@kinwan/infrascript 0.1.0

package/dist/k8s/Manifests.js

@@ -0,0 +1,204 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PVC = exports.Secret = exports.ConfigMap = exports.Ingress = exports.K8sService = void 0;
+const Builder_1 = require("../core/Builder");
+// ─── Service ────────────────────────────────────────────────────────────────
+class K8sService extends Builder_1.Builder {
+    constructor(name) {
+        super();
+        this.kind = "Service";
+        this._type = "ClusterIP";
+        this._ports = [];
+        this._selector = {};
+        this._annotations = {};
+        this._name = name;
+        this._selector = { app: name };
+    }
+    namespace(ns) { this._namespace = ns; return this; }
+    type(t) { this._type = t; return this; }
+    selector(s) { this._selector = { ...this._selector, ...s }; return this; }
+    annotations(a) { this._annotations = { ...this._annotations, ...a }; return this; }
+    port(port, targetPort, protocol = "TCP", name) {
+        this._ports.push({ port, targetPort: targetPort ?? port, protocol, name });
+        return this;
+    }
+    outputPath() {
+        const ns = this._namespace ? `${this._namespace}/` : "";
+        return `k8s/${ns}${this._name}-service.yaml`;
+    }
+    toObject() {
+        const metadata = { name: this._name };
+        if (this._namespace)
+            metadata["namespace"] = this._namespace;
+        if (Object.keys(this._annotations).length > 0)
+            metadata["annotations"] = this._annotations;
+        return {
+            apiVersion: "v1",
+            kind: "Service",
+            metadata,
+            spec: {
+                type: this._type,
+                selector: this._selector,
+                ports: this._ports.map(({ port, targetPort, protocol, name }) => {
+                    const p = { port, targetPort, protocol };
+                    if (name)
+                        p["name"] = name;
+                    return p;
+                }),
+            },
+        };
+    }
+}
+exports.K8sService = K8sService;
+// ─── Ingress ─────────────────────────────────────────────────────────────────
+class Ingress extends Builder_1.Builder {
+    constructor(name) {
+        super();
+        this.kind = "Ingress";
+        this._rules = [];
+        this._tls = [];
+        this._annotations = {};
+        this._name = name;
+    }
+    namespace(ns) { this._namespace = ns; return this; }
+    ingressClassName(cls) { this._ingressClassName = cls; return this; }
+    annotations(a) { this._annotations = { ...this._annotations, ...a }; return this; }
+    rule(host, path, serviceName, servicePort) {
+        this._rules.push({ host, path, serviceName, servicePort });
+        return this;
+    }
+    tls(hosts, secretName) {
+        this._tls.push({ hosts, secretName });
+        return this;
+    }
+    outputPath() {
+        const ns = this._namespace ? `${this._namespace}/` : "";
+        return `k8s/${ns}${this._name}-ingress.yaml`;
+    }
+    toObject() {
+        const metadata = { name: this._name };
+        if (this._namespace)
+            metadata["namespace"] = this._namespace;
+        if (Object.keys(this._annotations).length > 0)
+            metadata["annotations"] = this._annotations;
+        const spec = {
+            rules: this._rules.map(({ host, path, serviceName, servicePort }) => ({
+                host,
+                http: {
+                    paths: [{
+                            path,
+                            pathType: "Prefix",
+                            backend: {
+                                service: { name: serviceName, port: { number: servicePort } },
