@highstate/k8s 0.20.0 → 0.21.1

package/dist/index.js

@@ -1,27 +1,99 @@
-export { Gateway, HttpRoute, TcpRoute, UdpRoute, mapHttpRouteRuleMatch, resolveBackendRef } from './chunk-P26SQ2ZB.js';
-export { Certificate } from './chunk-IXE3OKB4.js';
-export { Job } from './chunk-23X5SXQG.js';
-export { CronJob } from './chunk-PG27ZY2H.js';
-export { Chart, RenderedChart, getChartService, getChartServiceOutput, resolveHelmChart } from './chunk-TVKT3ZYX.js';
-export { Deployment } from './chunk-BTAEFJ5N.js';
-export { StatefulSet } from './chunk-S77TE7UC.js';
-import { ConfigMap } from './chunk-SZKOAHNX.js';
-export { ConfigMap, NativeNetworkPolicy, NetworkPolicy, PersistentVolumeClaim, Workload, filterPatchOwnedContainersInTemplate, getAutoVolumeName, getBestEndpoint, getFallbackContainerName, getWorkloadComponents, getWorkloadServiceComponents, getWorkloadVolumeResourceUuid, mapContainerEnvironment, mapContainerToRaw, mapEnvironmentSource, mapVolumeMount, mapWorkloadVolume, networkPolicyMediator, podSpecDefaults, requireBestEndpoint, workloadExtraArgs, workloadServiceExtraArgs } from './chunk-SZKOAHNX.js';
-export { dns01SolverMediator } from './chunk-HH2JJELM.js';
-export { createK8sTerminal, detectExternalIps } from './chunk-ADHZK6V2.js';
-export { Service, createServiceSpec, getServiceType, isEndpointFromCluster, l4EndpointToServicePort, mapContainerPortToServicePort, mapServiceToLabelSelector } from './chunk-OG2OPX7B.js';
-import { images_exports, ClusterAccessScope, getClusterKubeconfigContent } from './chunk-TOLFVF4S.js';
-export { ClusterAccessScope, Namespace, NamespacedResource, Resource, Secret, commonExtraArgs, getClusterKubeconfigContent, getEmbeddedSecretFileContent, getNamespaceName, getProvider, getProviderAsync, images_exports as images, mapMetadata, mapNamespaceNameToSelector, mapSelectorLikeToSelector, validateCluster } from './chunk-TOLFVF4S.js';
-import './chunk-PZYGZSN5.js';
-import { MaterializedFile, Command, parseEndpoint } from '@highstate/common';
-import { ComponentResource, output } from '@pulumi/pulumi';
-import { text, trimIndentation } from '@highstate/contract';
-import { normalize } from '@highstate/pulumi';
-import { serializeFunction } from '@pulumi/pulumi/runtime/index.js';
-import { deepmerge } from 'deepmerge-ts';
-import { readPackageJSON } from 'pkg-types';
-import { omitBy, mapValues, merge } from 'remeda';
-
+// @bun
+import {
+  Gateway,
+  HttpRoute,
+  TcpRoute,
+  UdpRoute,
+  mapHttpRouteRuleMatch,
+  resolveBackendRef
+} from "./chunk-46ntav0c.js";
+import {
+  Certificate
+} from "./chunk-556pc9e6.js";
+import {
+  Job
+} from "./chunk-qyshvz32.js";
+import {
+  CronJob
+} from "./chunk-tpfyj6fe.js";
+import {
+  Chart,
+  RenderedChart,
+  getChartService,
+  getChartServiceOutput,
+  resolveHelmChart
+} from "./chunk-pqc6w52f.js";
+import {
+  Deployment
+} from "./chunk-7kgjgcft.js";
+import {
+  StatefulSet
+} from "./chunk-z6bmpnm7.js";
+import {
+  ConfigMap,
+  NativeNetworkPolicy,
+  NetworkPolicy,
+  PersistentVolumeClaim,
+  Workload,
+  filterPatchOwnedContainersInTemplate,
+  getAutoVolumeName,
+  getBestEndpoint,
+  getFallbackContainerName,
+  getWorkloadComponents,
+  getWorkloadServiceComponents,
+  getWorkloadVolumeResourceUuid,
+  mapContainerEnvironment,
+  mapContainerToRaw,
+  mapEnvironmentSource,
+  mapVolumeMount,
+  mapWorkloadVolume,
+  networkPolicyMediator,
+  podSpecDefaults,
+  requireBestEndpoint,
+  workloadExtraArgs,
+  workloadServiceExtraArgs
+} from "./chunk-h1b79v66.js";
+import {
+  dns01SolverMediator
+} from "./chunk-de82bbp2.js";
+import {
+  createK8sTerminal,
+  detectExternalIps
+} from "./chunk-9hs97f1q.js";
+import {
+  Service,
+  createServiceSpec,
+  getServiceType,
+  isEndpointFromCluster,
+  l4EndpointToServicePort,
+  mapContainerPortToServicePort,
+  mapServiceToLabelSelector
+} from "./chunk-k4w9zpn5.js";
+import {
+  ClusterAccessScope,
+  Namespace,
+  NamespacedResource,
+  Resource,
+  Secret,
+  commonExtraArgs,
+  getClusterKubeconfigContent,
+  getEmbeddedSecretFileContent,
+  getNamespaceName,
+  getProvider,
+  getProviderAsync,
