@ydkn/pulumi-components 0.4.0

package/lib/unifi/controller.js

@@ -0,0 +1,232 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnifiController = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../common");
+const kubernetes = require("../kubernetes");
+const traefik = require("../traefik");
+class UnifiController extends common_1.ComponentResource {
+    podSecurityPolicy;
+    serviceAccount;
+    role;
+    roleBinding;
+    volumeClaim;
+    deployment;
+    podDisruptionBudget;
+    service;
+    ingress;
+    namespace;
+    /**
+     * Create a new UniFi controller resource.
+     * @param name The name of the UniFi controller resource.
+     * @param args A bag of arguments to control the UniFi controller creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("unifi:controller", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.storage === undefined) {
+            args.storage = "10Gi";
+        }
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        const metadata = {
+            name: pulumi.interpolate `${name}-controller`,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "unifi",
+                "app.kubernetes.io/component": "controller",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.podSecurityPolicy = new k8s.policy.v1beta1.PodSecurityPolicy(name, {
+            metadata,
+            spec: {
+                fsGroup: { rule: "RunAsAny" },
+                runAsUser: { rule: "RunAsAny" },
+                runAsGroup: { rule: "RunAsAny" },
+                seLinux: { rule: "RunAsAny" },
+                supplementalGroups: { rule: "RunAsAny" },
+                volumes: ["emptyDir", "persistentVolumeClaim"],
+                hostNetwork: false,
+            },
+        }, opts);
+        this.serviceAccount = new k8s.core.v1.ServiceAccount(name, { metadata }, opts);
+        this.role = new k8s.rbac.v1.Role(name, {
+            metadata,
+            rules: [
+                {
+                    apiGroups: ["policy"],
+                    resourceNames: [this.podSecurityPolicy.metadata.name],
+                    resources: ["podsecuritypolicies"],
+                    verbs: ["use"],
+                },
+            ],
+        }, opts);
+        this.roleBinding = new k8s.rbac.v1.RoleBinding(name, {
+            metadata,
+            subjects: [
+                {
+                    kind: this.serviceAccount.kind,
+                    namespace: this.serviceAccount.metadata.namespace,
+                    name: this.serviceAccount.metadata.name,
+                },
+            ],
+            roleRef: { apiGroup: "rbac.authorization.k8s.io", kind: this.role.kind, name: this.role.metadata.name },
+        }, opts);
+        const volumeClaimName = `${name}-controller-data`;
+        this.volumeClaim = new k8s.core.v1.PersistentVolumeClaim(name, {
+            metadata: { ...metadata, name: volumeClaimName },
+            spec: {
+                accessModes: ["ReadWriteOnce"],
+                storageClassName: args.storageClassName,
+                resources: { requests: { storage: args.storage } },
+            },
+        }, { ...opts, protect: args.protect });
+        this.deployment = new k8s.apps.v1.Deployment(name, {
+            metadata,
+            spec: {
+                selector: { matchLabels: metadata.labels },
+                strategy: { type: "Recreate" },
+                replicas: 1,
+                template: {
+                    metadata: {
+                        labels: metadata.labels,
+                        annotations: {
+                            "backup.velero.io/backup-volumes": "backup",
+                            "pre.hook.backup.velero.io/command": '["/bin/sh", "-c", "rm -rf /backup/* && cp -rp /config/data/backup/* /backup/"]',
+                            "pre.hook.backup.velero.io/container": "controller",
+                            "pre.hook.backup.velero.io/timeout": "5m",
+                        },
+                    },
+                    spec: {
+                        serviceAccount: this.serviceAccount.metadata.name,
+                        containers: [
+                            {
+                                name: "controller",
+                                image: "ghcr.io/linuxserver/unifi-controller:latest",
+                                imagePullPolicy: "Always",
+                                securityContext: { runAsNonRoot: false },
+                                env: [{ name: "MEM_LIMIT", value: "896M" }],
+                                ports: [
+                                    { protocol: "UDP", containerPort: 3478, name: "p3478" },
+                                    { protocol: "UDP", containerPort: 10001, name: "p10001" },
+                                    { protocol: "TCP", containerPort: 8080, name: "p8080" },
+                                    { protocol: "TCP", containerPort: 8081, name: "p8081" },
+                                    { protocol: "TCP", containerPort: 8443, name: "admin-ui" },
+                                    { protocol: "TCP", containerPort: 8843, name: "p8843" },
+                                    { protocol: "TCP", containerPort: 8880, name: "p8880" },
+                                    { protocol: "TCP", containerPort: 6789, name: "p6789" },
+                                ],
+                                livenessProbe: {
