@ydkn/pulumi-components 0.4.0

package/lib/certManager/operator.js

@@ -0,0 +1,177 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CertManager = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../common");
+const helm = require("../kubernetes/helm");
+const issuer_1 = require("./issuer");
+class CertManager extends common_1.ComponentResource {
+    helmRelease;
+    namespace;
+    clusterIssuers;
+    /**
+     * Create a new cert-manager resource.
+     * @param name The name of cert-manager resource.
+     * @param args A bag of arguments to control the cert-manager creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("cert-manager", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.replicas === undefined) {
+            args.replicas = 1;
+        }
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "cert-manager",
+                "app.kubernetes.io/component": "cert-manager",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.helmRelease = new helm.v3.Release(name, {
+            name: metadata.name,
+            namespace: metadata.namespace,
+            repositoryOpts: { repo: "https://charts.jetstack.io" },
+            chart: "cert-manager",
+            values: {
+                fullnameOverride: name,
+                replicaCount: args.replicas,
+                installCRDs: true,
+                global: {
+                    podSecurityPolicy: { enabled: true },
+                    leaderElection: { namespace: metadata.namespace },
+                },
+                extraArgs: ["--enable-certificate-owner-ref=true"],
+                webhook: {
+                    replicaCount: args.replicas,
+                    affinity: {
+                        podAntiAffinity: {
+                            preferredDuringSchedulingIgnoredDuringExecution: [
+                                {
+                                    weight: 100,
+                                    podAffinityTerm: {
+                                        labelSelector: {
+                                            matchExpressions: [
+                                                { key: "app.kubernetes.io/name", operator: "In", values: ["cert-manager"] },
+                                                { key: "app.kubernetes.io/component", operator: "In", values: ["webhook"] },
+                                                { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
+                                            ],
+                                        },
+                                        topologyKey: "kubernetes.io/hostname",
+                                    },
+                                },
+                            ],
+                        },
+                    },
+                    resources: {
+                        requests: { memory: "48Mi" },
+                        limits: { memory: "96Mi" },
+                    },
+                },
+                cainjector: {
+                    replicaCount: args.replicas,
+                    affinity: {
+                        podAntiAffinity: {
+                            preferredDuringSchedulingIgnoredDuringExecution: [
+                                {
+                                    weight: 100,
+                                    podAffinityTerm: {
+                                        labelSelector: {
+                                            matchExpressions: [
+                                                { key: "app.kubernetes.io/name", operator: "In", values: ["cert-manager"] },
+                                                { key: "app.kubernetes.io/component", operator: "In", values: ["cainjector"] },
+                                                { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
+                                            ],
+                                        },
+                                        topologyKey: "kubernetes.io/hostname",
+                                    },
+                                },
+                            ],
+                        },
+                    },
+                    resources: {
+                        requests: { memory: "128Mi" },
+                        limits: { memory: "384Mi" },
+                    },
+                },
+                prometheus: { servicemonitor: { enabled: true } },
+                affinity: {
+                    podAntiAffinity: {
+                        preferredDuringSchedulingIgnoredDuringExecution: [
+                            {
+                                weight: 100,
+                                podAffinityTerm: {
+                                    labelSelector: {
+                                        matchExpressions: [
+                                            { key: "app.kubernetes.io/name", operator: "In", values: ["cert-manager"] },
+                                            { key: "app.kubernetes.io/component", operator: "In", values: ["controller"] },
+                                            { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
+                                        ],
+                                    },
+                                    topologyKey: "kubernetes.io/hostname",
+                                },
+                            },
+                        ],
+                    },
+                },
+                resources: {
+                    requests: { memory: "128Mi" },
+                    limits: { memory: "384Mi" },
+                },
+            },
+        }, opts);
+        this.clusterIssuers = pulumi.all([args.letsencryptCloudflare]).apply(([letsencryptCloudflare]) => {
+            const clusterIssuers = {};
+            clusterIssuers.selfSigned = this.selfSignedIssuer(name, metadata, opts).metadata.name;
+            if (letsencryptCloudflare !== undefined) {
+                clusterIssuers.letsencrypt = this.letsencryptCloudflareIssuer(name, metadata, letsencryptCloudflare, opts).metadata.name;
+            }
+            return clusterIssuers;
+        });
+        this.registerOutputs();
+    }
+    selfSignedIssuer(name, metadata, opts) {
+        return pulumi.output(new issuer_1.ClusterIssuer(`${name}-self-signed`, {
+            metadata: { ...metadata, name: "self-signed" },
+            spec: { selfSigned: {} },
+        }, { ...opts, dependsOn: [this.helmRelease] }));
+    }
+    letsencryptCloudflareIssuer(name, metadata, args, opts) {
+        return pulumi.all([args]).apply(([args]) => {
+            const secret = new k8s.core.v1.Secret(`${name}-cloudflare`, {
+                metadata: { ...metadata, name: "cloudflare" },
+                stringData: {
+                    apiToken: args.token,
+                },
+            }, opts);
+            return new issuer_1.ClusterIssuer(`${name}-cloudflare`, {
+                metadata: { ...metadata, name: "letsencrypt" },
+                spec: {
+                    acme: {
+                        email: args.email,
+                        server: "https://acme-v02.api.letsencrypt.org/directory",
+                        privateKeySecretRef: { name: "letsencrypt" },
+                        solvers: [
+                            {
+                                dns01: {
+                                    cloudflare: {
+                                        email: args.email,
+                                        apiTokenSecretRef: { name: secret.metadata.name, key: "apiToken" },
+                                    },
+                                },
+                            },
+                        ],
+                    },
+                },
+            }, { ...opts, dependsOn: [this.helmRelease] });
+        });
+    }
+}
+exports.CertManager = CertManager;
+//# sourceMappingURL=operator.js.map

