@ydkn/pulumi-components 0.4.2 → 0.4.3

package/lib/velero/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/velero/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC"}

package/lib/velero/index.js

@@ -1,6 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Velero = void 0;
-const operator_1 = require("./operator");
-Object.defineProperty(exports, "Velero", { enumerable: true, get: function () { return operator_1.Velero; } });
-//# sourceMappingURL=index.js.map

package/lib/velero/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/velero/index.ts"],"names":[],"mappings":";;;AAAA,yCAAgD;AAE3B,uFAFA,iBAAM,OAEA"}

package/lib/velero/operator.d.ts

@@ -1,31 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import { ComponentResource } from "../common";
-export interface VeleroArgs {
-    /**
-     * Optional: Namespace
-     */
-    namespace?: pulumi.Input<string>;
-    /**
-     * Cluster name
-     */
-    clusterName: pulumi.Input<string>;
-    /**
-     * Optional: Protect critical resources
-     */
-    protect?: boolean;
-}
-export declare class Velero extends ComponentResource {
-    private readonly resticPasswordSecret;
-    private readonly helmRelease;
-    private readonly bucket;
-    readonly resticPassword: pulumi.Output<string>;
-    readonly namespace: pulumi.Output<string>;
-    /**
-     * Create a new Velero resource.
-     * @param name The name of the Velero resource.
-     * @param args A bag of arguments to control the Velero creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name: string, args: VeleroArgs, opts?: pulumi.ComponentResourceOptions);
-}
-//# sourceMappingURL=operator.d.ts.map

package/lib/velero/operator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../../../lib/velero/operator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAIzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,MAAO,SAAQ,iBAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,SAAgB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAiJnF"}

