@highstate/k8s 0.9.18 → 0.9.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (93) hide show
  1. package/dist/chunk-2EEHJZPD.js +13 -0
  2. package/dist/chunk-2EEHJZPD.js.map +1 -0
  3. package/dist/{chunk-OFFSHGC6.js → chunk-4JGXGN2L.js} +66 -48
  4. package/dist/chunk-4JGXGN2L.js.map +1 -0
  5. package/dist/chunk-A3XGSDIW.js +306 -0
  6. package/dist/chunk-A3XGSDIW.js.map +1 -0
  7. package/dist/chunk-IMTXUK2U.js +244 -0
  8. package/dist/chunk-IMTXUK2U.js.map +1 -0
  9. package/dist/chunk-JYNXQ3I3.js +287 -0
  10. package/dist/chunk-JYNXQ3I3.js.map +1 -0
  11. package/dist/{chunk-5C2BJGES.js → chunk-KDD6XUWM.js} +30 -23
  12. package/dist/chunk-KDD6XUWM.js.map +1 -0
  13. package/dist/chunk-NOFJC3EM.js +236 -0
  14. package/dist/chunk-NOFJC3EM.js.map +1 -0
  15. package/dist/chunk-NXSYCA3V.js +337 -0
  16. package/dist/chunk-NXSYCA3V.js.map +1 -0
  17. package/dist/chunk-SBC3TUIN.js +1513 -0
  18. package/dist/chunk-SBC3TUIN.js.map +1 -0
  19. package/dist/chunk-SI7X6N46.js +338 -0
  20. package/dist/chunk-SI7X6N46.js.map +1 -0
  21. package/dist/chunk-WGMJCZSK.js +360 -0
  22. package/dist/chunk-WGMJCZSK.js.map +1 -0
  23. package/dist/deployment-752P6JIT.js +8 -0
  24. package/dist/{deployment-XK3CDJOE.js.map → deployment-752P6JIT.js.map} +1 -1
  25. package/dist/highstate.manifest.json +8 -7
  26. package/dist/impl/gateway-route.js +123 -0
  27. package/dist/impl/gateway-route.js.map +1 -0
  28. package/dist/impl/tls-certificate.js +32 -0
  29. package/dist/impl/tls-certificate.js.map +1 -0
  30. package/dist/index.js +736 -208
  31. package/dist/index.js.map +1 -1
  32. package/dist/stateful-set-N64YVKR7.js +8 -0
  33. package/dist/{stateful-set-7CAQWTV2.js.map → stateful-set-N64YVKR7.js.map} +1 -1
  34. package/dist/units/cert-manager/index.js +11 -10
  35. package/dist/units/cert-manager/index.js.map +1 -1
  36. package/dist/units/dns01-issuer/index.js +27 -23
  37. package/dist/units/dns01-issuer/index.js.map +1 -1
  38. package/dist/units/existing-cluster/index.js +11 -8
  39. package/dist/units/existing-cluster/index.js.map +1 -1
  40. package/dist/units/gateway-api/index.js +2 -2
  41. package/dist/units/gateway-api/index.js.map +1 -1
  42. package/package.json +39 -13
  43. package/src/cluster.ts +30 -22
  44. package/src/config-map.ts +195 -57
  45. package/src/container.ts +5 -5
  46. package/src/cron-job.ts +403 -31
  47. package/src/deployment.ts +260 -120
  48. package/src/dns01-solver.ts +10 -0
  49. package/src/gateway/backend.ts +2 -2
  50. package/src/gateway/gateway.ts +383 -0
  51. package/src/gateway/http-route.ts +17 -24
  52. package/src/gateway/index.ts +1 -0
  53. package/src/helm.ts +83 -53
  54. package/src/impl/gateway-route.ts +155 -0
  55. package/src/impl/tls-certificate.ts +33 -0
  56. package/src/index.ts +22 -67
  57. package/src/job.ts +393 -28
  58. package/src/namespace.ts +236 -99
  59. package/src/network-policy.ts +216 -165
  60. package/src/network.ts +2 -2
  61. package/src/pvc.ts +266 -65
  62. package/src/rbac.ts +218 -0
  63. package/src/scripting/bundle.ts +9 -20
  64. package/src/scripting/container.ts +1 -1
  65. package/src/scripting/environment.ts +5 -5
  66. package/src/secret.ts +200 -62
  67. package/src/service.ts +288 -158
  68. package/src/shared.ts +94 -67
  69. package/src/stateful-set.ts +270 -117
  70. package/src/tls.ts +344 -0
  71. package/src/units/cert-manager/index.ts +2 -3
  72. package/src/units/dns01-issuer/index.ts +30 -14
  73. package/src/units/existing-cluster/index.ts +10 -7
  74. package/src/units/gateway-api/index.ts +2 -2
  75. package/src/worker.ts +26 -0
  76. package/src/workload.ts +275 -171
  77. package/dist/chunk-5C2BJGES.js.map +0 -1
  78. package/dist/chunk-5TLC5BXR.js +0 -256
  79. package/dist/chunk-5TLC5BXR.js.map +0 -1
  80. package/dist/chunk-BBIY3KUN.js +0 -1557
  81. package/dist/chunk-BBIY3KUN.js.map +0 -1
  82. package/dist/chunk-OFFSHGC6.js.map +0 -1
