@highstate/k8s 0.9.18 → 0.9.20

package/dist/chunk-SI7X6N46.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/service.ts"],"names":["args"],"mappings":";;;;;;;;;AA8CA,IAAM,mBAAmB,CAAC,GAAG,eAAA,EAAiB,MAAA,EAAQ,SAAS,UAAU,CAAA;AASlE,SAAS,qBAAA,CACd,UACA,OAAA,EACiC;AACjC,EAAA,OACE,KAAA,CAAM,GAAA,CAAI,qBAAA,EAAuB,QAAQ,CAAA,IACzC,SAAS,QAAA,CAAS,aAAa,CAAA,CAAE,SAAA,KAAc,OAAA,CAAQ,EAAA;AAE3D;AAKO,IAAe,OAAA,GAAf,MAAe,QAAA,SAAgB,cAAA,CAAe;AAAA,EACzC,WAAA,CACR,IAAA,EACA,IAAA,EACA,IAAA,EACA,IAAA,EAEA,YACA,IAAA,EACA,SAAA,EACA,QAAA,EAKS,IAAA,EAKA,MAAA,EACT;AACA,IAAA,KAAA,CAAM,MAAM,IAAA,EAAM,IAAA,EAAM,MAAM,UAAA,EAAY,IAAA,EAAM,WAAW,QAAQ,CAAA;AAP1D,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAKA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAGX;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,MAAA,GAA8B;AAChC,IAAA,OAAO,MAAA,CAAO;AAAA,MACZ,IAAA,EAAM,SAAA;AAAA,MACN,SAAA,EAAW,KAAK,OAAA,CAAQ,EAAA;AAAA,MACxB,WAAA,EAAa,KAAK,OAAA,CAAQ,IAAA;AAAA,MAC1B,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,WAAW,IAAA,CAAK;AAAA,KACjB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,MAAA,CAAO,IAAA,EAAc,IAAA,EAAmB,IAAA,EAA0C;AACvF,IAAA,OAAO,IAAI,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAO,aAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACS;AACT,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,IAAI,aAAa,IAAA,EAAM;AAAA,QAC5B,GAAG,IAAA;AAAA,QACH,IAAA,EAAM,MAAA,CAAO,IAAA,CAAK,QAAQ,EAAE,QAAA,CAAS,IAAA;AAAA,QACrC,SAAA,EAAW,UAAU,gBAAA,CAAiB,IAAA,CAAK,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAO;AAAA,OACpF,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAI,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,WAAA,CACX,IAAA,EACA,IAAA,EACA,IAAA,EACkB;AAClB,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,MAAM,SAAQ,QAAA,CAAS,IAAA,CAAK,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAO,CAAA;AAAA,IAC7E;AAEA,IAAA,OAAO,IAAI,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAO,KAAA,CAAM,IAAA,EAAc,IAAA,EAAmB,IAAA,EAA0C;AACtF,IAAA,OAAO,IAAI,YAAA,CAAa,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,IAAA,CAAK,IAAA,EAAc,IAAA,EAA0B,IAAA,EAA0C;AAC5F,IAAA,OAAO,IAAI,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,GAAA,CAAI,IAAA,EAAc,IAAA,EAA2B,IAAA,EAA0C;AAC5F,IAAA,OAAO,IAAI,eAAA,CAAgB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC7C;AAAA,EAEA,OAAwB,YAAA,mBAAe,IAAI,GAAA,EAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAahE,OAAO,GAAA,CAAI,MAAA,EAAqB,OAAA,EAAsC;AACpE,IAAA,OAAO,WAAA;AAAA,MACL,QAAA,CAAQ,YAAA;AAAA,MACR,CAAA,EAAG,MAAA,CAAO,WAAW,CAAA,CAAA,EAAI,MAAA,CAAO,QAAA,CAAS,SAAS,CAAA,CAAA,EAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,OAAO,SAAS,CAAA,CAAA;AAAA,MAC9F,CAAA,IAAA,KAAQ;AACN,QAAA,OAAO,QAAA,CAAQ,IAAI,IAAA,EAAM;AAAA,UACvB,IAAA,EAAM,OAAO,QAAA,CAAS,IAAA;AAAA,UACtB,SAAA,EAAW,SAAA,CAAU,gBAAA,CAAiB,MAAA,EAAQ,OAAO;AAAA,SACtD,CAAA;AAAA,MACH;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,aAAa,QAAA,CAAS,MAAA,EAA4B,OAAA,EAA+C;AAC/F,IAAA,MAAM,cAAA,GAAiB,MAAM,SAAA,CAAU,MAAM,CAAA;AAE7C,IAAA,OAAO,QAAA,CAAQ,GAAA,CAAI,cAAA,EAAgB,MAAA,CAAO,OAAO,CAAC,CAAA;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,gBAAgB,MAAA,EAAgE;AAC9E,IAAA,OAAO,MAAA,CAAO,KAAK,SAAS,CAAA,CAAE,MAAM,CAAA,SAAA,KAAa,eAAA,CAAgB,SAAA,EAAW,MAAM,CAAC,CAAA;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,SAAA,GAA2C;AAC7C,IAAA,OAAO,MAAA,CAAO;AAAA,MACZ,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,IAAA,CAAK;AAAA,KACd,EAAE,KAAA,CAAM,CAAC,EAAE,OAAA,EAAS,QAAA,EAAU,IAAA,EAAM,MAAA,EAAO,KAAM;AAChD,MAAA,MAAM,gBAAA,GAAgD;AAAA,QACpD,aAAA,EAAe;AAAA,UACb,WAAW,OAAA,CAAQ,EAAA;AAAA,UACnB,aAAa,OAAA,CAAQ,IAAA;AAAA,UACrB,MAAM,QAAA,CAAS,IAAA;AAAA,UACf,WAAW,QAAA,CAAS,SAAA;AAAA,UACpB,UAAU,IAAA,CAAK,QAAA;AAAA,UACf,UAAA,EAAY,KAAK,KAAA,CAAM,CAAC,EAAE,UAAA,IAAc,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA;AACxD,OACF;AAEA,MAAA,MAAM,kBAAA,GAAqB,IAAA,CAAK,UAAA,EAAY,GAAA,CAAI,CAAA,EAAA,MAAO;AAAA,QACrD,GAAG,gBAAgB,EAAE,CAAA;AAAA,QACrB,UAAA,EAAY,UAAA;AAAA,QACZ,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,QACpB,UAAU,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,UAAU,WAAA,EAAY;AAAA,QAC9C,QAAA,EAAU;AAAA,OACZ,CAAE,CAAA;AAEF,MAAA,IAAI,kBAAA,CAAmB,SAAS,CAAA,EAAG;AACjC,QAAA,kBAAA,CAAmB,OAAA,CAAQ;AAAA,UACzB,IAAA,EAAM,UAAA;AAAA,UACN,UAAA,EAAY,UAAA;AAAA,UACZ,UAAU,CAAA,EAAG,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,SAAS,SAAS,CAAA,kBAAA,CAAA;AAAA,UAChD,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,UACpB,UAAU,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,UAAU,WAAA,EAAY;AAAA,UAC9C,QAAA,EAAU;AAAA,SACX,CAAA;AAAA,MACH;AAEA,MAAA,MAAM,oBACJ,IAAA,CAAK,IAAA,KAAS,aACV,OAAA,CAAQ,SAAA,CAAU,IAAI,CAAA,QAAA,MAAa;AAAA,QACjC,GAAI,QAAA;AAAA,QACJ,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,QAAA;AAAA,QACpB,UAAU,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,UAAU,WAAA,EAAY;AAAA,QAC9C,QAAA,EAAU;AAAA,OACZ,CAAE,IACF,EAAC;AAEP,MAAA,MAAM,qBAAA,GACJ,KAAK,IAAA,KAAS,cAAA,GACV,OAAO,YAAA,EAAc,OAAA,EAAS,IAAI,CAAA,QAAA,MAAa;AAAA,QAC7C,GAAG,eAAA,CAAgB,QAAA,CAAS,EAAA,IAAM,SAAS,QAAQ,CAAA;AAAA,QACnD,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,QACpB,UAAU,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,UAAU,WAAA,EAAY;AAAA,QAC9C,QAAA,EAAU;AAAA,OACZ,CAAE,IACF,EAAC;AAEP,MAAA,OAAO,QAAA;AAAA,QACL;AAAA,UACE,GAAI,sBAAsB,EAAC;AAAA,UAC3B,GAAI,yBAAyB,EAAC;AAAA,UAC9B,GAAI,qBAAqB;AAAC,SAC5B;AAAA,QACA;AAAA,OACF;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AACF;AASA,SAAS,iBAAA,CAAkB,MAAmB,OAAA,EAAsB;AAClE,EAAA,OAAO,MAAA,CAAO,IAAI,CAAA,CAAE,KAAA,CAAM,CAAAA,KAAAA,KAAQ;AAChC,IAAA,OAAO,SAAA;AAAA,MACL;AAAA,QACE,KAAA,EAAO,SAAA,CAAUA,KAAAA,CAAK,IAAA,EAAMA,MAAK,KAAK,CAAA;AAAA,QAEtC,WAAA,EAAaA,KAAAA,CAAK,QAAA,GACdA,KAAAA,CAAK,WAAA,GACHA,KAAAA,CAAK,WAAA,GACL,OAAA,CAAQ,WAAA,GACV,SAAA,CAAU,MAAA,EAAWA,KAAAA,CAAK,WAAW,CAAA;AAAA,QAEzC,IAAA,EAAM,cAAA,CAAeA,KAAAA,EAAM,OAAO;AAAA,OACpC;AAAA,MACA,IAAA,CAAKA,OAAM,gBAAgB;AAAA,KAC7B;AAAA,EACF,CAAC,CAAA;AACH;AAEA,IAAM,cAAA,GAAN,cAA6B,OAAA,CAAQ;AAAA,EACnC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAmB,IAAA,EAAiC;AAC5E,IAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAC9D,MAAA,OAAO,IAAI,KAAK,EAAA,CAAG,OAAA;AAAA,QACjB,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU,WAAA,CAAY,IAAA,EAAM,IAAI,CAAA;AAAA,UAChC,IAAA,EAAM,iBAAA,CAAkB,IAAA,EAAM,OAAO;AAAA,SACvC;AAAA,QACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,uBAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,OAAA,CAAQ,UAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,OAAA,CAAQ,QAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,OAAA,CAAQ;AAAA,KACV;AAAA,EACF;AACF,CAAA;AAEA,IAAM,YAAA,GAAN,cAA2B,OAAA,CAAQ;AAAA,EACjC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAmB,IAAA,EAAiC;AAC5E,IAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAC9D,MAAA,OAAO,IAAI,KAAK,EAAA,CAAG,YAAA;AAAA,QACjB,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU,WAAA,CAAY,IAAA,EAAM,IAAI,CAAA;AAAA,UAChC,IAAA,EAAM,iBAAA,CAAkB,IAAA,EAAM,OAAO;AAAA,SACvC;AAAA,QACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,4BAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,OAAA,CAAQ,UAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,OAAA,CAAQ,QAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,OAAA,CAAQ;AAAA,KACV;AAAA,EACF;AACF,CAAA;AAcA,IAAM,cAAA,GAAN,cAA6B,OAAA,CAAQ;AAAA,EACnC,WAAA,CAAY,IAAA,EAAc,IAAA,EAA0B,IAAA,EAAiC;AACnF,IAAA,KAAA;AAAA,MACE,8BAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,UAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,IAAA;AAAA,MACrB,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,QAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,IAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE;AAAA,KACvB;AAAA,EACF;AACF,CAAA;AAcA,IAAM,eAAA,GAAN,cAA8B,OAAA,CAAQ;AAAA,EACpC,WAAA,CAAY,IAAA,EAAc,IAAA,EAA2B,IAAA,EAAiC;AACpF,IAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAC9D,MAAA,OAAO,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA,QACrB,IAAA;AAAA,QACA,WAAA,CAAA,EAAc,OAAO,IAAA,CAAK,SAAS,EAAE,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,IAAI,CAAA,CAAA;AAAA,QAC/D,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,+BAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,OAAA,CAAQ,UAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,OAAA,CAAQ,QAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,OAAA,CAAQ;AAAA,KACV;AAAA,EACF;AACF,CAAA;AAQO,SAAS,8BACd,IAAA,EACiC;AACjC,EAAA,OAAO;AAAA,IACL,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,MAAM,IAAA,CAAK,aAAA;AAAA,IACX,YAAY,IAAA,CAAK,aAAA;AAAA,IACjB,UAAU,IAAA,CAAK;AAAA,GACjB;AACF;AAQO,SAAS,0BACd,OAAA,EACmC;AACnC,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,QAAQ,IAAA,CAAK;AAAA,GAC5B;AACF;AASO,SAAS,cAAA,CACd,SACA,OAAA,EACe;AACf,EAAA,IAAI,SAAS,IAAA,EAAM;AACjB,IAAA,OAAO,OAAA,CAAQ,IAAA;AAAA,EACjB;AAEA,EAAA,IAAI,CAAC,SAAS,QAAA,EAAU;AACtB,IAAA,OAAO,WAAA;AAAA,EACT;AAEA,EAAA,OAAO,OAAA,CAAQ,MAAA,EAAQ,mBAAA,KAAwB,cAAA,GAAiB,cAAA,GAAiB,UAAA;AACnF;AAQO,SAAS,wBACd,QAAA,EACiC;AACjC,EAAA,OAAO;AAAA,IACL,MAAM,QAAA,CAAS,IAAA;AAAA,IACf,QAAA,EAAU,QAAA,CAAS,QAAA,CAAS,WAAA;AAAY,GAC1C;AACF","file":"chunk-SI7X6N46.js","sourcesContent":["import { filterEndpoints, l4EndpointToString, parseL3Endpoint } from \"@highstate/common\"\nimport { check, getOrCreate } from \"@highstate/contract\"\nimport { k8s, type network } from \"@highstate/library\"\nimport {\n  type ComponentResourceOptions,\n  type Input,\n  type Inputs,\n  interpolate,\n  normalize,\n  type Output,\n  output,\n  toPromise,\n} from \"@highstate/pulumi\"\nimport { core, type types } from \"@pulumi/kubernetes\"\nimport { deepmerge } from \"deepmerge-ts\"\nimport { omit, uniqueBy } from \"remeda\"\nimport { Namespace } from \"./namespace\"\nimport {\n  commonExtraArgs,\n  getProvider,\n  mapMetadata,\n  ScopedResource,\n  type ScopedResourceArgs,\n} from \"./shared\"\n\nexport type ServiceArgs = ScopedResourceArgs & {\n  /**\n   * The port to expose the service on.