@ydkn/pulumi-components 0.4.0

package/lib/openldap/deployment.js

@@ -0,0 +1,217 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenLdapServer = void 0;
+const pulumi = require("@pulumi/pulumi");
+const random = require("@pulumi/random");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../common");
+const kubernetes = require("../kubernetes");
+const certManager = require("../certManager");
+class OpenLdapServer extends common_1.ComponentResource {
+    podSecurityPolicy;
+    serviceAccount;
+    role;
+    roleBinding;
+    dataVolumeClaim;
+    adminSecret;
+    certificate;
+    deployment;
+    podDisruptionBudget;
+    service;
+    namespace;
+    adminCN;
+    adminPassword;
+    hostname;
+    rootDN;
+    /**
+     * Create a new OpenLDAP server resource.
+     * @param name The name of the OpenLDAP server resource.
+     * @param args A bag of arguments to control the OpenLDAP server creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("openldap", name, args, opts);
+        if (args.storage === undefined) {
+            args.storage = "10Gi";
+        }
+        if (args.resources === undefined) {
+            args.resources = { requests: { memory: "32Mi" }, limits: { memory: "48Mi" } };
+        }
+        const emptyOpts = this.opts();
+        const k8sOpts = this.opts(k8s.Provider);
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, k8sOpts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "openldap",
+                "app.kubernetes.io/component": "openldap",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.podSecurityPolicy = new k8s.policy.v1beta1.PodSecurityPolicy(name, {
+            metadata,
+            spec: {
+                fsGroup: { rule: "RunAsAny" },
+                runAsUser: { rule: "RunAsAny" },
+                runAsGroup: { rule: "RunAsAny" },
+                seLinux: { rule: "RunAsAny" },
+                supplementalGroups: { rule: "RunAsAny" },
+                volumes: ["secret", "persistentVolumeClaim"],
+                hostNetwork: false,
+            },
+        }, k8sOpts);
+        this.serviceAccount = new k8s.core.v1.ServiceAccount(name, { metadata }, k8sOpts);
+        this.role = new k8s.rbac.v1.Role(name, {
+            metadata,
+            rules: [
+                {
+                    apiGroups: ["policy"],
+                    resourceNames: [this.podSecurityPolicy.metadata.name],
+                    resources: ["podsecuritypolicies"],
+                    verbs: ["use"],
+                },
+            ],
+        }, k8sOpts);
+        this.roleBinding = new k8s.rbac.v1.RoleBinding(name, {
+            metadata,
+            subjects: [
+                {
+                    kind: this.serviceAccount.kind,
+                    namespace: this.serviceAccount.metadata.namespace,
+                    name: this.serviceAccount.metadata.name,
+                },
+            ],
+            roleRef: { apiGroup: "rbac.authorization.k8s.io", kind: this.role.kind, name: this.role.metadata.name },
+        }, k8sOpts);
+        const dataVolumeClaimName = pulumi.interpolate `${name}-data`;
+        this.dataVolumeClaim = new k8s.core.v1.PersistentVolumeClaim(`${name}-data`, {
+            metadata: { ...metadata, name: dataVolumeClaimName },
+            spec: {
+                accessModes: ["ReadWriteOnce"],
+                resources: { requests: { storage: args.storage } },
+            },
+        }, { ...k8sOpts, protect: args.protect });
+        this.adminCN = pulumi.secret(pulumi.interpolate `cn=admin,${args.rootDN}`);
+        this.adminPassword = pulumi.secret(new random.RandomPassword(`${name}-admin-password`, { length: 64, special: false }, emptyOpts).result);
+        this.adminSecret = new k8s.core.v1.Secret(`${name}-admin`, {
+            metadata,
+            stringData: {
+                username: "admin",
+                password: this.adminPassword,
+            },
+        }, k8sOpts);
+        this.certificate = new certManager.Certificate(name, {
+            metadata,
+            spec: {
+                dnsNames: [args.hostname],
+                privateKey: { rotationPolicy: "Always" },
+                issuerRef: { kind: "ClusterIssuer", name: args.clusterIssuer },
+            },
+        }, k8sOpts);
+        this.deployment = new k8s.apps.v1.Deployment(name, {
+            metadata,
+            spec: {
+                selector: { matchLabels: metadata.labels },
+                strategy: { type: "Recreate" },
+                replicas: 1,
+                template: {
+                    metadata: {
+                        labels: metadata.labels,
+                        annotations: { "backup.velero.io/backup-volumes": "data" },
+                    },
+                    spec: {
