@ydkn/pulumi-components 0.4.4 → 0.4.5

package/lib/prometheus/operator.js

@@ -0,0 +1,216 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Operator = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../common");
+const helm = require("../kubernetes/helm");
+class Operator extends common_1.ComponentResource {
+    helmRelease;
+    namespace;
+    /**
+     * Create a new Prometheus operator resource.
+     * @param name The name of the Prometheus operator resource.
+     * @param args A bag of arguments to control the Prometheus operator creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("prometheus:operator", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.storage === undefined) {
+            args.storage = "10Gi";
+        }
+        if (args.retention === undefined) {
+            args.retention = "24h"; // "1440h";
+        }
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        this.helmRelease = new helm.v3.Release(name, {
+            namespace: this.namespace,
+            repositoryOpts: { repo: "https://prometheus-community.github.io/helm-charts" },
+            chart: "kube-prometheus-stack",
+            values: pulumi.all([args.alertmanager]).apply(([alertmanager]) => {
+                return {
+                    fullnameOverride: name,
+                    prometheusOperator: {
+                        resources: {
+                            requests: { memory: "192Mi" },
+                            limits: { memory: "512Mi", cpu: "200m" },
+                        },
+                        prometheusConfigReloader: {
+                            resources: {
+                                requests: { memory: "32Mi" },
+                                limits: { memory: "48Mi", cpu: "200m" },
+                            },
+                        },
+                    },
+                    prometheus: {
+                        prometheusSpec: {
+                            retention: args.retention,
+                            logFormat: "json",
+                            externalUrl: args.hostname,
+                            enableRemoteWriteReceiver: true,
+                            remoteWriteDashboards: true,
+                            storageSpec: {
+                                volumeClaimTemplate: {
+                                    spec: {
+                                        accessModes: ["ReadWriteOnce"],
+                                        resources: { requests: { storage: args.storage } },
+                                    },
+                                },
+                            },
+                            additionalAlertManagerConfigs: alertmanager !== undefined && alertmanager.hostname !== undefined
+                                ? [{ scheme: "https", static_configs: [{ targets: [alertmanager.hostname] }] }]
+                                : [],
+                            serviceMonitorSelector: { matchLabels: { prometheusNoScrape: "none" } },
+                            podMonitorSelector: { matchLabels: { prometheusNoScrape: "none" } },
+                            probeSelector: { matchLabels: { prometheusNoScrape: "none" } },
+                            ruleSelector: { matchLabels: { prometheusNoScrape: "none" } },
+                            podAntiAffinity: "soft",
+                            resources: {
+                                requests: { memory: "1536Mi" },
+                                limits: { memory: "2048Mi" },
+                            },
+                        },
+                        service: {
+                            annotations: args.serviceHostname !== undefined
+                                ? { "external-dns.alpha.kubernetes.io/hostname": args.serviceHostname }
+                                : {},
+                        },
+                        ingress: helm.v3.ingressValues(pulumi.interpolate `${name}-prometheus`, [args.hostname], args.ingressClassName),
+                    },
+                    alertmanager: {
+                        alertmanagerSpec: {
+                            externalUrl: pulumi.interpolate `https://${alertmanager?.hostname}`,
+                            retention: "120h",
+                            podAntiAffinity: "soft",
+                            resources: {
+                                requests: { memory: "64Mi" },
+                                limits: { memory: "128Mi" },
+                            },
+                        },
+                        config: {
+                            global: {
+                                slack_api_url: alertmanager?.slack ? alertmanager.slack.url : undefined,
+                            },
+                            route: { receiver: alertmanager?.slack !== undefined ? "slack" : undefined },
+                            receivers: [{ name: "null" }, { name: "slack", slack_configs: this.slackConfigs(alertmanager?.slack) }],
+                        },
+                        service: {
+                            annotations: alertmanager?.serviceHostname !== undefined
+                                ? { "external-dns.alpha.kubernetes.io/hostname": alertmanager.serviceHostname }
+                                : {},
+                        },
+                        ingress: helm.v3.ingressValues(pulumi.interpolate `${name}-alertmanager`, [alertmanager?.hostname], alertmanager?.ingressClassName ?? args.ingressClassName),
+                    },
+                    grafana: {
