@ydkn/pulumi-components 0.4.3 → 0.4.5

package/lib/freeradius/deployment.js

@@ -0,0 +1,176 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FreeRadiusServer = void 0;
+const pulumi = require("@pulumi/pulumi");
+const random = require("@pulumi/random");
+const k8s = require("@pulumi/kubernetes");
+const path = require("path");
+const templateFile = require("template-file");
+const common_1 = require("../common");
+const kubernetes = require("../kubernetes");
+const certManager = require("../certManager");
+class FreeRadiusServer extends common_1.ComponentResource {
+    localSecret;
+    configs;
+    issuer;
+    caCertificate;
+    caIssuer;
+    certificate;
+    deployment;
+    podDisruptionBudget;
+    service;
+    namespace;
+    clientSecret;
+    ip;
+    /**
+     * Create a new FreeRadius server resource.
+     * @param name The name of the FreeRadius server resource.
+     * @param args A bag of arguments to control the FreeRadius server creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("freeradius", name, args, opts);
+        if (args.resources === undefined) {
+            args.resources = { requests: { memory: "96Mi" }, limits: { memory: "128Mi" } };
+        }
+        const emptyOpts = this.opts();
+        const k8sOpts = this.opts(k8s.Provider);
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, k8sOpts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "freeradius",
+                "app.kubernetes.io/component": "freeradius",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.localSecret = pulumi.secret(new random.RandomString(`${name}-local-secret`, { special: false, length: 48 }, emptyOpts).result);
+        this.clientSecret = pulumi.secret(new random.RandomString(`${name}-client-secret`, { special: false, length: 48 }, { ...emptyOpts, protect: args.protect }).result);
+        this.configs = new k8s.core.v1.Secret(`${name}-configs`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-configs` },
+            stringData: pulumi
+                .all([args.domain, args.ldap, this.localSecret, this.clientSecret])
+                .apply(([domain, ldap, localSecret, clientSecret]) => {
+                const vars = {
+                    ldap: { hostname: ldap.hostname, username: ldap.username, password: ldap.password, baseDN: ldap.baseDN },
+                    domain,
+                    localSecret,
+                    clientSecret,
+                };
+                return {
+                    default: FreeRadiusServer.renderAssetTemplate("default", vars),
+                    eap: FreeRadiusServer.renderAssetTemplate("eap", vars),
+                    "inner-tunnel": FreeRadiusServer.renderAssetTemplate("inner-tunnel", vars),
+                    ldap: FreeRadiusServer.renderAssetTemplate("ldap", vars),
+                    "proxy.conf": FreeRadiusServer.renderAssetTemplate("proxy.conf", vars),
+                    "clients.conf": FreeRadiusServer.renderAssetTemplate("clients.conf", vars),
+                };
+            }),
+        }, k8sOpts);
+        this.issuer = new certManager.Issuer(name, { metadata, spec: { selfSigned: {} } }, k8sOpts);
+        this.caCertificate = new certManager.Certificate(`${name}-ca`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-ca` },
+            spec: {
+                isCA: true,
+                commonName: "RADIUS",
+                dnsNames: [args.hostname],
+                duration: "876000h",
+                renewBefore: "8760h",
+                privateKey: { algorithm: "RSA", size: 4096, rotationPolicy: "Always" },
+                issuerRef: { kind: this.issuer.kind, name: this.issuer.metadata.name },
+            },
+        }, k8sOpts);
+        this.caIssuer = new certManager.Issuer(`${name}-ca`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-ca` },
+            spec: { ca: { secretName: this.caCertificate.secretName } },
+        }, k8sOpts);
+        this.certificate = new certManager.Certificate(name, {
+            metadata,
+            spec: {
+                isCA: true,
+                commonName: args.hostname,
+                dnsNames: [args.hostname],
+                duration: "87600h",
