@ydkn/pulumi-components 0.4.4 → 0.4.5

package/lib/ssh/types.ts

@@ -1,20 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-
-export interface ConnectionArgs {
-  host: pulumi.Input<string>;
-  port?: pulumi.Input<number>;
-  username?: pulumi.Input<string>;
-  password?: pulumi.Input<string>;
-  privateKey?: pulumi.Input<string>;
-  privateKeyPassphrase?: pulumi.Input<string>;
-  initialDelay?: pulumi.Input<number>;
-  retries?: pulumi.Input<number>;
-  retryIntialBackoff?: pulumi.Input<number>;
-  retryBackoffFactor?: pulumi.Input<number>;
-}
-
-export interface ConnectionArgsInternal {
-  host: string;
-  port?: number;
-  username?: string;
-}

package/lib/torproxy/deployment.ts

@@ -1,165 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-import { ComponentResource } from "../common";
-import * as kubernetes from "../kubernetes";
-
-export interface TorProxyArgs {
-  /**
-   * Optional: Namespace
-   */
-  namespace?: pulumi.Input<string>;
-  /**
-   * Optional: Hostname
-   */
-  hostname?: pulumi.Input<string>;
-  /**
-   * Optional: Number of replicas
-   */
-  replicas?: pulumi.Input<number>;
-}
-
-export class TorProxy extends ComponentResource {
-  private static readonly healthCheckURL = "https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/";
-
-  private readonly deployment: k8s.apps.v1.Deployment;
-  private readonly podDisruptionBudget: k8s.policy.v1.PodDisruptionBudget;
-  private readonly service: kubernetes.v1.Service;
-  public readonly namespace: pulumi.Output<string>;
-
-  /**
-   * Create a new TOR proxy resource.
-   * @param name The name of the TOR proxy resource.
-   * @param args A bag of arguments to control the TOR proxy creation.
-   * @param opts A bag of options that control this resource's behavior.
-   */
-  constructor(name: string, args: TorProxyArgs, opts?: pulumi.ComponentResourceOptions) {
-    super("torproxy", name, args, opts);
-
-    opts = this.opts(k8s.Provider);
-
-    if (args.replicas === undefined) {
-      args.replicas = 1;
-    }
-
-    this.namespace = args.namespace
-      ? pulumi.output(args.namespace)
-      : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
-
-    const metadata = {
-      name,
-      namespace: this.namespace,
-      labels: {
-        "app.kubernetes.io/name": "torproxy",
-        "app.kubernetes.io/component": "torproxy",
-        "app.kubernetes.io/instance": name,
-      },
-    };
-
-    const probeCmd = [
-      "curl",
-      "--proxy",
-      "http://127.0.0.1:8118",
-      "--insecure",
-      "--silent",
-      "--output",
-      "/dev/null",
-      TorProxy.healthCheckURL,
-    ];
-
-    this.deployment = new k8s.apps.v1.Deployment(
-      name,
-      {
-        metadata,
-        spec: {
-          selector: { matchLabels: metadata.labels },
-          replicas: args.replicas,
-          template: {
-            metadata: { labels: metadata.labels },
-            spec: {
-              containers: [
-                {
-                  name: "torprivoxy",
-                  image: "avpnusr/torprivoxy:latest",
-                  imagePullPolicy: "Always",
-                  securityContext: { runAsUser: 102, runAsGroup: 102 },
-                  ports: [{ name: "proxy", protocol: "TCP", containerPort: 8118 }],
-                  readinessProbe: {
-                    exec: { command: probeCmd },
-                    periodSeconds: 30,
-                    successThreshold: 3,
-                    failureThreshold: 2,
-                    timeoutSeconds: 10,
-                  },
-                  livenessProbe: {
-                    exec: { command: probeCmd },
-                    periodSeconds: 60,
-                    failureThreshold: 10,
-                    timeoutSeconds: 10,
-                  },
-                  resources: {
-                    requests: { memory: "48Mi" },
-                    limits: { memory: "64Mi" },
-                  },
-                },
-              ],
-              affinity: {
-                podAntiAffinity: {
-                  preferredDuringSchedulingIgnoredDuringExecution: [
-                    {
-                      weight: 100,
-                      podAffinityTerm: {
-                        labelSelector: {
-                          matchExpressions: [
-                            {
-                              key: "app.kubernetes.io/name",
-                              operator: "In",
-                              values: [metadata.labels["app.kubernetes.io/name"]],
-                            },
-                            {
-                              key: "app.kubernetes.io/instance",
-                              operator: "In",
-                              values: [metadata.labels["app.kubernetes.io/instance"]],
-                            },
-                          ],
-                        },
-                        topologyKey: "kubernetes.io/hostname",
-                      },
-                    },
-                  ],
-                },
-              },
-            },
-          },
-        },
-      },
-      opts
-    );
-
-    this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(
-      name,
-      {
-        metadata,
-        spec: {
-          minAvailable: 1,
-          selector: { matchLabels: metadata.labels },
-        },
-      },
-      opts
-    );
-
-    this.service = new kubernetes.v1.Service(
-      name,
-      {
-        hostnames: args.hostname ? [args.hostname] : undefined,
-        metadata,
-        spec: {
-          selector: metadata.labels,
-          ports: [{ name: "proxy", protocol: "TCP", port: 8118 }],
-        },
-      },
-      { ...opts, dependsOn: [this.deployment] }
-    );
-
-    this.registerOutputs();
-  }
-}