+                        enabled: false,
+                        forceDeployDatasources: true,
+                        forceDeployDashboards: true,
+                        deleteDatasources: [{ name: "Prometheus", orgId: 1 }],
+                        sidecar: {
+                            datasources: { url: pulumi.interpolate `http://${name}-prometheus.${this.namespace}.svc:9090` },
+                            dashboards: { multicluster: { global: { enabled: true }, etcd: { enabled: true } } },
+                        },
+                    },
+                    kubeStateMetrics: { enabled: false },
+                    nodeExporter: { enabled: false },
+                    kubeApiServer: { enabled: false, serviceMonitor: { metricRelabelings: [] } },
+                    kubeControllerManager: { enabled: false, serviceMonitor: { metricRelabelings: [] } },
+                    kubeScheduler: { enabled: false, serviceMonitor: { metricRelabelings: [] } },
+                    kubeEtcd: { enabled: false, serviceMonitor: { metricRelabelings: [] } },
+                    kubeProxy: { enabled: false, serviceMonitor: { metricRelabelings: [] } },
+                    kubelet: { enabled: false, serviceMonitor: { metricRelabelings: [] } },
+                    coreDns: { enabled: false, serviceMonitor: { metricRelabelings: [] } },
+                };
+            }),
+        }, opts);
+        this.registerOutputs();
+    }
+    slackConfigs(slack) {
+        if (slack === undefined) {
+            return [];
+        }
+        return [
+            pulumi.all([slack]).apply(([slack]) => {
+                return {
+                    send_resolved: slack.sendResolved !== undefined ? slack.sendResolved : true,
+                    icon_url: slack.iconURL ?? "https://avatars3.githubusercontent.com/u/3380462",
+                    channel: slack.channel,
+                    color: [
+                        `{{ if eq .Status "firing" -}}`,
+                        `{{ if eq .CommonLabels.severity "warning" -}}`,
+                        "warning",
+                        `{{- else if eq .CommonLabels.severity "critical" -}}`,
+                        "danger",
+                        "{{- else -}}",
+                        "#439FE0",
+                        "{{- end -}}",
+                        "{{ else -}}",
+                        "good",
+                        "{{- end }}",
+                    ].join(""),
+                    title: slack.title ??
+                        [
+                            "[",
+                            "{{ .Status | toUpper -}}",
+                            `{{ if eq .Status "firing" }}:{{ .Alerts.Firing | len }}{{- end -}}`,
+                            "] ",
+                            "{{ .CommonLabels.alertname }}",
+                        ].join(""),
+                    text: slack.text ??
+                        [
+                            `{{- if eq .CommonLabels.severity "critical" -}}`,
+                            "*Severity:* `Critical`",
+                            `{{- else if eq .CommonLabels.severity "warning" -}}`,
+                            "*Severity:* `Warning`",
+                            `{{- else if eq .CommonLabels.severity "info" -}}`,
+                            "*Severity:* `Info`",
+                            "{{- end }}",
+                            "{{- if (index .Alerts 0).Annotations.summary }}",
+                            `{{- "\\n" -}}`,
+                            "*Summary:* ",
+                            "{{ (index .Alerts 0).Annotations.summary }}",
+                            "{{- end }}",
+                            "{{ range .Alerts }}",
+                            "{{- if .Annotations.description }}",
+                            `{{- "\\n" -}}`,
+                            "{{ .Annotations.description }}",
+                            `{{- "\\n" -}}`,
+                            "{{- end }}",
+                            "{{- if .Annotations.message }}",
+                            `{{- "\\n" -}}`,
+                            "{{ .Annotations.message }}",
+                            `{{- "\\n" -}}`,
+                            "{{- end }}",
+                            "{{- end }}",
+                        ].join(""),
+                    actions: [
+                        { type: "button", text: "Query :mag:", url: "{{ (index .Alerts 0).GeneratorURL }}" },
+                        {
+                            type: "button",
+                            text: "Dashboard :chart_with_upwards_trend:",
+                            url: "{{ (index .Alerts 0).Annotations.dashboard_url }}",
+                        },
+                        {
+                            type: "button",
+                            text: "Silence :no_bell:",
+                            url: [
+                                "{{ .ExternalURL }}/#/silences/new?filter=%7B",
+                                "{{- range .CommonLabels.SortedPairs -}}",
+                                `{{- if ne .Name "alertname" -}}`,
+                                `{{- .Name }}%3D"{{- .Value -}}"%2C%20`,
+                                "{{- end -}}",
+                                "{{- end -}}",
+                                `alertname%3D"{{- .CommonLabels.alertname -}}"%7D`,
+                            ].join(""),
+                        },
+                    ],
+                };
+            }),
+        ];
+    }
+}
+exports.Operator = Operator;
+//# sourceMappingURL=operator.js.map

