@reyemtech/pulumi-rackspace-spot 0.1.4 → 0.2.1

package/cmd/install-plugin.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+/**
+ * Postinstall hook — symlinks the provider binary so Pulumi can find it on $PATH.
+ * Creates: /usr/local/bin/pulumi-resource-rackspace-spot -> this package's cmd/pulumi-resource-rackspace-spot.js
+ */
+const fs = require("fs");
+const path = require("path");
+
+const src = path.join(__dirname, "pulumi-resource-rackspace-spot.js");
+const dest = "/usr/local/bin/pulumi-resource-rackspace-spot";
+
+try {
+  if (fs.existsSync(dest)) fs.unlinkSync(dest);
+  fs.symlinkSync(src, dest);
+  console.log(`pulumi-rackspace-spot: linked provider to ${dest}`);
+} catch (e) {
+  // Non-fatal — CI environments may not have /usr/local/bin write access
+  console.warn(`pulumi-rackspace-spot: could not link provider to ${dest} (${e.code}). Add ${path.dirname(src)} to PATH manually.`);
+}

package/cmd/provider/auth.d.ts

@@ -0,0 +1,15 @@
+export interface TokenResult {
+    idToken: string;
+    orgId: string;
+    namespace: string;
+}
+export declare class SpotAuth {
+    private readonly refreshToken;
+    private readonly apiBase;
+    private cache;
+    constructor(refreshToken: string, apiBase?: string);
+    getToken(): Promise<TokenResult>;
+    private discoverTokenEndpoint;
+    private exchangeToken;
+    private decodeJwtPayload;
+}

package/cmd/provider/auth.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SpotAuth = void 0;
+/**
+ * Rackspace Spot OIDC issuer. Discovered via .well-known/openid-configuration.
+ * This is the public Auth0 tenant for Rackspace Spot — present in every JWT they issue.
+ */
+const OIDC_ISSUER = "https://login.spot.rackspace.com";
+/**
+ * Rackspace Spot Auth0 client ID (audience). This is a public OIDC value present
+ * in every JWT's `aud` claim — not a secret. OIDC discovery doesn't expose
+ * per-application client IDs, so this must be hardcoded.
+ */
+const OIDC_CLIENT_ID = "mwG3lUMV8KyeMqHe4fJ5Bb3nM1vBvRNa";
+class SpotAuth {
+    refreshToken;
+    apiBase;
+    cache = null;
+    constructor(refreshToken, apiBase = "https://spot.rackspace.com") {
+        this.refreshToken = refreshToken;
+        this.apiBase = apiBase.replace(/\/$/, "");
+    }
+    async getToken() {
+        const nowSec = Math.floor(Date.now() / 1000);
+        if (this.cache !== null && nowSec < this.cache.expiresAt) {
+            return this.cache.result;
+        }
+        const idToken = await this.exchangeToken();
+        const payload = this.decodeJwtPayload(idToken);
+        const orgId = payload.org_id;
+        const namespace = orgId.toLowerCase().replace(/_/g, "-");
+        const result = { idToken, orgId, namespace };
+        this.cache = { result, expiresAt: payload.exp - 60 };
+        return result;
+    }
+    // ---------------------------------------------------------------------------
+    // Private helpers
+    // ---------------------------------------------------------------------------
+    async discoverTokenEndpoint() {
+        // Use OIDC discovery to find the token endpoint — unauthenticated and resilient
+        // to domain changes. Only the clientId is hardcoded (OIDC discovery doesn't
+        // expose per-application client IDs).
+        const res = await fetch(`${OIDC_ISSUER}/.well-known/openid-configuration`);
+        if (!res.ok) {
+            throw new Error(`OIDC discovery failed (HTTP ${res.status}): ${OIDC_ISSUER}`);
+        }
+        const config = await res.json();
+        return config.token_endpoint;
+    }
+    async exchangeToken() {
+        const tokenEndpoint = await this.discoverTokenEndpoint();
+        const res = await fetch(tokenEndpoint, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+                grant_type: "refresh_token",
+                client_id: OIDC_CLIENT_ID,
+                refresh_token: this.refreshToken,
+            }).toString(),
+        });
+        if (!res.ok) {
+            throw new Error(`Token exchange failed (HTTP ${res.status}) against ${tokenEndpoint}`);
+        }
+        const data = await res.json();
+        return data.id_token;
+    }
+    decodeJwtPayload(jwt) {
+        const parts = jwt.split(".");
+        if (parts.length !== 3) {
+            throw new Error("Invalid JWT: expected 3 segments");
+        }
+        const raw = Buffer.from(parts[1], "base64").toString("utf-8");
+        return JSON.parse(raw);
+    }
+}
+exports.SpotAuth = SpotAuth;
+//# sourceMappingURL=auth.js.map

