@pulumi/harness 0.16.7 → 0.16.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/autostopping/alert.d.ts +2 -2
- package/autostopping/alert.js +2 -2
- package/autostopping/gcpProxy.d.ts +4 -4
- package/autostopping/gcpProxy.js +4 -4
- package/autostopping/ruleEcs.d.ts +4 -4
- package/autostopping/ruleEcs.js +4 -4
- package/autostopping/ruleRds.d.ts +5 -5
- package/autostopping/ruleRds.js +5 -5
- package/autostopping/ruleScaleGroup.d.ts +12 -12
- package/autostopping/ruleScaleGroup.js +12 -12
- package/autostopping/ruleVm.d.ts +22 -22
- package/autostopping/ruleVm.js +22 -22
- package/chaos/actionTemplate.d.ts +55 -55
- package/chaos/actionTemplate.js +55 -55
- package/chaos/experimentTemplate.d.ts +84 -84
- package/chaos/experimentTemplate.js +84 -84
- package/chaos/faultTemplate.d.ts +124 -124
- package/chaos/faultTemplate.js +124 -124
- package/chaos/imageRegistry.d.ts +6 -6
- package/chaos/imageRegistry.js +6 -6
- package/chaos/securityGovernanceCondition.d.ts +19 -19
- package/chaos/securityGovernanceCondition.js +19 -19
- package/chaos/securityGovernanceConditionV3.d.ts +13 -13
- package/chaos/securityGovernanceConditionV3.js +13 -13
- package/chaos/securityGovernanceRule.d.ts +21 -21
- package/chaos/securityGovernanceRule.js +21 -21
- package/chaos/securityGovernanceRuleV3.d.ts +9 -9
- package/chaos/securityGovernanceRuleV3.js +9 -9
- package/cluster/orchestrator.d.ts +1 -1
- package/cluster/orchestrator.js +1 -1
- package/cluster/orchestratorConfig.d.ts +9 -9
- package/cluster/orchestratorConfig.js +9 -9
- package/encryptedText.d.ts +3 -3
- package/encryptedText.js +3 -3
- package/environment.d.ts +7 -7
- package/environment.js +7 -7
- package/infrastructureDefinition.d.ts +13 -13
- package/infrastructureDefinition.js +13 -13
- package/package.json +2 -2
- package/platform/appDynamicsConnector.d.ts +8 -8
- package/platform/appDynamicsConnector.js +8 -8
- package/platform/artifactoryConnector.d.ts +12 -12
- package/platform/artifactoryConnector.js +12 -12
- package/platform/awsCCConnector.d.ts +4 -4
- package/platform/awsCCConnector.js +4 -4
- package/platform/azureCloudCostConnector.d.ts +12 -12
- package/platform/azureCloudCostConnector.js +12 -12
- package/platform/azureCloudProviderConnector.d.ts +31 -31
- package/platform/azureCloudProviderConnector.js +31 -31
- package/platform/bitbucketConnector.d.ts +27 -27
- package/platform/bitbucketConnector.js +27 -27
- package/platform/connectorCustomhealthsource.d.ts +6 -6
- package/platform/connectorCustomhealthsource.js +6 -6
- package/platform/connectorGcpKms.d.ts +15 -15
- package/platform/connectorGcpKms.js +15 -15
- package/platform/connectorRancher.d.ts +3 -3
- package/platform/connectorRancher.js +3 -3
- package/platform/dbSchema.d.ts +32 -32
- package/platform/dbSchema.js +32 -32
- package/platform/elasticsearchConnector.d.ts +8 -8
- package/platform/elasticsearchConnector.js +8 -8
- package/platform/environment.d.ts +11 -11
- package/platform/environment.js +11 -11
- package/platform/environmentClustersMapping.d.ts +6 -6
- package/platform/environmentClustersMapping.js +6 -6
- package/platform/filters.d.ts +4 -4
- package/platform/filters.js +4 -4
- package/platform/gcpCloudCostConnector.d.ts +4 -4
- package/platform/gcpCloudCostConnector.js +4 -4
- package/platform/gcpSecretManagerConnector.d.ts +8 -8
- package/platform/gcpSecretManagerConnector.js +8 -8
- package/platform/getEnvironmentClustersMapping.d.ts +12 -12
- package/platform/getEnvironmentClustersMapping.js +12 -12
- package/platform/getPolicySet.d.ts +8 -8
- package/platform/getPolicySet.js +8 -8
- package/platform/gitOpsAgent.d.ts +4 -4
- package/platform/gitOpsAgent.js +4 -4
- package/platform/gitOpsApplications.d.ts +9 -9
- package/platform/gitOpsApplications.js +9 -9
- package/platform/gitOpsGnupg.d.ts +3 -3
- package/platform/gitOpsGnupg.js +3 -3
- package/platform/gitOpsRepoCert.d.ts +1 -1
- package/platform/gitOpsRepoCert.js +1 -1
- package/platform/gitOpsRepoCred.d.ts +5 -5
- package/platform/gitOpsRepoCred.js +5 -5
- package/platform/gitopsAppProjectMapping.d.ts +12 -0
- package/platform/gitopsAppProjectMapping.d.ts.map +1 -1
