@ydkn/pulumi-components 0.4.0

package/lib/freeradius/assets/eap.tmpl

@@ -0,0 +1,66 @@
+eap {
+  default_eap_type = ttls
+  timer_expire = 60
+  ignore_unknown_eap_types = no
+  cisco_accounting_username_bug = no
+  max_sessions = ${max_requests}
+
+  md5 {
+  }
+
+  leap {
+  }
+
+  gtc {
+    auth_type = PAP
+  }
+
+  tls-config tls-common {
+    private_key_file = ${certdir}/server.key
+    certificate_file = ${certdir}/server.crt
+    ca_file = ${cadir}/ca.crt
+    dh_file = ${certdir}/dh
+    ca_path = ${cadir}
+    cipher_list = "DEFAULT"
+    cipher_server_preference = no
+    ecdh_curve = "prime256v1"
+
+    cache {
+      enable = no
+      lifetime = 24
+    }
+
+    verify {
+    }
+
+    ocsp {
+      enable = no
+      override_cert_url = yes
+      url = "http://127.0.0.1/ocsp/"
+    }
+  }
+
+  tls {
+    tls = tls-common
+  }
+
+  ttls {
+    tls = tls-common
+    default_eap_type = gtc
+    copy_request_to_tunnel = no
+    use_tunneled_reply = no
+    virtual_server = "inner-tunnel"
+
+  }
+
+  peap {
+    tls = tls-common
+    default_eap_type = mschapv2
+    copy_request_to_tunnel = no
+    use_tunneled_reply = no
+    virtual_server = "inner-tunnel"
+  }
+
+  mschapv2 {
+  }
+}

package/lib/freeradius/assets/inner-tunnel.tmpl

@@ -0,0 +1,74 @@
+server inner-tunnel {
+  listen {
+    ipaddr = 127.0.0.1
+    port = 18120
+    type = auth
+  }
+
+  authorize {
+    filter_username
+    suffix
+
+    update control {
+      &Proxy-To-Realm := LOCAL
+    }
+
+    eap {
+      ok = return
+    }
+
+    -sql
+    ldap
+    expiration
+    logintime
+    pap
+
+    if (User-Password) {
+      update control {
+        Auth-Type := ldap
+      }
+    }
+  }
+
+  authenticate {
+    Auth-Type PAP {
+      ldap
+    }
+
+    Auth-Type CHAP {
+      chap
+    }
+
+    Auth-Type MS-CHAP {
+      mschap
+    }
+
+    mschap
+    ldap
+    eap
+  }
+
+  session {
+    radutmp
+  }
+
+  post-auth {
+    -sql
+
+    Post-Auth-Type REJECT {
+      -sql
+      attr_filter.access_reject
+
+      update outer.session-state {
+        &Module-Failure-Message := &request:Module-Failure-Message
+      }
+    }
+  }
+
+  pre-proxy {
+  }
+
+  post-proxy {
+    eap
+  }
+}

package/lib/freeradius/assets/ldap.tmpl

@@ -0,0 +1,48 @@
+ldap {
+  server = '{{ ldap.hostname }}'
+  port = 389
+  identity = '{{ ldap.username }}'
+  password = '{{ ldap.password }}'
+  base_dn = '{{ ldap.baseDN }}'
+  user_dn = "LDAP-UserDn"
+
+  user {
+    base_dn = "${..base_dn}"
+    filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})"
+    scope = 'sub'
+  }
+
+  group {
+    base_dn = "${..base_dn}"
+    filter = '(objectClass=groupOfNames)'
+    scope = 'sub'
+    membership_attribute = 'memberOf'
+  }
+
+  options {
+    chase_referrals = yes
+    rebind = yes
+    res_timeout = 10
+    srv_timelimit = 3
+    net_timeout = 1
+    idle = 60
+    probes = 3
+    interval = 3
+  }
+
+  tls {
+    start_tls = no
+    require_cert = 'hard'
+  }
+
+  pool {
+    start = ${thread[pool].start_servers}
+    min = ${thread[pool].min_spare_servers}
+    max = ${thread[pool].max_servers}
+    spare = ${thread[pool].max_spare_servers}
+    uses = 0
+    retry_delay = 30
+    lifetime = 0
+    idle_timeout = 60
+  }
+}

