@ydkn/pulumi-components 0.4.3 → 0.4.5

package/lib/traefik/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../lib/traefik/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C,MAAM,WAAW,qBAAqB;IACpC,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;IAC7E,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;CACxC;AAED,qBAAa,UAAW,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC9D;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAYpF"}

package/lib/traefik/middleware.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Middleware = void 0;
+const k8s = require("@pulumi/kubernetes");
+class Middleware extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new middlware resource.
+     * @param name The name of the middlware resource.
+     * @param args A bag of arguments to control the middlware creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super(name, {
+            apiVersion: "traefik.containo.us/v1alpha1",
+            kind: "Middleware",
+            metadata: args.metadata,
+            spec: args.spec,
+        }, opts);
+    }
+}
+exports.Middleware = Middleware;
+//# sourceMappingURL=middleware.js.map

package/lib/traefik/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../lib/traefik/middleware.ts"],"names":[],"mappings":";;;AACA,0CAA0C;AAgB1C,MAAa,UAAW,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC9D;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAoB,EAAE,IAAmC;QACjF,KAAK,CACH,IAAI,EACJ;YACE,UAAU,EAAE,8BAA8B;YAC1C,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,EACD,IAAI,CACL,CAAC;IACJ,CAAC;CACF;AAnBD,gCAmBC"}

package/lib/traefik/secureIngress.d.ts

@@ -0,0 +1,32 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+export interface SecureIngressArgs {
+    /**
+     * Metadata for the ingress resource
+     */
+    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
+    /**
+     * Spec for the ingress resource
+     */
+    spec: pulumi.Input<k8s.types.input.networking.v1.IngressSpec>;
+    /**
+     * Optional: Name of issuer
+     */
+    issuer?: pulumi.Input<string>;
+    /**
+     * Optional: Name of cluster issuer
+     */
+    clusterIssuer?: pulumi.Input<string>;
+}
+export declare class SecureIngress extends k8s.networking.v1.Ingress {
+    private static readonly defaultClusterIssuer;
+    /**
+     * Create a new secure ingress resource.
+     * @param name The name of the secure ingress resource.
+     * @param args A bag of arguments to control the secure ingress creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: SecureIngressArgs, opts?: pulumi.CustomResourceOptions);
+    private static hosts;
+}
+//# sourceMappingURL=secureIngress.d.ts.map

package/lib/traefik/secureIngress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secureIngress.d.ts","sourceRoot":"","sources":["../../../lib/traefik/secureIngress.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;IAC9D;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACtC;AAED,qBAAa,aAAc,SAAQ,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAiB;IAE7D;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;IAoCtF,OAAO,CAAC,MAAM,CAAC,KAAK;CAarB"}

package/lib/traefik/secureIngress.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecureIngress = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+class SecureIngress extends k8s.networking.v1.Ingress {
+    static defaultClusterIssuer = "letsencrypt";
+    /**
+     * Create a new secure ingress resource.
+     * @param name The name of the secure ingress resource.
+     * @param args A bag of arguments to control the secure ingress creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        const ingressArgs = pulumi
+            .all([args.metadata, args.spec, args.issuer, args.clusterIssuer])
+            .apply(([metadataWrapped, specWrapped, issuer, clusterIssuer]) => {
+            const metadata = metadataWrapped;
+            const spec = specWrapped;
+            if (metadata.annotations === undefined) {
+                metadata.annotations = {};
+            }
+            const annotations = {
+                "traefik.ingress.kubernetes.io/router.entrypoints": "websecure",
+                "traefik.ingress.kubernetes.io/router.tls": "true",
+            };
+            if (issuer !== undefined) {
+                annotations["cert-manager.io/issuer"] = issuer;
+            }
+            else if (clusterIssuer !== undefined) {
+                annotations["cert-manager.io/cluster-issuer"] = clusterIssuer;
+            }
+            else {
+                annotations["cert-manager.io/cluster-issuer"] = SecureIngress.defaultClusterIssuer;
+            }
+            metadata.annotations = { ...annotations, ...metadata.annotations };
+            if (spec.tls === undefined) {
+                spec.tls = [{ hosts: SecureIngress.hosts(spec.rules), secretName: pulumi.interpolate `${name}-tls` }];
+            }
+            return { metadata, spec };
+        });
+        super(name, ingressArgs, opts);
+    }
+    static hosts(rules) {
+        if (rules === undefined) {
+            return [];
+        }
+        return rules
+            .map((r) => {
+            return r.host;
+        })
+            .filter((h) => {
+            return h !== undefined;
+        });
+    }
+}
+exports.SecureIngress = SecureIngress;
+//# sourceMappingURL=secureIngress.js.map