package/lib/prometheus/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../lib/prometheus/operator.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AAC9C,2CAA2C;AA4B3C,MAAa,QAAS,SAAQ,0BAAiB;IAC5B,WAAW,CAAkB;IAC9B,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAkB,EAAE,IAAsC;QAClF,KAAK,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE/C,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE;YAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;SACvB;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE;YAChC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,WAAW;SACpC;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CACpC,IAAI,EACJ;YACE,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,EAAE,IAAI,EAAE,oDAAoD,EAAE;YAC9E,KAAK,EAAE,uBAAuB;YAC9B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE;gBAC/D,OAAO;oBACL,gBAAgB,EAAE,IAAI;oBACtB,kBAAkB,EAAE;wBAClB,SAAS,EAAE;4BACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;4BAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE;yBACzC;wBACD,wBAAwB,EAAE;4BACxB,SAAS,EAAE;gCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;gCAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE;6BACxC;yBACF;qBACF;oBACD,UAAU,EAAE;wBACV,cAAc,EAAE;4BACd,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,SAAS,EAAE,MAAM;4BACjB,WAAW,EAAE,IAAI,CAAC,QAAQ;4BAC1B,yBAAyB,EAAE,IAAI;4BAC/B,qBAAqB,EAAE,IAAI;4BAC3B,WAAW,EAAE;gCACX,mBAAmB,EAAE;oCACnB,IAAI,EAAE;wCACJ,WAAW,EAAE,CAAC,eAAe,CAAC;wCAC9B,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;qCACnD;iCACF;6BACF;4BACD,6BAA6B,EAC3B,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS;gCAC/D,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gCAC/E,CAAC,CAAC,EAAE;4BACR,sBAAsB,EAAE,EAAE,WAAW,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE;4BACvE,kBAAkB,EAAE,EAAE,WAAW,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE;4BACnE,aAAa,EAAE,EAAE,WAAW,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE;4BAC9D,YAAY,EAAE,EAAE,WAAW,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE;4BAC7D,eAAe,EAAE,MAAM;4BACvB,SAAS,EAAE;gCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;gCAC9B,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;6BAC7B;yBACF;wBACD,OAAO,EAAE;4BACP,WAAW,EACT,IAAI,CAAC,eAAe,KAAK,SAAS;gCAChC,CAAC,CAAC,EAAE,2CAA2C,EAAE,IAAI,CAAC,eAAe,EAAE;gCACvE,CAAC,CAAC,EAAE;yBACT;wBACD,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,CAC5B,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,aAAa,EACtC,CAAC,IAAI,CAAC,QAAQ,CAAC,EACf,IAAI,CAAC,gBAAgB,CACtB;qBACF;oBACD,YAAY,EAAE;wBACZ,gBAAgB,EAAE;4BAChB,WAAW,EAAE,MAAM,CAAC,WAAW,CAAA,WAAW,YAAY,EAAE,QAAQ,EAAE;4BAClE,SAAS,EAAE,MAAM;4BACjB,eAAe,EAAE,MAAM;4BACvB,SAAS,EAAE;gCACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;gCAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;6BAC5B;yBACF;wBACD,MAAM,EAAE;4BACN,MAAM,EAAE;gCACN,aAAa,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;6BACxE;4BACD,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE;4BAC5E,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC;yBACxG;wBACD,OAAO,EAAE;4BACP,WAAW,EACT,YAAY,EAAE,eAAe,KAAK,SAAS;gCACzC,CAAC,CAAC,EAAE,2CAA2C,EAAE,YAAY,CAAC,eAAe,EAAE;gCAC/E,CAAC,CAAC,EAAE;yBACT;wBACD,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,CAC5B,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,eAAe,EACxC,CAAC,YAAY,EAAE,QAAQ,CAAC,EACxB,YAAY,EAAE,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,CACxD;qBACF;oBACD,OAAO,EAAE;wBACP,OAAO,EAAE,KAAK;wBACd,sBAAsB,EAAE,IAAI;wBAC5B,qBAAqB,EAAE,IAAI;wBAC3B,iBAAiB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;wBACrD,OAAO,EAAE;4BACP,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,WAAW,CAAA,UAAU,IAAI,eAAe,IAAI,CAAC,SAAS,WAAW,EAAE;4BAC9F,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;yBACrF;qBACF;oBACD,gBAAgB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;oBACpC,YAAY,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;oBAChC,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE;oBAC5E,qBAAqB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE;oBACpF,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE;oBAC5E,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE;oBACvE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE;oBACxE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE;oBACtE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE;iBACvE,CAAC;YACJ,CAAC,CAAC;SACH,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAEO,YAAY,CAAC,KAA+B;QAClD,IAAI,KAAK,KAAK,SAAS,EAAE;YACvB,OAAO,EAAE,CAAC;SACX;QAED,OAAO;YACL,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE;gBACpC,OAAO;oBACL,aAAa,EAAE,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;oBAC3E,QAAQ,EAAE,KAAK,CAAC,OAAO,IAAI,kDAAkD;oBAC7E,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE;wBACL,+BAA+B;wBAC/B,+CAA+C;wBAC/C,SAAS;wBACT,sDAAsD;wBACtD,QAAQ;wBACR,cAAc;wBACd,SAAS;wBACT,aAAa;wBACb,aAAa;wBACb,MAAM;wBACN,YAAY;qBACb,CAAC,IAAI,CAAC,EAAE,CAAC;oBACV,KAAK,EACH,KAAK,CAAC,KAAK;wBACX;4BACE,GAAG;4BACH,0BAA0B;4BAC1B,oEAAoE;4BACpE,IAAI;4BACJ,+BAA+B;yBAChC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACZ,IAAI,EACF,KAAK,CAAC,IAAI;wBACV;4BACE,iDAAiD;4BACjD,wBAAwB;4BACxB,qDAAqD;4BACrD,uBAAuB;4BACvB,kDAAkD;4BAClD,oBAAoB;4BACpB,YAAY;4BACZ,iDAAiD;4BACjD,eAAe;4BACf,aAAa;4BACb,6CAA6C;4BAC7C,YAAY;4BACZ,qBAAqB;4BACrB,oCAAoC;4BACpC,eAAe;4BACf,gCAAgC;4BAChC,eAAe;4BACf,YAAY;4BACZ,gCAAgC;4BAChC,eAAe;4BACf,4BAA4B;4BAC5B,eAAe;4BACf,YAAY;4BACZ,YAAY;yBACb,CAAC,IAAI,CAAC,EAAE,CAAC;oBACZ,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,sCAAsC,EAAE;wBACpF;4BACE,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,sCAAsC;4BAC5C,GAAG,EAAE,mDAAmD;yBACzD;wBACD;4BACE,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,mBAAmB;4BACzB,GAAG,EAAE;gCACH,8CAA8C;gCAC9C,yCAAyC;gCACzC,iCAAiC;gCACjC,uCAAuC;gCACvC,aAAa;gCACb,aAAa;gCACb,kDAAkD;6BACnD,CAAC,IAAI,CAAC,EAAE,CAAC;yBACX;qBACF;iBACF,CAAC;YACJ,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;CACF;AAxOD,4BAwOC"}