package/lib/velero/operator.js

@@ -1,148 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Velero = void 0;
-const pulumi = require("@pulumi/pulumi");
-const random = require("@pulumi/random");
-const k8s = require("@pulumi/kubernetes");
-const aws = require("@pulumi/aws");
-const common_1 = require("../common");
-const helm = require("../kubernetes/helm");
-const aws_1 = require("../aws");
-class Velero extends common_1.ComponentResource {
-    resticPasswordSecret;
-    helmRelease;
-    bucket;
-    resticPassword;
-    namespace;
-    /**
-     * Create a new Velero resource.
-     * @param name The name of the Velero resource.
-     * @param args A bag of arguments to control the Velero creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name, args, opts) {
-        super("velero", name, {}, opts);
-        const emptyOpts = this.opts();
-        const awsOpts = this.opts(aws.Provider);
-        const k8sOpts = this.opts(k8s.Provider);
-        this.bucket = new aws_1.Bucket(name, { name: pulumi.interpolate `${name}-${args.clusterName}`, protect: args.protect }, awsOpts);
-        this.resticPassword = pulumi.secret(new random.RandomPassword(name, { length: 64, special: false }, emptyOpts).result);
-        this.namespace = args.namespace
-            ? pulumi.output(args.namespace)
-            : new k8s.core.v1.Namespace(name, { metadata: { name } }, k8sOpts).metadata.name;
-        const metadata = {
-            name,
-            namespace: this.namespace,
-            labels: {
-                "app.kubernetes.io/name": "velero",
-                "app.kubernetes.io/component": "velero",
-                "app.kubernetes.io/instance": name,
-            },
-        };
-        this.resticPasswordSecret = new k8s.core.v1.Secret(name, {
-            metadata: { ...metadata, name: pulumi.interpolate `${name}-restic-credentials` },
-            stringData: {
-                "repository-password": this.resticPassword,
-            },
-        }, k8sOpts);
-        this.helmRelease = new helm.v3.Release(name, {
-            name: metadata.name,
-            namespace: metadata.namespace,
-            repositoryOpts: { repo: "https://vmware-tanzu.github.io/helm-charts" },
-            chart: "velero",
-            values: {
-                fullnameOverride: name,
-                backupsEnabled: true,
-                snapshotsEnabled: false,
-                deployRestic: true,
-                configuration: {
-                    provider: "aws",
-                    backupStorageLocation: {
-                        name: "default",
-                        provider: "aws",
-                        bucket: this.bucket.bucket.id,
-                        config: {
-                            region: this.bucket.bucket.region,
-                        },
-                    },
-                },
-                credentials: {
-                    extraEnvVars: {
-                        AWS_ACCESS_KEY_ID: this.bucket.accessKey.accessKey.id,
-                        AWS_SECRET_ACCESS_KEY: this.bucket.accessKey.accessKey.secret,
-                        AWS_DEFAULT_REGION: this.bucket.bucket.region,
-                    },
-                },
-                restic: {
-                    privileged: true,
-                    resources: {
-                        requests: { memory: "192Mi" },
-                        limits: { memory: "256Mi" },
-                    },
-                    tolerations: [
-                        { key: "node-role.kubernetes.io/master", operator: "Exists", effect: "NoSchedule" },
-                        { key: "node-role.kubernetes.io/control-plane", operator: "Exists", effect: "NoSchedule" },
-                    ],
-                },
-                initContainers: [
-                    {
-                        name: "velero-plugin-for-aws",
-                        image: "velero/velero-plugin-for-aws:latest",
-                        volumeMounts: [{ name: "plugins", mountPath: "/target" }],
-                        resources: {
-                            requests: { memory: "32Mi" },
-                            limits: { memory: "48Mi" },
-                        },
-                    },
-                ],
-                schedules: {
-                    daily: {
-                        schedule: "0 2 * * *",
-                        template: {
-                            ttl: "170h", // ~7 days
-                        },
-                    },
-                    weekly: {
-                        schedule: "0 3 * * 0",
-                        template: {
-                            ttl: "730h", // ~4 weeks
-                        },
-                    },
-                    monthly: {
-                        schedule: "0 4 1 * *",
-                        template: {
-                            ttl: "2200h", // ~3 months
-                        },
-                    },
-                },
-                affinity: {
-                    podAntiAffinity: {
-                        preferredDuringSchedulingIgnoredDuringExecution: [
-                            {
-                                weight: 100,
-                                podAffinityTerm: {
-                                    labelSelector: {
-                                        matchExpressions: [
-                                            { key: "app.kubernetes.io/name", operator: "In", values: ["velero"] },
-                                            { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
-                                        ],
-                                    },
-                                    topologyKey: "kubernetes.io/hostname",
-                                },
-                            },
-                        ],
-                    },
-                },
-                resources: {
-                    requests: { memory: "256Mi" },
-                    limits: { memory: "512Mi" },
-                },
-                metrics: { serviceMonitor: { enabled: true } },
-                kubectl: { image: { repository: "appscode/kubectl", tag: "v1.23" } },
-            },
-        }, k8sOpts);
-        this.registerOutputs();
-    }
-}
-exports.Velero = Velero;
-//# sourceMappingURL=operator.js.map