+                                    httpGet: { path: "/", port: "admin-ui", scheme: "HTTPS" },
+                                    initialDelaySeconds: 60,
+                                    periodSeconds: 30,
+                                    failureThreshold: 6,
+                                },
+                                readinessProbe: {
+                                    httpGet: { path: "/", port: "admin-ui", scheme: "HTTPS" },
+                                    initialDelaySeconds: 60,
+                                    periodSeconds: 20,
+                                    failureThreshold: 3,
+                                },
+                                volumeMounts: [
+                                    { name: "data", mountPath: "/config/data" },
+                                    { name: "backup", mountPath: "/backup" },
+                                ],
+                                resources: {
+                                    requests: { memory: "768Mi" },
+                                    limits: { memory: "1024Mi" },
+                                },
+                            },
+                        ],
+                        volumes: [
+                            { name: "data", persistentVolumeClaim: { claimName: volumeClaimName } },
+                            { name: "backup", emptyDir: {} },
+                        ],
+                        affinity: {
+                            podAntiAffinity: {
+                                preferredDuringSchedulingIgnoredDuringExecution: [
+                                    {
+                                        weight: 100,
+                                        podAffinityTerm: {
+                                            labelSelector: {
+                                                matchExpressions: [
+                                                    {
+                                                        key: "app.kubernetes.io/name",
+                                                        operator: "In",
+                                                        values: [metadata.labels["app.kubernetes.io/name"]],
+                                                    },
+                                                    {
+                                                        key: "app.kubernetes.io/component",
+                                                        operator: "In",
+                                                        values: [metadata.labels["app.kubernetes.io/component"]],
+                                                    },
+                                                    {
+                                                        key: "app.kubernetes.io/instance",
+                                                        operator: "In",
+                                                        values: [metadata.labels["app.kubernetes.io/instance"]],
+                                                    },
+                                                ],
+                                            },
+                                            topologyKey: "kubernetes.io/hostname",
+                                        },
+                                    },
+                                ],
+                            },
+                        },
+                    },
+                },
+            },
+        }, opts);
+        this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(name, {
+            metadata,
+            spec: {
+                minAvailable: 1,
+                selector: { matchLabels: metadata.labels },
+            },
+        }, opts);
+        this.service = new kubernetes.v1.Service(name, {
+            hostnames: [args.controllerHostname],
+            metadata,
+            spec: {
+                selector: metadata.labels,
+                ports: [
+                    { protocol: "UDP", port: 3478, name: "p3478" },
+                    { protocol: "TCP", port: 6789, name: "p6789" },
+                    { protocol: "TCP", port: 8080, name: "p8080" },
+                    { protocol: "TCP", port: 8081, name: "p8081" },
+                    { protocol: "TCP", port: 8443, name: "https" },
+                    { protocol: "TCP", port: 8843, name: "p8843" },
+                    { protocol: "TCP", port: 8880, name: "p8880" },
+                    { protocol: "UDP", port: 10001, name: "p10001" },
+                ],
+            },
+        }, { ...opts, dependsOn: [this.deployment] });
+        this.ingress = new traefik.SecureIngress(name, {
+            metadata,
+            spec: {
+                ingressClassName: args.ingressClassName,
+                rules: [
+                    {
+                        host: args.hostname,
+                        http: {
+                            paths: [
+                                {
+                                    path: "/",
+                                    pathType: "Prefix",
+                                    backend: { service: { name: this.service.metadata.name, port: { name: "https" } } },
+                                },
+                            ],
+                        },
+                    },
+                ],
+            },
+        }, opts);
+        this.registerOutputs();
+    }
+}
+exports.UnifiController = UnifiController;
+//# sourceMappingURL=controller.js.map