+                            },
+                        }],
+                },
+            })),
+        };
+        if (this._ingressClassName)
+            spec["ingressClassName"] = this._ingressClassName;
+        if (this._tls.length > 0)
+            spec["tls"] = this._tls;
+        return { apiVersion: "networking.k8s.io/v1", kind: "Ingress", metadata, spec };
+    }
+}
+exports.Ingress = Ingress;
+// ─── ConfigMap ───────────────────────────────────────────────────────────────
+class ConfigMap extends Builder_1.Builder {
+    constructor(name) {
+        super();
+        this.kind = "ConfigMap";
+        this._data = {};
+        this._name = name;
+    }
+    namespace(ns) { this._namespace = ns; return this; }
+    set(key, value) {
+        this._data[key] = value;
+        return this;
+    }
+    data(d) {
+        this._data = { ...this._data, ...d };
+        return this;
+    }
+    outputPath() {
+        const ns = this._namespace ? `${this._namespace}/` : "";
+        return `k8s/${ns}${this._name}-configmap.yaml`;
+    }
+    toObject() {
+        const metadata = { name: this._name };
+        if (this._namespace)
+            metadata["namespace"] = this._namespace;
+        return { apiVersion: "v1", kind: "ConfigMap", metadata, data: this._data };
+    }
+}
+exports.ConfigMap = ConfigMap;
+class Secret extends Builder_1.Builder {
+    constructor(name) {
+        super();
+        this.kind = "Secret";
+        this._type = "Opaque";
+        this._stringData = {};
+        this._name = name;
+    }
+    namespace(ns) { this._namespace = ns; return this; }
+    type(t) { this._type = t; return this; }
+    /** Use stringData — K8s will base64-encode automatically */
+    set(key, value) {
+        this._stringData[key] = value;
+        return this;
+    }
+    data(d) {
+        this._stringData = { ...this._stringData, ...d };
+        return this;
+    }
+    outputPath() {
+        const ns = this._namespace ? `${this._namespace}/` : "";
+        return `k8s/${ns}${this._name}-secret.yaml`;
+    }
+    toObject() {
+        const metadata = { name: this._name };
+        if (this._namespace)
+            metadata["namespace"] = this._namespace;
+        return {
+            apiVersion: "v1",
+            kind: "Secret",
+            metadata,
+            type: this._type,
+            stringData: this._stringData,
+        };
+    }
+}
+exports.Secret = Secret;
+class PVC extends Builder_1.Builder {
+    constructor(name, storage) {
+        super();
+        this.kind = "PersistentVolumeClaim";
+        this._accessModes = ["ReadWriteOnce"];
+        this._name = name;
+        this._storage = storage;
+    }
+    namespace(ns) { this._namespace = ns; return this; }
+    accessModes(...modes) { this._accessModes = modes; return this; }
+    storageClassName(cls) { this._storageClassName = cls; return this; }
+    outputPath() {
+        const ns = this._namespace ? `${this._namespace}/` : "";
+        return `k8s/${ns}${this._name}-pvc.yaml`;
+    }
+    toObject() {
+        const metadata = { name: this._name };
+        if (this._namespace)
+            metadata["namespace"] = this._namespace;
+        const resources = {
+            requests: { storage: this._storage },
+        };
+        const spec = {
+            accessModes: this._accessModes,
+            resources,
+        };
+        if (this._storageClassName)
+            spec["storageClassName"] = this._storageClassName;
+        return { apiVersion: "v1", kind: "PersistentVolumeClaim", metadata, spec };
+    }
+}
+exports.PVC = PVC;
+//# sourceMappingURL=Manifests.js.map