- package/platform/gitopsAppProjectMapping.js +2 -0
- package/platform/gitopsAppProjectMapping.js.map +1 -1
- package/platform/gitopsApplicationset.d.ts +59 -59
- package/platform/gitopsApplicationset.js +59 -59
- package/platform/harLifecycleRule.d.ts +20 -20
- package/platform/harLifecycleRule.js +20 -20
- package/platform/harRegistry.d.ts +69 -69
- package/platform/harRegistry.js +69 -69
- package/platform/iacmAnsibleInventory.d.ts +11 -11
- package/platform/iacmAnsibleInventory.js +11 -11
- package/platform/iacmAnsiblePlaybook.d.ts +10 -10
- package/platform/iacmAnsiblePlaybook.js +10 -10
- package/platform/idpScorecard.d.ts +14 -14
- package/platform/idpScorecard.js +14 -14
- package/platform/idpScorecardCheck.d.ts +9 -9
- package/platform/idpScorecardCheck.js +9 -9
- package/platform/infraVariableSet.d.ts +21 -21
- package/platform/infraVariableSet.js +21 -21
- package/platform/infrastructure.d.ts +7 -7
- package/platform/infrastructure.js +7 -7
- package/platform/kubernetesConnector.d.ts +17 -17
- package/platform/kubernetesConnector.js +17 -17
- package/platform/monitoredService.d.ts +123 -123
- package/platform/monitoredService.js +123 -123
- package/platform/notificationRule.d.ts +10 -10
- package/platform/notificationRule.js +10 -10
- package/platform/pipeline.d.ts +9 -9
- package/platform/pipeline.js +9 -9
- package/platform/pipelineCentralNotificationRule.d.ts +22 -22
- package/platform/pipelineCentralNotificationRule.js +22 -22
- package/platform/pipelineFilters.d.ts +43 -43
- package/platform/pipelineFilters.js +43 -43
- package/platform/prometheusConnector.d.ts +6 -6
- package/platform/prometheusConnector.js +6 -6
- package/platform/repo.d.ts +4 -4
- package/platform/repo.js +4 -4
- package/platform/resourceGroup.d.ts +23 -23
- package/platform/resourceGroup.js +23 -23
- package/platform/secretFile.d.ts +10 -10
- package/platform/secretFile.js +10 -10
- package/platform/secretText.d.ts +13 -13
- package/platform/secretText.js +13 -13
- package/platform/secretWinrm.d.ts +89 -89
- package/platform/secretWinrm.js +89 -89
- package/platform/service.d.ts +10 -10
- package/platform/service.js +10 -10
- package/platform/slo.d.ts +17 -17
- package/platform/slo.js +17 -17
- package/platform/splunkConnector.d.ts +11 -11
- package/platform/splunkConnector.js +11 -11
- package/platform/templateFilters.d.ts +4 -4
- package/platform/templateFilters.js +4 -4
- package/platform/usergroup.d.ts +21 -21
- package/platform/usergroup.js +21 -21
- package/platform/variables.d.ts +4 -4
- package/platform/variables.js +4 -4
- package/platform/workspace.d.ts +32 -32
- package/platform/workspace.js +32 -32
- package/platformCcmFilters.d.ts +4 -4
- package/platformCcmFilters.js +4 -4
- package/service/discoveryAgent.d.ts +62 -62
- package/service/discoveryAgent.js +62 -62
- package/service/discoverySetting.d.ts +2 -2
- package/service/discoverySetting.js +2 -2
- package/service/kubernetes.d.ts +4 -4
- package/service/kubernetes.js +4 -4
- package/sshCredential.d.ts +3 -3
- package/sshCredential.js +3 -3
- package/userGroup.d.ts +6 -6
- package/userGroup.js +6 -6
package/chaos/faultTemplate.js
CHANGED
|
@@ -69,46 +69,9 @@ const utilities = __importStar(require("../utilities"));
|
|
|
69
69
|
* // ----------------------------------------------------------------------------
|
|
70
70
|
* // Most common pattern: Custom Kubernetes fault with container spec
|
|
71
71
|
* const kubernetesFault = new harness.chaos.FaultTemplate("kubernetes_fault", {
|
|
72
|
-
* orgId: _this.id,
|
|
73
|
-
* projectId: thisHarnessPlatformProject.id,
|
|
74
|
-
* hubIdentity: projectLevel.identity,
|
|
75
|
-
* identity: "k8s-fault-template",
|
|
76
|
-
* name: "Kubernetes Fault Template",
|
|
77
|
-
* description: "Custom Kubernetes fault for chaos injection",
|
|
78
|
-
* categories: ["Kubernetes"],
|
|
79
|
-
* infrastructures: ["KubernetesV2"],
|
|
80
|
-
* type: "Custom",
|
|
81
|
-
* permissionsRequired: "Basic",
|
|
82
|
-
* tags: [
|
|
83
|
-
* "kubernetes",
|
|
84
|
-
* "fault",
|
|
85
|
-
* "custom",
|
|
86
|
-
* ],
|
|
87
|
-
* links: [{
|
|
88
|
-
* name: "Documentation",
|
|
89
|
-