package/cmd/provider/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../auth.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,MAAM,WAAW,GAAG,kCAAkC,CAAC;AAEvD;;;;GAIG;AACH,MAAM,cAAc,GAAG,kCAAkC,CAAC;AAoB1D,MAAa,QAAQ;IACF,YAAY,CAAS;IACrB,OAAO,CAAS;IACzB,KAAK,GAAuB,IAAI,CAAC;IAEzC,YAAY,YAAoB,EAAE,OAAO,GAAG,4BAA4B;QACtE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE7C,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,GAAG,EAAE,EAAE,CAAC;QAErD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAEtE,KAAK,CAAC,qBAAqB;QACjC,gFAAgF;QAChF,4EAA4E;QAC5E,sCAAsC;QACtC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,mCAAmC,CAAC,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,MAAM,WAAW,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,MAAM,GAA+B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,cAAc,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAEzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,cAAc;gBACzB,aAAa,EAAE,IAAI,CAAC,YAAY;aACjC,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,aAAa,aAAa,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,IAAI,GAAyB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,gBAAgB,CAAC,GAAW;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;IACvC,CAAC;CACF;AA1ED,4BA0EC"}

package/cmd/provider/client.d.ts

@@ -0,0 +1,17 @@
+export type K8sResource = Record<string, any>;
+export declare class SpotClient {
+    private readonly baseUrl;
+    private readonly namespace;
+    private readonly headers;
+    constructor(baseUrl: string, namespace: string, token: string);
+    private namespacedUrl;
+    private clusterUrl;
+    private request;
+    get(resource: string, name: string): Promise<K8sResource>;
+    list(resource: string): Promise<K8sResource[]>;
+    create(resource: string, body: K8sResource): Promise<K8sResource>;
+    update(resource: string, name: string, body: K8sResource): Promise<K8sResource>;
+    remove(resource: string, name: string): Promise<void>;
+    getClusterScoped(resource: string, name?: string): Promise<K8sResource>;
+    listClusterScoped(resource: string): Promise<K8sResource[]>;
+}

package/cmd/provider/client.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SpotClient = void 0;
+const API_GROUP = "ngpc.rxt.io/v1";
+class SpotClient {
+    baseUrl;
+    namespace;
+    headers;
+    constructor(baseUrl, namespace, token) {
+        this.baseUrl = baseUrl.replace(/\/$/, "");
+        this.namespace = namespace;
+        this.headers = {
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "application/json",
+        };
+    }
+    // Namespaced path: /apis/ngpc.rxt.io/v1/namespaces/{namespace}/{resource}/{name}
+    namespacedUrl(resource, name) {
+        const base = `${this.baseUrl}/apis/${API_GROUP}/namespaces/${this.namespace}/${resource}`;
+        return name ? `${base}/${name}` : base;
+    }
+    // Cluster-scoped path: /apis/ngpc.rxt.io/v1/{resource}/{name}
+    clusterUrl(resource, name) {
+        const base = `${this.baseUrl}/apis/${API_GROUP}/${resource}`;
+        return name ? `${base}/${name}` : base;
+    }
+    async request(url, opts = {}) {
+        const res = await fetch(url, {
+            ...opts,
+            headers: { ...this.headers, ...opts.headers },
+        });
+        const text = await res.text();
+        if (!res.ok) {
+            throw new Error(`Spot API error ${res.status}: ${text}`);
+        }
+        return text;
+    }
+    async get(resource, name) {
+        const text = await this.request(this.namespacedUrl(resource, name), { method: "GET" });
+        return JSON.parse(text);
+    }
+    async list(resource) {
+        const text = await this.request(this.namespacedUrl(resource), { method: "GET" });
+        const body = JSON.parse(text);
+        return body.items;
+    }
+    async create(resource, body) {
+        const text = await this.request(this.namespacedUrl(resource), {
+            method: "POST",
+            body: JSON.stringify(body),
+        });
+        return JSON.parse(text);
+    }
+    async update(resource, name, body) {
+        const text = await this.request(this.namespacedUrl(resource, name), {
+            method: "PUT",
+            body: JSON.stringify(body),
+        });
+        return JSON.parse(text);
+    }
+    async remove(resource, name) {
+        await this.request(this.namespacedUrl(resource, name), { method: "DELETE" });
+    }
+    async getClusterScoped(resource, name) {
+        const text = await this.request(this.clusterUrl(resource, name), { method: "GET" });
+        return JSON.parse(text);
+    }
+    async listClusterScoped(resource) {
+        const text = await this.request(this.clusterUrl(resource), { method: "GET" });
+        const body = JSON.parse(text);
+        return body.items;
+    }
+}
+exports.SpotClient = SpotClient;
+//# sourceMappingURL=client.js.map