package/dist/k8s/Manifests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Manifests.js","sourceRoot":"","sources":["../../src/k8s/Manifests.ts"],"names":[],"mappings":";;;AAAA,6CAA0C;AAG1C,+EAA+E;AAE/E,MAAa,UAAW,SAAQ,iBAAO;IAUrC,YAAY,IAAY;QACtB,KAAK,EAAE,CAAC;QAVD,SAAI,GAAG,SAAS,CAAC;QAIlB,UAAK,GAAgB,WAAW,CAAC;QACjC,WAAM,GAAqF,EAAE,CAAC;QAC9F,cAAS,GAAc,EAAE,CAAC;QAC1B,iBAAY,GAAmB,EAAE,CAAC;QAIxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,SAAS,CAAC,EAAU,IAAU,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAc,IAAU,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,CAAY,IAAU,IAAI,CAAC,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAC3F,WAAW,CAAC,CAAiB,IAAU,IAAI,CAAC,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAEzG,IAAI,CAAC,IAAY,EAAE,UAAmB,EAAE,WAAqB,KAAK,EAAE,IAAa;QAC/E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,IAAI,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,eAAe,CAAC;IAC/C,CAAC;IAED,QAAQ;QACN,MAAM,QAAQ,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,UAAU;YAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;QAE3F,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,SAAS;YACf,QAAQ;YACR,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI,CAAC,KAAK;gBAChB,QAAQ,EAAE,IAAI,CAAC,SAAS;gBACxB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;oBAC9D,MAAM,CAAC,GAA4B,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;oBAClE,IAAI,IAAI;wBAAE,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;oBAC3B,OAAO,CAAC,CAAC;gBACX,CAAC,CAAC;aACH;SACF,CAAC;IACJ,CAAC;CACF;AAnDD,gCAmDC;AAED,gFAAgF;AAEhF,MAAa,OAAQ,SAAQ,iBAAO;IAelC,YAAY,IAAY;QACtB,KAAK,EAAE,CAAC;QAfD,SAAI,GAAG,SAAS,CAAC;QAKlB,WAAM,GAKT,EAAE,CAAC;QACA,SAAI,GAAmD,EAAE,CAAC;QAC1D,iBAAY,GAAmB,EAAE,CAAC;QAIxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,SAAS,CAAC,EAAU,IAAU,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAClE,gBAAgB,CAAC,GAAW,IAAU,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAClF,WAAW,CAAC,CAAiB,IAAU,IAAI,CAAC,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAEzG,IAAI,CAAC,IAAY,EAAE,IAAY,EAAE,WAAmB,EAAE,WAAmB;QACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CAAC,KAAe,EAAE,UAAkB;QACrC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,eAAe,CAAC;IAC/C,CAAC;IAED,QAAQ;QACN,MAAM,QAAQ,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,UAAU;YAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;QAE3F,MAAM,IAAI,GAA4B;YACpC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACpE,IAAI;gBACJ,IAAI,EAAE;oBACJ,KAAK,EAAE,CAAC;4BACN,IAAI;4BACJ,QAAQ,EAAE,QAAQ;4BAClB,OAAO,EAAE;gCACP,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;6BAC9D;yBACF,CAAC;iBACH;aACF,CAAC,CAAC;SACJ,CAAC;QAEF,IAAI,IAAI,CAAC,iBAAiB;YAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC9E,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QAElD,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjF,CAAC;CACF;AAhED,0BAgEC;AAED,gFAAgF;AAEhF,MAAa,SAAU,SAAQ,iBAAO;IAOpC,YAAY,IAAY;QACtB,KAAK,EAAE,CAAC;QAPD,SAAI,GAAG,WAAW,CAAC;QAIpB,UAAK,GAA2B,EAAE,CAAC;QAIzC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,SAAS,CAAC,EAAU,IAAU,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAElE,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,CAAyB;QAC5B,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,iBAAiB,CAAC;IACjD,CAAC;IAED,QAAQ;QACN,MAAM,QAAQ,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,UAAU;YAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC7E,CAAC;CACF;AAlCD,8BAkCC;AAUD,MAAa,MAAO,SAAQ,iBAAO;IAQjC,YAAY,IAAY;QACtB,KAAK,EAAE,CAAC;QARD,SAAI,GAAG,QAAQ,CAAC;QAIjB,UAAK,GAAe,QAAQ,CAAC;QAC7B,gBAAW,GAA2B,EAAE,CAAC;QAI/C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,SAAS,CAAC,EAAU,IAAU,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAa,IAAU,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAE1D,4DAA4D;IAC5D,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,CAAyB;QAC5B,IAAI,CAAC,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,cAAc,CAAC;IAC9C,CAAC;IAED,QAAQ;QACN,MAAM,QAAQ,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,UAAU;YAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7D,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,QAAQ;YACd,QAAQ;YACR,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC;IACJ,CAAC;CACF;AA3CD,wBA2CC;AAUD,MAAa,GAAI,SAAQ,iBAAO;IAS9B,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,EAAE,CAAC;QATD,SAAI,GAAG,uBAAuB,CAAC;QAKhC,iBAAY,GAAiB,CAAC,eAAe,CAAC,CAAC;QAKrD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,SAAS,CAAC,EAAU,IAAU,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAClE,WAAW,CAAC,GAAG,KAAmB,IAAU,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IACrF,gBAAgB,CAAC,GAAW,IAAU,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAElF,UAAU;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,WAAW,CAAC;IAC3C,CAAC;IAED,QAAQ;QACN,MAAM,QAAQ,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,UAAU;YAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAE7D,MAAM,SAAS,GAA4B;YACzC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE;SACrC,CAAC;QAEF,MAAM,IAAI,GAA4B;YACpC,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,SAAS;SACV,CAAC;QAEF,IAAI,IAAI,CAAC,iBAAiB;YAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAE9E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7E,CAAC;CACF;AAzCD,kBAyCC"}