* url: "https://docs.harness.io/chaos",
|
|
90
|
-
* }],
|
|
91
72
|
* spec: {
|
|
92
73
|
* chaos: {
|
|
93
|
-
* faultName: "byoc-injector",
|
|
94
|
-
* params: [
|
|
95
|
-
* {
|
|
96
|
-
* name: "CHAOS_DURATION",
|
|
97
|
-
* value: "30s",
|
|
98
|
-
* },
|
|
99
|
-
* {
|
|
100
|
-
* name: "CHAOS_INTERVAL",
|
|
101
|
-
* value: "5s",
|
|
102
|
-
* },
|
|
103
|
-
* ],
|
|
104
74
|
* kubernetes: {
|
|
105
|
-
* image: "chaosnative/go-runner:ci",
|
|
106
|
-
* commands: [
|
|
107
|
-
* "/bin/bash",
|
|
108
|
-
* "-c",
|
|
109
|
-
* ],
|
|
110
|
-
* args: ["echo 'Running chaos fault'; sleep 30"],
|
|
111
|
-
* imagePullPolicy: "IfNotPresent",
|
|
112
75
|
* resources: {
|
|
113
76
|
* limits: {
|
|
114
77
|
* cpu: "150m",
|
|
@@ -119,39 +82,81 @@ const utilities = __importStar(require("../utilities"));
|
|
|
119
82
|
* memory: "100Mi",
|
|
120
83
|
* },
|
|
121
84
|
* },
|
|
85
|
+
* image: "chaosnative/go-runner:ci",
|
|
86
|
+
* commands: [
|
|
87
|
+
* "/bin/bash",
|
|
88
|
+
* "-c",
|
|
89
|
+
* ],
|
|
90
|
+
* args: ["echo 'Running chaos fault'; sleep 30"],
|
|
91
|
+
* imagePullPolicy: "IfNotPresent",
|
|
122
92
|
* },
|
|
93
|
+
* params: [
|
|
94
|
+
* {
|
|
95
|
+
* name: "CHAOS_DURATION",
|
|
96
|
+
* value: "30s",
|
|
97
|
+
* },
|
|
98
|
+
* {
|
|
99
|
+
* name: "CHAOS_INTERVAL",
|
|
100
|
+
* value: "5s",
|
|
101
|
+
* },
|
|
102
|
+
* ],
|
|
103
|
+
* faultName: "byoc-injector",
|
|
123
104
|
* },
|
|
124
105
|
* },
|
|
125
|
-
*
|
|
126
|
-
*
|
|
127
|
-
*
|
|
128
|
-
*
|
|
129
|
-
* // Example 2: Fault with Environment Variables (TESTED ✅)
|
|
130
|
-
* // ----------------------------------------------------------------------------
|
|
131
|
-
* // Fault with environment variables for configuration
|
|
132
|
-
* const faultWithEnv = new harness.chaos.FaultTemplate("fault_with_env", {
|
|
106
|
+
* links: [{
|
|
107
|
+
* name: "Documentation",
|
|
108
|
+
* url: "https://docs.harness.io/chaos",
|
|
109
|
+
* }],
|
|
133
110
|
* orgId: _this.id,
|
|
134
111
|
* projectId: thisHarnessPlatformProject.id,
|
|
135
112
|
* hubIdentity: projectLevel.identity,
|
|
136
|
-
* identity: "fault-
|
|
137
|
-
* name: "Fault
|
|
138
|
-
* description: "
|
|
113
|
+
* identity: "k8s-fault-template",
|
|
114
|
+
* name: "Kubernetes Fault Template",
|
|
115
|
+
* description: "Custom Kubernetes fault for chaos injection",
|
|
139
116
|
* categories: ["Kubernetes"],
|
|
140
117
|
* infrastructures: ["KubernetesV2"],
|
|
141
118
|
* type: "Custom",
|
|
142
119
|
* permissionsRequired: "Basic",
|
|
143
120
|
* tags: [
|
|
144
121
|
* "kubernetes",
|
|
145
|
-
* "
|
|
146
|
-
* "
|
|
122
|
+
* "fault",
|
|
123
|
+
* "custom",
|
|
147
124
|
* ],
|
|
148
|
-
*
|
|
149
|
-
*
|
|
150
|
-
*
|
|
151
|
-
*
|
|
125
|
+
* }, {
|
|
126
|
+
* dependsOn: [projectLevel],
|
|
127
|
+
* });
|
|
128
|
+
* // ----------------------------------------------------------------------------
|
|
129
|
+
* // Example 2: Fault with Environment Variables (TESTED ✅)
|
|
130
|
+
* // ----------------------------------------------------------------------------
|
|
131
|
+
* // Fault with environment variables for configuration
|
|
132
|
+
* const faultWithEnv = new harness.chaos.FaultTemplate("fault_with_env", {
|
|
152
133
|
* spec: {
|
|
153
134
|
* chaos: {
|
|
154
|
-
*
|
|
135
|
+
* kubernetes: {
|
|
136
|
+
* resources: {
|
|
137
|
+
* limits: {
|
|
138
|
+
* cpu: "200m",
|
|
139
|
+
* memory: "200Mi",
|
|
140
|
+
* },
|
|
141
|
+
* },
|
|
142
|
+
* envs: [
|
|
143
|
+
* {
|
|
144
|
+
* name: "TARGET_NAMESPACE",
|
|
145
|
+
* value: "<+input>.default('default')",
|
|
146
|
+
* },
|
|
147
|
+
* {
|
|
148
|
+
* name: "CHAOS_MODE",
|
|
149
|
+
* value: "pod",
|
|
150
|
+
* },
|
|
151
|
+
* ],
|
|
152
|
+
* image: "chaosnative/go-runner:ci",
|
|
153
|
+
* commands: [
|
|
154
|
+
* "/bin/bash",
|
|
155
|
+
* "-c",
|
|
156
|
+
* ],
|
|
157
|
+
* args: ["echo 'Fault with env vars'; sleep 15"],
|
|
158
|
+
* imagePullPolicy: "IfNotPresent",
|
|
159
|
+
* },
|
|
155
160
|
* params: [
|
|
156
161
|
* {
|
|
157
162
|
* name: "CHAOS_DURATION",
|
|
@@ -166,33 +171,13 @@ const utilities = __importStar(require("../utilities"));
