@ydkn/pulumi-components 0.4.4 → 0.4.5

package/lib/externalDns/operator.js

@@ -0,0 +1,112 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalDns = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+const common_1 = require("../common");
+const helm = require("../kubernetes/helm");
+class ExternalDns extends common_1.ComponentResource {
+    static crdBranch = "master";
+    crd;
+    providerSecret;
+    helmRelease;
+    namespace;
+    /**
+     * Create a new external-dns resource.
+     * @param name The name of external-dns resource.
+     * @param args A bag of arguments to control the external-dns creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("external-dns", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.replicas === undefined) {
+            args.replicas = 1;
+        }
+        this.crd = new k8s.yaml.ConfigFile(name, {
+            file: [
+                "https://raw.githubusercontent.com/kubernetes-sigs/external-dns",
+                ExternalDns.crdBranch,
+                "docs/contributing/crd-source/crd-manifest.yaml",
+            ].join("/"),
+        }, opts);
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        const helmValues = {
+            fullnameOverride: name,
+            logLevel: "info",
+            logFormat: "json",
+            policy: "sync",
+            registry: "txt",
+            txtOwnerId: args.clusterName,
+            txtPrefix: "_external-dns.",
+            sources: ["crd", "service", "ingress"],
+            extraArgs: ["--publish-internal-services", "--publish-host-ip"],
+            env: [],
+            provider: undefined,
+            serviceMonitor: { enabled: true },
+            affinity: {
+                podAntiAffinity: {
+                    preferredDuringSchedulingIgnoredDuringExecution: [
+                        {
+                            weight: 100,
+                            podAffinityTerm: {
+                                labelSelector: {
+                                    matchExpressions: [
+                                        { key: "app.kubernetes.io/name", operator: "In", values: ["external-dns"] },
+                                        { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
+                                    ],
+                                },
+                                topologyKey: "kubernetes.io/hostname",
+                            },
+                        },
+                    ],
+                },
+            },
+            resources: {
+                requests: { memory: "48Mi" },
+                limits: { memory: "64Mi" },
+            },
+        };
+        if (args.cloudflare !== undefined) {
+            this.providerSecret = new k8s.core.v1.Secret(name, {
+                metadata: { namespace: this.namespace, name: pulumi.interpolate `${name}-cloudflare` },
+                stringData: {
+                    cloudflare_api_token: pulumi.all([args.cloudflare]).apply(([cloudflare]) => cloudflare.apiToken),
+                },
+            }, opts);
+            helmValues.provider = "cloudflare";
+            helmValues.extraArgs = pulumi.all([helmValues.extraArgs, args.cloudflare]).apply(([extraArgs, cloudflare]) => {
+                if (cloudflare.proxied) {
+                    extraArgs.push("--cloudflare-proxied");
+                }
+                return extraArgs;
+            });
+            helmValues.env = pulumi.all([helmValues.env, args.cloudflare]).apply(([env, cloudflare]) => {
+                if (this.providerSecret !== undefined) {
+                    env.push({
+                        name: "CF_API_TOKEN",
+                        valueFrom: {
+                            secretKeyRef: {
+                                name: this.providerSecret.metadata.name,
+                                key: "cloudflare_api_token",
+                            },
+                        },
+                    });
+                }
+                return env;
+            });
+        }
+        this.helmRelease = new helm.v3.Release(name, {
+            name,
+            namespace: this.namespace,
+            repositoryOpts: { repo: "https://kubernetes-sigs.github.io/external-dns" },
+            chart: "external-dns",
+            values: helmValues,
+        }, opts);
+        this.registerOutputs();
+    }
+}
+exports.ExternalDns = ExternalDns;
+//# sourceMappingURL=operator.js.map