package/cmd/provider/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../client.ts"],"names":[],"mappings":";;;AAEA,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC,MAAa,UAAU;IACJ,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,OAAO,CAAyB;IAEjD,YAAY,OAAe,EAAE,SAAiB,EAAE,KAAa;QAC3D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG;YACb,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;SACnC,CAAC;IACJ,CAAC;IAED,iFAAiF;IACzE,aAAa,CAAC,QAAgB,EAAE,IAAa;QACnD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,SAAS,SAAS,eAAe,IAAI,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,8DAA8D;IACtD,UAAU,CAAC,QAAgB,EAAE,IAAa;QAChD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,SAAS,SAAS,IAAI,QAAQ,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,OAAoB,EAAE;QACvD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,GAAG,IAAI;YACP,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAI,IAAI,CAAC,OAA8C,EAAE;SACtF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB,EAAE,IAAY;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAsB,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,IAAiB;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAiB;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE;YAClE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,IAAY;QACzC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,IAAa;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAsB,CAAC;IACrC,CAAC;CACF;AA/ED,gCA+EC"}

package/cmd/provider/functions/getCloudspace.d.ts

@@ -0,0 +1,14 @@
+import type { SpotClient } from "../client";
+export declare function getCloudspace(client: SpotClient, inputs: {
+    name: string;
+}): Promise<{
+    outputs: {
+        name: any;
+        region: any;
+        kubernetesVersion: any;
+        cni: any;
+        haControlPlane: any;
+        apiServerEndpoint: any;
+        phase: any;
+    };
+}>;

package/cmd/provider/functions/getCloudspace.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCloudspace = getCloudspace;
+async function getCloudspace(client, inputs) {
+    const cs = await client.get("cloudspaces", inputs.name);
+    return {
+        outputs: {
+            name: cs.metadata.name,
+            region: cs.spec.region,
+            kubernetesVersion: cs.spec.kubernetesVersion,
+            cni: cs.spec.cni,
+            haControlPlane: cs.spec.HAControlPlane ?? cs.spec.haControlPlane ?? false,
+            apiServerEndpoint: cs.status?.APIServerEndpoint ?? cs.status?.apiServerEndpoint ?? "",
+            phase: cs.status?.phase ?? "",
+        },
+    };
+}
+//# sourceMappingURL=getCloudspace.js.map

package/cmd/provider/functions/getCloudspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCloudspace.js","sourceRoot":"","sources":["../../functions/getCloudspace.ts"],"names":[],"mappings":";;AAEA,sCAaC;AAbM,KAAK,UAAU,aAAa,CAAC,MAAkB,EAAE,MAAwB;IAC9E,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI;YACtB,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM;YACtB,iBAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB;YAC5C,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG;YAChB,cAAc,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,KAAK;YACzE,iBAAiB,EAAE,EAAE,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE;YACrF,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;SAC9B;KACF,CAAC;AACJ,CAAC"}

package/cmd/provider/functions/getKubeconfig.d.ts

@@ -0,0 +1,10 @@
+import type { SpotClient } from "../client";
+export declare function getKubeconfig(client: SpotClient, token: string, inputs: {
+    cloudspaceName: string;
+}): Promise<{
+    outputs: {
+        raw: string;
+        host: string;
+        clusterName: string;
+    };
+}>;

