@ydkn/pulumi-components 0.4.4 → 0.4.6

package/lib/hcloud/cluster.js

@@ -0,0 +1,344 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Cluster = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const random = __importStar(require("@pulumi/random"));
+const tls = __importStar(require("@pulumi/tls"));
+const hcloud = __importStar(require("@pulumi/hcloud"));
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const path = __importStar(require("path"));
+const common_1 = require("../common");
+const fcos = __importStar(require("../fcos"));
+const k0s = __importStar(require("../k0s"));
+const ssh = __importStar(require("../ssh"));
+const kubernetes_1 = require("./kubernetes");
+class Cluster extends common_1.ComponentResource {
+    static rescueSshUsername = "root";
+    static sshUsername = "pulumi";
+    static primaryInterface = "ens3";
+    static privateInterfaces = [10, 11, 12, 13, 14, 15, 16, 17, 18, 19].map((i) => `ens${i}`);
+    sshKey;
+    network;
+    nodeSubnet;
+    placementGroup;
+    sshFirewall;
+    nodesFirewall;
+    kubernetes;
+    name;
+    location;
+    zone;
+    sshPrivateKey;
+    sshPublicKey;
+    networkId;
+    networkRange;
+    nodeRange;
+    nodes;
+    kubeconfig;
+    provider;
+    kubeletDirPath;
+    /**
+     * Create a new hcloud cluster resource.
+     * @param name The name of hcloud cluster resource.
+     * @param args A bag of arguments to control the hcloud cluster creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("hcloud:cluster", name, args, opts);
+        const emptyOpts = this.opts();
+        const hcloudOpts = this.opts(hcloud.Provider);
+        if (args.name === undefined) {
+            this.name = new random.RandomId(name, { byteLength: 3 }, { ...emptyOpts, protect: args.protect }).hex;
+        }
+        else {
+            this.name = pulumi.output(args.name);
+        }
+        this.location = pulumi.output(args.location);
+        this.zone = pulumi.output(args.zone);
+        this.sshPrivateKey = new tls.PrivateKey(name, { algorithm: "ED25519" }, { ...emptyOpts, protect: args.protect });
+        this.sshPublicKey = this.sshPrivateKey.publicKeyOpenssh;
+        this.sshKey = new hcloud.SshKey(name, { name: "pulumi", publicKey: this.sshPublicKey }, hcloudOpts);
+        this.network = new hcloud.Network(name, { name: "private", ipRange: args.networkRange, labels: { cluster: this.name } }, { ...hcloudOpts, protect: args.protect });
+        this.networkId = this.network.id.apply((o) => parseInt(o));
+        this.networkRange = this.network.ipRange;
+        this.nodeSubnet = new hcloud.NetworkSubnet(`${name}-nodes`, { type: "cloud", networkId: this.networkId, networkZone: this.zone, ipRange: args.nodeRange }, { ...hcloudOpts, protect: args.protect });
+        this.nodeRange = this.nodeSubnet.ipRange;
+        this.placementGroup = new hcloud.PlacementGroup(name, { name: "nodes", type: "spread", labels: { cluster: this.name } }, hcloudOpts);
+        const serverImage = pulumi
+            .all([hcloud.getImages({ withStatuses: ["available"] }, hcloudOpts)])
+            .apply(([result]) => {
+            return result.images.filter((image) => image.osFlavor === "ubuntu").sort((a, b) => (a > b ? -1 : 1))[0].name;
+        });
+        const servers = this.createServers(args.nodes, serverImage, this.sshKey, this.sshPrivateKey.privateKeyOpenssh, this.nodeSubnet, this.placementGroup, args.modules, args.packages, args.files, args.systemdUnits, args.sshAuthorizedKeys, args.protect);
+        this.nodes = servers.apply((servers) => servers.map((s) => s.node));
+        const nodeIPs = pulumi.all([this.nodes]).apply(([nodes]) => pulumi.all(nodes).apply((nodes) => {
+            const nodeIPs = [];
+            for (const node of nodes) {
+                nodeIPs.push(pulumi.interpolate `${node.ipv4Address}/32`, pulumi.interpolate `${node.ipv6Address}/128`);
+                if (node.privateIpv4Address !== undefined) {
+                    nodeIPs.push(pulumi.interpolate `${node.privateIpv4Address}/32`);
+                }
+            }
+            if (nodeIPs.length <= 0) {
+                nodeIPs.push(pulumi.output("127.0.0.1/32"));
+            }
+            return nodeIPs;
+        }));
+        this.sshFirewall = new hcloud.Firewall(`${name}-ssh`, {
+            name: "ssh",
+            labels: { cluster: this.name },
+            applyTos: [{ labelSelector: pulumi.interpolate `cluster=${this.name}` }],
+            rules: [
+                {
+                    description: "SSH",
+                    direction: "in",
+                    protocol: "tcp",
+                    port: "22",
+                    sourceIps: pulumi
+                        .all([args.externalSshAccess])
+                        .apply(([externalSshAccess]) => externalSshAccess ? ["0.0.0.0/0", "::/0"] : ["127.0.0.1/32", "::1/128"]),
+                },
+            ],
+        }, hcloudOpts);
+        const nodeFirewallSourceIps = nodeIPs.apply((nodeIPs) => nodeIPs.concat(this.networkRange));
+        this.nodesFirewall = new hcloud.Firewall(`${name}-nodes`, {
+            name: "nodes",
+            labels: { cluster: this.name },