package/lib/traefik/secureIngress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secureIngress.js","sourceRoot":"","sources":["../../../lib/traefik/secureIngress.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAqB1C,MAAa,aAAc,SAAQ,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO;IAClD,MAAM,CAAU,oBAAoB,GAAG,aAAa,CAAC;IAE7D;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAuB,EAAE,IAAmC;QACpF,MAAM,WAAW,GAAG,MAAM;aACvB,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;aAChE,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,EAAE;YAC/D,MAAM,QAAQ,GAAG,eAAqD,CAAC;YACvE,MAAM,IAAI,GAAG,WAAwD,CAAC;YAEtE,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE;gBACtC,QAAQ,CAAC,WAAW,GAAG,EAAE,CAAC;aAC3B;YAED,MAAM,WAAW,GAA4C;gBAC3D,kDAAkD,EAAE,WAAW;gBAC/D,0CAA0C,EAAE,MAAM;aACnD,CAAC;YAEF,IAAI,MAAM,KAAK,SAAS,EAAE;gBACxB,WAAW,CAAC,wBAAwB,CAAC,GAAG,MAAM,CAAC;aAChD;iBAAM,IAAI,aAAa,KAAK,SAAS,EAAE;gBACtC,WAAW,CAAC,gCAAgC,CAAC,GAAG,aAAa,CAAC;aAC/D;iBAAM;gBACL,WAAW,CAAC,gCAAgC,CAAC,GAAG,aAAa,CAAC,oBAAoB,CAAC;aACpF;YAED,QAAQ,CAAC,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YAEnE,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE;gBAC1B,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,MAAM,EAAE,CAAC,CAAC;aACtG;YAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEL,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,KAA+E;QAClG,IAAI,KAAK,KAAK,SAAS,EAAE;YACvB,OAAO,EAAE,CAAC;SACX;QAED,OAAQ,KAAqD;aAC1D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,OAAO,CAAC,CAAC,IAAI,CAAC;QAChB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACZ,OAAO,CAAC,KAAK,SAAS,CAAC;QACzB,CAAC,CAAa,CAAC;IACnB,CAAC;;AAzDH,sCA0DC"}

package/lib/ubuntu/deployment.d.ts

@@ -0,0 +1,39 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { ComponentResource } from "../common";
+export interface UbuntuArgs {
+    namespace?: pulumi.Input<string>;
+    hostname?: pulumi.Input<string>;
+    authorizedKeys?: pulumi.Input<pulumi.Input<string>[]>;
+    packages?: pulumi.Input<pulumi.Input<string>[]>;
+    volumes?: pulumi.Input<pulumi.Input<k8s.types.input.core.v1.Volume>[]>;
+    volumeMounts?: pulumi.Input<pulumi.Input<k8s.types.input.core.v1.VolumeMount>[]>;
+    nodeSelector?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    replicas?: pulumi.Input<number>;
+    hostNetwork?: pulumi.Input<boolean>;
+}
+export declare class Ubuntu extends ComponentResource {
+    private static readonly sshContainerPort;
+    private readonly sshPrivateKeysRSA;
+    private readonly sshPrivateKeysECDSA;
+    private readonly sshPrivateKeysED25519;
+    private readonly serviceAccount;
+    private readonly clusterRole;
+    private readonly clusterRoleBinding;
+    private readonly initScript;
+    private readonly sshSecret;
+    private readonly deployment;
+    private readonly podDisruptionBudget;
+    private readonly service;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new Ubuntu resource.
+     * @param name The name of the Ubuntu resource.
+     * @param args A bag of arguments to control the Ubuntu creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: UbuntuArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=deployment.d.ts.map

package/lib/ubuntu/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../lib/ubuntu/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAG1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAG9C,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;CACrC;AAED,qBAAa,MAAO,SAAQ,iBAAiB;IAC3C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAM;IAE9C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAiB;IACnD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAiB;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAiB;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAiC;IACpE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAwOnF"}