|
|
|
166
171
|
* value: "<+input>.default('default')",
|
|
167
172
|
* },
|
|
168
173
|
* ],
|
|
169
|
-
*
|
|
170
|
-
* image: "chaosnative/go-runner:ci",
|
|
171
|
-
* commands: [
|
|
172
|
-
* "/bin/bash",
|
|
173
|
-
* "-c",
|
|
174
|
-
* ],
|
|
175
|
-
* args: ["echo 'Fault with env vars'; sleep 15"],
|
|
176
|
-
* imagePullPolicy: "IfNotPresent",
|
|
177
|
-
* envs: [
|
|
178
|
-
* {
|
|
179
|
-
* name: "TARGET_NAMESPACE",
|
|
180
|
-
* value: "<+input>.default('default')",
|
|
181
|
-
* },
|
|
182
|
-
* {
|
|
183
|
-
* name: "CHAOS_MODE",
|
|
184
|
-
* value: "pod",
|
|
185
|
-
* },
|
|
186
|
-
* ],
|
|
187
|
-
* resources: {
|
|
188
|
-
* limits: {
|
|
189
|
-
* cpu: "200m",
|
|
190
|
-
* memory: "200Mi",
|
|
191
|
-
* },
|
|
192
|
-
* },
|
|
193
|
-
* },
|
|
174
|
+
* faultName: "byoc-injector",
|
|
194
175
|
* },
|
|
195
176
|
* },
|
|
177
|
+
* links: [{
|
|
178
|
+
* name: "Documentation",
|
|
179
|
+
* url: "https://docs.harness.io/chaos",
|
|
180
|
+
* }],
|
|
196
181
|
* variables: [{
|
|
197
182
|
* name: "target_namespace",
|
|
198
183
|
* value: "<+input>",
|
|
@@ -200,53 +185,42 @@ const utilities = __importStar(require("../utilities"));
|
|
|
200
185
|
* required: false,
|
|
201
186
|
* description: "Target namespace for chaos injection",
|
|
202
187
|
* }],
|
|
203
|
-
* }, {
|
|
204
|
-
* dependsOn: [projectLevel],
|
|
205
|
-
* });
|
|
206
|
-
* // ----------------------------------------------------------------------------
|
|
207
|
-
* // Example 3: Fault with Advanced Configuration (TESTED ✅)
|
|
208
|
-
* // ----------------------------------------------------------------------------
|
|
209
|
-
* // Fault with node selector, labels, and annotations
|
|
210
|
-
* const advancedFault = new harness.chaos.FaultTemplate("advanced_fault", {
|
|
211
188
|
* orgId: _this.id,
|
|
212
189
|
* projectId: thisHarnessPlatformProject.id,
|
|
213
190
|
* hubIdentity: projectLevel.identity,
|
|
214
|
-
* identity: "
|
|
215
|
-
* name: "
|
|
216
|
-
* description: "Fault with
|
|
191
|
+
* identity: "fault-with-env-template",
|
|
192
|
+
* name: "Fault with Environment Variables",
|
|
193
|
+
* description: "Fault template with environment configuration",
|
|
217
194
|
* categories: ["Kubernetes"],
|
|
218
195
|
* infrastructures: ["KubernetesV2"],
|
|
219
196
|
* type: "Custom",
|
|
220
197
|
* permissionsRequired: "Basic",
|
|
221
198
|
* tags: [
|
|
222
199
|
* "kubernetes",
|
|
223
|
-
* "
|
|
224
|
-
* "
|
|
225
|
-
* ],
|
|
226
|
-
* links: [
|
|
227
|
-
* {
|
|
228
|
-
* name: "Documentation",
|
|
229
|
-
* url: "https://docs.harness.io/chaos",
|
|
230
|
-
* },
|
|
231
|
-
* {
|
|
232
|
-
* name: "Support",
|
|
233
|
-
* url: "https://support.harness.io",
|
|
234
|
-
* },
|
|
200
|
+
* "env",
|
|
201
|
+
* "config",
|
|
235
202
|
* ],
|
|
203
|
+
* }, {
|
|
204
|
+
* dependsOn: [projectLevel],
|
|
205
|
+
* });
|
|
206
|
+
* // ----------------------------------------------------------------------------
|
|
207
|
+
* // Example 3: Fault with Advanced Configuration (TESTED ✅)
|
|
208
|
+
* // ----------------------------------------------------------------------------
|
|
209
|
+
* // Fault with node selector, labels, and annotations
|
|
210
|
+
* const advancedFault = new harness.chaos.FaultTemplate("advanced_fault", {
|
|
236
211
|
* spec: {
|
|
237
212
|
* chaos: {
|
|
238
|
-
* faultName: "byoc-injector",
|
|
239
|
-
* params: [
|
|
240
|
-
* {
|
|
241
|
-
* name: "CHAOS_DURATION",
|
|
242
|
-
* value: "<+input>.default('30s')",
|
|
243
|
-
* },
|
|
244
|
-
* {
|
|
245
|
-
* name: "CHAOS_INTERVAL",
|
|
246
|
-
* value: "<+input>.default('5s')",
|
|
247
|
-
* },
|
|
248
|
-
* ],
|
|
249
213
|
* kubernetes: {
|
|
214
|
+
* resources: {
|
|
215
|
+
* limits: {
|
|
216
|
+
* cpu: "250m",
|
|
217
|
+
* memory: "256Mi",
|
|
218
|
+
* },
|
|
219
|
+
* requests: {
|
|
220
|
+
* cpu: "125m",
|
|
221
|
+
* memory: "128Mi",
|
|
222
|
+
* },
|
|
223
|
+
* },
|
|
250
224
|
* image: "chaosnative/go-runner:ci",
|
|
251
225
|
* commands: [
|
|
252
226
|
* "/bin/bash",
|
|
@@ -267,19 +241,30 @@ const utilities = __importStar(require("../utilities"));