package/lib/certManager/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../lib/certManager/operator.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AAC9C,2CAA2C;AAC3C,qCAAyC;AA4BzC,MAAa,WAAY,SAAQ,0BAAiB;IAC/B,WAAW,CAAkB;IAC9B,SAAS,CAAwB;IACjC,cAAc,CAA0D;IAExF;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAsC;QACrF,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAExC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;YAC/B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;SACnB;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,cAAc;gBACxC,6BAA6B,EAAE,cAAc;gBAC7C,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CACpC,IAAI,EACJ;YACE,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE;YACtD,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE;gBACN,gBAAgB,EAAE,IAAI;gBACtB,YAAY,EAAE,IAAI,CAAC,QAAQ;gBAC3B,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE;oBACN,iBAAiB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;oBACpC,cAAc,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE;iBAClD;gBACD,SAAS,EAAE,CAAC,qCAAqC,CAAC;gBAClD,OAAO,EAAE;oBACP,YAAY,EAAE,IAAI,CAAC,QAAQ;oBAC3B,QAAQ,EAAE;wBACR,eAAe,EAAE;4BACf,+CAA+C,EAAE;gCAC/C;oCACE,MAAM,EAAE,GAAG;oCACX,eAAe,EAAE;wCACf,aAAa,EAAE;4CACb,gBAAgB,EAAE;gDAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE;gDAC3E,EAAE,GAAG,EAAE,6BAA6B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE;gDAC3E,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;6CACtE;yCACF;wCACD,WAAW,EAAE,wBAAwB;qCACtC;iCACF;6BACF;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;wBAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;qBAC3B;iBACF;gBACD,UAAU,EAAE;oBACV,YAAY,EAAE,IAAI,CAAC,QAAQ;oBAC3B,QAAQ,EAAE;wBACR,eAAe,EAAE;4BACf,+CAA+C,EAAE;gCAC/C;oCACE,MAAM,EAAE,GAAG;oCACX,eAAe,EAAE;wCACf,aAAa,EAAE;4CACb,gBAAgB,EAAE;gDAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE;gDAC3E,EAAE,GAAG,EAAE,6BAA6B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;gDAC9E,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;6CACtE;yCACF;wCACD,WAAW,EAAE,wBAAwB;qCACtC;iCACF;6BACF;yBACF;qBACF;oBACD,SAAS,EAAE;wBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;wBAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;qBAC5B;iBACF;gBACD,UAAU,EAAE,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;gBACjD,QAAQ,EAAE;oBACR,eAAe,EAAE;wBACf,+CAA+C,EAAE;4BAC/C;gCACE,MAAM,EAAE,GAAG;gCACX,eAAe,EAAE;oCACf,aAAa,EAAE;wCACb,gBAAgB,EAAE;4CAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE;4CAC3E,EAAE,GAAG,EAAE,6BAA6B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;4CAC9E,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;yCACtE;qCACF;oCACD,WAAW,EAAE,wBAAwB;iCACtC;6BACF;yBACF;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;oBAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;iBAC5B;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,EAAE,EAAE;YAC/F,MAAM,cAAc,GAA6C,EAAE,CAAC;YAEpE,cAAc,CAAC,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEtF,IAAI,qBAAqB,KAAK,SAAS,EAAE;gBACvC,cAAc,CAAC,WAAW,GAAG,IAAI,CAAC,2BAA2B,CAC3D,IAAI,EACJ,QAAQ,EACR,qBAAqB,EACrB,IAAI,CACL,CAAC,QAAQ,CAAC,IAAI,CAAC;aACjB;YAED,OAAO,cAAc,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAEO,gBAAgB,CACtB,IAAY,EACZ,QAA4C,EAC5C,IAAsC;QAEtC,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,sBAAa,CACf,GAAG,IAAI,cAAc,EACrB;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE;YAC9C,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;SACzB,EACD,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAC3C,CACF,CAAC;IACJ,CAAC;IAEO,2BAA2B,CACjC,IAAY,EACZ,QAA4C,EAC5C,IAA6C,EAC7C,IAAsC;QAEtC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACnC,GAAG,IAAI,aAAa,EACpB;gBACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE;gBAC7C,UAAU,EAAE;oBACV,QAAQ,EAAE,IAAI,CAAC,KAAK;iBACrB;aACF,EACD,IAAI,CACL,CAAC;YAEF,OAAO,IAAI,sBAAa,CACtB,GAAG,IAAI,aAAa,EACpB;gBACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE;gBAC9C,IAAI,EAAE;oBACJ,IAAI,EAAE;wBACJ,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,MAAM,EAAE,gDAAgD;wBACxD,mBAAmB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;wBAC5C,OAAO,EAAE;4BACP;gCACE,KAAK,EAAE;oCACL,UAAU,EAAE;wCACV,KAAK,EAAE,IAAI,CAAC,KAAK;wCACjB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE;qCACnE;iCACF;6BACF;yBACF;qBACF;iBACF;aACF,EACD,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAC3C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AApND,kCAoNC"}