+                        serviceAccountName: this.serviceAccount.metadata.name,
+                        initContainers: [
+                            {
+                                name: "fix-permissions",
+                                image: "busybox:latest",
+                                command: ["/bin/chown", "-R", "1001", "/bitnami/openldap"],
+                                resources: {
+                                    requests: { memory: "16Mi" },
+                                    limits: { memory: "24Mi" },
+                                },
+                                volumeMounts: [{ name: "data", mountPath: "/bitnami/openldap" }],
+                            },
+                        ],
+                        containers: [
+                            {
+                                name: "openldap",
+                                image: "docker.io/bitnami/openldap:latest",
+                                imagePullPolicy: "Always",
+                                env: [
+                                    {
+                                        name: "LDAP_ADMIN_USERNAME",
+                                        valueFrom: { secretKeyRef: { name: this.adminSecret.metadata.name, key: "username" } },
+                                    },
+                                    {
+                                        name: "LDAP_ADMIN_PASSWORD",
+                                        valueFrom: { secretKeyRef: { name: this.adminSecret.metadata.name, key: "password" } },
+                                    },
+                                    { name: "LDAP_ROOT", value: args.rootDN },
+                                    { name: "LDAP_ENABLE_TLS", value: "yes" },
+                                    { name: "LDAP_TLS_CERT_FILE", value: "/tls/tls.crt" },
+                                    { name: "LDAP_TLS_KEY_FILE", value: "/tls/tls.key" },
+                                    { name: "LDAP_TLS_CA_FILE", value: "/tls/tls.crt" },
+                                    { name: "LDAP_ALLOW_ANON_BINDING", value: "no" },
+                                ],
+                                ports: [
+                                    { name: "ldap", containerPort: 1389 },
+                                    { name: "ldaps", containerPort: 1636 },
+                                ],
+                                livenessProbe: {
+                                    periodSeconds: 10,
+                                    timeoutSeconds: 10,
+                                    successThreshold: 1,
+                                    failureThreshold: 3,
+                                    tcpSocket: { port: "ldap" },
+                                },
+                                readinessProbe: {
+                                    periodSeconds: 10,
+                                    timeoutSeconds: 10,
+                                    successThreshold: 1,
+                                    failureThreshold: 3,
+                                    tcpSocket: { port: "ldap" },
+                                },
+                                resources: args.resources,
+                                volumeMounts: [
+                                    { name: "tls", mountPath: "/tls" },
+                                    { name: "data", mountPath: "/bitnami/openldap" },
+                                ],
+                            },
+                        ],
+                        volumes: [
+                            { name: "tls", secret: { secretName: this.certificate.secretName } },
+                            { name: "data", persistentVolumeClaim: { claimName: dataVolumeClaimName } },
+                        ],
+                    },
+                },
+            },
+        }, k8sOpts);
+        this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(name, {
+            metadata,
+            spec: {
+                minAvailable: 1,
+                selector: { matchLabels: metadata.labels },
+            },
+        }, k8sOpts);
+        this.service = new kubernetes.v1.Service(name, {
+            metadata,
+            spec: {
+                selector: metadata.labels,
+                ports: [
+                    { name: "ldap", port: 389, targetPort: "ldap" },
+                    { name: "ldaps", port: 636, targetPort: "ldaps" },
+                ],
+            },
+            hostnames: [args.hostname],
+        }, { ...k8sOpts, dependsOn: [this.deployment] });
+        this.hostname = pulumi.output(args.hostname);
+        this.rootDN = pulumi.output(args.rootDN);
+        this.registerOutputs();
+    }
+}
+exports.OpenLdapServer = OpenLdapServer;
+//# sourceMappingURL=deployment.js.map