  83. package/dist/chunk-TZHOUJRC.js +0 -202
  84. package/dist/chunk-TZHOUJRC.js.map +0 -1
  85. package/dist/chunk-YWRJ4EZM.js +0 -192
  86. package/dist/chunk-YWRJ4EZM.js.map +0 -1
  87. package/dist/deployment-XK3CDJOE.js +0 -6
  88. package/dist/stateful-set-7CAQWTV2.js +0 -6
  89. package/dist/units/access-point/index.js +0 -21
  90. package/dist/units/access-point/index.js.map +0 -1
  91. package/src/access-point.ts +0 -191
  92. package/src/units/access-point/index.ts +0 -19
  93. package/src/units/dns01-issuer/solver.ts +0 -23
@@ -1,256 +0,0 @@
1
- import { __export } from './chunk-PZ5AY32C.js';
2
- import { Provider, core } from '@pulumi/kubernetes';
3
- import { ComponentResource, output as output$1 } from '@pulumi/pulumi';
4
- import { output, toPromise, interpolate } from '@highstate/pulumi';
5
-
6
- // assets/images.json
7
- var images_exports = {};
8
- __export(images_exports, {
9
- default: () => images_default,
10
- "terminal-kubectl": () => terminal_kubectl
11
- });
12
- var terminal_kubectl = {
13
- name: "ghcr.io/exeteres/highstate/terminal-kubectl",
14
- tag: "latest",
15
- image: "ghcr.io/exeteres/highstate/terminal-kubectl:latest@sha256:6b43498234fa7e2edbae2cd108a40b957575d184349ea622ffabdbe9b6d06933"
16
- };
17
- var images_default = {
18
- "terminal-kubectl": terminal_kubectl
19
- };
20
-
21
- // src/shared.ts
22
- var providers = /* @__PURE__ */ new Map();
23
- function getProvider(cluster) {
24
- const provider = output(cluster).apply((cluster2) => {
25
- const existingProvider = providers.get(cluster2.id);
26
- if (existingProvider) {
27
- return existingProvider;
28
- }
29
- const provider2 = new Provider(`${cluster2.name}-${cluster2.id}`, {
30
- kubeconfig: cluster2.kubeconfig
31
- });
32
- providers.set(cluster2.id, provider2);
33
- return provider2;
34
- });
35
- return toPromise(provider);
36
- }
37
- var commonExtraArgs = ["name", "namespace", "cluster", "metadata"];
38
- function mapMetadata(args, fallbackName) {
39
- return {
40
- ...args.metadata,
41
- name: args.name ?? args.metadata?.name ?? fallbackName,
42
- namespace: args.namespace ? mapNamespaceLikeToNamespaceName(args.namespace) : void 0
43
- };
44
- }
45
- function mapSelectorLikeToSelector(selector) {
46
- if ("matchLabels" in selector || "matchExpressions" in selector) {
47
- return selector;
48
- }
49
- return {
50
- matchLabels: selector
51
- };
52
- }
53
- function mapNamespaceLikeToNamespaceName(namespace) {
54
- if (Namespace.isInstance(namespace)) {
55
- return namespace.metadata.name;
56
- }
57
- if (core.v1.Namespace.isInstance(namespace)) {
58
- return namespace.metadata.name;
59
- }
60
- return output(namespace);
61
- }
62
- function mapNamespaceNameToSelector(namespace) {
63
- return {
64
- matchLabels: {
65
- "kubernetes.io/metadata.name": namespace
66
- }
67
- };
68
- }
69
- function resourceIdToString(id) {
70
- return output(id).apply((metadata) => {
71
- const namespaceName = metadata.namespace ? mapNamespaceLikeToNamespaceName(metadata.namespace) : void 0;
72
- return output(namespaceName ? interpolate`${namespaceName}/${metadata.name}` : metadata.name);
73
- });
74
- }
75
- function withPatchName(resourceType, resource, cluster) {
76
- return output({ resource, cluster }).apply(({ resource: resource2, cluster: cluster2 }) => {
77
- if (resource2.clusterId !== cluster2.id) {
78
- throw new Error(
79
- `Cluster mismatch when patching ${resourceType} "${resource2.metadata.name}": "${resource2.clusterId}" != "${cluster2.id}"`
80
- );
81
- }
82
- return resource2.metadata.name;
83
- });
84
- }
85
-
86
- // src/namespace.ts
87
- var Namespace = class extends ComponentResource {
88
- constructor(type, name, args, opts, cluster, metadata, spec, status) {
89
- super(type, name, args, opts);
90
- this.cluster = cluster;
91
- this.metadata = metadata;
92
- this.spec = spec;
93
- this.status = status;
94
- }
95
- /**
96
- * Creates a new namespace.