package/lib/velero/operator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../lib/velero/operator.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,yCAAyC;AACzC,0CAA0C;AAC1C,mCAAmC;AACnC,sCAA8C;AAC9C,2CAA2C;AAC3C,gCAAgC;AAiBhC,MAAa,MAAO,SAAQ,0BAAiB;IAC1B,oBAAoB,CAAqB;IACzC,WAAW,CAAkB;IAC7B,MAAM,CAAS;IAChB,cAAc,CAAwB;IACtC,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAsC;QAChF,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAEhC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,GAAG,IAAI,YAAM,CACtB,IAAI,EACJ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAChF,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,MAAM,CACjC,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC,MAAM,CAClF,CAAC;QAEF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEnF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,QAAQ;gBAClC,6BAA6B,EAAE,QAAQ;gBACvC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,oBAAoB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAChD,IAAI,EACJ;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,qBAAqB,EAAE;YAC/E,UAAU,EAAE;gBACV,qBAAqB,EAAE,IAAI,CAAC,cAAc;aAC3C;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CACpC,IAAI,EACJ;YACE,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,EAAE,IAAI,EAAE,4CAA4C,EAAE;YACtE,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE;gBACN,gBAAgB,EAAE,IAAI;gBACtB,cAAc,EAAE,IAAI;gBACpB,gBAAgB,EAAE,KAAK;gBACvB,YAAY,EAAE,IAAI;gBAClB,aAAa,EAAE;oBACb,QAAQ,EAAE,KAAK;oBACf,qBAAqB,EAAE;wBACrB,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;wBAC7B,MAAM,EAAE;4BACN,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;yBAClC;qBACF;iBACF;gBACD,WAAW,EAAE;oBACX,YAAY,EAAE;wBACZ,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;wBACrD,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM;wBAC7D,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;qBAC9C;iBACF;gBACD,MAAM,EAAE;oBACN,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE;wBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;wBAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;qBAC5B;oBACD,WAAW,EAAE;wBACX,EAAE,GAAG,EAAE,gCAAgC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;wBACnF,EAAE,GAAG,EAAE,uCAAuC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;qBAC3F;iBACF;gBACD,cAAc,EAAE;oBACd;wBACE,IAAI,EAAE,uBAAuB;wBAC7B,KAAK,EAAE,qCAAqC;wBAC5C,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;wBACzD,SAAS,EAAE;4BACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;4BAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;yBAC3B;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,KAAK,EAAE;wBACL,QAAQ,EAAE,WAAW;wBACrB,QAAQ,EAAE;4BACR,GAAG,EAAE,MAAM,EAAE,UAAU;yBACxB;qBACF;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,WAAW;wBACrB,QAAQ,EAAE;4BACR,GAAG,EAAE,MAAM,EAAE,WAAW;yBACzB;qBACF;oBACD,OAAO,EAAE;wBACP,QAAQ,EAAE,WAAW;wBACrB,QAAQ,EAAE;4BACR,GAAG,EAAE,OAAO,EAAE,YAAY;yBAC3B;qBACF;iBACF;gBACD,QAAQ,EAAE;oBACR,eAAe,EAAE;wBACf,+CAA+C,EAAE;4BAC/C;gCACE,MAAM,EAAE,GAAG;gCACX,eAAe,EAAE;oCACf,aAAa,EAAE;wCACb,gBAAgB,EAAE;4CAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE;4CACrE,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;yCACtE;qCACF;oCACD,WAAW,EAAE,wBAAwB;iCACtC;6BACF;yBACF;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;oBAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;iBAC5B;gBACD,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;gBAC9C,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;aACrE;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AA9JD,wBA8JC"}

package/lib/wireguard/deployment.d.ts

@@ -1,82 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import { ComponentResource } from "../common";
-export interface Interface {
-    /**
-     * Wireguard network addresses
-     */
-    addresses: pulumi.Input<pulumi.Input<string>[]>;
-    /**
-     * Optional: Port
-     */
-    port?: pulumi.Input<number>;
-    /**
-     * Private key
-     */
-    privateKey: pulumi.Input<string>;
-    /**
-     * Optional: Name
-     */
-    name?: pulumi.Input<string>;
-}
-export interface Peer {
-    /**
-     * Public key
-     */
-    publicKey: pulumi.Input<string>;
-    /**
-     * Optional: Preshared key
-     */
-    presharedKey?: pulumi.Input<string>;
-    /**
-     * Allowed IPs
-     */
-    allowedIPs: pulumi.Input<pulumi.Input<string>[]>;
-    /**
-     * Optional: Endpoint
-     */
-    endpoint?: pulumi.Input<string>;
-}
-export interface WireguardArgs {
-    /**
-     * Optional: Namespace
-     */
-    namespace?: pulumi.Input<string>;
-    /**
-     * Interface configuration
-     */
-    interface: pulumi.Input<Interface>;
-    /**
-     * Optional: Peer configurations
-     */
-    peers?: pulumi.Input<pulumi.Input<Peer>[]>;
-    /**
-     * Optional: Node selector
-     */
-    nodeSelector?: pulumi.Input<{
-        [key: string]: pulumi.Input<string>;
-    }>;
-}
-export declare class Wireguard extends ComponentResource {
-    static readonly gatewayLabel = "network.ydkn.network/vpn-gateway";
-    static readonly gatewayLabelValue = "true";
-    static readonly defaultInterfaceName = "wireguard";
-    static readonly defaultInterfacePort = 51920;
-    private readonly podSecurityPolicy;
-    private readonly serviceAccount;
-    private readonly role;
-    private readonly roleBinding;
-    private readonly config;
-    private readonly daemonSet;
-    private readonly podDisruptionBudget;
-    readonly interfaceName: pulumi.Output<string>;
-    readonly interfacePort: pulumi.Output<number>;
-    readonly namespace: pulumi.Output<string>;
-    /**
-     * Create a new wireguard resource.
-     * @param name The name of the wireguard resource.
-     * @param args A bag of arguments to control the wireguard deployment.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name: string, args: WireguardArgs, opts?: pulumi.ComponentResourceOptions);
-}
-//# sourceMappingURL=deployment.d.ts.map

