@ydkn/pulumi-components 0.4.0

package/lib/wireguard/deployment.js

@@ -0,0 +1,161 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Wireguard = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../common");
+class Wireguard extends common_1.ComponentResource {
+    static gatewayLabel = "network.ydkn.network/vpn-gateway";
+    static gatewayLabelValue = "true";
+    static defaultInterfaceName = "wireguard";
+    static defaultInterfacePort = 51920;
+    podSecurityPolicy;
+    serviceAccount;
+    role;
+    roleBinding;
+    config;
+    daemonSet;
+    podDisruptionBudget;
+    interfaceName;
+    interfacePort;
+    namespace;
+    /**
+     * Create a new wireguard resource.
+     * @param name The name of the wireguard resource.
+     * @param args A bag of arguments to control the wireguard deployment.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("wireguard", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        this.interfaceName = pulumi.all([args.interface]).apply(([iface]) => iface.name ?? Wireguard.defaultInterfaceName);
+        this.interfacePort = pulumi.all([args.interface]).apply(([iface]) => iface.port ?? Wireguard.defaultInterfacePort);
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "wireguard",
+                "app.kubernetes.io/component": "wireguard",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.podSecurityPolicy = new k8s.policy.v1beta1.PodSecurityPolicy(name, {
+            metadata,
+            spec: {
+                allowedCapabilities: ["NET_ADMIN"],
+                runAsUser: { rule: "RunAsAny" },
+                fsGroup: { rule: "RunAsAny" },
+                seLinux: { rule: "RunAsAny" },
+                supplementalGroups: { rule: "RunAsAny" },
+                volumes: ["secret"],
+                hostNetwork: true,
+                hostPorts: [{ min: this.interfacePort, max: this.interfacePort }],
+            },
+        }, opts);
+        this.serviceAccount = new k8s.core.v1.ServiceAccount(name, { metadata }, opts);
+        this.role = new k8s.rbac.v1.Role(name, {
+            metadata,
+            rules: [
+                {
+                    apiGroups: ["policy"],
+                    resourceNames: [this.podSecurityPolicy.metadata.name],
+                    resources: ["podsecuritypolicies"],
+                    verbs: ["use"],
+                },
+            ],
+        }, opts);
+        this.roleBinding = new k8s.rbac.v1.RoleBinding(name, {
+            metadata,
+            subjects: [
+                {
+                    kind: this.serviceAccount.kind,
+                    namespace: this.serviceAccount.metadata.namespace,
+                    name: this.serviceAccount.metadata.name,
+                },
+            ],
+            roleRef: {
+                apiGroup: "rbac.authorization.k8s.io",
+                kind: this.role.kind,
+                name: this.role.metadata.name,
+            },
+        }, opts);
+        const configData = pulumi
+            .all([args.interface, this.interfaceName, this.interfacePort, args.peers ?? []])
+            .apply(([iface, interfaceName, interfacePort, peers]) => pulumi.all([iface.addresses]).apply((addresses) => pulumi.all(peers).apply((peers) => {
+            const conf = [
+                "[Interface]",
+                `Address = ${addresses.join(",")}`,
+                `ListenPort = ${interfacePort}`,
+                `PrivateKey = ${iface.privateKey}`,
+            ];
+            for (const peer of peers) {
+                conf.push("[Peer]", "PersistentKeepalive = 10", `AllowedIPs = ${peer.allowedIPs.join(",")}`, `PublicKey = ${peer.publicKey}`);
+                if (peer.presharedKey !== undefined) {
+                    conf.push(`PresharedKey = ${peer.presharedKey}`);
+                }
+                if (peer.endpoint !== undefined) {
+                    const endpoint = peer.endpoint.match(/:\d{1,5}$/)
+                        ? peer.endpoint
+                        : `${peer.endpoint}:${Wireguard.defaultInterfacePort}`;
+                    conf.push(`Endpoint = ${endpoint}`);
+                }
+            }
+            const data = {};
+            data[`${interfaceName}.conf`] = conf.join("\n");
+            return data;
+        })));
+        this.config = new k8s.core.v1.Secret(name, { metadata, stringData: configData }, opts);
+        const nodeSelector = {};
+        nodeSelector[Wireguard.gatewayLabel] = Wireguard.gatewayLabelValue;
+        this.daemonSet = new k8s.apps.v1.DaemonSet(name, {
+            metadata,
+            spec: {
+                selector: { matchLabels: metadata.labels },
+                template: {
+                    metadata: { labels: metadata.labels },
+                    spec: {
+                        serviceAccountName: this.serviceAccount.metadata.name,
+                        nodeSelector: args.nodeSelector ?? nodeSelector,
+                        tolerations: [
+                            { key: "node-role.kubernetes.io/master", operator: "Exists", effect: "NoSchedule" },
+                            { key: "node-role.kubernetes.io/control-plane", operator: "Exists", effect: "NoSchedule" },
+                        ],
+                        hostNetwork: true,
+                        containers: [
+                            {
+                                name: "wireguard",
+                                image: "ydkn/k8s-wireguard:latest",
+                                imagePullPolicy: "Always",
+                                env: [
+                                    { name: "IFACE", value: this.interfaceName },
+                                    { name: "IPTABLES_ALLOW_FORWARD", value: "true" },
+                                ],
+                                securityContext: { privileged: true, capabilities: { add: ["NET_ADMIN"] } },
+                                volumeMounts: [{ name: "conf", mountPath: "/etc/wireguard", readOnly: true }],
+                                ports: [{ name: "wireguard", containerPort: this.interfacePort, protocol: "UDP" }],
+                                resources: {
+                                    requests: { memory: "8Mi" },
+                                    limits: { memory: "12Mi" },
+                                },
+                            },
+                        ],
+                        volumes: [{ name: "conf", secret: { secretName: this.config.metadata.name, defaultMode: 0o400 } }],
+                    },
+                },
+            },
+        }, opts);
+        this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(name, {
+            metadata,
+            spec: {
+                maxUnavailable: 0,
+                selector: { matchLabels: metadata.labels },
+            },
+        }, opts);
+        this.registerOutputs();
+    }
+}
+exports.Wireguard = Wireguard;
+//# sourceMappingURL=deployment.js.map

