@ydkn/pulumi-components 0.4.0

package/lib/blocky/deployment.d.ts

@@ -0,0 +1,39 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+export interface BlockyArgs {
+    /**
+     * Optional: Namespace
+     */
+    namespace?: pulumi.Input<string>;
+    /**
+     * Optional: Upstream nameservers
+     */
+    nameservers?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Optional: Blocklists
+     */
+    blocklists?: pulumi.Input<{
+        [key: string]: pulumi.Input<pulumi.Input<string>[]>;
+    }>;
+    /**
+     * Optional: Hostname
+     */
+    hostname?: pulumi.Input<string>;
+    /**
+     * Optional: Number of replicas
+     */
+    replicas?: pulumi.Input<number>;
+}
+export declare class Blocky extends ComponentResource {
+    private readonly helmRelease;
+    private readonly service;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new Blocky resource.
+     * @param name The name of the Blocky resource.
+     * @param args A bag of arguments to control the Blocky creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: BlockyArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=deployment.d.ts.map

package/lib/blocky/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../lib/blocky/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAG9C,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IACnF;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACjC;AAED,qBAAa,MAAO,SAAQ,iBAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CA6FnF"}

package/lib/blocky/deployment.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Blocky = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+const yaml = require("js-yaml");
+const common_1 = require("../common");
+const kubernetes = require("../kubernetes");
+class Blocky extends common_1.ComponentResource {
+    helmRelease;
+    service;
+    namespace;
+    /**
+     * Create a new Blocky resource.
+     * @param name The name of the Blocky resource.
+     * @param args A bag of arguments to control the Blocky creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("blocky", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.replicas === undefined) {
+            args.replicas = 1;
+        }
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "blocky",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.helmRelease = new kubernetes.helm.v3.Release(name, {
+            name: metadata.name,
+            namespace: metadata.namespace,
+            repositoryOpts: { repo: "https://k8s-at-home.com/charts/" },
+            chart: "blocky",
+            values: {
+                fullnameOverride: name,
+                controller: { replicas: args.replicas },
+                config: pulumi.all([args.nameservers, args.blocklists]).apply(([nameservers, blocklists]) => yaml.dump({
+                    logLevel: "warn",
+                    logFormat: "json",
+                    httpPort: 4000,
+                    upstream: { default: nameservers ?? ["9.9.9.9", "149.112.112.112"] },
+                    blocking: {
+                        blackLists: blocklists,
+                        clientGroupsBlock: { default: Object.keys(blocklists) },
+                        blockType: "nxDomain",
+                    },
+                    caching: { prefetching: true },
+                    prometheus: { enable: true, path: "/metrics" },
+                })),
+                metrics: { enabled: true, prometheusRule: { enabled: false } },
+                affinity: {
+                    podAntiAffinity: {
+                        preferredDuringSchedulingIgnoredDuringExecution: [
+                            {
+                                weight: 100,
+                                podAffinityTerm: {
+                                    labelSelector: {
+                                        matchExpressions: [
+                                            { key: "app.kubernetes.io/name", operator: "In", values: ["blocky"] },
+                                            { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
+                                        ],
+                                    },
+                                    topologyKey: "kubernetes.io/hostname",
+                                },
+                            },
+                        ],
+                    },
+                },
+                resources: {
+                    requests: { memory: "64Mi" },
+                    limits: { memory: "96Mi" },
+                },
+            },
+        }, opts);
+        this.service = new kubernetes.v1.Service(`${name}-dns`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-dns` },
+            spec: {
+                selector: metadata.labels,
+                ports: [
+                    { name: "udp", protocol: "UDP", port: 53 },
+                    { name: "tcp", protocol: "TCP", port: 53 },
+                ],
+            },
+            hostnames: args.hostname ? [args.hostname] : undefined,
+        }, { ...opts, dependsOn: [this.helmRelease] });
+        this.registerOutputs();
+    }
+}
+exports.Blocky = Blocky;
+//# sourceMappingURL=deployment.js.map

