@reyemtech/nimbus 1.3.0 → 2.0.1

package/dist/esm/operator/neo4j.js

@@ -0,0 +1,431 @@
+"use strict";
+/**
+ * Neo4j backend — deploys Neo4j via the official Helm chart
+ * (helm.neo4j.com/neo4j) with full operator-level lifecycle management:
+ *
+ * - Scheduled S3 backups via CronJob (neo4j-admin database dump + aws s3 cp)
+ * - Prometheus metrics via ServiceMonitor
+ * - User provisioning via cypher-shell Jobs
+ * - Connection secret replication to target namespaces
+ *
+ * Neo4j Community supports a single user database. Enterprise
+ * supports multiple databases. User provisioning works on both.
+ *
+ * @module operator/neo4j
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createNeo4jCluster = createNeo4jCluster;
+const crypto = __importStar(require("node:crypto"));
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const ensure_namespace_1 = require("../utils/ensure-namespace");
+const storage_tiers_1 = require("../types/storage-tiers");
+const dashboards_1 = require("../observability/dashboards");
+const alerts_1 = require("../observability/alerts");
+const DATA_NAMESPACE = "data";
+const NEO4J_BOLT_PORT = 7687;
+const NEO4J_HTTP_PORT = 7474;
+const NEO4J_METRICS_PORT = 2004;
+/**
+ * Build Neo4j Helm values from config.
+ */
+function buildNeo4jHelmValues(name, config, storageTiers) {
+    const storageGb = config?.storageGb ?? 10;
+    const cpu = config?.resources?.cpu ?? "1";
+    const memory = config?.resources?.memory ?? "4Gi";
+    const storageClass = (0, storage_tiers_1.resolveStorageTier)(config?.storageTier ?? "performance", storageTiers);
+    const metricsEnabled = config?.metrics !== false;
+    const neo4jConfig = {
+        "server.memory.heap.initial_size": "2G",
+        "server.memory.pagecache.size": "1G",
+        ...(config?.config ?? {}),
+    };
+    // Enable Prometheus metrics endpoint. This is Enterprise-only but harmless
+    // on Community (the config is accepted but the endpoint doesn't activate).
+    // On Enterprise, it exposes metrics at :2004/metrics.
+    if (metricsEnabled) {
+        neo4jConfig["server.metrics.prometheus.enabled"] = "true";
+        neo4jConfig["server.metrics.prometheus.endpoint"] = `0.0.0.0:${NEO4J_METRICS_PORT}`;
+        neo4jConfig["server.metrics.filter"] = "*";
+    }
+    const values = {
+        neo4j: {
+            name,
+            resources: { cpu, memory },
+        },
+        volumes: {
+            data: {
+                mode: "dynamic",
+                dynamic: {
+                    ...(storageClass ? { storageClassName: storageClass } : {}),
+                    requests: { storage: `${storageGb}Gi` },
+                },
+            },
+        },
+        config: neo4jConfig,
+        // Default to ClusterIP (no public exposure)
+        services: {
+            default: { type: "ClusterIP" },
+            neo4j: { enabled: false },
+        },
+    };
+    if (config?.apoc !== false) {
+        values["apoc_config"] = {
+            "apoc.trigger.enabled": "true",
+            "apoc.import.file.enabled": "true",
+        };
+    }
+    // Use chart's built-in ServiceMonitor (works with Enterprise metrics endpoint)
+    if (metricsEnabled) {
+        values["serviceMonitor"] = {
+            enabled: true,
+            labels: { release: "reyemtech-kube-prometheus-stack" },
+            port: String(NEO4J_METRICS_PORT),
+            path: "/metrics",
+            interval: "30s",
+        };
+    }
+    return { ...values, ...(config?.values ?? {}) };
+}
+/**
+ * Create a Neo4j graph database cluster via the official Helm chart.
+ *
+ * Provides full operator-level lifecycle: deployment, backup, monitoring,
+ * user provisioning, and connection secret replication.
+ */
+function createNeo4jCluster(name, config, backupDefaults, provider, operatorRelease, storageTiers) {
+    const namespace = (0, ensure_namespace_1.ensureNamespace)(DATA_NAMESPACE, provider);
+    const neo4jPassword = config?.password
+        ? pulumi.output(config.password)
+        : pulumi.secret(crypto.randomBytes(24).toString("base64url"));
+    // -------------------------------------------------------------------------
+    // 1. Admin credentials Secret
+    // -------------------------------------------------------------------------
+    const passwordSecretName = `${name}-neo4j-auth`;
+    const passwordSecret = new k8s.core.v1.Secret(`${name}-neo4j-auth`, {
+        metadata: {
+            name: passwordSecretName,
+            namespace: DATA_NAMESPACE,
+            labels: { "app.kubernetes.io/managed-by": "nimbus" },
+        },
+        stringData: {
+            NEO4J_AUTH: pulumi.interpolate `neo4j/${neo4jPassword}`,
+            password: neo4jPassword,
+        },
+    }, { provider, dependsOn: [namespace, operatorRelease], ignoreChanges: ["data", "stringData"] });
+    // -------------------------------------------------------------------------
+    // 2. Helm deployment
+    // -------------------------------------------------------------------------
+    const helmValues = buildNeo4jHelmValues(name, config, storageTiers);
+    const neo4jValues = helmValues["neo4j"] ?? {};
+    neo4jValues["password"] = neo4jPassword;
+    helmValues["neo4j"] = neo4jValues;
+    const release = new k8s.helm.v3.Release(`${name}-neo4j`, {
+        chart: "neo4j",
+        repositoryOpts: { repo: "https://helm.neo4j.com/neo4j" },
+        namespace: DATA_NAMESPACE,
+        createNamespace: false,
+        values: helmValues,
+    }, { provider, dependsOn: [namespace, operatorRelease, passwordSecret] });
+    const releaseName = release.status.apply((s) => s?.name ?? `${name}-neo4j`);
+    const endpoint = releaseName.apply((rn) => `${rn}.${DATA_NAMESPACE}.svc.cluster.local`);
+    const port = pulumi.output(NEO4J_BOLT_PORT);
+    // -------------------------------------------------------------------------
+    // 3. Scheduled backups via CronJob (neo4j-admin dump → S3)
+    // -------------------------------------------------------------------------
+    if (backupDefaults) {
+        const backupSchedule = backupDefaults.schedule ?? "0 3 * * *";
+        const retentionDays = backupDefaults.retentionDays ?? 7;
+        // Backup S3 credentials Secret
+        const backupCredsName = `${name}-neo4j-backup-s3`;
+        new k8s.core.v1.Secret(`${name}-neo4j-backup-creds`, {
+            metadata: {
+                name: backupCredsName,
+                namespace: DATA_NAMESPACE,
+                labels: { "app.kubernetes.io/managed-by": "nimbus" },
+            },
+            stringData: {
+                AWS_ACCESS_KEY_ID: backupDefaults.target.credentials.accessKeyId,
+                AWS_SECRET_ACCESS_KEY: backupDefaults.target.credentials.secretAccessKey,