package/lib/unifi/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../lib/unifi/controller.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AAC9C,4CAA4C;AAC5C,sCAAsC;AAiCtC,MAAa,eAAgB,SAAQ,0BAAiB;IACnC,iBAAiB,CAAuC;IACxD,cAAc,CAA6B;IAC3C,IAAI,CAAmB;IACvB,WAAW,CAA0B;IACrC,WAAW,CAAoC;IAC/C,UAAU,CAAyB;IACnC,mBAAmB,CAAoC;IACvD,OAAO,CAAwB;IAC/B,OAAO,CAAwB;IAChC,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAyB,EAAE,IAAsC;QACzF,KAAK,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE5C,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE;YAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;SACvB;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,aAAa;YAC5C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,OAAO;gBACjC,6BAA6B,EAAE,YAAY;gBAC3C,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAC/D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC/B,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAChC,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBACxC,OAAO,EAAE,CAAC,UAAU,EAAE,uBAAuB,CAAC;gBAC9C,WAAW,EAAE,KAAK;aACnB;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAE/E,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAC9B,IAAI,EACJ;YACE,QAAQ;YACR,KAAK,EAAE;gBACL;oBACE,SAAS,EAAE,CAAC,QAAQ,CAAC;oBACrB,aAAa,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrD,SAAS,EAAE,CAAC,qBAAqB,CAAC;oBAClC,KAAK,EAAE,CAAC,KAAK,CAAC;iBACf;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;oBAC9B,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS;oBACjD,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;iBACxC;aACF;YACD,OAAO,EAAE,EAAE,QAAQ,EAAE,2BAA2B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;SACxG,EACD,IAAI,CACL,CAAC;QAEF,MAAM,eAAe,GAAG,GAAG,IAAI,kBAAkB,CAAC;QAElD,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,qBAAqB,CACtD,IAAI,EACJ;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE;YAChD,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC,eAAe,CAAC;gBAC9B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;aACnD;SACF,EACD,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CACnC,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAC1C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC9B,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE;oBACR,QAAQ,EAAE;wBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,WAAW,EAAE;4BACX,iCAAiC,EAAE,QAAQ;4BAC3C,mCAAmC,EACjC,gFAAgF;4BAClF,qCAAqC,EAAE,YAAY;4BACnD,mCAAmC,EAAE,IAAI;yBAC1C;qBACF;oBACD,IAAI,EAAE;wBACJ,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;wBACjD,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,YAAY;gCAClB,KAAK,EAAE,6CAA6C;gCACpD,eAAe,EAAE,QAAQ;gCACzB,eAAe,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;gCACxC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gCAC3C,KAAK,EAAE;oCACL,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oCACvD,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;oCACzD,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oCACvD,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oCACvD,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;oCAC1D,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oCACvD,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oCACvD,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;iCACxD;gCACD,aAAa,EAAE;oCACb,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE;oCACzD,mBAAmB,EAAE,EAAE;oCACvB,aAAa,EAAE,EAAE;oCACjB,gBAAgB,EAAE,CAAC;iCACpB;gCACD,cAAc,EAAE;oCACd,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE;oCACzD,mBAAmB,EAAE,EAAE;oCACvB,aAAa,EAAE,EAAE;oCACjB,gBAAgB,EAAE,CAAC;iCACpB;gCACD,YAAY,EAAE;oCACZ,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE;oCAC3C,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE;iCACzC;gCACD,SAAS,EAAE;oCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;oCAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;iCAC7B;6BACF;yBACF;wBACD,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE;4BACvE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE;yBACjC;wBACD,QAAQ,EAAE;4BACR,eAAe,EAAE;gCACf,+CAA+C,EAAE;oCAC/C;wCACE,MAAM,EAAE,GAAG;wCACX,eAAe,EAAE;4CACf,aAAa,EAAE;gDACb,gBAAgB,EAAE;oDAChB;wDACE,GAAG,EAAE,wBAAwB;wDAC7B,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;qDACpD;oDACD;wDACE,GAAG,EAAE,6BAA6B;wDAClC,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC;qDACzD;oDACD;wDACE,GAAG,EAAE,4BAA4B;wDACjC,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;qDACxD;iDACF;6CACF;4CACD,WAAW,EAAE,wBAAwB;yCACtC;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAC9D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,YAAY,EAAE,CAAC;gBACf,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;aAC3C;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,CACtC,IAAI,EACJ;YACE,SAAS,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC;YACpC,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,KAAK,EAAE;oBACL,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oBAC9C,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oBAC9C,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oBAC9C,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oBAC9C,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oBAC9C,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oBAC9C,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;oBAC9C,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACjD;aACF;SACF,EACD,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAC1C,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,aAAa,CACtC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,IAAI,CAAC,QAAQ;wBACnB,IAAI,EAAE;4BACJ,KAAK,EAAE;gCACL;oCACE,IAAI,EAAE,GAAG;oCACT,QAAQ,EAAE,QAAQ;oCAClB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;iCACpF;6BACF;yBACF;qBACF;iBACF;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AA9QD,0CA8QC"}

