@r8s/recipes 0.1.0

package/dist/endpoint-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-provider.js","sourceRoot":"","sources":["../src/endpoint-provider.tsx"],"names":[],"mappings":";;;AAsBA,sBAQC;AAoBD,oCAQC;AAyFD,4CAgBC;AAnKD,oCAA2C;AAC3C,iDAAkD;AAClD,iDAAmD;AAoBnD,SAAgB,KAAK,CAAC,KAAiB;IACrC,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE;YACR,gBAAgB,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO;YAC5C,GAAG,EAAE,KAAK,CAAC,GAAG;SACf;KACF,CAAA;AACH,CAAC;AAoBD,SAAgB,YAAY,CAAC,KAAwB;IACnD,OAAO;QACL,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE;YACR,gBAAgB,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YACzC,GAAG,EAAE,KAAK,CAAC,GAAG;SACf;KACF,CAAA;AACH,CAAC;AAsBY,QAAA,eAAe,GAAG,IAAA,wBAAa,EAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;AA+BnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,SAAgB,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAA;IAEpC,0BAA0B;IAC1B,MAAM,MAAM,GAAmB,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;IAErF,mDAAmD;IACnD,MAAM,OAAO,GAAG;QACd,IAAI,EAAE,MAAM,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAE,SAAmB;QACvF,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,IAAI,IAAI;KAC5D,CAAA;IAED,OAAO,IAAA,UAAG,EAAC,yBAAc,CAAC,QAAQ,EAAE;QAClC,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,IAAA,UAAG,EAAC,uBAAe,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;KACrE,CAAC,CAAA;AACJ,CAAC"}

package/dist/endpoint.d.ts

@@ -0,0 +1,43 @@
+import type { BaseRouteProps } from '@r8s/k8s-types';
+export interface EndpointProps extends Omit<BaseRouteProps, 'host'> {
+    /** Hostname for the endpoint (required) */
+    host: string;
+    /** Service name to route to */
+    serviceName: string;
+    /** Service port (default: 80) */
+    servicePort?: number;
+    /** Create a DNS record via ExternalDNS (default: false, or true when DnsProvider is set) */
+    dns?: boolean;
+    /** DNS record TTL in seconds (default: 300) */
+    dnsTtl?: number;
+}
+/**
+ * Endpoint — cluster-adaptive routing for a service.
+ *
+ * @title Endpoint
+ * @category Networking
+ *
+ * Reads the RoutingContext (set by Platform) to determine whether the
+ * cluster uses nginx Ingress or Envoy Gateway (Gateway API), and renders
+ * the appropriate resources automatically. Without a Platform, defaults
+ * to nginx Ingress.
+ *
+ * To pin operator versions, pass them at the Platform level.
+ *
+ * @example
+ * import { Endpoint } from '@r8s/recipes'
+ *
+ * export default <Endpoint name="api" host="api.example.com" serviceName="api" />
+ *
+ * @example
+ * import { Platform, Endpoint } from '@r8s/recipes'
+ * import { operators } from '@r8s/crds'
+ *
+ * export default (
+ *   <Platform operators={[operators['cert-manager']('1.18.0')]}>
+ *     <Endpoint name="api" host="api.example.com" serviceName="api" />
+ *   </Platform>
+ * )
+ */
+export declare function Endpoint(props: EndpointProps): import("@r8s/core").r8sElement;
+//# sourceMappingURL=endpoint.d.ts.map

package/dist/endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../src/endpoint.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAQpD,MAAM,WAAW,aAAc,SAAQ,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC;IACjE,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAA;IACZ,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAA;IACnB,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4FAA4F;IAC5F,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,kCAqN5C"}