package/lib/ubuntu/deployment.js

@@ -0,0 +1,213 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Ubuntu = void 0;
+const pulumi = require("@pulumi/pulumi");
+const tls = require("@pulumi/tls");
+const k8s = require("@pulumi/kubernetes");
+const path = require("path");
+const fs = require("fs");
+const common_1 = require("../common");
+const kubernetes = require("../kubernetes");
+class Ubuntu extends common_1.ComponentResource {
+    static sshContainerPort = 22;
+    sshPrivateKeysRSA;
+    sshPrivateKeysECDSA;
+    sshPrivateKeysED25519;
+    serviceAccount;
+    clusterRole;
+    clusterRoleBinding;
+    initScript;
+    sshSecret;
+    deployment;
+    podDisruptionBudget;
+    service;
+    namespace;
+    /**
+     * Create a new Ubuntu resource.
+     * @param name The name of the Ubuntu resource.
+     * @param args A bag of arguments to control the Ubuntu creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("ubuntu", name, args, opts);
+        const emptyOpts = this.opts();
+        const k8sOpts = this.opts(k8s.Provider);
+        if (args.replicas === undefined) {
+            args.replicas = 1;
+        }
+        this.sshPrivateKeysRSA = new tls.PrivateKey(`${name}-rsa`, { algorithm: "RSA", rsaBits: 8192 }, emptyOpts);
+        this.sshPrivateKeysECDSA = new tls.PrivateKey(`${name}-ecdsa`, { algorithm: "ECDSA", ecdsaCurve: "P521" }, emptyOpts);
+        this.sshPrivateKeysED25519 = new tls.PrivateKey(`${name}-ed25519`, { algorithm: "ED25519" }, emptyOpts);
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, k8sOpts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "ubuntu",
+                "app.kubernetes.io/component": "ubuntu",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.serviceAccount = new k8s.core.v1.ServiceAccount(name, { metadata }, k8sOpts);
+        this.clusterRole = new k8s.rbac.v1.ClusterRole(name, {
+            metadata,
+            rules: [{ apiGroups: ["*"], resources: ["*"], verbs: ["*"] }],
+        }, k8sOpts);
+        this.clusterRoleBinding = new k8s.rbac.v1.ClusterRoleBinding(name, {
+            metadata,
+            subjects: [
+                {
+                    kind: this.serviceAccount.kind,
+                    namespace: this.serviceAccount.metadata.namespace,
+                    name: this.serviceAccount.metadata.name,
+                },
+            ],
+            roleRef: {
+                apiGroup: "rbac.authorization.k8s.io",
+                kind: this.clusterRole.kind,
+                name: this.clusterRole.metadata.name,
+            },
+        }, k8sOpts);
+        this.initScript = new k8s.core.v1.ConfigMap(name, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-init` },
+            data: {
+                // eslint-disable-next-line security/detect-non-literal-fs-filename
+                "init.sh": fs.readFileSync(path.join(__dirname, "assets", "init.sh"), "utf-8"),
+                "packages.txt": pulumi
+                    .all([args.packages])
+                    .apply(([packages]) => pulumi.all(packages ?? []).apply((packages) => packages.join(" "))),
+            },
+        }, k8sOpts);
+        this.sshSecret = new k8s.core.v1.Secret(name, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-ssh` },
+            stringData: {
+                ssh_host_rsa_key: this.sshPrivateKeysRSA.privateKeyOpenssh,
+                "ssh_host_rsa_key.pub": this.sshPrivateKeysRSA.publicKeyOpenssh,
+                ssh_host_ecdsa_key: this.sshPrivateKeysECDSA.privateKeyOpenssh,
+                "ssh_host_ecdsa_key.pub": this.sshPrivateKeysECDSA.publicKeyOpenssh,
+                ssh_host_ed25519_key: this.sshPrivateKeysED25519.privateKeyOpenssh,
+                "ssh_host_ed25519_key.pub": this.sshPrivateKeysED25519.publicKeyOpenssh,
+                authorized_keys: pulumi
+                    .all([args.authorizedKeys])
+                    .apply(([authorizedKeys]) => pulumi.all(authorizedKeys ?? []).apply((authorizedKeys) => authorizedKeys.join("\n"))),
+            },
+        }, k8sOpts);
+        this.deployment = new k8s.apps.v1.Deployment(name, {
+            metadata,
+            spec: {
+                selector: { matchLabels: metadata.labels },
+                strategy: { type: "Recreate" },
+                replicas: args.replicas,
+                template: {
+                    metadata: { labels: metadata.labels },
+                    spec: {
+                        securityContext: { runAsUser: 0, runAsGroup: 0, fsGroup: 0 },
+                        serviceAccountName: this.serviceAccount.metadata.name,
+                        nodeSelector: args.nodeSelector,
+                        hostNetwork: args.hostNetwork,
+                        containers: [
+                            {
+                                name: "ubuntu",
+                                image: "ubuntu:rolling",
+                                imagePullPolicy: "Always",
+                                command: ["/run/k8s/init/init.sh"],
+                                env: [
+                                    { name: "KUBERNETES_NODE_NAME", valueFrom: { fieldRef: { fieldPath: "spec.nodeName" } } },
+                                    { name: "KUBERNETES_POD_NAMESPACE", valueFrom: { fieldRef: { fieldPath: "metadata.namespace" } } },
