@reyemtech/nimbus 1.3.0 → 2.0.2

package/dist/cjs/operator/cnpg.js

@@ -0,0 +1,412 @@
+"use strict";
+/**
+ * CloudNativePG backend — provisions PostgreSQL clusters via the CNPG operator.
+ *
+ * Creates a CNPG Cluster CRD, backup credentials, and scheduled backups.
+ * Returns IClusterInstance with createDatabase() for provisioning individual
+ * databases with connection secrets replicated to target namespaces.
+ *
+ * @module operator/cnpg
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCnpgDatabase = createCnpgDatabase;
+const crypto = __importStar(require("node:crypto"));
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const ensure_namespace_1 = require("../utils/ensure-namespace");
+const storage_tiers_1 = require("../types/storage-tiers");
+const dashboards_1 = require("../observability/dashboards");
+const alerts_1 = require("../observability/alerts");
+const nimbus_1 = require("../nimbus");
+const DATA_NAMESPACE = "data";
+const DEFAULT_PG_VERSION = "17";
+const DEFAULT_REPLICAS = 1;
+const DEFAULT_STORAGE_GB = 10;
+/**
+ * Create a single database instance within a CNPG cluster.
+ *
+ * Creates a dedicated user with a random password, then runs a psql Job
+ * against the cluster's superuser to CREATE DATABASE + CREATE ROLE + GRANT.
+ * Connection secrets with the per-user credentials are replicated to target
+ * namespaces.
+ */
+function createSingleCnpgDatabaseInstance(clusterName, dbName, dbConfig, endpoint, port, cluster, provider) {
+    const username = dbConfig.owner ?? dbName;
+    const clusterSecretName = `${clusterName}-superuser`;
+    const userSecretName = `${clusterName}-${dbName}-user`;
+    // Generate a random password for the database user (deterministic per Pulumi resource)
+    const generatedPassword = pulumi.secret(crypto.randomBytes(24).toString("base64url"));
+    // Store user credentials in a Secret in the data namespace
+    const userSecret = new k8s.core.v1.Secret(`${clusterName}-${dbName}-user-secret`, {
+        metadata: {
+            name: userSecretName,
+            namespace: DATA_NAMESPACE,
+            labels: {
+                "app.kubernetes.io/managed-by": "nimbus",
+                "nimbus/cluster": clusterName,
+                "nimbus/database": dbName,
+            },
+        },
+        stringData: {
+            username,
+            password: generatedPassword,
+        },
+    }, { provider, dependsOn: [cluster], ignoreChanges: ["data", "stringData"] });
+    // Job: create database and user via psql against the CNPG superuser
+    const jobName = `cnpg-init-db-${clusterName}-${dbName}`;
+    const initJob = new k8s.batch.v1.Job(jobName, {
+        metadata: {
+            name: jobName,
+            namespace: DATA_NAMESPACE,
+            labels: {
+                "app.kubernetes.io/managed-by": "nimbus",
+                "nimbus/cluster": clusterName,
+                "nimbus/database": dbName,
+            },
+        },
+        spec: {
+            ttlSecondsAfterFinished: 300,
+            backoffLimit: 5,
+            template: {
+                metadata: {
+                    labels: { "nimbus/database": dbName },
+                },
+                spec: {
+                    restartPolicy: "Never",
+                    containers: [
+                        {
+                            name: "psql",
+                            image: `ghcr.io/cloudnative-pg/postgresql:${DEFAULT_PG_VERSION}`,
+                            command: [
+                                "sh",
+                                "-c",
+                                [
+                                    // Create the role if it doesn't exist, then set password
+                                    `psql -h "$PGHOST" -U postgres -d postgres -c "DO \\$\\$ BEGIN IF NOT EXISTS (SELECT FROM pg_roles WHERE rolname = '$DB_USER') THEN CREATE ROLE \\"$DB_USER\\" LOGIN; END IF; END \\$\\$;"`,
+                                    `psql -h "$PGHOST" -U postgres -d postgres -c "ALTER ROLE \\"$DB_USER\\" PASSWORD '$DB_PASSWORD';"`,
+                                    // Create the database if it doesn't exist
+                                    `psql -h "$PGHOST" -U postgres -d postgres -tc "SELECT 1 FROM pg_database WHERE datname = '$DB_NAME'" | grep -q 1 || psql -h "$PGHOST" -U postgres -d postgres -c "CREATE DATABASE \\"$DB_NAME\\" OWNER \\"$DB_USER\\";"`,
+                                    // Grant all privileges
+                                    `psql -h "$PGHOST" -U postgres -d postgres -c "GRANT ALL PRIVILEGES ON DATABASE \\"$DB_NAME\\" TO \\"$DB_USER\\";"`,
+                                ].join(" && "),
+                            ],
+                            env: [
+                                {
+                                    name: "PGHOST",
+                                    value: endpoint,
+                                },
+                                {
+                                    // psql reads PGPASSWORD automatically for authentication