package/lib/prometheus/podMonitor.d.ts

@@ -0,0 +1,27 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { RelabelingArgs, TLSConfigArgs } from "./monitor";
+export interface PodMetricsEndpoint {
+    targetPort?: pulumi.Input<number | string>;
+    honorLabels?: pulumi.Input<boolean>;
+    tlsConfig?: pulumi.Input<TLSConfigArgs>;
+    metricRelabelings?: pulumi.Input<pulumi.Input<RelabelingArgs>[]>;
+}
+export interface PodMonitorSpec {
+    selector?: pulumi.Input<k8s.types.input.meta.v1.LabelSelector>;
+    podMetricsEndpoints?: pulumi.Input<pulumi.Input<PodMetricsEndpoint>[]>;
+}
+export interface PodMonitorArgs {
+    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
+    spec: pulumi.Input<PodMonitorSpec>;
+}
+export declare class PodMonitor extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new pod monitor resource.
+     * @param name The name of the pod monitor resource.
+     * @param args A bag of arguments to control the pod monitor creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: PodMonitorArgs, opts?: pulumi.CustomResourceOptions);
+}
+//# sourceMappingURL=podMonitor.d.ts.map

package/lib/prometheus/podMonitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"podMonitor.d.ts","sourceRoot":"","sources":["../../../lib/prometheus/podMonitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1D,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;IAC/D,mBAAmB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;CACpC;AAED,qBAAa,UAAW,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC9D;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAGpF"}

package/lib/prometheus/podMonitor.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PodMonitor = void 0;
+const k8s = require("@pulumi/kubernetes");
+class PodMonitor extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new pod monitor resource.
+     * @param name The name of the pod monitor resource.
+     * @param args A bag of arguments to control the pod monitor creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super(name, { ...args, apiVersion: "monitoring.coreos.com/v1", kind: "PodMonitor" }, opts);
+    }
+}
+exports.PodMonitor = PodMonitor;
+//# sourceMappingURL=podMonitor.js.map

package/lib/prometheus/podMonitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"podMonitor.js","sourceRoot":"","sources":["../../../lib/prometheus/podMonitor.ts"],"names":[],"mappings":";;;AACA,0CAA0C;AAoB1C,MAAa,UAAW,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC9D;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAoB,EAAE,IAAmC;QACjF,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,0BAA0B,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC;CACF;AAVD,gCAUC"}

package/lib/prometheus/serviceMonitor.d.ts

@@ -0,0 +1,37 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { RelabelingArgs, TLSConfigArgs } from "./monitor";
+export interface NamespaceSelector {
+    matchNames?: pulumi.Input<pulumi.Input<string | undefined>[]>;
+}
+export interface EndpointArgs {
+    path?: pulumi.Input<string>;
+    port?: pulumi.Input<string | number>;
+    honorLabels?: pulumi.Input<boolean>;
+    honorTimestamps?: pulumi.Input<boolean>;
+    interval?: pulumi.Input<string>;
+    bearerTokenFile?: pulumi.Input<string>;
+    scheme?: pulumi.Input<string>;
+    tlsConfig?: pulumi.Input<TLSConfigArgs>;
+    metricRelabelings?: pulumi.Input<pulumi.Input<RelabelingArgs>[]>;
+    relabelings?: pulumi.Input<pulumi.Input<RelabelingArgs>[]>;
+}
+export interface ServiceMonitorSpec {
+    namespaceSelector?: pulumi.Input<NamespaceSelector>;
+    selector?: pulumi.Input<k8s.types.input.meta.v1.LabelSelector>;
+    endpoints?: pulumi.Input<pulumi.Input<EndpointArgs>[]>;
+}
+export interface ServiceMonitorArgs {
+    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
+    spec: pulumi.Input<ServiceMonitorSpec>;
+}
+export declare class ServiceMonitor extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new service monitor resource.
+     * @param name The name of the service monitor resource.
+     * @param args A bag of arguments to control the service monitor creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ServiceMonitorArgs, opts?: pulumi.CustomResourceOptions);
+}
+//# sourceMappingURL=serviceMonitor.d.ts.map