package/lib/openldap/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/openldap/deployment.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AAC9C,4CAA4C;AAC5C,8CAA8C;AAiC9C,MAAa,cAAe,SAAQ,0BAAiB;IAClC,iBAAiB,CAAuC;IACxD,cAAc,CAA6B;IAC3C,IAAI,CAAmB;IACvB,WAAW,CAA0B;IACrC,eAAe,CAAoC;IACnD,WAAW,CAAqB;IAChC,WAAW,CAA0B;IACrC,UAAU,CAAyB;IACnC,mBAAmB,CAAoC;IACvD,OAAO,CAAwB;IAChC,SAAS,CAAwB;IACjC,OAAO,CAAwB;IAC/B,aAAa,CAAwB;IACrC,QAAQ,CAAwB;IAChC,MAAM,CAAwB;IAE9C;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAwB,EAAE,IAAsC;QACxF,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEpC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE;YAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;SACvB;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE;YAChC,IAAI,CAAC,SAAS,GAAG,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;SAC/E;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEnF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,UAAU;gBACpC,6BAA6B,EAAE,UAAU;gBACzC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAC/D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC/B,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAChC,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBACxC,OAAO,EAAE,CAAC,QAAQ,EAAE,uBAAuB,CAAC;gBAC5C,WAAW,EAAE,KAAK;aACnB;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QAElF,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAC9B,IAAI,EACJ;YACE,QAAQ;YACR,KAAK,EAAE;gBACL;oBACE,SAAS,EAAE,CAAC,QAAQ,CAAC;oBACrB,aAAa,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrD,SAAS,EAAE,CAAC,qBAAqB,CAAC;oBAClC,KAAK,EAAE,CAAC,KAAK,CAAC;iBACf;aACF;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;oBAC9B,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS;oBACjD,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;iBACxC;aACF;YACD,OAAO,EAAE,EAAE,QAAQ,EAAE,2BAA2B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;SACxG,EACD,OAAO,CACR,CAAC;QAEF,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,OAAO,CAAC;QAE7D,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAC1D,GAAG,IAAI,OAAO,EACd;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,mBAAmB,EAAE;YACpD,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC,eAAe,CAAC;gBAC9B,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;aACnD;SACF,EACD,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CACtC,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAA,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAE1E,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAChC,IAAI,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,iBAAiB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC,MAAM,CACtG,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACvC,GAAG,IAAI,QAAQ,EACf;YACE,QAAQ;YACR,UAAU,EAAE;gBACV,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,IAAI,CAAC,aAAa;aAC7B;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACzB,UAAU,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE;gBACxC,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE;aAC/D;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAC1C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC9B,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE;oBACR,QAAQ,EAAE;wBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,WAAW,EAAE,EAAE,iCAAiC,EAAE,MAAM,EAAE;qBAC3D;oBACD,IAAI,EAAE;wBACJ,kBAAkB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;wBACrD,cAAc,EAAE;4BACd;gCACE,IAAI,EAAE,iBAAiB;gCACvB,KAAK,EAAE,gBAAgB;gCACvB,OAAO,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,CAAC;gCAC1D,SAAS,EAAE;oCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;oCAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iCAC3B;gCACD,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC;6BACjE;yBACF;wBACD,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,UAAU;gCAChB,KAAK,EAAE,mCAAmC;gCAC1C,eAAe,EAAE,QAAQ;gCACzB,GAAG,EAAE;oCACH;wCACE,IAAI,EAAE,qBAAqB;wCAC3B,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE;qCACvF;oCACD;wCACE,IAAI,EAAE,qBAAqB;wCAC3B,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE;qCACvF;oCACD,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;oCACzC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE;oCACzC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,cAAc,EAAE;oCACrD,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE;oCACpD,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,cAAc,EAAE;oCACnD,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,IAAI,EAAE;iCACjD;gCACD,KAAK,EAAE;oCACL,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE;oCACrC,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE;iCACvC;gCACD,aAAa,EAAE;oCACb,aAAa,EAAE,EAAE;oCACjB,cAAc,EAAE,EAAE;oCAClB,gBAAgB,EAAE,CAAC;oCACnB,gBAAgB,EAAE,CAAC;oCACnB,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;iCAC5B;gCACD,cAAc,EAAE;oCACd,aAAa,EAAE,EAAE;oCACjB,cAAc,EAAE,EAAE;oCAClB,gBAAgB,EAAE,CAAC;oCACnB,gBAAgB,EAAE,CAAC;oCACnB,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;iCAC5B;gCACD,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,YAAY,EAAE;oCACZ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE;oCAClC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE;iCACjD;6BACF;yBACF;wBACD,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE;4BACpE,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE;yBAC5E;qBACF;iBACF;aACF;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAC9D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,YAAY,EAAE,CAAC;gBACf,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;aAC3C;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,CACtC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,KAAK,EAAE;oBACL,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE;oBAC/C,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE;iBAClD;aACF;YACD,SAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;SAC3B,EACD,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAC7C,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzC,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AAxQD,wCAwQC"}