package/dist/k8s/types.d.ts

@@ -0,0 +1,63 @@
+/** CPU/memory quantity strings e.g. "250m", "512Mi", "1Gi", "2" */
+export type ResourceQuantity = string;
+export interface ResourceRequirements {
+    requests?: {
+        cpu?: ResourceQuantity;
+        memory?: ResourceQuantity;
+    };
+    limits?: {
+        cpu?: ResourceQuantity;
+        memory?: ResourceQuantity;
+    };
+}
+export type ImagePullPolicy = "Always" | "IfNotPresent" | "Never";
+export type RestartPolicy = "Always" | "OnFailure" | "Never";
+export type ServiceType = "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+export type Protocol = "TCP" | "UDP" | "SCTP";
+export interface EnvVarValueFrom {
+    secretKeyRef?: {
+        name: string;
+        key: string;
+    };
+    configMapKeyRef?: {
+        name: string;
+        key: string;
+    };
+    fieldRef?: {
+        fieldPath: string;
+    };
+}
+export interface EnvVar {
+    name: string;
+    value?: string;
+    valueFrom?: EnvVarValueFrom;
+}
+export interface VolumeMount {
+    name: string;
+    mountPath: string;
+    readOnly?: boolean;
+    subPath?: string;
+}
+export interface IngressTlsOptions {
+    /** Hostname for the ingress rule */
+    host: string;
+    /** Whether to configure TLS (creates a tls block with a generated secret name) */
+    tls?: boolean;
+    /** TLS secret name override. Defaults to "<name>-tls" */
+    tlsSecretName?: string;
+    /** Path prefix. Defaults to "/" */
+    path?: string;
+    /** Ingress class name e.g. "nginx", "traefik" */
+    ingressClassName?: string;
+}
+export interface K8sLabels {
+    [key: string]: string;
+}
+export interface K8sAnnotations {
+    [key: string]: string;
+}
+/** A reference to a K8s Secret key for use in env vars */
+export declare function secretRef(secretName: string, key: string): EnvVarValueFrom;
+/** A reference to a K8s ConfigMap key for use in env vars */
+export declare function configMapRef(configMapName: string, key: string): EnvVarValueFrom;
+//# sourceMappingURL=types.d.ts.map

package/dist/k8s/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/k8s/types.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEtC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,gBAAgB,CAAC;QAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;IACjE,MAAM,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,gBAAgB,CAAC;QAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;CAChE;AAED,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,CAAC;AAClE,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,cAAc,GAAG,cAAc,CAAC;AACrF,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,eAAe,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,QAAQ,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAClC;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CACvB;AAED,0DAA0D;AAC1D,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,eAAe,CAE1E;AAED,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,eAAe,CAEhF"}