+                                    { name: "KUBERNETES_POD_NAME", valueFrom: { fieldRef: { fieldPath: "metadata.name" } } },
+                                    { name: "KUBERNETES_POD_IP", valueFrom: { fieldRef: { fieldPath: "status.podIP" } } },
+                                ],
+                                ports: [{ name: "ssh", containerPort: Ubuntu.sshContainerPort, protocol: "TCP" }],
+                                resources: {
+                                    requests: { memory: "128Mi" },
+                                    limits: { memory: "256Mi" },
+                                },
+                                startupProbe: {
+                                    periodSeconds: 30,
+                                    timeoutSeconds: 3,
+                                    successThreshold: 1,
+                                    failureThreshold: 30,
+                                    tcpSocket: { port: "ssh" },
+                                },
+                                livenessProbe: {
+                                    periodSeconds: 30,
+                                    timeoutSeconds: 3,
+                                    successThreshold: 1,
+                                    failureThreshold: 3,
+                                    tcpSocket: { port: "ssh" },
+                                },
+                                volumeMounts: pulumi.all([args.volumeMounts]).apply(([volumeMounts]) => {
+                                    return [
+                                        { name: "init", mountPath: "/run/k8s/init" },
+                                        { name: "ssh", mountPath: "/run/k8s/ssh" },
+                                    ].concat(volumeMounts ?? []);
+                                }),
+                            },
+                        ],
+                        volumes: pulumi.all([args.volumes]).apply(([volumes]) => {
+                            return [
+                                { name: "init", configMap: { name: this.initScript.metadata.name, defaultMode: 0o755 } },
+                                { name: "ssh", secret: { secretName: this.sshSecret.metadata.name, defaultMode: 0o400 } },
+                            ].concat(volumes ?? []);
+                        }),
+                        tolerations: [
+                            { key: "node-role.kubernetes.io/master", operator: "Exists", effect: "NoSchedule" },
+                            { key: "node-role.kubernetes.io/control-plane", operator: "Exists", effect: "NoSchedule" },
+                        ],
+                        affinity: {
+                            podAntiAffinity: {
+                                preferredDuringSchedulingIgnoredDuringExecution: [
+                                    {
+                                        weight: 100,
+                                        podAffinityTerm: {
+                                            labelSelector: {
+                                                matchExpressions: [
+                                                    {
+                                                        key: "app.kubernetes.io/name",
+                                                        operator: "In",
+                                                        values: [metadata.labels["app.kubernetes.io/name"]],
+                                                    },
+                                                    {
+                                                        key: "app.kubernetes.io/component",
+                                                        operator: "In",
+                                                        values: [metadata.labels["app.kubernetes.io/component"]],
+                                                    },
+                                                    {
+                                                        key: "app.kubernetes.io/instance",
+                                                        operator: "In",
+                                                        values: [metadata.labels["app.kubernetes.io/instance"]],
+                                                    },
+                                                ],
+                                            },
+                                            topologyKey: "kubernetes.io/hostname",
+                                        },
+                                    },
+                                ],
+                            },
+                        },
+                    },
+                },
+            },
+        }, k8sOpts);
+        this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(name, {
+            metadata,
+            spec: {
+                minAvailable: 1,
+                selector: { matchLabels: metadata.labels },
+            },
+        }, k8sOpts);
+        this.service = new kubernetes.v1.Service(name, {
+            metadata,
+            spec: {
+                selector: metadata.labels,
+                ports: [{ name: "ssh", port: 22, targetPort: "ssh" }],
+            },
+            hostnames: args.hostname ? [args.hostname] : undefined,
+        }, { ...k8sOpts, dependsOn: [this.deployment] });
+        this.registerOutputs();
+    }
+}
+exports.Ubuntu = Ubuntu;
+//# sourceMappingURL=deployment.js.map