+                                    name: "PGPASSWORD",
+                                    valueFrom: {
+                                        secretKeyRef: { name: clusterSecretName, key: "password" },
+                                    },
+                                },
+                                {
+                                    name: "PGSSLMODE",
+                                    value: "require",
+                                },
+                                { name: "DB_NAME", value: dbName },
+                                { name: "DB_USER", value: username },
+                                {
+                                    name: "DB_PASSWORD",
+                                    valueFrom: {
+                                        secretKeyRef: { name: userSecretName, key: "password" },
+                                    },
+                                },
+                            ],
+                        },
+                    ],
+                },
+            },
+        },
+    }, { provider, dependsOn: [cluster, userSecret] });
+    // Read password back from the stored secret (stable across deploys)
+    const storedSecret = k8s.core.v1.Secret.get(`${clusterName}-${dbName}-user-secret-read`, pulumi.interpolate `${DATA_NAMESPACE}/${userSecretName}`, { provider, dependsOn: [userSecret] });
+    const stablePassword = storedSecret.data.apply((d) => Buffer.from(d?.["password"] ?? "", "base64").toString());
+    // Replicate connection secrets with per-user credentials to target namespaces
+    const secrets = {};
+    const dbHost = endpoint;
+    const dbPort = port;
+    for (const targetNs of dbConfig.namespaces) {
+        const nsResource = (0, ensure_namespace_1.ensureNamespace)(targetNs, provider);
+        const secretName = `${clusterName}-${dbName}-pg`;
+        new k8s.core.v1.Secret(`${clusterName}-${dbName}-secret-${targetNs}`, {
+            metadata: {
+                name: secretName,
+                namespace: targetNs,
+                labels: {
+                    "app.kubernetes.io/managed-by": "nimbus",
+                    "nimbus/cluster": clusterName,
+                    "nimbus/database": dbName,
+                },
+            },
+            stringData: {
+                host: dbHost,
+                port: dbPort.apply((p) => String(p)),
+                username,
+                password: stablePassword,
+                database: dbName,
+                uri: pulumi
+                    .all([dbHost, dbPort, stablePassword])
+                    .apply(([h, p, pw]) => `postgresql://${username}:${pw}@${h}:${p}/${dbName}?sslmode=require`),
+            },
+        }, { provider, dependsOn: [initJob, nsResource] });
+        secrets[targetNs] = pulumi.output(secretName);
+    }
+    return {
+        name: dbName,
+        clusterName,
+        host: endpoint,
+        port,
+        database: pulumi.output(dbName),
+        secrets,
+        nativeResource: initJob,
+    };
+}
+/**
+ * Create a single PostgreSQL cluster via the CloudNativePG operator (no environment awareness).
+ */
+function createSingleCnpgCluster(name, config, backupDefaults, provider, operatorRelease, storageTiers) {
+    const namespace = (0, ensure_namespace_1.ensureNamespace)(DATA_NAMESPACE, provider);
+    const version = config?.version ?? DEFAULT_PG_VERSION;
+    const replicas = config?.replicas ?? DEFAULT_REPLICAS;
+    const storageGb = config?.storageGb ?? DEFAULT_STORAGE_GB;
+    // Merge backup: per-cluster config overrides operator defaults
+    const backup = config?.backup?.target !== undefined
+        ? { ...backupDefaults, ...config.backup }
+        : backupDefaults;
+    const dependsOn = [operatorRelease, namespace];
+    // Create backup credentials Secret if backup is configured
+    let backupSecret;
+    if (backup) {
+        backupSecret = new k8s.core.v1.Secret(`${name}-cnpg-backup-secret`, {
+            metadata: {
+                name: `${name}-backup-s3-credentials`,
+                namespace: DATA_NAMESPACE,
+            },
+            stringData: {
+                ACCESS_KEY_ID: backup.target.credentials.accessKeyId,
+                SECRET_ACCESS_KEY: backup.target.credentials.secretAccessKey,
+                REGION: backup.target.region,
+            },
+        }, { provider, dependsOn: [namespace] });
+        dependsOn.push(backupSecret);
+    }
+    // Build CNPG Cluster CRD spec
+    const clusterSpec = {
+        instances: replicas,
+        imageName: `ghcr.io/cloudnative-pg/postgresql:${version}`,
+        // Enable superuser access so createDatabase() Jobs can CREATE DATABASE/ROLE
+        enableSuperuserAccess: true,
+        postgresql: {
+            parameters: config?.parameters ?? {},
+        },
+        storage: {
+            size: `${storageGb}Gi`,
+            // Only set storageClass if explicitly requested — CNPG uses the cluster
+            // default (ssd) which is correct for the performance tier.