+                AWS_DEFAULT_REGION: backupDefaults.target.region,
+            },
+        }, { provider, dependsOn: [namespace] });
+        // CronJob: dump neo4j database → upload to S3
+        new k8s.batch.v1.CronJob(`${name}-neo4j-backup`, {
+            metadata: {
+                name: `${name}-neo4j-backup`,
+                namespace: DATA_NAMESPACE,
+                labels: { "app.kubernetes.io/managed-by": "nimbus" },
+            },
+            spec: {
+                schedule: backupSchedule,
+                concurrencyPolicy: "Forbid",
+                successfulJobsHistoryLimit: 3,
+                failedJobsHistoryLimit: 3,
+                jobTemplate: {
+                    spec: {
+                        ttlSecondsAfterFinished: 86400,
+                        backoffLimit: 2,
+                        template: {
+                            metadata: {
+                                labels: {
+                                    "app.kubernetes.io/managed-by": "nimbus",
+                                    "nimbus/cluster": name,
+                                    "nimbus/backup": "neo4j",
+                                },
+                            },
+                            spec: {
+                                restartPolicy: "Never",
+                                affinity: {
+                                    podAffinity: {
+                                        requiredDuringSchedulingIgnoredDuringExecution: [
+                                            {
+                                                labelSelector: {
+                                                    matchLabels: { app: name },
+                                                },
+                                                topologyKey: "kubernetes.io/hostname",
+                                            },
+                                        ],
+                                    },
+                                },
+                                containers: [
+                                    {
+                                        name: "neo4j-backup",
+                                        image: "alpine:latest",
+                                        command: [
+                                            "sh",
+                                            "-c",
+                                            [
+                                                // Install AWS CLI (alpine has tar built-in)
+                                                `apk add --no-cache aws-cli > /dev/null 2>&1`,
+                                                `TIMESTAMP=$(date +%Y%m%d-%H%M%S)`,
+                                                `ARCHIVE="/tmp/${name}-neo4j-\${TIMESTAMP}.tar.gz"`,
+                                                `S3_PATH="s3://$BACKUP_BUCKET/neo4j/${name}/\${TIMESTAMP}.tar.gz"`,
+                                                // Tar the data directory (read-only mount, online-safe file copy)
+                                                `tar czf "\${ARCHIVE}" -C /data .`,
+                                                // Upload to S3
+                                                `aws s3 cp "\${ARCHIVE}" "\${S3_PATH}"`,
+                                                // Clean up old backups (retention)
+                                                `aws s3 ls "s3://$BACKUP_BUCKET/neo4j/${name}/" | while read -r line; do`,
+                                                `  file_date=$(echo "$line" | awk '{print $1}')`,
+                                                `  file_name=$(echo "$line" | awk '{print $4}')`,
+                                                `  if [ -n "$file_date" ] && [ -n "$file_name" ]; then`,
+                                                `    days_old=$(( ($(date +%s) - $(date -d "$file_date" +%s 2>/dev/null || echo 0)) / 86400 ))`,
+                                                `    if [ "$days_old" -gt "${retentionDays}" ]; then`,
+                                                `      aws s3 rm "s3://$BACKUP_BUCKET/neo4j/${name}/$file_name"`,
+                                                `    fi`,
+                                                `  fi`,
+                                                `done || true`,
+                                                `echo "Backup complete: \${S3_PATH}"`,
+                                            ].join("\n"),
+                                        ],
+                                        env: [
+                                            {
+                                                name: "BACKUP_BUCKET",
+                                                value: backupDefaults.target.bucket,
+                                            },
+                                        ],
+                                        envFrom: [{ secretRef: { name: backupCredsName } }],
+                                        volumeMounts: [
+                                            {
+                                                name: "data",
+                                                mountPath: "/data",
+                                                readOnly: true,
+                                            },
+                                        ],
+                                    },
+                                ],
+                                volumes: [
+                                    {
+                                        name: "data",
+                                        persistentVolumeClaim: {
+                                            claimName: releaseName.apply((rn) => `data-${rn}-0`),
+                                            readOnly: true,
+                                        },
+                                    },
+                                ],
+                            },
+                        },
+                    },
+                },
+            },
+        }, { provider, dependsOn: [release] });
+    }
+    // -------------------------------------------------------------------------
+    // 4. Per-cluster Grafana dashboard
+    // -------------------------------------------------------------------------
+    (0, dashboards_1.createNeo4jClusterDashboard)(name, "observability", provider, [release]);
+    // Per-cluster alert rules
+    (0, alerts_1.createPrometheusRule)(`${name}-neo4j-alerts`, "observability", [
+        {
+            name: `nimbus.neo4j.${name}`,
+            rules: [
+                {
+                    alert: "Neo4jDown",
+                    expr: `up{job=~".*neo4j.*",instance=~"${name}.*"} == 0`,
+                    for: "2m",
+                    labels: { severity: "critical" },