package/lib/freeradius/assets/proxy.conf.tmpl

@@ -0,0 +1,43 @@
+proxy server {
+  default_fallback = no
+}
+
+home_server localhost {
+  type = auth
+  ipaddr = 127.0.0.1
+  port = 1812
+  secret = {{ localSecret }}
+  response_window = 20
+  zombie_period = 40
+  revive_interval = 120
+  status_check = status-server
+  check_interval = 30
+  check_timeout = 4
+  num_answers_to_alive = 3
+  max_outstanding = 65536
+
+  coa {
+    irt = 2
+    mrt = 16
+    mrc = 5
+    mrd = 30
+  }
+
+  limit {
+    max_connections = 32
+    max_requests = 0
+    lifetime = 0
+    idle_timeout = 0
+  }
+}
+
+home_server_pool my_auth_failover {
+  type = fail-over
+  home_server = localhost
+}
+
+realm LOCAL {
+}
+
+realm {{ domain }} {
+}

package/lib/freeradius/deployment.d.ts

@@ -0,0 +1,74 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { ComponentResource } from "../common";
+export interface LdapArgs {
+    /**
+     * Hostname
+     */
+    hostname: pulumi.Input<string>;
+    /**
+     * Username
+     */
+    username: pulumi.Input<string>;
+    /**
+     * Password
+     */
+    password: pulumi.Input<string>;
+    /**
+     * Base DN
+     */
+    baseDN: pulumi.Input<string>;
+}
+export interface FreeRadiusServerArgs {
+    /**
+     * Optional: Namespace
+     */
+    namespace?: pulumi.Input<string>;
+    /**
+     * Hostname
+     */
+    hostname: pulumi.Input<string>;
+    /**
+     * Domain
+     */
+    domain: pulumi.Input<string>;
+    /**
+     * LDAP
+     */
+    ldap: pulumi.Input<LdapArgs>;
+    /**
+     * Optional: Resources
+     */
+    resources?: pulumi.Input<k8s.types.input.core.v1.ResourceRequirements>;
+    /**
+     * Optional: Protect critical resources
+     */
+    protect?: boolean;
+}
+export declare class FreeRadiusServer extends ComponentResource {
+    private readonly podSecurityPolicy;
+    private readonly serviceAccount;
+    private readonly role;
+    private readonly roleBinding;
+    private readonly localSecret;
+    private readonly configs;
+    private readonly issuer;
+    private readonly caCertificate;
+    private readonly caIssuer;
+    private readonly certificate;
+    private readonly deployment;
+    private readonly podDisruptionBudget;
+    private readonly service;
+    readonly namespace: pulumi.Output<string>;
+    readonly clientSecret: pulumi.Output<string>;
+    readonly ip: pulumi.Output<string>;
+    /**
+     * Create a new FreeRadius server resource.
+     * @param name The name of the FreeRadius server resource.
+     * @param args A bag of arguments to control the FreeRadius server creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: FreeRadiusServerArgs, opts?: pulumi.ComponentResourceOptions);
+    private static renderAssetTemplate;
+}
+//# sourceMappingURL=deployment.d.ts.map

package/lib/freeradius/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../lib/freeradius/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAG1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;IACvE;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,gBAAiB,SAAQ,iBAAiB;IACrD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAuC;IACzE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,SAAgB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,SAAgB,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE1C;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;IAuP5F,OAAO,CAAC,MAAM,CAAC,mBAAmB;CAGnC"}