+                renewBefore: "2160h",
+                privateKey: { algorithm: "RSA", size: 4096, rotationPolicy: "Always" },
+                issuerRef: { kind: this.caIssuer.kind, name: this.caIssuer.metadata.name },
+            },
+        }, k8sOpts);
+        this.deployment = new k8s.apps.v1.Deployment(name, {
+            metadata,
+            spec: {
+                selector: { matchLabels: metadata.labels },
+                strategy: { type: "Recreate" },
+                replicas: 1,
+                template: {
+                    metadata: {
+                        labels: metadata.labels,
+                        annotations: { "backup.velero.io/backup-volumes": "data" },
+                    },
+                    spec: {
+                        containers: [
+                            {
+                                name: "freeradius",
+                                image: "freeradius/freeradius-server:latest-alpine",
+                                imagePullPolicy: "Always",
+                                ports: [
+                                    { name: "radius", containerPort: 1812, protocol: "UDP" },
+                                    { name: "radius-acct", containerPort: 1813, protocol: "UDP" },
+                                ],
+                                resources: args.resources,
+                                volumeMounts: [
+                                    { name: "configs", mountPath: "/opt/etc/raddb/sites-enabled/default", subPath: "default" },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/mods-enabled/eap", subPath: "eap" },
+                                    {
+                                        name: "configs",
+                                        mountPath: "/opt/etc/raddb/sites-enabled/inner-tunnel",
+                                        subPath: "inner-tunnel",
+                                    },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/mods-enabled/ldap", subPath: "ldap" },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/proxy.conf", subPath: "proxy.conf" },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/clients.conf", subPath: "clients.conf" },
+                                    { name: "ca-tls", mountPath: "/opt/etc/raddb/certs/ca.crt", subPath: "tls.crt" },
+                                    { name: "tls", mountPath: "/opt/etc/raddb/certs/server.crt", subPath: "tls.crt" },
+                                    { name: "tls", mountPath: "/opt/etc/raddb/certs/server.key", subPath: "tls.key" },
+                                ],
+                            },
+                        ],
+                        volumes: [
+                            { name: "configs", secret: { secretName: this.configs.metadata.name } },
+                            { name: "ca-tls", secret: { secretName: this.caCertificate.secretName } },
+                            { name: "tls", secret: { secretName: this.certificate.secretName } },
+                        ],
+                    },
+                },
+            },
+        }, k8sOpts);
+        this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(name, {
+            metadata,
+            spec: {
+                minAvailable: 1,
+                selector: { matchLabels: metadata.labels },
+            },
+        }, k8sOpts);
+        this.service = new kubernetes.v1.Service(name, {
+            metadata,
+            spec: {
+                selector: metadata.labels,
+                ports: [
+                    { name: "radius", port: 1812, targetPort: "radius", protocol: "UDP" },
+                    { name: "radius-acct", port: 1813, targetPort: "radius-acct", protocol: "UDP" },
+                ],
+            },
+            hostnames: [args.hostname],
+        }, { ...k8sOpts, dependsOn: [this.deployment] });
+        this.ip = this.service.spec.clusterIP;
+        this.registerOutputs();
+    }
+    static renderAssetTemplate(filename, data) {
+        return pulumi.output(templateFile.renderFile(path.join(__dirname, "assets", `${filename}.tmpl`), data));
+    }
+}
+exports.FreeRadiusServer = FreeRadiusServer;
+//# sourceMappingURL=deployment.js.map