+  images_default,
+  mapMetadata,
+  mapNamespaceNameToSelector,
+  mapSelectorLikeToSelector,
+  validateCluster
+} from "./chunk-facs31cb.js";
+import"./chunk-b05q6fm2.js";
+// src/kubectl.ts
+import { Command, MaterializedFile } from "@highstate/common";
+import {
+  ComponentResource,
+  output
+} from "@pulumi/pulumi";
 function createCommand(command) {
   if (Array.isArray(command)) {
     return command.join(" ");
@@ -30,9 +102,7 @@ function createCommand(command) {
 }
 function buildKubeCommand(command, namespace) {
   if (namespace) {
-    return output([command, namespace]).apply(
-      ([cmd, ns]) => `kubectl -n ${ns} ${createCommand(cmd)}`
-    );
+    return output([command, namespace]).apply(([cmd, ns]) => `kubectl -n ${ns} ${createCommand(cmd)}`);
   }
   return output(command).apply((cmd) => `kubectl ${createCommand(cmd)}`);
 }
@@ -46,18 +116,10 @@ function buildWorkloadExecCommand(command, workload) {
     return `exec -it ${type}/${name} -- ${createCommand(command2)}`;
   });
 }
-var KubeCommand = class _KubeCommand extends ComponentResource {
-  /**
-   * The underlying command that will be executed when this unit is invoked.
-   */
+
+class KubeCommand extends ComponentResource {
   command;
-  /**
-   * The standard output of the command.
-   */
   stdout;
-  /**
-   * The standard error of the command.
-   */
   stderr;
   constructor(name, args, opts) {
     super("highstate:k8s:KubeCommand", name, args, opts);
@@ -66,10 +128,10 @@ var KubeCommand = class _KubeCommand extends ComponentResource {
       return new Command(`kubectl-${name}`, {
         host: "local",
         create: buildKubeCommand(args.create, args.namespace),
-        update: args.update ? buildKubeCommand(args.update, args.namespace) : void 0,
-        delete: args.delete ? buildKubeCommand(args.delete, args.namespace) : void 0,
+        update: args.update ? buildKubeCommand(args.update, args.namespace) : undefined,
+        delete: args.delete ? buildKubeCommand(args.delete, args.namespace) : undefined,
         files: [kubeconfig],
-        image: images_exports["terminal-kubectl"].image,
+        image: images_default["terminal-kubectl"].image,
         containerShell: "bash",
         environment: {
           KUBECONFIG: kubeconfig.path
@@ -80,31 +142,32 @@ var KubeCommand = class _KubeCommand extends ComponentResource {
     this.stderr = this.command.stderr;
   }
   static forNamespace(name, args, opts) {
-    return new _KubeCommand(
-      name,
-      {
-        cluster: output(args.namespace).cluster,
-        create: args.create,
-        update: args.update,
-        delete: args.delete,
-        namespace: output(args.namespace).metadata.name
-      },
-      opts
-    );
+    return new KubeCommand(name, {
+      cluster: output(args.namespace).cluster,
+      create: args.create,
+      update: args.update,
+      delete: args.delete,
+      namespace: output(args.namespace).metadata.name
+    }, opts);
   }
   static execInto(name, args, opts) {
-    return _KubeCommand.forNamespace(
-      name,
-      {
-        namespace: output(args.workload).namespace,
-        create: buildWorkloadExecCommand(args.create, args.workload),
-        update: args.update ? buildWorkloadExecCommand(args.update, args.workload) : void 0,
-        delete: args.delete ? buildWorkloadExecCommand(args.delete, args.workload) : void 0
-      },
-      opts
-    );
+    return KubeCommand.forNamespace(name, {
+      namespace: output(args.workload).namespace,
+      create: buildWorkloadExecCommand(args.create, args.workload),
+      update: args.update ? buildWorkloadExecCommand(args.update, args.workload) : undefined,
+      delete: args.delete ? buildWorkloadExecCommand(args.delete, args.workload) : undefined
+    }, opts);
   }
-};
+}
+// src/scripting/bundle.ts
+import { parseEndpoint } from "@highstate/common";
+import { text, trimIndentation } from "@highstate/contract";
+import { normalize } from "@highstate/pulumi";
+import {
+  ComponentResource as ComponentResource2,
+  output as output2
+} from "@pulumi/pulumi";
+import { deepmerge } from "deepmerge-ts";
 
