@ydkn/pulumi-components 0.4.4 → 0.4.6

package/lib/aws/bucket.d.ts

@@ -0,0 +1,28 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as aws from "@pulumi/aws";
+import { ComponentResource } from "../common";
+import { AccessKey } from "./accessKey";
+export interface BucketArgs extends aws.s3.BucketArgs {
+    /**
+     * Optional: Name
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Optional: Protect critical resources
+     */
+    protect?: boolean;
+}
+export declare class Bucket extends ComponentResource {
+    private readonly id;
+    readonly bucket: aws.s3.Bucket;
+    readonly accessKey: AccessKey;
+    readonly userPolicy: aws.iam.UserPolicy;
+    /**
+     * Create a new AWS bucket resource.
+     * @param name The name of the AWS bucket resource.
+     * @param args A bag of arguments to control the AWS bucket creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: BucketArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=bucket.d.ts.map

package/lib/aws/bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket.d.ts","sourceRoot":"","sources":["../../../lib/aws/bucket.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,WAAW,UAAW,SAAQ,GAAG,CAAC,EAAE,CAAC,UAAU;IACnD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,MAAO,SAAQ,iBAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAwB;IAC3C,SAAgB,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;IACtC,SAAgB,SAAS,EAAE,SAAS,CAAC;IACrC,SAAgB,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;IAE/C;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAyCnF"}

package/lib/aws/bucket.js

@@ -0,0 +1,72 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Bucket = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const random = __importStar(require("@pulumi/random"));
+const aws = __importStar(require("@pulumi/aws"));
+const common_1 = require("../common");
+const accessKey_1 = require("./accessKey");
+class Bucket extends common_1.ComponentResource {
+    id;
+    bucket;
+    accessKey;
+    userPolicy;
+    /**
+     * Create a new AWS bucket resource.
+     * @param name The name of the AWS bucket resource.
+     * @param args A bag of arguments to control the AWS bucket creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("aws:bucket", name, args, opts);
+        const emptyOpts = this.opts();
+        const awsOpts = this.opts(aws.Provider);
+        this.id = new random.RandomId(`${name}-bucket`, { byteLength: 6, prefix: pulumi.interpolate `${args.name ?? name}-` }, { ...emptyOpts, protect: args.protect }).hex;
+        this.bucket = new aws.s3.Bucket(name, { ...args, bucket: this.id }, { ...awsOpts, protect: args.protect });
+        this.accessKey = new accessKey_1.AccessKey(name, { name: this.id }, awsOpts);
+        this.userPolicy = new aws.iam.UserPolicy(name, {
+            user: this.accessKey.user.name,
+            policy: {
+                Version: "2012-10-17",
+                Statement: [
+                    {
+                        Effect: "Allow",
+                        Action: ["s3:ListBucket"],
+                        Resource: [pulumi.interpolate `arn:aws:s3:::${this.bucket.id}`],
+                    },
+                    {
+                        Effect: "Allow",
+                        Action: ["s3:*"],
+                        Resource: [pulumi.interpolate `arn:aws:s3:::${this.bucket.id}/*`],
+                    },
+                ],
+            },
+        }, awsOpts);
+        this.registerOutputs();
+    }
+}
+exports.Bucket = Bucket;
+//# sourceMappingURL=bucket.js.map