+            applyTos: [{ labelSelector: pulumi.interpolate `cluster=${this.name}` }],
+            rules: pulumi
+                .all([args.trustedNetworkRanges ?? [], nodeFirewallSourceIps])
+                .apply(([trustedNetworkRanges, nodeFirewallSourceIps]) => pulumi.all(trustedNetworkRanges.concat(nodeFirewallSourceIps)).apply((sourceIps) => [
+                { description: "ICMP", direction: "in", protocol: "icmp", sourceIps },
+                { description: "TCP", direction: "in", protocol: "tcp", port: "any", sourceIps },
+                { description: "UDP", direction: "in", protocol: "udp", port: "any", sourceIps },
+            ])),
+        }, hcloudOpts);
+        pulumi.all([args.externalAccess]).apply(([externalAccess]) => {
+            if (externalAccess) {
+                // eslint-disable-next-line no-unused-vars
+                const controllersFirewall = new hcloud.Firewall(`${name}-controllers`, {
+                    name: "controllers",
+                    labels: { cluster: this.name, controller: "true" },
+                    applyTos: [{ labelSelector: pulumi.interpolate `cluster=${this.name},role=controller` }],
+                    rules: [
+                        { description: "TCP", direction: "in", protocol: "tcp", port: "6443", sourceIps: ["0.0.0.0/0", "::/0"] },
+                    ],
+                }, hcloudOpts);
+            }
+        });
+        const k0sCluster = new k0s.Cluster(name, {
+            name: this.name,
+            nodes: this.nodes,
+            k0s: args.k0s,
+            cloudProvider: true,
+            protect: args.protect,
+        }, { ...emptyOpts, dependsOn: servers.apply((servers) => pulumi.all(servers.map((s) => s.depends))) });
+        this.kubeletDirPath = k0sCluster.kubeletDirPath;
+        this.kubeconfig = k0sCluster.kubeconfig;
+        this.provider = new k8s.Provider(`${name}-k8s`, { kubeconfig: this.kubeconfig, suppressHelmHookWarnings: true }, emptyOpts);
+        this.kubernetes = new kubernetes_1.Kubernetes(name, {
+            token: args.token,
+            network: this.network.id,
+            podCIDR: k0sCluster.spec.apply((spec) => spec.k0s
+                ? [spec.k0s.config?.spec?.network?.podCIDR, spec.k0s.config?.spec?.network?.dualStack?.IPv6podCIDR]
+                    .filter((cidr) => cidr !== undefined)
+                    .join(",")
+                : ""),
+            kubeletDirPath: this.kubeletDirPath,
+        }, { ...emptyOpts, providers: [this.provider] });
+        this.registerOutputs();
+    }
+    createServers(nodes, image, sshKey, sshPrivateKey, subnet, placementGroup, modules, packages, files, systemdUnits, sshAuthorizedKeys, protect) {
+        const emptyOpts = this.opts();
+        const hcloudOpts = this.opts(hcloud.Provider);
+        return pulumi.all([nodes]).apply(([nodes]) => {
+            const results = [];
+            for (const nodeGroup of nodes) {
+                let nodesCount = nodeGroup.count;
+                if (nodesCount === undefined) {
+                    nodesCount = 1;
+                }
+                for (let i = 0; i < nodesCount; i++) {
+                    const nodeId = new random.RandomId(`${nodeGroup.id}-${i}`, { byteLength: 3 }, emptyOpts).hex;
+                    const hostname = pulumi.interpolate `${this.name}-${k0s.Cluster.rolesHostname(nodeGroup.roles)}-${nodeId}`;
+                    const server = pulumi
+                        .all([this.name, hostname, nodeGroup.roles, sshKey, nodeId, placementGroup.id])
+                        .apply(([name, hostname, roles, sshKey, nodeId, placementGroupId]) => {
+                        const role = k0s.Cluster.rolesHostname(roles);
+                        return new hcloud.Server(hostname, {
+                            name: hostname,
+                            location: this.location,
+                            serverType: nodeGroup.serverType,
+                            image,
+                            rescue: "linux64",
+                            sshKeys: [sshKey.id],
+                            keepDisk: true,
+                            labels: { cluster: name, role, nodeId },
+                            placementGroupId: parseInt(placementGroupId),
+                        }, { ...hcloudOpts, ignoreChanges: ["sshKeys"], protect });
+                    });
+                    const serverNetwork = pulumi.all([server.id, server.name]).apply(([serverId, serverName]) => {
+                        return new hcloud.ServerNetwork(serverName, { serverId: parseInt(serverId), subnetId: subnet.id }, hcloudOpts);
+                    });
+                    const node = pulumi
+                        .all([hostname, modules, packages, files, systemdUnits, sshAuthorizedKeys, server.ipv6Address])
+                        .apply(([hostname, modules, packages, files, systemdUnits, sshAuthorizedKeys, ipv6Address]) => {
+                        const fcosHost = new fcos.Host(hostname, {
+                            hostname,
+                            files: pulumi.all(files || []).apply((files) => {
+                                files.push({