package/lib/externalDns/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../lib/externalDns/operator.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAC1C,sCAA8C;AAC9C,2CAA2C;AAgC3C,MAAa,WAAY,SAAQ,0BAAiB;IACxC,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC;IAEnB,GAAG,CAAsB;IACzB,cAAc,CAAsB;IACpC,WAAW,CAAkB;IAC9B,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAsC;QACrF,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAExC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;YAC/B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;SACnB;QAED,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAChC,IAAI,EACJ;YACE,IAAI,EAAE;gBACJ,gEAAgE;gBAChE,WAAW,CAAC,SAAS;gBACrB,gDAAgD;aACjD,CAAC,IAAI,CAAC,GAAG,CAAC;SACZ,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,UAAU,GAAG;YACjB,gBAAgB,EAAE,IAAI;YACtB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;YACtC,SAAS,EAAE,CAAC,6BAA6B,EAAE,mBAAmB,CAAyC;YACvG,GAAG,EAAE,EAAuC;YAC5C,QAAQ,EAAE,SAA+B;YACzC,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACjC,QAAQ,EAAE;gBACR,eAAe,EAAE;oBACf,+CAA+C,EAAE;wBAC/C;4BACE,MAAM,EAAE,GAAG;4BACX,eAAe,EAAE;gCACf,aAAa,EAAE;oCACb,gBAAgB,EAAE;wCAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE;wCAC3E,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;qCACtE;iCACF;gCACD,WAAW,EAAE,wBAAwB;6BACtC;yBACF;qBACF;iBACF;aACF;YACD,SAAS,EAAE;gBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;gBAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC3B;SACF,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE;YACjC,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAC1C,IAAI,EACJ;gBACE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,aAAa,EAAE;gBACrF,UAAU,EAAE;oBACV,oBAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;iBACjG;aACF,EACD,IAAI,CACL,CAAC;YAEF,UAAU,CAAC,QAAQ,GAAG,YAAY,CAAC;YAEnC,UAAU,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE;gBAC3G,IAAI,UAAU,CAAC,OAAO,EAAE;oBACtB,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;iBACxC;gBAED,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,UAAU,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE;gBACzF,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE;oBACrC,GAAG,CAAC,IAAI,CAAC;wBACP,IAAI,EAAE,cAAc;wBACpB,SAAS,EAAE;4BACT,YAAY,EAAE;gCACZ,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI;gCACvC,GAAG,EAAE,sBAAsB;6BAC5B;yBACF;qBACF,CAAC,CAAC;iBACJ;gBAED,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;SACJ;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CACpC,IAAI,EACJ;YACE,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,EAAE,IAAI,EAAE,gDAAgD,EAAE;YAC1E,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,UAAU;SACnB,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;;AAhIH,kCAiIC"}

package/lib/fcos/config.d.ts

@@ -0,0 +1,63 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+export interface UserArgs {
+    name: pulumi.Input<string>;
+    groups?: pulumi.Input<pulumi.Input<string>[]>;
+    sshAuthorizedKeys?: pulumi.Input<pulumi.Input<string>[]>;
+    passwordHash?: pulumi.Input<string>;
+}
+export interface PartitionArgs {
+    label: pulumi.Input<string>;
+    size: pulumi.Input<number>;
+    start?: pulumi.Input<number>;
+    number?: pulumi.Input<number>;
+    resize?: pulumi.Input<boolean>;
+}
+export interface DiskArgs {
+    device: pulumi.Input<string>;
+    partitions: pulumi.Input<pulumi.Input<PartitionArgs>[]>;
+    wipeTable?: pulumi.Input<boolean>;
+}
+export interface FilesystemArgs {
+    device: pulumi.Input<string>;
+    path: pulumi.Input<string>;
+    format: pulumi.Input<string>;
+    label?: pulumi.Input<string>;
+}
+export interface FilesArgs {
+    path: pulumi.Input<string>;
+    contents: pulumi.Input<string>;
+    mode?: pulumi.Input<number>;
+}
+export interface SystemdUnitArgs {
+    name: pulumi.Input<string>;
+    enabled?: pulumi.Input<boolean>;
+    mask?: pulumi.Input<boolean>;
+    contents?: pulumi.Input<string>;
+}
+export interface IgnitionArgs {
+    modules?: pulumi.Input<pulumi.Input<string>[]>;
+    packages?: pulumi.Input<pulumi.Input<string>[]>;
+    users?: pulumi.Input<pulumi.Input<UserArgs>[]>;
+    disks?: pulumi.Input<pulumi.Input<DiskArgs>[]>;
+    filesystems?: pulumi.Input<pulumi.Input<FilesystemArgs>[]>;
+    files?: pulumi.Input<pulumi.Input<FilesArgs>[]>;
+    systemdUnits?: pulumi.Input<pulumi.Input<SystemdUnitArgs>[]>;
+}
+export interface ConfigArgs extends IgnitionArgs {
+    hostname: pulumi.Input<string>;
+}
+export declare class Config extends ComponentResource {
+    readonly ignitionConfig: pulumi.Output<string>;
+    /**
+     * Create a new FCOS config resource.
+     * @param name The name of the FCOS config resource.
+     * @param args A bag of arguments to control the FCOS config creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ConfigArgs, opts?: pulumi.ComponentResourceOptions);
+    private defaultConfig;
+    private assetContent;
+    private storageContents;
+}
+//# sourceMappingURL=config.d.ts.map