package/lib/freeradius/deployment.js

@@ -0,0 +1,216 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FreeRadiusServer = void 0;
+const pulumi = require("@pulumi/pulumi");
+const random = require("@pulumi/random");
+const k8s = require("@pulumi/kubernetes");
+const path = require("path");
+const templateFile = require("template-file");
+const common_1 = require("../common");
+const kubernetes = require("../kubernetes");
+const certManager = require("../certManager");
+class FreeRadiusServer extends common_1.ComponentResource {
+    podSecurityPolicy;
+    serviceAccount;
+    role;
+    roleBinding;
+    localSecret;
+    configs;
+    issuer;
+    caCertificate;
+    caIssuer;
+    certificate;
+    deployment;
+    podDisruptionBudget;
+    service;
+    namespace;
+    clientSecret;
+    ip;
+    /**
+     * Create a new FreeRadius server resource.
+     * @param name The name of the FreeRadius server resource.
+     * @param args A bag of arguments to control the FreeRadius server creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("freeradius", name, args, opts);
+        if (args.resources === undefined) {
+            args.resources = { requests: { memory: "96Mi" }, limits: { memory: "128Mi" } };
+        }
+        const emptyOpts = this.opts();
+        const k8sOpts = this.opts(k8s.Provider);
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, k8sOpts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "freeradius",
+                "app.kubernetes.io/component": "freeradius",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.podSecurityPolicy = new k8s.policy.v1beta1.PodSecurityPolicy(name, {
+            metadata,
+            spec: {
+                fsGroup: { rule: "RunAsAny" },
+                runAsUser: { rule: "RunAsAny" },
+                runAsGroup: { rule: "RunAsAny" },
+                seLinux: { rule: "RunAsAny" },
+                supplementalGroups: { rule: "RunAsAny" },
+                volumes: ["secret"],
+                hostNetwork: false,
+            },
+        }, k8sOpts);
+        this.serviceAccount = new k8s.core.v1.ServiceAccount(name, { metadata }, k8sOpts);
+        this.role = new k8s.rbac.v1.Role(name, {
+            metadata,
+            rules: [
+                {
+                    apiGroups: ["policy"],
+                    resourceNames: [this.podSecurityPolicy.metadata.name],
+                    resources: ["podsecuritypolicies"],
+                    verbs: ["use"],
+                },
+            ],
+        }, k8sOpts);
+        this.roleBinding = new k8s.rbac.v1.RoleBinding(name, {
+            metadata,
+            subjects: [
+                {
+                    kind: this.serviceAccount.kind,
+                    namespace: this.serviceAccount.metadata.namespace,
+                    name: this.serviceAccount.metadata.name,
+                },
+            ],
+            roleRef: { apiGroup: "rbac.authorization.k8s.io", kind: this.role.kind, name: this.role.metadata.name },
+        }, k8sOpts);
+        this.localSecret = pulumi.secret(new random.RandomString(`${name}-local-secret`, { special: false, length: 48 }, emptyOpts).result);
+        this.clientSecret = pulumi.secret(new random.RandomString(`${name}-client-secret`, { special: false, length: 48 }, { ...emptyOpts, protect: args.protect }).result);
+        this.configs = new k8s.core.v1.Secret(`${name}-configs`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-configs` },
+            stringData: pulumi
+                .all([args.domain, args.ldap, this.localSecret, this.clientSecret])
+                .apply(([domain, ldap, localSecret, clientSecret]) => {
+                const vars = {
+                    ldap: { hostname: ldap.hostname, username: ldap.username, password: ldap.password, baseDN: ldap.baseDN },
+                    domain,
+                    localSecret,
+                    clientSecret,
+                };
+                return {
+                    default: FreeRadiusServer.renderAssetTemplate("default", vars),
+                    eap: FreeRadiusServer.renderAssetTemplate("eap", vars),
+                    "inner-tunnel": FreeRadiusServer.renderAssetTemplate("inner-tunnel", vars),
+                    ldap: FreeRadiusServer.renderAssetTemplate("ldap", vars),
+                    "proxy.conf": FreeRadiusServer.renderAssetTemplate("proxy.conf", vars),
+                    "clients.conf": FreeRadiusServer.renderAssetTemplate("clients.conf", vars),
+                };
+            }),
+        }, k8sOpts);
+        this.issuer = new certManager.Issuer(name, { metadata, spec: { selfSigned: {} } }, k8sOpts);
+        this.caCertificate = new certManager.Certificate(`${name}-ca`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-ca` },
+            spec: {
+                isCA: true,
+                commonName: "RADIUS",
+                dnsNames: [args.hostname],
+                duration: "876000h",
+                renewBefore: "8760h",