|
|
|
267
241
|
* description: "Advanced chaos fault",
|
|
268
242
|
* owner: "chaos-team",
|
|
269
243
|
* },
|
|
270
|
-
* resources: {
|
|
271
|
-
* limits: {
|
|
272
|
-
* cpu: "250m",
|
|
273
|
-
* memory: "256Mi",
|
|
274
|
-
* },
|
|
275
|
-
* requests: {
|
|
276
|
-
* cpu: "125m",
|
|
277
|
-
* memory: "128Mi",
|
|
278
|
-
* },
|
|
279
|
-
* },
|
|
280
244
|
* },
|
|
245
|
+
* params: [
|
|
246
|
+
* {
|
|
247
|
+
* name: "CHAOS_DURATION",
|
|
248
|
+
* value: "<+input>.default('30s')",
|
|
249
|
+
* },
|
|
250
|
+
* {
|
|
251
|
+
* name: "CHAOS_INTERVAL",
|
|
252
|
+
* value: "<+input>.default('5s')",
|
|
253
|
+
* },
|
|
254
|
+
* ],
|
|
255
|
+
* faultName: "byoc-injector",
|
|
281
256
|
* },
|
|
282
257
|
* },
|
|
258
|
+
* links: [
|
|
259
|
+
* {
|
|
260
|
+
* name: "Documentation",
|
|
261
|
+
* url: "https://docs.harness.io/chaos",
|
|
262
|
+
* },
|
|
263
|
+
* {
|
|
264
|
+
* name: "Support",
|
|
265
|
+
* url: "https://support.harness.io",
|
|
266
|
+
* },
|
|
267
|
+
* ],
|
|
283
268
|
* variables: [
|
|
284
269
|
* {
|
|
285
270
|
* name: "chaos_duration",
|
|
@@ -296,6 +281,21 @@ const utilities = __importStar(require("../utilities"));
|
|
|
296
281
|
* description: "Interval between chaos injections",
|
|
297
282
|
* },
|
|
298
283
|
* ],
|
|
284
|
+
* orgId: _this.id,
|
|
285
|
+
* projectId: thisHarnessPlatformProject.id,
|
|
286
|
+
* hubIdentity: projectLevel.identity,
|
|
287
|
+
* identity: "advanced-fault-template",
|
|
288
|
+
* name: "Advanced Fault Template",
|
|
289
|
+
* description: "Fault with advanced Kubernetes configuration",
|
|
290
|
+
* categories: ["Kubernetes"],
|
|
291
|
+
* infrastructures: ["KubernetesV2"],
|
|
292
|
+
* type: "Custom",
|
|
293
|
+
* permissionsRequired: "Basic",
|
|
294
|
+
* tags: [
|
|
295
|
+
* "kubernetes",
|
|
296
|
+
* "advanced",
|
|
297
|
+
* "production",
|
|
298
|
+
* ],
|
|
299
299
|
* }, {
|
|
300
300
|
* dependsOn: [projectLevel],
|
|
301
301
|
* });
|
package/chaos/imageRegistry.d.ts
CHANGED
|
@@ -15,6 +15,12 @@ import * as outputs from "../types/output";
|
|
|
15
15
|
* import * as harness from "@pulumi/harness";
|
|
16
16
|
*
|
|
17
17
|
* const example = new harness.chaos.ImageRegistry("example", {
|
|
18
|
+
* customImages: [{
|
|
19
|
+
* logWatcher: "<log_watcher_image>",
|
|
20
|
+
* ddcr: "<ddcr_image>",
|
|
21
|
+
* ddcrLib: "<ddcr_lib_image>",
|
|
22
|
+
* ddcrFault: "<ddcr_fault_image>",
|
|
23
|
+
* }],
|
|
18
24
|
* orgId: "<org_id>",
|
|
19
25
|
* projectId: "<project_id>",
|
|
20
26
|
* registryServer: "<registry_server>",
|
|
@@ -24,12 +30,6 @@ import * as outputs from "../types/output";
|
|
|
24
30
|
* isDefault: false,
|
|
25
31
|
* isOverrideAllowed: true,
|
|
26
32
|
* useCustomImages: true,
|
|
27
|
-
* customImages: [{
|
|
28
|
-
* logWatcher: "<log_watcher_image>",
|
|
29
|
-
* ddcr: "<ddcr_image>",
|
|
30
|
-
* ddcrLib: "<ddcr_lib_image>",
|
|
31
|
-
* ddcrFault: "<ddcr_fault_image>",
|
|
32
|
-
* }],
|
|
33
33
|
* });
|
|
34
34
|
* ```
|
|
35
35
|
*
|
package/chaos/imageRegistry.js
CHANGED
|
@@ -42,6 +42,12 @@ const utilities = __importStar(require("../utilities"));
|
|
|
42
42
|
* import * as harness from "@pulumi/harness";
|
|
43
43
|
*
|
|
44
44
|
* const example = new harness.chaos.ImageRegistry("example", {
|
|
45
|
+
* customImages: [{
|
|
46
|
+
* logWatcher: "<log_watcher_image>",
|
|
47
|
+
* ddcr: "<ddcr_image>",
|
|
48
|
+
* ddcrLib: "<ddcr_lib_image>",
|
|
49
|
+
* ddcrFault: "<ddcr_fault_image>",
|
|
50
|
+
* }],
|
|
45
51
|
* orgId: "<org_id>",
|
|
46
52
|
* projectId: "<project_id>",
|
|
47
53
|
* registryServer: "<registry_server>",
|
|
@@ -51,12 +57,6 @@ const utilities = __importStar(require("../utilities"));
|
|
|
51
57
|
* isDefault: false,
|
|
52
58
|
* isOverrideAllowed: true,
|
|
53
59
|
* useCustomImages: true,
|
|
54
|
-
* customImages: [{
|
|
55
|
-
* logWatcher: "<log_watcher_image>",
|
|
56
|
-
* ddcr: "<ddcr_image>",
|
|
57
|
-
* ddcrLib: "<ddcr_lib_image>",
|
|
58
|
-
* ddcrFault: "<ddcr_fault_image>",
|
|
59
|
-
* }],
|
|
60
60
|
* });
|
|
61
61
|
* ```
|
|
62
62
|
*
|
|
@@ -12,13 +12,7 @@ import * as outputs from "../types/output";