package/lib/common/componentResource.d.ts

@@ -0,0 +1,20 @@
+import * as pulumi from "@pulumi/pulumi";
+export declare class ComponentResource extends pulumi.ComponentResource {
+    private readonly _opts;
+    /**
+     * Creates and registers a new component resource. [type] is the fully qualified type token and
+     * [name] is the "name" part to use in creating a stable and globally unique URN for the object.
+     * [opts.parent] is the optional parent for this component, and [opts.dependsOn] is an optional
+     * list of other resources that this resource depends on, controlling the order in which we
+     * perform resource operations.
+     *
+     * @param type The type of the resource.
+     * @param name The _unique_ name of the resource.
+     * @param args Information passed to [initialize] method.
+     * @param opts A bag of options that control this resource's behavior.
+     * @param remote True if this is a remote component resource.
+     */
+    constructor(type: string, name: string, args?: pulumi.Inputs, opts?: pulumi.ComponentResourceOptions, remote?: boolean);
+    opts(provider?: any, opts?: pulumi.ComponentResourceOptions): pulumi.ComponentResourceOptions;
+}
+//# sourceMappingURL=componentResource.d.ts.map

package/lib/common/componentResource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"componentResource.d.ts","sourceRoot":"","sources":["../../../lib/common/componentResource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,qBAAa,iBAAkB,SAAQ,MAAM,CAAC,iBAAiB;IAC7D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IAExD;;;;;;;;;;;;OAYG;gBAED,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB,EACtC,MAAM,CAAC,EAAE,OAAO;IAWlB,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB,GAAG,MAAM,CAAC,wBAAwB;CA2C9F"}