\n   */\n  port?: Input<types.input.core.v1.ServicePort>\n\n  /**\n   * Whether the service should be exposed by `NodePort` or `LoadBalancer`.\n   *\n   * The type of the service will be determined automatically based on the cluster.\n   */\n  external?: Input<boolean>\n} & types.input.core.v1.ServiceSpec\n\nexport type CreateOrGetServiceArgs = ServiceArgs & {\n  /**\n   * The service entity to patch/retrieve.\n   */\n  existing: Input<k8s.Service> | undefined\n}\n\nconst serviceExtraArgs = [...commonExtraArgs, \"port\", \"ports\", \"external\"] as const\n\n/**\n * Checks if the endpoint is from the given cluster.\n *\n * @param endpoint The endpoint to check.\n * @param cluster The cluster to check against.\n * @returns True if the endpoint is from the cluster, false otherwise.\n */\nexport function isEndpointFromCluster(\n  endpoint: network.L3Endpoint,\n  cluster: k8s.Cluster,\n): endpoint is k8s.ServiceEndpoint {\n  return (\n    check(k8s.serviceEndpointSchema, endpoint) &&\n    endpoint.metadata[\"k8s.service\"].clusterId === cluster.id\n  )\n}\n\n/**\n * Represents a Kubernetes Service resource with endpoints and metadata.\n */\nexport abstract class Service extends ScopedResource {\n  protected constructor(\n    type: string,\n    name: string,\n    args: Inputs,\n    opts: ComponentResourceOptions | undefined,\n\n    apiVersion: Output<string>,\n    kind: Output<string>,\n    namespace: Output<Namespace>,\n    metadata: Output<types.output.meta.v1.ObjectMeta>,\n\n    /**\n     * The spec of the underlying Kubernetes service.\n     */\n    readonly spec: Output<types.output.core.v1.ServiceSpec>,\n\n    /**\n     * The status of the underlying Kubernetes service.\n     */\n    readonly status: Output<types.output.core.v1.ServiceStatus>,\n  ) {\n    super(type, name, args, opts, apiVersion, kind, namespace, metadata)\n  }\n\n  /**\n   * The Highstate service entity.\n   */\n  get entity(): Output<k8s.Service> {\n    return output({\n      type: \"service\",\n      clusterId: this.cluster.id,\n      clusterName: this.cluster.name,\n      metadata: this.metadata,\n      endpoints: this.endpoints,\n    })\n  }\n\n  /**\n   * Creates a new service.\n   */\n  static create(name: string, args: ServiceArgs, opts?: ComponentResourceOptions): Service {\n    return new CreatedService(name, args, opts)\n  }\n\n  /**\n   * Creates a new service or patches an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the service name.\n   * @param args The arguments to create or patch the service with.\n   * @param opts Optional resource options.\n   */\n  static createOrPatch(\n    name: string,\n    args: CreateOrGetServiceArgs,\n    opts?: ComponentResourceOptions,\n  ): Service {\n    if (args.existing) {\n      return new ServicePatch(name, {\n        ...args,\n        name: output(args.existing).metadata.name,\n        namespace: Namespace.forResourceAsync(args.existing, output(args.namespace).cluster),\n      })\n    }\n\n    return new CreatedService(name, args, opts)\n  }\n\n  /**\n   * Creates a new service or gets an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the service name. Will not be used when existing service is retrieved.\n   * @param args The arguments to create or get the service with.\n   * @param opts Optional resource options.\n   */\n  static async createOrGet(\n    name: string,\n    args: CreateOrGetServiceArgs,\n    opts?: ComponentResourceOptions,\n  ): Promise<Service> {\n    if (args.existing) {\n      return await Service.forAsync(args.existing, output(args.namespace).cluster)\n    }\n\n    return new CreatedService(name, args, opts)\n  }\n\n  /**\n   * Patches an existing service.\n   *\n   * Will throw an error if the service does not exist.\n   *\n   * @param name The name of the resource. May not be the same as the service name.\n   * @param args The arguments to patch the service with.\n   * @param opts Optional resource options.\n   */\n  static patch(name: string, args: ServiceArgs, opts?: ComponentResourceOptions): Service {\n    return new ServicePatch(name, args, opts)\n  }\n\n  /**\n   * Wraps an existing Kubernetes service.\n   */\n  static wrap(name: string, args: WrappedServiceArgs, opts?: ComponentResourceOptions): Service {\n    return new WrappedService(name, args, opts)\n  }\n\n  /**\n   * Gets an existing service.\n   *\n   * Will throw an error if the service does not exist.\n   */\n  static get(name: string, args: ExternalServiceArgs, opts?: ComponentResourceOptions): Service {\n    return new ExternalService(name, args, opts)\n  }\n\n  private static readonly serviceCache = new Map<string, Service>()\n\n  /**\n   * Gets an existing service for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{name}.{clusterId}`.\n   *\n   * This method is idempotent and will return the same instance for the same entity.\n   *\n   * @param entity The entity to get the service for.\n   * @param cluster The cluster where the service is located.\n   */\n  static for(entity: k8s.Service, cluster: Input<k8s.Cluster>): Service {\n    return getOrCreate(\n      Service.serviceCache,\n      `${entity.clusterName}.${entity.metadata.namespace}.${entity.metadata.name}.${entity.clusterId}`,\n      name => {\n        return Service.get(name, {\n          name: entity.metadata.name,\n          namespace: Namespace.forResourceAsync(entity, cluster),\n        })\n      },\n    )\n  }\n\n  /**\n   * Gets an existing service for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{name}.{clusterId}`.\n   *\n   * This method is idempotent and will return the same instance for the same entity.\n   *\n   * @param entity The entity to get the service for.\n   * @param cluster The cluster where the service is located.\n   */\n  static async forAsync(entity: Input<k8s.Service>, cluster: Input<k8s.Cluster>): Promise<Service> {\n    const resolvedEntity = await toPromise(entity)\n\n    return Service.for(resolvedEntity, output(cluster))\n  }\n\n  /**\n   * Returns the endpoints of the service applying the given filter.\n   *\n   * If no filter is specified, the default behavior of `filterEndpoints` is used.\n   *\n   * @param filter If specified, the endpoints are filtered based on the given filter.\n   * @returns The endpoints of the service.\n   */\n  filterEndpoints(filter?: network.EndpointFilter): Output<k8s.ServiceEndpoint[]> {\n    return output(this.endpoints).apply(endpoints => filterEndpoints(endpoints, filter))\n  }\n\n  /**\n   * Returns the endpoints of the service including both internal and external endpoints.\n   */\n  get endpoints(): Output<k8s.ServiceEndpoint[]> {\n    return output({\n      cluster: this.cluster,\n      metadata: this.metadata,\n      spec: this.spec,\n      status: this.status,\n    }).apply(({ cluster, metadata, spec, status }) => {\n      const endpointMetadata: k8s.EndpointServiceMetadata = {\n        \"k8s.service\": {\n          clusterId: cluster.id,\n          clusterName: cluster.name,\n          name: metadata.name,\n          namespace: metadata.namespace,\n          selector: spec.selector,\n          targetPort: spec.ports[0].targetPort ?? spec.ports[0].port,\n        },\n      }\n\n      const clusterIpEndpoints = spec.clusterIPs?.map(ip => ({\n        ...parseL3Endpoint(ip),\n        visibility: \"internal\" as network.EndpointVisibility,\n        port: spec.ports[0].port,\n        protocol: spec.ports[0].protocol?.toLowerCase() as network.L4Protocol,\n        metadata: endpointMetadata,\n      }))\n\n      if (clusterIpEndpoints.length > 0) {\n        clusterIpEndpoints.unshift({\n          type: \"hostname\",\n          visibility: \"internal\",\n          hostname: `${metadata.name}.${metadata.namespace}.svc.cluster.local`,\n          port: spec.ports[0].port,\n          protocol: spec.ports[0].protocol?.toLowerCase() as network.L4Protocol,\n          metadata: endpointMetadata,\n        })\n      }\n\n      const nodePortEndpoints =\n        spec.type === \"NodePort\"\n          ? cluster.endpoints.map(endpoint => ({\n              ...(endpoint as network.L3Endpoint),\n              port: spec.ports[0].nodePort,\n              protocol: spec.ports[0].protocol?.toLowerCase() as network.L4Protocol,\n              metadata: endpointMetadata,\n            }))\n          : []\n\n      const loadBalancerEndpoints =\n        spec.type === \"LoadBalancer\"\n          ? status.loadBalancer?.ingress?.map(endpoint => ({\n              ...parseL3Endpoint(endpoint.ip ?? endpoint.hostname),\n              port: spec.ports[0].port,\n              protocol: spec.ports[0].protocol?.toLowerCase() as network.L4Protocol,\n              metadata: endpointMetadata,\n            }))\n          : []\n\n      return uniqueBy(\n        [\n          ...(clusterIpEndpoints ?? []),\n          ...(loadBalancerEndpoints ?? []),\n          ...(nodePortEndpoints ?? []),\n        ],\n        l4EndpointToString,\n      )\n    })\n  }\n}\n\n/**\n * Creates the service spec configuration based on arguments and cluster settings.\n *\n * @param args The service arguments containing port and external configuration.\n * @param cluster The cluster where the service will be created.\n * @returns The service spec configuration.