package/lib/blocky/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/blocky/deployment.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,gCAAgC;AAChC,sCAA8C;AAC9C,4CAA4C;AAyB5C,MAAa,MAAO,SAAQ,0BAAiB;IAC1B,WAAW,CAA6B;IACxC,OAAO,CAAwB;IAChC,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAsC;QAChF,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAElC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;YAC/B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;SACnB;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,QAAQ;gBAClC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/C,IAAI,EACJ;YACE,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAC3D,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE;gBACN,gBAAgB,EAAE,IAAI;gBACtB,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;gBACvC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE,CAC1F,IAAI,CAAC,IAAI,CAAC;oBACR,QAAQ,EAAE,MAAM;oBAChB,SAAS,EAAE,MAAM;oBACjB,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE;oBACpE,QAAQ,EAAE;wBACR,UAAU,EAAE,UAAU;wBACtB,iBAAiB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;wBACvD,SAAS,EAAE,UAAU;qBACtB;oBACD,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;oBAC9B,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;iBAC/C,CAAC,CACH;gBACD,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;gBAC9D,QAAQ,EAAE;oBACR,eAAe,EAAE;wBACf,+CAA+C,EAAE;4BAC/C;gCACE,MAAM,EAAE,GAAG;gCACX,eAAe,EAAE;oCACf,aAAa,EAAE;wCACb,gBAAgB,EAAE;4CAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE;4CACrE,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;yCACtE;qCACF;oCACD,WAAW,EAAE,wBAAwB;iCACtC;6BACF;yBACF;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iBAC3B;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,CACtC,GAAG,IAAI,MAAM,EACb;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,MAAM,EAAE;YAChE,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,KAAK,EAAE;oBACL,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;oBAC1C,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;iBAC3C;aACF;YACD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SACvD,EACD,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAC3C,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AAxGD,wBAwGC"}

package/lib/blocky/index.d.ts

@@ -0,0 +1,3 @@
+import { BlockyArgs, Blocky } from "./deployment";
+export { BlockyArgs, Blocky };
+//# sourceMappingURL=index.d.ts.map

package/lib/blocky/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/blocky/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC"}

package/lib/blocky/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Blocky = void 0;
+const deployment_1 = require("./deployment");
+Object.defineProperty(exports, "Blocky", { enumerable: true, get: function () { return deployment_1.Blocky; } });
+//# sourceMappingURL=index.js.map

package/lib/blocky/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/blocky/index.ts"],"names":[],"mappings":";;;AAAA,6CAAkD;AAE7B,uFAFA,mBAAM,OAEA"}

package/lib/certManager/certificate.d.ts

@@ -0,0 +1,126 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+export interface IssuerRefArgs {
+    /**
+     * Issuer name
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Optional: Kind of Issuer
+     */
+    kind?: pulumi.Input<string>;
+}
+export interface PrivateKeyArgs {
+    /**
+     * Optional: Crypto algorithm
+     */
+    algorithm?: pulumi.Input<string>;
+    /**
+     * Optional: Key size
+     */
+    size?: pulumi.Input<number>;
+    /**
+     * Optional: Rotation policy
+     */
+    rotationPolicy?: pulumi.Input<string>;
+}
+export interface PasswordSecretRefArgs {
+    /**
+     * Secret name
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Secret key
+     */
+    key: pulumi.Input<string>;
+}
+export interface Pkcs12Args {
+    /**
+     * Optional: Create a PKCS12 bundle
+     */
+    create?: pulumi.Input<boolean>;
+    /**
+     * Password secret
+     */
+    passwordSecretRef: pulumi.Input<PasswordSecretRefArgs>;
+}
+export interface JksArgs {
+    /**
+     * Optional: Create a JKS bundle
+     */
+    create?: pulumi.Input<boolean>;
+    /**
+     * Password secret
+     */
+    passwordSecretRef: pulumi.Input<PasswordSecretRefArgs>;
+}
+export interface KeystoresArgs {
+    /**
+     * Optional: PKCS12
+     */
+    pkcs12?: pulumi.Input<Pkcs12Args>;
+    /**
+     * Optional: JKS
+     */
+    jks?: pulumi.Input<JksArgs>;
+}
+export interface CertificateSpecArgs {
+    /**
+     * DNS names
+     */
+    dnsNames: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Issuer reference
+     */
+    issuerRef: pulumi.Input<IssuerRefArgs>;
+    /**
+     * Optional: Common name
+     */
+    commonName?: pulumi.Input<string>;
+    /**
+     * Optional: Validity duration
+     */
+    duration?: pulumi.Input<string>;
+    /**
+     * Optional: Renew before expiration
+     */
+    renewBefore?: pulumi.Input<string>;
+    /**
+     * Optional: Name of secret to store certificate
+     */
+    secretName?: pulumi.Input<string>;
+    /**
+     * Optional: Private key options
+     */
+    privateKey?: pulumi.Input<PrivateKeyArgs>;
+    /**
+     * Optional: Is a certification authority
+     */
+    isCA?: pulumi.Input<boolean>;
+    /**
+     * Optional: Keystores
+     */
+    keystores?: pulumi.Input<KeystoresArgs>;
+}
+export interface CertificateArgs {
+    /**
+     * Metadata for the certificate resource
+     */
+    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
+    /**
+     * Spec for the certificate resource
+     */
+    spec: pulumi.Input<CertificateSpecArgs>;
+}
+export declare class Certificate extends k8s.apiextensions.CustomResource {
+    readonly secretName: pulumi.Output<string>;
+    readonly hostnames: pulumi.Output<pulumi.Output<string>[]>;
+    /**
+     * Create a new certificate resource.
+     * @param name The name of the certificate resource.
+     * @param args A bag of arguments to control the certificate creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: CertificateArgs, opts?: pulumi.CustomResourceOptions);
+}
+//# sourceMappingURL=certificate.d.ts.map