package/lib/common/componentResource.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ComponentResource = void 0;
+const pulumi = require("@pulumi/pulumi");
+class ComponentResource extends pulumi.ComponentResource {
+    _opts;
+    /**
+     * Creates and registers a new component resource. [type] is the fully qualified type token and
+     * [name] is the "name" part to use in creating a stable and globally unique URN for the object.
+     * [opts.parent] is the optional parent for this component, and [opts.dependsOn] is an optional
+     * list of other resources that this resource depends on, controlling the order in which we
+     * perform resource operations.
+     *
+     * @param type The type of the resource.
+     * @param name The _unique_ name of the resource.
+     * @param args Information passed to [initialize] method.
+     * @param opts A bag of options that control this resource's behavior.
+     * @param remote True if this is a remote component resource.
+     */
+    constructor(type, name, args, opts, remote) {
+        super(type, name, args, opts, remote);
+        if (opts === undefined) {
+            opts = {};
+        }
+        this._opts = { ...opts, ...{ parent: this } };
+    }
+    opts(provider, opts) {
+        opts = { ...this._opts, ...opts };
+        delete opts.provider;
+        delete opts.providers;
+        const providers = [];
+        if (this._opts.provider !== undefined) {
+            providers.push(this._opts.provider);
+        }
+        if (this._opts.providers !== undefined) {
+            const providersRecords = this._opts.providers;
+            if (providersRecords != null) {
+                for (const p in providersRecords) {
+                    // eslint-disable-next-line security/detect-object-injection
+                    providers.push(providersRecords[p]);
+                }
+            }
+            const providersList = this._opts.providers;
+            if (providersList != null) {
+                for (const p of providersList) {
+                    providers.push(p);
+                }
+            }
+        }
+        if (provider !== undefined) {
+            for (const p of providers) {
+                if (p instanceof provider) {
+                    opts.provider = p;
+                    break;
+                }
+            }
+        }
+        return opts;
+    }
+}
+exports.ComponentResource = ComponentResource;
+//# sourceMappingURL=componentResource.js.map

package/lib/common/componentResource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"componentResource.js","sourceRoot":"","sources":["../../../lib/common/componentResource.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AAEzC,MAAa,iBAAkB,SAAQ,MAAM,CAAC,iBAAiB;IAC5C,KAAK,CAAkC;IAExD;;;;;;;;;;;;OAYG;IACH,YACE,IAAY,EACZ,IAAY,EACZ,IAAoB,EACpB,IAAsC,EACtC,MAAgB;QAEhB,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,SAAS,EAAE;YACtB,IAAI,GAAG,EAAE,CAAC;SACX;QAED,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,CAAC,QAAc,EAAE,IAAsC;QACzD,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC;QACrB,OAAO,IAAI,CAAC,SAAS,CAAC;QAEtB,MAAM,SAAS,GAA8B,EAAE,CAAC;QAEhD,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE;YACrC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;SACrC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE;YACtC,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,SAAoD,CAAC;YAEzF,IAAI,gBAAgB,IAAI,IAAI,EAAE;gBAC5B,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE;oBAChC,4DAA4D;oBAC5D,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;iBACrC;aACF;YAED,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAsC,CAAC;YAExE,IAAI,aAAa,IAAI,IAAI,EAAE;gBACzB,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE;oBAC7B,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBACnB;aACF;SACF;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE;YAC1B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE;gBACzB,IAAI,CAAC,YAAY,QAAQ,EAAE;oBACzB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;oBAElB,MAAM;iBACP;aACF;SACF;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA3ED,8CA2EC"}

package/lib/common/index.d.ts

@@ -0,0 +1,4 @@
+import { TransformationFunc } from "./types";
+import { ComponentResource } from "./componentResource";
+export { TransformationFunc, ComponentResource };
+//# sourceMappingURL=index.d.ts.map

package/lib/common/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/common/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,CAAC"}

package/lib/common/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ComponentResource = void 0;
+const componentResource_1 = require("./componentResource");
+Object.defineProperty(exports, "ComponentResource", { enumerable: true, get: function () { return componentResource_1.ComponentResource; } });
+//# sourceMappingURL=index.js.map

package/lib/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/common/index.ts"],"names":[],"mappings":";;;AACA,2DAAwD;AAG3B,kGAHpB,qCAAiB,OAGoB"}

package/lib/common/types.d.ts

@@ -0,0 +1,3 @@
+import * as pulumi from "@pulumi/pulumi";
+export declare type TransformationFunc = (o: any, opts: pulumi.CustomResourceOptions) => void;
+//# sourceMappingURL=types.d.ts.map

package/lib/common/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../lib/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,oBAAY,kBAAkB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,qBAAqB,KAAK,IAAI,CAAC"}

package/lib/common/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/lib/common/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../lib/common/types.ts"],"names":[],"mappings":""}