package/lib/prometheus/serviceMonitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serviceMonitor.d.ts","sourceRoot":"","sources":["../../../lib/prometheus/serviceMonitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1D,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;CACxC;AAED,qBAAa,cAAe,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAClE;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAGxF"}

package/lib/prometheus/serviceMonitor.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceMonitor = void 0;
+const k8s = require("@pulumi/kubernetes");
+class ServiceMonitor extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new service monitor resource.
+     * @param name The name of the service monitor resource.
+     * @param args A bag of arguments to control the service monitor creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super(name, { ...args, apiVersion: "monitoring.coreos.com/v1", kind: "ServiceMonitor" }, opts);
+    }
+}
+exports.ServiceMonitor = ServiceMonitor;
+//# sourceMappingURL=serviceMonitor.js.map

package/lib/prometheus/serviceMonitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serviceMonitor.js","sourceRoot":"","sources":["../../../lib/prometheus/serviceMonitor.ts"],"names":[],"mappings":";;;AACA,0CAA0C;AA+B1C,MAAa,cAAe,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAClE;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAwB,EAAE,IAAmC;QACrF,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,0BAA0B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;IACjG,CAAC;CACF;AAVD,wCAUC"}

package/lib/raspberrypi/cluster.d.ts

@@ -0,0 +1,41 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { ComponentResource } from "../common";
+import * as node from "../node";
+import * as fcos from "../fcos";
+import * as k0s from "../k0s";
+interface InputNodeVLANs {
+    id: pulumi.Input<number>;
+    interface?: pulumi.Input<string>;
+    ipv4Address?: pulumi.Input<string>;
+    ipv6Address?: pulumi.Input<string>;
+}
+interface InputNode extends node.Node, fcos.IgnitionArgs {
+    vlans?: pulumi.Input<pulumi.Input<InputNodeVLANs>[]>;
+    disabled?: pulumi.Input<boolean>;
+}
+export interface ClusterArgs extends k0s.ClusterArgs, fcos.IgnitionArgs {
+    name?: pulumi.Input<string>;
+    nodes: pulumi.Input<pulumi.Input<InputNode>[]>;
+    sshAuthorizedKeys?: pulumi.Input<pulumi.Input<string>[]>;
+}
+export declare class Cluster extends ComponentResource {
+    private static readonly sshUsername;
+    private static readonly ethernetInterfaceName;
+    readonly name: pulumi.Output<string>;
+    readonly nodes: pulumi.Output<pulumi.Output<node.Node>[]>;
+    readonly kubeconfig: pulumi.Output<string>;
+    readonly provider: k8s.Provider;
+    readonly kubeletDirPath: pulumi.Output<string>;
+    /**
+     * Create a new RaspberryPi cluster resource.
+     * @param name The name of RaspberryPi cluster resource.
+     * @param args A bag of arguments to control the RaspberryPi cluster creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ClusterArgs, opts?: pulumi.ComponentResourceOptions);
+    private createServers;
+    private networkManagerConfigFiles;
+}
+export {};
+//# sourceMappingURL=cluster.d.ts.map

package/lib/raspberrypi/cluster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cluster.d.ts","sourceRoot":"","sources":["../../../lib/raspberrypi/cluster.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,IAAI,MAAM,SAAS,CAAC;AAChC,OAAO,KAAK,IAAI,MAAM,SAAS,CAAC;AAChC,OAAO,KAAK,GAAG,MAAM,QAAQ,CAAC;AAE9B,UAAU,cAAc;IACtB,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACpC;AAED,UAAU,SAAU,SAAQ,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,WAAY,SAAQ,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC/C,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CAC1D;AAED,qBAAa,OAAQ,SAAQ,iBAAiB;IAC5C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAY;IAC/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAU;IAEvD,SAAgB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,SAAgB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,SAAgB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,SAAgB,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC;IACvC,SAAgB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEtD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;IAoDnF,OAAO,CAAC,aAAa;IAwHrB,OAAO,CAAC,yBAAyB;CAgElC"}

