@rulebricks/cli 2.1.7 → 2.3.2

package/cluster-setup/aws/cluster.yaml

@@ -1,33 +0,0 @@
-# Minimum eksctl configuration for a Rulebricks EKS cluster.
-# Core knobs: name, region, Kubernetes version, instance type, node count,
-# disk size, and disk type.
-# Nodes must be ARM based. Storage is required; customize Helm storage class
-# values if you use a different CSI driver or StorageClass.
-
-apiVersion: eksctl.io/v1alpha5
-kind: ClusterConfig
-
-metadata:
-  name: rulebricks-cluster
-  region: us-east-1
-  version: "1.34"
-
-managedNodeGroups:
-  - name: standard-nodes
-    instanceType: c8g.large
-    desiredCapacity: 4
-    minSize: 4
-    maxSize: 4
-    volumeSize: 50
-    volumeType: gp3
-    amiFamily: AmazonLinux2023
-    iam:
-      withAddonPolicies:
-        ebs: true
-        albIngress: true
-
-addons:
-  - name: vpc-cni
-  - name: coredns
-  - name: kube-proxy
-  - name: aws-ebs-csi-driver

package/cluster-setup/azure/main.bicep

@@ -1,282 +0,0 @@
-targetScope = 'resourceGroup'
-
-@description('Name of the AKS cluster.')
-param clusterName string = 'rulebricks-cluster'
-
-@description('Azure region for all resources.')
-param location string = resourceGroup().location
-
-@description('AKS Kubernetes version.')
-param kubernetesVersion string = '1.34'
-
-@description('Number of nodes in the default node pool.')
-param nodeCount int = 4
-
-@description('VM size for the default node pool. ARM64 (Standard_*ps_*) recommended.')
-param nodeVmSize string = 'Standard_D2ps_v5'
-
-@description('OS disk size in GB for the default node pool.')
-param osDiskSizeGB int = 20
-
-@description('OS disk type for the default node pool.')
-@allowed([
-  'Managed'
-  'Ephemeral'
-])
-param osDiskType string = 'Managed'
-
-@description('Namespace where Rulebricks will be installed. CLI deployments usually use rulebricks-<deployment-name>.')
-param rulebricksNamespace string = 'rulebricks'
-
-@description('Kubernetes ServiceAccount name used by Vector.')
-param vectorServiceAccountName string = 'vector'
-
-@description('Kubernetes ServiceAccount name used by Prometheus.')
-param prometheusServiceAccountName string = 'prometheus'
-
-@description('Enable a user-assigned identity and federated credential for external-dns with Azure DNS.')
-param enableExternalDns bool = false
-
-@description('Resource group containing the Azure DNS zone. Required when enableExternalDns is true.')
-param dnsZoneResourceGroup string = ''
-
-@description('Enable a user-assigned identity and federated credential for Vector Azure Blob logging.')
-param enableBlobLogging bool = false
-
-@description('Existing Azure Storage account name for Vector logs.')
-param loggingStorageAccountName string = ''
-
-var networkContributorRoleId = subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'b24988ac-6180-42a0-ab88-20f7382dd24c')
-var dnsZoneContributorRoleId = subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'befefa01-2a29-4197-83a8-272ff33ce314')
-var storageBlobDataContributorRoleId = subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'ba92f5b4-2d11-453d-a403-e96b0029c9fe')
-
-resource vnet 'Microsoft.Network/virtualNetworks@2023-11-01' = {
-  name: '${clusterName}-vnet'
-  location: location
-  tags: {
-    Environment: 'rulebricks'
-  }
-  properties: {
-    addressSpace: {
-      addressPrefixes: [
-        '10.0.0.0/8'
-      ]
-    }
-    subnets: [
-      {
-        name: 'aks-subnet'
-        properties: {
-          addressPrefix: '10.240.0.0/16'
-        }
-      }
-    ]
-  }
-}
-
-resource nsg 'Microsoft.Network/networkSecurityGroups@2023-11-01' = {
-  name: '${clusterName}-nsg'
-  location: location
-  tags: {
-    Environment: 'rulebricks'
-  }
-  properties: {
-    securityRules: [
-      {
-        name: 'AllowVNetInbound'
-        properties: {
-          priority: 100
-          direction: 'Inbound'
-          access: 'Allow'
-          protocol: '*'
-          sourcePortRange: '*'
-          destinationPortRange: '*'
-          sourceAddressPrefix: 'VirtualNetwork'
-          destinationAddressPrefix: 'VirtualNetwork'
-        }
-      }
-      {
-        name: 'AllowVNetOutbound'
-        properties: {
-          priority: 100
-          direction: 'Outbound'
-          access: 'Allow'
-          protocol: '*'
-          sourcePortRange: '*'
-          destinationPortRange: '*'
-          sourceAddressPrefix: 'VirtualNetwork'
-          destinationAddressPrefix: 'VirtualNetwork'
-        }
-      }
-    ]
-  }
-}
-
-resource subnet 'Microsoft.Network/virtualNetworks/subnets@2023-11-01' = {
-  parent: vnet
-  name: 'aks-subnet'
-  properties: {
-    addressPrefix: '10.240.0.0/16'
-    networkSecurityGroup: {
-      id: nsg.id
-    }
-  }
-}
-
-resource aksIdentity 'Microsoft.ManagedIdentity/userAssignedIdentities@2023-01-31' = {
-  name: '${clusterName}-identity'
-  location: location
-}
-
-resource aksNetworkRole 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