package/dist/k8s/types.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.secretRef = secretRef;
+exports.configMapRef = configMapRef;
+/** A reference to a K8s Secret key for use in env vars */
+function secretRef(secretName, key) {
+    return { secretKeyRef: { name: secretName, key } };
+}
+/** A reference to a K8s ConfigMap key for use in env vars */
+function configMapRef(configMapName, key) {
+    return { configMapKeyRef: { name: configMapName, key } };
+}
+//# sourceMappingURL=types.js.map

package/dist/k8s/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/k8s/types.ts"],"names":[],"mappings":";;AAsDA,8BAEC;AAGD,oCAEC;AARD,0DAA0D;AAC1D,SAAgB,SAAS,CAAC,UAAkB,EAAE,GAAW;IACvD,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC;AACrD,CAAC;AAED,6DAA6D;AAC7D,SAAgB,YAAY,CAAC,aAAqB,EAAE,GAAW;IAC7D,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC;AAC3D,CAAC"}

package/infrascript.config.ts

@@ -0,0 +1,69 @@
+import { defineConfig, ActionsWorkflow, K8sApp, Deployment, K8sService } from "./src";
+
+// --- GitHub Actions ---
+
+const ci = new ActionsWorkflow("ci")
+  .on("push", { branches: ["main", "dev"] })
+  .on("pull_request")
+  .job("test", (j) =>
+    j
+      .runsOn("ubuntu-latest")
+      .step("Checkout",   s => s.uses("actions/checkout@v4"))
+      .step("Setup Node", s => s.uses("actions/setup-node@v4", { "node-version": "20" }))
+      .step("Install",    s => s.run("npm ci"))
+      .step("Typecheck",  s => s.run("npm run typecheck"))
+      .step("Test",       s => s.run("npm test"))
+  );
+
+const deploy = new ActionsWorkflow("deploy")
+  .on("push", { branches: ["main"] })
+  .permissions({ contents: "read", packages: "write" })
+  .job("build-push", (j) =>
+    j
+      .runsOn("ubuntu-latest")
+      .step("Checkout", s => s.uses("actions/checkout@v4"))
+      .step("Log in to GHCR", s => s.uses("docker/login-action@v3", {
+        registry: "ghcr.io",
+        username: "${{ github.actor }}",
+        password: "${{ secrets.GITHUB_TOKEN }}",
+      }))
+      .step("Build & Push", s => s.uses("docker/build-push-action@v5", {
+        push: "true",
+        tags: "ghcr.io/myorg/api:latest",
+      }))
+  )
+  .job("deploy-k8s", (j) =>
+    j
+      .runsOn("ubuntu-latest")
+      .needs("build-push")
+      .step("Deploy", s => s.run("kubectl apply -f k8s/"))
+  );
+
+// --- K8s high-level ---
+
+const api = new K8sApp("api")
+  .image("ghcr.io/myorg/api:latest")
+  .replicas(2)
+  .port(3000)
+  .env({ NODE_ENV: "production", LOG_LEVEL: "info" })
+  .secret({ DB_PASSWORD: "replace-me", JWT_SECRET: "replace-me" })
+  .resources({ requests: { cpu: "100m", memory: "128Mi" }, limits: { cpu: "500m", memory: "512Mi" } })
+  .ingress({ host: "api.myapp.com", tls: true, ingressClassName: "nginx" })
+  .volume({ mountPath: "/data", size: "5Gi" });
+
+// --- K8s low-level escape hatch ---
+
+const worker = new Deployment("worker", "ghcr.io/myorg/worker:latest")
+  .replicas(1)
+  .env({ QUEUE_URL: "redis://redis:6379" })
+  .resources({ requests: { cpu: "50m", memory: "64Mi" } });
+
+const workerSvc = new K8sService("worker").port(8080);
+
+export default defineConfig({
+  actions: { ci, deploy },
+  k8s: {
+    apps: { api },
+    manifests: { worker, workerSvc },
+  },
+});