package/lib/raspberrypi/cluster.js

@@ -0,0 +1,194 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Cluster = void 0;
+const pulumi = require("@pulumi/pulumi");
+const random = require("@pulumi/random");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../common");
+const fcos = require("../fcos");
+const k0s = require("../k0s");
+class Cluster extends common_1.ComponentResource {
+    static sshUsername = "pulumi";
+    static ethernetInterfaceName = "eth0";
+    name;
+    nodes;
+    kubeconfig;
+    provider;
+    kubeletDirPath;
+    /**
+     * Create a new RaspberryPi cluster resource.
+     * @param name The name of RaspberryPi cluster resource.
+     * @param args A bag of arguments to control the RaspberryPi cluster creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("raspberrypi:cluster", name, args, opts);
+        const emptyOpts = this.opts();
+        if (args.name === undefined) {
+            this.name = new random.RandomId(name, { byteLength: 3 }, { ...emptyOpts, protect: args.protect }).hex;
+        }
+        else {
+            this.name = pulumi.output(args.name);
+        }
+        const servers = this.createServers(args.nodes, args.modules, args.packages, args.disks, args.filesystems, args.files, args.systemdUnits, args.sshAuthorizedKeys);
+        this.nodes = servers.apply((servers) => servers.map((s) => s.node));
+        const k0sCluster = servers.apply((servers) => pulumi.all(servers.map((s) => s.depends)).apply((dependsOn) => {
+            return new k0s.Cluster(name, {
+                name: this.name,
+                nodes: pulumi.all(servers.map((s) => s.node)).apply((nodes) => nodes.filter((n) => n.disabled !== true)),
+                k0s: args.k0s,
+                hooks: args.hooks,
+                cloudProvider: false,
+                protect: args.protect,
+            }, emptyOpts);
+        }));
+        this.kubeletDirPath = k0sCluster.kubeletDirPath;
+        this.kubeconfig = k0sCluster.kubeconfig;
+        this.provider = new k8s.Provider(`${name}-k8s`, { kubeconfig: this.kubeconfig, suppressHelmHookWarnings: true }, emptyOpts);
+        this.registerOutputs();
+    }
+    createServers(nodes, modules, packages, disks, filesystems, files, systemdUnits, sshAuthorizedKeys) {
+        const emptyOpts = this.opts();
+        return pulumi.all([nodes]).apply(([nodes]) => {
+            const results = [];
+            for (let i = 0; i < nodes.length; i++) {
+                // eslint-disable-next-line security/detect-object-injection
+                const node = nodes[i];
+                const nodeId = new random.RandomId(`node-${i}`, { byteLength: 3 }, emptyOpts).hex;
+                const hostname = pulumi.interpolate `${this.name}-${k0s.Cluster.rolesHostname(node.roles)}-${nodeId}`;
+                const host = pulumi
+                    .all([hostname, modules, packages, files, disks, filesystems, systemdUnits, sshAuthorizedKeys])
+                    .apply(([hostname, modules, packages, files, disks, filesystems, systemdUnits, sshAuthorizedKeys]) => {
+                    const fcosHost = new fcos.Host(hostname, {
+                        hostname,
+                        disks: pulumi
+                            .all(disks || [])
+                            .apply((disks) => pulumi.all(node.disks || []).apply((nodeDisks) => disks.concat(nodeDisks))),
+                        filesystems: pulumi
+                            .all(filesystems || [])
+                            .apply((filesystems) => pulumi.all(node.filesystems || []).apply((nodeFilesystems) => filesystems.concat(nodeFilesystems))),
+                        files: pulumi
+                            .all(files || [])
+                            .apply((files) => pulumi
+                            .all(node.files || [])
+                            .apply((nodeFiles) => pulumi
+                            .all([this.networkManagerConfigFiles(node)])
+                            .apply(([networkManagerFiles]) => files.concat(nodeFiles).concat(networkManagerFiles)))),
+                        systemdUnits: pulumi
+                            .all(systemdUnits || [])
+                            .apply((systemdUnits) => pulumi
+                            .all(node.systemdUnits || [])
+                            .apply((nodeSystemdUnits) => systemdUnits.concat(nodeSystemdUnits))),
+                        packages: pulumi
+                            .all(packages || [])
+                            .apply((packages) => pulumi.all(node.packages || []).apply((nodePackages) => packages.concat(nodePackages))),
+                        modules: pulumi
+                            .all(modules || [])
+                            .apply((modules) => pulumi.all(node.modules || []).apply((nodeModules) => modules.concat(nodeModules))),