package/lib/fcos/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../lib/fcos/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAIzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9C,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,UAAW,SAAQ,YAAY;IAC9C,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAChC;AAED,qBAAa,MAAO,SAAQ,iBAAiB;IAC3C,SAAgB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEtD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;IAsGlF,OAAO,CAAC,aAAa;IAqDrB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,eAAe;CAMxB"}

package/lib/fcos/config.js

@@ -0,0 +1,168 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Config = void 0;
+const pulumi = require("@pulumi/pulumi");
+const path = require("path");
+const fs = require("fs");
+const compress = require("zlib");
+const common_1 = require("../common");
+class Config extends common_1.ComponentResource {
+    ignitionConfig;
+    /**
+     * Create a new FCOS config resource.
+     * @param name The name of the FCOS config resource.
+     * @param args A bag of arguments to control the FCOS config creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("fcos:config", name, args, opts);
+        this.ignitionConfig = pulumi
+            .all([
+            this.defaultConfig(),
+            args.hostname,
+            args.modules,
+            args.packages,
+            args.users,
+            args.disks,
+            args.filesystems,
+            args.files,
+            args.systemdUnits,
+        ])
+            .apply(([config, hostname, modules, packages, users, disks, filesystems, files, systemdUnits]) => {
+            if (hostname !== undefined) {
+                config.storage.files.push({
+                    path: "/etc/hostname",
+                    contents: this.storageContents(hostname),
+                    mode: 0o644,
+                });
+            }
+            for (const module of modules || []) {
+                config.storage.files.push({
+                    path: `/etc/modules-load.d/${module}.conf`,
+                    contents: this.storageContents(module),
+                    mode: 0o644,
+                });
+            }
+            for (const pkg of packages || []) {
+                config.storage.files.push({ path: `/etc/rpm-opstree-install/${pkg}` });
+            }
+            for (const user of users || []) {
+                config.passwd.users.push(user);
+            }
+            for (const disk of disks || []) {
+                config.storage.disks.push({
+                    device: disk.device,
+                    partitions: disk.partitions.map((partition) => {
+                        return {
+                            label: partition.label,
+                            size_mib: partition.size,
+                            start_mib: partition.start,
+                            number: partition.number,
+                            resize: partition.resize,
+                        };
+                    }),
+                    wipe_table: disk.wipeTable,
+                });
+            }
+            for (const filesystem of filesystems || []) {
+                config.storage.filesystems.push({
+                    device: filesystem.device,
+                    path: filesystem.path,
+                    format: filesystem.format,
+                    label: filesystem.label,
+                });
+                const checkSystemdName = filesystem.device.replace(/-/g, "\\x2d").replace(/^\//, "").replace(/\//g, "-");
+                config.systemd.units.push({
+                    name: `${filesystem.path.replace(/^\//, "").replace(/\//g, "-")}.mount`,
+                    enabled: true,