package/dist/endpoint.js

@@ -0,0 +1,221 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Endpoint = Endpoint;
+const core_1 = require("@r8s/core");
+const defaults_1 = require("@r8s/core/defaults");
+const endpoint_provider_1 = require("./endpoint-provider");
+const operators_1 = require("./operators");
+const crds_1 = require("@r8s/crds");
+const externaldns_1 = require("@r8s/crds/externaldns");
+const dns_provider_1 = require("./dns-provider");
+/**
+ * Endpoint — cluster-adaptive routing for a service.
+ *
+ * @title Endpoint
+ * @category Networking
+ *
+ * Reads the RoutingContext (set by Platform) to determine whether the
+ * cluster uses nginx Ingress or Envoy Gateway (Gateway API), and renders
+ * the appropriate resources automatically. Without a Platform, defaults
+ * to nginx Ingress.
+ *
+ * To pin operator versions, pass them at the Platform level.
+ *
+ * @example
+ * import { Endpoint } from '@r8s/recipes'
+ *
+ * export default <Endpoint name="api" host="api.example.com" serviceName="api" />
+ *
+ * @example
+ * import { Platform, Endpoint } from '@r8s/recipes'
+ * import { operators } from '@r8s/crds'
+ *
+ * export default (
+ *   <Platform operators={[operators['cert-manager']('1.18.0')]}>
+ *     <Endpoint name="api" host="api.example.com" serviceName="api" />
+ *   </Platform>
+ * )
+ */
+function Endpoint(props) {
+    const { name, namespace = 'default', host, serviceName, servicePort = 80, tls, annotations = {}, dns, dnsTtl = 300, } = props;
+    const routing = (0, core_1.useContext)(defaults_1.RoutingContext);
+    const endpointConfig = (0, core_1.useContext)(endpoint_provider_1.EndpointContext);
+    const sharedOperators = (0, core_1.useContext)(defaults_1.OperatorContext);
+    const dnsConfig = (0, core_1.useContext)(dns_provider_1.DnsContext);
+    // DNS defaults to true when DnsProvider is set, unless explicitly disabled
+    const createDnsRecord = dns ?? dnsConfig !== null;
+    const resources = [];
+    if (routing.mode === 'gateway') {
+        const gatewayClassName = routing.gatewayClassName || 'eg';
+        const secretName = tls?.secretName || `${name}-tls`;
+        const issuerName = tls?.clusterIssuer || 'letsencrypt-prod';
+        const hasCertManager = sharedOperators.some((op) => op.name === 'cert-manager');
+        const hasEnvoyGateway = sharedOperators.some((op) => op.name === 'envoy-gateway');
+        if (tls && !hasCertManager) {
+            resources.push((0, core_1.declareOperator)(crds_1.operators['cert-manager']()));
+        }
+        if (!hasEnvoyGateway) {
+            resources.push((0, core_1.declareOperator)(crds_1.operators['envoy-gateway']()));
+        }
+        if (tls) {
+            resources.push((0, core_1.jsx)('Certificate', {
+                apiVersion: 'cert-manager.io/v1',
+                kind: 'Certificate',
+                metadata: {
+                    name: `${name}-tls`,
+                    namespace,
+                },
+                spec: {
+                    secretName,
+                    dnsNames: [host],
+                    issuerRef: {
+                        name: issuerName,
+                        kind: 'ClusterIssuer',
+                    },
+                },
+            }));
+        }
+        // HTTPS listener with TLS, HTTP listener without
+        const useHttps = !!tls;
+        resources.push((0, core_1.jsx)('Gateway', {
+            apiVersion: 'gateway.networking.k8s.io/v1',
+            kind: 'Gateway',
+            metadata: {
+                name: `${name}-gateway`,
+                namespace,
+                // ExternalDNS gateway source picks up hostnames from this annotation
+                ...(createDnsRecord && {
+                    annotations: {
+                        'external-dns.alpha.kubernetes.io/hostname': host,
+                    },
+                }),
+            },
+            spec: {
+                gatewayClassName,
+                listeners: [
+                    {
+                        name: useHttps ? 'https' : 'http',
+                        protocol: useHttps ? 'HTTPS' : 'HTTP',
+                        port: useHttps ? 443 : 80,
+                        hostname: host,
+                        ...(tls && {
+                            tls: {
+                                mode: 'Terminate',
+                                certificateRefs: [{ name: secretName }],
+                            },
+                        }),
+                    },
+                ],
+            },
+        }));
+        resources.push((0, core_1.jsx)('HTTPRoute', {
+            apiVersion: 'gateway.networking.k8s.io/v1',
+            kind: 'HTTPRoute',
+            metadata: { name: `${name}-route`, namespace },
+            spec: {
+                parentRefs: [{ name: `${name}-gateway` }],
+                hostnames: [host],
+                rules: [
+                    {
+                        backendRefs: [{ name: serviceName, port: servicePort }],
+                    },
+                ],
+            },
+        }));
+    }
+    else {
+        const hasNginxIngress = sharedOperators.some((op) => op.name === 'nginx-ingress');
+        const hasCertManager = sharedOperators.some((op) => op.name === 'cert-manager');
+        if (!hasNginxIngress) {
+            resources.push((0, core_1.declareOperator)((0, operators_1.nginxIngressOperator)()));
+        }
+        if (tls && !hasCertManager) {
+            resources.push((0, core_1.declareOperator)(crds_1.operators['cert-manager']()));
+        }
+        const ingress = {
+            apiVersion: 'networking.k8s.io/v1',
+            kind: 'Ingress',
+            metadata: {
+                name,
+                namespace,
+                annotations: {
+                    'nginx.ingress.kubernetes.io/rewrite-target': '/',
+                    // ExternalDNS ingress source picks up hostnames from this annotation
+                    ...(createDnsRecord ? { 'external-dns.alpha.kubernetes.io/hostname': host } : {}),
+                    ...(tls?.clusterIssuer
+                        ? {
+                            'cert-manager.io/cluster-issuer': tls.clusterIssuer,
+                        }
+                        : {}),
+                    ...annotations,
+                },
+            },
+            spec: {
+                ingressClassName: endpointConfig.settings?.ingressClassName ?? 'nginx',
+                rules: [
+                    {
+                        host,
+                        http: {
+                            paths: [
+                                {
+                                    path: '/',
+                                    pathType: 'Prefix',
+                                    backend: {
+                                        service: {
+                                            name: serviceName,
+                                            port: { number: servicePort },
+                                        },
+                                    },
+                                },
+                            ],
+                        },
+                    },
+                ],
+                ...(tls?.secretName && {
+                    tls: [
+                        {
+                            hosts: [host],
+                            secretName: tls.secretName,
+                        },
+                    ],
+                }),
+            },
+        };
+        resources.push((0, core_1.jsx)('Ingress', ingress));
+    }
+    // DNS record via ExternalDNS.
+    //
+    // Two modes:
+    // 1. Explicit targets (dnsTargets prop or dnsConfig.settings.targets):
+    //    create a DNSEndpoint CR with those targets (ExternalDNS crd source).
+    // 2. No targets: annotate the Gateway/Ingress with the hostname and let
+    //    ExternalDNS pick it up via its gateway/ingress source. Creating a
+    //    DNSEndpoint with empty targets would produce a DNS record pointing
+    //    nowhere, so we deliberately skip the CR in that case.
+    const dnsTargets = dnsConfig?.settings?.targets;
+    if (createDnsRecord) {
+        const hasExternalDNS = sharedOperators.some((op) => op.name === 'external-dns');
+        if (!hasExternalDNS) {
+            resources.push((0, core_1.declareOperator)(crds_1.operators['external-dns']()));
+        }
+        if (dnsTargets && dnsTargets.length > 0) {
+            resources.push((0, externaldns_1.DNSEndpointComponent)({
+                metadata: { name: `${name}-dns`, namespace },
+                spec: {
+                    endpoints: [
+                        {
+                            dnsName: host,
+                            recordType: 'A',
+                            targets: dnsTargets,
+                            recordTTL: dnsTtl,
+                        },
+                    ],
+                },
+            }));
+        }
+        // else: no targets known at render time — rely on ExternalDNS
+        // gateway/ingress source instead of creating an empty DNSEndpoint.
+    }
+    return (0, core_1.jsx)(core_1.Fragment, { children: resources });
+}
+//# sourceMappingURL=endpoint.js.map