package/lib/ubuntu/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/ubuntu/deployment.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,mCAAmC;AACnC,0CAA0C;AAC1C,6BAA6B;AAC7B,yBAAyB;AACzB,sCAA8C;AAC9C,4CAA4C;AAc5C,MAAa,MAAO,SAAQ,0BAAiB;IACnC,MAAM,CAAU,gBAAgB,GAAG,EAAE,CAAC;IAE7B,iBAAiB,CAAiB;IAClC,mBAAmB,CAAiB;IACpC,qBAAqB,CAAiB;IACtC,cAAc,CAA6B;IAC3C,WAAW,CAA0B;IACrC,kBAAkB,CAAiC;IACnD,UAAU,CAAwB;IAClC,SAAS,CAAqB;IAC9B,UAAU,CAAyB;IACnC,mBAAmB,CAAoC;IACvD,OAAO,CAAwB;IAChC,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAsC;QAChF,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAElC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;YAC/B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;SACnB;QAED,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3G,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,UAAU,CAC3C,GAAG,IAAI,QAAQ,EACf,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,EAC1C,SAAS,CACV,CAAC;QACF,IAAI,CAAC,qBAAqB,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC;QAExG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEnF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,QAAQ;gBAClC,6BAA6B,EAAE,QAAQ;gBACvC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QAElF,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;SAC9D,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,kBAAkB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAC1D,IAAI,EACJ;YACE,QAAQ;YACR,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;oBAC9B,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS;oBACjD,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;iBACxC;aACF;YACD,OAAO,EAAE;gBACP,QAAQ,EAAE,2BAA2B;gBACrC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;gBAC3B,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI;aACrC;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACzC,IAAI,EACJ;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,OAAO,EAAE;YACjE,IAAI,EAAE;gBACJ,mEAAmE;gBACnE,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC;gBAC9E,cAAc,EAAE,MAAM;qBACnB,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;qBACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;aAC7F;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACrC,IAAI,EACJ;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,MAAM,EAAE;YAChE,UAAU,EAAE;gBACV,gBAAgB,EAAE,IAAI,CAAC,iBAAiB,CAAC,iBAAiB;gBAC1D,sBAAsB,EAAE,IAAI,CAAC,iBAAiB,CAAC,gBAAgB;gBAC/D,kBAAkB,EAAE,IAAI,CAAC,mBAAmB,CAAC,iBAAiB;gBAC9D,wBAAwB,EAAE,IAAI,CAAC,mBAAmB,CAAC,gBAAgB;gBACnE,oBAAoB,EAAE,IAAI,CAAC,qBAAqB,CAAC,iBAAiB;gBAClE,0BAA0B,EAAE,IAAI,CAAC,qBAAqB,CAAC,gBAAgB;gBACvE,eAAe,EAAE,MAAM;qBACpB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;qBAC1B,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,CAC1B,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CACtF;aACJ;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAC1C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE;oBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACrC,IAAI,EAAE;wBACJ,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;wBAC5D,kBAAkB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;wBACrD,YAAY,EAAE,IAAI,CAAC,YAAY;wBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,QAAQ;gCACd,KAAK,EAAE,gBAAgB;gCACvB,eAAe,EAAE,QAAQ;gCACzB,OAAO,EAAE,CAAC,uBAAuB,CAAC;gCAClC,GAAG,EAAE;oCACH,EAAE,IAAI,EAAE,sBAAsB,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,EAAE;oCACzF,EAAE,IAAI,EAAE,0BAA0B,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,oBAAoB,EAAE,EAAE,EAAE;oCAClG,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,EAAE;oCACxF,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE;iCACtF;gCACD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gCACjF,SAAS,EAAE;oCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;oCAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;iCAC5B;gCACD,YAAY,EAAE;oCACZ,aAAa,EAAE,EAAE;oCACjB,cAAc,EAAE,CAAC;oCACjB,gBAAgB,EAAE,CAAC;oCACnB,gBAAgB,EAAE,EAAE;oCACpB,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;iCAC3B;gCACD,aAAa,EAAE;oCACb,aAAa,EAAE,EAAE;oCACjB,cAAc,EAAE,CAAC;oCACjB,gBAAgB,EAAE,CAAC;oCACnB,gBAAgB,EAAE,CAAC;oCACnB,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;iCAC3B;gCACD,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE;oCACrE,OACE;wCACE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE;wCAC5C,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE;qCAE7C,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;gCAC/B,CAAC,CAAC;6BACH;yBACF;wBACD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE;4BACtD,OACE;gCACE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;gCACxF,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;6BAE5F,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;wBAC1B,CAAC,CAAC;wBACF,WAAW,EAAE;4BACX,EAAE,GAAG,EAAE,gCAAgC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;4BACnF,EAAE,GAAG,EAAE,uCAAuC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;yBAC3F;wBACD,QAAQ,EAAE;4BACR,eAAe,EAAE;gCACf,+CAA+C,EAAE;oCAC/C;wCACE,MAAM,EAAE,GAAG;wCACX,eAAe,EAAE;4CACf,aAAa,EAAE;gDACb,gBAAgB,EAAE;oDAChB;wDACE,GAAG,EAAE,wBAAwB;wDAC7B,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;qDACpD;oDACD;wDACE,GAAG,EAAE,6BAA6B;wDAClC,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC;qDACzD;oDACD;wDACE,GAAG,EAAE,4BAA4B;wDACjC,QAAQ,EAAE,IAAI;wDACd,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;qDACxD;iDACF;6CACF;4CACD,WAAW,EAAE,wBAAwB;yCACtC;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAC9D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,YAAY,EAAE,CAAC;gBACf,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;aAC3C;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,CACtC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;aACtD;YACD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SACvD,EACD,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAC7C,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;;AA7PH,wBA8PC"}