+                    annotations: { summary: `Neo4j instance ${name} is DOWN` },
+                },
+            ],
+        },
+    ], provider, [release]);
+    // -------------------------------------------------------------------------
+    // 6. Return IClusterInstance with createDatabase()
+    // -------------------------------------------------------------------------
+    return {
+        name,
+        engine: "neo4j",
+        endpoint,
+        port,
+        nativeResource: release,
+        createDatabase(dbName, dbConfig) {
+            const username = dbConfig.owner ?? dbName;
+            const userSecretName = `${name}-${dbName}-neo4j-user`;
+            // Generate per-database user password
+            const userPassword = pulumi.secret(crypto.randomBytes(24).toString("base64url"));
+            const userPasswordSecret = new k8s.core.v1.Secret(`${name}-${dbName}-neo4j-password`, {
+                metadata: {
+                    name: userSecretName,
+                    namespace: DATA_NAMESPACE,
+                    labels: {
+                        "app.kubernetes.io/managed-by": "nimbus",
+                        "nimbus/cluster": name,
+                        "nimbus/database": dbName,
+                    },
+                },
+                stringData: { username, password: userPassword },
+            }, { provider, dependsOn: [release], ignoreChanges: ["data", "stringData"] });
+            // Read stored password for stability across deploys
+            const storedUserSecret = k8s.core.v1.Secret.get(`${name}-${dbName}-neo4j-user-read`, pulumi.interpolate `${DATA_NAMESPACE}/${userSecretName}`, { provider, dependsOn: [userPasswordSecret] });
+            const stablePassword = storedUserSecret.data.apply((d) => Buffer.from(d?.["password"] ?? "", "base64").toString());
+            // Job: create user via cypher-shell
+            const jobName = `neo4j-init-user-${name}-${dbName}`;
+            const initJob = new k8s.batch.v1.Job(jobName, {
+                metadata: {
+                    name: jobName,
+                    namespace: DATA_NAMESPACE,
+                    labels: {
+                        "app.kubernetes.io/managed-by": "nimbus",
+                        "nimbus/cluster": name,
+                        "nimbus/database": dbName,
+                    },
+                },
+                spec: {
+                    ttlSecondsAfterFinished: 300,
+                    backoffLimit: 5,
+                    template: {
+                        metadata: { labels: { "nimbus/database": dbName } },
+                        spec: {
+                            restartPolicy: "Never",
+                            containers: [
+                                {
+                                    name: "cypher-shell",
+                                    image: "neo4j:community",
+                                    command: [
+                                        "sh",
+                                        "-c",
+                                        [
+                                            `cypher-shell -a "bolt://$NEO4J_HOST:${NEO4J_BOLT_PORT}" -u neo4j -p "$NEO4J_ADMIN_PASSWORD" "CREATE USER \\\`$DB_USER\\\` IF NOT EXISTS SET PLAINTEXT PASSWORD '$DB_PASSWORD' SET PASSWORD CHANGE NOT REQUIRED"`,
+                                            // GRANT ROLE is Enterprise-only; gracefully skip on Community
+                                            `cypher-shell -a "bolt://$NEO4J_HOST:${NEO4J_BOLT_PORT}" -u neo4j -p "$NEO4J_ADMIN_PASSWORD" "GRANT ROLE reader, editor TO \\\`$DB_USER\\\`" || true`,
+                                        ].join(" && "),
+                                    ],
+                                    env: [
+                                        { name: "NEO4J_HOST", value: endpoint },
+                                        {
+                                            name: "NEO4J_ADMIN_PASSWORD",
+                                            valueFrom: {
+                                                secretKeyRef: { name: passwordSecretName, key: "password" },
+                                            },
+                                        },
+                                        { name: "DB_USER", value: username },
+                                        {
+                                            name: "DB_PASSWORD",
+                                            valueFrom: {
+                                                secretKeyRef: { name: userSecretName, key: "password" },
+                                            },
+                                        },
+                                    ],
+                                },
+                            ],
+                        },
+                    },
+                },
+            }, { provider, dependsOn: [release, userPasswordSecret] });
+            // Replicate connection secrets to target namespaces
+            const secrets = {};
+            for (const targetNs of dbConfig.namespaces) {
+                const nsResource = (0, ensure_namespace_1.ensureNamespace)(targetNs, provider);
+                const secretName = `${name}-${dbName}-neo4j`;
+                new k8s.core.v1.Secret(`${name}-${dbName}-neo4j-secret-${targetNs}`, {
+                    metadata: {
+                        name: secretName,
+                        namespace: targetNs,
+                        labels: {
+                            "app.kubernetes.io/managed-by": "nimbus",
+                            "nimbus/cluster": name,
+                            "nimbus/database": dbName,
+                        },
+                    },
+                    stringData: {
+                        host: endpoint,
+                        port: String(NEO4J_BOLT_PORT),
+                        httpPort: String(NEO4J_HTTP_PORT),
+                        username,
+                        password: stablePassword,
+                        database: dbName,
+                        uri: pulumi
+                            .all([endpoint, stablePassword])
+                            .apply(([h, pw]) => `bolt://${username}:${pw}@${h}:${NEO4J_BOLT_PORT}`),
+                    },
+                }, { provider, dependsOn: [initJob, nsResource] });
+                secrets[targetNs] = pulumi.output(secretName);
+            }
+            return {
+                name: dbName,
+                clusterName: name,
+                host: endpoint,
+                port,
+                database: pulumi.output(dbName),
+                secrets,
+                nativeResource: initJob,
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            };
+        },
+    };
+}
+//# sourceMappingURL=neo4j.js.map