package/dist/endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.js","sourceRoot":"","sources":["../src/endpoint.tsx"],"names":[],"mappings":";;AAmDA,4BAqNC;AAxQD,oCAAsE;AAGtE,iDAAoE;AACpE,2DAAqD;AACrD,2CAAkD;AAClD,oCAAqC;AACrC,uDAA4D;AAC5D,iDAA2C;AAe3C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,QAAQ,CAAC,KAAoB;IAC3C,MAAM,EACJ,IAAI,EACJ,SAAS,GAAG,SAAS,EACrB,IAAI,EACJ,WAAW,EACX,WAAW,GAAG,EAAE,EAChB,GAAG,EACH,WAAW,GAAG,EAAE,EAChB,GAAG,EACH,MAAM,GAAG,GAAG,GACb,GAAG,KAAK,CAAA;IAET,MAAM,OAAO,GAAG,IAAA,iBAAU,EAAC,yBAAc,CAAC,CAAA;IAC1C,MAAM,cAAc,GAAG,IAAA,iBAAU,EAAC,mCAAe,CAAC,CAAA;IAClD,MAAM,eAAe,GAAG,IAAA,iBAAU,EAAC,0BAAe,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,IAAA,iBAAU,EAAC,yBAAU,CAAC,CAAA;IAExC,2EAA2E;IAC3E,MAAM,eAAe,GAAG,GAAG,IAAI,SAAS,KAAK,IAAI,CAAA;IAEjD,MAAM,SAAS,GAA6B,EAAE,CAAA;IAE9C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAA;QACzD,MAAM,UAAU,GAAG,GAAG,EAAE,UAAU,IAAI,GAAG,IAAI,MAAM,CAAA;QACnD,MAAM,UAAU,GAAG,GAAG,EAAE,aAAa,IAAI,kBAAkB,CAAA;QAE3D,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,CAAA;QAC/E,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,eAAe,CAAC,CAAA;QAEjF,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3B,SAAS,CAAC,IAAI,CAAC,IAAA,sBAAe,EAAC,gBAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9D,CAAC;QACD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,SAAS,CAAC,IAAI,CAAC,IAAA,sBAAe,EAAC,gBAAS,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/D,CAAC;QAED,IAAI,GAAG,EAAE,CAAC;YACR,SAAS,CAAC,IAAI,CACZ,IAAA,UAAG,EAAC,aAAa,EAAE;gBACjB,UAAU,EAAE,oBAAoB;gBAChC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE;oBACR,IAAI,EAAE,GAAG,IAAI,MAAM;oBACnB,SAAS;iBACV;gBACD,IAAI,EAAE;oBACJ,UAAU;oBACV,QAAQ,EAAE,CAAC,IAAI,CAAC;oBAChB,SAAS,EAAE;wBACT,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,eAAe;qBACtB;iBACF;aACF,CAAC,CACH,CAAA;QACH,CAAC;QAED,iDAAiD;QACjD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAA;QACtB,SAAS,CAAC,IAAI,CACZ,IAAA,UAAG,EAAC,SAAS,EAAE;YACb,UAAU,EAAE,8BAA8B;YAC1C,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,UAAU;gBACvB,SAAS;gBACT,qEAAqE;gBACrE,GAAG,CAAC,eAAe,IAAI;oBACrB,WAAW,EAAE;wBACX,2CAA2C,EAAE,IAAI;qBAClD;iBACF,CAAC;aACH;YACD,IAAI,EAAE;gBACJ,gBAAgB;gBAChB,SAAS,EAAE;oBACT;wBACE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;wBACjC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;wBACrC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;wBACzB,QAAQ,EAAE,IAAI;wBACd,GAAG,CAAC,GAAG,IAAI;4BACT,GAAG,EAAE;gCACH,IAAI,EAAE,WAAW;gCACjB,eAAe,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;6BACxC;yBACF,CAAC;qBACH;iBACF;aACF;SACF,CAAC,CACH,CAAA;QAED,SAAS,CAAC,IAAI,CACZ,IAAA,UAAG,EAAC,WAAW,EAAE;YACf,UAAU,EAAE,8BAA8B;YAC1C,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,QAAQ,EAAE,SAAS,EAAE;YAC9C,IAAI,EAAE;gBACJ,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;gBACzC,SAAS,EAAE,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE;oBACL;wBACE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;qBACxD;iBACF;aACF;SACF,CAAC,CACH,CAAA;IACH,CAAC;SAAM,CAAC;QACN,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,eAAe,CAAC,CAAA;QACjF,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,CAAA;QAE/E,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,SAAS,CAAC,IAAI,CAAC,IAAA,sBAAe,EAAC,IAAA,gCAAoB,GAAE,CAAC,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3B,SAAS,CAAC,IAAI,CAAC,IAAA,sBAAe,EAAC,gBAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9D,CAAC;QAED,MAAM,OAAO,GAAY;YACvB,UAAU,EAAE,sBAAsB;YAClC,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE;gBACR,IAAI;gBACJ,SAAS;gBACT,WAAW,EAAE;oBACX,4CAA4C,EAAE,GAAG;oBACjD,qEAAqE;oBACrE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,2CAA2C,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjF,GAAG,CAAC,GAAG,EAAE,aAAa;wBACpB,CAAC,CAAC;4BACE,gCAAgC,EAAE,GAAG,CAAC,aAAa;yBACpD;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