package/lib/traefik/controller.ts

@@ -1,207 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-import * as fs from "fs";
-import * as path from "path";
-import { ComponentResource } from "../common";
-import * as kubernetes from "../kubernetes";
-import { ServiceMonitor } from "../prometheus";
-import { Dashboard } from "../grafana";
-
-export interface TraefikArgs {
-  namespace?: pulumi.Input<string>;
-  replicas?: pulumi.Input<number>;
-  serviceType?: pulumi.Input<string>;
-  serviceAnnotations?: { [key: string]: pulumi.Input<string> };
-  ingressClass?: pulumi.Input<string>;
-  defaultIngressClass?: pulumi.Input<boolean>;
-  proxyProtocolIPs?: pulumi.Input<pulumi.Input<string>[]>;
-}
-
-export class Traefik extends ComponentResource {
-  private readonly helmRelease: kubernetes.helm.v3.Release;
-  private readonly metricsService: k8s.core.v1.Service;
-  private readonly serviceMonitor: ServiceMonitor;
-  private readonly grafanaDashboard: Dashboard;
-  public readonly namespace: pulumi.Output<string>;
-  public readonly ingressClassName: pulumi.Output<string>;
-
-  /**
-   * Create a new traefik ingress controller resource.
-   * @param name The name of the traefik ingress controller resource.
-   * @param args A bag of arguments to control the traefik ingress controller creation.
-   * @param opts A bag of options that control this resource's behavior.
-   */
-  constructor(name: string, args: TraefikArgs, opts?: pulumi.ComponentResourceOptions) {
-    super("traefik:controller", name, args, opts);
-
-    opts = this.opts(k8s.Provider);
-
-    if (args.replicas === undefined) {
-      args.replicas = 1;
-    }
-
-    if (args.serviceType === undefined) {
-      args.serviceType = "ClusterIP";
-    }
-
-    if (args.serviceAnnotations === undefined) {
-      args.serviceAnnotations = {};
-    }
-
-    this.namespace = args.namespace
-      ? pulumi.output(args.namespace)
-      : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
-
-    this.ingressClassName = pulumi.output(args.ingressClass ?? "traefik");
-
-    this.helmRelease = new kubernetes.helm.v3.Release(
-      name,
-      {
-        name,
-        namespace: this.namespace,
-        repositoryOpts: { repo: "https://helm.traefik.io/traefik" },
-        chart: "traefik",
-        values: {
-          fullnameOverride: name,
-          deployment: {
-            replicas: args.replicas,
-            minReadySeconds: 10,
-          },
-          globalArguments: [],
-          additionalArguments: pulumi.all([args.proxyProtocolIPs]).apply(([proxyProtocolIPs]) => {
-            const args = [
-              "--entrypoints.web.http.redirections.entryPoint.to=:443",
-              "--entrypoints.web.http.redirections.entryPoint.scheme=https",
-              "--entrypoints.web.http.redirections.entrypoint.permanent=true",
-              "--serversTransport.insecureSkipVerify=true",
-            ];
-
-            if (proxyProtocolIPs !== undefined && proxyProtocolIPs.length > 0) {
-              args.push(`--entrypoints.web.proxyprotocol.trustedips=${proxyProtocolIPs.join(",")}`);
-              args.push(`--entrypoints.websecure.proxyprotocol.trustedips=${proxyProtocolIPs.join(",")}`);
-            }
-
-            return args;
-          }),
-          providers: {
-            kubernetesCRD: {
-              ingressClass: args.ingressClass,
-            },
-            kubernetesIngress: {
-              ingressClass: args.ingressClass,
-              publishedService: { enabled: true },