+                                    path: `/etc/NetworkManager/system-connections/${Cluster.primaryInterface}.nmconnection`,
+                                    contents: [
+                                        "[connection]",
+                                        "type=ethernet",
+                                        `id=${Cluster.primaryInterface}`,
+                                        `interface-name=${Cluster.primaryInterface}`,
+                                        "[ipv4]",
+                                        "method=auto",
+                                        "ignore-auto-dns=true",
+                                        "[ipv6]",
+                                        "method=manual",
+                                        `address1=${ipv6Address}`,
+                                        "gateway=fe80::1",
+                                        "dns=2a01:4ff:ff00::add:1;2a01:4ff:ff00::add:2",
+                                    ].join("\n"),
+                                    mode: 0o600,
+                                });
+                                for (const iface of Cluster.privateInterfaces) {
+                                    files.push({
+                                        path: `/etc/NetworkManager/system-connections/${iface}.nmconnection`,
+                                        contents: [
+                                            "[connection]",
+                                            "type=ethernet",
+                                            `id=${iface}`,
+                                            `interface-name=${iface}`,
+                                            "[ipv4]",
+                                            "method=auto",
+                                            "never-default=true",
+                                            "[ipv6]",
+                                            "method=auto",
+                                            "never-default=true",
+                                        ].join("\n"),
+                                        mode: 0o600,
+                                    });
+                                }
+                                return files;
+                            }),
+                            systemdUnits,
+                            packages,
+                            modules,
+                            users: [{ name: "core", sshAuthorizedKeys }],
+                            sshUsers: [{ name: Cluster.sshUsername, groups: ["sudo"] }],
+                        }, emptyOpts);
+                        const roles = nodeGroup.roles || [];
+                        let isController = false;
+                        for (const role of roles) {
+                            if (role === "controller") {
+                                isController = true;
+                                break;
+                            }
+                        }
+                        if (isController) {
+                            roles.push("etcd");
+                        }
+                        return {
+                            id: server.id,
+                            hostname,
+                            roles,
+                            ipv4Address: server.ipv4Address,
+                            privateIpv4Address: serverNetwork.ip,
+                            ipv6Address: server.ipv6Address,
+                            labels: nodeGroup.labels ?? {},
+                            taints: nodeGroup.taints ?? [],
+                            username: Cluster.sshUsername,
+                            privateKey: fcosHost.sshPrivateKeys.apply((sshPrivateKeys) => {
+                                for (const username in sshPrivateKeys) {
+                                    if (username === Cluster.sshUsername) {
+                                        // eslint-disable-next-line security/detect-object-injection
+                                        return sshPrivateKeys[username].privateKeyOpenssh;
+                                    }
+                                }
+                                throw new Error(`No private key found for user ${Cluster.sshUsername}`);
+                            }),
+                            fcosHost,
+                        };
+                    });
+                    results.push({
+                        node,
+                        depends: this.configureFcosNode(sshPrivateKey, server, node),
+                    });
+                }
+            }
+            return results;
+        });
+    }
+    configureFcosNode(sshPrivateKey, server, node) {
+        const emptyOpts = this.opts();
+        return pulumi.all([server.name, server.ipv4Address, node]).apply(([nodeName, ipv4Address, node]) => {
+            const connection = {
+                host: ipv4Address,
+                username: Cluster.rescueSshUsername,
+                privateKey: sshPrivateKey,
+                initialDelay: 10000,
+                retries: 20,
+            };
+            const fcosInstallScriptPathRemote = "/tmp/fcos-install.sh";