97
- */
98
- static create(name, args, opts) {
99
- return new CreatedNamespace(name, args, opts);
100
- }
101
- /**
102
- * Creates a new namespace or patches an existing one.
103
- *
104
- * Will throw an error if the namespace does not exist when `args.resource` is provided.
105
- */
106
- static createOrPatch(name, args, opts) {
107
- if (!args.resource) {
108
- return new CreatedNamespace(name, args, opts);
109
- }
110
- return new NamespacePatch(
111
- name,
112
- {
113
- ...args,
114
- name: output$1(args).apply((args2) => {
115
- if (args2.resource.clusterId !== args2.cluster.id) {
116
- throw new Error(
117
- `Cluster mismatch when patching namespace "${name}": "${args2.resource.clusterId}" != "${args2.cluster.id}"`
118
- );
119
- }
120
- return args2.resource.metadata.namespace;
121
- })
122
- },
123
- opts
124
- );
125
- }
126
- /**
127
- * Creates a new namespace or gets an existing one.
128
- *
129
- * Will throw an error if the namespace does not exist when `args.resource` is provided.
130
- */
131
- static createOrGet(name, args, opts) {
132
- if (!args.resource) {
133
- return new CreatedNamespace(name, args, opts);
134
- }
135
- return new ExternalNamespace(
136
- name,
137
- output$1(args).apply((args2) => {
138
- if (args2.resource.clusterId !== args2.cluster.id) {
139
- throw new Error(
140
- `Cluster mismatch when receiving namespace "${name}": "${args2.resource.clusterId}" != "${args2.cluster.id}"`
141
- );
142
- }
143
- return args2.resource.metadata.namespace;
144
- }),
145
- args.cluster,
146
- opts
147
- );
148
- }
149
- /**
150
- * Patches an existing namespace.
151
- *
152
- * Will throw an error if the namespace does not exist.
153
- */
154
- static patch(name, args, opts) {
155
- return new NamespacePatch(name, args, opts);
156
- }
157
- /**
158
- * Gets an existing namespace.
159
- *
160
- * Will throw an error if the namespace does not exist.
161
- */
162
- static get(name, id, cluster, opts) {
163
- return new ExternalNamespace(name, id, cluster, opts);
164
- }
165
- };
166
- function mapNamespaceMetadata(args, name) {
167
- const labels = args.metadata?.labels ?? {};
168
- if (args.privileged) {
169
- labels["pod-security.kubernetes.io/enforce"] = "privileged";
170
- }
171
- return { ...mapMetadata(args, name), labels };
172
- }
173
- var CreatedNamespace = class extends Namespace {
174
- constructor(name, args, opts) {
175
- const namespace = output$1(args).apply(async (args2) => {
176
- return new core.v1.Namespace(
177
- name,
178
- {
179
- metadata: mapNamespaceMetadata(args2, name)
180
- },
181
- {
182
- ...opts,
183
- parent: this,
184
- provider: await getProvider(args2.cluster)
185
- }
186
- );
187
- });
188
- super(
189
- "highstate:k8s:Namespace",
190
- name,
191
- args,
192
- opts,
193
- output$1(args.cluster),
194
- namespace.metadata,
195
- namespace.spec,
196
- namespace.status
197
- );
198
- }
199
- };
200
- var NamespacePatch = class extends Namespace {
201
- constructor(name, args, opts) {
202
- const namespace = output$1(args).apply(async (args2) => {
203
- return new core.v1.NamespacePatch(
204
- name,
205
- {
206
- metadata: mapNamespaceMetadata(args2, name)
207
- },
208
- {
209
- ...opts,
210
- parent: this,
211
- provider: await getProvider(args2.cluster)
212
- }
213
- );
214
- });
215
- super(
216
- "highstate:k8s:NamespacePatch",
217
- name,
218
- args,
219
- opts,
220
- output$1(args.cluster),
221
- namespace.metadata,
222
- namespace.spec,
223
- namespace.status
224
- );
225
- }
226
- };
227
- var ExternalNamespace = class extends Namespace {
228
- constructor(name, id, cluster, opts) {