 // src/scripting/environment.ts
 var emptyDistributionEnvironment = {
@@ -115,18 +178,16 @@ var emptyDistributionEnvironment = {
 var emptyScriptEnvironment = {
   alpine: {
     ...emptyDistributionEnvironment,
-    image: images_exports.alpine.image,
+    image: images_default.alpine.image,
     allowedEndpoints: [
-      //
       "tcp://dl-cdn.alpinelinux.org:443",
       "tcp://dl-cdn.alpinelinux.org:80"
     ]
   },
   ubuntu: {
     ...emptyDistributionEnvironment,
-    image: images_exports.ubuntu.image,
+    image: images_default.ubuntu.image,
     allowedEndpoints: [
-      //
       "tcp://archive.ubuntu.com:80",
       "tcp://archive.ubuntu.com:443",
       "tcp://security.ubuntu.com:80",
@@ -141,158 +202,68 @@ var emptyScriptEnvironment = {
   environment: {},
   allowedEndpoints: []
 };
-var functionScriptImages = {
-  alpine: "oven/bun@sha256:6b14922b0885c3890cdb0b396090af1da486ba941df5ee94391eef64f7113c61",
-  ubuntu: "oven/bun@sha256:66b431441dc4c36d7e8164bfc61e6348ec1d7ce2862fc3a29f5dc9856e8205e4"
-};
 