package/lib/freeradius/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/freeradius/deployment.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,yCAAyC;AACzC,0CAA0C;AAC1C,6BAA6B;AAC7B,8CAA8C;AAC9C,sCAA8C;AAC9C,4CAA4C;AAC5C,8CAA8C;AAkB9C,MAAa,gBAAiB,SAAQ,0BAAiB;IACpC,WAAW,CAAwB;IACnC,OAAO,CAAqB;IAC5B,MAAM,CAAqB;IAC3B,aAAa,CAA0B;IACvC,QAAQ,CAAqB;IAC7B,WAAW,CAA0B;IACrC,UAAU,CAAyB;IACnC,mBAAmB,CAAoC;IACvD,OAAO,CAAwB;IAChC,SAAS,CAAwB;IACjC,YAAY,CAAwB;IACpC,EAAE,CAAwB;IAE1C;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAA0B,EAAE,IAAsC;QAC1F,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEtC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE;YAChC,IAAI,CAAC,SAAS,GAAG,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;SAChF;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEnF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,YAAY;gBACtC,6BAA6B,EAAE,YAAY;gBAC3C,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAC9B,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,eAAe,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,MAAM,CAClG,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAC/B,IAAI,MAAM,CAAC,YAAY,CACrB,GAAG,IAAI,gBAAgB,EACvB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAC9B,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CACxC,CAAC,MAAM,CACT,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACnC,GAAG,IAAI,UAAU,EACjB;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,UAAU,EAAE;YACpE,UAAU,EAAE,MAAM;iBACf,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;iBAClE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,EAAE;gBACnD,MAAM,IAAI,GAAG;oBACX,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;oBACxG,MAAM;oBACN,WAAW;oBACX,YAAY;iBACb,CAAC;gBAEF,OAAO;oBACL,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC;oBAC9D,GAAG,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC;oBACtD,cAAc,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,cAAc,EAAE,IAAI,CAAC;oBAC1E,IAAI,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC;oBACxD,YAAY,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC;oBACtE,cAAc,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,cAAc,EAAE,IAAI,CAAC;iBAC3E,CAAC;YACJ,CAAC,CAAC;SACL,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAE5F,IAAI,CAAC,aAAa,GAAG,IAAI,WAAW,CAAC,WAAW,CAC9C,GAAG,IAAI,KAAK,EACZ;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,KAAK,EAAE;YAC/D,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,QAAQ;gBACpB,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACzB,QAAQ,EAAE,SAAS;gBACnB,WAAW,EAAE,OAAO;gBACpB,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;aACvE;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,MAAM,CACpC,GAAG,IAAI,KAAK,EACZ;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,KAAK,EAAE;YAC/D,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE;SAC5D,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,IAAI,CAAC,QAAQ;gBACzB,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,OAAO;gBACpB,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;aAC3E;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAC1C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC9B,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE;oBACR,QAAQ,EAAE;wBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,WAAW,EAAE,EAAE,iCAAiC,EAAE,MAAM,EAAE;qBAC3D;oBACD,IAAI,EAAE;wBACJ,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,YAAY;gCAClB,KAAK,EAAE,4CAA4C;gCACnD,eAAe,EAAE,QAAQ;gCACzB,KAAK,EAAE;oCACL,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;oCACxD,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;iCAC9D;gCACD,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,YAAY,EAAE;oCACZ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,sCAAsC,EAAE,OAAO,EAAE,SAAS,EAAE;oCAC1F,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,iCAAiC,EAAE,OAAO,EAAE,KAAK,EAAE;oCACjF;wCACE,IAAI,EAAE,SAAS;wCACf,SAAS,EAAE,2CAA2C;wCACtD,OAAO,EAAE,cAAc;qCACxB;oCACD,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,kCAAkC,EAAE,OAAO,EAAE,MAAM,EAAE;oCACnF,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,2BAA2B,EAAE,OAAO,EAAE,YAAY,EAAE;oCAClF,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,6BAA6B,EAAE,OAAO,EAAE,cAAc,EAAE;oCAEtF,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,6BAA6B,EAAE,OAAO,EAAE,SAAS,EAAE;oCAChF,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,iCAAiC,EAAE,OAAO,EAAE,SAAS,EAAE;oCACjF,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,iCAAiC,EAAE,OAAO,EAAE,SAAS,EAAE;iCAClF;6BACF;yBACF;wBACD,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;4BACvE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE;4BACzE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE;yBACrE;qBACF;iBACF;aACF;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAC9D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,YAAY,EAAE,CAAC;gBACf,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;aAC3C;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,CACtC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,KAAK,EAAE;oBACL,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;oBACrE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;iBAChF;aACF;YACD,SAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;SAC3B,EACD,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAC7C,CAAC;QAEF,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAEtC,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAEO,MAAM,CAAC,mBAAmB,CAAC,QAAgB,EAAE,IAAuB;QAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1G,CAAC;CACF;AA1ND,4CA0NC"}