package/cmd/provider/functions/getKubeconfig.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getKubeconfig = getKubeconfig;
+async function getKubeconfig(client, token, inputs) {
+    const cs = await client.get("cloudspaces", inputs.cloudspaceName);
+    // K8s CRD uses PascalCase field names
+    const endpoint = cs.status?.APIServerEndpoint ?? cs.status?.apiServerEndpoint;
+    if (!endpoint)
+        throw new Error(`Cloudspace ${inputs.cloudspaceName} has no API endpoint yet`);
+    const raw = JSON.stringify({
+        apiVersion: "v1",
+        kind: "Config",
+        clusters: [{
+                cluster: { server: `https://${endpoint}`, "insecure-skip-tls-verify": true },
+                name: inputs.cloudspaceName,
+            }],
+        contexts: [{
+                context: { cluster: inputs.cloudspaceName, namespace: "default", user: "spot-user" },
+                name: inputs.cloudspaceName,
+            }],
+        "current-context": inputs.cloudspaceName,
+        users: [{ name: "spot-user", user: { token } }],
+    });
+    return { outputs: { raw, host: `https://${endpoint}`, clusterName: inputs.cloudspaceName } };
+}
+//# sourceMappingURL=getKubeconfig.js.map

package/cmd/provider/functions/getKubeconfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getKubeconfig.js","sourceRoot":"","sources":["../../functions/getKubeconfig.ts"],"names":[],"mappings":";;AAEA,sCAsBC;AAtBM,KAAK,UAAU,aAAa,CAAC,MAAkB,EAAE,KAAa,EAAE,MAAkC;IACvG,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAClE,sCAAsC;IACtC,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAC9E,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,MAAM,CAAC,cAAc,0BAA0B,CAAC,CAAC;IAE9F,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC;gBACT,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,QAAQ,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE;gBAC5E,IAAI,EAAE,MAAM,CAAC,cAAc;aAC5B,CAAC;QACF,QAAQ,EAAE,CAAC;gBACT,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;gBACpF,IAAI,EAAE,MAAM,CAAC,cAAc;aAC5B,CAAC;QACF,iBAAiB,EAAE,MAAM,CAAC,cAAc;QACxC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;KAChD,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;AAC/F,CAAC"}

package/cmd/provider/functions/getRegions.d.ts

@@ -0,0 +1,10 @@
+import type { SpotClient } from "../client";
+export declare function getRegions(client: SpotClient): Promise<{
+    outputs: {
+        regions: {
+            name: any;
+            country: any;
+            description: any;
+        }[];
+    };
+}>;

package/cmd/provider/functions/getRegions.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRegions = getRegions;
+async function getRegions(client) {
+    const items = await client.listClusterScoped("regions");
+    return {
+        outputs: {
+            regions: items.map((r) => ({
+                name: r.metadata.name,
+                country: r.spec?.country ?? "",
+                description: r.spec?.description ?? "",
+            })),
+        },
+    };
+}
+//# sourceMappingURL=getRegions.js.map

package/cmd/provider/functions/getRegions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getRegions.js","sourceRoot":"","sources":["../../functions/getRegions.ts"],"names":[],"mappings":";;AAEA,gCAWC;AAXM,KAAK,UAAU,UAAU,CAAC,MAAkB;IACjD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACxD,OAAO;QACL,OAAO,EAAE;YACP,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;gBAC9B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI;gBACrB,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE;gBAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;aACvC,CAAC,CAAC;SACJ;KACF,CAAC;AACJ,CAAC"}

package/cmd/provider/functions/getServerClasses.d.ts

@@ -0,0 +1,17 @@
+import type { SpotClient } from "../client";
+export declare function getServerClasses(client: SpotClient, inputs?: {
+    region?: string;
+}): Promise<{
+    outputs: {
+        serverClasses: {
+            name: any;
+            region: any;
+            category: any;
+            cpu: any;
+            memory: any;
+            flavorType: any;
+            available: any;
+            capacity: any;
+        }[];
+    };
+}>;