\n */\nfunction createServiceSpec(args: ServiceArgs, cluster: k8s.Cluster) {\n  return output(args).apply(args => {\n    return deepmerge(\n      {\n        ports: normalize(args.port, args.ports),\n\n        externalIPs: args.external\n          ? args.externalIPs\n            ? args.externalIPs\n            : cluster.externalIps\n          : normalize(undefined, args.externalIPs),\n\n        type: getServiceType(args, cluster),\n      },\n      omit(args, serviceExtraArgs),\n    )\n  })\n}\n\nclass CreatedService extends Service {\n  constructor(name: string, args: ServiceArgs, opts?: ComponentResourceOptions) {\n    const service = output(args.namespace).cluster.apply(cluster => {\n      return new core.v1.Service(\n        name,\n        {\n          metadata: mapMetadata(args, name),\n          spec: createServiceSpec(args, cluster),\n        },\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:Service\",\n      name,\n      args,\n      opts,\n\n      service.apiVersion,\n      service.kind,\n      output(args.namespace),\n      service.metadata,\n      service.spec,\n      service.status,\n    )\n  }\n}\n\nclass ServicePatch extends Service {\n  constructor(name: string, args: ServiceArgs, opts?: ComponentResourceOptions) {\n    const service = output(args.namespace).cluster.apply(cluster => {\n      return new core.v1.ServicePatch(\n        name,\n        {\n          metadata: mapMetadata(args, name),\n          spec: createServiceSpec(args, cluster),\n        },\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:ServicePatch\",\n      name,\n      args,\n      opts,\n\n      service.apiVersion,\n      service.kind,\n      output(args.namespace),\n      service.metadata,\n      service.spec,\n      service.status,\n    )\n  }\n}\n\nexport type WrappedServiceArgs = {\n  /**\n   * The underlying Kubernetes service to wrap.\n   */\n  service: Input<core.v1.Service>\n\n  /**\n   * The namespace where the service is located.\n   */\n  namespace: Input<Namespace>\n}\n\nclass WrappedService extends Service {\n  constructor(name: string, args: WrappedServiceArgs, opts?: ComponentResourceOptions) {\n    super(\n      \"highstate:k8s:WrappedService\",\n      name,\n      args,\n      opts,\n\n      output(args.service).apiVersion,\n      output(args.service).kind,\n      output(args.namespace),\n      output(args.service).metadata,\n      output(args.service).spec,\n      output(args.service).status,\n    )\n  }\n}\n\nexport type ExternalServiceArgs = {\n  /**\n   * The name of the service to get.\n   */\n  name: Input<string>\n\n  /**\n   * The namespace of the service to get.\n   */\n  namespace: Input<Namespace>\n}\n\nclass ExternalService extends Service {\n  constructor(name: string, args: ExternalServiceArgs, opts?: ComponentResourceOptions) {\n    const service = output(args.namespace).cluster.apply(cluster => {\n      return core.v1.Service.get(\n        name,\n        interpolate`${output(args.namespace).metadata.name}/${args.name}`,\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:ExternalService\",\n      name,\n      args,\n      opts,\n\n      service.apiVersion,\n      service.kind,\n      output(args.namespace),\n      service.metadata,\n      service.spec,\n      service.status,\n    )\n  }\n}\n\n/**\n * Maps a container port to a service port.\n *\n * @param port The container port to map.\n * @returns The corresponding service port configuration.\n */\nexport function mapContainerPortToServicePort(\n  port: types.input.core.v1.ContainerPort,\n): types.input.core.v1.ServicePort {\n  return {\n    name: port.name,\n    port: port.containerPort,\n    targetPort: port.containerPort,\n    protocol: port.protocol,\n  }\n}\n\n/**\n * Maps a service to a label selector.\n *\n * @param service The service to extract the label selector from.\n * @returns The label selector based on the service's selector.\n */\nexport function mapServiceToLabelSelector(\n  service: core.v1.Service,\n): types.input.meta.v1.LabelSelector {\n  return {\n    matchLabels: service.spec.selector,\n  }\n}\n\n/**\n * Determines the appropriate service type based on the service arguments and cluster configuration.\n *\n * @param service The service configuration containing type and external properties.\n * @param cluster The cluster where the service will be created.\n * @returns The service type to use.\n */\nexport function getServiceType(\n  service: Pick<ServiceArgs, \"type\" | \"external\"> | undefined,\n  cluster: k8s.Cluster,\n): Input<string> {\n  if (service?.type) {\n    return service.type\n  }\n\n  if (!service?.external) {\n    return \"ClusterIP\"\n  }\n\n  return cluster.quirks?.externalServiceType === \"LoadBalancer\" ? \"LoadBalancer\" : \"NodePort\"\n}\n\n/**\n * Converts a network L4 endpoint to a Kubernetes service port.\n *\n * @param endpoint The L4 endpoint to convert.\n * @returns The corresponding Kubernetes service port configuration.\n */\nexport function l4EndpointToServicePort(\n  endpoint: network.L4Endpoint,\n): types.input.core.v1.ServicePort {\n  return {\n    port: endpoint.port,\n    protocol: endpoint.protocol.toUpperCase(),\n  }\n}\n"]}

package/dist/chunk-WGMJCZSK.js

@@ -0,0 +1,360 @@
+import { __export } from './chunk-PZ5AY32C.js';
+import { getOrCreate } from '@highstate/contract';
+import { secret, toPromise, output, ComponentResource } from '@highstate/pulumi';
+import { Provider, core } from '@pulumi/kubernetes';
+import { ComponentResource as ComponentResource$1, output as output$1 } from '@pulumi/pulumi';
+
+// assets/images.json
+var images_exports = {};
+__export(images_exports, {
+  default: () => images_default,
+  "terminal-kubectl": () => terminal_kubectl,
+  "worker-k8s-monitor": () => worker_k8s_monitor
+});
+var terminal_kubectl = {
+  name: "ghcr.io/exeteres/highstate/terminal-kubectl",
+  tag: "latest",
+  image: "ghcr.io/exeteres/highstate/terminal-kubectl:latest@sha256:2cd011119f6098d41b5bb377420f0106577d3b289ae4fc7982b4578b23c82ef4"
+};
+var worker_k8s_monitor = {
+  name: "ghcr.io/exeteres/highstate/worker-k8s-monitor",
+  tag: "latest",
+  image: "ghcr.io/exeteres/highstate/worker-k8s-monitor:latest@sha256:66b985a97925d39a4c6e2b15cbeefadaadfce0cb4d6e5df8881cca85281383d5"
+};
+var images_default = {
+  "terminal-kubectl": terminal_kubectl,
+  "worker-k8s-monitor": worker_k8s_monitor
+};
+var providers = /* @__PURE__ */ new Map();
+function getProvider(cluster) {
+  const name = `${cluster.name}.${cluster.connectionId}`;
+  const existing = providers.get(name);
+  if (existing) {
+    return existing;
+  }
+  const provider = new Provider(name, { kubeconfig: secret(cluster.kubeconfig) });
+  providers.set(name, provider);
+  return provider;
+}
+async function getProviderAsync(cluster) {
+  const resolvedCluster = await toPromise(cluster);
+  return getProvider(resolvedCluster);
+}
+var commonExtraArgs = ["name", "namespace", "metadata"];
+function mapMetadata(args, fallbackName) {
+  return output(args.metadata).apply(
+    (metadata) => output({
+      ...metadata,
+      name: args.name ?? metadata?.name ?? fallbackName,
+      namespace: metadata?.namespace ?? (args.namespace ? output(args.namespace).metadata.name : void 0)
+    })
+  );
+}
+function mapSelectorLikeToSelector(selector) {
+  if ("matchLabels" in selector || "matchExpressions" in selector) {
+    return selector;
+  }
+  return {
+    matchLabels: selector
+  };
+}
+function getNamespaceName(namespace) {
+  if (Namespace.isInstance(namespace)) {
+    return namespace.metadata.name;
+  }
+  if (core.v1.Namespace.isInstance(namespace)) {
+    return namespace.metadata.name;
+  }
+  return output(namespace);
+}
+function mapNamespaceNameToSelector(namespace) {
+  return {
+    matchLabels: {
+      "kubernetes.io/metadata.name": namespace
+    }
+  };
+}
+function validateCluster(entity, cluster) {
+  return output({ entity, cluster }).apply(({ entity: entity2, cluster: cluster2 }) => {
+    if (entity2.clusterId !== cluster2.id) {
+      throw new Error(
+        `Cluster mismatch for ${entity2.type} "${entity2.metadata.name}": "${entity2.clusterId}" != "${cluster2.id}"`
+      );
+    }
+    return cluster2;
+  });
+}
+var ScopedResource = class extends ComponentResource {
+  constructor(type, name, args, opts, apiVersion, kind, namespace, metadata) {
+    super(type, name, args, opts);
+    this.apiVersion = apiVersion;
+    this.kind = kind;
+    this.namespace = namespace;
+    this.metadata = metadata;
+  }
+  /**
+   * The cluster where the resource is located.
+   */
+  get cluster() {
+    return this.namespace.cluster;
+  }
+};
+
+// src/namespace.ts
+var Namespace = class _Namespace extends ComponentResource$1 {
+  constructor(type, name, args, opts, cluster, metadata, spec, status) {
+    super(type, name, args, opts);
+    this.cluster = cluster;
+    this.metadata = metadata;
+    this.spec = spec;
+    this.status = status;
+  }
+  /**
+   * The Highstate namespace entity.
+   */
+  get entity() {
+    return output$1({
+      type: "namespace",
+      clusterId: this.cluster.id,
+      clusterName: this.cluster.name,
+      metadata: this.metadata
+    });
+  }
+  /**
+   * Creates a new namespace.
+   */
+  static create(name, args, opts) {
+    return new CreatedNamespace(name, args, opts);
+  }
+  /**
+   * Wraps an existing Kubernetes namespace.
+   */
+  static wrap(name, args, opts) {
+    return new WrappedNamespace(name, args, opts);
+  }
+  /**
+   * Creates a new namespace or gets an existing one.
+   *
+   * @param name The name of the resource. May not be the same as the namespace name. Will not be used when existing namespace is retrieved.
+   * @param args The arguments to create or get the namespace with.
+   * @param opts Optional resource options.
