@ydkn/pulumi-components 0.4.3 → 0.4.5

package/lib/ssh/file.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.File = void 0;
+const pulumi = require("@pulumi/pulumi");
+const Sftp = require("ssh2-sftp-client");
+const crypto = require("crypto");
+const fs = require("fs");
+function sshFileCreate(connection, dst, srcFile, srcData) {
+    const connectionRetryFactor = connection.retryBackoffFactor || 1.2;
+    const initialDelay = connection.initialDelay || 0;
+    let connectionFailCount = connection.retries || 10;
+    let connectionRetryDelay = connection.retryIntialBackoff || 500;
+    return new Promise((resolve, reject) => {
+        function retryFunc() {
+            if (srcFile === undefined && srcData === undefined) {
+                reject(new Error("Must provide either srcFile or srcData"));
+            }
+            const client = new Sftp();
+            client
+                .connect({
+                host: connection.host,
+                port: connection.port ?? 22,
+                username: connection.username,
+                password: connection.password,
+                privateKey: connection.privateKey,
+                passphrase: connection.privateKeyPassphrase,
+            })
+                .then(() => {
+                if (srcFile !== undefined) {
+                    return client.put(srcFile, dst);
+                }
+                else {
+                    if (srcData instanceof Buffer) {
+                        return client.put(srcData, dst);
+                    }
+                    return client.put(Buffer.from(srcData), dst);
+                }
+            })
+                .then(() => {
+                client.end();
+                resolve(true);
+            })
+                .catch((err) => {
+                connectionFailCount--;
+                connectionRetryDelay *= connectionRetryFactor;
+                if (connectionFailCount < 0) {
+                    reject(err);
+                }
+                else {
+                    setTimeout(retryFunc, Math.round(connectionRetryDelay));
+                }
+            });
+        }
+        setTimeout(retryFunc, initialDelay);
+    });
+}
+class File extends pulumi.dynamic.Resource {
+    /**
+     * Create a new SSH file resource.
+     * @param name The name of the SSH file resource.
+     * @param args A bag of arguments to control the SSH file creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        const provider = {
+            async diff(id, olds, news) {
+                const replaces = [];
+                for (const [nKey, nValue] of Object.entries(news)) {
+                    if (nKey === "__provider") {
+                        continue;
+                    }
+                    let keyFound = false;
+                    for (const [oKey, oValue] of Object.entries(olds)) {
+                        if (oKey === "__provider") {
+                            continue;
+                        }
+                        if (nKey === oKey) {
+                            keyFound = true;
+                            if (JSON.stringify(nValue) !== JSON.stringify(oValue)) {
+                                replaces.push(nKey);
+                            }
+                        }
+                    }
+                    if (!keyFound) {
+                        replaces.push(nKey);
+                    }
+                }
+                return { changes: replaces.length > 0, replaces, deleteBeforeReplace: true };
+            },
+            async create(inputs) {
+                return sshFileCreate(inputs.connection, inputs.dst, inputs.src.file, inputs.src.data).then((r) => {
+                    return {
+                        id: require("uuid").v4(),
+                        outs: inputs,
+                    };
+                });
+            },
+        };
+        super(provider, name, args, opts);
+    }
+    static changeToken(str) {
+        return crypto.createHash("sha1").update(str, "utf8").digest("hex");
+    }
+    static fileChangeToken(filename) {
+        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        return this.changeToken(fs.readFileSync(filename, "utf-8"));
+    }
+}
+exports.File = File;
+//# sourceMappingURL=file.js.map