+            ...(config?.storageTier && (0, storage_tiers_1.resolveStorageTier)(config.storageTier, storageTiers)
+                ? { storageClass: (0, storage_tiers_1.resolveStorageTier)(config.storageTier, storageTiers) }
+                : {}),
+        },
+    };
+    if (config?.resources) {
+        clusterSpec["resources"] = config.resources;
+    }
+    if (backup && backupSecret) {
+        clusterSpec["backup"] = {
+            retentionPolicy: backup.retentionDays ? `${backup.retentionDays}d` : "30d",
+            barmanObjectStore: {
+                destinationPath: backup.target.bucket.apply((b) => `s3://${b}/${name}`),
+                s3Credentials: {
+                    accessKeyId: {
+                        name: backupSecret.metadata.name,
+                        key: "ACCESS_KEY_ID",
+                    },
+                    secretAccessKey: {
+                        name: backupSecret.metadata.name,
+                        key: "SECRET_ACCESS_KEY",
+                    },
+                    region: {
+                        name: backupSecret.metadata.name,
+                        key: "REGION",
+                    },
+                },
+                wal: backup.pitr
+                    ? {
+                        compression: "gzip",
+                        maxParallel: 8,
+                    }
+                    : undefined,
+                data: {
+                    compression: "gzip",
+                },
+            },
+        };
+    }
+    // CNPG Cluster CRD
+    const cluster = new k8s.apiextensions.CustomResource(`${name}-cnpg-cluster`, {
+        apiVersion: "postgresql.cnpg.io/v1",
+        kind: "Cluster",
+        metadata: {
+            name,
+            namespace: DATA_NAMESPACE,
+            labels: config?.tags ?? {},
+        },
+        spec: clusterSpec,
+    }, { provider, dependsOn });
+    // Per-cluster Grafana dashboard
+    (0, dashboards_1.createCnpgClusterDashboard)(name, "observability", provider, [cluster]);
+    // Per-cluster alert rules
+    const fc = `cluster="${name}"`;
+    (0, alerts_1.createPrometheusRule)(`${name}-cnpg-alerts`, "observability", [
+        {
+            name: `nimbus.cnpg.${name}`,
+            rules: [
+                {
+                    alert: "CnpgClusterDown",
+                    expr: `cnpg_collector_up{${fc}} == 0`,
+                    for: "2m",
+                    labels: { severity: "critical" },
+                    annotations: { summary: `CNPG cluster ${name} is DOWN` },
+                },
+                {
+                    alert: "CnpgReplicationLagCritical",
+                    expr: `cnpg_pg_replication_lag{${fc}} > 120`,
+                    for: "5m",
+                    labels: { severity: "critical" },
+                    annotations: { summary: `CNPG replication lag on ${name} is {{ $value }}s` },
+                },
+                {
+                    alert: "CnpgBackupStaleCritical",
+                    expr: `(time() - cnpg_collector_last_available_backup_timestamp{${fc}}) > 172800`,
+                    for: "10m",
+                    labels: { severity: "critical" },
+                    annotations: { summary: `CNPG backup for ${name} is older than 48h` },
+                },
+            ],
+        },
+    ], provider, [cluster]);
+    // ScheduledBackup CRD if backup is configured
+    if (backup) {
+        new k8s.apiextensions.CustomResource(`${name}-cnpg-scheduled-backup`, {
+            apiVersion: "postgresql.cnpg.io/v1",
+            kind: "ScheduledBackup",
+            metadata: {
+                name: `${name}-scheduled-backup`,
+                namespace: DATA_NAMESPACE,
+            },
+            spec: {
+                schedule: backup.schedule ?? "0 3 * * *",
+                backupOwnerReference: "self",
+                cluster: { name },
+                immediate: false,
+            },
+        }, { provider, dependsOn: [cluster] });
+    }
+    const endpoint = pulumi.output(`${name}-rw.${DATA_NAMESPACE}.svc.cluster.local`);
+    const port = pulumi.output(5432);
+    nimbus_1.nimbus.register(name, {
+        name,
+        type: "database",
+        namespace: DATA_NAMESPACE,
+        endpoint,
+        port: 5432,
+        secretRef: {
+            name: `${name}-superuser`,
+            keys: { password: "password" },
+        },
+        nativeResource: cluster,
+    });
+    return {
+        name,
+        engine: "postgresql",
+        endpoint,
+        port,
+        nativeResource: cluster,
+        createDatabase(dbName, dbConfig) {
+            let result;
+            if (dbConfig.environments) {
+                const envResult = {};
+                for (const [env, envOverrides] of Object.entries(dbConfig.environments)) {
+                    const { environments: _, ...baseConfig } = dbConfig;
+                    const mergedConfig = {
+                        ...baseConfig,
+                        ...envOverrides,
+                    };
+                    envResult[env] = createSingleCnpgDatabaseInstance(`${name}`, `${dbName}-${env}`, mergedConfig, endpoint, port, cluster, provider);
+                }
+                result = envResult;
+            }
+            else {
+                const { environments: _, ...cleanConfig } = dbConfig;
+                result = createSingleCnpgDatabaseInstance(name, dbName, cleanConfig, endpoint, port, cluster, provider);
+            }
+            // Runtime: environments → Record, otherwise → IDatabaseInstance.
+            // Overload signatures on IClusterInstance narrow the type for callers.
+            return result;
+        },
+    };
+}
+/**
+ * Create a PostgreSQL cluster via the CloudNativePG operator.
+ *
+ * When `config.environments` is set, creates separate clusters per environment
+ * with `{name}-{env}` naming and returns a Record of IClusterInstance.