 // src/scripting/bundle.ts
-var ScriptBundle = class extends ComponentResource {
-  /**
-   * The config map containing the scripts.
-   */
+class ScriptBundle extends ComponentResource2 {
   configMap;
-  /**
-   * The volumes that should be included in the workload.
-   */
   volumes;
-  /**
-   * The volume mounts that should be defined in the container.
-   */
   volumeMounts;
-  /**
-   * The environment variables that should be defined in the container.
-   */
   environment;
-  /**
-   * The image to use for the scripts.
-   */
   image;
-  /**
-   * The distribution to use for the scripts.
-   */
   distribution;
-  /**
-   * The list of endpoints that the script is allowed to access.
-   */
   allowedEndpoints;
   constructor(name, args, opts) {
     super("highstate:k8s:ScriptBundle", name, args, opts);
-    const scriptEnvironment = output(args).apply((args2) => normalize(args2.environment, args2.environments)).apply((args2) => deepmerge(emptyScriptEnvironment, ...args2));
-    const hasFunctionScripts = scriptEnvironment.apply((scriptEnvironment2) => {
-      return Object.values(scriptEnvironment2.files).some((file) => typeof file === "function");
-    });
+    const scriptEnvironment = output2(args).apply((args2) => normalize(args2.environment, args2.environments)).apply((args2) => deepmerge(emptyScriptEnvironment, ...args2));
     this.distribution = args.distribution;
     this.environment = scriptEnvironment.environment;
-    this.image = hasFunctionScripts.apply(
-      (hasFunctionScripts2) => output(
-        hasFunctionScripts2 ? functionScriptImages[args.distribution] : scriptEnvironment[args.distribution].image
-      )
-    );
-    this.allowedEndpoints = output({ scriptEnvironment, hasFunctionScripts }).apply(
-      ({ scriptEnvironment: scriptEnvironment2, hasFunctionScripts: hasFunctionScripts2 }) => {
-        const allowedEndpoints = [
-          ...scriptEnvironment2.allowedEndpoints,
-          ...scriptEnvironment2[args.distribution].allowedEndpoints
-        ];
-        if (hasFunctionScripts2) {
-          allowedEndpoints.push("tcp://registry.npmjs.org:443");
-        }
-        return allowedEndpoints.map((endpoint) => parseEndpoint(endpoint));
-      }
-    );
-    this.configMap = output({ scriptEnvironment, args }).apply(({ scriptEnvironment: scriptEnvironment2, args: args2 }) => {
-      return ConfigMap.create(
-        name,
-        {
-          namespace: args2.namespace,
-          data: createScriptData(this.distribution, scriptEnvironment2)
-        },
-        { ...opts, parent: this }
-      );
+    this.image = scriptEnvironment[args.distribution].image;
+    this.allowedEndpoints = scriptEnvironment.apply((scriptEnvironment2) => {
+      const allowedEndpoints = [
+        ...scriptEnvironment2.allowedEndpoints,
+        ...scriptEnvironment2[args.distribution].allowedEndpoints
+      ];
+      return allowedEndpoints.map((endpoint) => parseEndpoint(endpoint));
     });
-    this.volumes = output({ hasFunctionScripts, volumes: scriptEnvironment.volumes }).apply(
-      ({ hasFunctionScripts: hasFunctionScripts2, volumes }) => {
-        return [
-          ...volumes,
-          {
+    this.configMap = output2({ scriptEnvironment, args }).apply(({ scriptEnvironment: scriptEnvironment2, args: args2 }) => {
+      return ConfigMap.create(name, {
+        namespace: args2.namespace,
+        data: createScriptData(this.distribution, scriptEnvironment2)
+      }, { ...opts, parent: this });
+    });
+    this.volumes = scriptEnvironment.volumes.apply((volumes) => {
+      return [
+        ...volumes,
+        {
+          name: this.configMap.metadata.name,
+          configMap: {
             name: this.configMap.metadata.name,
-            configMap: {
-              name: this.configMap.metadata.name,
-              defaultMode: 360
-              // read and execute permissions
-            }
-          },
-          ...hasFunctionScripts2 ? [{ name: "node-modules", emptyDir: {} }] : []
-        ];
-      }
-    );
-    this.volumeMounts = output({
-      hasFunctionScripts,
-      volumeMounts: scriptEnvironment.volumeMounts
-    }).apply(({ hasFunctionScripts: hasFunctionScripts2, volumeMounts }) => {
+            defaultMode: 360
+          }
+        }
+      ];
+    });
+    this.volumeMounts = scriptEnvironment.volumeMounts.apply((volumeMounts) => {
       return [
         ...volumeMounts,
         {
           volume: this.configMap,
           mountPath: "/scripts"
-        },
-        ...hasFunctionScripts2 ? [{ name: "node-modules", mountPath: "/scripts/node_modules" }] : []
+        }
       ];
     });
   }
-};
-function stripWorkspacePrefix(value) {
-  if (value.startsWith("workspace:")) {
-    return value.replace("workspace:", "");
-  }
-  return value;
 }
 async function createScriptData(distribution, environment) {
   const scriptData = {};
   const actions = [];
   const distributionEnvironment = environment[distribution];
   const setupScripts = { ...environment.setupScripts };
-  let hasFunctionScripts = false;
   for (const key in environment.files) {
-    if (typeof environment.files[key] === "function") {
-      const serialized = await serializeFunction(environment.files[key]);
-      scriptData[key] = text`
-        #!/usr/local/bin/bun
-        
-        ${serialized.text}
-
-        exports.${serialized.exportName}()
-      `;
-      hasFunctionScripts = true;
-    } else {
-      scriptData[key] = environment.files[key];
-    }
-  }
-  if (hasFunctionScripts) {
-    const packageJson = await readPackageJSON();
-    packageJson.dependencies = omitBy(
-      mapValues(packageJson.dependencies ?? {}, stripWorkspacePrefix),
-      (_, key) => key.startsWith("@highstate/")
-    );
-    packageJson.devDependencies = omitBy(
-      mapValues(packageJson.devDependencies ?? {}, stripWorkspacePrefix),
-      (_, key) => key.startsWith("@highstate/")
-    );
-    scriptData["package.json"] = JSON.stringify(packageJson, null, 2);
-    setupScripts["resolve-dependencies.sh"] = text`
-      #!/usr/local/bin/bun
-      set -e
-
-      cd /scripts
-      bun install --production
-    `;
+    scriptData[key] = environment.files[key];
   }
   if (distributionEnvironment.preInstallPackages.length > 0) {
-    scriptData["pre-install-packages.sh"] = getInstallPackagesScript(
-      distribution,
-      distributionEnvironment.preInstallPackages
-    );
+    scriptData["pre-install-packages.sh"] = getInstallPackagesScript(distribution, distributionEnvironment.preInstallPackages);
     actions.push(`
       echo "+ Installing pre-install packages..."
       /scripts/pre-install-packages.sh
@@ -310,10 +281,7 @@ async function createScriptData(distribution, environment) {
     }
   }
   if (distributionEnvironment.packages.length > 0) {
-    scriptData["install-packages.sh"] = getInstallPackagesScript(
-      distribution,
-      distributionEnvironment.packages
-    );
+    scriptData["install-packages.sh"] = getInstallPackagesScript(distribution, distributionEnvironment.packages);
     actions.push(`
       echo "+ Installing packages..."
       /scripts/install-packages.sh
@@ -342,7 +310,9 @@ async function createScriptData(distribution, environment) {
     }
     actions.push(`
       function cleanup() {
-      ${cleanupActions.map((s) => s.trim()).join("\n\n")}
+      ${cleanupActions.map((s) => s.trim()).join(`
+
+`)}
       }
 