,WAAW;iBACf;aACF;YACD,IAAI,EAAE;gBACJ,gBAAgB,EAAE,cAAc,CAAC,QAAQ,EAAE,gBAAgB,IAAI,OAAO;gBACtE,KAAK,EAAE;oBACL;wBACE,IAAI;wBACJ,IAAI,EAAE;4BACJ,KAAK,EAAE;gCACL;oCACE,IAAI,EAAE,GAAG;oCACT,QAAQ,EAAE,QAAQ;oCAClB,OAAO,EAAE;wCACP,OAAO,EAAE;4CACP,IAAI,EAAE,WAAW;4CACjB,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;yCAC9B;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,GAAG,CAAC,GAAG,EAAE,UAAU,IAAI;oBACrB,GAAG,EAAE;wBACH;4BACE,KAAK,EAAE,CAAC,IAAI,CAAC;4BACb,UAAU,EAAE,GAAG,CAAC,UAAU;yBAC3B;qBACF;iBACF,CAAC;aACH;SACF,CAAA;QAED,SAAS,CAAC,IAAI,CAAC,IAAA,UAAG,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;IACzC,CAAC;IAED,8BAA8B;IAC9B,EAAE;IACF,aAAa;IACb,uEAAuE;IACvE,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,2DAA2D;IAC3D,MAAM,UAAU,GAAG,SAAS,EAAE,QAAQ,EAAE,OAA+B,CAAA;IACvE,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,CAAA;QAC/E,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,SAAS,CAAC,IAAI,CAAC,IAAA,sBAAe,EAAC,gBAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9D,CAAC;QAED,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,SAAS,CAAC,IAAI,CACZ,IAAA,kCAAoB,EAAC;gBACnB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,SAAS,EAAE;gBAC5C,IAAI,EAAE;oBACJ,SAAS,EAAE;wBACT;4BACE,OAAO,EAAE,IAAI;4BACb,UAAU,EAAE,GAAG;4BACf,OAAO,EAAE,UAAU;4BACnB,SAAS,EAAE,MAAM;yBAClB;qBACF;iBACF;aACF,CAAC,CACH,CAAA;QACH,CAAC;QACD,8DAA8D;QAC9D,mEAAmE;IACrE,CAAC;IAED,OAAO,IAAA,UAAG,EAAC,eAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;AAC/C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export { Platform, type PlatformProps, type RoutingMode } from './platform';
+export { App, type AppProps } from './app';
+export { Database, type DatabaseProps } from './database';
+export { Endpoint, type EndpointProps } from './endpoint';
+export { WebService, type WebServiceProps, type SecretRef, type VaultSecretRef, } from './web-service';
+export { Auth, type AuthProps } from './auth';
+export { Monitoring, type MonitoringProps } from './monitoring';
+export { Backup, type BackupProps } from './backup';
+export { SecretProvider, type SecretProviderProps, type SecretProviderValue, OpenBao, type OpenBaoProps, Vault, type VaultProps, SealedSecrets, type SealedSecretsProps, ManualSecrets, type ManualSecretsProps, } from './secret-provider';
+export { DnsProvider, type DnsProviderProps, type DnsProviderValue, type DnsConfig, DnsContext, ExternalDns, type ExternalDnsProps, } from './dns-provider';
+export { EndpointProvider, type EndpointProviderProps, type EndpointProviderValue, type EndpointConfig, EndpointContext, Nginx, type NginxProps, EnvoyGateway, type EnvoyGatewayProps, } from './endpoint-provider';
+export { CertProvider, type CertProviderProps, type CertProviderValue, type CertConfig, CertContext, CertManager, type CertManagerProps, } from './cert-provider';
+export { cnpgOperator, nginxIngressOperator, vaultSecretsOperator } from './operators';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAA;AAC3E,OAAO,EAAE,GAAG,EAAE,KAAK,QAAQ,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAA;AACzD,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAA;AACzD,OAAO,EACL,UAAU,EACV,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,cAAc,GACpB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,IAAI,EAAE,KAAK,SAAS,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAA;AAGnD,OAAO,EACL,cAAc,EACd,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,OAAO,EACP,KAAK,YAAY,EACjB,KAAK,EACL,KAAK,UAAU,EACf,aAAa,EACb,KAAK,kBAAkB,EACvB,aAAa,EACb,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,WAAW,EACX,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,UAAU,EACV,WAAW,EACX,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,eAAe,EACf,KAAK,EACL,KAAK,UAAU,EACf,YAAY,EACZ,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,WAAW,EACX,WAAW,EACX,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA"}