package/dist/esm/operator/neo4j.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"neo4j.js","sourceRoot":"","sources":["../../../src/operator/neo4j.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0HH,gDAkXC;AA1eD,oDAAsC;AACtC,wDAA0C;AAC1C,uDAAyC;AACzC,gEAA4D;AAC5D,0DAAmG;AAOnG,4DAA0E;AAC1E,oDAA+D;AAE/D,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAyBhC;;GAEG;AACH,SAAS,oBAAoB,CAC3B,IAAY,EACZ,MAAuC,EACvC,YAA6B;IAE7B,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,GAAG,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,IAAI,KAAK,CAAC;IAClD,MAAM,YAAY,GAAG,IAAA,kCAAkB,EAAC,MAAM,EAAE,WAAW,IAAI,aAAa,EAAE,YAAY,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC;IAEjD,MAAM,WAAW,GAA2B;QAC1C,iCAAiC,EAAE,IAAI;QACvC,8BAA8B,EAAE,IAAI;QACpC,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC;KAC1B,CAAC;IAEF,2EAA2E;IAC3E,2EAA2E;IAC3E,sDAAsD;IACtD,IAAI,cAAc,EAAE,CAAC;QACnB,WAAW,CAAC,mCAAmC,CAAC,GAAG,MAAM,CAAC;QAC1D,WAAW,CAAC,oCAAoC,CAAC,GAAG,WAAW,kBAAkB,EAAE,CAAC;QACpF,WAAW,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAA4B;QACtC,KAAK,EAAE;YACL,IAAI;YACJ,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;SAC3B;QACD,OAAO,EAAE;YACP,IAAI,EAAE;gBACJ,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE;oBACP,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,SAAS,IAAI,EAAE;iBACxC;aACF;SACF;QACD,MAAM,EAAE,WAAW;QACnB,4CAA4C;QAC5C,QAAQ,EAAE;YACR,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YAC9B,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAC1B;KACF,CAAC;IAEF,IAAI,MAAM,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAkD,CAAC,aAAa,CAAC,GAAG;YACnE,sBAAsB,EAAE,MAAM;YAC9B,0BAA0B,EAAE,MAAM;SACnC,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,gBAAgB,CAAC,GAAG;YACzB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE;YACtD,IAAI,EAAE,MAAM,CAAC,kBAAkB,CAAC;YAChC,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAChC,IAAY,EACZ,MAAuC,EACvC,cAA2C,EAC3C,QAAsB,EACtB,eAAoC,EACpC,YAA6B;IAE7B,MAAM,SAAS,GAAG,IAAA,kCAAe,EAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,MAAM,EAAE,QAAQ;QACpC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAChC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAEhE,4EAA4E;IAC5E,8BAA8B;IAC9B,4EAA4E;IAC5E,MAAM,kBAAkB,GAAG,GAAG,IAAI,aAAa,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAC3C,GAAG,IAAI,aAAa,EACpB;QACE,QAAQ,EAAE;YACR,IAAI,EAAE,kBAAkB;YACxB,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE,EAAE,8BAA8B,EAAE,QAAQ,EAAE;SACrD;QACD,UAAU,EAAE;YACV,UAAU,EAAE,MAAM,CAAC,WAAW,CAAA,SAAS,aAAa,EAAE;YACtD,QAAQ,EAAE,aAAa;SACxB;KACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAC7F,CAAC;IAEF,4EAA4E;IAC5E,qBAAqB;IACrB,4EAA4E;IAC5E,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACpE,MAAM,WAAW,GAAI,UAAsD,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3F,WAAW,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC;IACvC,UAAsC,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC;IAE/D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CACrC,GAAG,IAAI,QAAQ,EACf;QACE,KAAK,EAAE,OAAO;QACd,cAAc,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE;QACxD,SAAS,EAAE,cAAc;QACzB,eAAe,EAAE,KAAK;QACtB,MAAM,EAAE,UAAU;KACnB,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,cAAc,CAAC,EAAE,CACtE,CAAC;IAEF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI,GAAG,IAAI,QAAQ,