+            const fcosConfigPathRemote = "/tmp/fcos-config.ign";
+            const fcosInstallScript = new ssh.File(`${nodeName}-fcos-install-script`, {
+                connection,
+                changeToken: "",
+                src: { file: path.join(__dirname, "assets", "fcos-install.sh") },
+                dst: fcosInstallScriptPathRemote,
+            }, { ...emptyOpts, dependsOn: server, ignoreChanges: ["connection", "src"] });
+            const fcosConfigFile = new ssh.File(`${nodeName}-fcos-config`, {
+                connection,
+                changeToken: "",
+                src: { data: node.fcosHost.ignitionConfig },
+                dst: fcosConfigPathRemote,
+            }, { ...emptyOpts, dependsOn: server, ignoreChanges: ["connection", "src"] });
+            const fcosInstall = new ssh.Exec(`${nodeName}-fcos-install`, {
+                connection,
+                changeToken: "",
+                command: [
+                    `chmod +x ${fcosInstallScriptPathRemote}`,
+                    `${fcosInstallScriptPathRemote} /dev/sda ${fcosConfigPathRemote}`,
+                ].join(" && "),
+            }, { ...emptyOpts, dependsOn: [fcosInstallScript, fcosConfigFile], ignoreChanges: ["connection"] });
+            return new ssh.Exec(`${nodeName}-fcos-up`, {
+                connection: {
+                    host: ipv4Address,
+                    username: Cluster.sshUsername,
+                    privateKey: node.privateKey,
+                    initialDelay: 30000,
+                    retries: 20,
+                },
+                changeToken: "",
+                command: "ls /",
+            }, { ...emptyOpts, dependsOn: [fcosInstall], ignoreChanges: ["connection"] });
+        });
+    }
+}
+exports.Cluster = Cluster;
+//# sourceMappingURL=cluster.js.map

package/lib/hcloud/cluster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cluster.js","sourceRoot":"","sources":["../../../lib/hcloud/cluster.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uDAAyC;AACzC,uDAAyC;AACzC,iDAAmC;AACnC,uDAAyC;AACzC,wDAA0C;AAC1C,2CAA6B;AAC7B,sCAA8C;AAE9C,8CAAgC;AAChC,4CAA8B;AAC9B,4CAA8B;AAC9B,6CAA0C;AA4B1C,MAAa,OAAQ,SAAQ,0BAAiB;IACpC,MAAM,CAAU,iBAAiB,GAAG,MAAM,CAAC;IAC3C,MAAM,CAAU,WAAW,GAAG,QAAQ,CAAC;IACvC,MAAM,CAAU,gBAAgB,GAAG,MAAM,CAAC;IAC1C,MAAM,CAAU,iBAAiB,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE1F,MAAM,CAAgB;IACtB,OAAO,CAAiB;IACxB,UAAU,CAAuB;IACjC,cAAc,CAAwB;IACtC,WAAW,CAAkB;IAC7B,aAAa,CAAkB;IAC/B,UAAU,CAAa;IACxB,IAAI,CAAwB;IAC5B,QAAQ,CAAwB;IAChC,IAAI,CAAwB;IAC5B,aAAa,CAAiB;IAC9B,YAAY,CAAwB;IACpC,SAAS,CAAwB;IACjC,YAAY,CAAwB;IACpC,SAAS,CAAwB;IACjC,KAAK,CAA4C;IACjD,UAAU,CAAwB;IAClC,QAAQ,CAAe;IACvB,cAAc,CAAwB;IAEtD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAiB,EAAE,IAAsC;QACjF,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE9C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE;YAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC;SACvG;aAAM;YACL,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACtC;QAED,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErC,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACjH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,UAAU,CAAC,CAAC;QAEpG,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,CAC/B,IAAI,EACJ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAC/E,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CACzC,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAEzC,IAAI,CAAC,UAAU,GAAG,IAAI,MAAM,CAAC,aAAa,CACxC,GAAG,IAAI,QAAQ,EACf,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAC7F,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CACzC,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAEzC,IAAI,CAAC,cAAc,GAAG,IAAI,MAAM,CAAC,cAAc,CAC7C,IAAI,EACJ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EACjE,UAAU,CACX,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM;aACvB,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;aACpE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE;YAClB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/G,CAAC,CAAC,CAAC;QAEL,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAChC,IAAI,CAAC,KAAK,EACV,WAAW,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,aAAa,CAAC,iBAAiB,EACpC,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,OAAO,CACb,CAAC;QAEF,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CACzD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,OAAO,GAA4B,EAAE,CAAC;YAE5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;gBACxB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,CAAC,WAAW,KAAK,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,CAAC,WAAW,MAAM,CAAC,CAAC;gBAEtG,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE;oBACzC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,CAAC,kBAAkB,KAAK,CAAC,CAAC;iBACjE;aACF;YAED,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE;gBACvB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;aAC7C;YAED,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,MAAM,CAAC,QAAQ,CACpC,GAAG,IAAI,MAAM,EACb;YACE,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YAC9B,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,CAAA,WAAW,