package/dist/index.js

@@ -0,0 +1,49 @@
+"use strict";
+// Core recipes — the only place for abstraction in r8s.
+// Each recipe composes generated CRD components into a higher-level pattern
+// with good defaults. Named after what the user wants to achieve, not the
+// underlying tools.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.vaultSecretsOperator = exports.nginxIngressOperator = exports.cnpgOperator = exports.CertManager = exports.CertContext = exports.CertProvider = exports.EnvoyGateway = exports.Nginx = exports.EndpointContext = exports.EndpointProvider = exports.ExternalDns = exports.DnsContext = exports.DnsProvider = exports.ManualSecrets = exports.SealedSecrets = exports.Vault = exports.OpenBao = exports.SecretProvider = exports.Backup = exports.Monitoring = exports.Auth = exports.WebService = exports.Endpoint = exports.Database = exports.App = exports.Platform = void 0;
+var platform_1 = require("./platform");
+Object.defineProperty(exports, "Platform", { enumerable: true, get: function () { return platform_1.Platform; } });
+var app_1 = require("./app");
+Object.defineProperty(exports, "App", { enumerable: true, get: function () { return app_1.App; } });
+var database_1 = require("./database");
+Object.defineProperty(exports, "Database", { enumerable: true, get: function () { return database_1.Database; } });
+var endpoint_1 = require("./endpoint");
+Object.defineProperty(exports, "Endpoint", { enumerable: true, get: function () { return endpoint_1.Endpoint; } });
+var web_service_1 = require("./web-service");
+Object.defineProperty(exports, "WebService", { enumerable: true, get: function () { return web_service_1.WebService; } });
+var auth_1 = require("./auth");
+Object.defineProperty(exports, "Auth", { enumerable: true, get: function () { return auth_1.Auth; } });
+var monitoring_1 = require("./monitoring");
+Object.defineProperty(exports, "Monitoring", { enumerable: true, get: function () { return monitoring_1.Monitoring; } });
+var backup_1 = require("./backup");
+Object.defineProperty(exports, "Backup", { enumerable: true, get: function () { return backup_1.Backup; } });
+// Provider components — fine-grained control over cluster configuration
+var secret_provider_1 = require("./secret-provider");
+Object.defineProperty(exports, "SecretProvider", { enumerable: true, get: function () { return secret_provider_1.SecretProvider; } });
+Object.defineProperty(exports, "OpenBao", { enumerable: true, get: function () { return secret_provider_1.OpenBao; } });
+Object.defineProperty(exports, "Vault", { enumerable: true, get: function () { return secret_provider_1.Vault; } });
+Object.defineProperty(exports, "SealedSecrets", { enumerable: true, get: function () { return secret_provider_1.SealedSecrets; } });
+Object.defineProperty(exports, "ManualSecrets", { enumerable: true, get: function () { return secret_provider_1.ManualSecrets; } });
+var dns_provider_1 = require("./dns-provider");
+Object.defineProperty(exports, "DnsProvider", { enumerable: true, get: function () { return dns_provider_1.DnsProvider; } });
+Object.defineProperty(exports, "DnsContext", { enumerable: true, get: function () { return dns_provider_1.DnsContext; } });
+Object.defineProperty(exports, "ExternalDns", { enumerable: true, get: function () { return dns_provider_1.ExternalDns; } });
+var endpoint_provider_1 = require("./endpoint-provider");
+Object.defineProperty(exports, "EndpointProvider", { enumerable: true, get: function () { return endpoint_provider_1.EndpointProvider; } });
+Object.defineProperty(exports, "EndpointContext", { enumerable: true, get: function () { return endpoint_provider_1.EndpointContext; } });
+Object.defineProperty(exports, "Nginx", { enumerable: true, get: function () { return endpoint_provider_1.Nginx; } });
+Object.defineProperty(exports, "EnvoyGateway", { enumerable: true, get: function () { return endpoint_provider_1.EnvoyGateway; } });
+var cert_provider_1 = require("./cert-provider");
+Object.defineProperty(exports, "CertProvider", { enumerable: true, get: function () { return cert_provider_1.CertProvider; } });
+Object.defineProperty(exports, "CertContext", { enumerable: true, get: function () { return cert_provider_1.CertContext; } });
+Object.defineProperty(exports, "CertManager", { enumerable: true, get: function () { return cert_provider_1.CertManager; } });
+// Operator declarations for components in this package
+var operators_1 = require("./operators");
+Object.defineProperty(exports, "cnpgOperator", { enumerable: true, get: function () { return operators_1.cnpgOperator; } });
+Object.defineProperty(exports, "nginxIngressOperator", { enumerable: true, get: function () { return operators_1.nginxIngressOperator; } });
+Object.defineProperty(exports, "vaultSecretsOperator", { enumerable: true, get: function () { return operators_1.vaultSecretsOperator; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,wDAAwD;AACxD,4EAA4E;AAC5E,0EAA0E;AAC1E,oBAAoB;;;AAEpB,uCAA2E;AAAlE,oGAAA,QAAQ,OAAA;AACjB,6BAA0C;AAAjC,0FAAA,GAAG,OAAA;AACZ,uCAAyD;AAAhD,oGAAA,QAAQ,OAAA;AACjB,uCAAyD;AAAhD,oGAAA,QAAQ,OAAA;AACjB,6CAKsB;AAJpB,yGAAA,UAAU,OAAA;AAKZ,+BAA6C;AAApC,4FAAA,IAAI,OAAA;AACb,2CAA+D;AAAtD,wGAAA,UAAU,OAAA;AACnB,mCAAmD;AAA1C,gGAAA,MAAM,OAAA;AAEf,wEAAwE;AACxE,qDAY0B;AAXxB,iHAAA,cAAc,OAAA;AAGd,0GAAA,OAAO,OAAA;AAEP,wGAAA,KAAK,OAAA;AAEL,gHAAA,aAAa,OAAA;AAEb,gHAAA,aAAa,OAAA;AAGf,+CAQuB;AAPrB,2GAAA,WAAW,OAAA;AAIX,0GAAA,UAAU,OAAA;AACV,2GAAA,WAAW,OAAA;AAGb,yDAU4B;AAT1B,qHAAA,gBAAgB,OAAA;AAIhB,oHAAA,eAAe,OAAA;AACf,0GAAA,KAAK,OAAA;AAEL,iHAAA,YAAY,OAAA;AAGd,iDAQwB;AAPtB,6GAAA,YAAY,OAAA;AAIZ,4GAAA,WAAW,OAAA;AACX,4GAAA,WAAW,OAAA;AAIb,uDAAuD;AACvD,yCAAsF;AAA7E,yGAAA,YAAY,OAAA;AAAE,iHAAA,oBAAoB,OAAA;AAAE,iHAAA,oBAAoB,OAAA"}