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,cAAc,oBAAoB,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAE5C,4EAA4E;IAC5E,2DAA2D;IAC3D,4EAA4E;IAC5E,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,cAAc,GAAG,cAAc,CAAC,QAAQ,IAAI,WAAW,CAAC;QAC9D,MAAM,aAAa,GAAG,cAAc,CAAC,aAAa,IAAI,CAAC,CAAC;QAExD,+BAA+B;QAC/B,MAAM,eAAe,GAAG,GAAG,IAAI,kBAAkB,CAAC;QAClD,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACpB,GAAG,IAAI,qBAAqB,EAC5B;YACE,QAAQ,EAAE;gBACR,IAAI,EAAE,eAAe;gBACrB,SAAS,EAAE,cAAc;gBACzB,MAAM,EAAE,EAAE,8BAA8B,EAAE,QAAQ,EAAE;aACrD;YACD,UAAU,EAAE;gBACV,iBAAiB,EAAE,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW;gBAChE,qBAAqB,EAAE,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;gBACxE,kBAAkB,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM;aACjD;SACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CACrC,CAAC;QAEF,8CAA8C;QAC9C,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CACtB,GAAG,IAAI,eAAe,EACtB;YACE,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,eAAe;gBAC5B,SAAS,EAAE,cAAc;gBACzB,MAAM,EAAE,EAAE,8BAA8B,EAAE,QAAQ,EAAE;aACrD;YACD,IAAI,EAAE;gBACJ,QAAQ,EAAE,cAAc;gBACxB,iBAAiB,EAAE,QAAQ;gBAC3B,0BAA0B,EAAE,CAAC;gBAC7B,sBAAsB,EAAE,CAAC;gBACzB,WAAW,EAAE;oBACX,IAAI,EAAE;wBACJ,uBAAuB,EAAE,KAAK;wBAC9B,YAAY,EAAE,CAAC;wBACf,QAAQ,EAAE;4BACR,QAAQ,EAAE;gCACR,MAAM,EAAE;oCACN,8BAA8B,EAAE,QAAQ;oCACxC,gBAAgB,EAAE,IAAI;oCACtB,eAAe,EAAE,OAAO;iCACzB;6BACF;4BACD,IAAI,EAAE;gCACJ,aAAa,EAAE,OAAO;gCACtB,QAAQ,EAAE;oCACR,WAAW,EAAE;wCACX,8CAA8C,EAAE;4CAC9C;gDACE,aAAa,EAAE;oDACb,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;iDAC3B;gDACD,WAAW,EAAE,wBAAwB;6CACtC;yCACF;qCACF;iCACF;gCACD,UAAU,EAAE;oCACV;wCACE,IAAI,EAAE,cAAc;wCACpB,KAAK,EAAE,eAAe;wCACtB,OAAO,EAAE;4CACP,IAAI;4CACJ,IAAI;4CACJ;gDACE,4CAA4C;gDAC5C,6CAA6C;gDAC7C,kCAAkC;gDAClC,iBAAiB,IAAI,8BAA8B;gDACnD,sCAAsC,IAAI,wBAAwB;gDAClE,kEAAkE;gDAClE,kCAAkC;gDAClC,eAAe;gDACf,uCAAuC;gDACvC,mCAAmC;gDACnC,wCAAwC,IAAI,6BAA6B;gDACzE,gDAAgD;gDAChD,gDAAgD;gDAChD,uDAAuD;gDACvD,+FAA+F;gDAC/F,6BAA6B,aAAa,WAAW;gDACrD,8CAA8C,IAAI,cAAc;gDAChE,QAAQ;gDACR,MAAM;gDACN,cAAc;gDACd,qCAAqC;6CACtC,CAAC,IAAI,CAAC,IAAI,CAAC;yCACb;wCACD,GAAG,EAAE;4CACH;gDACE,IAAI,EAAE,eAAe;gDACrB,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM;6CACpC;yCACF;wCACD,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC;wCACnD,YAAY,EAAE;4CACZ;gDACE,IAAI,EAAE,MAAM;gDACZ,SAAS,EAAE,OAAO;gDAClB,QAAQ,EAAE,IAAI;6CACf;yCACF;qCACF;iCACF;gCACD,OAAO,EAAE;oCACP;wCACE,IAAI,EAAE,MAAM;wCACZ,qBAAqB,EAAE;4CACrB,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC;4CACpD,QAAQ,EAAE,IAAI;yCACf;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,CACnC,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,mCAAmC;IACnC,4EAA4E;IAC5E,IAAA,wCAA2B,EAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAExE,0BAA0B;IAC1B,IAAA,6BAAoB,EAClB,GAAG,IAAI,eAAe,EACtB,eAAe,EACf;QACE;YACE,IAAI,EAAE,gBAAgB,IAAI,EAAE;YAC5B,KAAK,EAAE;gBACL;oBACE,KAAK,EAAE,WAAW;oBAClB,IAAI,EAAE,kCAAkC,IAAI,WAAW;oBACvD,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;oBAChC,WAAW,EAAE,EAAE,OAAO,EAAE,kBAAkB,IAAI,UAAU,EAAE;iBAC3D;aACF;SACF;KACF,EACD,QAAQ,EACR,CAAC,OAAO,CAAC,CACV,CAAC;IAEF,4EAA4E;IAC5E,mDAAmD;IACnD,4EAA4E;IAC5E,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,OAAgB;QACxB,QAAQ;QACR,IAAI;QACJ,cAAc,EAAE,OAAO;QAEvB,cAAc,CACZ,MAAc,EACd,QAAiC;YAEjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC;YAC1C,MAAM,cAAc,GAAG,GAAG,IAAI,IAAI,MAAM,aAAa,CAAC;YAEtD,sCAAsC;YACtC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YACjF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAC/C,GAAG,IAAI,IAAI,MAAM,iBAAiB,EAClC;gBACE,QAAQ,EAAE;oBACR,IAAI,EAAE,cAAc;oBACpB,SAAS,EAAE,cAAc;oBACzB,MAAM,EAAE;wBACN,8BAA8B,EAAE,QAAQ;wBACxC,gBAAgB,EAAE,IAAI;wBACtB,iBAAiB,EAAE,MAAM;qBAC1B;iBACF;gBACD,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE;aACjD,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAC1E,CAAC;YAEF,oDAAoD;YACpD,MAAM,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAC7C,GAAG,IAAI,IAAI,MAAM,kBAAkB,EACnC,MAAM,CAAC,WAAW,CAAA,GAAG,cAAc,IAAI,cAAc,EAAE,EACvD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAC9C,CAAC;YACF,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACvD,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CACxD,CAAC;YAEF,oCAAoC;YACpC,MAAM,OAAO,GAAG,mBAAmB,IAAI,IAAI,MAAM,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAClC,OAAO,EACP;gBACE,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO;oBACb,SAAS,EAAE,cAAc;oBACzB,MAAM,EAAE;wBACN,8BAA8B,EAAE,QAAQ;wBACxC,gBAAgB,EAAE,IAAI;wBACtB,iBAAiB,EAAE,MAAM;qBAC1B;iBACF;gBACD,IAAI,EAAE;oBACJ,uBAAuB,EAAE,GAAG;oBAC5B,YAAY,EAAE,CAAC;oBACf,QAAQ,EAAE;wBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE;wBACnD,IAAI,EAAE;4BACJ,aAAa,EAAE,OAAO;4BACtB,UAAU,EAAE;gCACV;oCACE,IAAI,EAAE,cAAc;oCACpB,KAAK,EAAE,iBAAiB;oCACxB,OAAO,EAAE;wCACP,IAAI;wCACJ,IAAI;wCACJ;4CACE,uCAAuC,eAAe,2JAA2J;4CACjN,8DAA8D;4CAC9D,uCAAuC,eAAe,+FAA+F;yCACtJ,CAAC,IAAI,CAAC,MAAM,CAAC;qCACf;oCACD,GAAG,EAAE;wCACH,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE;wCACvC;4CACE,IAAI,EAAE,sBAAsB;4CAC5B,SAAS,EAAE;gDACT,YAAY,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,UAAU,EAAE;6CAC5D;yCACF;wCACD,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE;wCACpC;4CACE,IAAI,EAAE,aAAa;4CACnB,SAAS,EAAE;gDACT,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE;6CACxD;yCACF;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,CACvD,CAAC;YAEF,oDAAoD;YACpD,MAAM,OAAO,GAA0C,EAAE,CAAC;YAE1D,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;gBAC3C,MAAM,UAAU,GAAG,IAAA,kCAAe,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACvD,MAAM,UAAU,GAAG,GAAG,IAAI,IAAI,MAAM,QAAQ,CAAC;gBAE7C,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACpB,GAAG,IAAI,IAAI,MAAM,iBAAiB,QAAQ,EAAE,EAC5C;oBACE,QAAQ,EAAE;wBACR,IAAI,EAAE,UAAU;wBAChB,SAAS,EAAE,QAAQ;wBACnB,MAAM,EAAE;4BACN,8BAA8B,EAAE,QAAQ;4BACxC,gBAAgB,EAAE,IAAI;4BACtB,iBAAiB,EAAE,MAAM;yBAC1B;qBACF;oBACD,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC;wBAC7B,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC;wBACjC,QAAQ;wBACR,QAAQ,EAAE,cAAc;wBACxB,QAAQ,EAAE,MAAM;wBAChB,GAAG,EAAE,MAAM;6BACR,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;6BAC/B,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,QAAQ,IAAI,EAAE,IAAI,CAAC,IAAI,eAAe,EAAE,CAAC;qBAC1E;iBACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAC/C,CAAC;gBAEF,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAChD,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,IAAI;gBACjB,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC/B,OAAO;gBACP,cAAc,EAAE,OAAO;gBACvB,8DAA8D;aACxD,CAAC;QACX,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/platform/components/argocd.d.ts

