@microsoft/terraform-cdk-constructs 1.0.0 → 1.2.0

package/lib/azure-aks/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Azure Kubernetes Service (AKS) Construct
+ *
+ * This module provides a high-level construct for creating and managing Azure Kubernetes Service clusters
+ * using the AZAPI provider framework.
+ *
+ * @packageDocumentation
+ */
+export * from "./lib";

package/lib/azure-aks/index.js

@@ -0,0 +1,28 @@
+"use strict";
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Azure Kubernetes Service (AKS) Construct
+ *
+ * This module provides a high-level construct for creating and managing Azure Kubernetes Service clusters
+ * using the AZAPI provider framework.
+ *
+ * @packageDocumentation
+ */
+__exportStar(require("./lib"), exports);
+//# sourceMappingURL=data:application/json;base64,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

package/lib/azure-aks/lib/aks-cluster-schemas.d.ts

@@ -0,0 +1,505 @@
+/**
+ * API schemas for Azure Kubernetes Service (AKS) across all supported versions
+ *
+ * This file defines the complete API schemas for Microsoft.ContainerService/managedClusters
+ * across all supported API versions. The schemas are used by the VersionedAzapiResource
+ * framework for validation, transformation, and version management.
+ *
+ * API Versions verified from Azure REST API Specifications:
+ * - 2024-10-01: https://github.com/Azure/azure-rest-api-specs/.../2024-10-01/managedClusters.json
+ * - 2025-01-01: https://github.com/Azure/azure-rest-api-specs/.../2025-01-01/managedClusters.json
+ * - 2025-07-01: https://github.com/Azure/azure-rest-api-specs/.../2025-07-01/managedClusters.json
+ */
+import { ApiSchema, VersionConfig } from "../../core-azure/lib/version-manager/interfaces/version-interfaces";
+/**
+ * SKU for Azure Kubernetes Service
+ */
+export interface AksClusterSku {
+    readonly name?: string;
+    readonly tier?: string;
+}
+/**
+ * Identity configuration for AKS Cluster
+ */
+export interface AksClusterIdentity {
+    readonly type: string;
+    readonly userAssignedIdentities?: {
+        [key: string]: any;
+    };
+}
+/**
+ * Agent pool profile for AKS node pools
+ */
+export interface AksClusterAgentPoolProfile {
+    readonly name: string;
+    readonly count?: number;
+    readonly vmSize: string;
+    readonly osDiskSizeGB?: number;
+    readonly osDiskType?: string;
+    readonly osType?: string;
+    readonly type?: string;
+    readonly mode?: string;
+    readonly availabilityZones?: string[];
+    readonly enableAutoScaling?: boolean;
+    readonly minCount?: number;
+    readonly maxCount?: number;
+    readonly maxPods?: number;
+    readonly vnetSubnetID?: string;
+    readonly podSubnetID?: string;
+    readonly enableNodePublicIP?: boolean;
+    readonly nodePublicIPPrefixID?: string;
+    readonly scaleSetPriority?: string;
+    readonly scaleSetEvictionPolicy?: string;
+    readonly spotMaxPrice?: number;
+    readonly nodeTaints?: string[];
+    readonly nodeLabels?: {
+        [key: string]: string;
+    };
+    readonly kubeletConfig?: AksClusterKubeletConfig;
+    readonly linuxOSConfig?: AksClusterLinuxOSConfig;
+    readonly enableEncryptionAtHost?: boolean;
+    readonly enableUltraSSD?: boolean;
+    readonly enableFIPS?: boolean;
+}
+/**
+ * Kubelet configuration
+ */
+export interface AksClusterKubeletConfig {
+    readonly cpuManagerPolicy?: string;
+    readonly cpuCfsQuota?: boolean;
+    readonly cpuCfsQuotaPeriod?: string;
+    readonly imageGcHighThreshold?: number;
+    readonly imageGcLowThreshold?: number;
+    readonly topologyManagerPolicy?: string;
+    readonly allowedUnsafeSysctls?: string[];
+    readonly failSwapOn?: boolean;
+    readonly containerLogMaxSizeMB?: number;
+    readonly containerLogMaxFiles?: number;
+    readonly podMaxPids?: number;
+}
+/**
+ * Linux OS configuration
+ */
+export interface AksClusterLinuxOSConfig {
+    readonly sysctls?: AksClusterSysctlConfig;
+    readonly transparentHugePageEnabled?: string;