|
|
|
12
12
|
*
|
|
13
13
|
* // Example of a Kubernetes Security Governance Condition
|
|
14
14
|
* const k8sCondition = new harness.chaos.SecurityGovernanceCondition("k8s_condition", {
|
|
15
|
-
* orgId: orgId,
|
|
16
|
-
* projectId: projectId,
|
|
17
|
-
* name: "k8s-security-condition",
|
|
18
|
-
* description: "Security governance condition for Kubernetes workloads",
|
|
19
|
-
* infraType: "KubernetesV2",
|
|
20
15
|
* faultSpec: {
|
|
21
|
-
* operator: "NOT_EQUAL_TO",
|
|
22
16
|
* faults: [
|
|
23
17
|
* {
|
|
24
18
|
* faultType: "FAULT",
|
|
@@ -29,6 +23,7 @@ import * as outputs from "../types/output";
|
|
|
29
23
|
* name: "pod-dns",
|
|
30
24
|
* },
|
|
31
25
|
* ],
|
|
26
|
+
* operator: "NOT_EQUAL_TO",
|
|
32
27
|
* },
|
|
33
28
|
* k8sSpec: {
|
|
34
29
|
* infraSpec: {
|
|
@@ -36,7 +31,6 @@ import * as outputs from "../types/output";
|
|
|
36
31
|
* infraIds: [k8sInfraId],
|
|
37
32
|
* },
|
|
38
33
|
* applicationSpec: {
|
|
39
|
-
* operator: "EQUAL_TO",
|
|
40
34
|
* workloads: [{
|
|
41
35
|
* namespace: "default",
|
|
42
36
|
* kind: "deployment",
|
|
@@ -44,6 +38,7 @@ import * as outputs from "../types/output";
|
|
|
44
38
|
* services: ["nginx-service"],
|
|
45
39
|
* applicationMapId: "nginx-app",
|
|
46
40
|
* }],
|
|
41
|
+
* operator: "EQUAL_TO",
|
|
47
42
|
* },
|
|
48
43
|
* chaosServiceAccountSpec: {
|
|
49
44
|
* operator: "EQUAL_TO",
|
|
@@ -53,6 +48,11 @@ import * as outputs from "../types/output";
|
|
|
53
48
|
* ],
|
|
54
49
|
* },
|
|
55
50
|
* },
|
|
51
|
+
* orgId: orgId,
|
|
52
|
+
* projectId: projectId,
|
|
53
|
+
* name: "k8s-security-condition",
|
|
54
|
+
* description: "Security governance condition for Kubernetes workloads",
|
|
55
|
+
* infraType: "KubernetesV2",
|
|
56
56
|
* tags: [
|
|
57
57
|
* "env:prod",
|
|
58
58
|
* "team:security",
|
|
@@ -61,13 +61,7 @@ import * as outputs from "../types/output";
|
|
|
61
61
|
* });
|
|
62
62
|
* // Example of a Windows Security Governance Condition
|
|
63
63
|
* const windowsCondition = new harness.chaos.SecurityGovernanceCondition("windows_condition", {
|
|
64
|
-
* orgId: orgId,
|
|
65
|
-
* projectId: projectId,
|
|
66
|
-
* name: "windows-security-condition",
|
|
67
|
-
* description: "Security governance condition for Windows hosts",
|
|
68
|
-
* infraType: "Windows",
|
|
69
64
|
* faultSpec: {
|
|
70
|
-
* operator: "NOT_EQUAL_TO",
|
|
71
65
|
* faults: [
|
|
72
66
|
* {
|
|
73
67
|
* faultType: "FAULT",
|
|
@@ -78,6 +72,7 @@ import * as outputs from "../types/output";
|
|
|
78
72
|
* name: "cpu-hog",
|
|
79
73
|
* },
|
|
80
74
|
* ],
|
|
75
|
+
* operator: "NOT_EQUAL_TO",
|
|
81
76
|
* },
|
|
82
77
|
* machineSpec: {
|
|
83
78
|
* infraSpec: {
|
|
@@ -85,6 +80,11 @@ import * as outputs from "../types/output";
|
|
|
85
80
|
* infraIds: [windowsInfraId],
|
|
86
81
|
* },
|
|
87
82
|
* },
|
|
83
|
+
* orgId: orgId,
|
|
84
|
+
* projectId: projectId,
|
|
85
|
+
* name: "windows-security-condition",
|
|
86
|
+
* description: "Security governance condition for Windows hosts",
|
|
87
|
+
* infraType: "Windows",
|
|
88
88
|
* tags: [
|
|
89
89
|
* "env:prod",
|
|
90
90
|
* "team:security",
|
|
@@ -93,13 +93,7 @@ import * as outputs from "../types/output";
|
|
|
93
93
|
* });
|
|
94
94
|
* // Example of a Linux Security Governance Condition
|
|
95
95
|
* const linuxCondition = new harness.chaos.SecurityGovernanceCondition("linux_condition", {
|
|
96
|
-
* orgId: orgId,
|
|
97
|
-
* projectId: projectId,
|
|
98
|
-
* name: "linux-security-condition",
|
|
99
|
-
* description: "Security governance condition for Linux hosts",
|
|
100
|
-
* infraType: "Linux",
|
|
101
96
|
* faultSpec: {
|
|
102
|
-
* operator: "NOT_EQUAL_TO",
|
|
103
97
|
* faults: [
|
|
104
98
|
* {
|
|
105
99
|
* faultType: "FAULT",
|
|
@@ -110,6 +104,7 @@ import * as outputs from "../types/output";
|
|
|
110
104
|
* name: "memory-hog",
|
|
111
105
|
* },
|
|
112
106
|
* ],
|
|
107
|
+
* operator: "NOT_EQUAL_TO",
|
|
113
108
|
* },
|
|
114
109
|
* machineSpec: {
|
|
115
110
|
* infraSpec: {
|
|
@@ -117,6 +112,11 @@ import * as outputs from "../types/output";
|
|
|
117
112
|
* infraIds: [linuxInfraId],
|
|
118