package/lib/freeradius/{index.ts → index.d.ts}

@@ -1,3 +1,3 @@
 import { FreeRadiusServerArgs, FreeRadiusServer } from "./deployment";
-
 export { FreeRadiusServerArgs, FreeRadiusServer };
+//# sourceMappingURL=index.d.ts.map

package/lib/freeradius/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/freeradius/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEtE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,CAAC"}

package/lib/freeradius/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FreeRadiusServer = void 0;
+const deployment_1 = require("./deployment");
+Object.defineProperty(exports, "FreeRadiusServer", { enumerable: true, get: function () { return deployment_1.FreeRadiusServer; } });
+//# sourceMappingURL=index.js.map

package/lib/freeradius/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/freeradius/index.ts"],"names":[],"mappings":";;;AAAA,6CAAsE;AAEvC,iGAFA,6BAAgB,OAEA"}

package/lib/gitlab/{index.ts → index.d.ts}

@@ -1,16 +1,5 @@
 import { ProjectArgs, Project } from "./project";
 import { RunnerArgs, Runner, RunnersArgs, Runners, RunnerCleanupArgs, RunnerCleanup } from "./runners";
 import { RenovateArgs, Renovate } from "./renovate";
-
-export {
-  ProjectArgs,
-  Project,
-  RunnerArgs,
-  Runner,
-  RunnersArgs,
-  Runners,
-  RunnerCleanupArgs,
-  RunnerCleanup,
-  RenovateArgs,
-  Renovate,
-};
+export { ProjectArgs, Project, RunnerArgs, Runner, RunnersArgs, Runners, RunnerCleanupArgs, RunnerCleanup, RenovateArgs, Renovate, };
+//# sourceMappingURL=index.d.ts.map

package/lib/gitlab/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/gitlab/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACvG,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEpD,OAAO,EACL,WAAW,EACX,OAAO,EACP,UAAU,EACV,MAAM,EACN,WAAW,EACX,OAAO,EACP,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,QAAQ,GACT,CAAC"}

package/lib/gitlab/index.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Renovate = exports.RunnerCleanup = exports.Runners = exports.Runner = exports.Project = void 0;
+const project_1 = require("./project");
+Object.defineProperty(exports, "Project", { enumerable: true, get: function () { return project_1.Project; } });
+const runners_1 = require("./runners");
+Object.defineProperty(exports, "Runner", { enumerable: true, get: function () { return runners_1.Runner; } });
+Object.defineProperty(exports, "Runners", { enumerable: true, get: function () { return runners_1.Runners; } });
+Object.defineProperty(exports, "RunnerCleanup", { enumerable: true, get: function () { return runners_1.RunnerCleanup; } });
+const renovate_1 = require("./renovate");
+Object.defineProperty(exports, "Renovate", { enumerable: true, get: function () { return renovate_1.Renovate; } });
+//# sourceMappingURL=index.js.map

package/lib/gitlab/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/gitlab/index.ts"],"names":[],"mappings":";;;AAAA,uCAAiD;AAM/C,wFANoB,iBAAO,OAMpB;AALT,uCAAuG;AAOrG,uFAPmB,gBAAM,OAOnB;AAEN,wFATwC,iBAAO,OASxC;AAEP,8FAXoE,uBAAa,OAWpE;AAVf,yCAAoD;AAYlD,yFAZqB,mBAAQ,OAYrB"}

package/lib/gitlab/project.d.ts

@@ -0,0 +1,18 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as gitlab from "@pulumi/gitlab";
+import { ComponentResource } from "../common";
+export interface ProjectArgs extends gitlab.ProjectArgs {
+    protect?: boolean;
+}
+export declare class Project extends ComponentResource {
+    private readonly project;
+    private readonly pipelineBadge;
+    /**
+     * Create a new GitLab project resource.
+     * @param name The name of the GitLab project resource.
+     * @param args A bag of arguments to control the GitLab project creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ProjectArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=project.d.ts.map

package/lib/gitlab/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../../lib/gitlab/project.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,WAAW,WAAY,SAAQ,MAAM,CAAC,WAAW;IACrD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,OAAQ,SAAQ,iBAAiB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;IAEpD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAiIpF"}