+                    contents: [
+                        "[Unit]",
+                        "Before=local-fs.target",
+                        `Requires=systemd-fsck@${checkSystemdName}.service`,
+                        `After=systemd-fsck@${checkSystemdName}.service`,
+                        "[Mount]",
+                        `Where=${filesystem.path}`,
+                        `What=${filesystem.device}`,
+                        `Type=${filesystem.format}`,
+                        "[Install]",
+                        "RequiredBy=local-fs.target",
+                    ].join("\n"),
+                });
+            }
+            for (const file of files || []) {
+                config.storage.files.push({
+                    path: file.path,
+                    contents: this.storageContents(file.contents),
+                    mode: file.mode ?? 0o644,
+                });
+            }
+            for (const unit of systemdUnits || []) {
+                config.systemd.units.push(unit);
+            }
+            return JSON.stringify(config);
+        });
+        this.registerOutputs();
+    }
+    defaultConfig() {
+        return {
+            ignition: { version: "3.3.0" },
+            passwd: {
+                users: [],
+            },
+            storage: {
+                disks: [],
+                filesystems: [],
+                directories: [{ path: "/etc/rpm-opstree-install" }],
+                files: [
+                    {
+                        path: "/etc/sysctl.d/20-silence-audit.conf",
+                        contents: this.storageContents("kernel.printk=4"),
+                        mode: 0o644,
+                    },
+                    {
+                        overwrite: true,
+                        path: "/etc/sysctl.d/10-fs-inotify.conf",
+                        contents: this.storageContents("fs.inotify.max_user_instances = 8192\nfs.inotify.max_user_watches = 524288"),
+                    },
+                    {
+                        overwrite: true,
+                        path: "/etc/sysctl.d/90-ipv4-ip-forward.conf",
+                        contents: this.storageContents("net.ipv4.ip_forward = 1"),
+                    },
+                    {
+                        overwrite: true,
+                        path: "/etc/sysctl.d/90-ipv6-ip-forwarding.conf",
+                        contents: this.storageContents("net.ipv6.conf.all.forwarding = 1"),
+                    },
+                    { overwrite: false, path: "/etc/systemd/resolved.conf", append: [this.storageContents("LLMNR=no")] },
+                    {
+                        path: "/usr/local/sbin/rpm-opstree-install",
+                        contents: this.storageContents(this.assetContent("rpm-opstree-install.sh")),
+                        mode: 0o755,
+                    },
+                ],
+            },
+            systemd: {
+                units: [
+                    {
+                        name: "rpm-ostree-install.service",
+                        enabled: true,
+                        contents: this.assetContent("rpm-ostree-install.service"),
+                    },
+                ],
+            },
+        };
+    }
+    assetContent(filename) {
+        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        return fs.readFileSync(path.join(__dirname, "assets", filename), "utf-8");
+    }
+    storageContents(data) {
+        return {
+            compression: "gzip",
+            source: `data:;base64,${compress.gzipSync(Buffer.from(data), { level: 9 }).toString("base64")}`,
+        };
+    }
+}
+exports.Config = Config;
+//# sourceMappingURL=config.js.map