package/dist/monitoring.d.ts

@@ -0,0 +1,49 @@
+export interface MonitoringProps {
+    /** Resource name (used for ServiceMonitor labels) */
+    name: string;
+    /** Kubernetes namespace where the app runs (defaults to 'default') */
+    namespace?: string;
+    /** Labels matching the Kubernetes Service to monitor (e.g., { app: 'api' }) */
+    selector: Record<string, string>;
+    /** Metrics endpoint port name (defaults to 'metrics') */
+    port?: string;
+    /** Metrics path (defaults to '/metrics') */
+    path?: string;
+    /** Scrape interval (defaults to '30s') */
+    interval?: string;
+    /** Enable log aggregation with Loki (default: false) */
+    logs?: boolean;
+    /** Loki storage size (default: '10Gi') */
+    logsStorage?: string;
+}
+/**
+ * Application monitoring — Prometheus ServiceMonitor for your app.
+ *
+ * @title Monitoring
+ * @category Observability
+ *
+ * Creates a ServiceMonitor that tells Prometheus to scrape your app's
+ * metrics endpoint. Pair with a Grafana dashboard for visualization.
+ *
+ * The Prometheus operator (kube-prometheus-stack) is declared as a
+ * dependency — it installs Prometheus, Grafana, and Alertmanager.
+ *
+ * @example
+ * import { Monitoring } from '@r8s/recipes'
+ *
+ * export default <Monitoring name="api-monitor" selector={{ app: 'api' }} />
+ *
+ * @example
+ * import { Monitoring } from '@r8s/recipes'
+ *
+ * export default (
+ *   <Monitoring
+ *     name="api-monitor"
+ *     selector={{ app: 'api' }}
+ *     path="/actuator/prometheus"
+ *     interval="15s"
+ *   />
+ * )
+ */
+export declare function Monitoring(props: MonitoringProps): import("@r8s/core").r8sElement;
+//# sourceMappingURL=monitoring.d.ts.map

package/dist/monitoring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"monitoring.d.ts","sourceRoot":"","sources":["../src/monitoring.tsx"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,wDAAwD;IACxD,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,kCAsHhD"}