package/lib/externalDns/dnsEndpoint.d.ts

@@ -0,0 +1,66 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+export interface ProviderSpecificArgs {
+    /**
+     * Name
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Value
+     */
+    value: pulumi.Input<string>;
+}
+export interface DnsEndpointsArgs {
+    /**
+     * The hostname of the DNS record
+     */
+    dnsName: pulumi.Input<string>;
+    /**
+     * The targets the DNS record points to
+     */
+    targets: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * ype of record, e.g. CNAME, A, SRV, TXT etc.
+     */
+    recordType: pulumi.Input<string>;
+    /**
+     * Optional: TTL for the record
+     */
+    recordTTL?: pulumi.Input<number>;
+    /**
+     * Optional: Labels stores labels defined for the endpoint
+     */
+    labels?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    /**
+     * Optional: ProviderSpecific stores provider specific config
+     */
+    providerSpecific?: pulumi.Input<pulumi.Input<ProviderSpecificArgs>[]>;
+}
+export interface DnsEndpointSpecArgs {
+    /**
+     * Endpoints
+     */
+    endpoints: pulumi.Input<pulumi.Input<DnsEndpointsArgs>[]>;
+}
+export interface DnsEndpointArgs {
+    /**
+     * Metadata for the DNS endpoint resource
+     */
+    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
+    /**
+     * Spec for the DNS endpoint resource
+     */
+    spec: pulumi.Input<DnsEndpointSpecArgs>;
+}
+export declare class DnsEndpoint extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new DNS endpoint resource.
+     * @param name The name of the DNS endpoint resource.
+     * @param args A bag of arguments to control the DNS endpoint creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: DnsEndpointArgs, opts?: pulumi.CustomResourceOptions);
+}
+//# sourceMappingURL=dnsEndpoint.d.ts.map

package/lib/externalDns/dnsEndpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dnsEndpoint.d.ts","sourceRoot":"","sources":["../../../lib/externalDns/dnsEndpoint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;IAC/D;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;CACzC;AAED,qBAAa,WAAY,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC/D;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAGrF"}

package/lib/externalDns/dnsEndpoint.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DnsEndpoint = void 0;
+const k8s = require("@pulumi/kubernetes");
+class DnsEndpoint extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new DNS endpoint resource.
+     * @param name The name of the DNS endpoint resource.
+     * @param args A bag of arguments to control the DNS endpoint creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super(name, { ...args, apiVersion: "externaldns.k8s.io/v1alpha1", kind: "DNSEndpoint" }, opts);
+    }
+}
+exports.DnsEndpoint = DnsEndpoint;
+//# sourceMappingURL=dnsEndpoint.js.map

package/lib/externalDns/dnsEndpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dnsEndpoint.js","sourceRoot":"","sources":["../../../lib/externalDns/dnsEndpoint.ts"],"names":[],"mappings":";;;AACA,0CAA0C;AA0D1C,MAAa,WAAY,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC/D;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAmC;QAClF,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,6BAA6B,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,IAAI,CAAC,CAAC;IACjG,CAAC;CACF;AAVD,kCAUC"}

package/lib/externalDns/index.d.ts

@@ -0,0 +1,4 @@
+import { ExternalDnsArgs, ExternalDns } from "./operator";
+import { ProviderSpecificArgs, DnsEndpointsArgs, DnsEndpointSpecArgs, DnsEndpointArgs, DnsEndpoint } from "./dnsEndpoint";
+export { ProviderSpecificArgs, DnsEndpointsArgs, DnsEndpointSpecArgs, DnsEndpointArgs, DnsEndpoint, ExternalDnsArgs, ExternalDns, };
+//# sourceMappingURL=index.d.ts.map

package/lib/externalDns/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/externalDns/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,WAAW,EACZ,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,WAAW,EACX,eAAe,EACf,WAAW,GACZ,CAAC"}

package/lib/externalDns/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalDns = exports.DnsEndpoint = void 0;
+const operator_1 = require("./operator");
+Object.defineProperty(exports, "ExternalDns", { enumerable: true, get: function () { return operator_1.ExternalDns; } });
+const dnsEndpoint_1 = require("./dnsEndpoint");
+Object.defineProperty(exports, "DnsEndpoint", { enumerable: true, get: function () { return dnsEndpoint_1.DnsEndpoint; } });
+//# sourceMappingURL=index.js.map

package/lib/externalDns/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/externalDns/index.ts"],"names":[],"mappings":";;;AAAA,yCAA0D;AAgBxD,4FAhBwB,sBAAW,OAgBxB;AAfb,+CAMuB;AAOrB,4FARA,yBAAW,OAQA"}