package/lib/fcos/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../lib/fcos/config.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,6BAA6B;AAC7B,yBAAyB;AACzB,iCAAiC;AACjC,sCAA8C;AAyD9C,MAAa,MAAO,SAAQ,0BAAiB;IAC3B,cAAc,CAAwB;IAEtD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAsC;QAChF,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEvC,IAAI,CAAC,cAAc,GAAG,MAAM;aACzB,GAAG,CAAC;YACH,IAAI,CAAC,aAAa,EAAE;YACpB,IAAI,CAAC,QAAQ;YACb,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,QAAQ;YACb,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,WAAW;YAChB,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,YAAY;SAClB,CAAC;aACD,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE,EAAE;YAC/F,IAAI,QAAQ,KAAK,SAAS,EAAE;gBAC1B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;oBACxC,IAAI,EAAE,KAAK;iBACZ,CAAC,CAAC;aACJ;YAED,KAAK,MAAM,MAAM,IAAI,OAAO,IAAI,EAAE,EAAE;gBAClC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,uBAAuB,MAAM,OAAO;oBAC1C,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;oBACtC,IAAI,EAAE,KAAK;iBACZ,CAAC,CAAC;aACJ;YAED,KAAK,MAAM,GAAG,IAAI,QAAQ,IAAI,EAAE,EAAE;gBAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4BAA4B,GAAG,EAAE,EAAE,CAAC,CAAC;aACxE;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE;gBAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAChC;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE;gBAC9B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAwB,EAAE,EAAE;wBAC3D,OAAO;4BACL,KAAK,EAAE,SAAS,CAAC,KAAK;4BACtB,QAAQ,EAAE,SAAS,CAAC,IAAI;4BACxB,SAAS,EAAE,SAAS,CAAC,KAAK;4BAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;4BACxB,MAAM,EAAE,SAAS,CAAC,MAAM;yBACzB,CAAC;oBACJ,CAAC,CAAC;oBACF,UAAU,EAAE,IAAI,CAAC,SAAS;iBAC3B,CAAC,CAAC;aACJ;YAED,KAAK,MAAM,UAAU,IAAI,WAAW,IAAI,EAAE,EAAE;gBAC1C,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;oBAC9B,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,KAAK,EAAE,UAAU,CAAC,KAAK;iBACxB,CAAC,CAAC;gBAEH,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAEzG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ;oBACvE,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE;wBACR,QAAQ;wBACR,wBAAwB;wBACxB,yBAAyB,gBAAgB,UAAU;wBACnD,sBAAsB,gBAAgB,UAAU;wBAChD,SAAS;wBACT,SAAS,UAAU,CAAC,IAAI,EAAE;wBAC1B,QAAQ,UAAU,CAAC,MAAM,EAAE;wBAC3B,QAAQ,UAAU,CAAC,MAAM,EAAE;wBAC3B,WAAW;wBACX,4BAA4B;qBAC7B,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb,CAAC,CAAC;aACJ;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE;gBAC9B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;iBACzB,CAAC,CAAC;aACJ;YAED,KAAK,MAAM,IAAI,IAAI,YAAY,IAAI,EAAE,EAAE;gBACrC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACjC;YAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAEO,aAAa;QACnB,OAAO;YACL,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;YAC9B,MAAM,EAAE;gBACN,KAAK,EAAE,EAAE;aACV;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,EAAE;gBACT,WAAW,EAAE,EAAE;gBACf,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;gBACnD,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,qCAAqC;wBAC3C,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC;wBACjD,IAAI,EAAE,KAAK;qBACZ;oBACD;wBACE,SAAS,EAAE,IAAI;wBACf,IAAI,EAAE,kCAAkC;wBACxC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAC5B,4EAA4E,CAC7E;qBACF;oBACD;wBACE,SAAS,EAAE,IAAI;wBACf,IAAI,EAAE,uCAAuC;wBAC7C,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,yBAAyB,CAAC;qBAC1D;oBACD;wBACE,SAAS,EAAE,IAAI;wBACf,IAAI,EAAE,0CAA0C;wBAChD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,kCAAkC,CAAC;qBACnE;oBACD,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,EAAE;oBACpG;wBACE,IAAI,EAAE,qCAAqC;wBAC3C,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,wBAAwB,CAAC,CAAC;wBAC3E,IAAI,EAAE,KAAK;qBACZ;iBACF;aACF;YACD,OAAO,EAAE;gBACP,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,4BAA4B;wBAClC,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC;qBAC1D;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,QAAgB;QACnC,mEAAmE;QACnE,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,OAAO;YACL,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,gBAAgB,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;SAChG,CAAC;IACJ,CAAC;CACF;AA/KD,wBA+KC"}