+                        users: pulumi.all(node.users || []).apply((users) => {
+                            return users.concat([{ name: "core", sshAuthorizedKeys: (sshAuthorizedKeys || []).map((k) => k) }]);
+                        }),
+                        sshUsers: [{ name: Cluster.sshUsername, groups: ["sudo"] }],
+                    }, emptyOpts);
+                    const roles = node.roles || [];
+                    let isController = false;
+                    for (const role of roles) {
+                        if (role === "controller") {
+                            isController = true;
+                            break;
+                        }
+                    }
+                    if (isController) {
+                        roles.push("etcd");
+                    }
+                    return {
+                        id: hostname,
+                        hostname,
+                        roles,
+                        ipv4Address: node.ipv4Address,
+                        privateIpv4Address: node.privateIpv4Address,
+                        ipv6Address: node.ipv6Address,
+                        privateIpv6Address: node.privateIpv6Address,
+                        labels: node.labels ?? {},
+                        taints: node.taints ?? [],
+                        username: Cluster.sshUsername,
+                        privateKey: fcosHost.sshPrivateKeys.apply((sshPrivateKeys) => {
+                            for (const username in sshPrivateKeys) {
+                                if (username === Cluster.sshUsername) {
+                                    // eslint-disable-next-line security/detect-object-injection
+                                    return sshPrivateKeys[username].privateKeyOpenssh;
+                                }
+                            }
+                            throw new Error(`No private key found for user ${Cluster.sshUsername}`);
+                        }),
+                        disabled: node.disabled ?? false,
+                        fcosHost,
+                    };
+                });
+                results.push({ node: host, depends: host.fcosHost });
+            }
+            return results;
+        });
+    }
+    networkManagerConfigFiles(node) {
+        return pulumi.all([node.vlans]).apply(([vlans]) => {
+            const configs = [];
+            configs.push({
+                path: `/etc/NetworkManager/system-connections/${Cluster.ethernetInterfaceName}.nmconnection`,
+                contents: [
+                    "[connection]",
+                    "type=ethernet",
+                    `id=${Cluster.ethernetInterfaceName}`,
+                    `interface-name=${Cluster.ethernetInterfaceName}`,
+                    "[ipv4]",
+                    "method=auto",
+                    "[ipv6]",
+                    "method=auto",
+                    "addr-gen-mode=eui64",
+                ].join("\n"),
+                mode: 0o600,
+            });
+            for (const vlan of vlans || []) {
+                const parentInterfaceName = vlan.interface ?? Cluster.ethernetInterfaceName;
+                const interfaceName = `${parentInterfaceName}.${vlan.id}`;
+                const ipv4 = ["never-default=true"];
+                const ipv6 = ["never-default=true"];
+                if (vlan.ipv4Address !== undefined) {
+                    ipv4.push("method=manual", `address1=${vlan.ipv4Address}`);
+                }
+                else {
+                    ipv4.push("method=auto");
+                }
+                if (vlan.ipv6Address !== undefined) {
+                    ipv6.push("method=manual", `address1=${vlan.ipv6Address}`);
+                }
+                else {
+                    ipv6.push("method=auto", "addr-gen-mode=eui64");
+                }
+                configs.push({
+                    path: `/etc/NetworkManager/system-connections/${interfaceName}.nmconnection`,
+                    contents: [
+                        "[connection]",
+                        `id=${interfaceName}`,
+                        "type=vlan",
+                        `interface-name=${interfaceName}`,
+                        "[vlan]",
+                        "egress-priority-map=",
+                        "flags=1",
+                        `id=${vlan.id}`,
+                        "ingress-priority-map=",
+                        `parent=${parentInterfaceName}`,
+                        "[ipv4]",
+                        ...ipv4,
+                        "[ipv6]",
+                        ...ipv6,
+                    ].join("\n"),
+                    mode: 0o600,
+                });
+            }
+            return configs;
+        });
+    }
+}
+exports.Cluster = Cluster;
+//# sourceMappingURL=cluster.js.map