package/lib/aws/bucket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket.js","sourceRoot":"","sources":["../../../lib/aws/bucket.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uDAAyC;AACzC,uDAAyC;AACzC,iDAAmC;AACnC,sCAA8C;AAC9C,2CAAwC;AAaxC,MAAa,MAAO,SAAQ,0BAAiB;IAC1B,EAAE,CAAwB;IAC3B,MAAM,CAAgB;IACtB,SAAS,CAAY;IACrB,UAAU,CAAqB;IAE/C;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAsC;QAChF,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,EAAE,GAAG,IAAI,MAAM,CAAC,QAAQ,CAC3B,GAAG,IAAI,SAAS,EAChB,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,EAAE,EACpE,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CACxC,CAAC,GAAG,CAAC;QAEN,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAE3G,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAEjE,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CACtC,IAAI,EACJ;YACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI;YAC9B,MAAM,EAAE;gBACN,OAAO,EAAE,YAAY;gBACrB,SAAS,EAAE;oBACT;wBACE,MAAM,EAAE,OAAO;wBACf,MAAM,EAAE,CAAC,eAAe,CAAC;wBACzB,QAAQ,EAAE,CAAC,MAAM,CAAC,WAAW,CAAA,gBAAgB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;qBAC/D;oBACD;wBACE,MAAM,EAAE,OAAO;wBACf,MAAM,EAAE,CAAC,MAAM,CAAC;wBAChB,QAAQ,EAAE,CAAC,MAAM,CAAC,WAAW,CAAA,gBAAgB,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;qBACjE;iBACF;aACF;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AArDD,wBAqDC"}

package/lib/aws/{index.ts → index.d.ts}

@@ -1,4 +1,4 @@
 import { AccessKeyArgs, AccessKey } from "./accessKey";
 import { BucketArgs, Bucket } from "./bucket";
-
 export { AccessKeyArgs, AccessKey, BucketArgs, Bucket };
+//# sourceMappingURL=index.d.ts.map

package/lib/aws/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/aws/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC"}

package/lib/aws/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Bucket = exports.AccessKey = void 0;
+const accessKey_1 = require("./accessKey");
+Object.defineProperty(exports, "AccessKey", { enumerable: true, get: function () { return accessKey_1.AccessKey; } });
+const bucket_1 = require("./bucket");
+Object.defineProperty(exports, "Bucket", { enumerable: true, get: function () { return bucket_1.Bucket; } });
+//# sourceMappingURL=index.js.map

package/lib/aws/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/aws/index.ts"],"names":[],"mappings":";;;AAAA,2CAAuD;AAG/B,0FAHA,qBAAS,OAGA;AAFjC,qCAA8C;AAEC,uFAF1B,eAAM,OAE0B"}

package/lib/blocky/deployment.d.ts

@@ -0,0 +1,25 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ComponentResource } from "../common";
+export interface BlockyArgs {
+    namespace?: pulumi.Input<string>;
+    nameservers?: pulumi.Input<pulumi.Input<string>[]>;
+    blocklists?: pulumi.Input<{
+        [key: string]: pulumi.Input<pulumi.Input<string>[]>;
+    }>;
+    hostname?: pulumi.Input<string>;
+    replicas?: pulumi.Input<number>;
+}
+export declare class Blocky extends ComponentResource {
+    private readonly helmRelease;
+    private readonly service;
+    private readonly grafanaDashboard;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new Blocky resource.
+     * @param name The name of the Blocky resource.
+     * @param args A bag of arguments to control the Blocky creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: BlockyArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=deployment.d.ts.map

package/lib/blocky/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../lib/blocky/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAKzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACjC;AAED,qBAAa,MAAO,SAAQ,iBAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAY;IAC7C,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAwGnF"}