package/lib/wireguard/deployment.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../lib/wireguard/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,IAAI;IACnB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;CACtE;AAED,qBAAa,SAAU,SAAQ,iBAAiB;IAC9C,gBAAuB,YAAY,sCAAsC;IACzE,gBAAuB,iBAAiB,UAAU;IAClD,gBAAuB,oBAAoB,eAAe;IAC1D,gBAAuB,oBAAoB,SAAS;IAEpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAuC;IACzE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,SAAgB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD,SAAgB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAoLtF"}

package/lib/wireguard/deployment.js

@@ -1,161 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Wireguard = void 0;
-const pulumi = require("@pulumi/pulumi");
-const k8s = require("@pulumi/kubernetes");
-const common_1 = require("../common");
-class Wireguard extends common_1.ComponentResource {
-    static gatewayLabel = "network.ydkn.network/vpn-gateway";
-    static gatewayLabelValue = "true";
-    static defaultInterfaceName = "wireguard";
-    static defaultInterfacePort = 51920;
-    podSecurityPolicy;
-    serviceAccount;
-    role;
-    roleBinding;
-    config;
-    daemonSet;
-    podDisruptionBudget;
-    interfaceName;
-    interfacePort;
-    namespace;
-    /**
-     * Create a new wireguard resource.
-     * @param name The name of the wireguard resource.
-     * @param args A bag of arguments to control the wireguard deployment.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name, args, opts) {
-        super("wireguard", name, args, opts);
-        opts = this.opts(k8s.Provider);
-        this.interfaceName = pulumi.all([args.interface]).apply(([iface]) => iface.name ?? Wireguard.defaultInterfaceName);
-        this.interfacePort = pulumi.all([args.interface]).apply(([iface]) => iface.port ?? Wireguard.defaultInterfacePort);
-        this.namespace = args.namespace
-            ? pulumi.output(args.namespace)
-            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
-        const metadata = {
-            name,
-            namespace: this.namespace,
-            labels: {
-                "app.kubernetes.io/name": "wireguard",
-                "app.kubernetes.io/component": "wireguard",
-                "app.kubernetes.io/instance": name,
-            },
-        };
-        this.podSecurityPolicy = new k8s.policy.v1beta1.PodSecurityPolicy(name, {
-            metadata,
-            spec: {
-                allowedCapabilities: ["NET_ADMIN"],
-                runAsUser: { rule: "RunAsAny" },
-                fsGroup: { rule: "RunAsAny" },
-                seLinux: { rule: "RunAsAny" },
-                supplementalGroups: { rule: "RunAsAny" },
-                volumes: ["secret"],
-                hostNetwork: true,
-                hostPorts: [{ min: this.interfacePort, max: this.interfacePort }],
-            },
-        }, opts);
-        this.serviceAccount = new k8s.core.v1.ServiceAccount(name, { metadata }, opts);
-        this.role = new k8s.rbac.v1.Role(name, {
-            metadata,
-            rules: [
-                {
-                    apiGroups: ["policy"],
-                    resourceNames: [this.podSecurityPolicy.metadata.name],
-                    resources: ["podsecuritypolicies"],
-                    verbs: ["use"],
-                },
-            ],
-        }, opts);
-        this.roleBinding = new k8s.rbac.v1.RoleBinding(name, {
-            metadata,
-            subjects: [
-                {
-                    kind: this.serviceAccount.kind,
-                    namespace: this.serviceAccount.metadata.namespace,
-                    name: this.serviceAccount.metadata.name,
-                },
-            ],
-            roleRef: {
-                apiGroup: "rbac.authorization.k8s.io",
-                kind: this.role.kind,
-                name: this.role.metadata.name,
-            },
-        }, opts);
-        const configData = pulumi