229
- const namespace = output$1(id).apply(async (realName) => {
230
- return core.v1.Namespace.get(
231
- //
232
- name,
233
- realName,
234
- {
235
- ...opts,
236
- parent: this,
237
- provider: await getProvider(cluster)
238
- }
239
- );
240
- });
241
- super(
242
- "highstate:k8s:ExternalNamespace",
243
- name,
244
- { id, cluster },
245
- opts,
246
- output$1(cluster),
247
- namespace.metadata,
248
- namespace.spec,
249
- namespace.status
250
- );
251
- }
252
- };
253
-
254
- export { Namespace, commonExtraArgs, getProvider, images_exports, mapMetadata, mapNamespaceLikeToNamespaceName, mapNamespaceNameToSelector, mapSelectorLikeToSelector, resourceIdToString, withPatchName };
255
- //# sourceMappingURL=chunk-5TLC5BXR.js.map
256
- //# sourceMappingURL=chunk-5TLC5BXR.js.map
@@ -1 +0,0 @@
1
- {"version":3,"sources":["../assets/images.json","../src/shared.ts","../src/namespace.ts"],"names":["terminal-kubectl","cluster","provider","resource","output","args","core"],"mappings":";;;;;;AAAA,IAAA,cAAA,GAAA;AAAA,QAAA,CAAA,cAAA,EAAA;AAAA,EAAA,OAAA,EAAA,MAAA,cAAA;AAAA,EAAA,kBAAA,EAAA,MAAAA;AAAA,CAAA,CAAA;AACE,IAAAA,gBAAAA,GAAoB;AAAA,EAClB,IAAA,EAAQ,6CAAA;AAAA,EACR,GAAA,EAAO,QAAA;AAAA,EACP,KAAA,EAAS;AACX,CAAA;AALF,IAAA,cAAA,GAAA;AAAA,EACE,kBAAA,EAAAA;AAKF,CAAA;;;ACCA,IAAM,SAAA,uBAAgB,GAAA,EAAsB;AAErC,SAAS,YAAY,OAAA,EAAgD;AAC1E,EAAA,MAAM,WAAW,MAAA,CAAO,OAAO,CAAA,CAAE,KAAA,CAAM,CAAAC,QAAAA,KAAW;AAChD,IAAA,MAAM,gBAAA,GAAmB,SAAA,CAAU,GAAA,CAAIA,QAAAA,CAAQ,EAAE,CAAA;AACjD,IAAA,IAAI,gBAAA,EAAkB;AACpB,MAAA,OAAO,gBAAA;AAAA,IACT;AAEA,IAAA,MAAMC,SAAAA,GAAW,IAAI,QAAA,CAAS,CAAA,EAAGD,SAAQ,IAAI,CAAA,CAAA,EAAIA,QAAAA,CAAQ,EAAE,CAAA,CAAA,EAAI;AAAA,MAC7D,YAAYA,QAAAA,CAAQ;AAAA,KACrB,CAAA;AACD,IAAA,SAAA,CAAU,GAAA,CAAIA,QAAAA,CAAQ,EAAA,EAAIC,SAAQ,CAAA;AAElC,IAAA,OAAOA,SAAAA;AAAA,EACT,CAAC,CAAA;AAED,EAAA,OAAO,UAAU,QAAQ,CAAA;AAC3B;AAwCO,IAAM,eAAA,GAAkB,CAAC,MAAA,EAAQ,WAAA,EAAa,WAAW,UAAU;AAEnE,SAAS,WAAA,CACd,MACA,YAAA,EACgC;AAChC,EAAA,OAAO;AAAA,IACL,GAAG,IAAA,CAAK,QAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,UAAU,IAAA,IAAQ,YAAA;AAAA,IAC1C,WAAW,IAAA,CAAK,SAAA,GAAY,+BAAA,CAAgC,IAAA,CAAK,SAAS,CAAA,GAAI;AAAA,GAChF;AACF;AAIO,SAAS,0BACd,QAAA,EACmC;AACnC,EAAA,IAAI,aAAA,IAAiB,QAAA,IAAY,kBAAA,IAAsB,QAAA,EAAU;AAC/D,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,WAAA,EAAa;AAAA,GACf;AACF;AAEO,SAAS,gCAAgC,SAAA,EAA0C;AACxF,EAAA,IAAI,SAAA,CAAU,UAAA,CAAW,SAAS,CAAA,EAAG;AACnC,IAAA,OAAO,UAAU,QAAA,CAAS,IAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,IAAA,CAAK,EAAA,CAAG,SAAA,CAAU,UAAA,CAAW,SAAS,CAAA,EAAG;AAC3C,IAAA,OAAO,UAAU,QAAA,CAAS,IAAA;AAAA,EAC5B;AAEA,EAAA,OAAO,OAAO,SAAS,CAAA;AACzB;AAEO,SAAS,2BACd,SAAA,EACmC;AACnC,EAAA,OAAO;AAAA,IACL,WAAA,EAAa;AAAA,MACX,6BAAA,EAA+B;AAAA;AACjC,GACF;AACF;AAOO,SAAS,mBAAmB,EAAA,EAAuC;AACxE,EAAA,OAAO,MAAA,CAAO,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,QAAA,KAAY;AAClC,IAAA,MAAM,gBAAgB,QAAA,CAAS,SAAA,GAC3B,+BAAA,CAAgC,QAAA,CAAS,SAAS,CAAA,GAClD,MAAA;AAEJ,IAAA,OAAO,MAAA,CAAO,gBAAgB,WAAA,CAAA,EAAc,aAAa,IAAI,QAAA,CAAS,IAAI,CAAA,CAAA,GAAK,QAAA,CAAS,IAAI,CAAA;AAAA,EAC9F,CAAC,CAAA;AACH;AAEO,SAAS,aAAA,CACd,YAAA,EACA,QAAA,EACA,OAAA,EACgB;AAChB,EAAA,OAAO,MAAA,CAAO,EAAE,QAAA,EAAU,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,QAAA,EAAAC,SAAAA,EAAU,OAAA,EAAAF,UAAQ,KAAM;AACpE,IAAA,IAAIE,SAAAA,CAAS,SAAA,KAAcF,QAAAA,CAAQ,EAAA,EAAI;AACrC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,+BAAA,EAAkC,YAAY,CAAA,EAAA,EAAKE,SAAAA,CAAS,QAAA,CAAS,IAAI,CAAA,IAAA,EAAOA,SAAAA,CAAS,SAAS,CAAA,MAAA,EAASF,QAAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,OACvH;AAAA,IACF;AAEA,IAAA,OAAOE,UAAS,QAAA,CAAS,IAAA;AAAA,EAC3B,CAAC,CAAA;AACH;;;AClHO,IAAe