package/lib/gitlab/project.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Project = void 0;
+const pulumi = require("@pulumi/pulumi");
+const gitlab = require("@pulumi/gitlab");
+const common_1 = require("../common");
+class Project extends common_1.ComponentResource {
+    project;
+    pipelineBadge;
+    /**
+     * Create a new GitLab project resource.
+     * @param name The name of the GitLab project resource.
+     * @param args A bag of arguments to control the GitLab project creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("gitlab:project", name, args, opts);
+        opts = this.opts(gitlab.Provider);
+        if (args.autoCancelPendingPipelines === undefined) {
+            args.autoCancelPendingPipelines = "enabled";
+        }
+        if (args.autoDevopsEnabled === undefined) {
+            args.autoDevopsEnabled = false;
+        }
+        if (args.autocloseReferencedIssues === undefined) {
+            args.autocloseReferencedIssues = true;
+        }
+        if (args.buildsAccessLevel === undefined) {
+            args.buildsAccessLevel = "private";
+        }
+        if (args.containerRegistryEnabled === undefined) {
+            args.containerRegistryEnabled = true;
+        }
+        args.containerExpirationPolicy = pulumi
+            .all([args.containerRegistryEnabled, args.containerExpirationPolicy])
+            .apply(([enabled, policy]) => {
+            if (enabled && policy === undefined) {
+                return {
+                    enabled: true,
+                    cadence: "7d",
+                    olderThan: "14d",
+                    keepN: 10,
+                    nameRegexDelete: ".*",
+                    nameRegexKeep: "^v\\d(\\.\\d)+$",
+                };
+            }
+            else {
+                return {};
+            }
+        });
+        if (args.defaultBranch === undefined) {
+            args.defaultBranch = "main";
+        }
+        if (args.initializeWithReadme === undefined) {
+            args.initializeWithReadme = false;
+        }
+        if (args.issuesEnabled === undefined) {
+            args.issuesEnabled = true;
+        }
+        if (args.lfsEnabled === undefined) {
+            args.lfsEnabled = false;
+        }
+        if (args.mergeRequestsEnabled === undefined) {
+            args.mergeRequestsEnabled = true;
+        }
+        if (args.onlyAllowMergeIfAllDiscussionsAreResolved === undefined) {
+            args.onlyAllowMergeIfAllDiscussionsAreResolved = true;
+        }
+        if (args.onlyAllowMergeIfPipelineSucceeds === undefined) {
+            args.onlyAllowMergeIfPipelineSucceeds = true;
+        }
+        if (args.operationsAccessLevel === undefined) {
+            args.operationsAccessLevel = "disabled";
+        }
+        if (args.packagesEnabled === undefined) {
+            args.packagesEnabled = false;
+        }
+        if (args.pagesAccessLevel === undefined) {
+            args.pagesAccessLevel = "disabled";
+        }
+        if (args.pipelinesEnabled === undefined) {
+            args.pipelinesEnabled = true;
+        }
+        if (args.printingMergeRequestLinkEnabled === undefined) {
+            args.printingMergeRequestLinkEnabled = true;
+        }
+        if (args.removeSourceBranchAfterMerge === undefined) {
+            args.removeSourceBranchAfterMerge = true;
+        }
+        if (args.sharedRunnersEnabled === undefined) {
+            args.sharedRunnersEnabled = true;
+        }
+        if (args.snippetsEnabled === undefined) {
+            args.snippetsEnabled = false;
+        }
+        if (args.squashOption === undefined) {
+            args.squashOption = "default_on";
+        }
+        if (args.visibilityLevel === undefined) {
+            args.visibilityLevel = "private";
+        }
+        if (args.wikiEnabled === undefined) {
+            args.wikiEnabled = false;
+        }
+        this.project = new gitlab.Project(name, args, { ...opts, protect: args.protect });
+        this.pipelineBadge = new gitlab.ProjectBadge(`${name}-pipeline-badge`, {
+            project: this.project.id,
+            name: "Pipeline Status",
+            linkUrl: "https://gitlab.com/%{project_path}/pipelines",
+            imageUrl: "https://gitlab.com/%{project_path}/badges/main/pipeline.svg",
+        }, opts);
+        this.registerOutputs();
+    }
+}
+exports.Project = Project;
+//# sourceMappingURL=project.js.map