+   */
+  static async createOrGet(name, args, opts) {
+    if (args.resource) {
+      return await _Namespace.forResourceAsync(args.resource, args.cluster);
+    }
+    if (args.existing) {
+      return await _Namespace.forAsync(args.existing, args.cluster);
+    }
+    return new CreatedNamespace(name, args, opts);
+  }
+  /**
+   * Creates a new namespace or patches an existing one.
+   *
+   * @param name The name of the resource. May not be the same as the namespace name.
+   * @param args The arguments to create or patch the namespace with.
+   * @param opts Optional resource options.
+   */
+  static createOrPatch(name, args, opts) {
+    if (args.resource) {
+      return new NamespacePatch(name, {
+        ...args,
+        name: output$1(args.resource).metadata.namespace,
+        cluster: validateCluster(args.resource, args.cluster)
+      });
+    }
+    if (args.existing) {
+      return new NamespacePatch(name, {
+        ...args,
+        name: output$1(args.existing).metadata.name,
+        cluster: validateCluster(args.existing, args.cluster)
+      });
+    }
+    return new CreatedNamespace(name, args, opts);
+  }
+  /**
+   * Patches an existing namespace.
+   *
+   * Will throw an error if the namespace does not exist.
+   *
+   * @param name The name of the resource. May not be the same as the namespace name.
+   * @param args The arguments to patch the namespace with.
+   * @param opts Optional resource options.
+   */
+  static patch(name, args, opts) {
+    return new NamespacePatch(name, args, opts);
+  }
+  /**
+   * Gets an existing namespace.
+   *
+   * Will throw an error if the namespace does not exist.
+   *
+   * @param name The name of the resource. May not be the same as the namespace name.
+   * @param args The arguments to get the namespace with.
+   * @param opts Optional resource options.
+   */
+  static get(name, args, opts) {
+    return new ExternalNamespace(name, args, opts);
+  }
+  static namespaceCache = /* @__PURE__ */ new Map();
+  /**
+   * Gets an existing namespace for a given entity.
+   * Prefer this method over `get` when possible.
+   *
+   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{clusterId}`.
+   *
+   * This method it idempotent and will return the same instance for the same entity.
+   *
+   * @param entity The entity to get the namespace for.
+   * @param cluster The cluster where the namespace is located.
+   */
+  static for(entity, cluster) {
+    return getOrCreate(
+      _Namespace.namespaceCache,
+      `${entity.clusterName}.${entity.metadata.name}.${entity.clusterId}`,
+      (name) => {
+        return _Namespace.get(name, {
+          name: entity.metadata.name,
+          cluster: validateCluster(entity, cluster)
+        });
+      }
+    );
+  }
+  /**
+   * Gets an existing namespace for a given entity.
+   * Prefer this method over `get` when possible.
+   *
+   * @param entity The entity to get the namespace for.
+   * @param cluster The cluster where the namespace is located.
+   */
+  static async forAsync(entity, cluster) {
+    const resolvedEntity = await toPromise(entity);
+    return _Namespace.for(resolvedEntity, cluster);
+  }
+  /**
+   * Gets an existing namespace where the provided resource is located.
+   * Prefer this method over `get` when possible.
+   *
+   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{clusterId}`.
+   *
+   * This method it idempotent and will return the same instance for the same resource.
+   *
+   * @param resource The resource to get the namespace for.
+   * @param cluster The cluster where the namespace is located.
+   */
+  static forResource(resource, cluster) {
+    return getOrCreate(
+      _Namespace.namespaceCache,
+      `${resource.clusterName}.${resource.metadata.namespace}.${resource.clusterId}`,
+      (name) => {
+        return _Namespace.get(name, {
+          name: resource.metadata.namespace,
+          cluster: validateCluster(resource, cluster)
+        });
+      }
+    );
+  }
+  /**
+   * Gets an existing namespace for a given entity.
+   * Prefer this method over `get` when possible.
+   *
+   * @param resource The resource to get the namespace for.
+   * @param cluster The cluster where the namespace is located.
+   */
+  static async forResourceAsync(resource, cluster) {
+    const resolvedResource = await toPromise(resource);
+    return _Namespace.forResource(resolvedResource, cluster);
+  }
+};
+function mapNamespaceMetadata(args, fallbackName) {
+  return mapMetadata(args, fallbackName).apply((metadata) => {
+    if (args.privileged) {
+      metadata.labels = {
+        ...metadata.labels,
+        "pod-security.kubernetes.io/enforce": "privileged"
+      };
+    }
+    return metadata;
+  });
+}
+var CreatedNamespace = class extends Namespace {
+  constructor(name, args, opts) {
+    const namespace = output$1(args.cluster).apply((cluster) => {
+      return new core.v1.Namespace(
+        name,
+        { metadata: mapNamespaceMetadata(args, name) },
+        { ...opts, parent: this, provider: getProvider(cluster) }
+      );
+    });
+    super(
+      "highstate:k8s:Namespace",
+      name,
+      args,
+      opts,
+      output$1(args.cluster),
+      namespace.metadata,
+      namespace.spec,
+      namespace.status
+    );
+  }
+};
+var NamespacePatch = class extends Namespace {
+  constructor(name, args, opts) {
+    const namespace = output$1(args.cluster).apply((cluster) => {
+      return new core.v1.NamespacePatch(
+        name,
+        { metadata: mapNamespaceMetadata(args, name) },
+        { ...opts, parent: this, provider: getProvider(cluster) }
+      );
+    });
+    super(
+      "highstate:k8s:NamespacePatch",
+      name,
+      args,
+      opts,
+      output$1(args.cluster),
+      namespace.metadata,
+      namespace.spec,
+      namespace.status
+    );
+  }
+};
+var ExternalNamespace = class extends Namespace {
+  constructor(name, args, opts) {
+    const namespace = output$1(args.cluster).apply((cluster) => {
+      return core.v1.Namespace.get(name, args.name, {
+        ...opts,
+        parent: this,
+        provider: getProvider(cluster)
+      });
+    });
+    super(
+      "highstate:k8s:ExternalNamespace",
+      name,
+      args,
+      opts,
+      output$1(args.cluster),
+      namespace.metadata,
+      namespace.spec,
+      namespace.status
+    );
+  }
+};
+var WrappedNamespace = class extends Namespace {
+  constructor(name, args, opts) {
+    super(
+      "highstate:k8s:WrappedNamespace",
+      name,
+      args,
+      opts,
+      output$1(args.cluster),
+      output$1(args.namespace).metadata,
+      output$1(args.namespace).spec,
+      output$1(args.namespace).status
+    );
+  }
+};
+
+export { Namespace, ScopedResource, commonExtraArgs, getNamespaceName, getProvider, getProviderAsync, images_exports, mapMetadata, mapNamespaceNameToSelector, mapSelectorLikeToSelector, validateCluster };
+//# sourceMappingURL=chunk-WGMJCZSK.js.map
+//# sourceMappingURL=chunk-WGMJCZSK.js.map

package/dist/chunk-WGMJCZSK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../assets/images.json","../src/shared.ts","../src/namespace.ts"],"names":["terminal-kubectl","worker-k8s-monitor","entity","cluster","ComponentResource","output","toPromise","core"],"mappings":";;;;;;;AAAA,IAAA,cAAA,GAAA;AAAA,QAAA,CAAA,cAAA,EAAA;AAAA,EAAA,OAAA,EAAA,MAAA,cAAA;AAAA,EAAA,kBAAA,EAAA,MAAAA,gBAAAA;AAAA,EAAA,oBAAA,EAAA,MAAAC;AAAA,CAAA,CAAA;AACE,IAAAD,gBAAAA,GAAoB;AAAA,EAClB,IAAA,EAAQ,6CAAA;AAAA,EACR,GAAA,EAAO,QAAA;AAAA,EACP,KAAA,EAAS;AACX,CAAA;AACA,IAAAC,kBAAAA,GAAsB;AAAA,EACpB,IAAA,EAAQ,+CAAA;AAAA,EACR,GAAA,EAAO,QAAA;AAAA,EACP,KAAA,EAAS;AACX,CAAA;AAVF,IAAA,cAAA,GAAA;AAAA,EACE,kBAAA,EAAAD,gBAAAA;AAAA,EAKA,oBAAA,EAAAC;AAKF,CAAA;ACMA,IAAM,SAAA,uBAAgB,GAAA,EAAqC;AAEpD,SAAS,YAAY,OAAA,EAAgC;AAC1D,EAAA,MAAM,OAAO,CAAA,EAAG,OAAA,CAAQ,IAAI,CAAA,CAAA,EAAI,QAAQ,YAAY,CAAA,CAAA;AACpD,EAAA,MAAM,QAAA,GAAW,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AACnC,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,MAAM,QAAA,GAAW,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,YAAY,MAAA,CAAO,OAAA,CAAQ,UAAU,CAAA,EAAG,CAAA;AAC9E,EAAA,SAAA,CAAU,GAAA,CAAI,MAAM,QAAQ,CAAA;AAE5B,EAAA,OAAO,QAAA;AACT;AAEA,eAAsB,iBAAiB,OAAA,EAAgD;AACrF,EAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,OAAO,CAAA;AAE/C,EAAA,OAAO,YAAY,eAAe,CAAA;AACpC;AAqBO,IAAM,eAAA,GAAkB,CAAC,MAAA,EAAQ,WAAA,EAAa,UAAU;AAExD,SAAS,WAAA,CACd,MACA,YAAA,EACgD;AAChD,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA,CAAE,KAAA;AAAA,IAAM,cACjC,MAAA,CAAO;AAAA,MACL,GAAG,QAAA;AAAA,MACH,IAAA,EAAM,IAAA,CAAK,IAAA,IAAQ,QAAA,EAAU,IAAA,IAAQ,YAAA;AAAA,MACrC,SAAA,EACE,QAAA,EAAU,SAAA,KAAc,IAAA,CAAK,SAAA,GAAY,OAAO,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA,CAAS,IAAA,GAAO,MAAA;AAAA,KACnF;AAAA,GACH;AACF;AAIO,SAAS,0BACd,QAAA,EACmC;AACnC,EAAA,IAAI,aAAA,IAAiB,QAAA,IAAY,kBAAA,IAAsB,QAAA,EAAU;AAC/D,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,WAAA,EAAa;AAAA,GACf;AACF;AAEO,SAAS,iBAAiB,SAAA,EAA0C;AACzE,EAAA,IAAI,SAAA,CAAU,UAAA,CAAW,SAAS,CAAA,EAAG;AACnC,IAAA,OAAO,UAAU,QAAA,CAAS,IAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,IAAA,CAAK,EAAA,CAAG,SAAA,CAAU,UAAA,CAAW,SAAS,CAAA,EAAG;AAC3C,IAAA,OAAO,UAAU,QAAA,CAAS,IAAA;AAAA,EAC5B;AAEA,EAAA,OAAO,OAAO,SAAS,CAAA;AACzB;AAEO,SAAS,2BACd,SAAA,EACmC;AACnC,EAAA,OAAO;AAAA,IACL,WAAA,EAAa;AAAA,MACX,6BAAA,EAA+B;AAAA;AACjC,GACF;AACF;AAEO,SAAS,eAAA,CACd,QACA,OAAA