package/lib/blocky/deployment.js

@@ -0,0 +1,130 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Blocky = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const yaml = __importStar(require("js-yaml"));
+const common_1 = require("../common");
+const kubernetes = __importStar(require("../kubernetes"));
+const grafana_1 = require("../grafana");
+class Blocky extends common_1.ComponentResource {
+    helmRelease;
+    service;
+    grafanaDashboard;
+    namespace;
+    /**
+     * Create a new Blocky resource.
+     * @param name The name of the Blocky resource.
+     * @param args A bag of arguments to control the Blocky creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("blocky", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.replicas === undefined) {
+            args.replicas = 1;
+        }
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "blocky",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.helmRelease = new kubernetes.helm.v3.Release(name, {
+            name: metadata.name,
+            namespace: metadata.namespace,
+            repositoryOpts: { repo: "https://k8s-at-home.com/charts/" },
+            chart: "blocky",
+            values: {
+                fullnameOverride: name,
+                controller: { replicas: args.replicas },
+                config: pulumi.all([args.nameservers, args.blocklists]).apply(([nameservers, blocklists]) => yaml.dump({
+                    logLevel: "warn",
+                    logFormat: "json",
+                    httpPort: 4000,
+                    upstream: { default: nameservers ?? ["9.9.9.9", "149.112.112.112"] },
+                    blocking: {
+                        blackLists: blocklists,
+                        clientGroupsBlock: { default: Object.keys(blocklists ?? {}) },
+                        blockType: "nxDomain",
+                    },
+                    caching: { prefetching: true },
+                    prometheus: { enable: true, path: "/metrics" },
+                })),
+                metrics: { enabled: true, prometheusRule: { enabled: false } },
+                affinity: {
+                    podAntiAffinity: {
+                        preferredDuringSchedulingIgnoredDuringExecution: [
+                            {
+                                weight: 100,
+                                podAffinityTerm: {
+                                    labelSelector: {
+                                        matchExpressions: [
+                                            { key: "app.kubernetes.io/name", operator: "In", values: ["blocky"] },
+                                            { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
+                                        ],
+                                    },
+                                    topologyKey: "kubernetes.io/hostname",
+                                },
+                            },
+                        ],
+                    },
+                },
+                resources: {
+                    requests: { memory: "64Mi" },
+                    limits: { memory: "96Mi" },
+                },
+            },
+        }, opts);
+        this.service = new kubernetes.v1.Service(`${name}-dns`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-dns` },
+            spec: {
+                selector: metadata.labels,
+                ports: [
+                    { name: "udp", protocol: "UDP", port: 53 },
+                    { name: "tcp", protocol: "TCP", port: 53 },
+                ],
+            },
+            hostnames: args.hostname ? [args.hostname] : undefined,
+        }, { ...opts, dependsOn: [this.helmRelease] });
+        this.grafanaDashboard = new grafana_1.Dashboard(`${name}-grafana-dashboard`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-grafana-dashboard` },
+            name: "blocky",
+            // eslint-disable-next-line security/detect-non-literal-fs-filename
+            data: fs.readFileSync(path.join(__dirname, "assets", "dashboard.json"), "utf-8"),
+        }, opts);
+        this.registerOutputs();
+    }
+}
+exports.Blocky = Blocky;
+//# sourceMappingURL=deployment.js.map

package/lib/blocky/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/blocky/deployment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uDAAyC;AACzC,wDAA0C;AAC1C,uCAAyB;AACzB,2CAA6B;AAC7B,8CAAgC;AAChC,sCAA8C;AAC9C,0DAA4C;AAC5C,wCAAuC;AAUvC,MAAa,MAAO,SAAQ,0BAAiB;IAC1B,WAAW,CAA6B;IACxC,OAAO,CAAwB;IAC/B,gBAAgB,CAAY;IAC7B,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAsC;QAChF,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAElC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;YAC/B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;SACnB;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,QAAQ;gBAClC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/C,IAAI,EACJ;YACE,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAC3D,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE;gBACN,gBAAgB,EAAE,IAAI;gBACtB,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;gBACvC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE,CAC1F,IAAI,CAAC,IAAI,CAAC;oBACR,QAAQ,EAAE,MAAM;oBAChB,SAAS,EAAE,MAAM;oBACjB,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE;oBACpE,QAAQ,EAAE;wBACR,UAAU,EAAE,UAAU;wBACtB,iBAAiB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;wBAC7D,SAAS,EAAE,UAAU;qBACtB;oBACD,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;oBAC9B,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;iBAC/C,CAAC,CACH;gBACD,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;gBAC9D,QAAQ,EAAE;oBACR,eAAe,EAAE;wBACf,+CAA+C,EAAE;4BAC/C;gCACE,MAAM,EAAE,GAAG;gCACX,eAAe,EAAE;oCACf,aAAa,EAAE;wCACb,gBAAgB,EAAE;4CAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE;4CACrE,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;yCACtE;qCACF;oCACD,WAAW,EAAE,wBAAwB;iCACtC;6BACF;yBACF;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iBAC3B;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,CACtC,GAAG,IAAI,MAAM,EACb;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,MAAM,EAAE;YAChE,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,KAAK,EAAE;oBACL,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;oBAC1C,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;iBAC3C;aACF;YACD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SACvD,EACD,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAC3C,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAS,CACnC,GAAG,IAAI,oBAAoB,EAC3B;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,oBAAoB,EAAE;YAC9E,IAAI,EAAE,QAAQ;YACd,mEAAmE;YACnE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;SACjF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AApHD,wBAoHC"}