package/lib/gitlab/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../../lib/gitlab/project.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,yCAAyC;AACzC,sCAA8C;AAM9C,MAAa,OAAQ,SAAQ,0BAAiB;IAC3B,OAAO,CAAiB;IACxB,aAAa,CAAsB;IAEpD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAiB,EAAE,IAAsC;QACjF,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE1C,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAElC,IAAI,IAAI,CAAC,0BAA0B,KAAK,SAAS,EAAE;YACjD,IAAI,CAAC,0BAA0B,GAAG,SAAS,CAAC;SAC7C;QAED,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE;YACxC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;SAChC;QAED,IAAI,IAAI,CAAC,yBAAyB,KAAK,SAAS,EAAE;YAChD,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC;SACvC;QAED,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE;YACxC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;SACpC;QAED,IAAI,IAAI,CAAC,wBAAwB,KAAK,SAAS,EAAE;YAC/C,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;SACtC;QAED,IAAI,CAAC,yBAAyB,GAAG,MAAM;aACpC,GAAG,CAAC,CAAC,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;aACpE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE;YAC3B,IAAI,OAAO,IAAI,MAAM,KAAK,SAAS,EAAE;gBACnC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,KAAK;oBAChB,KAAK,EAAE,EAAE;oBACT,eAAe,EAAE,IAAI;oBACrB,aAAa,EAAE,iBAAiB;iBACjC,CAAC;aACH;iBAAM;gBACL,OAAO,EAAE,CAAC;aACX;QACH,CAAC,CAAC,CAAC;QAEL,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE;YACpC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;SAC7B;QAED,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE;YAC3C,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC;SACnC;QAED,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE;YACpC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;SAC3B;QAED,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE;YACjC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;SACzB;QAED,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE;YAC3C,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;SAClC;QAED,IAAI,IAAI,CAAC,yCAAyC,KAAK,SAAS,EAAE;YAChE,IAAI,CAAC,yCAAyC,GAAG,IAAI,CAAC;SACvD;QAED,IAAI,IAAI,CAAC,gCAAgC,KAAK,SAAS,EAAE;YACvD,IAAI,CAAC,gCAAgC,GAAG,IAAI,CAAC;SAC9C;QAED,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE;YAC5C,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC;SACzC;QAED,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE;YACtC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;SAC9B;QAED,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE;YACvC,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC;SACpC;QAED,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE;YACvC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;SAC9B;QAED,IAAI,IAAI,CAAC,+BAA+B,KAAK,SAAS,EAAE;YACtD,IAAI,CAAC,+BAA+B,GAAG,IAAI,CAAC;SAC7C;QAED,IAAI,IAAI,CAAC,4BAA4B,KAAK,SAAS,EAAE;YACnD,IAAI,CAAC,4BAA4B,GAAG,IAAI,CAAC;SAC1C;QAED,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE;YAC3C,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;SAClC;QAED,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE;YACtC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;SAC9B;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE;YACnC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;SAClC;QAED,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE;YACtC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;SAClC;QAED,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE;YAClC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;SAC1B;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAElF,IAAI,CAAC,aAAa,GAAG,IAAI,MAAM,CAAC,YAAY,CAC1C,GAAG,IAAI,iBAAiB,EACxB;YACE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YACxB,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,8CAA8C;YACvD,QAAQ,EAAE,6DAA6D;SACxE,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AA3ID,0BA2IC"}

package/lib/gitlab/renovate.d.ts

@@ -0,0 +1,23 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { ComponentResource } from "../common";
+export interface RenovateArgs {
+    namespace?: pulumi.Input<string>;
+    accessToken: pulumi.Input<string>;
+    githubAccessToken?: pulumi.Input<string>;
+    schedule?: pulumi.Input<string>;
+    resources?: pulumi.Input<k8s.types.input.core.v1.ResourceRequirements>;
+}
+export declare class Renovate extends ComponentResource {
+    private readonly secret;
+    private readonly cronjob;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new renovate resource.
+     * @param name The name of the renovate resource.
+     * @param args A bag of arguments to control the renovate creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: RenovateArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=renovate.d.ts.map

package/lib/gitlab/renovate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renovate.d.ts","sourceRoot":"","sources":["../../../lib/gitlab/renovate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;CACxE;AAED,qBAAa,QAAS,SAAQ,iBAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CA0ErF"}