package/lib/openldap/index.d.ts

@@ -0,0 +1,3 @@
+import { OpenLdapServerArgs, OpenLdapServer } from "./deployment";
+export { OpenLdapServerArgs, OpenLdapServer };
+//# sourceMappingURL=index.d.ts.map

package/lib/openldap/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/openldap/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAElE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC"}

package/lib/openldap/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenLdapServer = void 0;
+const deployment_1 = require("./deployment");
+Object.defineProperty(exports, "OpenLdapServer", { enumerable: true, get: function () { return deployment_1.OpenLdapServer; } });
+//# sourceMappingURL=index.js.map

package/lib/openldap/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/openldap/index.ts"],"names":[],"mappings":";;;AAAA,6CAAkE;AAErC,+FAFA,2BAAc,OAEA"}

package/lib/plex/index.d.ts

@@ -0,0 +1,4 @@
+import { MediaServerArgs, MediaServer } from "./mediaServer";
+import { PlaylistConfigArgs, PlaylistArgs, Playlist } from "./playlists";
+export { MediaServerArgs, MediaServer, PlaylistConfigArgs, PlaylistArgs, Playlist };
+//# sourceMappingURL=index.d.ts.map

package/lib/plex/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/plex/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC"}

package/lib/plex/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Playlist = exports.MediaServer = void 0;
+const mediaServer_1 = require("./mediaServer");
+Object.defineProperty(exports, "MediaServer", { enumerable: true, get: function () { return mediaServer_1.MediaServer; } });
+const playlists_1 = require("./playlists");
+Object.defineProperty(exports, "Playlist", { enumerable: true, get: function () { return playlists_1.Playlist; } });
+//# sourceMappingURL=index.js.map

package/lib/plex/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/plex/index.ts"],"names":[],"mappings":";;;AAAA,+CAA6D;AAGnC,4FAHA,yBAAW,OAGA;AAFrC,2CAAyE;AAEA,yFAF9B,oBAAQ,OAE8B"}

package/lib/plex/mediaServer.d.ts

@@ -0,0 +1,46 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { ComponentResource } from "../common";
+export interface MediaServerArgs {
+    namespace?: pulumi.Input<string>;
+    name: pulumi.Input<string>;
+    hostname: pulumi.Input<string>;
+    ingressClassName?: pulumi.Input<string>;
+    storageClassName?: pulumi.Input<string>;
+    storage?: pulumi.Input<string>;
+    resources?: pulumi.Input<k8s.types.input.core.v1.ResourceRequirements>;
+    uid: pulumi.Input<number>;
+    gid: pulumi.Input<number>;
+    volumes?: {
+        [key: string]: pulumi.Input<string>;
+    };
+    clusterIssuer: pulumi.Input<string>;
+    avahiLabelName?: pulumi.Input<string>;
+    claimToken?: pulumi.Input<string>;
+    protect?: boolean;
+}
+export declare class MediaServer extends ComponentResource {
+    private readonly podSecurityPolicy;
+    private readonly serviceAccount;
+    private readonly role;
+    private readonly roleBinding;
+    private readonly configVolumeClaim;
+    private readonly certificatePassword;
+    private readonly certificate;
+    private readonly claimToken;
+    private readonly deployment;
+    private readonly podDisruptionBudget;
+    private readonly service;
+    private readonly avahiService?;
+    readonly namespace: pulumi.Output<string>;
+    readonly pkcs12Password: pulumi.Output<string>;
+    readonly url: pulumi.Output<string>;
+    /**
+     * Create a new Plex media server resource.
+     * @param name The name of the Plex media server resource.
+     * @param args A bag of arguments to control the Plex media server creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: MediaServerArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=mediaServer.d.ts.map