package/lib/externalDns/operator.d.ts

@@ -0,0 +1,45 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+export interface CloudflareArgs {
+    /**
+     * Cloudflare API token
+     */
+    apiToken: pulumi.Input<string>;
+    /**
+     * Proxy records
+     */
+    proxied?: pulumi.Input<boolean>;
+}
+export interface ExternalDnsArgs {
+    /**
+     * Optional: Namespace
+     */
+    namespace?: pulumi.Input<string>;
+    /**
+     * Cluster name
+     */
+    clusterName: pulumi.Input<string>;
+    /**
+     * Optional: Number of replicas
+     */
+    replicas?: pulumi.Input<number>;
+    /**
+     * Optional: Cloudflare configuration
+     */
+    cloudflare?: pulumi.Input<CloudflareArgs>;
+}
+export declare class ExternalDns extends ComponentResource {
+    private static crdBranch;
+    private readonly crd;
+    private readonly providerSecret?;
+    private readonly helmRelease;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new external-dns resource.
+     * @param name The name of external-dns resource.
+     * @param args A bag of arguments to control the external-dns creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ExternalDnsArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=operator.d.ts.map

package/lib/externalDns/operator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../../../lib/externalDns/operator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAG9C,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;CAC3C;AAED,qBAAa,WAAY,SAAQ,iBAAiB;IAChD,OAAO,CAAC,MAAM,CAAC,SAAS,CAAY;IAEpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAsB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkB;IAC9C,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAmHxF"}

package/lib/externalDns/operator.js

@@ -0,0 +1,112 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalDns = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../common");
+const helm = require("../kubernetes/helm");
+class ExternalDns extends common_1.ComponentResource {
+    static crdBranch = "master";
+    crd;
+    providerSecret;
+    helmRelease;
+    namespace;
+    /**
+     * Create a new external-dns resource.
+     * @param name The name of external-dns resource.
+     * @param args A bag of arguments to control the external-dns creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("external-dns", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.replicas === undefined) {
+            args.replicas = 1;
+        }
+        this.crd = new k8s.yaml.ConfigFile(name, {
+            file: [
+                "https://raw.githubusercontent.com/kubernetes-sigs/external-dns",
+                ExternalDns.crdBranch,
+                "docs/contributing/crd-source/crd-manifest.yaml",
+            ].join("/"),
+        }, opts);
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        const helmValues = {
+            fullnameOverride: name,
+            logLevel: "info",
+            logFormat: "json",
+            policy: "sync",
+            registry: "txt",
+            txtOwnerId: args.clusterName,
+            txtPrefix: "_external-dns.",
+            sources: ["crd", "service", "ingress"],
+            extraArgs: ["--publish-internal-services", "--publish-host-ip"],
+            env: [],
+            provider: undefined,
+            serviceMonitor: { enabled: true },
+            affinity: {
+                podAntiAffinity: {
+                    preferredDuringSchedulingIgnoredDuringExecution: [
+                        {
+                            weight: 100,
+                            podAffinityTerm: {
+                                labelSelector: {
+                                    matchExpressions: [
+                                        { key: "app.kubernetes.io/name", operator: "In", values: ["external-dns"] },
+                                        { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
+                                    ],
+                                },
+                                topologyKey: "kubernetes.io/hostname",
+                            },
+                        },
+                    ],
+                },
+            },
+            resources: {
+                requests: { memory: "48Mi" },
+                limits: { memory: "64Mi" },
+            },
+        };
+        if (args.cloudflare !== undefined) {
+            this.providerSecret = new k8s.core.v1.Secret(name, {
+                metadata: { namespace: this.namespace, name: pulumi.interpolate `${name}-cloudflare` },
+                stringData: {
+                    cloudflare_api_token: pulumi.all([args.cloudflare]).apply(([cloudflare]) => cloudflare.apiToken),
+                },
+            }, opts);
+            helmValues.provider = "cloudflare";
+            helmValues.extraArgs = pulumi.all([helmValues.extraArgs, args.cloudflare]).apply(([extraArgs, cloudflare]) => {
+                if (cloudflare.proxied) {
+                    extraArgs.push("--cloudflare-proxied");
+                }
+                return extraArgs;
+            });
+            helmValues.env = pulumi.all([helmValues.env, args.cloudflare]).apply(([env, cloudflare]) => {
+                if (this.providerSecret !== undefined) {
+                    env.push({
+                        name: "CF_API_TOKEN",
+                        valueFrom: {
+                            secretKeyRef: {
+                                name: this.providerSecret.metadata.name,
+                                key: "cloudflare_api_token",
+                            },
+                        },
+                    });
+                }
+                return env;
+            });
+        }
+        this.helmRelease = new helm.v3.Release(name, {
+            name,
+            namespace: this.namespace,
+            repositoryOpts: { repo: "https://kubernetes-sigs.github.io/external-dns" },
+            chart: "external-dns",
+            values: helmValues,
+        }, opts);
+        this.registerOutputs();
+    }
+}
+exports.ExternalDns = ExternalDns;
+//# sourceMappingURL=operator.js.map