,EACoB;AACpB,EAAA,OAAO,MAAA,CAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,MAAA,EAAAC,OAAAA,EAAQ,OAAA,EAAAC,UAAQ,KAAM;AAChE,IAAA,IAAID,OAAAA,CAAO,SAAA,KAAcC,QAAAA,CAAQ,EAAA,EAAI;AACnC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qBAAA,EAAwBD,OAAAA,CAAO,IAAI,CAAA,EAAA,EAAKA,OAAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAA,EAAOA,OAAAA,CAAO,SAAS,CAAA,MAAA,EAASC,QAAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,OACxG;AAAA,IACF;AAEA,IAAA,OAAOA,QAAAA;AAAA,EACT,CAAC,CAAA;AACH;AASO,IAAe,cAAA,GAAf,cAAsC,iBAAA,CAAkB;AAAA,EACnD,WAAA,CACR,MACA,IAAA,EACA,IAAA,EACA,MAKS,UAAA,EAKA,IAAA,EAKA,WAKA,QAAA,EACT;AACA,IAAA,KAAA,CAAM,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAjBnB,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAKA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAKA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAKA,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AAAA,EAGX;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,OAAA,GAA+B;AACjC,IAAA,OAAO,KAAK,SAAA,CAAU,OAAA;AAAA,EACxB;AAMF;;;ACnIO,IAAe,SAAA,GAAf,MAAe,UAAA,SAAkBC,mBAAAA,CAAkB;AAAA,EACxD,WAAA,CACE,MACA,IAAA,EACA,IAAA,EACA,MAKS,OAAA,EAKA,QAAA,EAKA,MAKA,MAAA,EACT;AACA,IAAA,KAAA,CAAM,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAjBnB,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAKA,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AAKA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAKA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAGX;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,MAAA,GAAgC;AAClC,IAAA,OAAOC,QAAAA,CAAO;AAAA,MACZ,IAAA,EAAM,WAAA;AAAA,MACN,SAAA,EAAW,KAAK,OAAA,CAAQ,EAAA;AAAA,MACxB,WAAA,EAAa,KAAK,OAAA,CAAQ,IAAA;AAAA,MAC1B,UAAU,IAAA,CAAK;AAAA,KAChB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,MAAA,CAAO,IAAA,EAAc,IAAA,EAAqB,IAAA,EAA4C;AAC3F,IAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,IAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACW;AACX,IAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,WAAA,CACX,IAAA,EACA,IAAA,EACA,IAAA,EACoB;AACpB,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,MAAM,UAAA,CAAU,gBAAA,CAAiB,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO,CAAA;AAAA,IACrE;AAEA,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,MAAM,UAAA,CAAU,QAAA,CAAS,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO,CAAA;AAAA,IAC7D;AAEA,IAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAO,aAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACW;AACX,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,IAAI,eAAe,IAAA,EAAM;AAAA,QAC9B,GAAG,IAAA;AAAA,QACH,IAAA,EAAMA,QAAAA,CAAO,IAAA,CAAK,QAAQ,EAAE,QAAA,CAAS,SAAA;AAAA,QACrC,OAAA,EAAS,eAAA,CAAgB,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO;AAAA,OACrD,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,IAAI,eAAe,IAAA,EAAM;AAAA,QAC9B,GAAG,IAAA;AAAA,QACH,IAAA,EAAMA,QAAAA,CAAO,IAAA,CAAK,QAAQ,EAAE,QAAA,CAAS,IAAA;AAAA,QACrC,OAAA,EAAS,eAAA,CAAgB,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO;AAAA,OACrD,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAO,KAAA,CAAM,IAAA,EAAc,IAAA,EAAqB,IAAA,EAA4C;AAC1F,IAAA,OAAO,IAAI,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAO,GAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACW;AACX,IAAA,OAAO,IAAI,iBAAA,CAAkB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC/C;AAAA,EAEA,OAAwB,cAAA,mBAAiB,IAAI,GAAA,EAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAapE,OAAO,GAAA,CAAI,MAAA,EAAuB,OAAA,EAAwC;AACxE,IAAA,OAAO,WAAA;AAAA,MACL,UAAA,CAAU,cAAA;AAAA,MACV,CAAA,EAAG,OAAO,WAAW,CAAA,CAAA,EAAI,OAAO,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,MAAA,CAAO,SAAS,CAAA,CAAA;AAAA,MACjE,CAAA,IAAA,KAAQ;AACN,QAAA,OAAO,UAAA,CAAU,IAAI,IAAA,EAAM;AAAA,UACzB,IAAA,EAAM,OAAO,QAAA,CAAS,IAAA;AAAA,UACtB,OAAA,EAAS,eAAA,CAAgB,MAAA,EAAQ,OAAO;AAAA,SACzC,CAAA;AAAA,MACH;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,QAAA,CACX,MAAA,EACA,OAAA,EACoB;AACpB,IAAA,MAAM,cAAA,GAAiB,MAAMC,SAAAA,CAAU,MAAM,CAAA;AAE7C,IAAA,OAAO,UAAA,CAAU,GAAA,CAAI,cAAA,EAAgB,OAAO,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,OAAO,WAAA,CAAY,QAAA,EAA8B,OAAA,EAAwC;AACvF,IAAA,OAAO,WAAA;AAAA,MACL,UAAA,CAAU,cAAA;AAAA,MACV,CAAA,EAAG,SAAS,WAAW,CAAA,CAAA,EAAI,SAAS,QAAA,CAAS,SAAS,CAAA,CAAA,EAAI,QAAA,CAAS,SAAS,CAAA,CAAA;AAAA,MAC5E,CAAA,IAAA,KAAQ;AACN,QAAA,OAAO,UAAA,CAAU,IAAI,IAAA,EAAM;AAAA,UACzB,IAAA,EAAM,SAAS,QAAA,CAAS,SAAA;AAAA,UACxB,OAAA,EAAS,eAAA,CAAgB,QAAA,EAAU,OAAO;AAAA,SAC3C,CAAA;AAAA,MACH;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,gBAAA,CACX,QAAA,EACA,OAAA,EACoB;AACpB,IAAA,MAAM,gBAAA,GAAmB,MAAMA,SAAAA,CAAU,QAAQ,CAAA;AAEjD,IAAA,OAAO,UAAA,CAAU,WAAA,CAAY,gBAAA,EAAkB,OAAO,CAAA;AAAA,EACxD;AACF;AAEA,SAAS,oBAAA,CACP,MACA,YAAA,EACgD;AAChD,EAAA,OAAO,WAAA,CAAY,IAAA,EAAM,YAAY,CAAA,CAAE,MAAM,CAAA,QAAA,KAAY;AACvD,IAAA,IAAI,KAAK,UAAA,EAAY;AACnB,MAAA,QAAA,CAAS,MAAA,GAAS;AAAA,QAChB,GAAG,QAAA,CAAS,MAAA;AAAA,QACZ,oCAAA,EAAsC;AAAA,OACxC;AAAA,IACF;AAEA,IAAA,OAAO,QAAA;AAAA,EACT,CAAC,CAAA;AACH;AAEA,IAAM,gBAAA,GAAN,cAA+B,SAAA,CAAU;AAAA,EACvC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAqB,IAAA,EAAiC;AAC9E,IAAA,MAAM,YAAYD,QAAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,MAAM,CAAA,OAAA,KAAW;AACtD,MAAA,OAAO,IAAIE,KAAK,EAAA,CAAG,SAAA;AAAA,QACjB,IAAA;AAAA,QACA,EAAE,QAAA,EAAU,oBAAA,CAAqB,IAAA,EAAM,IAAI,CAAA,EAAE;AAAA,QAC7C,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,yBAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACAF,QAAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnB,SAAA,CAAU,QAAA;AAAA,MACV,SAAA,CAAU,IAAA;AAAA,MACV,SAAA,CAAU;AAAA,KACZ;AAAA,EACF;AACF,CAAA;AAEA,IAAM,cAAA,GAAN,cAA6B,SAAA,CAAU;AAAA,EACrC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAqB,IAAA,EAAiC;AAC9E,IAAA,MAAM,YAAYA,QAAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,MAAM,CAAA,OAAA,KAAW;AACtD,MAAA,OAAO,IAAIE,KAAK,EAAA,CAAG,cAAA;AAAA,QACjB,IAAA;AAAA,QACA,EAAE,QAAA,EAAU,oBAAA,CAAqB,IAAA,EAAM,IAAI,CAAA,EAAE;AAAA,QAC7C,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,8BAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACAF,QAAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnB,SAAA,CAAU,QAAA;AAAA,MACV,SAAA,CAAU,IAAA;AAAA,MACV,SAAA,CAAU;AAAA,KACZ;AAAA,EACF;AACF,CAAA;AA0BA,IAAM,iBAAA,GAAN,cAAgC,SAAA,CAAU;AAAA,EACxC,WAAA,CAAY,IAAA,EAAc,IAAA,EAA6B,IAAA,EAAiC;AACtF,IAAA,MAAM,YAAYA,QAAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,MAAM,CAAA,OAAA,KAAW;AACtD,MAAA,OAAOE,KAAK,EAAA,CAAG,SAAA,CAAU,GAAA,CAAI,IAAA,EAAM,KAAK,IAAA,EAAM;AAAA,QAC5C,GAAG,IAAA;AAAA,QACH,MAAA,EAAQ,IAAA;AAAA,QACR,QAAA,EAAU,YAAY,OAAO;AAAA,OAC9B,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,iCAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACAF,QAAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnB,SAAA,CAAU,QAAA;AAAA,MACV,SAAA,CAAU,IAAA;AAAA,MACV,SAAA,CAAU;AAAA,KACZ;AAAA,EACF;AACF,CAAA;AAEA,IAAM,gBAAA,GAAN,cAA+B,SAAA,CAAU;AAAA,EACvC,WAAA,CAAY,IAAA,EAAc,IAAA,EAA4B,IAAA,EAAiC;AACrF,IAAA,KAAA;AAAA,MACE,gCAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEAA,QAAAA,CAAO,KAAK,OAAO,CAAA;AAAA,MACnBA,QAAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,QAAA;AAAA,MACvBA,QAAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,IAAA;AAAA,MACvBA,QAAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE;AAAA,KACzB;AAAA,EACF;AACF,CAAA","file":"chunk-WGMJCZSK.js","sourcesContent":["{\n  \"terminal-kubectl\": {\n    \"name\": \"ghcr.io/exeteres/highstate/terminal-kubectl\",\n    \"tag\": \"latest\",\n    \"image\": \"ghcr.io/exeteres/highstate/terminal-kubectl:latest@sha256:2cd011119f6098d41b5bb377420f0106577d3b289ae4fc7982b4578b23c82ef4\"\n  },\n  \"worker-k8s-monitor\": {\n    \"name\": \"ghcr.io/exeteres/highstate/worker-k8s-monitor\",\n    \"tag\": \"latest\",\n    \"image\": \"ghcr.io/exeteres/highstate/worker-k8s-monitor:latest@sha256:66b985a97925d39a4c6e2b15cbeefadaadfce0cb4d6e5df8881cca85281383d5\"\n  }\n}\n","import type { PartialKeys } from \"@highstate/contract\"\nimport type { k8s } from \"@highstate/library\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type Inputs,\n  type Output,\n  output,\n  secret,\n  toPromise,\n  type Unwrap,\n} from \"@highstate/pulumi\"\nimport { core, Provider, type types } from \"@pulumi/kubernetes\"\nimport * as images from \"../assets/images.json\"\nimport { Namespace } from \"./namespace\"\n\nconst providers = new Map<`${string}.${string}`, Provider>()\n\nexport function getProvider(cluster: k8s.Cluster): Provider {\n  const name = `${cluster.name}.${cluster.connectionId}` as const\n  const existing = providers.get(name)\n  if (existing) {\n    return existing\n  }\n\n  const provider = new Provider(name, { kubeconfig: secret(cluster.kubeconfig) })\n  providers.set(name, provider)\n\n  return provider\n}\n\nexport async function getProviderAsync(cluster: Input<k8s.Cluster>): Promise<Provider> {\n  const resolvedCluster = await toPromise(cluster)\n\n  return getProvider(resolvedCluster)\n}\n\nexport type NamespaceLike = core.v1.Namespace | Namespace | string\n\nexport type ScopedResourceArgs = {\n  /**\n   * The name of the resource.\n   */\n  name?: Input<string>\n\n  /**\n   * The namespace to create the resource in.\n   */\n  namespace: Input<Namespace>\n\n  /**\n   * The metadata to apply to the resource.