-              allowExternalNameServices: true,
-            },
-          },
-          ingressClass: {
-            enabled: true,
-            isDefaultClass: args.defaultIngressClass ?? false,
-            fallbackApiVersion: "v1",
-          },
-          ingressRoute: { dashboard: { enabled: false } },
-          logs: {
-            general: { format: "json" },
-          },
-          service: {
-            type: args.serviceType,
-            annotations: args.serviceAnnotations,
-          },
-          metrics: {
-            prometheus: { entryPoint: "metrics", addRoutersLabels: true },
-          },
-          podDisruptionBudget: {
-            enabled: true,
-            maxUnavailable: "33%",
-          },
-          affinity: {
-            podAntiAffinity: {
-              preferredDuringSchedulingIgnoredDuringExecution: [
-                {
-                  weight: 100,
-                  podAffinityTerm: {
-                    labelSelector: {
-                      matchExpressions: [
-                        { key: "app.kubernetes.io/name", operator: "In", values: ["traefik"] },
-                        { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
-                      ],
-                    },
-                    topologyKey: "kubernetes.io/hostname",
-                  },
-                },
-              ],
-            },
-          },
-          resources: {
-            requests: { memory: "64Mi" },
-            limits: { memory: "96Mi" },
-          },
-        },
-      },
-      opts
-    );
-
-    const metricsMetadata = {
-      name: `${name}-metrics`,
-      namespace: this.namespace,
-      labels: {
-        "app.kubernetes.io/name": "traefik",
-        "app.kubernetes.io/instance": name,
-      },
-    };
-
-    this.metricsService = new k8s.core.v1.Service(
-      `${name}-metrics`,
-      {
-        metadata: metricsMetadata,
-        spec: {
-          selector: metricsMetadata.labels,
-          ports: [{ name: "metrics", port: 9100, targetPort: "metrics" }],
-        },
-      },
-      { ...opts, dependsOn: [this.helmRelease] }
-    );
-
-    this.serviceMonitor = new ServiceMonitor(
-      `${name}-metrics`,
-      {
-        metadata: metricsMetadata,
-        spec: {
-          namespaceSelector: { matchNames: [this.namespace] },
-          selector: { matchLabels: metricsMetadata.labels },
-          endpoints: [
-            {
-              port: "metrics",
-              honorLabels: true,
-              metricRelabelings: [
-                {
-                  action: "drop",
-                  sourceLabels: ["__name__"],
-                  regex: ["go_.*"].join("|"),
-                },
-                {
-                  action: "drop",
-                  sourceLabels: ["entrypoint"],
-                  regex: ["metrics", "traefik"].join("|"),
-                },
-              ],
-            },
-          ],
-        },
-      },
-      { ...opts, dependsOn: [this.metricsService] }
-    );
-
-    this.grafanaDashboard = new Dashboard(
-      `${name}-grafana-dashboard`,
-      {
-        metadata: { namespace: this.namespace, name: pulumi.interpolate`${name}-grafana-dashboard` },
-        name: "traefik",
-        // eslint-disable-next-line security/detect-non-literal-fs-filename
-        data: fs.readFileSync(path.join(__dirname, "assets", "dashboard.json"), "utf-8"),
-      },
-      opts
-    );
-
-    this.registerOutputs();
-  }
-}