package/lib/ssh/file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.js","sourceRoot":"","sources":["../../../lib/ssh/file.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,yCAAyC;AACzC,iCAAiC;AACjC,yBAAyB;AAGzB,SAAS,aAAa,CACpB,UAAyC,EACzC,GAAW,EACX,OAAgB,EAChB,OAAyB;IAEzB,MAAM,qBAAqB,GAAG,UAAU,CAAC,kBAAkB,IAAI,GAAG,CAAC;IACnE,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,IAAI,CAAC,CAAC;IAClD,IAAI,mBAAmB,GAAG,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC;IACnD,IAAI,oBAAoB,GAAG,UAAU,CAAC,kBAAkB,IAAI,GAAG,CAAC;IAEhE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,SAAS,SAAS;YAChB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE;gBAClD,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;aAC7D;YAED,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YAE1B,MAAM;iBACH,OAAO,CAAC;gBACP,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,EAAE;gBAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,UAAU,EAAE,UAAU,CAAC,oBAAoB;aAC5C,CAAC;iBACD,IAAI,CAAC,GAAG,EAAE;gBACT,IAAI,OAAO,KAAK,SAAS,EAAE;oBACzB,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;iBACjC;qBAAM;oBACL,IAAI,OAAO,YAAY,MAAM,EAAE;wBAC7B,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;qBACjC;oBAED,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAiB,CAAC,EAAE,GAAG,CAAC,CAAC;iBACxD;YACH,CAAC,CAAC;iBACD,IAAI,CAAC,GAAG,EAAE;gBACT,MAAM,CAAC,GAAG,EAAE,CAAC;gBAEb,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,mBAAmB,EAAE,CAAC;gBACtB,oBAAoB,IAAI,qBAAqB,CAAC;gBAE9C,IAAI,mBAAmB,GAAG,CAAC,EAAE;oBAC3B,MAAM,CAAC,GAAG,CAAC,CAAC;iBACb;qBAAM;oBACL,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;iBACzD;YACH,CAAC,CAAC,CAAC;QACP,CAAC;QAED,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAuCD,MAAa,IAAK,SAAQ,MAAM,CAAC,OAAO,CAAC,QAAQ;IAC/C;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAc,EAAE,IAAsC;QAC9E,MAAM,QAAQ,GAAoC;YAChD,KAAK,CAAC,IAAI,CAAC,EAAa,EAAE,IAAoB,EAAE,IAAoB;gBAClE,MAAM,QAAQ,GAAG,EAAE,CAAC;gBAEpB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBACjD,IAAI,IAAI,KAAK,YAAY,EAAE;wBACzB,SAAS;qBACV;oBAED,IAAI,QAAQ,GAAG,KAAK,CAAC;oBAErB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;wBACjD,IAAI,IAAI,KAAK,YAAY,EAAE;4BACzB,SAAS;yBACV;wBAED,IAAI,IAAI,KAAK,IAAI,EAAE;4BACjB,QAAQ,GAAG,IAAI,CAAC;4BAEhB,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;gCACrD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;6BACrB;yBACF;qBACF;oBAED,IAAI,CAAC,QAAQ,EAAE;wBACb,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qBACrB;iBACF;gBAED,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;YAC/E,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,MAAsB;gBACjC,OAAO,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC/F,OAAO;wBACL,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE;wBACxB,IAAI,EAAE,MAAM;qBACb,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAEM,MAAM,CAAC,WAAW,CAAC,GAAW;QACnC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IAEM,MAAM,CAAC,eAAe,CAAC,QAAgB;QAC5C,mEAAmE;QACnE,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,CAAC;CACF;AA7DD,oBA6DC"}

package/lib/ssh/{index.ts → index.d.ts}

@@ -1,5 +1,5 @@
 import { ConnectionArgs } from "./types";
 import { ExecArgs, Exec } from "./exec";
 import { FileSourceArgs, FileArgs, File } from "./file";
-
 export { ConnectionArgs, ExecArgs, Exec, FileSourceArgs, FileArgs, File };
+//# sourceMappingURL=index.d.ts.map

package/lib/ssh/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/ssh/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAExD,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC"}

package/lib/ssh/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.File = exports.Exec = void 0;
+const exec_1 = require("./exec");
+Object.defineProperty(exports, "Exec", { enumerable: true, get: function () { return exec_1.Exec; } });
+const file_1 = require("./file");
+Object.defineProperty(exports, "File", { enumerable: true, get: function () { return file_1.File; } });
+//# sourceMappingURL=index.js.map

