@mstuercke/pulumi-modules 0.0.5 → 0.0.7

package/src/website/StaticWebsite.ts

@@ -1,175 +0,0 @@
-import {type CustomResourceOptions, type Input, Resource} from '@pulumi/pulumi'
-import {type PublicS3Bucket, s3} from '../s3/index.ts'
-import {BucketObject} from '@pulumi/aws/s3'
-import {Distribution} from '@pulumi/aws/cloudfront'
-import {Record} from '@pulumi/aws/route53'
-import {readFilesRecursive} from './readFilesRecursive.js'
-
-export interface StaticWebsiteArgs {
-  projectId: string
-  environmentName: string
-  filesPath: string
-  customDomain?: {
-    fullName: Input<string>
-    zoneId: Input<string>
-    usEast1CertificateArn: Input<string>
-  }
-}
-
-export class StaticWebsite extends Resource {
-  public url: string
-  public bucket: PublicS3Bucket
-
-  constructor(id: string, args: StaticWebsiteArgs, opts?: CustomResourceOptions) {
-    super('mstuercke:website:StaticWebsite', id, false, undefined, opts)
-
-    const {projectId, environmentName, filesPath, customDomain} = args
-
-    const bucket = new s3.PublicS3Bucket(
-      'bucket',
-      {
-        name: `${projectId}-web-${environmentName}`,
-        allowPresignedPost: false,
-        tags: {
-          project: projectId,
-        },
-      },
-      {parent: this},
-    )
-
-    for (const file of readFilesRecursive(filesPath)) {
-      new BucketObject(
-        file.relativePath,
-        {
-          key: file.relativePath,
-          bucket: bucket.id,
-          source: file.absolutePath,
-          contentType: file.mimeType,
-          etag: file.md5,
-          tags: {
-            project: projectId,
-          },
-        },
-        {parent: bucket},
-      )
-    }
-
-    const cloudfront = new Distribution(
-      `website`,
-      {
-        enabled: true,
-        comment: `${projectId} (${environmentName})`,
-        defaultRootObject: 'index.html',
-
-        origins: [
-          {
-            domainName: bucket.bucketRegionalDomainName,
-            originId: bucket.id,
-          },
-        ],
-
-        defaultCacheBehavior: {
-          allowedMethods: ['GET', 'HEAD', 'OPTIONS'],
-          cachedMethods: ['GET', 'HEAD'],
-          targetOriginId: bucket.id,
-          viewerProtocolPolicy: 'redirect-to-https',
-
-          forwardedValues: {
-            queryString: false,
-            cookies: {
-              forward: 'none',
-            },
-          },
-        },
-
-        orderedCacheBehaviors: [
-          {
-            pathPattern: 'index.html',
-            allowedMethods: ['GET', 'HEAD', 'OPTIONS'],
-            cachedMethods: ['GET', 'HEAD'],
-            targetOriginId: bucket.id,
-            viewerProtocolPolicy: 'redirect-to-https',
-            defaultTtl: 0,
-            maxTtl: 0,
-
-            forwardedValues: {
-              queryString: false,
-              cookies: {
-                forward: 'none',
-              },
-            },
-          },
-          {
-            pathPattern: 'config.json',
-            allowedMethods: ['GET', 'HEAD', 'OPTIONS'],
-            cachedMethods: ['GET', 'HEAD'],
-            targetOriginId: bucket.id,
-            viewerProtocolPolicy: 'redirect-to-https',
-            defaultTtl: 0,
-            maxTtl: 0,
-
-            forwardedValues: {
-              queryString: false,
-              cookies: {
-                forward: 'none',
-              },
-            },
-          },
-        ],
-
-        customErrorResponses: [
-          {
-            errorCode: 404,
-            responsePagePath: '/index.html',
-            responseCode: 200,
-            errorCachingMinTtl: 0,
-          },
-        ],
-
-        restrictions: {
-          geoRestriction: {
-            restrictionType: 'none',
-          },
-        },
-
-        viewerCertificate: customDomain
-          ? {
-              acmCertificateArn: customDomain?.usEast1CertificateArn,
-              sslSupportMethod: 'sni-only',
-              minimumProtocolVersion: 'TLSv1.2_2019',
-            }
-          : {cloudfrontDefaultCertificate: true},
-
-        aliases: customDomain ? [customDomain?.fullName] : undefined,
-
-        tags: {
-          project: projectId,
-        },
-      },
-      {parent: this},
-    )
-
-    if (customDomain) {
-      new Record(
-        'redirect',
-        {
-          zoneId: customDomain?.zoneId,
-          name: customDomain?.fullName,
-          type: 'A',
-          allowOverwrite: true,
-          aliases: [
-            {
-              zoneId: cloudfront.hostedZoneId,
-              name: cloudfront.domainName,
-              evaluateTargetHealth: false,
-            },
-          ],
-        },
-        {parent: this},
-      )
-    }
-
-    this.url = `https://${customDomain?.fullName || cloudfront.domainName}`
-    this.bucket = bucket
-  }
-}