-  name: guid(vnet.id, aksIdentity.id, 'Network Contributor')
-  scope: vnet
-  properties: {
-    roleDefinitionId: networkContributorRoleId
-    principalId: aksIdentity.properties.principalId
-    principalType: 'ServicePrincipal'
-  }
-}
-
-resource aks 'Microsoft.ContainerService/managedClusters@2024-05-01' = {
-  name: clusterName
-  location: location
-  tags: {
-    Environment: 'rulebricks'
-  }
-  identity: {
-    type: 'UserAssigned'
-    userAssignedIdentities: {
-      '${aksIdentity.id}': {}
-    }
-  }
-  properties: {
-    dnsPrefix: clusterName
-    kubernetesVersion: kubernetesVersion
-    agentPoolProfiles: [
-      {
-        name: 'default'
-        count: nodeCount
-        enableAutoScaling: false
-        vmSize: nodeVmSize
-        osDiskSizeGB: osDiskSizeGB
-        osDiskType: osDiskType
-        osType: 'Linux'
-        type: 'VirtualMachineScaleSets'
-        mode: 'System'
-        vnetSubnetID: subnet.id
-        nodeLabels: {
-          environment: 'rulebricks'
-        }
-      }
-    ]
-    networkProfile: {
-      networkPlugin: 'azure'
-      networkPolicy: 'calico'
-      loadBalancerSku: 'standard'
-      serviceCidr: '10.0.0.0/16'
-      dnsServiceIP: '10.0.0.10'
-    }
-    oidcIssuerProfile: {
-      enabled: true
-    }
-    securityProfile: {
-      workloadIdentity: {
-        enabled: true
-      }
-    }
-    storageProfile: {
-      diskCSIDriver: {
-        enabled: true
-      }
-      fileCSIDriver: {
-        enabled: true
-      }
-    }
-  }
-  dependsOn: [
-    aksNetworkRole
-  ]
-}
-
-resource externalDnsIdentity 'Microsoft.ManagedIdentity/userAssignedIdentities@2023-01-31' = if (enableExternalDns) {
-  name: '${clusterName}-external-dns'
-  location: location
-}
-
-resource externalDnsRole 'Microsoft.Authorization/roleAssignments@2022-04-01' = if (enableExternalDns && (empty(dnsZoneResourceGroup) || dnsZoneResourceGroup == resourceGroup().name)) {
-  name: guid(resourceGroup().id, externalDnsIdentity!.id, 'DNS Zone Contributor')
-  scope: resourceGroup()
-  properties: {
-    roleDefinitionId: dnsZoneContributorRoleId
-    principalId: externalDnsIdentity!.properties.principalId
-    principalType: 'ServicePrincipal'
-  }
-}
-
-resource externalDnsFederatedCredential 'Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials@2023-01-31' = if (enableExternalDns) {
-  parent: externalDnsIdentity
-  name: 'external-dns'
-  properties: {
-    issuer: aks.properties.oidcIssuerProfile.issuerURL
-    subject: 'system:serviceaccount:${rulebricksNamespace}:external-dns'
-    audiences: [
-      'api://AzureADTokenExchange'
-    ]
-  }
-}
-
-resource vectorIdentity 'Microsoft.ManagedIdentity/userAssignedIdentities@2023-01-31' = if (enableBlobLogging) {
-  name: '${clusterName}-vector'
-  location: location
-}
-
-resource loggingStorageAccount 'Microsoft.Storage/storageAccounts@2023-01-01' existing = if (enableBlobLogging && !empty(loggingStorageAccountName)) {
-  name: loggingStorageAccountName
-}
-
-resource vectorBlobRole 'Microsoft.Authorization/roleAssignments@2022-04-01' = if (enableBlobLogging && !empty(loggingStorageAccountName)) {
-  name: guid(loggingStorageAccount.id, vectorIdentity!.id, 'Storage Blob Data Contributor')
-  scope: loggingStorageAccount
-  properties: {
-    roleDefinitionId: storageBlobDataContributorRoleId
-    principalId: vectorIdentity!.properties.principalId
-    principalType: 'ServicePrincipal'
-  }
-}
-
-resource vectorFederatedCredential 'Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials@2023-01-31' = if (enableBlobLogging) {
-  parent: vectorIdentity
-  name: 'vector'
-  properties: {
-    issuer: aks.properties.oidcIssuerProfile.issuerURL
-    subject: 'system:serviceaccount:${rulebricksNamespace}:${vectorServiceAccountName}'
-    audiences: [
-      'api://AzureADTokenExchange'
-    ]
-  }
-}
-
-resource prometheusIdentity 'Microsoft.ManagedIdentity/userAssignedIdentities@2023-01-31' = {
-  name: '${clusterName}-prometheus'
-  location: location
-}
-
-resource prometheusFederatedCredential 'Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials@2023-01-31' = {
-  parent: prometheusIdentity
-  name: 'prometheus'
-  properties: {
-    issuer: aks.properties.oidcIssuerProfile.issuerURL
-    subject: 'system:serviceaccount:${rulebricksNamespace}:${prometheusServiceAccountName}'
-    audiences: [
-      'api://AzureADTokenExchange'
-    ]
-  }
-}
-
-output clusterName string = aks.name
-output resourceGroupName string = resourceGroup().name
-output location string = location
-output kubeconfigCommand string = 'az aks get-credentials --name ${clusterName} --resource-group ${resourceGroup().name}'
-output externalDnsClientId string = enableExternalDns ? externalDnsIdentity!.properties.clientId : ''
-output vectorClientId string = enableBlobLogging ? vectorIdentity!.properties.clientId : ''
-output prometheusClientId string = prometheusIdentity.properties.clientId