+ *
+ * @returns IClusterInstance or Record<string, IClusterInstance> when environments is set
+ */
+function createCnpgDatabase(name, config, backupDefaults, provider, operatorRelease, storageTiers) {
+    if (config?.environments) {
+        const result = {};
+        for (const [env, envOverrides] of Object.entries(config.environments)) {
+            const { environments: _, ...baseConfig } = config;
+            const mergedConfig = {
+                ...baseConfig,
+                ...envOverrides,
+            };
+            result[env] = createSingleCnpgCluster(`${name}-${env}`, mergedConfig, backupDefaults, provider, operatorRelease, storageTiers);
+        }
+        return result;
+    }
+    if (config) {
+        const { environments: _, ...cleanConfig } = config;
+        return createSingleCnpgCluster(name, cleanConfig, backupDefaults, provider, operatorRelease, storageTiers);
+    }
+    return createSingleCnpgCluster(name, config, backupDefaults, provider, operatorRelease, storageTiers);
+}
+//# sourceMappingURL=cnpg.js.map

package/dist/cjs/operator/cnpg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cnpg.js","sourceRoot":"","sources":["../../../src/operator/cnpg.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmcH,gDAgDC;AAjfD,oDAAsC;AACtC,wDAA0C;AAC1C,uDAAyC;AACzC,gEAA4D;AAC5D,0DAAiF;AAQjF,4DAAyE;AACzE,oDAA+D;AAC/D,sCAAmC;AAEnC,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B;;;;;;;GAOG;AACH,SAAS,gCAAgC,CACvC,WAAmB,EACnB,MAAc,EACd,QAAuD,EACvD,QAA+B,EAC/B,IAA2B,EAC3B,OAAyC,EACzC,QAAsB;IAEtB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC;IAC1C,MAAM,iBAAiB,GAAG,GAAG,WAAW,YAAY,CAAC;IACrD,MAAM,cAAc,GAAG,GAAG,WAAW,IAAI,MAAM,OAAO,CAAC;IAEvD,uFAAuF;IACvF,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAEtF,2DAA2D;IAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACvC,GAAG,WAAW,IAAI,MAAM,cAAc,EACtC;QACE,QAAQ,EAAE;YACR,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE;gBACN,8BAA8B,EAAE,QAAQ;gBACxC,gBAAgB,EAAE,WAAW;gBAC7B,iBAAiB,EAAE,MAAM;aAC1B;SACF;QACD,UAAU,EAAE;YACV,QAAQ;YACR,QAAQ,EAAE,iBAAiB;SAC5B;KACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAC1E,CAAC;IAEF,oEAAoE;IACpE,MAAM,OAAO,GAAG,gBAAgB,WAAW,IAAI,MAAM,EAAE,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAClC,OAAO,EACP;QACE,QAAQ,EAAE;YACR,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE;gBACN,8BAA8B,EAAE,QAAQ;gBACxC,gBAAgB,EAAE,WAAW;gBAC7B,iBAAiB,EAAE,MAAM;aAC1B;SACF;QACD,IAAI,EAAE;YACJ,uBAAuB,EAAE,GAAG;YAC5B,YAAY,EAAE,CAAC;YACf,QAAQ,EAAE;gBACR,QAAQ,EAAE;oBACR,MAAM,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE;iBACtC;gBACD,IAAI,EAAE;oBACJ,aAAa,EAAE,OAAO;oBACtB,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,MAAM;4BACZ,KAAK,EAAE,qCAAqC,kBAAkB,EAAE;4BAChE,OAAO,EAAE;gCACP,IAAI;gCACJ,IAAI;gCACJ;oCACE,yDAAyD;oCACzD,2LAA2L;oCAC3L,mGAAmG;oCACnG,0CAA0C;oCAC1C,yNAAyN;oCACzN,uBAAuB;oCACvB,mHAAmH;iCACpH,CAAC,IAAI,CAAC,MAAM,CAAC;6BACf;4BACD,GAAG,EAAE;gCACH;oCACE,IAAI,EAAE,QAAQ;oCACd,KAAK,EAAE,QAAQ;iCAChB;gCACD;oCACE,yDAAyD;oCACzD,IAAI,EAAE,YAAY;oCAClB,SAAS,EAAE;wCACT,YAAY,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE;qCAC3D;iCACF;gCACD;oCACE,IAAI,EAAE,WAAW;oCACjB,KAAK,EAAE,SAAS;iCACjB;gCACD,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE;gCAClC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE;gCACpC;oCACE,IAAI,EAAE,aAAa;oCACnB,SAAS,EAAE;wCACT,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE;qCACxD;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF;KACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAC/C,CAAC;IAEF,oEAAoE;IACpE,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CACzC,GAAG,WAAW,IAAI,MAAM,mBAAmB,EAC3C,MAAM,CAAC,WAAW,CAAA,GAAG,cAAc,IAAI,cAAc,EAAE,EACvD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,EAAE,CACtC,CAAC;IACF,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACnD,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CACxD,CAAC;IAEF,8EAA8E;IAC9E,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC;IAEpB,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAA,kCAAe,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,GAAG,WAAW,IAAI,MAAM,KAAK,CAAC;QAEjD,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACpB,GAAG,WAAW,IAAI,MAAM,WAAW,QAAQ,EAAE,EAC7C;YACE,QAAQ,EAAE;gBACR,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE;oBACN,8BAA8B,EAAE,QAAQ;oBACxC,gBAAgB,EAAE,WAAW;oBAC7B,iBAAiB,EAAE,MAAM;iBAC1B;aACF;YACD,UAAU,EAAE;gBACV,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACpC,QAAQ;gBACR,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,MAAM;gBAChB,GAAG,EAAE,MAAM;qBACR,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;qBACrC,KAAK,CACJ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,QAAQ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,kBAAkB,CACrF;aACJ;SACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAC/C,CAAC;QAEF,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,WAAW;QACX,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC/B,OAAO;QACP,cAAc,EAAE,OAAO;KACxB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,IAAY,EACZ,MAAgE,EAChE,cAA2C,EAC3C,QAAsB,EACtB,eAAoC,EACpC,YAA6B;IAE7B,MAAM,SAAS,GAAG,IAAA,kCAAe,EAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,kBAAkB,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,gBAAgB,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,kBAAkB,CAAC;IAE1D,+DAA+D;IAC/D,MAAM,MAAM,GACV,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,SAAS;QAClC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,GAAI,MAAM,CAAC,MAA0B,EAAE;QAC9D,CAAC,CAAC,cAAc,CAAC;IAErB,MAAM,SAAS,GAAsB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IAElE,2DAA2D;IAC3D,IAAI,YAA4C,CAAC;IACjD,IAAI,MAAM,EAAE,CAAC;QACX,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACnC,GAAG,IAAI,qBAAqB,EAC5B;YACE,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,wBAAwB;gBACrC,SAAS,EAAE,cAAc;aAC1B;YACD,UAAU,EAAE;gBACV,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW;gBACpD,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;gBAC5D,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;aAC7B;SACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CACrC,CAAC;QACF,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;IAED,8BAA8B;IAC9B,MAAM,WAAW,GAA4B;QAC3C,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,qCAAqC,OAAO,EAAE;QACzD,4EAA4E;QAC5E,qBAAqB,EAAE,IAAI;QAC3B,UAAU,EAAE;YACV,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,EAAE;SACrC;QACD,OAAO,EAAE;YACP,IAAI,EAAE,GAAG,SAAS,IAAI;YACtB,wEAAwE;YACxE,2DAA2D;YAC3D,GAAG,CAAC,MAAM,EAAE,WAAW,IAAI,IAAA,kCAAkB,EAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC;gBAC7E,CAAC,CAAC,EAAE,YAAY,EAAE,IAAA,kCAAkB,EAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE;gBACxE,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;IAEF,IAAI,MAAM,EAAE,SAAS,EAAE,CAAC;QACtB,WAAW,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,IAAI,MAAM,IAAI,YAAY,EAAE,CAAC;QAC3B,WAAW,CAAC,QAAQ,CAAC,GAAG;YACtB,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,KAAK;YAC1E,iBAAiB,EAAE;gBACjB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;gBACvE,aAAa,EAAE;oBACb,WAAW,EAAE;wBACX,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,IAAI;wBAChC,GAAG,EAAE,eAAe;qBACrB;oBACD,eAAe,EAAE;wBACf,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,IAAI;wBAChC,GAAG,EAAE,mBAAmB;qBACzB;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,IAAI;wBAChC,GAAG,EAAE,QAAQ;qBACd;iBACF;gBACD,GAAG,EAAE,MAAM,CAAC,IAAI;oBACd,CAAC,CAAC;wBACE,WAAW,EAAE,MAAM;wBACnB,WAAW,EAAE,CAAC;qBACf;oBACH,CAAC,CAAC,SAAS;gBACb,IAAI,EAAE;oBACJ,WAAW,EAAE,MAAM;iBACpB;aACF;SACF,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAClD,GAAG,IAAI,eAAe,EACtB;QACE,UAAU,EAAE,uBAAuB;QACnC,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACR,IAAI;YACJ,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE;SAC3B;QACD,IAAI,EAAE,WAAW;KAClB,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CACxB,CAAC;IAEF,gCAAgC;IAChC,IAAA,uCAA0B,EAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEvE,0BAA0B;IAC1B,MAAM,EAAE,GAAG,YAAY,IAAI,GAAG,CAAC;IAC/B,IAAA,6BAAoB,EAClB,GAAG,IAAI,cAAc,EACrB,eAAe,EACf;QACE;YACE,IAAI,EAAE,eAAe,IAAI,EAAE;YAC3B,KAAK,EAAE;gBACL;oBACE,KAAK,EAAE,iBAAiB;oBACxB,IAAI,EAAE,qBAAqB,EAAE,QAAQ;oBACrC,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;oBAChC,WAAW,EAAE,EAAE,OAAO,EAAE,gBAAgB,IAAI,UAAU,EAAE;iBACzD;gBACD;oBACE,KAAK,EAAE,4BAA4B;oBACnC,IAAI,EAAE,2BAA2B,EAAE,SAAS;oBAC5C,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;oBAChC,WAAW,EAAE,EAAE,OAAO,EAAE,2BAA2B,IAAI,mBAAmB,EAAE;iBAC7E;gBACD;oBACE,KAAK,EAAE,yBAAyB;oBAChC,IAAI,EAAE,4DAA4D,EAAE,aAAa;oBACjF,GAAG,EAAE,KAAK;oBACV,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;oBAChC,WAAW,EAAE,EAAE,OAAO,EAAE,mBAAmB,IAAI,oBAAoB,EAAE;iBACtE;aACF;SACF;KACF,EACD,QAAQ,EACR,CAAC,OAAO,CAAC,CACV,CAAC;IAEF,8CAA8C;IAC9C,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAClC,GAAG,IAAI,wBAAwB,EAC/B;YACE,UAAU,EAAE,uBAAuB;YACnC,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,mBAAmB;gBAChC,SAAS,EAAE,cAAc;aAC1B;YACD,IAAI,EAAE;gBACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,WAAW;gBACxC,oBAAoB,EAAE,MAAM;gBAC5B,OAAO,EAAE,EAAE,IAAI,EAAE;gBACjB,SAAS,EAAE,KAAK;aACjB;SACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,CACnC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,cAAc,oBAAoB,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEjC,eAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;QACpB,IAAI;QACJ,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,cAAc;QACzB,QAAQ;QACR,IAAI,EAAE,IAAI;QACV,SAAS,EAAE;YACT,IAAI,EAAE,GAAG,IAAI,YAAY;YACzB,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;SAC/B;QACD,cAAc,EAAE,OAAO;KACxB,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,YAAY;QACpB,QAAQ;QACR,IAAI;QACJ,cAAc,EAAE,OAAO;QACvB,cAAc,CAAC,MAAc,EAAE,QAAiC;YAC9D,IAAI,MAA6D,CAAC;YAClE,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAsC,EAAE,CAAC;gBACxD,KAAK,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBACxE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,QAAQ,CAAC;oBACpD,MAAM,YAAY,GAAkD;wBAClE,GAAG,UAAU;wBACb,GAAG,YAAY;qBAChB,CAAC;oBACF,SAAS,CAAC,GAAG,CAAC,GAAG,gCAAgC,CAC/C,GAAG,IAAI,EAAE,EACT,GAAG,MAAM,IAAI,GAAG,EAAE,EAClB,YAAY,EACZ,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,QAAQ,CACT,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,QAAQ,CAAC;gBACrD,MAAM,GAAG,gCAAgC,CACvC,IAAI,EACJ,MAAM,EACN,WAAW,EACX,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,QAAQ,CACT,CAAC;YACJ,CAAC;YACD,iEAAiE;YACjE,uEAAuE;YACvE,OAAO,MAA+D,CAAC;QACzE,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAChC,IAAY,EACZ,MAA0C,EAC1C,cAA2C,EAC3C,QAAsB,EACtB,eAAoC,EACpC,YAA6B;IAE7B,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;QACzB,MAAM,MAAM,GAAqC,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACtE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;YAClD,MAAM,YAAY,GAAiD;gBACjE,GAAG,UAAU;gBACb,GAAG,YAAY;aAChB,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,GAAG,uBAAuB,CACnC,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,eAAe,EACf,YAAY,CACb,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC;QACnD,OAAO,uBAAuB,CAC5B,IAAI,EACJ,WAAW,EACX,cAAc,EACd,QAAQ,EACR,eAAe,EACf,YAAY,CACb,CAAC;IACJ,CAAC;IAED,OAAO,uBAAuB,CAC5B,IAAI,EACJ,MAAM,EACN,cAAc,EACd,QAAQ,EACR,eAAe,EACf,YAAY,CACb,CAAC;AACJ,CAAC"}

package/dist/cjs/operator/index.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Operator module — Kubernetes operator deployment and resource provisioning.
+ *
+ * Supports CloudNativePG (PostgreSQL), MariaDB Operator, and MinIO via Helm.
+ * Database operators expose createCluster() / createDatabase(); the MinIO
+ * operator exposes createBucket() instead.
+ *
+ * @module operator
+ */
+import type { IOperator, IMinIOOperator, IOperatorConfig, OperatorType } from "./interfaces";
+export type { OperatorType, EnvironmentOverrides, IBackupDefaults, IOperatorConfig, IOperatorClusterConfig, IOperatorDatabaseConfig, IDatabaseInstance, IClusterInstance, IOperator, IMinIOOperator, IMinIOBucket, IMinIOBucketConfig, IMinIOIngressConfig, } from "./interfaces";
+export { OPERATOR_TYPES } from "./interfaces";
+export { createMinioIngress } from "./minio";
+export type { INeo4jClusterConfig } from "./neo4j";
+/**
+ * Deploy an operator to a Kubernetes cluster.
+ *
+ * - `"cloudnative-pg"` / `"mariadb-operator"` → returns IOperator with createCluster()
+ * - `"minio"` → returns IMinIOOperator with createBucket()
+ *
+ * @example Database operator
+ * ```typescript
+ * const op = createOperator("cloudnative-pg", {
+ *   cluster,
+ *   backup: {
+ *     target: backupTarget,
+ *     schedule: "0 3 * * *",
+ *     retentionDays: 7,
+ *     pitr: true,
+ *   },
+ * });
+ * const cluster = op.createCluster("app-db", { replicas: 2, storageGb: 20 });
+ * ```
+ *
+ * @example MinIO operator
+ * ```typescript
+ * const minio = createOperator("minio", { cluster }) as IMinIOOperator;
+ * const bucket = minio.createBucket("uploads", { namespaces: ["app"] });
+ * ```
+ *
+ * @param type - Operator type
+ * @param config - Operator configuration
+ * @returns Deployed IOperator or IMinIOOperator instance
+ */
+export declare function createOperator(type: "minio", config: IOperatorConfig): IMinIOOperator;
+export declare function createOperator(type: "cloudnative-pg" | "mariadb-operator" | "neo4j", config: IOperatorConfig): IOperator;
+export declare function createOperator(type: OperatorType, config: IOperatorConfig): IOperator | IMinIOOperator;
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/operator/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/operator/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,KAAK,EACV,SAAS,EACT,cAAc,EACd,eAAe,EAGf,YAAY,EACb,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,YAAY,EACZ,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAC7C,YAAY,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AA8CnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,GAAG,cAAc,CAAC;AACvF,wBAAgB,cAAc,CAC5B,IAAI,EAAE,gBAAgB,GAAG,kBAAkB,GAAG,OAAO,EACrD,MAAM,EAAE,eAAe,GACtB,SAAS,CAAC;AACb,wBAAgB,cAAc,CAC5B,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,eAAe,GACtB,SAAS,GAAG,cAAc,CAAC"}

package/dist/cjs/operator/index.js

@@ -0,0 +1,155 @@
+"use strict";
+/**
+ * Operator module — Kubernetes operator deployment and resource provisioning.