package/lib/raspberrypi/cluster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cluster.js","sourceRoot":"","sources":["../../../lib/raspberrypi/cluster.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AAE9C,gCAAgC;AAChC,8BAA8B;AAoB9B,MAAa,OAAQ,SAAQ,0BAAiB;IACpC,MAAM,CAAU,WAAW,GAAG,QAAQ,CAAC;IACvC,MAAM,CAAU,qBAAqB,GAAG,MAAM,CAAC;IAEvC,IAAI,CAAwB;IAC5B,KAAK,CAA4C;IACjD,UAAU,CAAwB;IAClC,QAAQ,CAAe;IACvB,cAAc,CAAwB;IAEtD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAiB,EAAE,IAAsC;QACjF,KAAK,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE9B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE;YAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC;SACvG;aAAM;YACL,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACtC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAChC,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,iBAAiB,CACvB,CAAC;QAEF,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;YAC5D,OAAO,IAAI,GAAG,CAAC,OAAO,CACpB,IAAI,EACJ;gBACE,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;gBACxG,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,aAAa,EAAE,KAAK;gBACpB,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,EACD,SAAS,CACV,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAC9B,GAAG,IAAI,MAAM,EACb,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE,EAC/D,SAAS,CACV,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAEO,aAAa,CACnB,KAA8C,EAC9C,OAA8C,EAC9C,QAA+C,EAC/C,KAAmD,EACnD,WAA+D,EAC/D,KAAoD,EACpD,YAAiE,EACjE,iBAAwD;QAExD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE9B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAmF,EAAE,CAAC;YAEnG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;gBACrC,4DAA4D;gBAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEtB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC;gBAClF,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;gBAErG,MAAM,IAAI,GAAG,MAAM;qBAChB,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;qBAC9F,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,CAAC,EAAE,EAAE;oBACnG,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAC5B,QAAQ,EACR;wBACE,QAAQ;wBACR,KAAK,EAAE,MAAM;6BACV,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;6BAChB,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;wBAC/F,WAAW,EAAE,MAAM;6BAChB,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;6BACtB,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CACrB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CACnG;wBACH,KAAK,EAAE,MAAM;6BACV,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;6BAChB,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,MAAM;6BACH,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;6BACrB,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CACnB,MAAM;6BACH,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;6BAC3C,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CACzF,CACJ;wBACH,YAAY,EAAE,MAAM;6BACjB,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;6BACvB,KAAK,CAAC,CAAC,YAAY,EAAE,EAAE,CACtB,MAAM;6BACH,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;6BAC5B,KAAK,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CACtE;wBACH,QAAQ,EAAE,MAAM;6BACb,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;6BACnB,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAClB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CACvF;wBACH,OAAO,EAAE,MAAM;6BACZ,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;6BAClB,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACjB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CACnF;wBACH,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;4BAClD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;wBACtG,CAAC,CAAC;wBACF,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;qBAC5D,EACD,SAAS,CACV,CAAC;oBAEF,MAAM,KAAK,GAAa,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBAEzC,IAAI,YAAY,GAAG,KAAK,CAAC;oBACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;wBACxB,IAAI,IAAI,KAAK,YAAY,EAAE;4BACzB,YAAY,GAAG,IAAI,CAAC;4BACpB,MAAM;yBACP;qBACF;oBAED,IAAI,YAAY,EAAE;wBAChB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;qBACpB;oBAED,OAAO;wBACL,EAAE,EAAE,QAAQ;wBACZ,QAAQ;wBACR,KAAK;wBACL,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;wBAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;wBAC3C,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;wBACzB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;wBACzB,QAAQ,EAAE,OAAO,CAAC,WAAW;wBAC7B,UAAU,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,EAAE;4BAC3D,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE;gCACrC,IAAI,QAAQ,KAAK,OAAO,CAAC,WAAW,EAAE;oCACpC,4DAA4D;oCAC5D,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC,iBAAiB,CAAC;iCACnD;6BACF;4BAED,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;wBAC1E,CAAC,CAAC;wBACF,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;wBAChC,QAAQ;qBACT,CAAC;gBACJ,CAAC,CAAC,CAAC;gBAEL,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;aACtD;YAED,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,yBAAyB,CAAC,IAAe;QAC/C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE;YAChD,MAAM,OAAO,GAAqB,EAAE,CAAC;YAErC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,0CAA0C,OAAO,CAAC,qBAAqB,eAAe;gBAC5F,QAAQ,EAAE;oBACR,cAAc;oBACd,eAAe;oBACf,MAAM,OAAO,CAAC,qBAAqB,EAAE;oBACrC,kBAAkB,OAAO,CAAC,qBAAqB,EAAE;oBACjD,QAAQ;oBACR,aAAa;oBACb,QAAQ;oBACR,aAAa;oBACb,qBAAqB;iBACtB,CAAC,IAAI,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YAEH,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE;gBAC9B,MAAM,mBAAmB,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,qBAAqB,CAAC;gBAC5E,MAAM,aAAa,GAAG,GAAG,mBAAmB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBAE1D,MAAM,IAAI,GAAa,CAAC,oBAAoB,CAAC,CAAC;gBAC9C,MAAM,IAAI,GAAa,CAAC,oBAAoB,CAAC,CAAC;gBAE9C,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE;oBAClC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;iBAC5D;qBAAM;oBACL,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;iBAC1B;gBAED,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE;oBAClC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;iBAC5D;qBAAM;oBACL,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;iBACjD;gBAED,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,0CAA0C,aAAa,eAAe;oBAC5E,QAAQ,EAAE;wBACR,cAAc;wBACd,MAAM,aAAa,EAAE;wBACrB,WAAW;wBACX,kBAAkB,aAAa,EAAE;wBACjC,QAAQ;wBACR,sBAAsB;wBACtB,SAAS;wBACT,MAAM,IAAI,CAAC,EAAE,EAAE;wBACf,uBAAuB;wBACvB,UAAU,mBAAmB,EAAE;wBAC/B,QAAQ;wBACR,GAAG,IAAI;wBACP,QAAQ;wBACR,GAAG,IAAI;qBACR,CAAC,IAAI,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK;iBACZ,CAAC,CAAC;aACJ;YAED,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;;AA3PH,0BA4PC"}

package/lib/raspberrypi/{index.ts → index.d.ts}

@@ -1,3 +1,3 @@
 import { ClusterArgs, Cluster } from "./cluster";
-
 export { ClusterArgs, Cluster };
+//# sourceMappingURL=index.d.ts.map

package/lib/raspberrypi/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/raspberrypi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC"}

package/lib/raspberrypi/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Cluster = void 0;
+const cluster_1 = require("./cluster");
+Object.defineProperty(exports, "Cluster", { enumerable: true, get: function () { return cluster_1.Cluster; } });
+//# sourceMappingURL=index.js.map

package/lib/raspberrypi/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/raspberrypi/index.ts"],"names":[],"mappings":";;;AAAA,uCAAiD;AAE3B,wFAFA,iBAAO,OAEA"}