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,KAAK,EAAE;gBACL;oBACE,WAAW,EAAE,KAAK;oBAClB,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,KAAK;oBACf,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,MAAM;yBACd,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;yBAC7B,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAC7B,iBAAiB,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,SAAS,CAAC,CACxE;iBACJ;aACF;SACF,EACD,UAAU,CACX,CAAC;QAEF,MAAM,qBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAE5F,IAAI,CAAC,aAAa,GAAG,IAAI,MAAM,CAAC,QAAQ,CACtC,GAAG,IAAI,QAAQ,EACf;YACE,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YAC9B,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,CAAA,WAAW,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,KAAK,EAAE,MAAM;iBACV,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,EAAE,qBAAqB,CAAC,CAAC;iBAC7D,KAAK,CAAC,CAAC,CAAC,oBAAoB,EAAE,qBAAqB,CAAC,EAAE,EAAE,CACvD,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;gBAClF,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE;gBACrE,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE;gBAChF,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE;aACjF,CAAC,CACH;SACJ,EACD,UAAU,CACX,CAAC;QAEF,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE;YAC3D,IAAI,cAAc,EAAE;gBAClB,0CAA0C;gBAC1C,MAAM,mBAAmB,GAAG,IAAI,MAAM,CAAC,QAAQ,CAC7C,GAAG,IAAI,cAAc,EACrB;oBACE,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;oBAClD,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,CAAA,WAAW,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC;oBACvF,KAAK,EAAE;wBACL,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;qBACzG;iBACF,EACD,UAAU,CACX,CAAC;aACH;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAChC,IAAI,EACJ;YACE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,EACD,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CACnG,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAC9B,GAAG,IAAI,MAAM,EACb,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE,EAC/D,SAAS,CACV,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,uBAAU,CAC9B,IAAI,EACJ;YACE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YACxB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,IAAI,CAAC,GAAG;gBACN,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC;qBAC9F,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;qBACpC,IAAI,CAAC,GAAG,CAAC;gBACd,CAAC,CAAC,EAAE,CACP;YACD,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,EACD,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAC7C,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAEO,aAAa,CACnB,KAA0C,EAC1C,KAA2B,EAC3B,MAAmC,EACnC,aAAmC,EACnC,MAA4B,EAC5B,cAAqC,EACrC,OAA8C,EAC9C,QAA+C,EAC/C,KAAoD,EACpD,YAAiE,EACjE,iBAAwD,EACxD,OAAiB;QAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE9C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE;YAC3C,MAAM,OAAO,GAA6E,EAAE,CAAC;YAE7F,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE;gBAC7B,IAAI,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC;gBACjC,IAAI,UAAU,KAAK,SAAS,EAAE;oBAC5B,UAAU,GAAG,CAAC,CAAC;iBAChB;gBAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE;oBACnC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC;oBAC7F,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;oBAE1G,MAAM,MAAM,GAAG,MAAM;yBAClB,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;yBAC9E,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,EAAE;wBACnE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;wBAE9C,OAAO,IAAI,MAAM,CAAC,MAAM,CACtB,QAAQ,EACR;4BACE,IAAI,EAAE,QAAQ;4BACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,UAAU,EAAE,SAAS,CAAC,UAAU;4BAChC,KAAK;4BACL,MAAM,EAAE,SAAS;4BACjB,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;4BACpB,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;4BACvC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC;yBAC7C,EACD,EAAE,GAAG,UAAU,EAAE,aAAa,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CACvD,CAAC;oBACJ,CAAC,CAAC,CAAC;oBAEL,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE;wBAC1F,OAAO,IAAI,MAAM,CAAC,aAAa,CAC7B,UAAU,EACV,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EACrD,UAAU,CACX,CAAC;oBACJ,CAAC,CAAC,CAAC;oBAEH,MAAM,IAAI,GAAG,MAAM;yBAChB,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;yBAC9F,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAAE,EAAE;wBAC5F,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAC5B,QAAQ,EACR;4BACE,QAAQ;4BACR,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gCAC7C,KAAK,CAAC,IAAI,CAAC;oCACT,IAAI,EAAE,0CAA0C,OAAO,CAAC,gBAAgB,eAAe;oCACvF,QAAQ,EAAE;wCACR,cAAc;wCACd,eAAe;wCACf,MAAM,OAAO,CAAC,gBAAgB,EAAE;wCAChC,kBAAkB,OAAO,CAAC,gBAAgB,EAAE;wCAC5C,QAAQ;wCACR,aAAa;wCACb,sBAAsB;wCACtB,QAAQ;wCACR,eAAe;wCACf,YAAY,WAAW,EAAE;wCACzB,iBAAiB;wCACjB,+CAA+C;qCAChD,CAAC,IAAI,CAAC,IAAI,CAAC;oCACZ,IAAI,EAAE,KAAK;iCACZ,CAAC,CAAC;gCAEH,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,iBAAiB,EAAE;oCAC7C,KAAK,CAAC,IAAI,CAAC;wCACT,IAAI,EAAE,0CAA0C,KAAK,eAAe;wCACpE,QAAQ,EAAE;4CACR,cAAc;4CACd,eAAe;4CACf,MAAM,KAAK,EAAE;4CACb,kBAAkB,KAAK,EAAE;4CACzB,QAAQ;4CACR,aAAa;4CACb,oBAAoB;4CACpB,QAAQ;4CACR,aAAa;4CACb,oBAAoB;yCACrB,CAAC,IAAI,CAAC,IAAI,CAAC;wCACZ,IAAI,EAAE,KAAK;qCACZ,CAAC,CAAC;