package/lib/fcos/host.d.ts

@@ -0,0 +1,34 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as tls from "@pulumi/tls";
+import { ComponentResource } from "../common";
+import { ConfigArgs } from "./config";
+export interface HostUserArgs {
+    /**
+     * Username
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Optional: Groups
+     */
+    groups?: pulumi.Input<pulumi.Input<string>[]>;
+}
+export interface HostArgs extends ConfigArgs {
+    /**
+     * Optional: Users with SSH access
+     */
+    sshUsers?: pulumi.Input<pulumi.Input<HostUserArgs>[]>;
+}
+export declare class Host extends ComponentResource {
+    readonly sshPrivateKeys: pulumi.Output<{
+        [key: string]: tls.PrivateKey;
+    }>;
+    readonly ignitionConfig: pulumi.Output<string>;
+    /**
+     * Create a new FCOS host resource.
+     * @param name The name of the FCOS host resource.
+     * @param args A bag of arguments to control the FCOS host creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: HostArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=host.d.ts.map

package/lib/fcos/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../../lib/fcos/host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAY,UAAU,EAAU,MAAM,UAAU,CAAC;AAExD,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,QAAS,SAAQ,UAAU;IAC1C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;CACvD;AAED,qBAAa,IAAK,SAAQ,iBAAiB;IACzC,SAAgB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,UAAU,CAAA;KAAE,CAAC,CAAC;IACjF,SAAgB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEtD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAyDjF"}

package/lib/fcos/host.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Host = void 0;
+const pulumi = require("@pulumi/pulumi");
+const tls = require("@pulumi/tls");
+const common_1 = require("../common");
+const config_1 = require("./config");
+class Host extends common_1.ComponentResource {
+    sshPrivateKeys;
+    ignitionConfig;
+    /**
+     * Create a new FCOS host resource.
+     * @param name The name of the FCOS host resource.
+     * @param args A bag of arguments to control the FCOS host creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("fcos:host", name, args, opts);
+        const emptyOpts = this.opts();
+        this.sshPrivateKeys = pulumi.all([args.sshUsers]).apply(([sshUsers]) => {
+            const sshPrivateKeys = {};
+            for (const sshUser of sshUsers || []) {
+                sshPrivateKeys[sshUser.name] = new tls.PrivateKey(`${name}-${sshUser.name}`, { algorithm: "ED25519" }, emptyOpts);
+            }
+            return sshPrivateKeys;
+        });
+        this.ignitionConfig = new config_1.Config(name, {
+            ...args,
+            modules: pulumi.all([args.modules]).apply(([modules]) => (modules || []).concat("wireguard")),
+            packages: pulumi
+                .all([args.packages])
+                .apply(([packages]) => (packages || []).concat("netcat", "tcpdump", "iperf3", "htop", "golang-gvisor")),
+            users: pulumi
+                .all([args.users, args.sshUsers, this.sshPrivateKeys])
+                .apply(([users, sshUsers, sshPrivateKeys]) => {
+                const allUsers = [];
+                for (const user of users || []) {
+                    allUsers.push(user);
+                }
+                for (const sshUser of sshUsers || []) {
+                    allUsers.push({
+                        name: sshUser.name,
+                        groups: sshUser.groups,
+                        sshAuthorizedKeys: sshPrivateKeys[sshUser.name].publicKeyOpenssh.apply((key) => [key.trim()]),
+                    });
+                }
+                return allUsers;
+            }),
+            systemdUnits: pulumi
+                .all([args.systemdUnits])
+                .apply(([systemdUnits]) => (systemdUnits || []).concat({ mask: true, name: "docker.service" }, { mask: true, name: "docker.socket" })),
+        }, emptyOpts).ignitionConfig;
+        this.registerOutputs();
+    }
+}
+exports.Host = Host;
+//# sourceMappingURL=host.js.map

package/lib/fcos/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../../lib/fcos/host.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,mCAAmC;AACnC,sCAA8C;AAC9C,qCAAwD;AAoBxD,MAAa,IAAK,SAAQ,0BAAiB;IACzB,cAAc,CAAmD;IACjE,cAAc,CAAwB;IAEtD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAc,EAAE,IAAsC;QAC9E,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAErC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE9B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE;YACrE,MAAM,cAAc,GAAsC,EAAE,CAAC;YAE7D,KAAK,MAAM,OAAO,IAAI,QAAQ,IAAI,EAAE,EAAE;gBACpC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAC/C,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EACzB,EAAE,SAAS,EAAE,SAAS,EAAE,EACxB,SAAS,CACV,CAAC;aACH;YAED,OAAO,cAAc,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,GAAG,IAAI,eAAM,CAC9B,IAAI,EACJ;YACE,GAAG,IAAI;YACP,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7F,QAAQ,EAAE,MAAM;iBACb,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;iBACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;YACzG,KAAK,EAAE,MAAM;iBACV,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;iBACrD,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAA6B,EAAE,CAAC;gBAE9C,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE;oBAC9B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACrB;gBAED,KAAK,MAAM,OAAO,IAAI,QAAQ,IAAI,EAAE,EAAE;oBACpC,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,iBAAiB,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;qBAC9F,CAAC,CAAC;iBACJ;gBAED,OAAO,QAAQ,CAAC;YAClB,CAAC,CAAC;YACJ,YAAY,EAAE,MAAM;iBACjB,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;iBACxB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CACxB,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAC3G;SACJ,EACD,SAAS,CACV,CAAC,cAAc,CAAC;QAEjB,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AAnED,oBAmEC"}