,SAAA,GAAf,cAAiC,iBAAA,CAAkB;AAAA,EAC9C,WAAA,CACR,MACA,IAAA,EACA,IAAA,EACA,MAKS,OAAA,EAKA,QAAA,EAKA,MAKA,MAAA,EACT;AACA,IAAA,KAAA,CAAM,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAjBnB,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAKA,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AAKA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAKA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAGX;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,MAAA,CAAO,IAAA,EAAc,IAAA,EAAqB,IAAA,EAA4C;AAC3F,IAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,aAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACW;AACX,IAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AAClB,MAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,OAAO,IAAI,cAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,GAAG,IAAA;AAAA,QACH,MAAMC,QAAAA,CAAO,IAAI,CAAA,CAAE,KAAA,CAAM,CAAAC,KAAAA,KAAQ;AAC/B,UAAA,IAAIA,KAAAA,CAAK,QAAA,CAAU,SAAA,KAAcA,KAAAA,CAAK,QAAQ,EAAA,EAAI;AAChD,YAAA,MAAM,IAAI,KAAA;AAAA,cACR,CAAA,0CAAA,EAA6C,IAAI,CAAA,IAAA,EAAOA,KAAAA,CAAK,SAAU,SAAS,CAAA,MAAA,EAASA,KAAAA,CAAK,OAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,aAC1G;AAAA,UACF;AAEA,UAAA,OAAOA,KAAAA,CAAK,SAAU,QAAA,CAAS,SAAA;AAAA,QACjC,CAAC;AAAA,OACH;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,WAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACW;AACX,IAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AAClB,MAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,OAAO,IAAI,iBAAA;AAAA,MACT,IAAA;AAAA,MACAD,QAAAA,CAAO,IAAI,CAAA,CAAE,KAAA,CAAM,CAAAC,KAAAA,KAAQ;AACzB,QAAA,IAAIA,KAAAA,CAAK,QAAA,CAAU,SAAA,KAAcA,KAAAA,CAAK,QAAQ,EAAA,EAAI;AAChD,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,CAAA,2CAAA,EAA8C,IAAI,CAAA,IAAA,EAAOA,KAAAA,CAAK,SAAU,SAAS,CAAA,MAAA,EAASA,KAAAA,CAAK,OAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,WAC3G;AAAA,QACF;AAEA,QAAA,OAAOA,KAAAA,CAAK,SAAU,QAAA,CAAS,SAAA;AAAA,MACjC,CAAC,CAAA;AAAA,MACD,IAAA,CAAK,OAAA;AAAA,MACL;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,KAAA,CAAM,IAAA,EAAc,IAAA,EAAqB,IAAA,EAA4C;AAC1F,IAAA,OAAO,IAAI,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,GAAA,CACL,IAAA,EACA,EAAA,EACA,SACA,IAAA,EACW;AACX,IAAA,OAAO,IAAI,iBAAA,CAAkB,IAAA,EAAM,EAAA,EAAI,SAAS,IAAI,CAAA;AAAA,EACtD;AACF;AAEA,SAAS,oBAAA,CACP,MACA,IAAA,EACgC;AAChC,EAAA,MAAM,MAAA,GAAiC,IAAA,CAAK,QAAA,EAAU,MAAA,IAAU,EAAC;AAEjE,EAAA,IAAI,KAAK,UAAA,EAAY;AACnB,IAAA,MAAA,CAAO,oCAAoC,CAAA,GAAI,YAAA;AAAA,EACjD;AAEA,EAAA,OAAO,EAAE,GAAG,WAAA,CAAY,IAAA,EAAM,IAAI,GAAG,MAAA,EAAO;AAC9C;AAEA,IAAM,gBAAA,GAAN,cAA+B,SAAA,CAAU;AAAA,EACvC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAqB,IAAA,EAAiC;AAC9E,IAAA,MAAM,YAAYD,QAAAA,CAAO,IAAI,CAAA,CAAE,KAAA,CAAM,OAAMC,KAAAA,KAAQ;AACjD,MAAA,OAAO,IAAIC,KAAK,EAAA,CAAG,SAAA;AAAA,QACjB,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU,oBAAA,CAAqBD,KAAAA,EAAM,IAAI;AAAA,SAC3C;AAAA,QACA;AAAA,UACE,GAAG,IAAA;AAAA,UACH,MAAA,EAAQ,IAAA;AAAA,UACR,QAAA,EAAU,MAAM,WAAA,CAAYA,KAAAA,CAAK,OAAO;AAAA;AAC1C,OACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,yBAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACAD,QAAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnB,SAAA,CAAU,QAAA;AAAA,MACV,SAAA,CAAU,IAAA;AAAA,MACV,SAAA,CAAU;AAAA,KACZ;AAAA,EACF;AACF,CAAA;AAEA,IAAM,cAAA,GAAN,cAA6B,SAAA,CAAU;AAAA,EACrC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAqB,IAAA,EAAiC;AAC9E,IAAA,MAAM,YAAYA,QAAAA,CAAO,IAAI,CAAA,CAAE,KAAA,CAAM,OAAMC,KAAAA,KAAQ;AACjD,MAAA,OAAO,IAAIC,KAAK,EAAA,CAAG,cAAA;AAAA,QACjB,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU,oBAAA,CAAqBD,KAAAA,EAAM,IAAI;AAAA,SAC3C;AAAA,QACA;AAAA,UACE,GAAG,IAAA;AAAA,UACH,MAAA,EAAQ,IAAA;AAAA,UACR,QAAA,EAAU,MAAM,WAAA,CAAYA,KAAAA,CAAK,OAAO;AAAA;AAC1C,OACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,8BAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACAD,QAAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnB,SAAA,CAAU,QAAA;AAAA,MACV,SAAA,CAAU,IAAA;AAAA,MACV,SAAA,CAAU;AAAA,KACZ;AAAA,EACF;AACF,CAAA;AAEA,IAAM,iBAAA,GAAN,cAAgC,SAAA,CAAU;AAAA,EACxC,WAAA,CACE,IAAA,EACA,EAAA,EACA,OAAA,EACA,IAAA,EACA;AACA,IAAA,MAAM,YAAYA,QAAAA,CAAO,EAAE,CAAA,CAAE,KAAA,CAAM,OAAM,QAAA,KAAY;AACnD,MAAA,OAAOE,IAAAA,CAAK,GAAG,SAAA,CAAU,GAAA;AAAA;AAAA,QAEvB,IAAA;AAAA,QACA,QAAA;AAAA,QACA;AAAA,UACE,GAAG,IAAA;AAAA,UACH,MAAA,EAAQ,IAAA;AAAA,UACR,QAAA,EAAU,MAAM,WAAA,CAAY,OAAO;AAAA;AACrC,OACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,iCAAA;AAAA,MACA,IAAA;AAAA,MACA,EAAE,IAAI,OAAA,EAAQ;AAAA,MACd,IAAA;AAAA,MACAF,SAAO,OAAO,CAAA;AAAA,MACd,SAAA,CAAU,QAAA;AAAA,MACV,SAAA,CAAU,IAAA;AAAA,MACV,SAAA,CAAU;AAAA,KACZ;AAAA,EACF;AACF,CAAA","file":"chunk-5TLC5BXR.js","sourcesContent":["{\n \"terminal-kubectl\": {\n \"name\": \"ghcr.io/exeteres/highstate/terminal-kubectl\",\n \"tag\": \"latest\",\n \"image\": \"ghcr.io/exeteres/highstate/terminal-kubectl:latest@sha256:6b43498234fa7e2edbae2cd108a40b957575d184349ea622ffabdbe9b6d06933\"\n }\n}\n","import type { PartialKeys } from \"@highstate/contract\"\nimport type { k8s } from \"@highstate/library\"\nimport { interpolate, Output, output, toPromise, type Input, type Unwrap } from \"@highstate/pulumi\"\nimport { core, Provider, types } from \"@pulumi/kubernetes\"\nimport * as images from \"../assets/images.json\"\nimport { Namespace } from \"./namespace\"\n\nconst providers = new Map<string, Provider>()\n\nexport function getProvider(cluster: Input<k8s.Cluster>): Promise<Provider> {\n const provider = output(cluster).apply(cluster => {\n const existingProvider = providers.get(cluster.id)\n if (existingProvider) {\n return existingProvider\n }\n\n const provider = new Provider(`${cluster.name}-${cluster.id}`, {\n kubeconfig: cluster.kubeconfig,\n })\n providers.set(cluster.id, provider)\n\n return provider\n })\n\n return toPromise(provider)\n}\n\nexport function getProviderSync(cluster: k8s.Cluster): Provider {\n const existingProvider = providers.get(cluster.id)\n if (existingProvider) {\n return existingProvider\n }\n\n const provider = new Provider(`${cluster.name}-${cluster.id}`, {\n kubeconfig: cluster.kubeconfig,\n })\n providers.set(cluster.id, provider)\n\n return provider\n}\n\nexport type NamespaceLike = core.v1.Namespace | Namespace | string\n\nexport type CommonArgs = {\n /**\n * The name of the resource.\n */\n name?: Input<string>\n\n /**\n * The namespace to create the resource in.\n */\n namespace: Input<NamespaceLike | undefined>\n\n /**\n * The cluster to create the resource in.\n */\n cluster: Input<k8s.Cluster>\n\n /**\n * The metadata to apply to the resource.\n */\n metadata?: Input<types.input.meta.v1.ObjectMeta>\n}\n\nexport const commonExtraArgs = [\"name\", \"namespace\", \"cluster\", \"metadata\"] as const\n\nexport function mapMetadata(\n args: PartialKeys<Unwrap<CommonArgs>, \"namespace\" | \"cluster\">,\n fallbackName?: string,\n): types.input.meta.v1.ObjectMeta {\n return {\n ...args.metadata,\n name: args.name ?? args.metadata?.name ?? fallbackName,\n namespace: args.namespace ? mapNamespaceLikeToNamespaceName(args.namespace) : undefined,\n }\n}\n\nexport type SelectorLike = types.input.meta.v1.LabelSelector | Record<string, Input<string>>\n\nexport function mapSelectorLikeToSelector(\n selector: SelectorLike,\n): types.input.meta.v1.LabelSelector {\n if (\"matchLabels\" in selector || \"matchExpressions\" in selector) {\n return selector\n }\n\n return {\n matchLabels: selector as Record<string, Input<string>>,\n }\n}\n\nexport function mapNamespaceLikeToNamespaceName(namespace: NamespaceLike): Output<string> {\n if (Namespace.isInstance(namespace)) {\n return namespace.metadata.name\n }\n\n if (core.v1.Namespace.isInstance(namespace)) {\n return namespace.metadata.name\n }\n\n return output(namespace)\n}\n\nexport function mapNamespaceNameToSelector(\n namespace: Input<string>,\n): types.input.meta.v1.LabelSelector {\n return {\n matchLabels: {\n \"kubernetes.io/metadata.name\": namespace,\n },\n }\n}\n\nexport type ResourceId = {\n name: Input<string>\n namespace?: Input<NamespaceLike | undefined>\n}\n\nexport function resourceIdToString(id: Input<ResourceId>): Output<string> {\n return output(id).apply(metadata => {\n const namespaceName = metadata.namespace\n ? mapNamespaceLikeToNamespaceName(metadata.namespace)\n : undefined\n\n return output(namespaceName ? interpolate`${namespaceName}/${metadata.name}` : metadata.name)\n })\n}\n\nexport function withPatchName(\n resourceType: string,\n resource: Input<k8s.Resource>,\n cluster: Input<k8s.Cluster>,\n): Output<string> {\n return output({ resource, cluster }).apply(({ resource, cluster }) => {\n if (resource.clusterId !== cluster.id) {\n throw new Error(\n `Cluster mismatch when patching ${resourceType} \"${resource.metadata.name}\": \"${resource.clusterId}\" != \"${cluster.id}\"`,\n )\n }\n\n return resource.metadata.name\n })\n}\n\nexport { images }\n","import type { k8s } from \"@highstate/library\"\nimport { core, type types } from \"@pulumi/kubernetes\"\nimport {\n ComponentResource,\n output,\n Output,\n type ComponentResourceOptions,\n type Input,\n type Inputs,\n type Unwrap,\n} from \"@pulumi/pulumi\"\nimport { getProvider, mapMetadata, type CommonArgs } from \"./shared\"\n\nexport type NamespaceArgs = Omit<CommonArgs, \"namespace\"> & {\n /**\n * Whether to apply \"pod-security.kubernetes.io/enforce=privileged\" label to the namespace.\n */\n privileged?: boolean\n}\n\nexport type CreateOrPatchNamespaceArgs = NamespaceArgs & {\n /**\n * The resource to use to determine the name of the namespace.\n *\n * If not provided, the namespace will be created, otherwise it will be retrieved/patched.\n */\n resource: Input<k8s.Resource> | undefined\n}\n\nexport abstract class Namespace extends ComponentResource {\n protected constructor(\n type: string,\n name: string,\n args: Inputs,\n opts: ComponentResourceOptions | undefined,\n\n /**\n * The cluster where the namespace is created.\n */\n readonly cluster: Output<k8s.Cluster>,\n\n /*\n * The metadata of the underlying Kubernetes namespace.\n */\n readonly metadata: Output<types.output.meta.v1.ObjectMeta>,\n\n /**\n * The spec of the underlying Kubernetes namespace.\n */\n readonly spec: Output<types.output.core.v1.NamespaceSpec>,\n\n /**\n * The status of the underlying Kubernetes namespace.\n */\n readonly status: Output<types.output.core.v1.NamespaceStatus>,\n ) {\n super(type, name, args, opts)\n }\n\n /**\n * Creates a new namespace.\n */\n static create(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions): Namespace {\n return new CreatedNamespace(name, args, opts)\n }\n\n /**\n * Creates a new namespace or patches an existing one.\n *\n * Will throw an error if the namespace does not exist when `args.resource` is provided.