iCACJ;gCAED,OAAO,KAAK,CAAC;4BACf,CAAC,CAAC;4BACF,YAAY;4BACZ,QAAQ;4BACR,OAAO;4BACP,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;4BAC5C,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;yBAC5D,EACD,SAAS,CACV,CAAC;wBAEF,MAAM,KAAK,GAAa,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;wBAE9C,IAAI,YAAY,GAAG,KAAK,CAAC;wBACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;4BACxB,IAAI,IAAI,KAAK,YAAY,EAAE;gCACzB,YAAY,GAAG,IAAI,CAAC;gCACpB,MAAM;6BACP;yBACF;wBAED,IAAI,YAAY,EAAE;4BAChB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;yBACpB;wBAED,OAAO;4BACL,EAAE,EAAE,MAAM,CAAC,EAAE;4BACb,QAAQ;4BACR,KAAK;4BACL,WAAW,EAAE,MAAM,CAAC,WAAW;4BAC/B,kBAAkB,EAAE,aAAa,CAAC,EAAE;4BACpC,WAAW,EAAE,MAAM,CAAC,WAAW;4BAC/B,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,EAAE;4BAC9B,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,EAAE;4BAC9B,QAAQ,EAAE,OAAO,CAAC,WAAW;4BAC7B,UAAU,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,EAAE;gCAC3D,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE;oCACrC,IAAI,QAAQ,KAAK,OAAO,CAAC,WAAW,EAAE;wCACpC,4DAA4D;wCAC5D,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC,iBAAiB,CAAC;qCACnD;iCACF;gCAED,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;4BAC1E,CAAC,CAAC;4BACF,QAAQ;yBACT,CAAC;oBACJ,CAAC,CAAC,CAAC;oBAEL,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI;wBACJ,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC;qBAC7D,CAAC,CAAC;iBACJ;aACF;YAED,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CACvB,aAAmC,EACnC,MAAoC,EACpC,IAAwB;QAExB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE9B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE;YACjG,MAAM,UAAU,GAAuB;gBACrC,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,OAAO,CAAC,iBAAiB;gBACnC,UAAU,EAAE,aAAa;gBACzB,YAAY,EAAE,KAAK;gBACnB,OAAO,EAAE,EAAE;aACZ,CAAC;YAEF,MAAM,2BAA2B,GAAG,sBAAsB,CAAC;YAC3D,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;YAEpD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,IAAI,CACpC,GAAG,QAAQ,sBAAsB,EACjC;gBACE,UAAU;gBACV,WAAW,EAAE,EAAE;gBACf,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC,EAAE;gBAChE,GAAG,EAAE,2BAA2B;aACjC,EACD,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAC1E,CAAC;YAEF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CACjC,GAAG,QAAQ,cAAc,EACzB;gBACE,UAAU;gBACV,WAAW,EAAE,EAAE;gBACf,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE;gBAC3C,GAAG,EAAE,oBAAoB;aAC1B,EACD,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAC1E,CAAC;YAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAC9B,GAAG,QAAQ,eAAe,EAC1B;gBACE,UAAU;gBACV,WAAW,EAAE,EAAE;gBACf,OAAO,EAAE;oBACP,YAAY,2BAA2B,EAAE;oBACzC,GAAG,2BAA2B,aAAa,oBAAoB,EAAE;iBAClE,CAAC,IAAI,CAAC,MAAM,CAAC;aACf,EACD,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAChG,CAAC;YAEF,OAAO,IAAI,GAAG,CAAC,IAAI,CACjB,GAAG,QAAQ,UAAU,EACrB;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,OAAO,CAAC,WAAW;oBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,YAAY,EAAE,KAAK;oBACnB,OAAO,EAAE,EAAE;iBACZ;gBACD,WAAW,EAAE,EAAE;gBACf,OAAO,EAAE,MAAM;aAChB,EACD,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAC1E,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;;AArcH,0BAscC"}

package/lib/hcloud/{index.ts → index.d.ts}

@@ -1,5 +1,5 @@
 import { ClusterArgs, Cluster } from "./cluster";
 import { KubernetesArgs, Kubernetes } from "./kubernetes";
 import { WireguardArgs, Wireguard } from "./wireguard";
-
 export { ClusterArgs, Cluster, KubernetesArgs, Kubernetes, WireguardArgs, Wireguard };
+//# sourceMappingURL=index.d.ts.map

package/lib/hcloud/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/hcloud/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC"}

package/lib/hcloud/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Wireguard = exports.Kubernetes = exports.Cluster = void 0;
+const cluster_1 = require("./cluster");
+Object.defineProperty(exports, "Cluster", { enumerable: true, get: function () { return cluster_1.Cluster; } });
+const kubernetes_1 = require("./kubernetes");
+Object.defineProperty(exports, "Kubernetes", { enumerable: true, get: function () { return kubernetes_1.Kubernetes; } });
+const wireguard_1 = require("./wireguard");
+Object.defineProperty(exports, "Wireguard", { enumerable: true, get: function () { return wireguard_1.Wireguard; } });
+//# sourceMappingURL=index.js.map

package/lib/hcloud/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/hcloud/index.ts"],"names":[],"mappings":";;;AAAA,uCAAiD;AAI3B,wFAJA,iBAAO,OAIA;AAH7B,6CAA0D;AAGX,2FAHtB,uBAAU,OAGsB;AAFzD,2CAAuD;AAEmB,0FAFlD,qBAAS,OAEkD"}

package/lib/hcloud/kubernetes.d.ts

@@ -0,0 +1,27 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+/**
+ * Arguments for hcloud Kubernetes resource
+ */
+export interface KubernetesArgs {
+    token: pulumi.Input<string>;
+    network?: pulumi.Input<string>;
+    podCIDR?: pulumi.Input<string>;
+    kubeletDirPath?: pulumi.Input<string>;
+}
+export declare class Kubernetes extends ComponentResource {
+    private readonly secret;
+    private readonly cloudControllerManager;
+    private readonly csiDriver;
+    private readonly csiMetrics;
+    /**
+     * Create a new Hetzner cloud kubernetes resource.