package/lib/fcos/index.d.ts

@@ -0,0 +1,4 @@
+import { PartitionArgs, DiskArgs, FilesystemArgs, UserArgs, FilesArgs, SystemdUnitArgs, IgnitionArgs, ConfigArgs, Config } from "./config";
+import { HostUserArgs, HostArgs, Host } from "./host";
+export { PartitionArgs, DiskArgs, FilesystemArgs, UserArgs, FilesArgs, SystemdUnitArgs, IgnitionArgs, ConfigArgs, Config, HostUserArgs, HostArgs, Host, };
+//# sourceMappingURL=index.d.ts.map

package/lib/fcos/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/fcos/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,QAAQ,EACR,cAAc,EACd,QAAQ,EACR,SAAS,EACT,eAAe,EACf,YAAY,EACZ,UAAU,EACV,MAAM,EACP,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAEtD,OAAO,EACL,aAAa,EACb,QAAQ,EACR,cAAc,EACd,QAAQ,EACR,SAAS,EACT,eAAe,EACf,YAAY,EACZ,UAAU,EACV,MAAM,EACN,YAAY,EACZ,QAAQ,EACR,IAAI,GACL,CAAC"}

package/lib/fcos/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Host = exports.Config = void 0;
+const config_1 = require("./config");
+Object.defineProperty(exports, "Config", { enumerable: true, get: function () { return config_1.Config; } });
+const host_1 = require("./host");
+Object.defineProperty(exports, "Host", { enumerable: true, get: function () { return host_1.Host; } });
+//# sourceMappingURL=index.js.map

package/lib/fcos/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/fcos/index.ts"],"names":[],"mappings":";;;AAAA,qCAUkB;AAYhB,uFAbA,eAAM,OAaA;AAXR,iCAAsD;AAcpD,qFAd+B,WAAI,OAc/B"}

package/lib/freeradius/deployment.d.ts

@@ -0,0 +1,40 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { ComponentResource } from "../common";
+export interface LdapArgs {
+    hostname: pulumi.Input<string>;
+    username: pulumi.Input<string>;
+    password: pulumi.Input<string>;
+    baseDN: pulumi.Input<string>;
+}
+export interface FreeRadiusServerArgs {
+    namespace?: pulumi.Input<string>;
+    hostname: pulumi.Input<string>;
+    domain: pulumi.Input<string>;
+    ldap: pulumi.Input<LdapArgs>;
+    resources?: pulumi.Input<k8s.types.input.core.v1.ResourceRequirements>;
+    protect?: boolean;
+}
+export declare class FreeRadiusServer extends ComponentResource {
+    private readonly localSecret;
+    private readonly configs;
+    private readonly issuer;
+    private readonly caCertificate;
+    private readonly caIssuer;
+    private readonly certificate;
+    private readonly deployment;
+    private readonly podDisruptionBudget;
+    private readonly service;
+    readonly namespace: pulumi.Output<string>;
+    readonly clientSecret: pulumi.Output<string>;
+    readonly ip: pulumi.Output<string>;
+    /**
+     * Create a new FreeRadius server resource.
+     * @param name The name of the FreeRadius server resource.
+     * @param args A bag of arguments to control the FreeRadius server creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: FreeRadiusServerArgs, opts?: pulumi.ComponentResourceOptions);
+    private static renderAssetTemplate;
+}
+//# sourceMappingURL=deployment.d.ts.map

package/lib/freeradius/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../lib/freeradius/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAG1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;IACvE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,gBAAiB,SAAQ,iBAAiB;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,SAAgB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,SAAgB,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE1C;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;IAmM5F,OAAO,CAAC,MAAM,CAAC,mBAAmB;CAGnC"}