package/lib/ssh/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/ssh/index.ts"],"names":[],"mappings":";;;AACA,iCAAwC;AAGL,qFAHhB,WAAI,OAGgB;AAFvC,iCAAwD;AAEW,qFAFhC,WAAI,OAEgC"}

package/lib/ssh/types.d.ts

@@ -0,0 +1,19 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface ConnectionArgs {
+    host: pulumi.Input<string>;
+    port?: pulumi.Input<number>;
+    username?: pulumi.Input<string>;
+    password?: pulumi.Input<string>;
+    privateKey?: pulumi.Input<string>;
+    privateKeyPassphrase?: pulumi.Input<string>;
+    initialDelay?: pulumi.Input<number>;
+    retries?: pulumi.Input<number>;
+    retryIntialBackoff?: pulumi.Input<number>;
+    retryBackoffFactor?: pulumi.Input<number>;
+}
+export interface ConnectionArgsInternal {
+    host: string;
+    port?: number;
+    username?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/ssh/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../lib/ssh/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/lib/ssh/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/lib/ssh/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../lib/ssh/types.ts"],"names":[],"mappings":""}

package/lib/torproxy/deployment.d.ts

@@ -0,0 +1,31 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+export interface TorProxyArgs {
+    /**
+     * Optional: Namespace
+     */
+    namespace?: pulumi.Input<string>;
+    /**
+     * Optional: Hostname
+     */
+    hostname?: pulumi.Input<string>;
+    /**
+     * Optional: Number of replicas
+     */
+    replicas?: pulumi.Input<number>;
+}
+export declare class TorProxy extends ComponentResource {
+    private static readonly healthCheckURL;
+    private readonly deployment;
+    private readonly podDisruptionBudget;
+    private readonly service;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new TOR proxy resource.
+     * @param name The name of the TOR proxy resource.
+     * @param args A bag of arguments to control the TOR proxy creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: TorProxyArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=deployment.d.ts.map

package/lib/torproxy/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../lib/torproxy/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAG9C,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACjC;AAED,qBAAa,QAAS,SAAQ,iBAAiB;IAC7C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAA6E;IAEnH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAkIrF"}