+     * @param name The name of Hetzner cloud kubernetes resource.
+     * @param args A bag of arguments to control the Hetzner cloud kubernetes creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: KubernetesArgs, opts?: pulumi.ComponentResourceOptions);
+    private githubAssetURL;
+    private githubRepoURL;
+}
+//# sourceMappingURL=kubernetes.d.ts.map

package/lib/hcloud/kubernetes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetes.d.ts","sourceRoot":"","sources":["../../../lib/hcloud/kubernetes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACvC;AAED,qBAAa,UAAW,SAAQ,iBAAiB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAqC;IAC5E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;IAE5C;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;IAgKtF,OAAO,CAAC,cAAc;IAwBtB,OAAO,CAAC,aAAa;CAuBtB"}

package/lib/hcloud/kubernetes.js

@@ -0,0 +1,211 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Kubernetes = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const urllib_1 = require("urllib");
+const common_1 = require("../common");
+const kubernetes_1 = require("../kubernetes");
+const prometheus_1 = require("../prometheus");
+class Kubernetes extends common_1.ComponentResource {
+    secret;
+    cloudControllerManager;
+    csiDriver;
+    csiMetrics;
+    /**
+     * Create a new Hetzner cloud kubernetes resource.
+     * @param name The name of Hetzner cloud kubernetes resource.
+     * @param args A bag of arguments to control the Hetzner cloud kubernetes creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("hcloud:kubernetes", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        this.secret = new k8s.core.v1.Secret(`${name}-hcloud-secret`, {
+            metadata: { namespace: "kube-system", name: "hcloud" },
+            stringData: {
+                token: args.token,
+                network: args.network ? args.network : "",
+            },
+        }, opts);
+        this.cloudControllerManager = pulumi.all([args.network, args.podCIDR]).apply(([network, podCIDR]) => {
+            const transformations = [
+                (o) => {
+                    if (o.kind === "Deployment" && o.metadata.name === "hcloud-cloud-controller-manager") {
+                        for (const c of o.spec.template.spec.containers) {
+                            c.command = c.command.filter((c) => {
+                                return (!c.match(/--secure-port=/i) &&
+                                    !c.match(/--cluster-cidr=/i) &&
+                                    !c.match(/--allocate-node-cidrs=/i) &&
+                                    !c.match(/--configure-cloud-routes=/i));
+                            });
+                            c.command.push(`--secure-port=11258`);
+                            c.command.push(`--cluster-cidr=${podCIDR}`);
+                            c.command.push(`--allocate-node-cidrs=true`);
+                            c.command.push(`--configure-cloud-routes=${network !== undefined ? "false" : "false"}`); // TODO enable
+                            c.env = c.env.filter((e) => {
+                                return e.name !== "HCLOUD_INSTANCES_ADDRESS_FAMILY";
+                            });
+                            c.env.push({ name: "HCLOUD_INSTANCES_ADDRESS_FAMILY", value: "dualstack" });
+                        }
+                    }
+                },
+            ];
+            if (network !== undefined) {
+                return this.githubAssetURL("hetznercloud/hcloud-cloud-controller-manager", "ccm-networks.yaml").apply((url) => {
+                    return new k8s.yaml.ConfigFile(`${name}-hcloud-cloud-controller-manager`, { file: url, transformations }, { ...opts, dependsOn: [this.secret] });
+                });
+            }
+            else {
+                return this.githubAssetURL("hetznercloud/hcloud-cloud-controller-manager", "ccm.yaml").apply((url) => {
+                    return new k8s.yaml.ConfigFile(`${name}-hcloud-cloud-controller-manager`, { file: url, transformations }, { ...opts, dependsOn: [this.secret] });
+                });
+            }
+        });
+        this.csiDriver = pulumi
+            .all([this.githubRepoURL("hetznercloud/csi-driver", "deploy/kubernetes/hcloud-csi.yml"), args.kubeletDirPath])
+            .apply(([url, kubeletDirPath]) => {
+            return new k8s.yaml.ConfigFile(`${name}-hcloud-csi`, {
+                file: url,
+                transformations: [
+                    kubernetes_1.transformations.v1beta1Deprecations,
+                    (o) => {
+                        if (o.kind === "StatefulSet" || o.kind === "DaemonSet") {
+                            for (const c of o.spec.template.spec.containers) {
+                                if (c.env !== undefined) {
+                                    for (const env of c.env) {
+                                        if (env.name === "HCLOUD_TOKEN" &&
+                                            env.valueFrom !== undefined &&
+                                            env.valueFrom.secretKeyRef !== undefined) {