\n */\n static createOrPatch(\n name: string,\n args: CreateOrPatchNamespaceArgs,\n opts?: ComponentResourceOptions,\n ): Namespace {\n if (!args.resource) {\n return new CreatedNamespace(name, args, opts)\n }\n\n return new NamespacePatch(\n name,\n {\n ...args,\n name: output(args).apply(args => {\n if (args.resource!.clusterId !== args.cluster.id) {\n throw new Error(\n `Cluster mismatch when patching namespace \"${name}\": \"${args.resource!.clusterId}\" != \"${args.cluster.id}\"`,\n )\n }\n\n return args.resource!.metadata.namespace\n }),\n },\n opts,\n )\n }\n\n /**\n * Creates a new namespace or gets an existing one.\n *\n * Will throw an error if the namespace does not exist when `args.resource` is provided.\n */\n static createOrGet(\n name: string,\n args: CreateOrPatchNamespaceArgs,\n opts?: ComponentResourceOptions,\n ): Namespace {\n if (!args.resource) {\n return new CreatedNamespace(name, args, opts)\n }\n\n return new ExternalNamespace(\n name,\n output(args).apply(args => {\n if (args.resource!.clusterId !== args.cluster.id) {\n throw new Error(\n `Cluster mismatch when receiving namespace \"${name}\": \"${args.resource!.clusterId}\" != \"${args.cluster.id}\"`,\n )\n }\n\n return args.resource!.metadata.namespace\n }),\n args.cluster,\n opts,\n )\n }\n\n /**\n * Patches an existing namespace.\n *\n * Will throw an error if the namespace does not exist.\n */\n static patch(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions): Namespace {\n return new NamespacePatch(name, args, opts)\n }\n\n /**\n * Gets an existing namespace.\n *\n * Will throw an error if the namespace does not exist.\n */\n static get(\n name: string,\n id: Input<string>,\n cluster: Input<k8s.Cluster>,\n opts?: ComponentResourceOptions,\n ): Namespace {\n return new ExternalNamespace(name, id, cluster, opts)\n }\n}\n\nfunction mapNamespaceMetadata(\n args: Unwrap<NamespaceArgs>,\n name: string,\n): types.input.meta.v1.ObjectMeta {\n const labels: Record<string, string> = args.metadata?.labels ?? {}\n\n if (args.privileged) {\n labels[\"pod-security.kubernetes.io/enforce\"] = \"privileged\"\n }\n\n return { ...mapMetadata(args, name), labels }\n}\n\nclass CreatedNamespace extends Namespace {\n constructor(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions) {\n const namespace = output(args).apply(async args => {\n return new core.v1.Namespace(\n name,\n {\n metadata: mapNamespaceMetadata(args, name),\n },\n {\n ...opts,\n parent: this,\n provider: await getProvider(args.cluster),\n },\n )\n })\n\n super(\n \"highstate:k8s:Namespace\",\n name,\n args,\n opts,\n output(args.cluster),\n namespace.metadata,\n namespace.spec,\n namespace.status,\n )\n }\n}\n\nclass NamespacePatch extends Namespace {\n constructor(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions) {\n const namespace = output(args).apply(async args => {\n return new core.v1.NamespacePatch(\n name,\n {\n metadata: mapNamespaceMetadata(args, name),\n },\n {\n ...opts,\n parent: this,\n provider: await getProvider(args.cluster),\n },\n )\n })\n\n super(\n \"highstate:k8s:NamespacePatch\",\n name,\n args,\n opts,\n output(args.cluster),\n namespace.metadata,\n namespace.spec,\n namespace.status,\n )\n }\n}\n\nclass ExternalNamespace extends Namespace {\n constructor(\n name: string,\n id: Input<string>,\n cluster: Input<k8s.Cluster>,\n opts?: ComponentResourceOptions,\n ) {\n const namespace = output(id).apply(async realName => {\n return core.v1.Namespace.get(\n //\n name,\n realName,\n {\n ...opts,\n parent: this,\n provider: await getProvider(cluster),\n },\n )\n })\n\n super(\n \"highstate:k8s:ExternalNamespace\",\n name,\n { id, cluster },\n opts,\n output(cluster),\n namespace.metadata,\n namespace.spec,\n namespace.status,\n )\n }\n}\n"]}