       trap cleanup EXIT
@@ -358,7 +328,9 @@ async function createScriptData(distribution, environment) {
       exit 1
     fi
 
-  ${actions.map((s) => s.trim()).join("\n\n")}
+  ${actions.map((s) => s.trim()).join(`
+
+`)}
 
     echo "+ Running main script..."
     $@
@@ -384,9 +356,12 @@ function getInstallPackagesScript(distribution, packages) {
     `;
   }
 }
+// src/scripting/container.ts
+import { output as output3 } from "@pulumi/pulumi";
+import { merge } from "remeda";
 function createScriptContainer(options) {
-  const bundle = output(options.bundle);
-  return output({
+  const bundle = output3(options.bundle);
+  return output3({
     options,
     image: bundle.image,
     volumeMounts: bundle.volumeMounts,
@@ -405,6 +380,8 @@ function createScriptContainer(options) {
     };
   });
 }
+// src/worker.ts
+import { output as output4 } from "@pulumi/pulumi";
 async function createMonitorWorker(namespace, resources) {
   const scope = new ClusterAccessScope("monitor", {
     rule: {
@@ -415,16 +392,83 @@ async function createMonitorWorker(namespace, resources) {
     namespace,
     resources
   });
-  return output({
+  return output4({
     name: "monitor",
-    image: images_exports["worker.k8s-monitor"].image,
+    image: images_default["worker.k8s-monitor"].image,
     params: {
       kubeconfig: getClusterKubeconfigContent(scope.cluster),
-      resources: output(resources).apply((resources2) => resources2.map((r) => r.entity))
+      resources: output4(resources).apply((resources2) => resources2.map((r) => r.entity))
     }
   });
 }
-
-export { KubeCommand, ScriptBundle, createMonitorWorker, createScriptContainer, emptyScriptEnvironment, functionScriptImages };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map
+export {
+  workloadServiceExtraArgs,
+  workloadExtraArgs,
+  validateCluster,
+  resolveHelmChart,
+  resolveBackendRef,
+  requireBestEndpoint,
+  podSpecDefaults,
+  networkPolicyMediator,
+  mapWorkloadVolume,
+  mapVolumeMount,
+  mapServiceToLabelSelector,
+  mapSelectorLikeToSelector,
+  mapNamespaceNameToSelector,
+  mapMetadata,
+  mapHttpRouteRuleMatch,
+  mapEnvironmentSource,
+  mapContainerToRaw,
+  mapContainerPortToServicePort,
+  mapContainerEnvironment,
+  l4EndpointToServicePort,
+  isEndpointFromCluster,
+  images_default as images,
+  getWorkloadVolumeResourceUuid,
+  getWorkloadServiceComponents,
+  getWorkloadComponents,
+  getServiceType,
+  getProviderAsync,
+  getProvider,
+  getNamespaceName,
+  getFallbackContainerName,
+  getEmbeddedSecretFileContent,
+  getClusterKubeconfigContent,
+  getChartServiceOutput,
+  getChartService,
+  getBestEndpoint,
+  getAutoVolumeName,
+  filterPatchOwnedContainersInTemplate,
+  emptyScriptEnvironment,
+  dns01SolverMediator,
+  detectExternalIps,
+  createServiceSpec,
+  createScriptContainer,
+  createMonitorWorker,
+  createK8sTerminal,
+  commonExtraArgs,
+  Workload,
+  UdpRoute,
+  TcpRoute,
+  StatefulSet,
+  Service,
+  Secret,
+  ScriptBundle,
+  Resource,
+  RenderedChart,
+  PersistentVolumeClaim,
+  NetworkPolicy,
+  NativeNetworkPolicy,
+  NamespacedResource,
+  Namespace,
+  KubeCommand,
+  Job,
+  HttpRoute,
+  Gateway,
+  Deployment,
+  CronJob,
+  ConfigMap,
+  ClusterAccessScope,
+  Chart,
+  Certificate
+};