+                                            env.valueFrom.secretKeyRef.name = this.secret.metadata.name;
+                                        }
+                                    }
+                                }
+                            }
+                        }
+                    },
+                    (o) => {
+                        if (o.kind === "StatefulSet" && o.metadata.name === "hcloud-csi-controller") {
+                            o.spec.template.spec.tolerations = [
+                                { key: "CriticalAddonsOnly", operator: "Exists" },
+                                { key: "node-role.kubernetes.io/master", operator: "Exists", effect: "NoSchedule" },
+                                { key: "node-role.kubernetes.io/control-plane", operator: "Exists", effect: "NoSchedule" },
+                            ];
+                        }
+                    },
+                    (o) => {
+                        if (o.kind === "DaemonSet" && o.metadata.name === "hcloud-csi-node") {
+                            if (kubeletDirPath !== undefined) {
+                                for (const v of o.spec.template.spec.volumes) {
+                                    if (v.hostPath !== undefined) {
+                                        if (v.hostPath.path.startsWith("/var/lib/kubelet")) {
+                                            v.hostPath.path = v.hostPath.path.replace("/var/lib/kubelet", kubeletDirPath);
+                                        }
+                                    }
+                                }
+                                for (const c of o.spec.template.spec.containers) {
+                                    for (const v of c.volumeMounts) {
+                                        if (v.mountPath !== undefined) {
+                                            if (v.mountPath.startsWith("/var/lib/kubelet")) {
+                                                v.mountPath = v.mountPath.replace("/var/lib/kubelet", kubeletDirPath);
+                                            }
+                                        }
+                                    }
+                                }
+                            }
+                        }
+                    },
+                ],
+            }, opts);
+        });
+        this.csiMetrics = new prometheus_1.ServiceMonitor(`${name}-hcloud-csi`, {
+            metadata: {
+                name: "hcloud-csi",
+                namespace: "kube-system",
+                labels: { app: "hcloud-csi" },
+            },
+            spec: {
+                selector: { matchLabels: { app: "hcloud-csi" } },
+                endpoints: [
+                    {
+                        port: "metrics",
+                        honorLabels: true,
+                        metricRelabelings: [
+                            {
+                                action: "drop",
+                                sourceLabels: ["__name__"],
+                                regex: ["go_.*", "grpc_server_.*"].join("|"),
+                            },
+                        ],
+                    },
+                ],
+            },
+        }, { ...opts, dependsOn: [this.csiDriver] });
+        this.registerOutputs();
+    }
+    githubAssetURL(repo, filename, version) {
+        if (version === undefined) {
+            version = "latest";
+        }
+        const promise = new Promise((resolve, reject) => {
+            (0, urllib_1.request)(`https://api.github.com/repos/${repo}/releases/${version}`, { dataType: "json", gzip: true })
+                .then((body) => {
+                if (body.statusCode !== 200) {
+                    return reject(new Error(`failed to fetch releases for repo: ${repo}`));
+                }
+                resolve(`https://github.com/${repo}/releases/download/${body.data.tag_name}/${filename}`);
+            })
+                .catch(() => {
+                return reject(new Error(`failed to fetch asset URL for repo: ${repo}`));
+            });
+        });
+        return pulumi.all([promise]).apply(([promise]) => {
+            return promise;
+        });
+    }
+    githubRepoURL(repo, filename, version) {
+        if (version === undefined) {
+            version = "latest";
+        }
+        const promise = new Promise((resolve, reject) => {
+            (0, urllib_1.request)(`https://api.github.com/repos/${repo}/releases/${version}`, { dataType: "json", gzip: true })
+                .then((body) => {
+                if (body.statusCode !== 200) {
+                    return reject(new Error(`failed to fetch releases for repo: ${repo}`));
+                }
+                resolve(`https://raw.githubusercontent.com/${repo}/${body.data.tag_name}/${filename}`);
+            })
+                .catch(() => {
+                return reject(new Error(`failed to get repo url for repo: ${repo}`));
+            });
+        });
+        return pulumi.all([promise]).apply(([promise]) => {
+            return promise;
+        });
+    }
+}
+exports.Kubernetes = Kubernetes;
+//# sourceMappingURL=kubernetes.js.map