package/lib/certManager/certificate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.d.ts","sourceRoot":"","sources":["../../../lib/certManager/certificate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,OAAO;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACvC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;CACzC;AAED,qBAAa,WAAY,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC/D,SAAgB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAElE;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAkCrF"}

package/lib/certManager/certificate.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Certificate = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+class Certificate extends k8s.apiextensions.CustomResource {
+    secretName;
+    hostnames;
+    /**
+     * Create a new certificate resource.
+     * @param name The name of the certificate resource.
+     * @param args A bag of arguments to control the certificate creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        const spec = pulumi.all([args.spec]).apply(([specWrapped]) => {
+            const spec = specWrapped;
+            if (spec.secretName === undefined) {
+                spec.secretName = `${name}-tls`;
+            }
+            if (spec.privateKey === undefined) {
+                spec.privateKey = {};
+            }
+            spec.privateKey = pulumi.all([spec.privateKey]).apply(([privateKeyWrapped]) => {
+                const privateKey = privateKeyWrapped;
+                if (privateKey.rotationPolicy === undefined) {
+                    privateKey.rotationPolicy = "Always";
+                }
+                return privateKey;
+            });
+            if (spec.issuerRef === undefined) {
+                spec.issuerRef = { name: "letsencrypt", kind: "ClusterIssuer" };
+            }
+            return spec;
+        });
+        super(name, { apiVersion: "cert-manager.io/v1", kind: "Certificate", metadata: args.metadata, spec }, opts);
+        this.hostnames = spec.dnsNames;
+        this.secretName = spec.secretName;
+    }
+}
+exports.Certificate = Certificate;
+//# sourceMappingURL=certificate.js.map

package/lib/certManager/certificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.js","sourceRoot":"","sources":["../../../lib/certManager/certificate.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AA0H1C,MAAa,WAAY,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC/C,UAAU,CAAwB;IAClC,SAAS,CAAyC;IAElE;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAmC;QAClF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE;YAC3D,MAAM,IAAI,GAAG,WAAkC,CAAC;YAEhD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE;gBACjC,IAAI,CAAC,UAAU,GAAG,GAAG,IAAI,MAAM,CAAC;aACjC;YAED,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE;gBACjC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;aACtB;YAED,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE;gBAC5E,MAAM,UAAU,GAAG,iBAAmC,CAAC;gBAEvD,IAAI,UAAU,CAAC,cAAc,KAAK,SAAS,EAAE;oBAC3C,UAAU,CAAC,cAAc,GAAG,QAAQ,CAAC;iBACtC;gBAED,OAAO,UAAU,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE;gBAChC,IAAI,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;aACjE;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAE5G,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAkD,CAAC;QACzE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAmC,CAAC;IAC7D,CAAC;CACF;AA5CD,kCA4CC"}

package/lib/certManager/index.d.ts

@@ -0,0 +1,5 @@
+import { LetsEncryptCloudflareArgs, CertManagerArgs, CertManager } from "./operator";
+import { IssuerRefArgs, PrivateKeyArgs, CertificateSpecArgs, CertificateArgs, Certificate } from "./certificate";
+import { SelfSignedArgs, CaArgs, PrivateKeySecretRefArgs, SecretKeyRefArgs, CloudflareSolverArgs, DnsSolverArgs, SolverArgs, AcmeArgs, IssuerSpecArgs, IssuerArgs, Issuer, ClusterIssuer } from "./issuer";
+export { LetsEncryptCloudflareArgs, CertManagerArgs, CertManager, SelfSignedArgs, CaArgs, PrivateKeySecretRefArgs, SecretKeyRefArgs, CloudflareSolverArgs, DnsSolverArgs, SolverArgs, AcmeArgs, IssuerSpecArgs, IssuerArgs, Issuer, ClusterIssuer, IssuerRefArgs, PrivateKeyArgs, CertificateSpecArgs, CertificateArgs, Certificate, };
+//# sourceMappingURL=index.d.ts.map