package/lib/plex/mediaServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mediaServer.d.ts","sourceRoot":"","sources":["../../../lib/plex/mediaServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAK9C,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;IACvE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC;IAClD,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,WAAY,SAAQ,iBAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAuC;IACzE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoC;IACtE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAqB;IACnD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,SAAgB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,SAAgB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE3C;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAgRxF"}

package/lib/plex/mediaServer.js

@@ -0,0 +1,234 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MediaServer = void 0;
+const pulumi = require("@pulumi/pulumi");
+const random = require("@pulumi/random");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../common");
+const kubernetes = require("../kubernetes");
+const certManager = require("../certManager");
+const avahi = require("../avahi");
+class MediaServer extends common_1.ComponentResource {
+    podSecurityPolicy;
+    serviceAccount;
+    role;
+    roleBinding;
+    configVolumeClaim;
+    certificatePassword;
+    certificate;
+    claimToken;
+    deployment;
+    podDisruptionBudget;
+    service;
+    avahiService;
+    namespace;
+    pkcs12Password;
+    url;
+    /**
+     * Create a new Plex media server resource.
+     * @param name The name of the Plex media server resource.
+     * @param args A bag of arguments to control the Plex media server creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("plex:media-server", name, args, opts);
+        if (args.storage === undefined) {
+            args.storage = "100Gi";
+        }
+        if (args.resources === undefined) {
+            args.resources = { requests: { memory: "512Mi" }, limits: { memory: "768Mi" } };
+        }
+        const emptyOpts = this.opts();
+        const k8sOpts = this.opts(k8s.Provider);
+        this.url = pulumi.interpolate `https://${args.hostname}`;
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, k8sOpts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "plex",
+                "app.kubernetes.io/component": "media-server",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.podSecurityPolicy = new k8s.policy.v1beta1.PodSecurityPolicy(name, {
+            metadata,
+            spec: {
+                fsGroup: { rule: "RunAsAny" },
+                runAsUser: { rule: "RunAsAny" },
+                runAsGroup: { rule: "RunAsAny" },
+                seLinux: { rule: "RunAsAny" },
+                supplementalGroups: { rule: "RunAsAny" },
+                volumes: ["emptyDir", "persistentVolumeClaim"],
+                hostNetwork: false,
+            },
+        }, k8sOpts);
+        this.serviceAccount = new k8s.core.v1.ServiceAccount(name, { metadata }, k8sOpts);
+        this.role = new k8s.rbac.v1.Role(name, {
+            metadata,
+            rules: [
+                {
+                    apiGroups: ["policy"],
+                    resourceNames: [this.podSecurityPolicy.metadata.name],
+                    resources: ["podsecuritypolicies"],
+                    verbs: ["use"],
+                },
+            ],
+        }, k8sOpts);
+        this.roleBinding = new k8s.rbac.v1.RoleBinding(name, {
+            metadata,
+            subjects: [
+                {
+                    kind: this.serviceAccount.kind,
+                    namespace: this.serviceAccount.metadata.namespace,
+                    name: this.serviceAccount.metadata.name,
+                },
+            ],
+            roleRef: { apiGroup: "rbac.authorization.k8s.io", kind: this.role.kind, name: this.role.metadata.name },
+        }, k8sOpts);
+        this.configVolumeClaim = new k8s.core.v1.PersistentVolumeClaim(`${name}-config`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-config` },
+            spec: {
+                storageClassName: args.storageClassName,
+                accessModes: ["ReadWriteOnce"],
+                resources: { requests: { storage: args.storage } },
+            },
+        }, { ...k8sOpts, protect: args.protect });
+        this.pkcs12Password = pulumi.secret(new random.RandomPassword(`${name}-pkcs12-password`, { length: 64, special: false }, emptyOpts).result);
+        this.certificatePassword = new k8s.core.v1.Secret(`${name}-pkcs12-password`, {
+            metadata: { ...metadata, name: `${name}-pkcs12-password` },
+            stringData: {
+                password: this.pkcs12Password,
+            },
+        }, k8sOpts);
+        this.certificate = new certManager.Certificate(name, {
+            metadata,
+            spec: {
+                dnsNames: [args.hostname],
+                privateKey: { rotationPolicy: "Always" },
+                issuerRef: { name: args.clusterIssuer, kind: "ClusterIssuer" },
+                keystores: {
+                    pkcs12: {
+                        create: true,
+                        passwordSecretRef: { name: this.certificatePassword.metadata.name, key: "password" },
+                    },
+                },
+            },
+        }, k8sOpts);
+        this.claimToken = new k8s.core.v1.Secret(`${name}-claim-token`, {
+            metadata: { ...metadata, name: `${name}-claim-token` },
+            stringData: {
+                claimToken: args.claimToken ?? "",
+            },
+        }, k8sOpts);
+        this.deployment = new k8s.apps.v1.Deployment(name, {
+            metadata,
+            spec: {