package/dist/monitoring.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Monitoring = Monitoring;
+const core_1 = require("@r8s/core");
+const defaults_1 = require("@r8s/core/defaults");
+const crds_1 = require("@r8s/crds");
+const loki_1 = require("@r8s/crds/loki");
+const logging_1 = require("@r8s/crds/logging");
+/**
+ * Application monitoring — Prometheus ServiceMonitor for your app.
+ *
+ * @title Monitoring
+ * @category Observability
+ *
+ * Creates a ServiceMonitor that tells Prometheus to scrape your app's
+ * metrics endpoint. Pair with a Grafana dashboard for visualization.
+ *
+ * The Prometheus operator (kube-prometheus-stack) is declared as a
+ * dependency — it installs Prometheus, Grafana, and Alertmanager.
+ *
+ * @example
+ * import { Monitoring } from '@r8s/recipes'
+ *
+ * export default <Monitoring name="api-monitor" selector={{ app: 'api' }} />
+ *
+ * @example
+ * import { Monitoring } from '@r8s/recipes'
+ *
+ * export default (
+ *   <Monitoring
+ *     name="api-monitor"
+ *     selector={{ app: 'api' }}
+ *     path="/actuator/prometheus"
+ *     interval="15s"
+ *   />
+ * )
+ */
+function Monitoring(props) {
+    const { name, namespace = 'default', selector, port = 'metrics', path = '/metrics', interval = '30s', logs = false, logsStorage = '10Gi', } = props;
+    const sharedOperators = (0, core_1.useContext)(defaults_1.OperatorContext);
+    const hasPrometheus = sharedOperators.some((op) => op.name === 'prometheus');
+    const hasLoki = sharedOperators.some((op) => op.name === 'loki');
+    const hasLogging = sharedOperators.some((op) => op.name === 'logging-operator');
+    const resources = [];
+    if (!hasPrometheus) {
+        resources.push((0, core_1.declareOperator)(crds_1.operators['prometheus']()));
+    }
+    resources.push((0, core_1.jsx)('ServiceMonitor', {
+        apiVersion: 'monitoring.coreos.com/v1',
+        kind: 'ServiceMonitor',
+        metadata: {
+            name,
+            namespace,
+            labels: { release: 'prometheus' },
+        },
+        spec: {
+            selector: { matchLabels: selector },
+            endpoints: [{ port, path, interval }],
+        },
+    }));
+    // Log aggregation with Loki
+    if (logs) {
+        if (!hasLoki) {
+            resources.push((0, core_1.declareOperator)(crds_1.operators['loki']()));
+        }
+        if (!hasLogging) {
+            resources.push((0, core_1.declareOperator)(crds_1.operators['logging-operator']()));
+        }
+        resources.push((0, loki_1.LokiStackComponent)({
+            metadata: { name: `${name}-loki`, namespace },
+            spec: {
+                size: '1x.small',
+                storage: {
+                    schemas: [{ version: 'v13', effectiveDate: '2024-01-01' }],
+                    secret: { name: `${name}-loki-storage`, type: 's3' },
+                },
+                storageClassName: 'standard',
+                tenants: {
+                    mode: 'static',
+                    authentication: [{ tenantName: 'application', tenantId: 'app' }],
+                    authorization: {
+                        roles: [
+                            {
+                                name: 'app-reader',
+                                permissions: ['read'],
+                                resources: ['logs'],
+                                tenants: ['application'],
+                            },
+                        ],
+                        roleBindings: [
+                            {
+                                name: 'app-reader-binding',
+                                roles: ['app-reader'],
+                                subjects: [{ kind: 'group', name: 'system:authenticated' }],
+                            },
+                        ],
+                    },
+                },
+            },
+        }));
+        resources.push((0, logging_1.LoggingComponent)({
+            metadata: { name: `${name}-logging`, namespace },
+            spec: {
+                fluentd: {},
+                fluentbit: {},
+                controlNamespace: namespace,
+            },
+        }));
+        resources.push((0, logging_1.OutputComponent)({
+            metadata: { name: `${name}-loki-output`, namespace },
+            spec: {
+                loki: {
+                    url: 'http://loki-gateway.loki.svc.cluster.local',
+                    tenant: 'application',
+                },
+            },
+        }));
+        resources.push((0, logging_1.FlowComponent)({
+            metadata: { name: `${name}-flow`, namespace },
+            spec: {
+                match: [{ select: { labels: selector } }],
+                localOutputRefs: [`${name}-loki-output`],
+            },
+        }));
+    }
+    return (0, core_1.jsx)(core_1.Fragment, { children: resources });
+}
+//# sourceMappingURL=monitoring.js.map

package/dist/monitoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"monitoring.js","sourceRoot":"","sources":["../src/monitoring.tsx"],"names":[],"mappings":";;AAsDA,gCAsHC;AA5KD,oCAAsE;AACtE,iDAAoD;AACpD,oCAAqC;AACrC,yCAAmD;AACnD,+CAAoF;AAqBpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,SAAgB,UAAU,CAAC,KAAsB;IAC/C,MAAM,EACJ,IAAI,EACJ,SAAS,GAAG,SAAS,EACrB,QAAQ,EACR,IAAI,GAAG,SAAS,EAChB,IAAI,GAAG,UAAU,EACjB,QAAQ,GAAG,KAAK,EAChB,IAAI,GAAG,KAAK,EACZ,WAAW,GAAG,MAAM,GACrB,GAAG,KAAK,CAAA;IAET,MAAM,eAAe,GAAG,IAAA,iBAAU,EAAC,0BAAe,CAAC,CAAA;IACnD,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,CAAC,CAAA;IAC5E,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAA;IAE/E,MAAM,SAAS,GAA6B,EAAE,CAAA;IAE9C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,SAAS,CAAC,IAAI,CAAC,IAAA,sBAAe,EAAC,gBAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAA;IAC5D,CAAC;IAED,SAAS,CAAC,IAAI,CACZ,IAAA,UAAG,EAAC,gBAAgB,EAAE;QACpB,UAAU,EAAE,0BAA0B;QACtC,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,IAAI;YACJ,SAAS;YACT,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;SAClC;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;YACnC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;SACtC;KACF,CAAC,CACH,CAAA;IAED,4BAA4B;IAC5B,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,IAAI,CAAC,IAAA,sBAAe,EAAC,gBAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS,CAAC,IAAI,CAAC,IAAA,sBAAe,EAAC,gBAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAA;QAClE,CAAC;QAED,SAAS,CAAC,IAAI,CACZ,IAAA,yBAAkB,EAAC;YACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,OAAO,EAAE,SAAS,EAAE;YAC7C,IAAI,EAAE;gBACJ,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE;oBACP,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;oBAC1D,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE;iBACrD;gBACD,gBAAgB,EAAE,UAAU;gBAC5B,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;oBAChE,aAAa,EAAE;wBACb,KAAK,EAAE;4BACL;gCACE,IAAI,EAAE,YAAY;gCAClB,WAAW,EAAE,CAAC,MAAM,CAAC;gCACrB,SAAS,EAAE,CAAC,MAAM,CAAC;gCACnB,OAAO,EAAE,CAAC,aAAa,CAAC;6BACzB;yBACF;wBACD,YAAY,EAAE;4BACZ;gCACE,IAAI,EAAE,oBAAoB;gCAC1B,KAAK,EAAE,CAAC,YAAY,CAAC;gCACrB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;6BAC5D;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CACH,CAAA;QAED,SAAS,CAAC,IAAI,CACZ,IAAA,0BAAgB,EAAC;YACf,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,UAAU,EAAE,SAAS,EAAE;YAChD,IAAI,EAAE;gBACJ,OAAO,EAAE,EAAE;gBACX,SAAS,EAAE,EAAE;gBACb,gBAAgB,EAAE,SAAS;aAC5B;SACF,CAAC,CACH,CAAA;QAED,SAAS,CAAC,IAAI,CACZ,IAAA,yBAAe,EAAC;YACd,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,cAAc,EAAE,SAAS,EAAE;YACpD,IAAI,EAAE;gBACJ,IAAI,EAAE;oBACJ,GAAG,EAAE,4CAA4C;oBACjD,MAAM,EAAE,aAAa;iBACtB;aACF;SACF,CAAC,CACH,CAAA;QAED,SAAS,CAAC,IAAI,CACZ,IAAA,uBAAa,EAAC;YACZ,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,OAAO,EAAE,SAAS,EAAE;YAC7C,IAAI,EAAE;gBACJ,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;gBACzC,eAAe,EAAE,CAAC,GAAG,IAAI,cAAc,CAAC;aACzC;SACF,CAAC,CACH,CAAA;IACH,CAAC;IAED,OAAO,IAAA,UAAG,EAAC,eAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;AAC/C,CAAC"}