package/src/website/index.ts

@@ -1,7 +0,0 @@
-import {StaticWebsite} from './StaticWebsite.ts'
-
-export * from './StaticWebsite.ts'
-
-export const website = {
-  StaticWebsite,
-}

package/src/website/readFilesRecursive.ts

@@ -1,33 +0,0 @@
-import {createHash} from 'crypto'
-import fs from 'fs'
-import mime from 'mime'
-import {globSync} from 'glob'
-
-interface File {
-  absolutePath: string
-  relativePath: string
-  md5: string
-  mimeType: string
-}
-
-export function readFilesRecursive(dir: string): File[] {
-  const files = globSync(`${dir}/**/*`, {nodir: true})
-
-  return files.reduce((previousValue, fullPath) => {
-    const content = fs.readFileSync(fullPath, 'base64')
-    const md5 = createHash('md5').update(content, 'base64').digest('hex')
-
-    const mimeType = mime.getType(fullPath)
-    if (!mimeType) throw `Cannot determine mimeType for ${fullPath}`
-
-    return [
-      ...previousValue,
-      {
-        absolutePath: fullPath,
-        relativePath: fullPath.replace(`${dir}/`, '').replace(dir, ''),
-        md5,
-        mimeType,
-      },
-    ]
-  }, [] as File[])
-}