package/lib/torproxy/deployment.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TorProxy = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../common");
+const kubernetes = require("../kubernetes");
+class TorProxy extends common_1.ComponentResource {
+    static healthCheckURL = "https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/";
+    deployment;
+    podDisruptionBudget;
+    service;
+    namespace;
+    /**
+     * Create a new TOR proxy resource.
+     * @param name The name of the TOR proxy resource.
+     * @param args A bag of arguments to control the TOR proxy creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("torproxy", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.replicas === undefined) {
+            args.replicas = 1;
+        }
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "torproxy",
+                "app.kubernetes.io/component": "torproxy",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        const probeCmd = [
+            "curl",
+            "--proxy",
+            "http://127.0.0.1:8118",
+            "--insecure",
+            "--silent",
+            "--output",
+            "/dev/null",
+            TorProxy.healthCheckURL,
+        ];
+        this.deployment = new k8s.apps.v1.Deployment(name, {
+            metadata,
+            spec: {
+                selector: { matchLabels: metadata.labels },
+                replicas: args.replicas,
+                template: {
+                    metadata: { labels: metadata.labels },
+                    spec: {
+                        containers: [
+                            {
+                                name: "torprivoxy",
+                                image: "avpnusr/torprivoxy:latest",
+                                imagePullPolicy: "Always",
+                                securityContext: { runAsUser: 102, runAsGroup: 102 },
+                                ports: [{ name: "proxy", protocol: "TCP", containerPort: 8118 }],
+                                readinessProbe: {
+                                    exec: { command: probeCmd },
+                                    periodSeconds: 30,
+                                    successThreshold: 3,
+                                    failureThreshold: 2,
+                                    timeoutSeconds: 10,
+                                },
+                                livenessProbe: {
+                                    exec: { command: probeCmd },
+                                    periodSeconds: 60,
+                                    failureThreshold: 10,
+                                    timeoutSeconds: 10,
+                                },
+                                resources: {
+                                    requests: { memory: "48Mi" },
+                                    limits: { memory: "64Mi" },
+                                },
+                            },
+                        ],
+                        affinity: {
+                            podAntiAffinity: {
+                                preferredDuringSchedulingIgnoredDuringExecution: [
+                                    {
+                                        weight: 100,
+                                        podAffinityTerm: {
+                                            labelSelector: {
+                                                matchExpressions: [
+                                                    {
+                                                        key: "app.kubernetes.io/name",
+                                                        operator: "In",
+                                                        values: [metadata.labels["app.kubernetes.io/name"]],
+                                                    },
+                                                    {
+                                                        key: "app.kubernetes.io/instance",
+                                                        operator: "In",
+                                                        values: [metadata.labels["app.kubernetes.io/instance"]],
+                                                    },
+                                                ],
+                                            },
+                                            topologyKey: "kubernetes.io/hostname",
+                                        },
+                                    },
+                                ],
+                            },
+                        },
+                    },
+                },
+            },
+        }, opts);
+        this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(name, {
+            metadata,
+            spec: {
+                minAvailable: 1,
+                selector: { matchLabels: metadata.labels },
+            },
+        }, opts);
+        this.service = new kubernetes.v1.Service(name, {
+            hostnames: args.hostname ? [args.hostname] : undefined,
+            metadata,
+            spec: {
+                selector: metadata.labels,
+                ports: [{ name: "proxy", protocol: "TCP", port: 8118 }],
+            },
+        }, { ...opts, dependsOn: [this.deployment] });
+        this.registerOutputs();
+    }
+}
+exports.TorProxy = TorProxy;
+//# sourceMappingURL=deployment.js.map

package/lib/torproxy/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/torproxy/deployment.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AAC9C,4CAA4C;AAiB5C,MAAa,QAAS,SAAQ,0BAAiB;IACrC,MAAM,CAAU,cAAc,GAAG,yEAAyE,CAAC;IAElG,UAAU,CAAyB;IACnC,mBAAmB,CAAoC;IACvD,OAAO,CAAwB;IAChC,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAkB,EAAE,IAAsC;QAClF,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEpC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;YAC/B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;SACnB;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,UAAU;gBACpC,6BAA6B,EAAE,UAAU;gBACzC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG;YACf,MAAM;YACN,SAAS;YACT,uBAAuB;YACvB,YAAY;YACZ,UAAU;YACV,UAAU;YACV,WAAW;YACX,QAAQ,CAAC,cAAc;SACxB,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAC1C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE;oBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACrC,IAAI,EAAE;wBACJ,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,YAAY;gCAClB,KAAK,EAAE,2BAA2B;gCAClC,eAAe,EAAE,QAAQ;gCACzB,eAAe,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE;gCACpD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;gCAChE,cAAc,EAAE;oCACd,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;oCAC3B,aAAa,EAAE,EAAE;oCACjB,gBAAgB,EAAE,CAAC;oCACnB,gBAAgB,EAAE,CAAC;oCACnB,cAAc,EAAE,EAAE;iCACnB;gCACD,aAAa,EAAE;oCACb,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;oCAC3B,aAAa,EAAE,EAAE;oCACjB,gBAAgB,EAAE,EAAE;oCACpB,cAAc,EAAE,EAAE;iCACnB;gCACD,SAAS,EAAE;oCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;oCAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iCAC3B;6BACF;yBACF;wBACD,QAAQ,EAAE;4BACR,eAAe,EAAE;gCACf,+CAA+C,EAAE;oCAC/C;wCACE,MAAM,EAAE,GAAG;wCACX,eAAe,EAAE;4CACf,aAAa,EAAE;gDACb,gBAAgB,EAAE;oDAChB;wDACE,GAAG,EAAE,wBAAwB;wDAC7B,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;qDACpD;oDACD;wDACE,GAAG,EAAE,4BAA4B;wDACjC,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;qDACxD;iDACF;6CACF;4CACD,WAAW,EAAE,wBAAwB;yCACtC;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAC9D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,YAAY,EAAE,CAAC;gBACf,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;aAC3C;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,CACtC,IAAI,EACJ;YACE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;YACtD,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;aACxD;SACF,EACD,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAC1C,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;;AA/IH,4BAgJC"}