package/lib/blocky/{index.ts → index.d.ts}

@@ -1,3 +1,3 @@
 import { BlockyArgs, Blocky } from "./deployment";
-
 export { BlockyArgs, Blocky };
+//# sourceMappingURL=index.d.ts.map

package/lib/blocky/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/blocky/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC"}

package/lib/blocky/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Blocky = void 0;
+const deployment_1 = require("./deployment");
+Object.defineProperty(exports, "Blocky", { enumerable: true, get: function () { return deployment_1.Blocky; } });
+//# sourceMappingURL=index.js.map

package/lib/blocky/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/blocky/index.ts"],"names":[],"mappings":";;;AAAA,6CAAkD;AAE7B,uFAFA,mBAAM,OAEA"}

package/lib/certManager/certificate.d.ts

@@ -0,0 +1,126 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+export interface IssuerRefArgs {
+    /**
+     * Issuer name
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Optional: Kind of Issuer
+     */
+    kind?: pulumi.Input<string>;
+}
+export interface PrivateKeyArgs {
+    /**
+     * Optional: Crypto algorithm
+     */
+    algorithm?: pulumi.Input<string>;
+    /**
+     * Optional: Key size
+     */
+    size?: pulumi.Input<number>;
+    /**
+     * Optional: Rotation policy
+     */
+    rotationPolicy?: pulumi.Input<string>;
+}
+export interface PasswordSecretRefArgs {
+    /**
+     * Secret name
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Secret key
+     */
+    key: pulumi.Input<string>;
+}
+export interface Pkcs12Args {
+    /**
+     * Optional: Create a PKCS12 bundle
+     */
+    create?: pulumi.Input<boolean>;
+    /**
+     * Password secret
+     */
+    passwordSecretRef: pulumi.Input<PasswordSecretRefArgs>;
+}
+export interface JksArgs {
+    /**
+     * Optional: Create a JKS bundle
+     */
+    create?: pulumi.Input<boolean>;
+    /**
+     * Password secret
+     */
+    passwordSecretRef: pulumi.Input<PasswordSecretRefArgs>;
+}
+export interface KeystoresArgs {
+    /**
+     * Optional: PKCS12
+     */
+    pkcs12?: pulumi.Input<Pkcs12Args>;
+    /**
+     * Optional: JKS
+     */
+    jks?: pulumi.Input<JksArgs>;
+}
+export interface CertificateSpecArgs {
+    /**
+     * DNS names
+     */
+    dnsNames: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Optional: Issuer reference
+     */
+    issuerRef?: pulumi.Input<IssuerRefArgs>;
+    /**
+     * Optional: Common name
+     */
+    commonName?: pulumi.Input<string>;
+    /**
+     * Optional: Validity duration
+     */
+    duration?: pulumi.Input<string>;
+    /**
+     * Optional: Renew before expiration
+     */
+    renewBefore?: pulumi.Input<string>;
+    /**
+     * Optional: Name of secret to store certificate
+     */
+    secretName?: pulumi.Input<string>;
+    /**
+     * Optional: Private key options
+     */
+    privateKey?: pulumi.Input<PrivateKeyArgs>;
+    /**
+     * Optional: Is a certification authority
+     */
+    isCA?: pulumi.Input<boolean>;
+    /**
+     * Optional: Keystores
+     */
+    keystores?: pulumi.Input<KeystoresArgs>;
+}
+export interface CertificateArgs {
+    /**
+     * Metadata for the certificate resource
+     */
+    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
+    /**
+     * Spec for the certificate resource
+     */
+    spec: pulumi.Input<CertificateSpecArgs>;
+}
+export declare class Certificate extends k8s.apiextensions.CustomResource {
+    readonly secretName: pulumi.Output<string>;
+    readonly hostnames: pulumi.Output<pulumi.Output<string>[]>;
+    /**
+     * Create a new certificate resource.
+     * @param name The name of the certificate resource.
+     * @param args A bag of arguments to control the certificate creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: CertificateArgs, opts?: pulumi.CustomResourceOptions);
+}
+//# sourceMappingURL=certificate.d.ts.map