package/lib/traefik/middleware.ts

@@ -1,37 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-
-export interface MiddlewareHeadersArgs {
-  customRequestHeaders?: pulumi.Input<{ [key: string]: pulumi.Input<string> }>;
-  customResponseHeaders?: pulumi.Input<{ [key: string]: pulumi.Input<string> }>;
-}
-
-export interface MiddlewareSpecArgs {
-  headers?: pulumi.Input<MiddlewareHeadersArgs>;
-}
-
-export interface MiddlewareArgs {
-  metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
-  spec: pulumi.Input<MiddlewareSpecArgs>;
-}
-
-export class Middleware extends k8s.apiextensions.CustomResource {
-  /**
-   * Create a new middlware resource.
-   * @param name The name of the middlware resource.
-   * @param args A bag of arguments to control the middlware creation.
-   * @param opts A bag of options that control this resource's behavior.
-   */
-  constructor(name: string, args: MiddlewareArgs, opts?: pulumi.CustomResourceOptions) {
-    super(
-      name,
-      {
-        apiVersion: "traefik.containo.us/v1alpha1",
-        kind: "Middleware",
-        metadata: args.metadata,
-        spec: args.spec,
-      },
-      opts
-    );
-  }
-}

package/lib/traefik/secureIngress.ts

@@ -1,81 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-
-export interface SecureIngressArgs {
-  /**
-   * Metadata for the ingress resource
-   */
-  metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
-  /**
-   * Spec for the ingress resource
-   */
-  spec: pulumi.Input<k8s.types.input.networking.v1.IngressSpec>;
-  /**
-   * Optional: Name of issuer
-   */
-  issuer?: pulumi.Input<string>;
-  /**
-   * Optional: Name of cluster issuer
-   */
-  clusterIssuer?: pulumi.Input<string>;
-}
-
-export class SecureIngress extends k8s.networking.v1.Ingress {
-  private static readonly defaultClusterIssuer = "letsencrypt";
-
-  /**
-   * Create a new secure ingress resource.
-   * @param name The name of the secure ingress resource.
-   * @param args A bag of arguments to control the secure ingress creation.
-   * @param opts A bag of options that control this resource's behavior.
-   */
-  constructor(name: string, args: SecureIngressArgs, opts?: pulumi.CustomResourceOptions) {
-    const ingressArgs = pulumi
-      .all([args.metadata, args.spec, args.issuer, args.clusterIssuer])
-      .apply(([metadataWrapped, specWrapped, issuer, clusterIssuer]) => {
-        const metadata = metadataWrapped as k8s.types.input.meta.v1.ObjectMeta;
-        const spec = specWrapped as k8s.types.input.networking.v1.IngressSpec;
-
-        if (metadata.annotations === undefined) {
-          metadata.annotations = {};
-        }
-
-        const annotations: { [key: string]: pulumi.Input<string> } = {
-          "traefik.ingress.kubernetes.io/router.entrypoints": "websecure",
-          "traefik.ingress.kubernetes.io/router.tls": "true",
-        };
-
-        if (issuer !== undefined) {
-          annotations["cert-manager.io/issuer"] = issuer;
-        } else if (clusterIssuer !== undefined) {
-          annotations["cert-manager.io/cluster-issuer"] = clusterIssuer;
-        } else {
-          annotations["cert-manager.io/cluster-issuer"] = SecureIngress.defaultClusterIssuer;
-        }
-
-        metadata.annotations = { ...annotations, ...metadata.annotations };
-
-        if (spec.tls === undefined) {
-          spec.tls = [{ hosts: SecureIngress.hosts(spec.rules), secretName: pulumi.interpolate`${name}-tls` }];
-        }
-
-        return { metadata, spec };
-      });
-
-    super(name, ingressArgs, opts);
-  }
-
-  private static hosts(rules?: pulumi.Input<pulumi.Input<k8s.types.input.networking.v1.IngressRule>[]>): string[] {
-    if (rules === undefined) {
-      return [];
-    }
-
-    return (rules as k8s.types.input.networking.v1.IngressRule[])
-      .map((r) => {
-        return r.host;
-      })
-      .filter((h) => {
-        return h !== undefined;
-      }) as string[];
-  }
-}