package/lib/torproxy/{index.ts → index.d.ts}

@@ -1,3 +1,3 @@
 import { TorProxyArgs, TorProxy } from "./deployment";
-
 export { TorProxyArgs, TorProxy };
+//# sourceMappingURL=index.d.ts.map

package/lib/torproxy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/torproxy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC"}

package/lib/torproxy/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TorProxy = void 0;
+const deployment_1 = require("./deployment");
+Object.defineProperty(exports, "TorProxy", { enumerable: true, get: function () { return deployment_1.TorProxy; } });
+//# sourceMappingURL=index.js.map

package/lib/torproxy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/torproxy/index.ts"],"names":[],"mappings":";;;AAAA,6CAAsD;AAE/B,yFAFA,qBAAQ,OAEA"}

package/lib/traefik/controller.d.ts

@@ -0,0 +1,29 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+export interface TraefikArgs {
+    namespace?: pulumi.Input<string>;
+    replicas?: pulumi.Input<number>;
+    serviceType?: pulumi.Input<string>;
+    serviceAnnotations?: {
+        [key: string]: pulumi.Input<string>;
+    };
+    ingressClass?: pulumi.Input<string>;
+    defaultIngressClass?: pulumi.Input<boolean>;
+    proxyProtocolIPs?: pulumi.Input<pulumi.Input<string>[]>;
+}
+export declare class Traefik extends ComponentResource {
+    private readonly helmRelease;
+    private readonly metricsService;
+    private readonly serviceMonitor;
+    private readonly grafanaDashboard;
+    readonly namespace: pulumi.Output<string>;
+    readonly ingressClassName: pulumi.Output<string>;
+    /**
+     * Create a new traefik ingress controller resource.
+     * @param name The name of the traefik ingress controller resource.
+     * @param args A bag of arguments to control the traefik ingress controller creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: TraefikArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=controller.d.ts.map

package/lib/traefik/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../lib/traefik/controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAIzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAK9C,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,kBAAkB,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CACzD;AAED,qBAAa,OAAQ,SAAQ,iBAAiB;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAY;IAC7C,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,SAAgB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAExD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CA6KpF"}