package/lib/wireguard/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/wireguard/deployment.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AA2D9C,MAAa,SAAU,SAAQ,0BAAiB;IACvC,MAAM,CAAU,YAAY,GAAG,kCAAkC,CAAC;IAClE,MAAM,CAAU,iBAAiB,GAAG,MAAM,CAAC;IAC3C,MAAM,CAAU,oBAAoB,GAAG,WAAW,CAAC;IACnD,MAAM,CAAU,oBAAoB,GAAG,KAAK,CAAC;IAEnC,iBAAiB,CAAuC;IACxD,cAAc,CAA6B;IAC3C,IAAI,CAAmB;IACvB,WAAW,CAA0B;IACrC,MAAM,CAAqB;IAC3B,SAAS,CAAwB;IACjC,mBAAmB,CAAoC;IACxD,aAAa,CAAwB;IACrC,aAAa,CAAwB;IACrC,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAmB,EAAE,IAAsC;QACnF,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAErC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACnH,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAEnH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,WAAW;gBACrC,6BAA6B,EAAE,WAAW;gBAC1C,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAC/D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,mBAAmB,EAAE,CAAC,WAAW,CAAC;gBAClC,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC/B,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBACxC,OAAO,EAAE,CAAC,QAAQ,CAAC;gBACnB,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;aAClE;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAE/E,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAC9B,IAAI,EACJ;YACE,QAAQ;YACR,KAAK,EAAE;gBACL;oBACE,SAAS,EAAE,CAAC,QAAQ,CAAC;oBACrB,aAAa,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrD,SAAS,EAAE,CAAC,qBAAqB,CAAC;oBAClC,KAAK,EAAE,CAAC,KAAK,CAAC;iBACf;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;oBAC9B,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS;oBACjD,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;iBACxC;aACF;YACD,OAAO,EAAE;gBACP,QAAQ,EAAE,2BAA2B;gBACrC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;aAC9B;SACF,EACD,IAAI,CACL,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM;aACtB,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;aAC/E,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,EAAE,CACtD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,IAAI,GAAG;gBACX,aAAa;gBACb,aAAa,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAClC,gBAAgB,aAAa,EAAE;gBAC/B,gBAAgB,KAAK,CAAC,UAAU,EAAE;aACnC,CAAC;YAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;gBACxB,IAAI,CAAC,IAAI,CACP,QAAQ,EACR,0BAA0B,EAC1B,gBAAgB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAC3C,eAAe,IAAI,CAAC,SAAS,EAAE,CAChC,CAAC;gBAEF,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE;oBACnC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;iBAClD;gBAED,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;oBAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;wBAC/C,CAAC,CAAC,IAAI,CAAC,QAAQ;wBACf,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,oBAAoB,EAAE,CAAC;oBAEzD,IAAI,CAAC,IAAI,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;iBACrC;aACF;YAED,MAAM,IAAI,GAA8B,EAAE,CAAC;YAC3C,IAAI,CAAC,GAAG,aAAa,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEhD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CACH,CACF,CAAC;QAEJ,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC;QAEvF,MAAM,YAAY,GAA8B,EAAE,CAAC;QACnD,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,iBAAiB,CAAC;QAEnE,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACxC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE;oBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACrC,IAAI,EAAE;wBACJ,kBAAkB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;wBACrD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,YAAY;wBAC/C,WAAW,EAAE;4BACX,EAAE,GAAG,EAAE,gCAAgC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;4BACnF,EAAE,GAAG,EAAE,uCAAuC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;yBAC3F;wBACD,WAAW,EAAE,IAAI;wBACjB,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,WAAW;gCACjB,KAAK,EAAE,2BAA2B;gCAClC,eAAe,EAAE,QAAQ;gCACzB,GAAG,EAAE;oCACH,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE;oCAC5C,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAM,EAAE;iCAClD;gCACD,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE;gCAC3E,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gCAC7E,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gCAClF,SAAS,EAAE;oCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;oCAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iCAC3B;6BACF;yBACF;wBACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC;qBACnG;iBACF;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAC9D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,cAAc,EAAE,CAAC;gBACjB,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;aAC3C;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;;AA1MH,8BA2MC"}