package/cmd/provider/functions/getServerClasses.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getServerClasses = getServerClasses;
+async function getServerClasses(client, inputs) {
+    const items = await client.listClusterScoped("serverclasses");
+    const filtered = inputs?.region
+        ? items.filter((sc) => sc.spec?.region === inputs.region)
+        : items;
+    return {
+        outputs: {
+            serverClasses: filtered.map((sc) => ({
+                name: sc.metadata.name,
+                region: sc.spec?.region ?? "",
+                category: sc.spec?.category ?? "",
+                cpu: sc.spec?.resources?.cpu ?? "",
+                memory: sc.spec?.resources?.memory ?? "",
+                flavorType: sc.spec?.flavorType ?? "",
+                available: sc.status?.available ?? 0,
+                capacity: sc.status?.capacity ?? 0,
+            })),
+        },
+    };
+}
+//# sourceMappingURL=getServerClasses.js.map

package/cmd/provider/functions/getServerClasses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getServerClasses.js","sourceRoot":"","sources":["../../functions/getServerClasses.ts"],"names":[],"mappings":";;AAEA,4CAmBC;AAnBM,KAAK,UAAU,gBAAgB,CAAC,MAAkB,EAAE,MAA4B;IACrF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,EAAE,MAAM;QAC7B,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QAC9D,CAAC,CAAC,KAAK,CAAC;IACV,OAAO;QACL,OAAO,EAAE;YACP,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;gBACxC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI;gBACtB,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE;gBAC7B,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE;gBACjC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE;gBAClC,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,IAAI,EAAE;gBACxC,UAAU,EAAE,EAAE,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE;gBACrC,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC;gBACpC,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,IAAI,CAAC;aACnC,CAAC,CAAC;SACJ;KACF,CAAC;AACJ,CAAC"}

package/cmd/provider/index.d.ts

@@ -0,0 +1 @@
+export {};

package/cmd/provider/index.js

@@ -0,0 +1,53 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const fs_1 = require("fs");
+const path_1 = require("path");
+const provider_1 = require("./provider");
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const pkg = require("../package.json");
+function main(args) {
+    // At runtime __dirname is provider/bin/ (compiled output).
+    // schema.json sits one level up at the provider root, and package.json
+    // is at the repo root (two levels up from bin/).
+    const schema = (0, fs_1.readFileSync)((0, path_1.resolve)(__dirname, "..", "schema.json"), "utf-8");
+    return pulumi.provider.main(new provider_1.RackspaceSpotProvider(pkg.version, schema), args);
+}
+main(process.argv.slice(2)).catch((err) => {
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/cmd/provider/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uDAAyC;AACzC,2BAAkC;AAClC,+BAA+B;AAC/B,yCAAmD;AAEnD,8DAA8D;AAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;AAE9D,SAAS,IAAI,CAAC,IAAc;IAC1B,2DAA2D;IAC3D,uEAAuE;IACvE,iDAAiD;IACjD,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,IAAA,cAAO,EAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;IAE9E,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,gCAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACpF,CAAC;AAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACxC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/cmd/provider/provider.d.ts

@@ -0,0 +1,20 @@
+import * as provider from "@pulumi/pulumi/provider";
+export declare class RackspaceSpotProvider implements provider.Provider {
+    readonly version: string;
+    readonly schema: string;
+    private refreshToken;
+    constructor(version: string, schema: string);
+    checkConfig(urn: string, _olds: any, news: any): Promise<provider.CheckResult>;
+    diffConfig(_id: string, _urn: string, _olds: any, news: any): Promise<provider.DiffResult>;
+    configure(news: any): Promise<void>;
+    private ensureClient;
+    /** Read refreshToken from ~/.spot_config (created by `spotctl configure`). */
+    private readSpotConfig;
+    check(urn: string, _olds: any, news: any): Promise<provider.CheckResult>;
+    diff(id: string, urn: string, olds: any, news: any): Promise<provider.DiffResult>;
+    create(urn: string, inputs: any): Promise<provider.CreateResult>;
+    read(id: string, urn: string, props?: any): Promise<provider.ReadResult>;
+    update(id: string, urn: string, olds: any, news: any): Promise<provider.UpdateResult>;
+    delete(id: string, urn: string, _props: any): Promise<void>;
+    invoke(token: string, inputs: any): Promise<provider.InvokeResult>;
+}