+    readonly transparentHugePageDefrag?: string;
+    readonly swapFileSizeMB?: number;
+}
+/**
+ * Sysctl configuration
+ */
+export interface AksClusterSysctlConfig {
+    readonly netCoreSomaxconn?: number;
+    readonly netCoreNetdevMaxBacklog?: number;
+    readonly netCoreRmemDefault?: number;
+    readonly netCoreRmemMax?: number;
+    readonly netCoreWmemDefault?: number;
+    readonly netCoreWmemMax?: number;
+    readonly netCoreOptmemMax?: number;
+    readonly netIpv4TcpMaxSynBacklog?: number;
+    readonly netIpv4TcpFinTimeout?: number;
+    readonly netIpv4TcpKeepaliveTime?: number;
+    readonly netIpv4TcpKeepaliveProbes?: number;
+    readonly netIpv4TcpkeepaliveIntvl?: number;
+    readonly netIpv4TcpTwReuse?: boolean;
+    readonly netIpv4IpLocalPortRange?: string;
+    readonly netIpv4NeighDefaultGcThresh1?: number;
+    readonly netIpv4NeighDefaultGcThresh2?: number;
+    readonly netIpv4NeighDefaultGcThresh3?: number;
+    readonly netNetfilterNfConntrackMax?: number;
+    readonly netNetfilterNfConntrackBuckets?: number;
+    readonly fsInotifyMaxUserWatches?: number;
+    readonly fsFileMax?: number;
+    readonly fsAioMaxNr?: number;
+    readonly fsNrOpen?: number;
+    readonly kernelThreadsMax?: number;
+    readonly vmMaxMapCount?: number;
+    readonly vmSwappiness?: number;
+    readonly vmVfsCachePressure?: number;
+}
+/**
+ * Network profile for AKS cluster
+ */
+export interface AksClusterNetworkProfile {
+    readonly networkPlugin?: string;
+    readonly networkPolicy?: string;
+    readonly networkMode?: string;
+    readonly podCidr?: string;
+    readonly serviceCidr?: string;
+    readonly dnsServiceIP?: string;
+    readonly dockerBridgeCidr?: string;
+    readonly outboundType?: string;
+    readonly loadBalancerSku?: string;
+    readonly loadBalancerProfile?: AksClusterLoadBalancerProfile;
+    readonly natGatewayProfile?: AksClusterNatGatewayProfile;
+    readonly podCidrs?: string[];
+    readonly serviceCidrs?: string[];
+    readonly ipFamilies?: string[];
+}
+/**
+ * Load balancer profile
+ */
+export interface AksClusterLoadBalancerProfile {
+    readonly managedOutboundIPs?: AksClusterManagedOutboundIPs;
+    readonly outboundIPPrefixes?: AksClusterOutboundIPPrefixes;
+    readonly outboundIPs?: AksClusterOutboundIPs;
+    readonly effectiveOutboundIPs?: AksClusterEffectiveOutboundIP[];
+    readonly allocatedOutboundPorts?: number;
+    readonly idleTimeoutInMinutes?: number;
+    readonly enableMultipleStandardLoadBalancers?: boolean;
+}
+/**
+ * Managed outbound IPs
+ */
+export interface AksClusterManagedOutboundIPs {
+    readonly count?: number;
+    readonly countIPv6?: number;
+}
+/**
+ * Outbound IP prefixes
+ */
+export interface AksClusterOutboundIPPrefixes {
+    readonly publicIPPrefixes?: AksClusterResourceReference[];
+}
+/**
+ * Outbound IPs
+ */
+export interface AksClusterOutboundIPs {
+    readonly publicIPs?: AksClusterResourceReference[];
+}
+/**
+ * Effective outbound IP
+ */
+export interface AksClusterEffectiveOutboundIP {
+    readonly id?: string;
+}
+/**
+ * NAT Gateway profile
+ */
+export interface AksClusterNatGatewayProfile {
+    readonly managedOutboundIPProfile?: AksClusterManagedOutboundIPProfile;
+    readonly effectiveOutboundIPs?: AksClusterEffectiveOutboundIP[];
+    readonly idleTimeoutInMinutes?: number;
+}
+/**
+ * Managed outbound IP profile
+ */
+export interface AksClusterManagedOutboundIPProfile {
+    readonly count?: number;
+}
+/**
+ * Resource reference
+ */
+export interface AksClusterResourceReference {
+    readonly id?: string;
+}
+/**
+ * Service principal profile
+ */
+export interface AksClusterServicePrincipalProfile {
+    readonly clientId: string;
+    readonly secret?: string;
+}
+/**
+ * API server access profile
+ */
+export interface AksClusterApiServerAccessProfile {
+    readonly authorizedIPRanges?: string[];
+    readonly enablePrivateCluster?: boolean;
+    readonly privateDNSZone?: string;
+    readonly enablePrivateClusterPublicFQDN?: boolean;