package/cluster-setup/azure/main.parameters.json

@@ -1,21 +0,0 @@
-{
-  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
-  "contentVersion": "1.0.0.0",
-  "parameters": {
-    "clusterName": { "value": "rulebricks-cluster" },
-    "location": { "value": "eastus" },
-    "kubernetesVersion": { "value": "1.34" },
-    "nodeCount": { "value": 4 },
-    "nodeVmSize": { "value": "Standard_D2ps_v5" },
-    "osDiskSizeGB": { "value": 20 },
-    "osDiskType": { "value": "Managed" },
-
-    "rulebricksNamespace": { "value": "rulebricks" },
-    "vectorServiceAccountName": { "value": "vector" },
-    "prometheusServiceAccountName": { "value": "prometheus" },
-    "enableExternalDns": { "value": false },
-    "dnsZoneResourceGroup": { "value": "" },
-    "enableBlobLogging": { "value": false },
-    "loggingStorageAccountName": { "value": "" }
-  }
-}

package/dist/components/Wizard/steps/CredentialsStep.d.ts

@@ -1,6 +0,0 @@
-interface CredentialsStepProps {
-    onComplete: () => void;
-    onBack: () => void;
-}
-export declare function CredentialsStep({ onComplete, onBack }: CredentialsStepProps): import("react/jsx-runtime").JSX.Element;
-export {};