\n   */\n  metadata?: Input<types.input.meta.v1.ObjectMeta>\n}\n\nexport const commonExtraArgs = [\"name\", \"namespace\", \"metadata\"] as const\n\nexport function mapMetadata(\n  args: PartialKeys<ScopedResourceArgs, \"namespace\">,\n  fallbackName?: string,\n): Output<Unwrap<types.input.meta.v1.ObjectMeta>> {\n  return output(args.metadata).apply(metadata =>\n    output({\n      ...metadata,\n      name: args.name ?? metadata?.name ?? fallbackName,\n      namespace:\n        metadata?.namespace ?? (args.namespace ? output(args.namespace).metadata.name : undefined),\n    }),\n  )\n}\n\nexport type SelectorLike = types.input.meta.v1.LabelSelector | Record<string, Input<string>>\n\nexport function mapSelectorLikeToSelector(\n  selector: SelectorLike,\n): types.input.meta.v1.LabelSelector {\n  if (\"matchLabels\" in selector || \"matchExpressions\" in selector) {\n    return selector\n  }\n\n  return {\n    matchLabels: selector as Record<string, Input<string>>,\n  }\n}\n\nexport function getNamespaceName(namespace: NamespaceLike): Output<string> {\n  if (Namespace.isInstance(namespace)) {\n    return namespace.metadata.name\n  }\n\n  if (core.v1.Namespace.isInstance(namespace)) {\n    return namespace.metadata.name\n  }\n\n  return output(namespace)\n}\n\nexport function mapNamespaceNameToSelector(\n  namespace: Input<string>,\n): types.input.meta.v1.LabelSelector {\n  return {\n    matchLabels: {\n      \"kubernetes.io/metadata.name\": namespace,\n    },\n  }\n}\n\nexport function validateCluster(\n  entity: Input<k8s.Resource>,\n  cluster: Input<k8s.Cluster>,\n): Input<k8s.Cluster> {\n  return output({ entity, cluster }).apply(({ entity, cluster }) => {\n    if (entity.clusterId !== cluster.id) {\n      throw new Error(\n        `Cluster mismatch for ${entity.type} \"${entity.metadata.name}\": \"${entity.clusterId}\" != \"${cluster.id}\"`,\n      )\n    }\n\n    return cluster\n  })\n}\n\nexport { images }\n\n/**\n * Base class for all Kubernetes scoped resources.\n *\n * Provides common functionality for resources that have a cluster, namespace, metadata, and entity.\n */\nexport abstract class ScopedResource extends ComponentResource {\n  protected constructor(\n    type: string,\n    name: string,\n    args: Inputs,\n    opts: ComponentResourceOptions | undefined,\n\n    /**\n     * The Kubernetes API version (e.g., \"v1\", \"apps/v1\", \"batch/v1\").\n     */\n    readonly apiVersion: Output<string>,\n\n    /**\n     * The Kubernetes kind (e.g., \"ConfigMap\", \"Deployment\", \"CronJob\").\n     */\n    readonly kind: Output<string>,\n\n    /**\n     * The namespace where the resource is located.\n     */\n    readonly namespace: Output<Namespace>,\n\n    /**\n     * The metadata of the underlying Kubernetes resource.\n     */\n    readonly metadata: Output<types.output.meta.v1.ObjectMeta>,\n  ) {\n    super(type, name, args, opts)\n  }\n\n  /**\n   * The cluster where the resource is located.\n   */\n  get cluster(): Output<k8s.Cluster> {\n    return this.namespace.cluster\n  }\n\n  /**\n   * The Highstate resource entity.\n   */\n  abstract get entity(): Output<k8s.ScopedResource>\n}\n","import type { k8s } from \"@highstate/library\"\nimport { getOrCreate } from \"@highstate/contract\"\nimport { toPromise } from \"@highstate/pulumi\"\nimport { core, type types } from \"@pulumi/kubernetes\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type Inputs,\n  type Output,\n  output,\n  type Unwrap,\n} from \"@pulumi/pulumi\"\nimport { getProvider, mapMetadata, type ScopedResourceArgs, validateCluster } from \"./shared\"\n\nexport type NamespaceArgs = Omit<ScopedResourceArgs, \"namespace\"> & {\n  /**\n   * The cluster where the namespace is located.\n   */\n  cluster: Input<k8s.Cluster>\n\n  /**\n   * Whether to apply \"pod-security.kubernetes.io/enforce=privileged\" label to the namespace.\n   */\n  privileged?: boolean\n}\n\nexport type CreateOrGetNamespaceArgs = NamespaceArgs & {\n  /**\n   * The resource to use to determine the name of the namespace.\n   *\n   * If not provided, the namespace will be created, otherwise it will be retrieved/patched.\n   */\n  resource?: Input<k8s.ScopedResource>\n\n  /**\n   * The namespace entity to patch/retrieve.\n   */\n  existing?: Input<k8s.Namespace> | undefined\n}\n\nexport abstract class Namespace extends ComponentResource {\n  constructor(\n    type: string,\n    name: string,\n    args: Inputs,\n    opts: ComponentResourceOptions | undefined,\n\n    /**\n     * The cluster where the namespace is created.\n     */\n    readonly cluster: Output<k8s.Cluster>,\n\n    /*\n     * The metadata of the underlying Kubernetes namespace.\n     */\n    readonly metadata: Output<types.output.meta.v1.ObjectMeta>,\n\n    /**\n     * The spec of the underlying Kubernetes namespace.\n     */\n    readonly spec: Output<types.output.core.v1.NamespaceSpec>,\n\n    /**\n     * The status of the underlying Kubernetes namespace.\n     */\n    readonly status: Output<types.output.core.v1.NamespaceStatus>,\n  ) {\n    super(type, name, args, opts)\n  }\n\n  /**\n   * The Highstate namespace entity.\n   */\n  get entity(): Output<k8s.Namespace> {\n    return output({\n      type: \"namespace\",\n      clusterId: this.cluster.id,\n      clusterName: this.cluster.name,\n      metadata: this.metadata,\n    })\n  }\n\n  /**\n   * Creates a new namespace.\n   */\n  static create(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions): Namespace {\n    return new CreatedNamespace(name, args, opts)\n  }\n\n  /**\n   * Wraps an existing Kubernetes namespace.\n   */\n  static wrap(\n    name: string,\n    args: WrappedNamespaceArgs,\n    opts?: ComponentResourceOptions,\n  ): Namespace {\n    return new WrappedNamespace(name, args, opts)\n  }\n\n  /**\n   * Creates a new namespace or gets an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the namespace name. Will not be used when existing namespace is retrieved.\n   * @param args The arguments to create or get the namespace with.\n   * @param opts Optional resource options.\n   */\n  static async createOrGet(\n    name: string,\n    args: CreateOrGetNamespaceArgs,\n    opts?: ComponentResourceOptions,\n  ): Promise<Namespace> {\n    if (args.resource) {\n      return await Namespace.forResourceAsync(args.resource, args.cluster)\n    }\n\n    if (args.existing) {\n      return await Namespace.forAsync(args.existing, args.cluster)\n    }\n\n    return new CreatedNamespace(name, args, opts)\n  }\n\n  /**\n   * Creates a new namespace or patches an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the namespace name.\n   * @param args The arguments to create or patch the namespace with.\n   * @param opts Optional resource options.\n   */\n  static createOrPatch(\n    name: string,\n    args: CreateOrGetNamespaceArgs,\n    opts?: ComponentResourceOptions,\n  ): Namespace {\n    if (args.resource) {\n      return new NamespacePatch(name, {\n        ...args,\n        name: output(args.resource).metadata.namespace,\n        cluster: validateCluster(args.resource, args.cluster),\n      })\n    }\n\n    if (args.existing) {\n      return new NamespacePatch(name, {\n        ...args,\n        name: output(args.existing).metadata.name,\n        cluster: validateCluster(args.existing, args.cluster),\n      })\n    }\n\n    return new CreatedNamespace(name, args, opts)\n  }\n\n  /**\n   * Patches an existing namespace.\n   *\n   * Will throw an error if the namespace does not exist.\n   *\n   * @param name The name of the resource. May not be the same as the namespace name.\n   * @param args The arguments to patch the namespace with.\n   * @param opts Optional resource options.\n   */\n  static patch(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions): Namespace {\n    return new NamespacePatch(name, args, opts)\n  }\n\n  /**\n   * Gets an existing namespace.\n   *\n   * Will throw an error if the namespace does not exist.\n   *\n   * @param name The name of the resource. May not be the same as the namespace name.\n   * @param args The arguments to get the namespace with.\n   * @param opts Optional resource options.\n   */\n  static get(\n    name: string,\n    args: ExternalNamespaceArgs,\n    opts?: ComponentResourceOptions,\n  ): Namespace {\n    return new ExternalNamespace(name, args, opts)\n  }\n\n  private static readonly namespaceCache = new Map<string, Namespace>()\n\n  /**\n   * Gets an existing namespace for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{clusterId}`.\n   *\n   * This method it idempotent and will return the same instance for the same entity.\n   *\n   * @param entity The entity to get the namespace for.\n   * @param cluster The cluster where the namespace is located.\n   */\n  static for(entity: k8s.Namespace, cluster: Input<k8s.Cluster>): Namespace {\n    return getOrCreate(\n      Namespace.namespaceCache,\n      `${entity.clusterName}.${entity.metadata.name}.${entity.clusterId}`,\n      name => {\n        return Namespace.get(name, {\n          name: entity.metadata.name,\n          cluster: validateCluster(entity, cluster),\n        })\n      },\n    )\n  }\n\n  /**\n   * Gets an existing namespace for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * @param entity The entity to get the namespace for.\n   * @param cluster The cluster where the namespace is located.\n   */\n  static async forAsync(\n    entity: Input<k8s.Namespace>,\n    cluster: Input<k8s.Cluster>,\n  ): Promise<Namespace> {\n    const resolvedEntity = await toPromise(entity)\n\n    return Namespace.for(resolvedEntity, cluster)\n  }\n\n  /**\n   * Gets an existing namespace where the provided resource is located.