113
|
* },
|
|
119
114
|
* },
|
|
115
|
+
* orgId: orgId,
|
|
116
|
+
* projectId: projectId,
|
|
117
|
+
* name: "linux-security-condition",
|
|
118
|
+
* description: "Security governance condition for Linux hosts",
|
|
119
|
+
* infraType: "Linux",
|
|
120
120
|
* tags: [
|
|
121
121
|
* "env:prod",
|
|
122
122
|
* "team:security",
|
|
@@ -39,13 +39,7 @@ const utilities = __importStar(require("../utilities"));
|
|
|
39
39
|
*
|
|
40
40
|
* // Example of a Kubernetes Security Governance Condition
|
|
41
41
|
* const k8sCondition = new harness.chaos.SecurityGovernanceCondition("k8s_condition", {
|
|
42
|
-
* orgId: orgId,
|
|
43
|
-
* projectId: projectId,
|
|
44
|
-
* name: "k8s-security-condition",
|
|
45
|
-
* description: "Security governance condition for Kubernetes workloads",
|
|
46
|
-
* infraType: "KubernetesV2",
|
|
47
42
|
* faultSpec: {
|
|
48
|
-
* operator: "NOT_EQUAL_TO",
|
|
49
43
|
* faults: [
|
|
50
44
|
* {
|
|
51
45
|
* faultType: "FAULT",
|
|
@@ -56,6 +50,7 @@ const utilities = __importStar(require("../utilities"));
|
|
|
56
50
|
* name: "pod-dns",
|
|
57
51
|
* },
|
|
58
52
|
* ],
|
|
53
|
+
* operator: "NOT_EQUAL_TO",
|
|
59
54
|
* },
|
|
60
55
|
* k8sSpec: {
|
|
61
56
|
* infraSpec: {
|
|
@@ -63,7 +58,6 @@ const utilities = __importStar(require("../utilities"));
|
|
|
63
58
|
* infraIds: [k8sInfraId],
|
|
64
59
|
* },
|
|
65
60
|
* applicationSpec: {
|
|
66
|
-
* operator: "EQUAL_TO",
|
|
67
61
|
* workloads: [{
|
|
68
62
|
* namespace: "default",
|
|
69
63
|
* kind: "deployment",
|
|
@@ -71,6 +65,7 @@ const utilities = __importStar(require("../utilities"));
|
|
|
71
65
|
* services: ["nginx-service"],
|
|
72
66
|
* applicationMapId: "nginx-app",
|
|
73
67
|
* }],
|
|
68
|
+
* operator: "EQUAL_TO",
|
|
74
69
|
* },
|
|
75
70
|
* chaosServiceAccountSpec: {
|
|
76
71
|
* operator: "EQUAL_TO",
|
|
@@ -80,6 +75,11 @@ const utilities = __importStar(require("../utilities"));
|
|
|
80
75
|
* ],
|
|
81
76
|
* },
|
|
82
77
|
* },
|
|
78
|
+
* orgId: orgId,
|
|
79
|
+
* projectId: projectId,
|
|
80
|
+
* name: "k8s-security-condition",
|
|
81
|
+
* description: "Security governance condition for Kubernetes workloads",
|
|
82
|
+
* infraType: "KubernetesV2",
|
|
83
83
|
* tags: [
|
|
84
84
|
* "env:prod",
|
|
85
85
|
* "team:security",
|
|
@@ -88,13 +88,7 @@ const utilities = __importStar(require("../utilities"));
|
|
|
88
88
|
* });
|
|
89
89
|
* // Example of a Windows Security Governance Condition
|
|
90
90
|
* const windowsCondition = new harness.chaos.SecurityGovernanceCondition("windows_condition", {
|
|
91
|
-
* orgId: orgId,
|
|
92
|
-
* projectId: projectId,
|
|
93
|
-
* name: "windows-security-condition",
|
|
94
|
-
* description: "Security governance condition for Windows hosts",
|
|
95
|
-
* infraType: "Windows",
|
|
96
91
|
* faultSpec: {
|
|
97
|
-
* operator: "NOT_EQUAL_TO",
|
|
98
92
|
* faults: [
|
|
99
93
|
* {
|
|
100
94
|
* faultType: "FAULT",
|
|
@@ -105,6 +99,7 @@ const utilities = __importStar(require("../utilities"));
|
|
|
105
99
|
* name: "cpu-hog",
|
|
106
100
|
* },
|
|
107
101
|
* ],
|
|
102
|
+
* operator: "NOT_EQUAL_TO",
|
|
108
103
|
* },
|
|
109
104
|
* machineSpec: {
|
|
110
105
|
* infraSpec: {
|
|
@@ -112,6 +107,11 @@ const utilities = __importStar(require("../utilities"));
|
|
|
112
107
|
* infraIds: [windowsInfraId],
|
|
113
108
|
* },
|
|
114
109
|
* },
|
|
110
|
+
* orgId: orgId,
|
|
111
|
+
* projectId: projectId,
|
|
112
|
+
* name: "windows-security-condition",
|
|
113
|
+
* description: "Security governance condition for Windows hosts",
|
|
114
|
+
* infraType: "Windows",
|
|
115
115
|
* tags: [
|
|
116
116
|
* "env:prod",
|
|
117
117
|
* "team:security",
|
|
@@ -120,13 +120,7 @@ const utilities = __importStar(require("../utilities"));
|
|
|
120
120
|
* });
|
|
121
121
|
* // Example of a Linux Security Governance Condition
|
|
122
122
|
* const linuxCondition = new harness.chaos.SecurityGovernanceCondition("linux_condition", {
|
|
123
|
-
* orgId: orgId,
|
|
124
|
-
* projectId: projectId,
|
|
125
|
-
* name: "linux-security-condition",
|
|
126
|
-
* description: "Security governance condition for Linux hosts",