+                privateKey: { algorithm: "RSA", size: 4096, rotationPolicy: "Always" },
+                issuerRef: { kind: this.issuer.kind, name: this.issuer.metadata.name },
+            },
+        }, k8sOpts);
+        this.caIssuer = new certManager.Issuer(`${name}-ca`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-ca` },
+            spec: { ca: { secretName: this.caCertificate.secretName } },
+        }, k8sOpts);
+        this.certificate = new certManager.Certificate(name, {
+            metadata,
+            spec: {
+                isCA: true,
+                commonName: args.hostname,
+                dnsNames: [args.hostname],
+                duration: "87600h",
+                renewBefore: "2160h",
+                privateKey: { algorithm: "RSA", size: 4096, rotationPolicy: "Always" },
+                issuerRef: { kind: this.caIssuer.kind, name: this.caIssuer.metadata.name },
+            },
+        }, k8sOpts);
+        this.deployment = new k8s.apps.v1.Deployment(name, {
+            metadata,
+            spec: {
+                selector: { matchLabels: metadata.labels },
+                strategy: { type: "Recreate" },
+                replicas: 1,
+                template: {
+                    metadata: {
+                        labels: metadata.labels,
+                        annotations: { "backup.velero.io/backup-volumes": "data" },
+                    },
+                    spec: {
+                        serviceAccountName: this.serviceAccount.metadata.name,
+                        containers: [
+                            {
+                                name: "freeradius",
+                                image: "freeradius/freeradius-server:latest-alpine",
+                                imagePullPolicy: "Always",
+                                ports: [
+                                    { name: "radius", containerPort: 1812, protocol: "UDP" },
+                                    { name: "radius-acct", containerPort: 1813, protocol: "UDP" },
+                                ],
+                                resources: args.resources,
+                                volumeMounts: [
+                                    { name: "configs", mountPath: "/opt/etc/raddb/sites-enabled/default", subPath: "default" },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/mods-enabled/eap", subPath: "eap" },
+                                    {
+                                        name: "configs",
+                                        mountPath: "/opt/etc/raddb/sites-enabled/inner-tunnel",
+                                        subPath: "inner-tunnel",
+                                    },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/mods-enabled/ldap", subPath: "ldap" },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/proxy.conf", subPath: "proxy.conf" },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/clients.conf", subPath: "clients.conf" },
+                                    { name: "ca-tls", mountPath: "/opt/etc/raddb/certs/ca.crt", subPath: "tls.crt" },
+                                    { name: "tls", mountPath: "/opt/etc/raddb/certs/server.crt", subPath: "tls.crt" },
+                                    { name: "tls", mountPath: "/opt/etc/raddb/certs/server.key", subPath: "tls.key" },
+                                ],
+                            },
+                        ],
+                        volumes: [
+                            { name: "configs", secret: { secretName: this.configs.metadata.name } },
+                            { name: "ca-tls", secret: { secretName: this.caCertificate.secretName } },
+                            { name: "tls", secret: { secretName: this.certificate.secretName } },
+                        ],
+                    },
+                },
+            },
+        }, k8sOpts);
+        this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(name, {
+            metadata,
+            spec: {
+                minAvailable: 1,
+                selector: { matchLabels: metadata.labels },
+            },
+        }, k8sOpts);
+        this.service = new kubernetes.v1.Service(name, {
+            metadata,
+            spec: {
+                selector: metadata.labels,
+                ports: [
+                    { name: "radius", port: 1812, targetPort: "radius", protocol: "UDP" },
+                    { name: "radius-acct", port: 1813, targetPort: "radius-acct", protocol: "UDP" },
+                ],
+            },
+            hostnames: [args.hostname],
+        }, { ...k8sOpts, dependsOn: [this.deployment] });
+        this.ip = this.service.spec.clusterIP;
+        this.registerOutputs();
+    }
+    static renderAssetTemplate(filename, data) {
+        return pulumi.output(templateFile.renderFile(path.join(__dirname, "assets", `${filename}.tmpl`), data));
+    }
+}
+exports.FreeRadiusServer = FreeRadiusServer;
+//# sourceMappingURL=deployment.js.map