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{clusterId}`.\n   *\n   * This method it idempotent and will return the same instance for the same resource.\n   *\n   * @param resource The resource to get the namespace for.\n   * @param cluster The cluster where the namespace is located.\n   */\n  static forResource(resource: k8s.ScopedResource, cluster: Input<k8s.Cluster>): Namespace {\n    return getOrCreate(\n      Namespace.namespaceCache,\n      `${resource.clusterName}.${resource.metadata.namespace}.${resource.clusterId}`,\n      name => {\n        return Namespace.get(name, {\n          name: resource.metadata.namespace,\n          cluster: validateCluster(resource, cluster),\n        })\n      },\n    )\n  }\n\n  /**\n   * Gets an existing namespace for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * @param resource The resource to get the namespace for.\n   * @param cluster The cluster where the namespace is located.\n   */\n  static async forResourceAsync(\n    resource: Input<k8s.ScopedResource>,\n    cluster: Input<k8s.Cluster>,\n  ): Promise<Namespace> {\n    const resolvedResource = await toPromise(resource)\n\n    return Namespace.forResource(resolvedResource, cluster)\n  }\n}\n\nfunction mapNamespaceMetadata(\n  args: NamespaceArgs,\n  fallbackName: string,\n): Output<Unwrap<types.input.meta.v1.ObjectMeta>> {\n  return mapMetadata(args, fallbackName).apply(metadata => {\n    if (args.privileged) {\n      metadata.labels = {\n        ...metadata.labels,\n        \"pod-security.kubernetes.io/enforce\": \"privileged\",\n      }\n    }\n\n    return metadata\n  })\n}\n\nclass CreatedNamespace extends Namespace {\n  constructor(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions) {\n    const namespace = output(args.cluster).apply(cluster => {\n      return new core.v1.Namespace(\n        name,\n        { metadata: mapNamespaceMetadata(args, name) },\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:Namespace\",\n      name,\n      args,\n      opts,\n      output(args.cluster),\n      namespace.metadata,\n      namespace.spec,\n      namespace.status,\n    )\n  }\n}\n\nclass NamespacePatch extends Namespace {\n  constructor(name: string, args: NamespaceArgs, opts?: ComponentResourceOptions) {\n    const namespace = output(args.cluster).apply(cluster => {\n      return new core.v1.NamespacePatch(\n        name,\n        { metadata: mapNamespaceMetadata(args, name) },\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:NamespacePatch\",\n      name,\n      args,\n      opts,\n      output(args.cluster),\n      namespace.metadata,\n      namespace.spec,\n      namespace.status,\n    )\n  }\n}\n\nexport type WrappedNamespaceArgs = {\n  /**\n   * The underlying Kubernetes namespace to wrap.\n   */\n  namespace: Input<core.v1.Namespace>\n\n  /**\n   * The cluster where the namespace is located.\n   */\n  cluster: Input<k8s.Cluster>\n}\n\nexport type ExternalNamespaceArgs = {\n  /**\n   * The real name of the namespace in the cluster.\n   */\n  name: Input<string>\n\n  /**\n   * The cluster where the namespace is located.\n   */\n  cluster: Input<k8s.Cluster>\n}\n\nclass ExternalNamespace extends Namespace {\n  constructor(name: string, args: ExternalNamespaceArgs, opts?: ComponentResourceOptions) {\n    const namespace = output(args.cluster).apply(cluster => {\n      return core.v1.Namespace.get(name, args.name, {\n        ...opts,\n        parent: this,\n        provider: getProvider(cluster),\n      })\n    })\n\n    super(\n      \"highstate:k8s:ExternalNamespace\",\n      name,\n      args,\n      opts,\n      output(args.cluster),\n      namespace.metadata,\n      namespace.spec,\n      namespace.status,\n    )\n  }\n}\n\nclass WrappedNamespace extends Namespace {\n  constructor(name: string, args: WrappedNamespaceArgs, opts?: ComponentResourceOptions) {\n    super(\n      \"highstate:k8s:WrappedNamespace\",\n      name,\n      args,\n      opts,\n\n      output(args.cluster),\n      output(args.namespace).metadata,\n      output(args.namespace).spec,\n      output(args.namespace).status,\n    )\n  }\n}\n"]}

package/dist/deployment-752P6JIT.js

@@ -0,0 +1,8 @@
+export { Deployment } from './chunk-JYNXQ3I3.js';
+import './chunk-SBC3TUIN.js';
+import './chunk-SI7X6N46.js';
+import './chunk-IMTXUK2U.js';
+import './chunk-WGMJCZSK.js';
+import './chunk-PZ5AY32C.js';
+//# sourceMappingURL=deployment-752P6JIT.js.map
+//# sourceMappingURL=deployment-752P6JIT.js.map

package/dist/{deployment-XK3CDJOE.js.map → deployment-752P6JIT.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"deployment-XK3CDJOE.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"deployment-752P6JIT.js"}

package/dist/highstate.manifest.json

@@ -1,12 +1,13 @@
 {
   "sourceHashes": {
     "./dist/index.js": 2212294583,
-    "./dist/units/access-point/index.js": 567437648,
-    "./dist/units/cert-manager/index.js": 2089212180,
-    "./dist/units/cluster-patch/index.js": 919840588,
-    "./dist/units/cluster-dns/index.js": 1623009514,
-    "./dist/units/dns01-issuer/index.js": 1377009716,
-    "./dist/units/existing-cluster/index.js": 3539273236,
-    "./dist/units/gateway-api/index.js": 3300268618
+    "./dist/units/cert-manager/index.js": 2212294583,
+    "./dist/units/cluster-patch/index.js": 2212294583,
+    "./dist/units/cluster-dns/index.js": 2212294583,
+    "./dist/units/dns01-issuer/index.js": 2212294583,
+    "./dist/units/existing-cluster/index.js": 2212294583,
+    "./dist/units/gateway-api/index.js": 2212294583,
+    "./dist/impl/gateway-route.js": 2187259838,
+    "./dist/impl/tls-certificate.js": 3544890910
   }
 }

package/dist/impl/gateway-route.js

@@ -0,0 +1,123 @@
+import { Certificate } from '../chunk-NOFJC3EM.js';
+import { Gateway, HttpRoute } from '../chunk-NXSYCA3V.js';
+import { Service, l4EndpointToServicePort } from '../chunk-SI7X6N46.js';
+import '../chunk-IMTXUK2U.js';
+import { Namespace, mapMetadata, getProvider } from '../chunk-WGMJCZSK.js';
+import '../chunk-PZ5AY32C.js';
+import { gatewayRouteMediator, filterEndpoints } from '@highstate/common';
+import { k8s } from '@highstate/library';
+import { toPromise } from '@highstate/pulumi';
+import { core } from '@pulumi/kubernetes';
+
+var createGatewayRoute = gatewayRouteMediator.implement(
+  k8s.gatewayDataSchema,
+  async ({ name, spec, opts }, data) => {
+    const namespace = spec.nativeData instanceof Service ? await toPromise(spec.nativeData.namespace) : Namespace.for(data.namespace, data.cluster);
+    const certSecret = await getCertificateSecret(name, namespace, spec.tlsCertificate);
+    const certificateRef = certSecret ? {
+      kind: "Secret",
+      group: "",
+      name: certSecret.metadata.name
+    } : void 0;
+    const gateway = await Gateway.createOnce(
+      {
+        name,
+        namespace,
+        gatewayClassName: data.className,
+        listeners: [
+          {
+            name: "https",
+            port: data.httpsPort,
+            protocol: "HTTPS",
+            tls: {
+              mode: "Terminate",
+              certificateRefs: certificateRef ? [certificateRef] : void 0
+            }
+          }
+        ]
+      },
+      opts
+    );
+    if (spec.nativeData instanceof Service) {
+      const httpRoute2 = new HttpRoute(
+        name,
+        {
+          gateway,
+          rule: { backend: spec.nativeData }
+        },
+        opts
+      );
+      return {
+        resource: httpRoute2,
+        endpoints: await toPromise(gateway.endpoints)
+      };
+    }
+    const endpoints = await toPromise(spec.endpoints);
+    const hostnameEndpoints = filterEndpoints(endpoints, void 0, ["hostname"]);
+    const ipEndpoints = filterEndpoints(endpoints, void 0, ["ipv4", "ipv6"]);
+    let service;
+    if (hostnameEndpoints.length > 0 && hostnameEndpoints[0].visibility > ipEndpoints[0]?.visibility) {
+      service = Service.create(`hs-backend-${name}`, {
+        namespace,
+        type: "ExternalName",
+        externalName: hostnameEndpoints[0].hostname,
+        ports: hostnameEndpoints.map(l4EndpointToServicePort)
+      });
+    } else {
+      service = Service.create(`hs-backend-${name}`, {
+        namespace,
+        type: "ClusterIP",
+        ports: ipEndpoints.map(l4EndpointToServicePort)
+      });
+      const endpointsName = `hs-backend-${name}`;
+      new core.v1.Endpoints(
+        endpointsName,
+        {
+          metadata: mapMetadata({ namespace }, endpointsName),
+          subsets: ipEndpoints.map((endpoint) => ({
+            addresses: [{ ip: endpoint.address }],
+            ports: [l4EndpointToServicePort(endpoint)]
+          }))
+        },
+        { ...opts, provider: getProvider(data.cluster), parent: service }
+      );
+    }
+    const httpRoute = new HttpRoute(
+      name,
+      {
+        gateway,
+        rule: {
+          backend: service
+        }
+      },
+      opts
+    );
+    return {
+      resource: httpRoute,
+      endpoints: await toPromise(gateway.endpoints)
+    };
+  }
+);
+async function getCertificateSecret(_name, namespace, tlsCertificate) {
+  const resolvedCertificate = await toPromise(tlsCertificate);
+  if (!resolvedCertificate) {
+    return void 0;
+  }
+  const resource = await toPromise(resolvedCertificate.resource);
+  if (resource instanceof Certificate) {