package/lib/gitlab/renovate.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Renovate = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../common");
+class Renovate extends common_1.ComponentResource {
+    secret;
+    cronjob;
+    namespace;
+    /**
+     * Create a new renovate resource.
+     * @param name The name of the renovate resource.
+     * @param args A bag of arguments to control the renovate creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("gitlab:renovate", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.schedule === undefined) {
+            args.schedule = "0 2 * * 0";
+        }
+        if (args.resources === undefined) {
+            args.resources = { requests: { memory: "1024Mi" }, limits: { memory: "1280Mi" } };
+        }
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "gitlab",
+                "app.kubernetes.io/component": "renovate",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.secret = new k8s.core.v1.Secret(name, {
+            metadata,
+            stringData: pulumi.all([args.accessToken, args.githubAccessToken]).apply(([accessToken, githubAccessToken]) => {
+                return { RENOVATE_TOKEN: accessToken, GITHUB_COM_TOKEN: githubAccessToken };
+            }),
+        }, opts);
+        this.cronjob = new k8s.batch.v1.CronJob(name, {
+            metadata,
+            spec: {
+                schedule: args.schedule,
+                concurrencyPolicy: "Forbid",
+                successfulJobsHistoryLimit: 0,
+                failedJobsHistoryLimit: 1,
+                jobTemplate: {
+                    metadata: { labels: metadata.labels },
+                    spec: {
+                        template: {
+                            spec: {
+                                restartPolicy: "OnFailure",
+                                containers: [
+                                    {
+                                        name: "renovate",
+                                        image: "renovate/renovate:latest",
+                                        imagePullPolicy: "Always",
+                                        args: ["--platform=gitlab", "--autodiscover"],
+                                        envFrom: [{ secretRef: { name: this.secret.metadata.name } }],
+                                        resources: args.resources,
+                                    },
+                                ],
+                            },
+                        },
+                    },
+                },
+            },
+        }, opts);
+        this.registerOutputs();
+    }
+}
+exports.Renovate = Renovate;
+//# sourceMappingURL=renovate.js.map

package/lib/gitlab/renovate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renovate.js","sourceRoot":"","sources":["../../../lib/gitlab/renovate.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AAU9C,MAAa,QAAS,SAAQ,0BAAiB;IAC5B,MAAM,CAAqB;IAC3B,OAAO,CAAuB;IAC/B,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAkB,EAAE,IAAsC;QAClF,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE3C,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;YAC/B,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC;SAC7B;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE;YAChC,IAAI,CAAC,SAAS,GAAG,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;SACnF;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,QAAQ;gBAClC,6BAA6B,EAAE,UAAU;gBACzC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAClC,IAAI,EACJ;YACE,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE;gBAC5G,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC;YAC9E,CAAC,CAAC;SACH,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CACrC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,iBAAiB,EAAE,QAAQ;gBAC3B,0BAA0B,EAAE,CAAC;gBAC7B,sBAAsB,EAAE,CAAC;gBACzB,WAAW,EAAE;oBACX,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACrC,IAAI,EAAE;wBACJ,QAAQ,EAAE;4BACR,IAAI,EAAE;gCACJ,aAAa,EAAE,WAAW;gCAC1B,UAAU,EAAE;oCACV;wCACE,IAAI,EAAE,UAAU;wCAChB,KAAK,EAAE,0BAA0B;wCACjC,eAAe,EAAE,QAAQ;wCACzB,IAAI,EAAE,CAAC,mBAAmB,EAAE,gBAAgB,CAAC;wCAC7C,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;wCAC7D,SAAS,EAAE,IAAI,CAAC,SAAS;qCAC1B;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AArFD,4BAqFC"}

package/lib/gitlab/runners/cleanup.d.ts

@@ -0,0 +1,20 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../../common";
+export interface RunnerCleanupArgs {
+    namespace?: pulumi.Input<string>;
+    accessToken: pulumi.Input<string>;
+    schedule?: pulumi.Input<string>;
+}
+export declare class RunnerCleanup extends ComponentResource {
+    private readonly secret;
+    private readonly cronjob;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new GitLab runner cleanup resource.
+     * @param name The name of the GitLab runner cleanup resource.
+     * @param args A bag of arguments to control the GitLab runner cleanup creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: RunnerCleanupArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=cleanup.d.ts.map

package/lib/gitlab/runners/cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../../../lib/gitlab/runners/cleanup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACjC;AAED,qBAAa,aAAc,SAAQ,iBAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAkF1F"}

