@ydkn/pulumi-components 0.4.2 → 0.4.4

package/lib/ssh/{index.d.ts → index.ts}

@@ -1,5 +1,5 @@
 import { ConnectionArgs } from "./types";
 import { ExecArgs, Exec } from "./exec";
 import { FileSourceArgs, FileArgs, File } from "./file";
+
 export { ConnectionArgs, ExecArgs, Exec, FileSourceArgs, FileArgs, File };
-//# sourceMappingURL=index.d.ts.map

package/lib/ssh/types.ts

@@ -0,0 +1,20 @@
+import * as pulumi from "@pulumi/pulumi";
+
+export interface ConnectionArgs {
+  host: pulumi.Input<string>;
+  port?: pulumi.Input<number>;
+  username?: pulumi.Input<string>;
+  password?: pulumi.Input<string>;
+  privateKey?: pulumi.Input<string>;
+  privateKeyPassphrase?: pulumi.Input<string>;
+  initialDelay?: pulumi.Input<number>;
+  retries?: pulumi.Input<number>;
+  retryIntialBackoff?: pulumi.Input<number>;
+  retryBackoffFactor?: pulumi.Input<number>;
+}
+
+export interface ConnectionArgsInternal {
+  host: string;
+  port?: number;
+  username?: string;
+}

package/lib/torproxy/deployment.ts

@@ -0,0 +1,165 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { ComponentResource } from "../common";
+import * as kubernetes from "../kubernetes";
+
+export interface TorProxyArgs {
+  /**
+   * Optional: Namespace
+   */
+  namespace?: pulumi.Input<string>;
+  /**
+   * Optional: Hostname
+   */
+  hostname?: pulumi.Input<string>;
+  /**
+   * Optional: Number of replicas
+   */
+  replicas?: pulumi.Input<number>;
+}
+
+export class TorProxy extends ComponentResource {
+  private static readonly healthCheckURL = "https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/";
+
+  private readonly deployment: k8s.apps.v1.Deployment;
+  private readonly podDisruptionBudget: k8s.policy.v1.PodDisruptionBudget;
+  private readonly service: kubernetes.v1.Service;
+  public readonly namespace: pulumi.Output<string>;
+
+  /**
+   * Create a new TOR proxy resource.
+   * @param name The name of the TOR proxy resource.
+   * @param args A bag of arguments to control the TOR proxy creation.
+   * @param opts A bag of options that control this resource's behavior.
+   */
+  constructor(name: string, args: TorProxyArgs, opts?: pulumi.ComponentResourceOptions) {
+    super("torproxy", name, args, opts);
+
+    opts = this.opts(k8s.Provider);
+
+    if (args.replicas === undefined) {
+      args.replicas = 1;
+    }
+
+    this.namespace = args.namespace
+      ? pulumi.output(args.namespace)
+      : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+
+    const metadata = {
+      name,
+      namespace: this.namespace,
+      labels: {
+        "app.kubernetes.io/name": "torproxy",
+        "app.kubernetes.io/component": "torproxy",
+        "app.kubernetes.io/instance": name,
+      },
+    };
+
+    const probeCmd = [
+      "curl",
+      "--proxy",
+      "http://127.0.0.1:8118",
+      "--insecure",
+      "--silent",
+      "--output",
+      "/dev/null",
+      TorProxy.healthCheckURL,
+    ];
+
+    this.deployment = new k8s.apps.v1.Deployment(
+      name,
+      {
+        metadata,
+        spec: {
+          selector: { matchLabels: metadata.labels },
+          replicas: args.replicas,
+          template: {
+            metadata: { labels: metadata.labels },
+            spec: {
+              containers: [
+                {
+                  name: "torprivoxy",
+                  image: "avpnusr/torprivoxy:latest",
+                  imagePullPolicy: "Always",
+                  securityContext: { runAsUser: 102, runAsGroup: 102 },
+                  ports: [{ name: "proxy", protocol: "TCP", containerPort: 8118 }],
+                  readinessProbe: {
+                    exec: { command: probeCmd },
+                    periodSeconds: 30,
+                    successThreshold: 3,
+                    failureThreshold: 2,
+                    timeoutSeconds: 10,
+                  },
+                  livenessProbe: {
+                    exec: { command: probeCmd },
+                    periodSeconds: 60,
+                    failureThreshold: 10,
+                    timeoutSeconds: 10,
+                  },
+                  resources: {
+                    requests: { memory: "48Mi" },
+                    limits: { memory: "64Mi" },
+                  },
+                },
+              ],
+              affinity: {
+                podAntiAffinity: {
+                  preferredDuringSchedulingIgnoredDuringExecution: [
+                    {
+                      weight: 100,
+                      podAffinityTerm: {
+                        labelSelector: {
+                          matchExpressions: [
+                            {
+                              key: "app.kubernetes.io/name",
+                              operator: "In",
+                              values: [metadata.labels["app.kubernetes.io/name"]],
+                            },
+                            {
+                              key: "app.kubernetes.io/instance",
+                              operator: "In",
+                              values: [metadata.labels["app.kubernetes.io/instance"]],
+                            },
+                          ],
+                        },
+                        topologyKey: "kubernetes.io/hostname",
+                      },
+                    },
+                  ],
+                },
+              },
+            },
+          },
+        },
+      },
+      opts
+    );
+
+    this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(
+      name,
+      {
+        metadata,
+        spec: {
+          minAvailable: 1,
+          selector: { matchLabels: metadata.labels },
+        },
+      },
+      opts
+    );
+
+    this.service = new kubernetes.v1.Service(
+      name,
+      {
+        hostnames: args.hostname ? [args.hostname] : undefined,
+        metadata,
+        spec: {
+          selector: metadata.labels,
+          ports: [{ name: "proxy", protocol: "TCP", port: 8118 }],
+        },
+      },
+      { ...opts, dependsOn: [this.deployment] }
+    );
+
+    this.registerOutputs();
+  }
+}

package/lib/torproxy/{index.d.ts → index.ts}

@@ -1,3 +1,3 @@
 import { TorProxyArgs, TorProxy } from "./deployment";
+
 export { TorProxyArgs, TorProxy };
-//# sourceMappingURL=index.d.ts.map