package/dist/components/Wizard/steps/CredentialsStep.js

@@ -1,22 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { useState } from 'react';
-import { Box, Text, useInput } from 'ink';
-import TextInput from 'ink-text-input';
-import { useWizard } from '../WizardContext.js';
-import { BorderBox } from '../../common/index.js';
-export function CredentialsStep({ onComplete, onBack }) {
-    const { state, dispatch } = useWizard();
-    const [licenseKey, setLicenseKey] = useState(state.licenseKey || '');
-    useInput((input, key) => {
-        if (key.escape) {
-            onBack();
-        }
-    });
-    const handleSubmit = () => {
-        if (!licenseKey)
-            return;
-        dispatch({ type: 'SET_LICENSE_KEY', key: licenseKey });
-        onComplete();
-    };
-    return (_jsxs(BorderBox, { title: "Credentials", children: [_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { children: "Enter your Rulebricks license key:" }), _jsx(Text, { color: "gray", dimColor: true, children: "This is required to pull the Rulebricks Docker images" }), _jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: "cyan", children: "\u276F " }), _jsx(TextInput, { value: licenseKey, onChange: setLicenseKey, onSubmit: handleSubmit, placeholder: "Enter your license key", mask: "*" })] })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "gray", dimColor: true, children: "Esc to go back \u2022 Enter to continue" }) })] }));
-}

package/dist/components/Wizard/steps/DeploymentModeStep.d.ts

@@ -1,5 +0,0 @@
-interface DeploymentModeStepProps {
-    onComplete: () => void;
-}
-export declare function DeploymentModeStep({ onComplete }: DeploymentModeStepProps): import("react/jsx-runtime").JSX.Element;
-export {};

package/dist/components/Wizard/steps/DeploymentModeStep.js

@@ -1,26 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { Box, Text } from 'ink';
-import SelectInput from 'ink-select-input';
-import { useWizard } from '../WizardContext.js';
-import { BorderBox, useTheme } from '../../common/index.js';
-export function DeploymentModeStep({ onComplete }) {
-    const { dispatch } = useWizard();
-    const { colors } = useTheme();
-    const items = [
-        {
-            label: 'Use existing Kubernetes cluster',
-            value: 'existing',
-            description: 'I already have a cluster configured'
-        },
-        {
-            label: 'Provision new infrastructure',
-            value: 'provision',
-            description: 'Create a new cluster on AWS, GCP, or Azure'
-        }
-    ];
-    const handleSelect = (item) => {
-        dispatch({ type: 'SET_INFRA_MODE', mode: item.value });
-        onComplete();
-    };
-    return (_jsxs(BorderBox, { title: "Deployment Mode", children: [_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { children: "How would you like to deploy Rulebricks?" }), _jsx(Text, { color: "gray", dimColor: true, children: "Select whether to use an existing cluster or provision new infrastructure" })] }), _jsx(Box, { marginY: 1, children: _jsx(SelectInput, { items: items, onSelect: handleSelect, itemComponent: ({ isSelected, label }) => (_jsx(Box, { children: _jsx(Text, { color: isSelected ? colors.accent : undefined, children: label }) })) }) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "gray", dimColor: true, children: "\u2191/\u2193 to navigate \u2022 Enter to select" }) })] }));
-}

package/dist/components/Wizard/steps/TierStep.d.ts

@@ -1,6 +0,0 @@
-interface TierStepProps {
-    onComplete: () => void;
-    onBack: () => void;
-}
-export declare function TierStep({ onComplete, onBack }: TierStepProps): import("react/jsx-runtime").JSX.Element;
-export {};