+                selector: { matchLabels: metadata.labels },
+                strategy: { type: "Recreate" },
+                replicas: 1,
+                template: {
+                    metadata: {
+                        labels: metadata.labels,
+                        // annotations: { "backup.velero.io/backup-volumes": "backups" },
+                    },
+                    spec: {
+                        serviceAccountName: this.serviceAccount.metadata.name,
+                        containers: [
+                            {
+                                name: "plex-media-server",
+                                image: "plexinc/pms-docker:latest",
+                                imagePullPolicy: "Always",
+                                env: [
+                                    { name: "HOSTNAME", value: args.name },
+                                    { name: "TZ", value: "Etc/UTC" },
+                                    { name: "ADVERTISE_IP", value: this.url },
+                                    { name: "PLEX_UID", value: pulumi.all([args.uid]).apply(([uid]) => `${uid}`) },
+                                    { name: "PLEX_GID", value: pulumi.all([args.gid]).apply(([gid]) => `${gid}`) },
+                                    {
+                                        name: "PLEX_CLAIM",
+                                        valueFrom: { secretKeyRef: { name: this.claimToken.metadata.name, key: "claimToken" } },
+                                    },
+                                ],
+                                ports: [{ name: "plex", containerPort: 32400 }],
+                                livenessProbe: {
+                                    periodSeconds: 30,
+                                    timeoutSeconds: 10,
+                                    successThreshold: 1,
+                                    failureThreshold: 8,
+                                    httpGet: { path: "/identity", port: "plex", scheme: "HTTPS" },
+                                },
+                                readinessProbe: {
+                                    periodSeconds: 30,
+                                    timeoutSeconds: 10,
+                                    successThreshold: 1,
+                                    failureThreshold: 3,
+                                    httpGet: { path: "/identity", port: "plex", scheme: "HTTPS" },
+                                },
+                                resources: args.resources,
+                                volumeMounts: pulumi.all([args.volumes]).apply(([volumes]) => {
+                                    volumes = volumes ?? {};
+                                    const volumeMounts = [
+                                        { name: "tls", mountPath: "/tls" },
+                                        { name: "config", mountPath: "/config" },
+                                        { name: "transcode", mountPath: "/transcode" },
+                                        { name: "backups", mountPath: "/backups" },
+                                    ];
+                                    for (const volumeName in volumes) {
+                                        volumeMounts.push({ name: volumeName, mountPath: `/mnt/${volumeName}` });
+                                    }
+                                    return volumeMounts;
+                                }),
+                            },
+                        ],
+                        terminationGracePeriodSeconds: 120,
+                        volumes: pulumi.all([args.volumes]).apply(([volumes]) => {
+                            volumes = volumes ?? {};
+                            const volumeSpecs = [
+                                { name: "tls", secret: { secretName: this.certificate.secretName } },
+                                { name: "config", persistentVolumeClaim: { claimName: this.configVolumeClaim.metadata.name } },
+                                { name: "transcode", emptyDir: {} },
+                                { name: "backups", emptyDir: {} },
+                            ];
+                            for (const volumeName in volumes) {
+                                // eslint-disable-next-line security/detect-object-injection
+                                const claimName = volumes[volumeName];
+                                volumeSpecs.push({ name: volumeName, persistentVolumeClaim: { claimName } });
+                            }
+                            return volumeSpecs;
+                        }),
+                    },
+                },
+            },
+        }, k8sOpts);
+        this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(name, {
+            metadata,
+            spec: {
+                minAvailable: 1,
+                selector: { matchLabels: metadata.labels },
+            },
+        }, k8sOpts);
+        this.service = new kubernetes.v1.Service(name, {
+            metadata,
+            spec: {
+                selector: metadata.labels,
+                type: "LoadBalancer",
+                ports: [{ name: "https", port: 443, targetPort: "plex" }],
+            },
+            hostnames: [args.hostname],
+        }, { ...k8sOpts, dependsOn: [this.deployment] });
+        if (args.avahiLabelName !== undefined) {
+            this.avahiService = new avahi.AvahiService(name, {
+                metadata,
+                labelName: args.avahiLabelName,
+                name,
+                services: [{ type: "_plexmediasvr._tcp", port: 443, hostname: args.hostname }],
+            }, k8sOpts);
+        }
+        this.registerOutputs();
+    }
+}
+exports.MediaServer = MediaServer;
+//# sourceMappingURL=mediaServer.js.map