package/lib/wireguard/index.d.ts

@@ -0,0 +1,3 @@
+import { Interface, Peer, WireguardArgs, Wireguard } from "./deployment";
+export { Interface, Peer, WireguardArgs, Wireguard };
+//# sourceMappingURL=index.d.ts.map

package/lib/wireguard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/wireguard/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC"}

package/lib/wireguard/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Wireguard = void 0;
+const deployment_1 = require("./deployment");
+Object.defineProperty(exports, "Wireguard", { enumerable: true, get: function () { return deployment_1.Wireguard; } });
+//# sourceMappingURL=index.js.map

package/lib/wireguard/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/wireguard/index.ts"],"names":[],"mappings":";;;AAAA,6CAAyE;AAEhC,0FAFA,sBAAS,OAEA"}

package/package.json

@@ -0,0 +1,62 @@
+{
+    "name": "@ydkn/pulumi-components",
+    "version": "0.4.0",
+    "keywords": [
+        "pulumi"
+    ],
+    "description": "Shared Pulumi components for Kubernetes clusters",
+    "repository": "git@gitlab.com:ydkn/pulumi-components.git",
+    "author": "Florian Schwab <me@ydkn.io>",
+    "license": "MIT",
+    "homepage": "https://gitlab.com/ydkn/pulumi-components",
+    "bugs": {
+        "url": "https://gitlab.com/ydkn/pulumi-components/-/issues"
+    },
+    "scripts": {
+        "clean": "rimraf dist",
+        "copy-files": "copyfiles lib/**/*.{json,sh,service,tmpl} dist",
+        "build": "yarn run clean && yarn run tsc && yarn run copy-files",
+        "format": "prettier --write \"lib/**/*.ts\"",
+        "lint": "eslint index.ts lib/**/*.ts"
+    },
+    "devDependencies": {
+        "@types/bcrypt": "^5.0.0",
+        "@types/js-yaml": "^4.0.5",
+        "@types/node": "^18.7.18",
+        "@types/ssh2": "^1.11.5",
+        "@types/ssh2-sftp-client": "^7.1.0",
+        "@types/uuid": "^8.3.4",
+        "@typescript-eslint/eslint-plugin": "^5.37.0",
+        "@typescript-eslint/parser": "^5.37.0",
+        "bcrypt": "^5.0.1",
+        "copyfiles": "^2.4.1",
+        "eslint": "^8.23.1",
+        "eslint-config-prettier": "^8.5.0",
+        "eslint-config-standard": "^17.0.0",
+        "eslint-plugin-import": "^2.26.0",
+        "eslint-plugin-n": "^15.2.5",
+        "eslint-plugin-node": "^11.1.0",
+        "eslint-plugin-promise": "^6.0.1",
+        "eslint-plugin-security": "^1.5.0",
+        "prettier": "^2.7.1",
+        "rimraf": "^3.0.2",
+        "typescript": "^4.8.3"
+    },
+    "dependencies": {
+        "@pulumi/aws": "^5.13.0",
+        "@pulumi/cloudflare": "^4.10.0",
+        "@pulumi/hcloud": "^1.10.1",
+        "@pulumi/kubernetes": "^3.21.2",
+        "@pulumi/pulumi": "^3.39.4",
+        "@pulumi/random": "^4.8.2",
+        "@pulumi/tls": "^4.6.1",
+        "@ydkn/pulumi-k0s": "^0.1.11",
+        "glob": "^8.0.3",
+        "js-yaml": "^4.1.0",
+        "ssh2": "^1.11.0",
+        "ssh2-sftp-client": "^9.0.4",
+        "template-file": "^6.0.1",
+        "urllib": "^3.1.3",
+        "uuid": "^9.0.0"
+    }
+}