package/lib/freeradius/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/freeradius/deployment.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,yCAAyC;AACzC,0CAA0C;AAC1C,6BAA6B;AAC7B,8CAA8C;AAC9C,sCAA8C;AAC9C,4CAA4C;AAC5C,8CAA8C;AAgD9C,MAAa,gBAAiB,SAAQ,0BAAiB;IACpC,iBAAiB,CAAuC;IACxD,cAAc,CAA6B;IAC3C,IAAI,CAAmB;IACvB,WAAW,CAA0B;IACrC,WAAW,CAAwB;IACnC,OAAO,CAAqB;IAC5B,MAAM,CAAqB;IAC3B,aAAa,CAA0B;IACvC,QAAQ,CAAqB;IAC7B,WAAW,CAA0B;IACrC,UAAU,CAAyB;IACnC,mBAAmB,CAAoC;IACvD,OAAO,CAAwB;IAChC,SAAS,CAAwB;IACjC,YAAY,CAAwB;IACpC,EAAE,CAAwB;IAE1C;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAA0B,EAAE,IAAsC;QAC1F,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEtC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE;YAChC,IAAI,CAAC,SAAS,GAAG,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;SAChF;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEnF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,YAAY;gBACtC,6BAA6B,EAAE,YAAY;gBAC3C,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAC/D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC/B,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAChC,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBACxC,OAAO,EAAE,CAAC,QAAQ,CAAC;gBACnB,WAAW,EAAE,KAAK;aACnB;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QAElF,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAC9B,IAAI,EACJ;YACE,QAAQ;YACR,KAAK,EAAE;gBACL;oBACE,SAAS,EAAE,CAAC,QAAQ,CAAC;oBACrB,aAAa,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrD,SAAS,EAAE,CAAC,qBAAqB,CAAC;oBAClC,KAAK,EAAE,CAAC,KAAK,CAAC;iBACf;aACF;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;oBAC9B,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS;oBACjD,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;iBACxC;aACF;YACD,OAAO,EAAE,EAAE,QAAQ,EAAE,2BAA2B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;SACxG,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAC9B,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,eAAe,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,MAAM,CAClG,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAC/B,IAAI,MAAM,CAAC,YAAY,CACrB,GAAG,IAAI,gBAAgB,EACvB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAC9B,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CACxC,CAAC,MAAM,CACT,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACnC,GAAG,IAAI,UAAU,EACjB;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,UAAU,EAAE;YACpE,UAAU,EAAE,MAAM;iBACf,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;iBAClE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,EAAE;gBACnD,MAAM,IAAI,GAAG;oBACX,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;oBACxG,MAAM;oBACN,WAAW;oBACX,YAAY;iBACb,CAAC;gBAEF,OAAO;oBACL,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC;oBAC9D,GAAG,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC;oBACtD,cAAc,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,cAAc,EAAE,IAAI,CAAC;oBAC1E,IAAI,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC;oBACxD,YAAY,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC;oBACtE,cAAc,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,cAAc,EAAE,IAAI,CAAC;iBAC3E,CAAC;YACJ,CAAC,CAAC;SACL,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAE5F,IAAI,CAAC,aAAa,GAAG,IAAI,WAAW,CAAC,WAAW,CAC9C,GAAG,IAAI,KAAK,EACZ;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,KAAK,EAAE;YAC/D,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,QAAQ;gBACpB,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACzB,QAAQ,EAAE,SAAS;gBACnB,WAAW,EAAE,OAAO;gBACpB,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;aACvE;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,MAAM,CACpC,GAAG,IAAI,KAAK,EACZ;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,KAAK,EAAE;YAC/D,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE;SAC5D,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,IAAI,CAAC,QAAQ;gBACzB,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,OAAO;gBACpB,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;aAC3E;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAC1C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC9B,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE;oBACR,QAAQ,EAAE;wBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,WAAW,EAAE,EAAE,iCAAiC,EAAE,MAAM,EAAE;qBAC3D;oBACD,IAAI,EAAE;wBACJ,kBAAkB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;wBACrD,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,YAAY;gCAClB,KAAK,EAAE,4CAA4C;gCACnD,eAAe,EAAE,QAAQ;gCACzB,KAAK,EAAE;oCACL,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;oCACxD,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;iCAC9D;gCACD,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,YAAY,EAAE;oCACZ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,sCAAsC,EAAE,OAAO,EAAE,SAAS,EAAE;oCAC1F,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,iCAAiC,EAAE,OAAO,EAAE,KAAK,EAAE;oCACjF;wCACE,IAAI,EAAE,SAAS;wCACf,SAAS,EAAE,2CAA2C;wCACtD,OAAO,EAAE,cAAc;qCACxB;oCACD,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,kCAAkC,EAAE,OAAO,EAAE,MAAM,EAAE;oCACnF,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,2BAA2B,EAAE,OAAO,EAAE,YAAY,EAAE;oCAClF,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,6BAA6B,EAAE,OAAO,EAAE,cAAc,EAAE;oCAEtF,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,6BAA6B,EAAE,OAAO,EAAE,SAAS,EAAE;oCAChF,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,iCAAiC,EAAE,OAAO,EAAE,SAAS,EAAE;oCACjF,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,iCAAiC,EAAE,OAAO,EAAE,SAAS,EAAE;iCAClF;6BACF;yBACF;wBACD,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;4BACvE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE;4BACzE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE;yBACrE;qBACF;iBACF;aACF;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAC9D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,YAAY,EAAE,CAAC;gBACf,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;aAC3C;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,CACtC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,KAAK,EAAE;oBACL,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;oBACrE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;iBAChF;aACF;YACD,SAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;SAC3B,EACD,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAC7C,CAAC;QAEF,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAEtC,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAEO,MAAM,CAAC,mBAAmB,CAAC,QAAgB,EAAE,IAAuB;QAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1G,CAAC;CACF;AAlRD,4CAkRC"}