package/lib/plex/mediaServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mediaServer.js","sourceRoot":"","sources":["../../../lib/plex/mediaServer.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AAC9C,4CAA4C;AAC5C,8CAA8C;AAC9C,kCAAkC;AAmBlC,MAAa,WAAY,SAAQ,0BAAiB;IAC/B,iBAAiB,CAAuC;IACxD,cAAc,CAA6B;IAC3C,IAAI,CAAmB;IACvB,WAAW,CAA0B;IACrC,iBAAiB,CAAoC;IACrD,mBAAmB,CAAqB;IACxC,WAAW,CAA0B;IACrC,UAAU,CAAqB;IAC/B,UAAU,CAAyB;IACnC,mBAAmB,CAAoC;IACvD,OAAO,CAAwB;IAC/B,YAAY,CAAsB;IACnC,SAAS,CAAwB;IACjC,cAAc,CAAwB;IACtC,GAAG,CAAwB;IAE3C;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAsC;QACrF,KAAK,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE7C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE;YAC9B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;SACxB;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE;YAChC,IAAI,CAAC,SAAS,GAAG,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;SACjF;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,WAAW,CAAA,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;QAExD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEnF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,MAAM;gBAChC,6BAA6B,EAAE,cAAc;gBAC7C,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAC/D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC/B,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAChC,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBACxC,OAAO,EAAE,CAAC,UAAU,EAAE,uBAAuB,CAAC;gBAC9C,WAAW,EAAE,KAAK;aACnB;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QAElF,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAC9B,IAAI,EACJ;YACE,QAAQ;YACR,KAAK,EAAE;gBACL;oBACE,SAAS,EAAE,CAAC,QAAQ,CAAC;oBACrB,aAAa,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrD,SAAS,EAAE,CAAC,qBAAqB,CAAC;oBAClC,KAAK,EAAE,CAAC,KAAK,CAAC;iBACf;aACF;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;oBAC9B,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS;oBACjD,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;iBACxC;aACF;YACD,OAAO,EAAE,EAAE,QAAQ,EAAE,2BAA2B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;SACxG,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAC5D,GAAG,IAAI,SAAS,EAChB;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,SAAS,EAAE;YACnE,IAAI,EAAE;gBACJ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,WAAW,EAAE,CAAC,eAAe,CAAC;gBAC9B,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;aACnD;SACF,EACD,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CACtC,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,MAAM,CACjC,IAAI,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,kBAAkB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC,MAAM,CACvG,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAC/C,GAAG,IAAI,kBAAkB,EACzB;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,kBAAkB,EAAE;YAC1D,UAAU,EAAE;gBACV,QAAQ,EAAE,IAAI,CAAC,cAAc;aAC9B;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACzB,UAAU,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE;gBACxC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE;gBAC9D,SAAS,EAAE;oBACT,MAAM,EAAE;wBACN,MAAM,EAAE,IAAI;wBACZ,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE;qBACrF;iBACF;aACF;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACtC,GAAG,IAAI,cAAc,EACrB;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,cAAc,EAAE;YACtD,UAAU,EAAE;gBACV,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;aAClC;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAC1C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC9B,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE;oBACR,QAAQ,EAAE;wBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,iEAAiE;qBAClE;oBACD,IAAI,EAAE;wBACJ,kBAAkB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;wBACrD,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,mBAAmB;gCACzB,KAAK,EAAE,2BAA2B;gCAClC,eAAe,EAAE,QAAQ;gCACzB,GAAG,EAAE;oCACH,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;oCACtC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE;oCAChC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;oCACzC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;oCAC9E,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;oCAC9E;wCACE,IAAI,EAAE,YAAY;wCAClB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE;qCACxF;iCACF;gCACD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;gCAC/C,aAAa,EAAE;oCACb,aAAa,EAAE,EAAE;oCACjB,cAAc,EAAE,EAAE;oCAClB,gBAAgB,EAAE,CAAC;oCACnB,gBAAgB,EAAE,CAAC;oCACnB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;iCAC9D;gCACD,cAAc,EAAE;oCACd,aAAa,EAAE,EAAE;oCACjB,cAAc,EAAE,EAAE;oCAClB,gBAAgB,EAAE,CAAC;oCACnB,gBAAgB,EAAE,CAAC;oCACnB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;iCAC9D;gCACD,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE;oCAC3D,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;oCAExB,MAAM,YAAY,GAA0C;wCAC1D,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE;wCAClC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE;wCACxC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE;wCAC9C,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE;qCAC3C,CAAC;oCAEF,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE;wCAChC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,UAAU,EAAE,EAAE,CAAC,CAAC;qCAC1E;oCAED,OAAO,YAAY,CAAC;gCACtB,CAAC,CAAC;6BACH;yBACF;wBACD,6BAA6B,EAAE,GAAG;wBAClC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE;4BACtD,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;4BAExB,MAAM,WAAW,GAAqC;gCACpD,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE;gCACpE,EAAE,IAAI,EAAE,QAAQ,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;gCAC9F,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;gCACnC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;6BAClC,CAAC;4BAEF,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE;gCAChC,4DAA4D;gCAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;gCAEtC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;6BAC9E;4BAED,OAAO,WAAW,CAAC;wBACrB,CAAC,CAAC;qBACH;iBACF;aACF;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAC9D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,YAAY,EAAE,CAAC;gBACf,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;aAC3C;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,CACtC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;aAC1D;YACD,SAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;SAC3B,EACD,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAC7C,CAAC;QAEF,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE;YACrC,IAAI,CAAC,YAAY,GAAG,IAAI,KAAK,CAAC,YAAY,CACxC,IAAI,EACJ;gBACE,QAAQ;gBACR,SAAS,EAAE,IAAI,CAAC,cAAc;gBAC9B,IAAI;gBACJ,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;aAC/E,EACD,OAAO,CACR,CAAC;SACH;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AAvSD,kCAuSC"}