package/dist/operators.d.ts

@@ -0,0 +1,19 @@
+/** CloudNativePG operator declaration */
+export declare const cnpgOperator: (version?: string) => import("@r8s/k8s-types").Operator;
+/** NGINX Ingress Controller operator declaration (not in operators.yaml — nginx-specific) */
+export declare const nginxIngressOperator: (version?: string) => {
+    name: string;
+    description: string;
+    source: {
+        type: "manifest";
+        url: string;
+        version: string;
+        namespace: string;
+    };
+    version: string;
+    namespace: string;
+    installCommand: string;
+};
+/** Vault Secrets Operator declaration */
+export declare const vaultSecretsOperator: (version?: string) => import("@r8s/k8s-types").Operator;
+//# sourceMappingURL=operators.d.ts.map

package/dist/operators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operators.d.ts","sourceRoot":"","sources":["../src/operators.ts"],"names":[],"mappings":"AAQA,yCAAyC;AACzC,eAAO,MAAM,YAAY,yDAAoB,CAAA;AAE7C,6FAA6F;AAC7F,eAAO,MAAM,oBAAoB,GAAI,gBAAkB;;;;;;;;;;;;CAYrD,CAAA;AAEF,yCAAyC;AACzC,eAAO,MAAM,oBAAoB,yDAAsC,CAAA"}

package/dist/operators.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.vaultSecretsOperator = exports.nginxIngressOperator = exports.cnpgOperator = void 0;
+/**
+ * Operator declarations re-exported from @r8s/crds.
+ *
+ * The canonical source is packages/crds/operators.yaml. These wrappers
+ * exist for backwards compatibility with recipes that import from here.
+ */
+const crds_1 = require("@r8s/crds");
+/** CloudNativePG operator declaration */
+exports.cnpgOperator = crds_1.operators['cnpg'];
+/** NGINX Ingress Controller operator declaration (not in operators.yaml — nginx-specific) */
+const nginxIngressOperator = (version = '1.15.1') => ({
+    name: 'nginx-ingress',
+    description: 'NGINX Ingress Controller',
+    source: {
+        type: 'manifest',
+        url: `https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v${version}/deploy/static/provider/cloud/deploy.yaml`,
+        version,
+        namespace: 'ingress-nginx',
+    },
+    version,
+    namespace: 'ingress-nginx',
+    installCommand: `kubectl apply --server-side -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v${version}/deploy/static/provider/cloud/deploy.yaml`,
+});
+exports.nginxIngressOperator = nginxIngressOperator;
+/** Vault Secrets Operator declaration */
+exports.vaultSecretsOperator = crds_1.operators['vault-secrets-operator'];
+//# sourceMappingURL=operators.js.map

package/dist/operators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operators.js","sourceRoot":"","sources":["../src/operators.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACH,oCAAqC;AAErC,yCAAyC;AAC5B,QAAA,YAAY,GAAG,gBAAS,CAAC,MAAM,CAAC,CAAA;AAE7C,6FAA6F;AACtF,MAAM,oBAAoB,GAAG,CAAC,OAAO,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3D,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,0BAA0B;IACvC,MAAM,EAAE;QACN,IAAI,EAAE,UAAmB;QACzB,GAAG,EAAE,0EAA0E,OAAO,2CAA2C;QACjI,OAAO;QACP,SAAS,EAAE,eAAe;KAC3B;IACD,OAAO;IACP,SAAS,EAAE,eAAe;IAC1B,cAAc,EAAE,yGAAyG,OAAO,2CAA2C;CAC5K,CAAC,CAAA;AAZW,QAAA,oBAAoB,wBAY/B;AAEF,yCAAyC;AAC5B,QAAA,oBAAoB,GAAG,gBAAS,CAAC,wBAAwB,CAAC,CAAA"}