|
|
127
|
-
* infraType: "Linux",
|
|
128
123
|
* faultSpec: {
|
|
129
|
-
* operator: "NOT_EQUAL_TO",
|
|
130
124
|
* faults: [
|
|
131
125
|
* {
|
|
132
126
|
* faultType: "FAULT",
|
|
@@ -137,6 +131,7 @@ const utilities = __importStar(require("../utilities"));
|
|
|
137
131
|
* name: "memory-hog",
|
|
138
132
|
* },
|
|
139
133
|
* ],
|
|
134
|
+
* operator: "NOT_EQUAL_TO",
|
|
140
135
|
* },
|
|
141
136
|
* machineSpec: {
|
|
142
137
|
* infraSpec: {
|
|
@@ -144,6 +139,11 @@ const utilities = __importStar(require("../utilities"));
|
|
|
144
139
|
* infraIds: [linuxInfraId],
|
|
145
140
|
* },
|
|
146
141
|
* },
|
|
142
|
+
* orgId: orgId,
|
|
143
|
+
* projectId: projectId,
|
|
144
|
+
* name: "linux-security-condition",
|
|
145
|
+
* description: "Security governance condition for Linux hosts",
|
|
146
|
+
* infraType: "Linux",
|
|
147
147
|
* tags: [
|
|
148
148
|
* "env:prod",
|
|
149
149
|
* "team:security",
|
|
@@ -23,13 +23,7 @@ import * as outputs from "../types/output";
|
|
|
23
23
|
*
|
|
24
24
|
* // Example of a Kubernetes Security Governance Condition (V3)
|
|
25
25
|
* const k8sCondition = new harness.chaos.SecurityGovernanceConditionV3("k8s_condition", {
|
|
26
|
-
* orgId: orgId,
|
|
27
|
-
* projectId: projectId,
|
|
28
|
-
* name: "k8s-security-condition",
|
|
29
|
-
* description: "Security governance condition for Kubernetes workloads",
|
|
30
|
-
* infraType: "KubernetesV2",
|
|
31
26
|
* faultSpec: {
|
|
32
|
-
* operator: "NOT_EQUAL_TO",
|
|
33
27
|
* faults: [
|
|
34
28
|
* {
|
|
35
29
|
* faultType: "FAULT",
|
|
@@ -40,6 +34,7 @@ import * as outputs from "../types/output";
|
|
|
40
34
|
* name: "pod-dns",
|
|
41
35
|
* },
|
|
42
36
|
* ],
|
|
37
|
+
* operator: "NOT_EQUAL_TO",
|
|
43
38
|
* },
|
|
44
39
|
* k8sSpec: {
|
|
45
40
|
* infraSpec: {
|
|
@@ -47,7 +42,6 @@ import * as outputs from "../types/output";
|
|
|
47
42
|
* infraIds: [k8sInfraId],
|
|
48
43
|
* },
|
|
49
44
|
* applicationSpec: {
|
|
50
|
-
* operator: "EQUAL_TO",
|
|
51
45
|
* workloads: [{
|
|
52
46
|
* namespace: "default",
|
|
53
47
|
* kind: "deployment",
|
|
@@ -55,6 +49,7 @@ import * as outputs from "../types/output";
|
|
|
55
49
|
* services: ["nginx-service"],
|
|
56
50
|
* applicationMapId: "nginx-app",
|
|
57
51
|
* }],
|
|
52
|
+
* operator: "EQUAL_TO",
|
|
58
53
|
* },
|
|
59
54
|
* chaosServiceAccountSpec: {
|
|
60
55
|
* operator: "EQUAL_TO",
|
|
@@ -64,6 +59,11 @@ import * as outputs from "../types/output";
|
|
|
64
59
|
* ],
|
|
65
60
|
* },
|
|
66
61
|
* },
|
|
62
|
+
* orgId: orgId,
|
|
63
|
+
* projectId: projectId,
|
|
64
|
+
* name: "k8s-security-condition",
|
|
65
|
+
* description: "Security governance condition for Kubernetes workloads",
|
|
66
|
+
* infraType: "KubernetesV2",
|
|
67
67
|
* tags: [
|
|
68
68
|
* "env:prod",
|
|
69
69
|
* "team:security",
|
|
@@ -72,13 +72,7 @@ import * as outputs from "../types/output";
|
|
|
72
72
|
* });
|
|
73
73
|
* // Example of a Linux Security Governance Condition (V3)
|
|
74
74
|
* const linuxCondition = new harness.chaos.SecurityGovernanceConditionV3("linux_condition", {
|
|
75
|
-
* orgId: orgId,
|
|
76
|
-
* projectId: projectId,
|
|
77
|
-
* name: "linux-security-condition",
|
|
78
|
-
* description: "Security governance condition for Linux hosts",
|
|
79
|
-
* infraType: "Linux",
|
|
80
75
|
* faultSpec: {
|
|
81
|
-
* operator: "NOT_EQUAL_TO",
|
|
82
76
|
* faults: [
|
|
83
77
|
* {
|
|
84
78
|
* faultType: "FAULT",
|
|
@@ -89,6 +83,7 @@ import * as outputs from "../types/output";
|
|
|
89
83
|
* name: "memory-hog",
|
|
90
84
|
* },
|
|
91
85
|
* ],
|
|
86
|
+
* operator: "NOT_EQUAL_TO",
|
|
92
87
|
* },
|
|
93
88
|
* machineSpec: {
|
|
94
89
|
* infraSpec: {
|
|
@@ -96,6 +91,11 @@ import * as outputs from "../types/output";
|
|
|
96
91
|
* infraIds: [linuxInfraId],
|
|
97
92
|
* },
|
|
98
93
|
* },
|
|
94
|
+
* orgId: orgId,
|
|
95
|
+
* projectId: projectId,
|
|
96
|
+
* name: "linux-security-condition",
|
|
97
|
+
* description: "Security governance condition for Linux hosts",
|
|
98
|
+
* infraType: "Linux",
|
|
99
99
|
* tags: [
|
|
100
100
|
* "env:prod",
|
|
101
101
|
* "team:security",
|