package/lib/unifi/index.d.ts

@@ -0,0 +1,3 @@
+import { UnifiControllerArgs, UnifiController } from "./controller";
+export { UnifiControllerArgs, UnifiController };
+//# sourceMappingURL=index.d.ts.map

package/lib/unifi/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/unifi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,CAAC"}

package/lib/unifi/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnifiController = void 0;
+const controller_1 = require("./controller");
+Object.defineProperty(exports, "UnifiController", { enumerable: true, get: function () { return controller_1.UnifiController; } });
+//# sourceMappingURL=index.js.map

package/lib/unifi/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/unifi/index.ts"],"names":[],"mappings":";;;AAAA,6CAAoE;AAEtC,gGAFA,4BAAe,OAEA"}

package/lib/velero/index.d.ts

@@ -0,0 +1,3 @@
+import { VeleroArgs, Velero } from "./operator";
+export { VeleroArgs, Velero };
+//# sourceMappingURL=index.d.ts.map

package/lib/velero/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/velero/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC"}

package/lib/velero/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Velero = void 0;
+const operator_1 = require("./operator");
+Object.defineProperty(exports, "Velero", { enumerable: true, get: function () { return operator_1.Velero; } });
+//# sourceMappingURL=index.js.map

package/lib/velero/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/velero/index.ts"],"names":[],"mappings":";;;AAAA,yCAAgD;AAE3B,uFAFA,iBAAM,OAEA"}

package/lib/velero/operator.d.ts

@@ -0,0 +1,31 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+export interface VeleroArgs {
+    /**
+     * Optional: Namespace
+     */
+    namespace?: pulumi.Input<string>;
+    /**
+     * Cluster name
+     */
+    clusterName: pulumi.Input<string>;
+    /**
+     * Optional: Protect critical resources
+     */
+    protect?: boolean;
+}
+export declare class Velero extends ComponentResource {
+    private readonly resticPasswordSecret;
+    private readonly helmRelease;
+    private readonly bucket;
+    readonly resticPassword: pulumi.Output<string>;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new Velero resource.
+     * @param name The name of the Velero resource.
+     * @param args A bag of arguments to control the Velero creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: VeleroArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=operator.d.ts.map

package/lib/velero/operator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../../../lib/velero/operator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAIzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,MAAO,SAAQ,iBAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,SAAgB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAiJnF"}