-            .all([args.interface, this.interfaceName, this.interfacePort, args.peers ?? []])
-            .apply(([iface, interfaceName, interfacePort, peers]) => pulumi.all([iface.addresses]).apply((addresses) => pulumi.all(peers).apply((peers) => {
-            const conf = [
-                "[Interface]",
-                `Address = ${addresses.join(",")}`,
-                `ListenPort = ${interfacePort}`,
-                `PrivateKey = ${iface.privateKey}`,
-            ];
-            for (const peer of peers) {
-                conf.push("[Peer]", "PersistentKeepalive = 10", `AllowedIPs = ${peer.allowedIPs.join(",")}`, `PublicKey = ${peer.publicKey}`);
-                if (peer.presharedKey !== undefined) {
-                    conf.push(`PresharedKey = ${peer.presharedKey}`);
-                }
-                if (peer.endpoint !== undefined) {
-                    const endpoint = peer.endpoint.match(/:\d{1,5}$/)
-                        ? peer.endpoint
-                        : `${peer.endpoint}:${Wireguard.defaultInterfacePort}`;
-                    conf.push(`Endpoint = ${endpoint}`);
-                }
-            }
-            const data = {};
-            data[`${interfaceName}.conf`] = conf.join("\n");
-            return data;
-        })));
-        this.config = new k8s.core.v1.Secret(name, { metadata, stringData: configData }, opts);
-        const nodeSelector = {};
-        nodeSelector[Wireguard.gatewayLabel] = Wireguard.gatewayLabelValue;
-        this.daemonSet = new k8s.apps.v1.DaemonSet(name, {
-            metadata,
-            spec: {
-                selector: { matchLabels: metadata.labels },
-                template: {
-                    metadata: { labels: metadata.labels },
-                    spec: {
-                        serviceAccountName: this.serviceAccount.metadata.name,
-                        nodeSelector: args.nodeSelector ?? nodeSelector,
-                        tolerations: [
-                            { key: "node-role.kubernetes.io/master", operator: "Exists", effect: "NoSchedule" },
-                            { key: "node-role.kubernetes.io/control-plane", operator: "Exists", effect: "NoSchedule" },
-                        ],
-                        hostNetwork: true,
-                        containers: [
-                            {
-                                name: "wireguard",
-                                image: "ydkn/k8s-wireguard:latest",
-                                imagePullPolicy: "Always",
-                                env: [
-                                    { name: "IFACE", value: this.interfaceName },
-                                    { name: "IPTABLES_ALLOW_FORWARD", value: "true" },
-                                ],
-                                securityContext: { privileged: true, capabilities: { add: ["NET_ADMIN"] } },
-                                volumeMounts: [{ name: "conf", mountPath: "/etc/wireguard", readOnly: true }],
-                                ports: [{ name: "wireguard", containerPort: this.interfacePort, protocol: "UDP" }],
-                                resources: {
-                                    requests: { memory: "8Mi" },
-                                    limits: { memory: "12Mi" },
-                                },
-                            },
-                        ],
-                        volumes: [{ name: "conf", secret: { secretName: this.config.metadata.name, defaultMode: 0o400 } }],
-                    },
-                },
-            },
-        }, opts);
-        this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(name, {
-            metadata,
-            spec: {
-                maxUnavailable: 0,
-                selector: { matchLabels: metadata.labels },
-            },
-        }, opts);
-        this.registerOutputs();
-    }
-}
-exports.Wireguard = Wireguard;
-//# sourceMappingURL=deployment.js.map