package/lib/certManager/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/certManager/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjH,OAAO,EACL,cAAc,EACd,MAAM,EACN,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,QAAQ,EACR,cAAc,EACd,UAAU,EACV,MAAM,EACN,aAAa,EACd,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,yBAAyB,EACzB,eAAe,EACf,WAAW,EACX,cAAc,EACd,MAAM,EACN,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,QAAQ,EACR,cAAc,EACd,UAAU,EACV,MAAM,EACN,aAAa,EACb,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,WAAW,GACZ,CAAC"}

package/lib/certManager/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Certificate = exports.ClusterIssuer = exports.Issuer = exports.CertManager = void 0;
+const operator_1 = require("./operator");
+Object.defineProperty(exports, "CertManager", { enumerable: true, get: function () { return operator_1.CertManager; } });
+const certificate_1 = require("./certificate");
+Object.defineProperty(exports, "Certificate", { enumerable: true, get: function () { return certificate_1.Certificate; } });
+const issuer_1 = require("./issuer");
+Object.defineProperty(exports, "Issuer", { enumerable: true, get: function () { return issuer_1.Issuer; } });
+Object.defineProperty(exports, "ClusterIssuer", { enumerable: true, get: function () { return issuer_1.ClusterIssuer; } });
+//# sourceMappingURL=index.js.map

package/lib/certManager/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/certManager/index.ts"],"names":[],"mappings":";;;AAAA,yCAAqF;AAoBnF,4FApBmD,sBAAW,OAoBnD;AAnBb,+CAAiH;AAoC/G,4FApC4E,yBAAW,OAoC5E;AAnCb,qCAakB;AAgBhB,uFAlBA,eAAM,OAkBA;AACN,8FAlBA,sBAAa,OAkBA"}

package/lib/certManager/issuer.d.ts

@@ -0,0 +1,109 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+export interface SelfSignedArgs {
+}
+export interface CaArgs {
+    /**
+     * Optional: Name of secret to store certificate
+     */
+    secretName?: pulumi.Input<string>;
+}
+export interface PrivateKeySecretRefArgs {
+    /**
+     * Name of secret
+     */
+    name: pulumi.Input<string>;
+}
+export interface SecretKeyRefArgs {
+    /**
+     * Name of secret
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Key of secret
+     */
+    key: pulumi.Input<string>;
+}
+export interface CloudflareSolverArgs {
+    /**
+     * E-Mail
+     */
+    email: pulumi.Input<string>;
+    /**
+     * Reference for secret containing the API token
+     */
+    apiTokenSecretRef: pulumi.Input<SecretKeyRefArgs>;
+}
+export interface DnsSolverArgs {
+    /**
+     * Cloudflare DNS solver
+     */
+    cloudflare?: pulumi.Input<CloudflareSolverArgs>;
+}
+export interface SolverArgs {
+    /**
+     * DNS solver
+     */
+    dns01?: pulumi.Input<DnsSolverArgs>;
+}
+export interface AcmeArgs {
+    /**
+     * E-Mail
+     */
+    email: pulumi.Input<string>;
+    /**
+     * Server
+     */
+    server: pulumi.Input<string>;
+    /**
+     * Reference to private key secret
+     */
+    privateKeySecretRef: pulumi.Input<PrivateKeySecretRefArgs>;
+    /**
+     * Solvers
+     */
+    solvers: pulumi.Input<pulumi.Input<SolverArgs>[]>;
+}
+export interface IssuerSpecArgs {
+    /**
+     * Optional: Self-Signed issuer
+     */
+    selfSigned?: pulumi.Input<SelfSignedArgs>;
+    /**
+     * Optional: CA issuer
+     */
+    ca?: pulumi.Input<CaArgs>;
+    /**
+     * Optional: ACME issuer
+     */
+    acme?: pulumi.Input<AcmeArgs>;
+}
+export interface IssuerArgs {
+    /**
+     * Metadata for the Issuer resource
+     */
+    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
+    /**
+     * Spec for the Issuer resource
+     */
+    spec: pulumi.Input<IssuerSpecArgs>;
+}
+export declare class Issuer extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new issuer resource.
+     * @param name The name of the issuer resource.
+     * @param args A bag of arguments to control the issuer creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: IssuerArgs, opts?: pulumi.CustomResourceOptions);
+}
+export declare class ClusterIssuer extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new cluster issuer resource.
+     * @param name The name of the cluster issuer resource.
+     * @param args A bag of arguments to control the cluster issuer creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: IssuerArgs, opts?: pulumi.CustomResourceOptions);
+}
+//# sourceMappingURL=issuer.d.ts.map

