@ydkn/pulumi-components 0.4.3 → 0.4.5

package/lib/wireguard/deployment.ts

@@ -1,168 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-import { ComponentResource } from "../common";
-
-export interface Interface {
-  addresses: pulumi.Input<pulumi.Input<string>[]>;
-  port?: pulumi.Input<number>;
-  privateKey: pulumi.Input<string>;
-  name?: pulumi.Input<string>;
-}
-
-export interface Peer {
-  publicKey: pulumi.Input<string>;
-  presharedKey?: pulumi.Input<string>;
-  allowedIPs: pulumi.Input<pulumi.Input<string>[]>;
-  endpoint?: pulumi.Input<string>;
-}
-
-export interface WireguardArgs {
-  namespace?: pulumi.Input<string>;
-  interface: pulumi.Input<Interface>;
-  peers?: pulumi.Input<pulumi.Input<Peer>[]>;
-  nodeSelector?: pulumi.Input<{ [key: string]: pulumi.Input<string> }>;
-}
-
-export class Wireguard extends ComponentResource {
-  public static readonly gatewayLabel = "network.ydkn.network/vpn-gateway";
-  public static readonly gatewayLabelValue = "true";
-  public static readonly defaultInterfaceName = "wireguard";
-  public static readonly defaultInterfacePort = 51920;
-
-  private readonly config: k8s.core.v1.Secret;
-  private readonly daemonSet: k8s.apps.v1.DaemonSet;
-  private readonly podDisruptionBudget: k8s.policy.v1.PodDisruptionBudget;
-  public readonly interfaceName: pulumi.Output<string>;
-  public readonly interfacePort: pulumi.Output<number>;
-  public readonly namespace: pulumi.Output<string>;
-
-  /**
-   * Create a new wireguard resource.
-   * @param name The name of the wireguard resource.
-   * @param args A bag of arguments to control the wireguard deployment.
-   * @param opts A bag of options that control this resource's behavior.
-   */
-  constructor(name: string, args: WireguardArgs, opts?: pulumi.ComponentResourceOptions) {
-    super("wireguard", name, args, opts);
-
-    opts = this.opts(k8s.Provider);
-
-    this.interfaceName = pulumi.all([args.interface]).apply(([iface]) => iface.name ?? Wireguard.defaultInterfaceName);
-    this.interfacePort = pulumi.all([args.interface]).apply(([iface]) => iface.port ?? Wireguard.defaultInterfacePort);
-
-    this.namespace = args.namespace
-      ? pulumi.output(args.namespace)
-      : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
-
-    const metadata = {
-      name,
-      namespace: this.namespace,
-      labels: {
-        "app.kubernetes.io/name": "wireguard",
-        "app.kubernetes.io/component": "wireguard",
-        "app.kubernetes.io/instance": name,
-      },
-    };
-
-    const configData = pulumi
-      .all([args.interface, this.interfaceName, this.interfacePort, args.peers ?? []])
-      .apply(([iface, interfaceName, interfacePort, peers]) =>
-        pulumi.all([iface.addresses]).apply((addresses) =>
-          pulumi.all(peers).apply((peers) => {
-            const conf = [
-              "[Interface]",
-              `Address = ${addresses.join(",")}`,
-              `ListenPort = ${interfacePort}`,
-              `PrivateKey = ${iface.privateKey}`,
-            ];
-
-            for (const peer of peers) {
-              conf.push(
-                "[Peer]",
-                "PersistentKeepalive = 10",
-                `AllowedIPs = ${peer.allowedIPs.join(",")}`,
-                `PublicKey = ${peer.publicKey}`
-              );
-
-              if (peer.presharedKey !== undefined) {
-                conf.push(`PresharedKey = ${peer.presharedKey}`);
-              }
-
-              if (peer.endpoint !== undefined) {
-                const endpoint = peer.endpoint.match(/:\d{1,5}$/)
-                  ? peer.endpoint
-                  : `${peer.endpoint}:${Wireguard.defaultInterfacePort}`;
-
-                conf.push(`Endpoint = ${endpoint}`);
-              }
-            }
-
-            const data: { [key: string]: string } = {};
-            data[`${interfaceName}.conf`] = conf.join("\n");
-
-            return data;
-          })
-        )
-      );
-
-    this.config = new k8s.core.v1.Secret(name, { metadata, stringData: configData }, opts);
-
-    const nodeSelector: { [key: string]: string } = {};
-    nodeSelector[Wireguard.gatewayLabel] = Wireguard.gatewayLabelValue;
-
-    this.daemonSet = new k8s.apps.v1.DaemonSet(
-      name,
-      {
-        metadata,
-        spec: {
-          selector: { matchLabels: metadata.labels },
-          template: {
-            metadata: { labels: metadata.labels },
-            spec: {
-              nodeSelector: args.nodeSelector ?? nodeSelector,
-              tolerations: [
-                { key: "node-role.kubernetes.io/master", operator: "Exists", effect: "NoSchedule" },
-                { key: "node-role.kubernetes.io/control-plane", operator: "Exists", effect: "NoSchedule" },
-              ],
-              hostNetwork: true,
-              containers: [
-                {
-                  name: "wireguard",
-                  image: "ydkn/k8s-wireguard:latest",
-                  imagePullPolicy: "Always",
-                  env: [
-                    { name: "IFACE", value: this.interfaceName },
-                    { name: "IPTABLES_ALLOW_FORWARD", value: "true" },
-                  ],
-                  securityContext: { privileged: true, capabilities: { add: ["NET_ADMIN"] } },
-                  volumeMounts: [{ name: "conf", mountPath: "/etc/wireguard", readOnly: true }],
-                  ports: [{ name: "wireguard", containerPort: this.interfacePort, protocol: "UDP" }],
-                  resources: {
-                    requests: { memory: "8Mi" },
-                    limits: { memory: "12Mi" },
-                  },
-                },
-              ],
-              volumes: [{ name: "conf", secret: { secretName: this.config.metadata.name, defaultMode: 0o400 } }],
-            },
-          },
-        },
-      },
-      opts
-    );
-
-    this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(
-      name,
-      {
-        metadata,
-        spec: {
-          maxUnavailable: 0,
-          selector: { matchLabels: metadata.labels },
-        },
-      },
-      opts
-    );
-
-    this.registerOutputs();
-  }
-}

package/renovate.json

@@ -1,4 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "postUpdateOptions": []
-}

package/tsconfig.json

@@ -1,21 +0,0 @@
-{
-  "compilerOptions": {
-    "strict": true,
-    "outDir": "dist",
-    "target": "es2022",
-    "module": "commonjs",
-    "moduleResolution": "node",
-    "sourceMap": true,
-    "experimentalDecorators": true,
-    "pretty": true,
-    "noFallthroughCasesInSwitch": true,
-    "noImplicitReturns": true,
-    "forceConsistentCasingInFileNames": true,
-    "resolveJsonModule": true,
-    "declaration": true,
-    "declarationMap": true,
-    "types": []
-  },
-  "include": ["package.json", "index.ts", "lib/**/*.ts"],
-  "exclude": ["node_modules", "**/*.spec.ts"]
-}