package/infrascript.eks.config.ts

@@ -0,0 +1,121 @@
+/**
+ * Example: 3 services on EKS
+ *
+ * web    — React/nginx frontend, public via ALB
+ * api    — Node.js backend, public via ALB
+ * worker — Background job processor, internal only
+ *
+ * Internal communication:
+ *   web    -> api    via http://api:3000     (K8s Service DNS)
+ *   worker -> api    via http://api:3000
+ *   worker -> redis  via redis://redis:6379  (assumed deployed separately)
+ */
+
+import { defineConfig, ActionsWorkflow, K8sApp, EKSCluster } from "./src";
+
+// --- Cluster context ---
+
+const cluster = new EKSCluster({
+  region: "ap-northeast-1",
+  accountId: "123456789012",
+  clusterName: "myapp-prod",
+  certArn: "arn:aws:acm:ap-northeast-1:123456789012:certificate/abc-123",
+  scheme: "internet-facing",
+  targetType: "ip",
+});
+
+// --- Services ---
+
+const web = new K8sApp("web")
+  .image(cluster.ecr("web:latest"))
+  .port(80)
+  .replicas(2)
+  .namespace("production")
+  .env({ API_URL: "http://api:3000" })
+  .resources({
+    requests: { cpu: "50m",  memory: "64Mi"  },
+    limits:   { cpu: "200m", memory: "256Mi" },
+  })
+  .ingress({ host: "myapp.com", tls: true });
+
+const api = new K8sApp("api")
+  .image(cluster.ecr("api:latest"))
+  .port(3000)
+  .replicas(2)
+  .namespace("production")
+  .env({ NODE_ENV: "production", LOG_LEVEL: "info" })
+  .secret({ DB_PASSWORD: "replace-before-apply", JWT_SECRET: "replace-before-apply" })
+  .resources({
+    requests: { cpu: "100m", memory: "128Mi" },
+    limits:   { cpu: "500m", memory: "512Mi" },
+  })
+  .ingress({ host: "api.myapp.com", tls: true })
+  .irsaRole(cluster.irsaRoleArn("api-s3-role"));
+
+const worker = new K8sApp("worker")
+  .image(cluster.ecr("worker:latest"))
+  .port(8080)
+  .replicas(1)
+  .namespace("production")
+  .env({
+    API_URL:   "http://api:3000",
+    QUEUE_URL: "redis://redis:6379",
+    NODE_ENV:  "production",
+  })
+  .secret({ DB_PASSWORD: "replace-before-apply" })
+  .resources({
+    requests: { cpu: "50m",  memory: "64Mi"  },
+    limits:   { cpu: "250m", memory: "256Mi" },
+  });
+  // no .ingress() — internal only
+
+// --- GitHub Actions ---
+
+const ci = new ActionsWorkflow("ci")
+  .on("push", { branches: ["main", "dev"] })
+  .on("pull_request")
+  .job("test", (j) =>
+    j
+      .runsOn("ubuntu-latest")
+      .step("Checkout", s => s.uses("actions/checkout@v4"))
+      .step("Install",  s => s.run("npm ci"))
+      .step("Test",     s => s.run("npm test"))
+  );
+
+const deploy = new ActionsWorkflow("deploy")
+  .on("push", { branches: ["main"] })
+  .permissions({ contents: "read", packages: "write", "id-token": "write" })
+  .job("build-and-push", (j) =>
+    j
+      .runsOn("ubuntu-latest")
+      .step("Checkout", s => s.uses("actions/checkout@v4"))
+      .step("Configure AWS credentials", s => s.uses("aws-actions/configure-aws-credentials@v4", {
+        "role-to-assume": cluster.irsaRoleArn("github-actions-role"),
+        "aws-region": cluster.region,
+      }))
+      .step("Login to ECR",        s => s.uses("aws-actions/amazon-ecr-login@v2"))
+      .step("Build & push web",    s => s.run(`docker build -t ${cluster.ecr("web:latest")} ./web && docker push ${cluster.ecr("web:latest")}`))
+      .step("Build & push api",    s => s.run(`docker build -t ${cluster.ecr("api:latest")} ./api && docker push ${cluster.ecr("api:latest")}`))
+      .step("Build & push worker", s => s.run(`docker build -t ${cluster.ecr("worker:latest")} ./worker && docker push ${cluster.ecr("worker:latest")}`))
+  )
+  .job("deploy", (j) =>
+    j
+      .runsOn("ubuntu-latest")
+      .needs("build-and-push")
+      .step("Configure AWS credentials", s => s.uses("aws-actions/configure-aws-credentials@v4", {
+        "role-to-assume": cluster.irsaRoleArn("github-actions-role"),
+        "aws-region": cluster.region,
+      }))
+      .step("Update kubeconfig", s => s.run(`aws eks update-kubeconfig --region ${cluster.region} --name ${cluster.clusterName}`))
+      .step("Apply manifests",   s => s.run("kubectl apply -f k8s/production/"))
+  );
+
+// --- Config ---
+
+export default defineConfig({
+  actions: { ci, deploy },
+  k8s: {
+    cluster,
+    apps: { web, api, worker },
+  },
+});