package/lib/plex/playlists.d.ts

@@ -0,0 +1,62 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+export interface PlexArgs {
+    /**
+     * Server URL
+     */
+    serverURL: pulumi.Input<string>;
+    /**
+     * Plex auth token
+     */
+    token: pulumi.Input<string>;
+}
+export interface PlaylistConfigArgs {
+    /**
+     * Playlist name
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Libraries
+     */
+    libraries: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Optional: Genres
+     */
+    genres?: pulumi.Input<pulumi.Input<string>[]>;
+}
+export interface PlaylistArgs {
+    /**
+     * Optional: Namespace
+     */
+    namespace?: pulumi.Input<string>;
+    /**
+     * Plex
+     */
+    plex: pulumi.Input<PlexArgs>;
+    /**
+     * Playlist
+     */
+    playlist: pulumi.Input<PlaylistConfigArgs>;
+    /**
+     * Cron schedule
+     */
+    schedule: pulumi.Input<string>;
+}
+export declare class Playlist extends ComponentResource {
+    private readonly podSecurityPolicy;
+    private readonly serviceAccount;
+    private readonly role;
+    private readonly roleBinding;
+    private readonly plexConfig;
+    private readonly playlistConfig;
+    private readonly cronjob;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new Plex playlists resource.
+     * @param name The name of the Plex playlists resource.
+     * @param args A bag of arguments to control the Plex playlists creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: PlaylistArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=playlists.d.ts.map

package/lib/plex/playlists.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"playlists.d.ts","sourceRoot":"","sources":["../../../lib/plex/playlists.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC3C;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAChC;AAED,qBAAa,QAAS,SAAQ,iBAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAuC;IACzE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CA4IrF"}