package/src/websocket/WebsocketApi.ts

@@ -1,219 +0,0 @@
-import {type CustomResourceOptions, type Input, type Output, Resource} from '@pulumi/pulumi'
-import {
-  Api,
-  ApiMapping,
-  Deployment,
-  DomainName,
-  Integration,
-  IntegrationResponse,
-  Route,
-  Stage,
-} from '@pulumi/aws/apigatewayv2'
-import {Policy, Role} from '@pulumi/aws/iam'
-import {Record} from '@pulumi/aws/route53'
-import type {NodeLambdaFunction} from '../lambda/index.ts'
-
-export interface WebsocketApiArgs {
-  name: string
-  lambdaFunction: NodeLambdaFunction
-  routeThrottling?: {
-    rateLimit?: number
-    burstLimit?: number
-  }
-  stageName?: string
-  domain: {
-    zoneId: Input<string>
-    fullName: Input<string>
-    euCentral1CertificateArn: Input<string>
-  }
-  projectId: string
-}
-
-export class WebsocketApi extends Resource {
-  id: Output<string>
-  url: string
-
-  constructor(id: string, args: WebsocketApiArgs, opts?: CustomResourceOptions) {
-    super('mstuercke:websocket:WebsocketApi', id, false, undefined, opts)
-
-    const {name, lambdaFunction, routeThrottling, stageName = 'v1', domain, projectId} = args
-
-    const api = new Api(
-      'api',
-      {
-        name,
-        protocolType: 'WEBSOCKET',
-        routeSelectionExpression: '\\$default',
-        tags: {
-          project: projectId,
-        },
-      },
-      {parent: this},
-    )
-
-    const executeLambdaPolicy = new Policy(
-      'execute-lambda',
-      {
-        name: `${name}-execute-lambda`,
-        path: '/',
-        policy: {
-          Version: '2012-10-17',
-          Statement: [
-            {
-              Action: 'lambda:InvokeFunction',
-              Effect: 'Allow',
-              Resource: lambdaFunction.arn,
-            },
-          ],
-        },
-        tags: {
-          project: projectId,
-        },
-      },
-      {parent: api},
-    )
-
-    const wsApiRole = new Role(
-      'role',
-      {
-        name: `${name}-role`,
-        assumeRolePolicy: JSON.stringify({
-          Version: '2012-10-17',
-          Statement: [
-            {
-              Effect: 'Allow',
-              Action: 'sts:AssumeRole',
-              Principal: {Service: 'apigateway.amazonaws.com'},
-            },
-          ],
-        }),
-        tags: {
-          project: projectId,
-        },
-        managedPolicyArns: [executeLambdaPolicy.arn],
-      },
-      {parent: api},
-    )
-
-    const wsLambdaIntegration = new Integration(
-      'lambda-integration',
-      {
-        apiId: api.id,
-        integrationType: 'AWS_PROXY',
-        integrationUri: lambdaFunction.invokeArn,
-        credentialsArn: wsApiRole.arn,
-        contentHandlingStrategy: 'CONVERT_TO_TEXT',
-        passthroughBehavior: 'WHEN_NO_MATCH',
-      },
-      {parent: this},
-    )
-    new IntegrationResponse(
-      'lambda-integration-response',
-      {
-        apiId: api.id,
-        integrationId: wsLambdaIntegration.id,
-        integrationResponseKey: '/200/',
-      },
-      {parent: wsLambdaIntegration},
-    )
-
-    const routes: Route[] = []
-    const routeKeys = ['$connect', '$default', '$disconnect']
-    for (const routeKey of routeKeys) {
-      const route = new Route(
-        `${routeKey}-route`,
-        {
-          apiId: api.id,
-          routeKey: routeKey,
-          target: wsLambdaIntegration.id.apply((id) => `integrations/${id}`),
-          authorizationType: 'NONE',
-        },
-        {parent: wsLambdaIntegration},
-      )
-      routes.push(route)
-    }
-
-    const deployment = new Deployment(
-      'deployment',
-      {
-        apiId: api.id,
-      },
-      {
-        dependsOn: [wsLambdaIntegration, ...routes],
-        parent: api,
-      },
-    )
-
-    const stage = new Stage(
-      'stage',
-      {
-        apiId: api.id,
-        name: stageName,
-        deploymentId: deployment.id,
-        defaultRouteSettings: {
-          throttlingRateLimit: routeThrottling?.rateLimit ?? 100,
-          throttlingBurstLimit: routeThrottling?.burstLimit ?? 100,
-        },
-        tags: {
-          project: projectId,
-        },
-      },
-      {parent: deployment},
-    )
-
-    const domainName = new DomainName(
-      'domain',
-      {
-        domainName: domain.fullName,
-        domainNameConfiguration: {
-          certificateArn: domain.euCentral1CertificateArn,
-          endpointType: 'REGIONAL',
-          securityPolicy: 'TLS_1_2',
-        },
-      },
-      {parent: api},
-    )
-
-    new Record(
-      'redirect',
-      {
-        zoneId: domain.zoneId,
-        name: domain.fullName,
-        type: 'A',
-        aliases: [
-          {
-            zoneId: domainName.domainNameConfiguration.hostedZoneId,
-            name: domainName.domainNameConfiguration.targetDomainName,
-            evaluateTargetHealth: true,
-          },
-        ],
-        allowOverwrite: true,
-      },
-      {parent: api},
-    )
-
-    new ApiMapping(
-      'root',
-      {
-        apiId: api.id,
-        domainName: domainName.id,
-        stage: stage.name,
-      },
-      {parent: api},
-    )
-
-    new ApiMapping(
-      'stage',
-      {
-        apiId: api.id,
-        domainName: domainName.id,
-        stage: stage.name,
-        apiMappingKey: stage.name,
-      },
-      {parent: api},
-    )
-
-    this.id = api.id
-    this.url = `wss://${domain.fullName}/`
-  }
-}

package/src/websocket/index.ts

@@ -1,7 +0,0 @@
-import {WebsocketApi} from './WebsocketApi.ts'
-
-export * from './WebsocketApi.ts'
-
-export const websocket = {
-  WebsocketApi,
-}

package/tsconfig.json

@@ -1,6 +0,0 @@
-{
-    "extends": "@mstuercke/typescript-config/pulumi/tsconfig.json",
-    "include": [
-        "src",
-    ]
-}