package/lib/traefik/controller.js

@@ -0,0 +1,170 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Traefik = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+const fs = require("fs");
+const path = require("path");
+const common_1 = require("../common");
+const kubernetes = require("../kubernetes");
+const prometheus_1 = require("../prometheus");
+const grafana_1 = require("../grafana");
+class Traefik extends common_1.ComponentResource {
+    helmRelease;
+    metricsService;
+    serviceMonitor;
+    grafanaDashboard;
+    namespace;
+    ingressClassName;
+    /**
+     * Create a new traefik ingress controller resource.
+     * @param name The name of the traefik ingress controller resource.
+     * @param args A bag of arguments to control the traefik ingress controller creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("traefik:controller", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.replicas === undefined) {
+            args.replicas = 1;
+        }
+        if (args.serviceType === undefined) {
+            args.serviceType = "ClusterIP";
+        }
+        if (args.serviceAnnotations === undefined) {
+            args.serviceAnnotations = {};
+        }
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        this.ingressClassName = pulumi.output(args.ingressClass ?? "traefik");
+        this.helmRelease = new kubernetes.helm.v3.Release(name, {
+            name,
+            namespace: this.namespace,
+            repositoryOpts: { repo: "https://helm.traefik.io/traefik" },
+            chart: "traefik",
+            values: {
+                fullnameOverride: name,
+                deployment: {
+                    replicas: args.replicas,
+                    minReadySeconds: 10,
+                },
+                globalArguments: [],
+                additionalArguments: pulumi.all([args.proxyProtocolIPs]).apply(([proxyProtocolIPs]) => {
+                    const args = [
+                        "--entrypoints.web.http.redirections.entryPoint.to=:443",
+                        "--entrypoints.web.http.redirections.entryPoint.scheme=https",
+                        "--entrypoints.web.http.redirections.entrypoint.permanent=true",
+                        "--serversTransport.insecureSkipVerify=true",
+                    ];
+                    if (proxyProtocolIPs !== undefined && proxyProtocolIPs.length > 0) {
+                        args.push(`--entrypoints.web.proxyprotocol.trustedips=${proxyProtocolIPs.join(",")}`);
+                        args.push(`--entrypoints.websecure.proxyprotocol.trustedips=${proxyProtocolIPs.join(",")}`);
+                    }
+                    return args;
+                }),
+                providers: {
+                    kubernetesCRD: {
+                        ingressClass: args.ingressClass,
+                    },
+                    kubernetesIngress: {
+                        ingressClass: args.ingressClass,
+                        publishedService: { enabled: true },
+                        allowExternalNameServices: true,
+                    },
+                },
+                ingressClass: {
+                    enabled: true,
+                    isDefaultClass: args.defaultIngressClass ?? false,
+                    fallbackApiVersion: "v1",
+                },
+                ingressRoute: { dashboard: { enabled: false } },
+                logs: {
+                    general: { format: "json" },
+                },
+                service: {
+                    type: args.serviceType,
+                    annotations: args.serviceAnnotations,
+                },
+                metrics: {
+                    prometheus: { entryPoint: "metrics", addRoutersLabels: true },
+                },
+                podDisruptionBudget: {
+                    enabled: true,
+                    maxUnavailable: "33%",
+                },
+                affinity: {
+                    podAntiAffinity: {
+                        preferredDuringSchedulingIgnoredDuringExecution: [
+                            {
+                                weight: 100,
+                                podAffinityTerm: {
+                                    labelSelector: {
+                                        matchExpressions: [
+                                            { key: "app.kubernetes.io/name", operator: "In", values: ["traefik"] },
+                                            { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
+                                        ],
+                                    },
+                                    topologyKey: "kubernetes.io/hostname",
+                                },
+                            },
+                        ],
+                    },
+                },
+                resources: {
+                    requests: { memory: "64Mi" },
+                    limits: { memory: "96Mi" },
+                },
+            },
+        }, opts);
+        const metricsMetadata = {
+            name: `${name}-metrics`,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "traefik",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.metricsService = new k8s.core.v1.Service(`${name}-metrics`, {
+            metadata: metricsMetadata,
+            spec: {
+                selector: metricsMetadata.labels,
+                ports: [{ name: "metrics", port: 9100, targetPort: "metrics" }],
+            },
+        }, { ...opts, dependsOn: [this.helmRelease] });
+        this.serviceMonitor = new prometheus_1.ServiceMonitor(`${name}-metrics`, {
+            metadata: metricsMetadata,
+            spec: {
+                namespaceSelector: { matchNames: [this.namespace] },
+                selector: { matchLabels: metricsMetadata.labels },
+                endpoints: [
+                    {
+                        port: "metrics",
+                        honorLabels: true,
+                        metricRelabelings: [
+                            {
+                                action: "drop",
+                                sourceLabels: ["__name__"],
+                                regex: ["go_.*"].join("|"),
+                            },
+                            {
+                                action: "drop",
+                                sourceLabels: ["entrypoint"],
+                                regex: ["metrics", "traefik"].join("|"),
+                            },
+                        ],
+                    },
+                ],
+            },
+        }, { ...opts, dependsOn: [this.metricsService] });
+        this.grafanaDashboard = new grafana_1.Dashboard(`${name}-grafana-dashboard`, {
+            metadata: { namespace: this.namespace, name: pulumi.interpolate `${name}-grafana-dashboard` },
+            name: "traefik",
+            // eslint-disable-next-line security/detect-non-literal-fs-filename
+            data: fs.readFileSync(path.join(__dirname, "assets", "dashboard.json"), "utf-8"),
+        }, opts);
+        this.registerOutputs();
+    }
+}
+exports.Traefik = Traefik;
+//# sourceMappingURL=controller.js.map

