfos: ServicePortInfo[] = []\n    for (const endpoint of hostnameEndpoints) {\n      hostnamePortInfos.push(toServicePortInfoFromEndpoint(endpoint))\n    }\n\n    const service = Service.create(`hs-backend-${name}`, {\n      namespace,\n      type: \"ExternalName\",\n      externalName: hostnameEndpoints[0].hostname,\n      ports: hostnameEndpoints.map(l4EndpointToServicePort),\n    })\n\n    return {\n      service,\n      ports: hostnamePortInfos,\n    }\n  }\n\n  if (ipEndpoints.length === 0) {\n    throw new Error(`Gateway route \"${name}\" requires at least one IP endpoint.`)\n  }\n\n  const ipPortInfos: ServicePortInfo[] = []\n  for (const endpoint of ipEndpoints) {\n    ipPortInfos.push(toServicePortInfoFromEndpoint(endpoint))\n  }\n\n  const service = Service.create(`hs-backend-${name}`, {\n    namespace,\n    type: \"ClusterIP\",\n    ports: ipEndpoints.map(l4EndpointToServicePort),\n  })\n\n  const endpointsName = `hs-backend-${name}`\n\n  new core.v1.Endpoints(\n    endpointsName,\n    {\n      metadata: mapMetadata({ namespace }, endpointsName),\n      subsets: ipEndpoints.map(endpoint => ({\n        addresses: [{ ip: endpoint.address.value }],\n        ports: [l4EndpointToServicePort(endpoint)],\n      })),\n    },\n    { ...opts, provider: getProvider(cluster), parent: service },\n  )\n\n  return {\n    service,\n    ports: ipPortInfos,\n  }\n}\n\nasync function getServicePorts(service: Service): Promise<ServicePortInfo[]> {\n  const spec = await toPromise(service.spec)\n  const ports = spec.ports ?? []\n\n  const result: ServicePortInfo[] = []\n\n  for (const port of ports) {\n    const value = port.port\n    const protocol = (port.protocol ?? \"TCP\").toUpperCase()\n\n    if (value === undefined || (protocol !== \"TCP\" && protocol !== \"UDP\")) {\n      continue\n    }\n\n    result.push({\n      name: port.name ?? undefined,\n      port: value,\n      protocol: protocol as \"TCP\" | \"UDP\",\n      targetPort: port.targetPort as number | string | undefined,\n    })\n  }\n\n  return result\n}\n\nfunction toServicePortInfoFromEndpoint(endpoint: network.L4Endpoint): ServicePortInfo {\n  return {\n    name: undefined,\n    port: endpoint.port,\n    protocol: endpoint.protocol.toUpperCase() as \"TCP\" | \"UDP\",\n    targetPort: endpoint.port,\n  }\n}\n\nasync function selectBackendPort({\n  ports,\n  protocol,\n  targetPort,\n  serviceName,\n  routeName,\n}: {\n  ports: ServicePortInfo[]\n  protocol: \"TCP\" | \"UDP\"\n  targetPort: Input<string | number | undefined> | undefined\n  serviceName: string\n  routeName: string\n}): Promise<ServicePortInfo> {\n  const candidates = ports.filter(port => port.protocol === protocol)\n\n  if (candidates.length === 0) {\n    throw new Error(\n      `Service \"${serviceName}\" does not expose any ${protocol} ports required by gateway route \"${routeName}\".`,\n    )\n  }\n\n  if (!targetPort) {\n    return candidates[0]\n  }\n\n  const resolvedTarget = await toPromise(targetPort)\n\n  if (resolvedTarget === undefined || resolvedTarget === null) {\n    return candidates[0]\n  }\n\n  if (typeof resolvedTarget === \"number\") {\n    const match = candidates.find(candidate => {\n      if (candidate.port === resolvedTarget) {\n        return true\n      }\n\n      if (typeof candidate.targetPort === \"number\") {\n        return candidate.targetPort === resolvedTarget\n      }\n\n      return false\n    })\n\n    if (match) {\n      return match\n    }\n\n    throw new Error(\n      `Gateway route \"${routeName}\" requested target port ${resolvedTarget}, but service \"${serviceName}\" does not expose it for ${protocol} backends.`,\n    )\n  }\n\n  const targetString = String(resolvedTarget)\n\n  const match = candidates.find(candidate => {\n    if (candidate.name === targetString) {\n      return true\n    }\n\n    if (typeof candidate.targetPort === \"string\") {\n      return candidate.targetPort === targetString\n    }\n\n    return false\n  })\n\n  if (match) {\n    return match\n  }\n\n  throw new Error(\n    `Gateway route \"${routeName}\" requested target port \"${targetString}\", but service \"${serviceName}\" does not expose it for ${protocol} backends.`,\n  )\n}\n\nasync function resolveListenerPort({\n  requestedPort,\n  backendPort,\n  protocol,\n  routeName,\n}: {\n  requestedPort: Input<number | undefined> | undefined\n  backendPort: ServicePortInfo\n  protocol: \"TCP\" | \"UDP\"\n  routeName: string\n}): Promise<number> {\n  if (!requestedPort) {\n    return backendPort.port\n  }\n\n  const resolved = await toPromise(requestedPort)\n\n  if (resolved === undefined || resolved === null) {\n    return backendPort.port\n  }\n\n  if (!Number.isInteger(resolved)) {\n    throw new Error(\n      `Gateway route \"${routeName}\" must use integer listener ports for ${protocol.toLowerCase()} traffic.`,\n    )\n  }\n\n  const port = Number(resolved)\n\n  if (port < 1 || port > 65535) {\n    throw new Error(\n      `Gateway route \"${routeName}\" specified listener port ${port}, which is outside the valid range 1-65535.`,\n    )\n  }\n\n  return port\n}\n"]}

package/dist/impl/tls-certificate.js

@@ -1,6 +1,6 @@
-import { Certificate } from '../chunk-C6WHUOC3.js';
-import '../chunk-VJL2BFKO.js';
-import { getProvider, Namespace } from '../chunk-SEWB4FUB.js';
+import { Certificate } from '../chunk-BR2CLUUD.js';
+import '../chunk-4G6LLC2X.js';
+import { getProvider, Namespace } from '../chunk-OBDQONMV.js';
 import '../chunk-PZ5AY32C.js';
 import { tlsCertificateMediator } from '@highstate/common';
 import { k8s } from '@highstate/library';