package/lib/gitlab/runners/cleanup.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RunnerCleanup = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../../common");
+class RunnerCleanup extends common_1.ComponentResource {
+    secret;
+    cronjob;
+    namespace;
+    /**
+     * Create a new GitLab runner cleanup resource.
+     * @param name The name of the GitLab runner cleanup resource.
+     * @param args A bag of arguments to control the GitLab runner cleanup creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("gitlab:runners:cleanup", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.schedule === undefined) {
+            args.schedule = "0 1 * * *";
+        }
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "gitlab-runners",
+                "app.kubernetes.io/component": "cleanup",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.secret = new k8s.core.v1.Secret(name, {
+            metadata,
+            stringData: {
+                token: args.accessToken,
+            },
+        }, opts);
+        this.cronjob = new k8s.batch.v1.CronJob(name, {
+            metadata,
+            spec: {
+                schedule: args.schedule,
+                concurrencyPolicy: "Forbid",
+                successfulJobsHistoryLimit: 0,
+                failedJobsHistoryLimit: 1,
+                jobTemplate: {
+                    metadata: { labels: metadata.labels },
+                    spec: {
+                        template: {
+                            spec: {
+                                restartPolicy: "OnFailure",
+                                containers: [
+                                    {
+                                        name: "gitlab-runner-cleanup",
+                                        image: "registry.gitlab.com/ydkn/gitlab-runner-cleanup:latest",
+                                        imagePullPolicy: "Always",
+                                        env: [
+                                            {
+                                                name: "TOKEN",
+                                                valueFrom: { secretKeyRef: { name: this.secret.metadata.name, key: "token" } },
+                                            },
+                                        ],
+                                        securityContext: {
+                                            runAsUser: 65532,
+                                            runAsGroup: 65532,
+                                            readOnlyRootFilesystem: true,
+                                        },
+                                        resources: {
+                                            requests: { memory: "32Mi" },
+                                            limits: { memory: "48Mi" },
+                                        },
+                                    },
+                                ],
+                            },
+                        },
+                    },
+                },
+            },
+        }, opts);
+        this.registerOutputs();
+    }
+}
+exports.RunnerCleanup = RunnerCleanup;
+//# sourceMappingURL=cleanup.js.map

package/lib/gitlab/runners/cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../../../lib/gitlab/runners/cleanup.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,yCAAiD;AAQjD,MAAa,aAAc,SAAQ,0BAAiB;IACjC,MAAM,CAAqB;IAC3B,OAAO,CAAuB;IAC/B,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAuB,EAAE,IAAsC;QACvF,KAAK,CAAC,wBAAwB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAElD,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;YAC/B,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC;SAC7B;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,gBAAgB;gBAC1C,6BAA6B,EAAE,SAAS;gBACxC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAClC,IAAI,EACJ;YACE,QAAQ;YACR,UAAU,EAAE;gBACV,KAAK,EAAE,IAAI,CAAC,WAAW;aACxB;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CACrC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,iBAAiB,EAAE,QAAQ;gBAC3B,0BAA0B,EAAE,CAAC;gBAC7B,sBAAsB,EAAE,CAAC;gBACzB,WAAW,EAAE;oBACX,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACrC,IAAI,EAAE;wBACJ,QAAQ,EAAE;4BACR,IAAI,EAAE;gCACJ,aAAa,EAAE,WAAW;gCAC1B,UAAU,EAAE;oCACV;wCACE,IAAI,EAAE,uBAAuB;wCAC7B,KAAK,EAAE,uDAAuD;wCAC9D,eAAe,EAAE,QAAQ;wCACzB,GAAG,EAAE;4CACH;gDACE,IAAI,EAAE,OAAO;gDACb,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;6CAC/E;yCACF;wCACD,eAAe,EAAE;4CACf,SAAS,EAAE,KAAK;4CAChB,UAAU,EAAE,KAAK;4CACjB,sBAAsB,EAAE,IAAI;yCAC7B;wCACD,SAAS,EAAE;4CACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;4CAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;yCAC3B;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AA7FD,sCA6FC"}

package/lib/gitlab/runners/{index.ts → index.d.ts}

@@ -1,5 +1,5 @@
 import { RunnerArgs, Runner } from "./runner";
 import { RunnersArgs, Runners } from "./runners";
 import { RunnerCleanupArgs, RunnerCleanup } from "./cleanup";
-
 export { RunnerArgs, Runner, RunnersArgs, Runners, RunnerCleanupArgs, RunnerCleanup };
+//# sourceMappingURL=index.d.ts.map

package/lib/gitlab/runners/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../lib/gitlab/runners/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC"}