+    readonly disableRunCommand?: boolean;
+    readonly enableVnetIntegration?: boolean;
+    readonly subnetId?: string;
+}
+/**
+ * Auto-scaler profile
+ */
+export interface AksClusterAutoScalerProfile {
+    readonly balanceSimilarNodeGroups?: string;
+    readonly expander?: string;
+    readonly maxEmptyBulkDelete?: string;
+    readonly maxGracefulTerminationSec?: string;
+    readonly maxNodeProvisionTime?: string;
+    readonly maxTotalUnreadyPercentage?: string;
+    readonly newPodScaleUpDelay?: string;
+    readonly okTotalUnreadyCount?: string;
+    readonly scanInterval?: string;
+    readonly scaleDownDelayAfterAdd?: string;
+    readonly scaleDownDelayAfterDelete?: string;
+    readonly scaleDownDelayAfterFailure?: string;
+    readonly scaleDownUnneededTime?: string;
+    readonly scaleDownUnreadyTime?: string;
+    readonly scaleDownUtilizationThreshold?: string;
+    readonly skipNodesWithLocalStorage?: string;
+    readonly skipNodesWithSystemPods?: string;
+}
+/**
+ * Windows profile
+ */
+export interface AksClusterWindowsProfile {
+    readonly adminUsername: string;
+    readonly adminPassword?: string;
+    readonly licenseType?: string;
+    readonly enableCSIProxy?: boolean;
+    readonly gmsaProfile?: AksClusterGmsaProfile;
+}
+/**
+ * GMSA profile for Windows
+ */
+export interface AksClusterGmsaProfile {
+    readonly enabled?: boolean;
+    readonly dnsServer?: string;
+    readonly rootDomainName?: string;
+}
+/**
+ * Linux profile
+ */
+export interface AksClusterLinuxProfile {
+    readonly adminUsername: string;
+    readonly ssh: AksClusterSshConfiguration;
+}
+/**
+ * SSH configuration
+ */
+export interface AksClusterSshConfiguration {
+    readonly publicKeys: AksClusterSshPublicKey[];
+}
+/**
+ * SSH public key
+ */
+export interface AksClusterSshPublicKey {
+    readonly keyData: string;
+}
+/**
+ * AAD (Azure Active Directory) profile
+ */
+export interface AksClusterAadProfile {
+    readonly managed?: boolean;
+    readonly enableAzureRBAC?: boolean;
+    readonly adminGroupObjectIDs?: string[];
+    readonly tenantID?: string;
+    readonly clientAppID?: string;
+    readonly serverAppID?: string;
+    readonly serverAppSecret?: string;
+}
+/**
+ * Addon profiles - a dictionary of addon names to their configurations
+ */
+export type AksClusterAddonProfiles = Record<string, AksClusterAddonProfile>;
+/**
+ * Individual addon profile
+ */
+export interface AksClusterAddonProfile {
+    readonly enabled: boolean;
+    readonly config?: {
+        [key: string]: string;
+    };
+}
+/**
+ * OIDC issuer profile
+ */
+export interface AksClusterOidcIssuerProfile {
+    readonly enabled?: boolean;
+    readonly issuerURL?: string;
+}
+/**
+ * Security profile
+ */
+export interface AksClusterSecurityProfile {
+    readonly defender?: AksClusterDefenderSecurityMonitoring;
+    readonly imageCleaner?: AksClusterImageCleaner;
+    readonly workloadIdentity?: AksClusterWorkloadIdentity;
+    readonly azureKeyVaultKms?: AksClusterAzureKeyVaultKms;
+}
+/**
+ * Defender security monitoring
+ */
+export interface AksClusterDefenderSecurityMonitoring {
+    readonly enabled?: boolean;
+    readonly logAnalyticsWorkspaceResourceId?: string;
+}
+/**
+ * Image cleaner configuration
+ */
+export interface AksClusterImageCleaner {
+    readonly enabled?: boolean;
+    readonly intervalHours?: number;
+}
+/**
+ * Workload identity configuration
+ */
+export interface AksClusterWorkloadIdentity {
+    readonly enabled?: boolean;
+}
+/**
+ * Azure Key Vault KMS configuration
+ */
+export interface AksClusterAzureKeyVaultKms {
+    readonly enabled?: boolean;
+    readonly keyId?: string;
+    readonly keyVaultNetworkAccess?: string;
+    readonly keyVaultResourceId?: string;
+}
+/**
+ * Storage profile
+ */
+export interface AksClusterStorageProfile {
+    readonly diskCSIDriver?: AksClusterDiskCSIDriver;
+    readonly fileCSIDriver?: AksClusterFileCSIDriver;