package/lib/wireguard/deployment.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/wireguard/deployment.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AA2D9C,MAAa,SAAU,SAAQ,0BAAiB;IACvC,MAAM,CAAU,YAAY,GAAG,kCAAkC,CAAC;IAClE,MAAM,CAAU,iBAAiB,GAAG,MAAM,CAAC;IAC3C,MAAM,CAAU,oBAAoB,GAAG,WAAW,CAAC;IACnD,MAAM,CAAU,oBAAoB,GAAG,KAAK,CAAC;IAEnC,iBAAiB,CAAuC;IACxD,cAAc,CAA6B;IAC3C,IAAI,CAAmB;IACvB,WAAW,CAA0B;IACrC,MAAM,CAAqB;IAC3B,SAAS,CAAwB;IACjC,mBAAmB,CAAoC;IACxD,aAAa,CAAwB;IACrC,aAAa,CAAwB;IACrC,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAmB,EAAE,IAAsC;QACnF,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAErC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACnH,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAEnH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,WAAW;gBACrC,6BAA6B,EAAE,WAAW;gBAC1C,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAC/D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,mBAAmB,EAAE,CAAC,WAAW,CAAC;gBAClC,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC/B,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBACxC,OAAO,EAAE,CAAC,QAAQ,CAAC;gBACnB,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;aAClE;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAE/E,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAC9B,IAAI,EACJ;YACE,QAAQ;YACR,KAAK,EAAE;gBACL;oBACE,SAAS,EAAE,CAAC,QAAQ,CAAC;oBACrB,aAAa,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrD,SAAS,EAAE,CAAC,qBAAqB,CAAC;oBAClC,KAAK,EAAE,CAAC,KAAK,CAAC;iBACf;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;oBAC9B,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS;oBACjD,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;iBACxC;aACF;YACD,OAAO,EAAE;gBACP,QAAQ,EAAE,2BAA2B;gBACrC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;aAC9B;SACF,EACD,IAAI,CACL,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM;aACtB,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;aAC/E,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,EAAE,CACtD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,IAAI,GAAG;gBACX,aAAa;gBACb,aAAa,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAClC,gBAAgB,aAAa,EAAE;gBAC/B,gBAAgB,KAAK,CAAC,UAAU,EAAE;aACnC,CAAC;YAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;gBACxB,IAAI,CAAC,IAAI,CACP,QAAQ,EACR,0BAA0B,EAC1B,gBAAgB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAC3C,eAAe,IAAI,CAAC,SAAS,EAAE,CAChC,CAAC;gBAEF,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE;oBACnC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;iBAClD;gBAED,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;oBAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;wBAC/C,CAAC,CAAC,IAAI,CAAC,QAAQ;wBACf,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,oBAAoB,EAAE,CAAC;oBAEzD,IAAI,CAAC,IAAI,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;iBACrC;aACF;YAED,MAAM,IAAI,GAA8B,EAAE,CAAC;YAC3C,IAAI,CAAC,GAAG,aAAa,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEhD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CACH,CACF,CAAC;QAEJ,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC;QAEvF,MAAM,YAAY,GAA8B,EAAE,CAAC;QACnD,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,iBAAiB,CAAC;QAEnE,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACxC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE;oBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACrC,IAAI,EAAE;wBACJ,kBAAkB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;wBACrD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,YAAY;wBAC/C,WAAW,EAAE;4BACX,EAAE,GAAG,EAAE,gCAAgC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;4BACnF,EAAE,GAAG,EAAE,uCAAuC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;yBAC3F;wBACD,WAAW,EAAE,IAAI;wBACjB,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,WAAW;gCACjB,KAAK,EAAE,2BAA2B;gCAClC,eAAe,EAAE,QAAQ;gCACzB,GAAG,EAAE;oCACH,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE;oCAC5C,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAM,EAAE;iCAClD;gCACD,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE;gCAC3E,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gCAC7E,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gCAClF,SAAS,EAAE;oCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;oCAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iCAC3B;6BACF;yBACF;wBACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC;qBACnG;iBACF;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAC9D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,cAAc,EAAE,CAAC;gBACjB,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;aAC3C;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;;AA1MH,8BA2MC"}

package/lib/wireguard/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/wireguard/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC"}

package/lib/wireguard/index.js

@@ -1,6 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Wireguard = void 0;
-const deployment_1 = require("./deployment");
-Object.defineProperty(exports, "Wireguard", { enumerable: true, get: function () { return deployment_1.Wireguard; } });
-//# sourceMappingURL=index.js.map

package/lib/wireguard/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/wireguard/index.ts"],"names":[],"mappings":";;;AAAA,6CAAyE;AAEhC,0FAFA,sBAAS,OAEA"}