package/lib/traefik/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../lib/traefik/controller.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,yBAAyB;AACzB,6BAA6B;AAC7B,sCAA8C;AAC9C,4CAA4C;AAC5C,8CAA+C;AAC/C,wCAAuC;AAYvC,MAAa,OAAQ,SAAQ,0BAAiB;IAC3B,WAAW,CAA6B;IACxC,cAAc,CAAsB;IACpC,cAAc,CAAiB;IAC/B,gBAAgB,CAAY;IAC7B,SAAS,CAAwB;IACjC,gBAAgB,CAAwB;IAExD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAiB,EAAE,IAAsC;QACjF,KAAK,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE9C,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;YAC/B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;SACnB;QAED,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE;YAClC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;SAChC;QAED,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE;YACzC,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC;SAC9B;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,SAAS,CAAC,CAAC;QAEtE,IAAI,CAAC,WAAW,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/C,IAAI,EACJ;YACE,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAC3D,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE;gBACN,gBAAgB,EAAE,IAAI;gBACtB,UAAU,EAAE;oBACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,eAAe,EAAE,EAAE;iBACpB;gBACD,eAAe,EAAE,EAAE;gBACnB,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE;oBACpF,MAAM,IAAI,GAAG;wBACX,wDAAwD;wBACxD,6DAA6D;wBAC7D,+DAA+D;wBAC/D,4CAA4C;qBAC7C,CAAC;oBAEF,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE;wBACjE,IAAI,CAAC,IAAI,CAAC,8CAA8C,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACtF,IAAI,CAAC,IAAI,CAAC,oDAAoD,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;qBAC7F;oBAED,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC;gBACF,SAAS,EAAE;oBACT,aAAa,EAAE;wBACb,YAAY,EAAE,IAAI,CAAC,YAAY;qBAChC;oBACD,iBAAiB,EAAE;wBACjB,YAAY,EAAE,IAAI,CAAC,YAAY;wBAC/B,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;wBACnC,yBAAyB,EAAE,IAAI;qBAChC;iBACF;gBACD,YAAY,EAAE;oBACZ,OAAO,EAAE,IAAI;oBACb,cAAc,EAAE,IAAI,CAAC,mBAAmB,IAAI,KAAK;oBACjD,kBAAkB,EAAE,IAAI;iBACzB;gBACD,YAAY,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;gBAC/C,IAAI,EAAE;oBACJ,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iBAC5B;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAC,WAAW;oBACtB,WAAW,EAAE,IAAI,CAAC,kBAAkB;iBACrC;gBACD,OAAO,EAAE;oBACP,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE;iBAC9D;gBACD,mBAAmB,EAAE;oBACnB,OAAO,EAAE,IAAI;oBACb,cAAc,EAAE,KAAK;iBACtB;gBACD,QAAQ,EAAE;oBACR,eAAe,EAAE;wBACf,+CAA+C,EAAE;4BAC/C;gCACE,MAAM,EAAE,GAAG;gCACX,eAAe,EAAE;oCACf,aAAa,EAAE;wCACb,gBAAgB,EAAE;4CAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE;4CACtE,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;yCACtE;qCACF;oCACD,WAAW,EAAE,wBAAwB;iCACtC;6BACF;yBACF;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iBAC3B;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,MAAM,eAAe,GAAG;YACtB,IAAI,EAAE,GAAG,IAAI,UAAU;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,SAAS;gBACnC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC3C,GAAG,IAAI,UAAU,EACjB;YACE,QAAQ,EAAE,eAAe;YACzB,IAAI,EAAE;gBACJ,QAAQ,EAAE,eAAe,CAAC,MAAM;gBAChC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;aAChE;SACF,EACD,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAC3C,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,2BAAc,CACtC,GAAG,IAAI,UAAU,EACjB;YACE,QAAQ,EAAE,eAAe;YACzB,IAAI,EAAE;gBACJ,iBAAiB,EAAE,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;gBACnD,QAAQ,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,MAAM,EAAE;gBACjD,SAAS,EAAE;oBACT;wBACE,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,IAAI;wBACjB,iBAAiB,EAAE;4BACjB;gCACE,MAAM,EAAE,MAAM;gCACd,YAAY,EAAE,CAAC,UAAU,CAAC;gCAC1B,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;6BAC3B;4BACD;gCACE,MAAM,EAAE,MAAM;gCACd,YAAY,EAAE,CAAC,YAAY,CAAC;gCAC5B,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;6BACxC;yBACF;qBACF;iBACF;aACF;SACF,EACD,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAC9C,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAS,CACnC,GAAG,IAAI,oBAAoB,EAC3B;YACE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,oBAAoB,EAAE;YAC5F,IAAI,EAAE,SAAS;YACf,mEAAmE;YACnE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;SACjF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AA3LD,0BA2LC"}