+    readonly snapshotController?: AksClusterSnapshotController;
+    readonly blobCSIDriver?: AksClusterBlobCSIDriver;
+}
+/**
+ * Disk CSI driver
+ */
+export interface AksClusterDiskCSIDriver {
+    readonly enabled?: boolean;
+    readonly version?: string;
+}
+/**
+ * File CSI driver
+ */
+export interface AksClusterFileCSIDriver {
+    readonly enabled?: boolean;
+}
+/**
+ * Snapshot controller
+ */
+export interface AksClusterSnapshotController {
+    readonly enabled?: boolean;
+}
+/**
+ * Blob CSI driver
+ */
+export interface AksClusterBlobCSIDriver {
+    readonly enabled?: boolean;
+}
+/**
+ * HTTP proxy configuration
+ */
+export interface AksClusterHttpProxyConfig {
+    readonly httpProxy?: string;
+    readonly httpsProxy?: string;
+    readonly noProxy?: string[];
+    readonly trustedCa?: string;
+}
+/**
+ * Workload auto-scaler profile
+ */
+export interface AksClusterWorkloadAutoScalerProfile {
+    readonly keda?: AksClusterKeda;
+    readonly verticalPodAutoscaler?: AksClusterVerticalPodAutoscaler;
+}
+/**
+ * KEDA configuration
+ */
+export interface AksClusterKeda {
+    readonly enabled?: boolean;
+}
+/**
+ * Vertical pod autoscaler
+ */
+export interface AksClusterVerticalPodAutoscaler {
+    readonly enabled?: boolean;
+}
+/**
+ * Configuration options for AKS Cluster monitoring
+ *
+ * @stability stable
+ */
+export interface AksClusterMonitoringOptions {
+    /**
+     * Threshold for node CPU usage percentage (0-100)
+     *
+     * @default 80
+     */
+    readonly nodeCpuThreshold?: number;
+    /**
+     * Threshold for node memory usage percentage (0-100)
+     *
+     * @default 80
+     */
+    readonly nodeMemoryThreshold?: number;
+    /**
+     * Threshold for failed pod count
+     *
+     * @default 0
+     */
+    readonly failedPodThreshold?: number;
+    /**
+     * Whether to enable node CPU usage alert
+     *
+     * @default true
+     */
+    readonly enableNodeCpuAlert?: boolean;
+    /**
+     * Whether to enable node memory usage alert
+     *
+     * @default true
+     */
+    readonly enableNodeMemoryAlert?: boolean;
+    /**
+     * Whether to enable failed pod alert
+     *
+     * @default true
+     */
+    readonly enableFailedPodAlert?: boolean;
+    /**
+     * Whether to enable AKS cluster deletion alert
+     *
+     * @default true
+     */
+    readonly enableDeletionAlert?: boolean;
+    /**
+     * Severity level for node CPU alert (0=Critical, 1=Error, 2=Warning, 3=Informational, 4=Verbose)
+     *
+     * @default 2
+     */
+    readonly nodeCpuAlertSeverity?: 0 | 1 | 2 | 3 | 4;
+    /**
+     * Severity level for node memory alert (0=Critical, 1=Error, 2=Warning, 3=Informational, 4=Verbose)
+     *
+     * @default 2
+     */
+    readonly nodeMemoryAlertSeverity?: 0 | 1 | 2 | 3 | 4;
+    /**
+     * Severity level for failed pod alert (0=Critical, 1=Error, 2=Warning, 3=Informational, 4=Verbose)
+     *
+     * @default 1
+     */
+    readonly failedPodAlertSeverity?: 0 | 1 | 2 | 3 | 4;
+}
+/**
+ * API Schema for AKS Cluster version 2024-10-01
+ */
+export declare const AKS_CLUSTER_SCHEMA_2024_10_01: ApiSchema;
+/**
+ * API Schema for AKS Cluster version 2025-01-01
+ */
+export declare const AKS_CLUSTER_SCHEMA_2025_01_01: ApiSchema;
+/**
+ * API Schema for AKS Cluster version 2025-07-01
+ */
+export declare const AKS_CLUSTER_SCHEMA_2025_07_01: ApiSchema;
+/**
+ * Version configuration for AKS Cluster 2024-10-01
+ */
+export declare const AKS_CLUSTER_VERSION_2024_10_01: VersionConfig;
+/**
+ * Version configuration for AKS Cluster 2025-01-01
+ */
+export declare const AKS_CLUSTER_VERSION_2025_01_01: VersionConfig;
+/**
+ * Version configuration for AKS Cluster 2025-07-01
+ */
+export declare const AKS_CLUSTER_VERSION_2025_07_01: VersionConfig;
+/**
+ * All supported AKS Cluster versions for registration
+ */
+export declare const ALL_AKS_CLUSTER_VERSIONS: VersionConfig[];
+/**
+ * Resource type constant
+ */
+export declare const AKS_CLUSTER_TYPE = "Microsoft.ContainerService/managedClusters";