package/k8s/api-config-configmap.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: api-config
+data:
+  NODE_ENV: production
+  LOG_LEVEL: info

package/k8s/api-deployment.yaml

@@ -0,0 +1,54 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: api
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: api
+  template:
+    metadata:
+      labels:
+        app: api
+    spec:
+      containers:
+        - name: api
+          image: ghcr.io/myorg/api:latest
+          ports:
+            - containerPort: 3000
+          env:
+            - name: NODE_ENV
+              valueFrom:
+                configMapKeyRef:
+                  name: api-config
+                  key: NODE_ENV
+            - name: LOG_LEVEL
+              valueFrom:
+                configMapKeyRef:
+                  name: api-config
+                  key: LOG_LEVEL
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: api-secret
+                  key: DB_PASSWORD
+            - name: JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: api-secret
+                  key: JWT_SECRET
+          resources:
+            requests:
+              cpu: 100m
+              memory: 128Mi
+            limits:
+              cpu: 500m
+              memory: 512Mi
+          volumeMounts:
+            - name: api-pvc
+              mountPath: /data
+      volumes:
+        - name: api-pvc
+          persistentVolumeClaim:
+            claimName: api-pvc

package/k8s/api-ingress.yaml

@@ -0,0 +1,21 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: api
+spec:
+  rules:
+    - host: api.myapp.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: api
+                port:
+                  number: 3000
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - api.myapp.com
+      secretName: api-tls

package/k8s/api-pvc-pvc.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: api-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 5Gi

package/k8s/api-secret-secret.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: api-secret
+type: Opaque
+stringData:
+  DB_PASSWORD: replace-me
+  JWT_SECRET: replace-me

package/k8s/api-service.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: api
+spec:
+  type: ClusterIP
+  selector:
+    app: api
+  ports:
+    - port: 3000
+      targetPort: 3000
+      protocol: TCP

package/k8s/worker-deployment.yaml

@@ -0,0 +1,24 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: worker
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: worker
+  template:
+    metadata:
+      labels:
+        app: worker
+    spec:
+      containers:
+        - name: worker
+          image: ghcr.io/myorg/worker:latest
+          env:
+            - name: QUEUE_URL
+              value: redis://redis:6379
+          resources:
+            requests:
+              cpu: 50m
+              memory: 64Mi

package/k8s/worker-service.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: worker
+spec:
+  type: ClusterIP
+  selector:
+    app: worker
+  ports:
+    - port: 8080
+      targetPort: 8080
+      protocol: TCP