package/lib/traefik/{index.ts → index.d.ts}

@@ -1,5 +1,5 @@
 import { TraefikArgs, Traefik } from "./controller";
 import { SecureIngressArgs, SecureIngress } from "./secureIngress";
 import { Middleware, MiddlewareArgs } from "./middleware";
-
 export { TraefikArgs, Traefik, SecureIngressArgs, SecureIngress, Middleware, MiddlewareArgs };
+//# sourceMappingURL=index.d.ts.map

package/lib/traefik/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/traefik/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC"}

package/lib/traefik/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Middleware = exports.SecureIngress = exports.Traefik = void 0;
+const controller_1 = require("./controller");
+Object.defineProperty(exports, "Traefik", { enumerable: true, get: function () { return controller_1.Traefik; } });
+const secureIngress_1 = require("./secureIngress");
+Object.defineProperty(exports, "SecureIngress", { enumerable: true, get: function () { return secureIngress_1.SecureIngress; } });
+const middleware_1 = require("./middleware");
+Object.defineProperty(exports, "Middleware", { enumerable: true, get: function () { return middleware_1.Middleware; } });
+//# sourceMappingURL=index.js.map

package/lib/traefik/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/traefik/index.ts"],"names":[],"mappings":";;;AAAA,6CAAoD;AAI9B,wFAJA,oBAAO,OAIA;AAH7B,mDAAmE;AAGjB,8FAHtB,6BAAa,OAGsB;AAF/D,6CAA0D;AAEO,2FAFxD,uBAAU,OAEwD"}

package/lib/traefik/middleware.d.ts

@@ -0,0 +1,27 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+export interface MiddlewareHeadersArgs {
+    customRequestHeaders?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    customResponseHeaders?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+}
+export interface MiddlewareSpecArgs {
+    headers?: pulumi.Input<MiddlewareHeadersArgs>;
+}
+export interface MiddlewareArgs {
+    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
+    spec: pulumi.Input<MiddlewareSpecArgs>;
+}
+export declare class Middleware extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new middlware resource.
+     * @param name The name of the middlware resource.
+     * @param args A bag of arguments to control the middlware creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: MiddlewareArgs, opts?: pulumi.CustomResourceOptions);
+}
+//# sourceMappingURL=middleware.d.ts.map