@@ -0,0 +1,9 @@
+/**
+ * ArgoCD GitOps deployment.
+ *
+ * @module platform/components/argocd
+ */
+import * as k8s from "@pulumi/kubernetes";
+import type { IPlatformComponentConfig } from "../interfaces";
+export declare function deployArgocd(name: string, config: IPlatformComponentConfig, domain: string, provider: k8s.Provider, defaultVersion: string | undefined): k8s.helm.v3.Release;
+//# sourceMappingURL=argocd.d.ts.map

package/dist/esm/platform/components/argocd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"argocd.d.ts","sourceRoot":"","sources":["../../../../src/platform/components/argocd.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,wBAAwB,EAChC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,GAAG,CAAC,QAAQ,EACtB,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CA0CrB"}

package/dist/esm/platform/components/argocd.js

@@ -0,0 +1,82 @@
+"use strict";
+/**
+ * ArgoCD GitOps deployment.
+ *
+ * @module platform/components/argocd
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deployArgocd = deployArgocd;
+const k8s = __importStar(require("@pulumi/kubernetes"));
+function deployArgocd(name, config, domain, provider, defaultVersion) {
+    return new k8s.helm.v3.Release(`${name}-argocd`, {
+        chart: "argo-cd",
+        repositoryOpts: { repo: "https://argoproj.github.io/argo-helm" },
+        version: config.version ?? defaultVersion,
+        namespace: "argocd",
+        createNamespace: true,
+        values: {
+            configs: {
+                params: { "server.insecure": true },
+            },
+            server: {
+                ingress: {
+                    enabled: true,
+                    ingressClassName: "traefik",
+                    hostname: `argocd.${domain}`,
+                    tls: true,
+                    extraTls: [
+                        {
+                            secretName: `${domain.replace(/\./g, "-")}-wildcard-tls`,
+                            hosts: [`argocd.${domain}`],
+                        },
+                    ],
+                    annotations: {
+                        "traefik.ingress.kubernetes.io/router.entrypoints": "websecure",
+                    },
+                },
+                metrics: { enabled: true, serviceMonitor: { enabled: true } },
+            },
+            controller: {
+                metrics: { enabled: true, serviceMonitor: { enabled: true } },
+            },
+            repoServer: {
+                metrics: { enabled: true, serviceMonitor: { enabled: true } },
+            },
+            ...config.values,
+        },
+    }, { provider });
+}
+//# sourceMappingURL=argocd.js.map

