@highstate/library 0.9.26 → 0.9.28

package/dist/index.js

@@ -656,7 +656,11 @@ var accessPointEntity = defineEntity({
     /**
      * The DNS providers used to manage the DNS records for the access point.
      */
-    dnsProviders: providerEntity.schema.array().meta({ title: camelCaseToHumanReadable("dnsProviders"), description: `The DNS providers used to manage the DNS records for the access point.` })
+    dnsProviders: providerEntity.schema.array().meta({ title: camelCaseToHumanReadable("dnsProviders"), description: `The DNS providers used to manage the DNS records for the access point.` }),
+    /**
+     * Whether the DNS records created for the access point should be proxied.
+     */
+    proxied: z.boolean().default(false).meta({ title: camelCaseToHumanReadable("proxied"), description: `Whether the DNS records created for the access point should be proxied.` })
   }),
   meta: {
     color: "#F57F17"
@@ -664,6 +668,22 @@ var accessPointEntity = defineEntity({
 });
 var accessPoint = defineUnit({
   type: "common.access-point.v1",
+  args: {
+    /**
+     * Whether the DNS records created for the access point should be proxied.
+     *
+     * This option is specific to certain DNS providers that support proxying, such as Cloudflare.
+     * When enabled, the DNS records will be proxied through the provider's network, providing additional security and performance benefits.
+     *
+     * Defaults to `false`.
+     */
+    proxied: $addArgumentDescription(z.boolean().default(false), `Whether the DNS records created for the access point should be proxied.
+
+ This option is specific to certain DNS providers that support proxying, such as Cloudflare.
+ When enabled, the DNS records will be proxied through the provider's network, providing additional security and performance benefits.
+
+ Defaults to \`false\`.`)
+  },
   inputs: {
     gateway: gatewayEntity,
     tlsIssuers: {
@@ -1819,6 +1839,7 @@ __export(k8s_exports, {
   networkInterfaceEntity: () => networkInterfaceEntity,
   obfuscators: () => obfuscators_exports,
   persistentVolumeClaimEntity: () => persistentVolumeClaimEntity,
+  reducedAccessCluster: () => reducedAccessCluster,
   resourceSchema: () => resourceSchema,
   scheduleOnMastersPolicyArgs: () => scheduleOnMastersPolicyArgs,
   scheduleOnMastersPolicySchema: () => scheduleOnMastersPolicySchema,
@@ -2576,6 +2597,10 @@ var workload = defineUnit({
      * The image to use for the workload.
      */
     image: $addArgumentDescription(z.string(), `The image to use for the workload.`),
+    /**
+     * The command to run in the container.
+     */
+    command: $addArgumentDescription(z.array(z.string()).default([]), `The command to run in the container.`),
     /**
      * The port to expose for the workload.
      *
@@ -2726,6 +2751,7 @@ var workload = defineUnit({
     ])
   },
   outputs: {
+    namespace: namespaceEntity,
     deployment: deploymentEntity,
     service: serviceEntity
   },
@@ -2738,7 +2764,7 @@ var workload = defineUnit({
     secondaryIcon: "mdi:cube-outline",
     category: "Kubernetes"
   },
-  source: source("deployment")
+  source: source("workload")
 });
 var tlsIssuerDataSchema = z.object({
   /**
@@ -3074,6 +3100,106 @@ var obfuscator = defineUnit({
     path: "phantun/obfuscator"
   }
 });
+var k8sVerbsSchema = z.enum([
+  "get",
+  "list",
+  "watch",
+  "create",
+  "update",
+  "patch",
+  "delete",
+  "deletecollection"
+]);
+var reducedAccessCluster = defineUnit({
+  type: "k8s.reduced-access-cluster.v1",
+  args: {
+    /**
+     * The verbs to allow on the specified resources.
+     *
+     * Defaults to read-only access (get, list, watch).
+     */
+    verbs: $addArgumentDescription(k8sVerbsSchema.array().default(["get", "list", "watch"]), `The verbs to allow on the specified resources.
+
+ Defaults to read-only access (get, list, watch).`),
+    /**
+     * The name of the ServiceAccount to create.
+     *
+     * If not provided, will be the same as the unit name.
+     */
+    serviceAccountName: $addArgumentDescription(z.string().optional(), `The name of the ServiceAccount to create.
+
+ If not provided, will be the same as the unit name.`)
+  },
+  inputs: {
+    k8sCluster: clusterEntity,
+    /**
+     * The namespace where the ServiceAccount will be created.
+     */
+    namespace: $addInputDescription(namespaceEntity, `The namespace where the ServiceAccount will be created.`),
+    /**
+     * The deployments to grant access to.
+     */
+    deployments: $addInputDescription({
+      entity: deploymentEntity,
+      multiple: true,
+      required: false
+    }, `The deployments to grant access to.`),
+    /**
+     * The stateful sets to grant access to.
+     */
+    statefulSets: $addInputDescription({
+      entity: statefulSetEntity,
+      multiple: true,
+      required: false
+    }, `The stateful sets to grant access to.`),
+    /**
+     * The services to grant access to.
+     */
+    services: $addInputDescription({
+      entity: serviceEntity,
+      multiple: true,
+      required: false
+    }, `The services to grant access to.`),
+    /**
+     * The persistent volume claims to grant access to.
+     */
+    persistentVolumeClaims: $addInputDescription({
+      entity: persistentVolumeClaimEntity,
+      multiple: true,
+      required: false
+    }, `The persistent volume claims to grant access to.`),
+    /**
+     * The secrets to grant access to.
+     */
+    secrets: $addInputDescription({
+      entity: certificateEntity,
+      multiple: true,
+      required: false
+    }, `The secrets to grant access to.`),
+    /**
+     * The config maps to grant access to.
+     */
+    configMaps: $addInputDescription({
+      entity: certificateEntity,
+      multiple: true,
+      required: false
+    }, `The config maps to grant access to.`)
+  },
+  outputs: {
+    k8sCluster: clusterEntity
+  },
+  meta: {
+    description: `Creates a reduced access cluster with ServiceAccount-based authentication for specific Kubernetes resources.`,
+    title: "Reduced Access Cluster",
+    icon: "devicon:kubernetes",
+    secondaryIcon: "mdi:shield-lock",
+    category: "Kubernetes"
+  },
+  source: {
+    package: "@highstate/k8s",
+    path: "units/reduced-access-cluster"
+  }
+});
 
 // src/nixos.ts
 var nixos_exports = {};