package/lib/ubuntu/{index.ts → index.d.ts}

@@ -1,3 +1,3 @@
 import { UbuntuArgs, Ubuntu } from "./deployment";
-
 export { UbuntuArgs, Ubuntu };
+//# sourceMappingURL=index.d.ts.map

package/lib/ubuntu/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/ubuntu/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC"}

package/lib/ubuntu/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Ubuntu = void 0;
+const deployment_1 = require("./deployment");
+Object.defineProperty(exports, "Ubuntu", { enumerable: true, get: function () { return deployment_1.Ubuntu; } });
+//# sourceMappingURL=index.js.map

package/lib/ubuntu/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/ubuntu/index.ts"],"names":[],"mappings":";;;AAAA,6CAAkD;AAE7B,uFAFA,mBAAM,OAEA"}

package/lib/unifi/controller.d.ts

@@ -0,0 +1,28 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+export interface UnifiControllerArgs {
+    namespace?: pulumi.Input<string>;
+    ingressClassName?: pulumi.Input<string>;
+    hostname: pulumi.Input<string>;
+    informHostname: pulumi.Input<string>;
+    storageClassName?: pulumi.Input<string>;
+    storage?: pulumi.Input<string>;
+    protect?: boolean;
+}
+export declare class UnifiController extends ComponentResource {
+    private readonly volumeClaim;
+    private readonly deployment;
+    private readonly podDisruptionBudget;
+    private readonly service;
+    private readonly ingress;
+    readonly namespace: pulumi.Output<string>;
+    readonly informUrl: pulumi.Output<string>;
+    /**
+     * Create a new UniFi controller resource.
+     * @param name The name of the UniFi controller resource.
+     * @param args A bag of arguments to control the UniFi controller creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: UnifiControllerArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=controller.d.ts.map

package/lib/unifi/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../lib/unifi/controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,eAAgB,SAAQ,iBAAiB;IACpD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoC;IAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CA0M5F"}