package/dist/esm/platform/components/argocd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"argocd.js","sourceRoot":"","sources":["../../../../src/platform/components/argocd.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKH,oCAgDC;AAnDD,wDAA0C;AAG1C,SAAgB,YAAY,CAC1B,IAAY,EACZ,MAAgC,EAChC,MAAc,EACd,QAAsB,EACtB,cAAkC;IAElC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,GAAG,IAAI,SAAS,EAChB;QACE,KAAK,EAAE,SAAS;QAChB,cAAc,EAAE,EAAE,IAAI,EAAE,sCAAsC,EAAE;QAChE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,cAAc;QACzC,SAAS,EAAE,QAAQ;QACnB,eAAe,EAAE,IAAI;QACrB,MAAM,EAAE;YACN,OAAO,EAAE;gBACP,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE;aACpC;YACD,MAAM,EAAE;gBACN,OAAO,EAAE;oBACP,OAAO,EAAE,IAAI;oBACb,gBAAgB,EAAE,SAAS;oBAC3B,QAAQ,EAAE,UAAU,MAAM,EAAE;oBAC5B,GAAG,EAAE,IAAI;oBACT,QAAQ,EAAE;wBACR;4BACE,UAAU,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,eAAe;4BACxD,KAAK,EAAE,CAAC,UAAU,MAAM,EAAE,CAAC;yBAC5B;qBACF;oBACD,WAAW,EAAE;wBACX,kDAAkD,EAAE,WAAW;qBAChE;iBACF;gBACD,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;aAC9D;YACD,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;aAC9D;YACD,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;aAC9D;YACD,GAAG,MAAM,CAAC,MAAM;SACjB;KACF,EACD,EAAE,QAAQ,EAAE,CACb,CAAC;AACJ,CAAC"}

package/dist/esm/platform/components/cert-manager.d.ts

@@ -0,0 +1,9 @@
+/**
+ * cert-manager TLS certificate management deployment.
+ *
+ * @module platform/components/cert-manager
+ */
+import * as k8s from "@pulumi/kubernetes";
+import type { IPlatformComponentConfig } from "../interfaces";
+export declare function deployCertManager(name: string, config: IPlatformComponentConfig | undefined, provider: k8s.Provider, defaultVersion: string | undefined): k8s.helm.v3.Release;
+//# sourceMappingURL=cert-manager.d.ts.map

package/dist/esm/platform/components/cert-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-manager.d.ts","sourceRoot":"","sources":["../../../../src/platform/components/cert-manager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,wBAAwB,GAAG,SAAS,EAC5C,QAAQ,EAAE,GAAG,CAAC,QAAQ,EACtB,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAgBrB"}

package/dist/esm/platform/components/cert-manager.js

@@ -0,0 +1,56 @@
+"use strict";
+/**
+ * cert-manager TLS certificate management deployment.
+ *
+ * @module platform/components/cert-manager
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deployCertManager = deployCertManager;
+const k8s = __importStar(require("@pulumi/kubernetes"));
+function deployCertManager(name, config, provider, defaultVersion) {
+    return new k8s.helm.v3.Release(`${name}-cert-manager`, {
+        chart: "cert-manager",
+        repositoryOpts: { repo: "https://charts.jetstack.io" },
+        version: config?.version ?? defaultVersion,
+        namespace: "cert-manager",
+        createNamespace: true,
+        values: {
+            crds: { enabled: true },
+            ...config?.values,
+        },
+    }, { provider });
+}
+//# sourceMappingURL=cert-manager.js.map

package/dist/esm/platform/components/cert-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-manager.js","sourceRoot":"","sources":["../../../../src/platform/components/cert-manager.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKH,8CAqBC;AAxBD,wDAA0C;AAG1C,SAAgB,iBAAiB,CAC/B,IAAY,EACZ,MAA4C,EAC5C,QAAsB,EACtB,cAAkC;IAElC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,GAAG,IAAI,eAAe,EACtB;QACE,KAAK,EAAE,cAAc;QACrB,cAAc,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE;QACtD,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,cAAc;QAC1C,SAAS,EAAE,cAAc;QACzB,eAAe,EAAE,IAAI;QACrB,MAAM,EAAE;YACN,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,GAAG,MAAM,EAAE,MAAM;SAClB;KACF,EACD,EAAE,QAAQ,EAAE,CACb,CAAC;AACJ,CAAC"}

package/dist/esm/platform/components/descheduler.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Descheduler deployment for pod rebalancing on spot instances.
+ *
+ * @module platform/components/descheduler
+ */
+import * as k8s from "@pulumi/kubernetes";
+import type { IDeschedulerConfig } from "../interfaces";
+export declare function deployDescheduler(name: string, config: IDeschedulerConfig, provider: k8s.Provider, defaultVersion: string | undefined): k8s.helm.v3.Release;
+//# sourceMappingURL=descheduler.d.ts.map

package/dist/esm/platform/components/descheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"descheduler.d.ts","sourceRoot":"","sources":["../../../../src/platform/components/descheduler.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,kBAAkB,EAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ,EACtB,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CA6BrB"}