package/lib/certManager/issuer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issuer.d.ts","sourceRoot":"","sources":["../../../lib/certManager/issuer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C,MAAM,WAAW,cAAc;CAAG;AAElC,MAAM,WAAW,MAAM;IACrB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B;;OAEG;IACH,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3D;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1C;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;CACpC;AAED,qBAAa,MAAO,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC1D;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAYhF;AAED,qBAAa,aAAc,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IACjE;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAYhF"}

package/lib/certManager/issuer.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClusterIssuer = exports.Issuer = void 0;
+const k8s = require("@pulumi/kubernetes");
+class Issuer extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new issuer resource.
+     * @param name The name of the issuer resource.
+     * @param args A bag of arguments to control the issuer creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super(name, {
+            apiVersion: "cert-manager.io/v1",
+            kind: "Issuer",
+            metadata: args.metadata,
+            spec: args.spec,
+        }, opts);
+    }
+}
+exports.Issuer = Issuer;
+class ClusterIssuer extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new cluster issuer resource.
+     * @param name The name of the cluster issuer resource.
+     * @param args A bag of arguments to control the cluster issuer creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super(name, {
+            apiVersion: "cert-manager.io/v1",
+            kind: "ClusterIssuer",
+            metadata: args.metadata,
+            spec: args.spec,
+        }, opts);
+    }
+}
+exports.ClusterIssuer = ClusterIssuer;
+//# sourceMappingURL=issuer.js.map

package/lib/certManager/issuer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issuer.js","sourceRoot":"","sources":["../../../lib/certManager/issuer.ts"],"names":[],"mappings":";;;AACA,0CAA0C;AAmG1C,MAAa,MAAO,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC1D;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAmC;QAC7E,KAAK,CACH,IAAI,EACJ;YACE,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,EACD,IAAI,CACL,CAAC;IACJ,CAAC;CACF;AAnBD,wBAmBC;AAED,MAAa,aAAc,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IACjE;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAmC;QAC7E,KAAK,CACH,IAAI,EACJ;YACE,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,EACD,IAAI,CACL,CAAC;IACJ,CAAC;CACF;AAnBD,sCAmBC"}

package/lib/certManager/operator.d.ts

@@ -0,0 +1,43 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+export interface LetsEncryptCloudflareArgs {
+    /**
+     * Token
+     */
+    token: pulumi.Input<string>;
+    /**
+     * E-Mail
+     */
+    email: pulumi.Input<string>;
+}
+export interface CertManagerArgs {
+    /**
+     * Optional: Namespace
+     */
+    namespace?: pulumi.Input<string>;
+    /**
+     * Optional: Number of replicas
+     */
+    replicas?: pulumi.Input<number>;
+    /**
+     * Optional: Let's Encrypt Cloudflare configuration
+     */
+    letsencryptCloudflare?: pulumi.Input<LetsEncryptCloudflareArgs>;
+}
+export declare class CertManager extends ComponentResource {
+    private readonly helmRelease;
+    readonly namespace: pulumi.Output<string>;
+    readonly clusterIssuers: pulumi.Output<{
+        [key: string]: pulumi.Output<string>;
+    }>;
+    /**
+     * Create a new cert-manager resource.
+     * @param name The name of cert-manager resource.
+     * @param args A bag of arguments to control the cert-manager creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: CertManagerArgs, opts?: pulumi.ComponentResourceOptions);
+    private selfSignedIssuer;
+    private letsencryptCloudflareIssuer;
+}
+//# sourceMappingURL=operator.d.ts.map

package/lib/certManager/operator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../../../lib/certManager/operator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;CACjE;AAED,qBAAa,WAAY,SAAQ,iBAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkB;IAC9C,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,SAAgB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;IAExF;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;IA4IvF,OAAO,CAAC,gBAAgB;IAiBxB,OAAO,CAAC,2BAA2B;CA4CpC"}