package/dist/components/Wizard/steps/TierStep.js

@@ -1,29 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { Box, Text, useInput } from 'ink';
-import SelectInput from 'ink-select-input';
-import { useWizard } from '../WizardContext.js';
-import { BorderBox, useTheme } from '../../common/index.js';
-import { TIER_CONFIGS } from '../../../types/index.js';
-export function TierStep({ onComplete, onBack }) {
-    const { dispatch } = useWizard();
-    const { colors } = useTheme();
-    useInput((input, key) => {
-        if (key.escape) {
-            onBack();
-        }
-    });
-    const items = Object.entries(TIER_CONFIGS).map(([tier, config]) => ({
-        label: tier.charAt(0).toUpperCase() + tier.slice(1),
-        value: tier,
-        config
-    }));
-    const handleSelect = (item) => {
-        dispatch({ type: 'SET_TIER', tier: item.value });
-        onComplete();
-    };
-    return (_jsxs(BorderBox, { title: "Performance Tier", children: [_jsxs(Box, { flexDirection: "column", marginY: 1, children: [_jsx(Text, { children: "Select your deployment size:" }), _jsx(Text, { color: "gray", dimColor: true, children: "This determines the cluster resources and scaling limits" })] }), _jsx(SelectInput, { items: items, onSelect: handleSelect, indicatorComponent: () => null, itemComponent: ({ isSelected, label }) => {
-                    const currentItem = items.find(i => i.label === label) || items[0];
-                    const config = currentItem.config;
-                    return (_jsxs(Box, { flexDirection: "column", marginY: isSelected ? 1 : 0, children: [_jsxs(Text, { color: isSelected ? colors.accent : undefined, bold: isSelected, children: [isSelected ? '❯ ' : '  ', currentItem.label, _jsxs(Text, { color: "gray", children: [" - ", config.description] })] }), isSelected && (_jsxs(Box, { flexDirection: "column", marginLeft: 4, children: [_jsxs(Text, { color: "gray", children: ["Throughput: ", config.throughput] }), _jsxs(Text, { color: "gray", children: ["Nodes: ", config.nodes.min, "-", config.nodes.max, " \u2022 ", config.resources] }), _jsxs(Text, { color: "gray", children: ["HPS Workers: ", config.hpsWorkerReplicas.min, "-", config.hpsWorkerReplicas.max] })] }))] }));
-                } }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "gray", dimColor: true, children: "Esc to go back \u2022 Enter to select" }) })] }));
-}

package/dist/lib/terraform.d.ts

@@ -1,66 +0,0 @@
-import { CloudProvider, DeploymentConfig } from '../types/index.js';
-/**
- * Checks if Terraform is installed
- */
-export declare function isTerraformInstalled(): Promise<boolean>;
-/**
- * Gets the installed Terraform version
- */
-export declare function getTerraformVersion(): Promise<string>;
-/**
- * Copies terraform templates to the deployment directory
- */
-export declare function setupTerraformWorkspace(deploymentName: string, provider: CloudProvider): Promise<string>;
-/**
- * Initializes Terraform in the deployment directory
- */
-export declare function terraformInit(deploymentName: string): Promise<void>;
-/**
- * Plans Terraform changes
- */
-export declare function terraformPlan(deploymentName: string): Promise<void>;
-/**
- * Applies Terraform changes
- */
-export declare function terraformApply(deploymentName: string): Promise<void>;
-/**
- * Lightweight pre-deploy cleanup for the CloudWatch log group that the EKS module
- * no longer manages (create_cloudwatch_log_group = false). Safe to call before
- * terraform apply since it targets a resource outside terraform's control.
- */
-export declare function cleanupOrphanedResources(provider: CloudProvider, clusterName: string, region: string): Promise<void>;
-/**
- * Destroys Terraform infrastructure, then sweeps remaining cloud resources.
- *
- * Flow:
- *   1. terraform destroy (single attempt)
- *   2. Cloud-native cleanup ALWAYS runs (terraform can report success while
- *      resources still exist)
- *   3. If terraform reported failure, try once more now that blockers are gone
- */
-export declare function terraformDestroy(deploymentName: string, cloudContext?: {
-    provider: CloudProvider;
-    clusterName: string;
-    region: string;
-}): Promise<void>;
-/**
- * Gets Terraform outputs
- */
-export declare function getTerraformOutputs(deploymentName: string): Promise<Record<string, string>>;
-/**
- * Checks if Terraform files/state exist for a deployment.
- * Returns true if the terraform directory contains any terraform files,
- * not just the state file. This allows destroy to work on partial infrastructure.
- */
-export declare function hasTerraformState(deploymentName: string): Promise<boolean>;
-/**
- * Generates Terraform variables from deployment configuration
- */
-export declare function generateTerraformVars(config: DeploymentConfig): Record<string, unknown>;
-/**
- * Updates kubeconfig for the provisioned cluster
- */
-export declare function updateKubeconfig(provider: CloudProvider, clusterName: string, region: string, options?: {
-    gcpProjectId?: string;
-    azureResourceGroup?: string;
-}): Promise<void>;