package/lib/freeradius/index.d.ts

@@ -0,0 +1,3 @@
+import { FreeRadiusServerArgs, FreeRadiusServer } from "./deployment";
+export { FreeRadiusServerArgs, FreeRadiusServer };
+//# sourceMappingURL=index.d.ts.map

package/lib/freeradius/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/freeradius/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEtE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,CAAC"}

package/lib/freeradius/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FreeRadiusServer = void 0;
+const deployment_1 = require("./deployment");
+Object.defineProperty(exports, "FreeRadiusServer", { enumerable: true, get: function () { return deployment_1.FreeRadiusServer; } });
+//# sourceMappingURL=index.js.map

package/lib/freeradius/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/freeradius/index.ts"],"names":[],"mappings":";;;AAAA,6CAAsE;AAEvC,iGAFA,6BAAgB,OAEA"}

package/lib/gitlab/index.d.ts

@@ -0,0 +1,4 @@
+import { RunnerArgs, Runner, RunnersArgs, Runners, RunnerCleanupArgs, RunnerCleanup } from "./runners";
+import { RenovateArgs, Renovate } from "./renovate";
+export { RunnerArgs, Runner, RunnersArgs, Runners, RunnerCleanupArgs, RunnerCleanup, RenovateArgs, Renovate };
+//# sourceMappingURL=index.d.ts.map

package/lib/gitlab/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/gitlab/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACvG,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC"}

package/lib/gitlab/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Renovate = exports.RunnerCleanup = exports.Runners = exports.Runner = void 0;
+const runners_1 = require("./runners");
+Object.defineProperty(exports, "Runner", { enumerable: true, get: function () { return runners_1.Runner; } });
+Object.defineProperty(exports, "Runners", { enumerable: true, get: function () { return runners_1.Runners; } });
+Object.defineProperty(exports, "RunnerCleanup", { enumerable: true, get: function () { return runners_1.RunnerCleanup; } });
+const renovate_1 = require("./renovate");
+Object.defineProperty(exports, "Renovate", { enumerable: true, get: function () { return renovate_1.Renovate; } });
+//# sourceMappingURL=index.js.map

package/lib/gitlab/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/gitlab/index.ts"],"names":[],"mappings":";;;AAAA,uCAAuG;AAGlF,uFAHA,gBAAM,OAGA;AAAe,wFAHA,iBAAO,OAGA;AAAqB,8FAHA,uBAAa,OAGA;AAFnF,yCAAoD;AAE+C,yFAF5E,mBAAQ,OAE4E"}

package/lib/gitlab/renovate.d.ts

@@ -0,0 +1,38 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { ComponentResource } from "../common";
+export interface RenovateArgs {
+    /**
+     * Optional: Namespace
+     */
+    namespace?: pulumi.Input<string>;
+    /**
+     * Access token
+     */
+    accessToken: pulumi.Input<string>;
+    /**
+     * Optional: Github access token
+     */
+    githubAccessToken?: pulumi.Input<string>;
+    /**
+     * Optional: Schedule
+     */
+    schedule?: pulumi.Input<string>;
+    /**
+     * Optional: Resources
+     */
+    resources?: pulumi.Input<k8s.types.input.core.v1.ResourceRequirements>;
+}
+export declare class Renovate extends ComponentResource {
+    private readonly secret;
+    private readonly cronjob;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new renovate resource.
+     * @param name The name of the renovate resource.
+     * @param args A bag of arguments to control the renovate creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: RenovateArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=renovate.d.ts.map

package/lib/gitlab/renovate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renovate.d.ts","sourceRoot":"","sources":["../../../lib/gitlab/renovate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;CACxE;AAED,qBAAa,QAAS,SAAQ,iBAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CA0ErF"}