+ *
+ * Supports CloudNativePG (PostgreSQL), MariaDB Operator, and MinIO via Helm.
+ * Database operators expose createCluster() / createDatabase(); the MinIO
+ * operator exposes createBucket() instead.
+ *
+ * @module operator
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMinioIngress = exports.OPERATOR_TYPES = void 0;
+exports.createOperator = createOperator;
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const types_1 = require("../types");
+const ensure_namespace_1 = require("../utils/ensure-namespace");
+const cnpg_1 = require("./cnpg");
+const mariadb_1 = require("./mariadb");
+const minio_1 = require("./minio");
+const neo4j_1 = require("./neo4j");
+var interfaces_1 = require("./interfaces");
+Object.defineProperty(exports, "OPERATOR_TYPES", { enumerable: true, get: function () { return interfaces_1.OPERATOR_TYPES; } });
+var minio_2 = require("./minio");
+Object.defineProperty(exports, "createMinioIngress", { enumerable: true, get: function () { return minio_2.createMinioIngress; } });
+const DATA_NAMESPACE = "data";
+const OPERATOR_CHARTS = {
+    "cloudnative-pg": {
+        repo: "https://cloudnative-pg.github.io/charts",
+        chart: "cloudnative-pg",
+        defaultNamespace: "cnpg-system",
+    },
+    "mariadb-operator": {
+        repo: "https://helm.mariadb.com/mariadb-operator",
+        chart: "mariadb-operator",
+        defaultNamespace: "mariadb-system",
+        crds: {
+            repo: "https://helm.mariadb.com/mariadb-operator",
+            chart: "mariadb-operator-crds",
+        },
+    },
+    minio: {
+        repo: "https://operator.min.io",
+        chart: "operator",
+        defaultNamespace: "minio-operator",
+    },
+    neo4j: {
+        // Neo4j has no separate operator — the Helm chart deploys the instance directly.
+        // The operator release is a no-op; createCluster() deploys via its own Helm release.
+        repo: "https://helm.neo4j.com/neo4j",
+        chart: "neo4j",
+        defaultNamespace: DATA_NAMESPACE,
+    },
+};
+function createOperator(type, config) {
+    const chartInfo = OPERATOR_CHARTS[type];
+    const provider = config.cluster.provider;
+    const namespace = config.namespace ?? chartInfo.defaultNamespace;
+    // Ensure operator namespace exists
+    const ns = (0, ensure_namespace_1.ensureNamespace)(namespace, provider);
+    // Install CRDs first if the operator needs a separate CRDs chart
+    const operatorDeps = [];
+    if (chartInfo.crds) {
+        const crdsRelease = new k8s.helm.v3.Release(`${type}-crds`, {
+            chart: chartInfo.crds.chart,
+            repositoryOpts: { repo: chartInfo.crds.repo },
+            namespace,
+            createNamespace: false,
+            values: {},
+        }, { provider, dependsOn: [ns] });
+        operatorDeps.push(crdsRelease);
+    }
+    // Neo4j has no separate operator — the Helm chart deploys the instance
+    // directly. Skip the operator install; createCluster() deploys via its own
+    // Helm release with instance-specific values.
+    const skipOperatorInstall = type === "neo4j";
+    const helmValues = config.values ?? {};
+    // Deploy Helm release (operator chart)
+    const helmRelease = skipOperatorInstall
+        ? ns // Placeholder — Neo4j deploys in createCluster()
+        : new k8s.helm.v3.Release(`${type}-operator`, {
+            chart: chartInfo.chart,
+            repositoryOpts: { repo: chartInfo.repo },
+            version: config.version,
+            namespace,
+            createNamespace: false,
+            values: helmValues,
+        }, { provider, dependsOn: [ns, ...operatorDeps] });
+    // MinIO returns a different operator shape (createBucket instead of createCluster)
+    if (type === "minio") {
+        return (0, minio_1.createMinioOperator)(config, helmRelease);
+    }
+    return {
+        name: type,
+        type,
+        helmRelease,
+        createCluster(name, clusterConfig) {
+            let result;
+            const tierMap = config.cluster.storageTiers;
+            switch (type) {
+                case "cloudnative-pg":
+                    result = (0, cnpg_1.createCnpgDatabase)(name, clusterConfig, config.backup, provider, helmRelease, tierMap);
+                    break;
+                case "mariadb-operator":
+                    result = (0, mariadb_1.createMariadbDatabase)(name, clusterConfig, config.backup, provider, helmRelease, tierMap);
+                    break;
+                case "neo4j":
+                    // Neo4j Helm chart deploys the instance directly (no CRD operator).