package/lib/velero/operator.js

@@ -0,0 +1,148 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Velero = void 0;
+const pulumi = require("@pulumi/pulumi");
+const random = require("@pulumi/random");
+const k8s = require("@pulumi/kubernetes");
+const aws = require("@pulumi/aws");
+const common_1 = require("../common");
+const helm = require("../kubernetes/helm");
+const aws_1 = require("../aws");
+class Velero extends common_1.ComponentResource {
+    resticPasswordSecret;
+    helmRelease;
+    bucket;
+    resticPassword;
+    namespace;
+    /**
+     * Create a new Velero resource.
+     * @param name The name of the Velero resource.
+     * @param args A bag of arguments to control the Velero creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("velero", name, {}, opts);
+        const emptyOpts = this.opts();
+        const awsOpts = this.opts(aws.Provider);
+        const k8sOpts = this.opts(k8s.Provider);
+        this.bucket = new aws_1.Bucket(name, { name: pulumi.interpolate `${name}-${args.clusterName}`, protect: args.protect }, awsOpts);
+        this.resticPassword = pulumi.secret(new random.RandomPassword(name, { length: 64, special: false }, emptyOpts).result);
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, k8sOpts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "velero",
+                "app.kubernetes.io/component": "velero",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.resticPasswordSecret = new k8s.core.v1.Secret(name, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-restic-credentials` },
+            stringData: {
+                "repository-password": this.resticPassword,
+            },
+        }, k8sOpts);
+        this.helmRelease = new helm.v3.Release(name, {
+            name: metadata.name,
+            namespace: metadata.namespace,
+            repositoryOpts: { repo: "https://vmware-tanzu.github.io/helm-charts" },
+            chart: "velero",
+            values: {
+                fullnameOverride: name,
+                backupsEnabled: true,
+                snapshotsEnabled: false,
+                deployRestic: true,
+                configuration: {
+                    provider: "aws",
+                    backupStorageLocation: {
+                        name: "default",
+                        provider: "aws",
+                        bucket: this.bucket.bucket.id,
+                        config: {
+                            region: this.bucket.bucket.region,
+                        },
+                    },
+                },
+                credentials: {
+                    extraEnvVars: {
+                        AWS_ACCESS_KEY_ID: this.bucket.accessKey.accessKey.id,
+                        AWS_SECRET_ACCESS_KEY: this.bucket.accessKey.accessKey.secret,
+                        AWS_DEFAULT_REGION: this.bucket.bucket.region,
+                    },
+                },
+                restic: {
+                    privileged: true,
+                    resources: {
+                        requests: { memory: "192Mi" },
+                        limits: { memory: "256Mi" },
+                    },
+                    tolerations: [
+                        { key: "node-role.kubernetes.io/master", operator: "Exists", effect: "NoSchedule" },
+                        { key: "node-role.kubernetes.io/control-plane", operator: "Exists", effect: "NoSchedule" },
+                    ],
+                },
+                initContainers: [
+                    {
+                        name: "velero-plugin-for-aws",
+                        image: "velero/velero-plugin-for-aws:latest",
+                        volumeMounts: [{ name: "plugins", mountPath: "/target" }],
+                        resources: {
+                            requests: { memory: "32Mi" },
+                            limits: { memory: "48Mi" },
+                        },
+                    },
+                ],
+                schedules: {
+                    daily: {
+                        schedule: "0 2 * * *",
+                        template: {
+                            ttl: "170h", // ~7 days
+                        },
+                    },
+                    weekly: {
+                        schedule: "0 3 * * 0",
+                        template: {
+                            ttl: "730h", // ~4 weeks
+                        },
+                    },
+                    monthly: {
+                        schedule: "0 4 1 * *",
+                        template: {
+                            ttl: "2200h", // ~3 months
+                        },
+                    },
+                },
+                affinity: {
+                    podAntiAffinity: {
+                        preferredDuringSchedulingIgnoredDuringExecution: [
+                            {
+                                weight: 100,
+                                podAffinityTerm: {
+                                    labelSelector: {
+                                        matchExpressions: [
+                                            { key: "app.kubernetes.io/name", operator: "In", values: ["velero"] },
+                                            { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
+                                        ],
+                                    },
+                                    topologyKey: "kubernetes.io/hostname",
+                                },
+                            },
+                        ],
+                    },
+                },
+                resources: {
+                    requests: { memory: "256Mi" },
+                    limits: { memory: "512Mi" },
+                },
+                metrics: { serviceMonitor: { enabled: true } },
+                kubectl: { image: { repository: "appscode/kubectl", tag: "v1.23" } },
+            },
+        }, k8sOpts);
+        this.registerOutputs();
+    }
+}
+exports.Velero = Velero;
+//# sourceMappingURL=operator.js.map