package/lib/externalDns/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../lib/externalDns/operator.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AAC9C,2CAA2C;AAgC3C,MAAa,WAAY,SAAQ,0BAAiB;IACxC,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC;IAEnB,GAAG,CAAsB;IACzB,cAAc,CAAsB;IACpC,WAAW,CAAkB;IAC9B,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAsC;QACrF,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAExC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;YAC/B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;SACnB;QAED,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAChC,IAAI,EACJ;YACE,IAAI,EAAE;gBACJ,gEAAgE;gBAChE,WAAW,CAAC,SAAS;gBACrB,gDAAgD;aACjD,CAAC,IAAI,CAAC,GAAG,CAAC;SACZ,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,UAAU,GAAG;YACjB,gBAAgB,EAAE,IAAI;YACtB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;YACtC,SAAS,EAAE,CAAC,6BAA6B,EAAE,mBAAmB,CAAyC;YACvG,GAAG,EAAE,EAAuC;YAC5C,QAAQ,EAAE,SAA+B;YACzC,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACjC,QAAQ,EAAE;gBACR,eAAe,EAAE;oBACf,+CAA+C,EAAE;wBAC/C;4BACE,MAAM,EAAE,GAAG;4BACX,eAAe,EAAE;gCACf,aAAa,EAAE;oCACb,gBAAgB,EAAE;wCAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE;wCAC3E,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;qCACtE;iCACF;gCACD,WAAW,EAAE,wBAAwB;6BACtC;yBACF;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;gBAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC3B;SACF,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE;YACjC,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAC1C,IAAI,EACJ;gBACE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,aAAa,EAAE;gBACrF,UAAU,EAAE;oBACV,oBAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;iBACjG;aACF,EACD,IAAI,CACL,CAAC;YAEF,UAAU,CAAC,QAAQ,GAAG,YAAY,CAAC;YAEnC,UAAU,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE;gBAC3G,IAAI,UAAU,CAAC,OAAO,EAAE;oBACtB,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;iBACxC;gBAED,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,UAAU,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE;gBACzF,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE;oBACrC,GAAG,CAAC,IAAI,CAAC;wBACP,IAAI,EAAE,cAAc;wBACpB,SAAS,EAAE;4BACT,YAAY,EAAE;gCACZ,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;gCACvC,GAAG,EAAE,sBAAsB;6BAC5B;yBACF;qBACF,CAAC,CAAC;iBACJ;gBAED,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;SACJ;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CACpC,IAAI,EACJ;YACE,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,EAAE,IAAI,EAAE,gDAAgD,EAAE;YAC1E,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,UAAU;SACnB,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;;AAhIH,kCAiIC"}

package/lib/fcos/assets/rpm-opstree-install.sh

@@ -0,0 +1,26 @@
+#!/bin/sh -e
+
+PACKAGES=$(ls /etc/rpm-opstree-install/)
+INSTALLED_PACKAGES=$(/usr/bin/rpm-ostree status | grep LayeredPackages: | awk '{for (i=2; i<=NF; i++) print $i}')
+
+install_packages=""
+
+for package in ${PACKAGES}; do
+  installed="false"
+
+  for installed_package in ${INSTALLED_PACKAGES}; do
+    if [ "${package}" = "${installed_package}" ]; then
+      installed="true"
+    fi
+  done
+
+  if [ "${installed}" = "false" ]; then
+    install_packages="${install_packages} ${package}"
+  fi
+done
+
+if [ ! -z "${install_packages}" ]; then
+  /usr/bin/rpm-ostree install --apply-live --allow-inactive ${install_packages}
+fi
+
+exit 0