+    const certNamespace = await toPromise(resource.namespace.metadata.name);
+    const certClusterId = await toPromise(resource.namespace.cluster.id);
+    const targetNamespace = await toPromise(namespace.metadata.name);
+    const targetClusterId = await toPromise(namespace.cluster.id);
+    if (certNamespace === targetNamespace && certClusterId === targetClusterId) {
+      return await toPromise(resource.secret);
+    }
+  }
+  throw new Error(
+    "Not implemented: copying certificate secret across namespaces/clusters/different systems"
+  );
+}
+
+export { createGatewayRoute };
+//# sourceMappingURL=gateway-route.js.map
+//# sourceMappingURL=gateway-route.js.map

package/dist/impl/gateway-route.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/impl/gateway-route.ts"],"names":["httpRoute"],"mappings":";;;;;;;;;;;AAWO,IAAM,qBAAqB,oBAAA,CAAqB,SAAA;AAAA,EACrD,GAAA,CAAI,iBAAA;AAAA,EACJ,OAAO,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,IAAQ,IAAA,KAAS;AACpC,IAAA,MAAM,SAAA,GACJ,IAAA,CAAK,UAAA,YAAsB,OAAA,GACvB,MAAM,SAAA,CAAU,IAAA,CAAK,UAAA,CAAW,SAAS,IACzC,SAAA,CAAU,GAAA,CAAI,IAAA,CAAK,SAAA,EAAW,KAAK,OAAO,CAAA;AAEhD,IAAA,MAAM,aAAa,MAAM,oBAAA,CAAqB,IAAA,EAAM,SAAA,EAAW,KAAK,cAAc,CAAA;AAElF,IAAA,MAAM,iBAAiB,UAAA,GACnB;AAAA,MACE,IAAA,EAAM,QAAA;AAAA,MACN,KAAA,EAAO,EAAA;AAAA,MACP,IAAA,EAAM,WAAW,QAAA,CAAS;AAAA,KAC5B,GACA,MAAA;AAEJ,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,UAAA;AAAA,MAC5B;AAAA,QACE,IAAA;AAAA,QACA,SAAA;AAAA,QACA,kBAAkB,IAAA,CAAK,SAAA;AAAA,QACvB,SAAA,EAAW;AAAA,UACT;AAAA,YACE,IAAA,EAAM,OAAA;AAAA,YACN,MAAM,IAAA,CAAK,SAAA;AAAA,YACX,QAAA,EAAU,OAAA;AAAA,YACV,GAAA,EAAK;AAAA,cACH,IAAA,EAAM,WAAA;AAAA,cACN,eAAA,EAAiB,cAAA,GAAiB,CAAC,cAAc,CAAA,GAAI;AAAA;AACvD;AACF;AACF,OACF;AAAA,MACA;AAAA,KACF;AAGA,IAAA,IAAI,IAAA,CAAK,sBAAsB,OAAA,EAAS;AACtC,MAAA,MAAMA,aAAY,IAAI,SAAA;AAAA,QACpB,IAAA;AAAA,QACA;AAAA,UACE,OAAA;AAAA,UACA,IAAA,EAAM,EAAE,OAAA,EAAS,IAAA,CAAK,UAAA;AAAW,SACnC;AAAA,QACA;AAAA,OACF;AAEA,MAAA,OAAO;AAAA,QACL,QAAA,EAAUA,UAAAA;AAAA,QACV,SAAA,EAAW,MAAM,SAAA,CAAU,OAAA,CAAQ,SAAS;AAAA,OAC9C;AAAA,IACF;AAGA,IAAA,MAAM,SAAA,GAAY,MAAM,SAAA,CAAU,IAAA,CAAK,SAAS,CAAA;AAChD,IAAA,MAAM,oBAAoB,eAAA,CAAgB,SAAA,EAAW,MAAA,EAAW,CAAC,UAAU,CAAC,CAAA;AAC5E,IAAA,MAAM,cAAc,eAAA,CAAgB,SAAA,EAAW,QAAW,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAA;AAE1E,IAAA,IAAI,OAAA;AAEJ,IAAA,IACE,iBAAA,CAAkB,MAAA,GAAS,CAAA,IAC3B,iBAAA,CAAkB,CAAC,EAAE,UAAA,GAAa,WAAA,CAAY,CAAC,CAAA,EAAG,UAAA,EAClD;AAEA,MAAA,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,CAAA,WAAA,EAAc,IAAI,CAAA,CAAA,EAAI;AAAA,QAC7C,SAAA;AAAA,QACA,IAAA,EAAM,cAAA;AAAA,QACN,YAAA,EAAc,iBAAA,CAAkB,CAAC,CAAA,CAAE,QAAA;AAAA,QACnC,KAAA,EAAO,iBAAA,CAAkB,GAAA,CAAI,uBAAuB;AAAA,OACrD,CAAA;AAAA,IACH,CAAA,MAAO;AAEL,MAAA,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,CAAA,WAAA,EAAc,IAAI,CAAA,CAAA,EAAI;AAAA,QAC7C,SAAA;AAAA,QACA,IAAA,EAAM,WAAA;AAAA,QACN,KAAA,EAAO,WAAA,CAAY,GAAA,CAAI,uBAAuB;AAAA,OAC/C,CAAA;AAED,MAAA,MAAM,aAAA,GAAgB,cAAc,IAAI,CAAA,CAAA;AAExC,MAAA,IAAI,KAAK,EAAA,CAAG,SAAA;AAAA,QACV,aAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU,WAAA,CAAY,EAAE,SAAA,IAAa,aAAa,CAAA;AAAA,UAClD,OAAA,EAAS,WAAA,CAAY,GAAA,CAAI,CAAA,QAAA,MAAa;AAAA,YACpC,WAAW,CAAC,EAAE,EAAA,EAAI,QAAA,CAAS,SAAS,CAAA;AAAA,YACpC,KAAA,EAAO,CAAC,uBAAA,CAAwB,QAAQ,CAAC;AAAA,WAC3C,CAAE;AAAA,SACJ;AAAA,QACA,EAAE,GAAG,IAAA,EAAM,QAAA,EAAU,YAAY,IAAA,CAAK,OAAO,CAAA,EAAG,MAAA,EAAQ,OAAA;AAAQ,OAClE;AAAA,IACF;AAEA,IAAA,MAAM,YAAY,IAAI,SAAA;AAAA,MACpB,IAAA;AAAA,MACA;AAAA,QACE,OAAA;AAAA,QACA,IAAA,EAAM;AAAA,UACJ,OAAA,EAAS;AAAA;AACX,OACF;AAAA,MACA;AAAA,KACF;AAEA,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,SAAA;AAAA,MACV,SAAA,EAAW,MAAM,SAAA,CAAU,OAAA,CAAQ,SAAS;AAAA,KAC9C;AAAA,EACF;AACF;AAEA,eAAe,oBAAA,CACb,KAAA,EACA,SAAA,EACA,cAAA,EAC6B;AAC7B,EAAA,MAAM,mBAAA,GAAsB,MAAM,SAAA,CAAU,cAAc,CAAA;AAC1D,EAAA,IAAI,CAAC,mBAAA,EAAqB;AACxB,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,mBAAA,CAAoB,QAAQ,CAAA;AAE7D,EAAA,IAAI,oBAAoB,WAAA,EAAa;AACnC,IAAA,MAAM,gBAAgB,MAAM,SAAA,CAAU,QAAA,CAAS,SAAA,CAAU,SAAS,IAAI,CAAA;AACtE,IAAA,MAAM,gBAAgB,MAAM,SAAA,CAAU,QAAA,CAAS,SAAA,CAAU,QAAQ,EAAE,CAAA;AAEnE,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,SAAA,CAAU,SAAS,IAAI,CAAA;AAC/D,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,SAAA,CAAU,QAAQ,EAAE,CAAA;AAE5D,IAAA,IAAI,aAAA,KAAkB,eAAA,IAAmB,aAAA,KAAkB,eAAA,EAAiB;AAE1E,MAAA,OAAO,MAAM,SAAA,CAAU,QAAA,CAAS,MAAM,CAAA;AAAA,IACxC;AAAA,EACF;AAGA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF","file":"gateway-route.js","sourcesContent":["import type { Secret } from \"../secret\"\nimport { filterEndpoints, gatewayRouteMediator, type TlsCertificate } from \"@highstate/common\"\nimport { k8s } from \"@highstate/library\"\nimport { type Input, toPromise } from \"@highstate/pulumi\"\nimport { core } from \"@pulumi/kubernetes\"\nimport { Gateway, HttpRoute } from \"../gateway\"\nimport { Namespace } from \"../namespace\"\nimport { l4EndpointToServicePort, Service } from \"../service\"\nimport { getProvider, mapMetadata } from \"../shared\"\nimport { Certificate } from \"../tls\"\n\nexport const createGatewayRoute = gatewayRouteMediator.implement(\n  k8s.gatewayDataSchema,\n  async ({ name, spec, opts }, data) => {\n    const namespace =\n      spec.nativeData instanceof Service\n        ? await toPromise(spec.nativeData.namespace)\n        : Namespace.for(data.namespace, data.cluster)\n\n    const certSecret = await getCertificateSecret(name, namespace, spec.tlsCertificate)\n\n    const certificateRef = certSecret\n      ? {\n          kind: \"Secret\",\n          group: \"\",\n          name: certSecret.metadata.name,\n        }\n      : undefined\n\n    const gateway = await Gateway.createOnce(\n      {\n        name,\n        namespace,\n        gatewayClassName: data.className,\n        listeners: [\n          {\n            name: \"https\",\n            port: data.httpsPort,\n            protocol: \"HTTPS\",\n            tls: {\n              mode: \"Terminate\",\n              certificateRefs: certificateRef ? [certificateRef] : undefined,\n            },\n          },\n        ],\n      },\n      opts,\n    )\n\n    // 1. short path - just create an HTTP route backed by a service\n    if (spec.nativeData instanceof Service) {\n      const httpRoute = new HttpRoute(\n        name,\n        {\n          gateway,\n          rule: { backend: spec.nativeData },\n        },\n        opts,\n      )\n\n      return {\n        resource: httpRoute,\n        endpoints: await toPromise(gateway.endpoints),\n      }\n    }\n\n    // 2. long path - create a virtual service with provided endpoints\n    const endpoints = await toPromise(spec.endpoints)\n    const hostnameEndpoints = filterEndpoints(endpoints, undefined, [\"hostname\"])\n    const ipEndpoints = filterEndpoints(endpoints, undefined, [\"ipv4\", \"ipv6\"])\n\n    let service: Service\n\n    if (\n      hostnameEndpoints.length > 0 &&\n      hostnameEndpoints[0].visibility > ipEndpoints[0]?.visibility\n    ) {\n      // if the hostname endpoints are more visible, create a service for the first hostname with ExternalName\n      service = Service.create(`hs-backend-${name}`, {\n        namespace,\n        type: \"ExternalName\",\n        externalName: hostnameEndpoints[0].hostname,\n        ports: hostnameEndpoints.map(l4EndpointToServicePort),\n      })\n    } else {\n      // otherwise, create a headless service and populate it with IPs\n      service = Service.create(`hs-backend-${name}`, {\n        namespace,\n        type: \"ClusterIP\",\n        ports: ipEndpoints.map(l4EndpointToServicePort),\n      })\n\n      const endpointsName = `hs-backend-${name}`\n\n      new core.v1.Endpoints(\n        endpointsName,\n        {\n          metadata: mapMetadata({ namespace }, endpointsName),\n          subsets: ipEndpoints.map(endpoint => ({\n            addresses: [{ ip: endpoint.address }],\n            ports: [l4EndpointToServicePort(endpoint)],\n          })),\n        },\n        { ...opts, provider: getProvider(data.cluster), parent: service },\n      )\n    }\n\n    const httpRoute = new HttpRoute(\n      name,\n      {\n        gateway,\n        rule: {\n          backend: service,\n        },\n      },\n      opts,\n    )\n\n    return {\n      resource: httpRoute,\n      endpoints: await toPromise(gateway.endpoints),\n    }\n  },\n)\n\nasync function getCertificateSecret(\n  _name: string,\n  namespace: Namespace,\n  tlsCertificate: Input<TlsCertificate | undefined> | undefined,\n): Promise<Secret | undefined> {\n  const resolvedCertificate = await toPromise(tlsCertificate)\n  if (!resolvedCertificate) {\n    return undefined\n  }\n\n  const resource = await toPromise(resolvedCertificate.resource)\n\n  if (resource instanceof Certificate) {\n    const certNamespace = await toPromise(resource.namespace.metadata.name)\n    const certClusterId = await toPromise(resource.namespace.cluster.id)\n\n    const targetNamespace = await toPromise(namespace.metadata.name)\n    const targetClusterId = await toPromise(namespace.cluster.id)\n\n    if (certNamespace === targetNamespace && certClusterId === targetClusterId) {\n      // 1. short path - same namespace and cluster, just return the secret\n      return await toPromise(resource.secret)\n    }\n  }\n\n  // 2. long path - create a new secret in the target namespace with the certificate data\n  throw new Error(\n    \"Not implemented: copying certificate secret across namespaces/clusters/different systems\",\n  )\n}\n"]}