+                    // The helmRelease IS the Neo4j deployment; createCluster wraps it.
+                    result = (0, neo4j_1.createNeo4jCluster)(name, 
+                    // eslint-disable-next-line @typescript-eslint/no-explicit-any -- neo4j config type narrowing handled at runtime
+                    clusterConfig, config.backup, provider, helmRelease, tierMap);
+                    break;
+                default:
+                    return (0, types_1.assertNever)(type);
+            }
+            // Runtime: environments → Record, otherwise → IClusterInstance.
+            // Overload signatures on IOperator narrow the type for callers.
+            return result;
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/cjs/operator/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/operator/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwHH,wCAyGC;AA/ND,wDAA0C;AAC1C,oCAAuC;AACvC,gEAA4D;AAC5D,iCAA4C;AAC5C,uCAAkD;AAClD,mCAA8C;AAC9C,mCAA6C;AAyB7C,2CAA8C;AAArC,4GAAA,cAAc,OAAA;AACvB,iCAA6C;AAApC,2GAAA,kBAAkB,OAAA;AAG3B,MAAM,cAAc,GAAG,MAAM,CAAC;AAe9B,MAAM,eAAe,GAA0E;IAC7F,gBAAgB,EAAE;QAChB,IAAI,EAAE,yCAAyC;QAC/C,KAAK,EAAE,gBAAgB;QACvB,gBAAgB,EAAE,aAAa;KAChC;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,2CAA2C;QACjD,KAAK,EAAE,kBAAkB;QACzB,gBAAgB,EAAE,gBAAgB;QAClC,IAAI,EAAE;YACJ,IAAI,EAAE,2CAA2C;YACjD,KAAK,EAAE,uBAAuB;SAC/B;KACF;IACD,KAAK,EAAE;QACL,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,UAAU;QACjB,gBAAgB,EAAE,gBAAgB;KACnC;IACD,KAAK,EAAE;QACL,iFAAiF;QACjF,qFAAqF;QACrF,IAAI,EAAE,8BAA8B;QACpC,KAAK,EAAE,OAAO;QACd,gBAAgB,EAAE,cAAc;KACjC;CACF,CAAC;AAyCF,SAAgB,cAAc,CAC5B,IAAkB,EAClB,MAAuB;IAEvB,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,SAAS,CAAC,gBAAgB,CAAC;IAEjE,mCAAmC;IACnC,MAAM,EAAE,GAAG,IAAA,kCAAe,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhD,iEAAiE;IACjE,MAAM,YAAY,GAA0B,EAAE,CAAC;IAC/C,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CACzC,GAAG,IAAI,OAAO,EACd;YACE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK;YAC3B,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;YAC7C,SAAS;YACT,eAAe,EAAE,KAAK;YACtB,MAAM,EAAE,EAAE;SACX,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,CAC9B,CAAC;QACF,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAED,uEAAuE;IACvE,2EAA2E;IAC3E,8CAA8C;IAC9C,MAAM,mBAAmB,GAAG,IAAI,KAAK,OAAO,CAAC;IAE7C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IAEvC,uCAAuC;IACvC,MAAM,WAAW,GAAG,mBAAmB;QACrC,CAAC,CAAE,EAAqC,CAAC,iDAAiD;QAC1F,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CACrB,GAAG,IAAI,WAAW,EAClB;YACE,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE;YACxC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS;YACT,eAAe,EAAE,KAAK;YACtB,MAAM,EAAE,UAAU;SACnB,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,EAAE,CAC/C,CAAC;IAEN,mFAAmF;IACnF,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,IAAA,2BAAmB,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI;QACV,IAAI;QACJ,WAAW;QACX,aAAa,CAAC,IAAY,EAAE,aAAsC;YAChE,IAAI,MAA2D,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;YAC5C,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,gBAAgB;oBACnB,MAAM,GAAG,IAAA,yBAAkB,EACzB,IAAI,EACJ,aAAa,EACb,MAAM,CAAC,MAAM,EACb,QAAQ,EACR,WAAW,EACX,OAAO,CACR,CAAC;oBACF,MAAM;gBACR,KAAK,kBAAkB;oBACrB,MAAM,GAAG,IAAA,+BAAqB,EAC5B,IAAI,EACJ,aAAa,EACb,MAAM,CAAC,MAAM,EACb,QAAQ,EACR,WAAW,EACX,OAAO,CACR,CAAC;oBACF,MAAM;gBACR,KAAK,OAAO;oBACV,oEAAoE;oBACpE,mEAAmE;oBACnE,MAAM,GAAG,IAAA,0BAAkB,EACzB,IAAI;oBACJ,gHAAgH;oBAChH,aAAoB,EACpB,MAAM,CAAC,MAAM,EACb,QAAQ,EACR,WAAW,EACX,OAAO,CACR,CAAC;oBACF,MAAM;gBACR;oBACE,OAAO,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YACD,gEAAgE;YAChE,gEAAgE;YAChE,OAAO,MAA6D,CAAC;QACvE,CAAC;KACF,CAAC;AACJ,CAAC"}