package/lib/velero/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../lib/velero/operator.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,yCAAyC;AACzC,0CAA0C;AAC1C,mCAAmC;AACnC,sCAA8C;AAC9C,2CAA2C;AAC3C,gCAAgC;AAiBhC,MAAa,MAAO,SAAQ,0BAAiB;IAC1B,oBAAoB,CAAqB;IACzC,WAAW,CAAkB;IAC7B,MAAM,CAAS;IAChB,cAAc,CAAwB;IACtC,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAsC;QAChF,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAEhC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,GAAG,IAAI,YAAM,CACtB,IAAI,EACJ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAChF,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,MAAM,CACjC,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC,MAAM,CAClF,CAAC;QAEF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEnF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,QAAQ;gBAClC,6BAA6B,EAAE,QAAQ;gBACvC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,oBAAoB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAChD,IAAI,EACJ;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,qBAAqB,EAAE;YAC/E,UAAU,EAAE;gBACV,qBAAqB,EAAE,IAAI,CAAC,cAAc;aAC3C;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CACpC,IAAI,EACJ;YACE,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,EAAE,IAAI,EAAE,4CAA4C,EAAE;YACtE,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE;gBACN,gBAAgB,EAAE,IAAI;gBACtB,cAAc,EAAE,IAAI;gBACpB,gBAAgB,EAAE,KAAK;gBACvB,YAAY,EAAE,IAAI;gBAClB,aAAa,EAAE;oBACb,QAAQ,EAAE,KAAK;oBACf,qBAAqB,EAAE;wBACrB,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;wBAC7B,MAAM,EAAE;4BACN,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;yBAClC;qBACF;iBACF;gBACD,WAAW,EAAE;oBACX,YAAY,EAAE;wBACZ,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;wBACrD,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM;wBAC7D,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;qBAC9C;iBACF;gBACD,MAAM,EAAE;oBACN,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE;wBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;wBAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;qBAC5B;oBACD,WAAW,EAAE;wBACX,EAAE,GAAG,EAAE,gCAAgC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;wBACnF,EAAE,GAAG,EAAE,uCAAuC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;qBAC3F;iBACF;gBACD,cAAc,EAAE;oBACd;wBACE,IAAI,EAAE,uBAAuB;wBAC7B,KAAK,EAAE,qCAAqC;wBAC5C,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;wBACzD,SAAS,EAAE;4BACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;4BAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;yBAC3B;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,KAAK,EAAE;wBACL,QAAQ,EAAE,WAAW;wBACrB,QAAQ,EAAE;4BACR,GAAG,EAAE,MAAM,EAAE,UAAU;yBACxB;qBACF;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,WAAW;wBACrB,QAAQ,EAAE;4BACR,GAAG,EAAE,MAAM,EAAE,WAAW;yBACzB;qBACF;oBACD,OAAO,EAAE;wBACP,QAAQ,EAAE,WAAW;wBACrB,QAAQ,EAAE;4BACR,GAAG,EAAE,OAAO,EAAE,YAAY;yBAC3B;qBACF;iBACF;gBACD,QAAQ,EAAE;oBACR,eAAe,EAAE;wBACf,+CAA+C,EAAE;4BAC/C;gCACE,MAAM,EAAE,GAAG;gCACX,eAAe,EAAE;oCACf,aAAa,EAAE;wCACb,gBAAgB,EAAE;4CAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE;4CACrE,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;yCACtE;qCACF;oCACD,WAAW,EAAE,wBAAwB;iCACtC;6BACF;yBACF;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;oBAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;iBAC5B;gBACD,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;gBAC9C,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;aACrE;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AA9JD,wBA8JC"}

package/lib/wireguard/deployment.d.ts

@@ -0,0 +1,82 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+export interface Interface {
+    /**
+     * Wireguard network addresses
+     */
+    addresses: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Optional: Port
+     */
+    port?: pulumi.Input<number>;
+    /**
+     * Private key
+     */
+    privateKey: pulumi.Input<string>;
+    /**
+     * Optional: Name
+     */
+    name?: pulumi.Input<string>;
+}
+export interface Peer {
+    /**
+     * Public key
+     */
+    publicKey: pulumi.Input<string>;
+    /**
+     * Optional: Preshared key
+     */
+    presharedKey?: pulumi.Input<string>;
+    /**
+     * Allowed IPs
+     */
+    allowedIPs: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Optional: Endpoint
+     */
+    endpoint?: pulumi.Input<string>;
+}
+export interface WireguardArgs {
+    /**
+     * Optional: Namespace
+     */
+    namespace?: pulumi.Input<string>;
+    /**
+     * Interface configuration
+     */
+    interface: pulumi.Input<Interface>;
+    /**
+     * Optional: Peer configurations
+     */
+    peers?: pulumi.Input<pulumi.Input<Peer>[]>;
+    /**
+     * Optional: Node selector
+     */
+    nodeSelector?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+}
+export declare class Wireguard extends ComponentResource {
+    static readonly gatewayLabel = "network.ydkn.network/vpn-gateway";
+    static readonly gatewayLabelValue = "true";
+    static readonly defaultInterfaceName = "wireguard";
+    static readonly defaultInterfacePort = 51920;
+    private readonly podSecurityPolicy;
+    private readonly serviceAccount;
+    private readonly role;
+    private readonly roleBinding;
+    private readonly config;
+    private readonly daemonSet;
+    private readonly podDisruptionBudget;
+    readonly interfaceName: pulumi.Output<string>;
+    readonly interfacePort: pulumi.Output<number>;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new wireguard resource.
+     * @param name The name of the wireguard resource.
+     * @param args A bag of arguments to control the wireguard deployment.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: WireguardArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=deployment.d.ts.map

package/lib/wireguard/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../lib/wireguard/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,IAAI;IACnB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;CACtE;AAED,qBAAa,SAAU,SAAQ,iBAAiB;IAC9C,gBAAuB,YAAY,sCAAsC;IACzE,gBAAuB,iBAAiB,UAAU;IAClD,gBAAuB,oBAAoB,eAAe;IAC1D,gBAAuB,oBAAoB,SAAS;IAEpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAuC;IACzE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,SAAgB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD,SAAgB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAoLtF"}