package/dist/units/cert-manager/index.js

@@ -1,12 +1,19 @@
-import { Chart } from '../../chunk-TVKT3ZYX.js';
-import '../../chunk-BTAEFJ5N.js';
-import '../../chunk-S77TE7UC.js';
-import '../../chunk-SZKOAHNX.js';
-import '../../chunk-OG2OPX7B.js';
-import { Namespace } from '../../chunk-TOLFVF4S.js';
-import '../../chunk-PZYGZSN5.js';
-import { k8s } from '@highstate/library';
-import { forUnit } from '@highstate/pulumi';
+// @bun
+import {
+  Chart
+} from "../../chunk-pqc6w52f.js";
+import"../../chunk-7kgjgcft.js";
+import"../../chunk-z6bmpnm7.js";
+import"../../chunk-h1b79v66.js";
+import"../../chunk-k4w9zpn5.js";
+import {
+  Namespace
+} from "../../chunk-facs31cb.js";
+import"../../chunk-b05q6fm2.js";
+
+// src/units/cert-manager/index.ts
+import { k8s } from "@highstate/library";
+import { forUnit } from "@highstate/pulumi";
 
 // assets/charts.json
 var charts_default = {
@@ -38,7 +45,6 @@ new Chart("cert-manager", {
 var cert_manager_default = outputs({
   k8sCluster: inputs.k8sCluster
 });
-
-export { cert_manager_default as default };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map
+export {
+  cert_manager_default as default
+};

package/dist/units/cluster-patch/index.js

@@ -1,8 +1,10 @@
-import '../../chunk-PZYGZSN5.js';
-import { parseEndpoints, l4EndpointToString, l3EndpointToString } from '@highstate/common';
-import { k8s } from '@highstate/library';
-import { forUnit, toPromise } from '@highstate/pulumi';
+// @bun
+import"../../chunk-b05q6fm2.js";
 
+// src/units/cluster-patch/index.ts
+import { l3EndpointToString, l4EndpointToString, parseEndpoints } from "@highstate/common";
+import { k8s } from "@highstate/library";
+import { forUnit, toPromise } from "@highstate/pulumi";
 var { args, inputs, outputs } = forUnit(k8s.clusterPatch);
 var cluster = await toPromise(inputs.k8sCluster);
 var endpoints = parseEndpoints([...args.endpoints, ...inputs.endpoints], 3);
@@ -20,7 +22,6 @@ var cluster_patch_default = outputs({
     apiEndpoints: apiEndpoints.map(l4EndpointToString)
   }
 });
-
-export { cluster_patch_default as default };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map
+export {
+  cluster_patch_default as default
+};