package/lib/certManager/certificate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.d.ts","sourceRoot":"","sources":["../../../lib/certManager/certificate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,OAAO;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;CACzC;AAED,qBAAa,WAAY,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC/D,SAAgB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAElE;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAkCrF"}

package/lib/certManager/certificate.js

@@ -0,0 +1,65 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Certificate = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const k8s = __importStar(require("@pulumi/kubernetes"));
+class Certificate extends k8s.apiextensions.CustomResource {
+    secretName;
+    hostnames;
+    /**
+     * Create a new certificate resource.
+     * @param name The name of the certificate resource.
+     * @param args A bag of arguments to control the certificate creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        const spec = pulumi.all([args.spec]).apply(([specWrapped]) => {
+            const spec = specWrapped;
+            if (spec.secretName === undefined) {
+                spec.secretName = `${name}-tls`;
+            }
+            if (spec.privateKey === undefined) {
+                spec.privateKey = {};
+            }
+            spec.privateKey = pulumi.all([spec.privateKey]).apply(([privateKeyWrapped]) => {
+                const privateKey = privateKeyWrapped;
+                if (privateKey.rotationPolicy === undefined) {
+                    privateKey.rotationPolicy = "Always";
+                }
+                return privateKey;
+            });
+            if (spec.issuerRef === undefined) {
+                spec.issuerRef = { name: "letsencrypt", kind: "ClusterIssuer" };
+            }
+            return spec;
+        });
+        super(name, { apiVersion: "cert-manager.io/v1", kind: "Certificate", metadata: args.metadata, spec }, opts);
+        this.hostnames = spec.dnsNames;
+        this.secretName = spec.secretName;
+    }
+}
+exports.Certificate = Certificate;
+//# sourceMappingURL=certificate.js.map

package/lib/certManager/certificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.js","sourceRoot":"","sources":["../../../lib/certManager/certificate.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uDAAyC;AACzC,wDAA0C;AA0H1C,MAAa,WAAY,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC/C,UAAU,CAAwB;IAClC,SAAS,CAAyC;IAElE;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAmC;QAClF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE;YAC3D,MAAM,IAAI,GAAG,WAAkC,CAAC;YAEhD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE;gBACjC,IAAI,CAAC,UAAU,GAAG,GAAG,IAAI,MAAM,CAAC;aACjC;YAED,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE;gBACjC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;aACtB;YAED,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE;gBAC5E,MAAM,UAAU,GAAG,iBAAmC,CAAC;gBAEvD,IAAI,UAAU,CAAC,cAAc,KAAK,SAAS,EAAE;oBAC3C,UAAU,CAAC,cAAc,GAAG,QAAQ,CAAC;iBACtC;gBAED,OAAO,UAAU,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE;gBAChC,IAAI,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;aACjE;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAE5G,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAkD,CAAC;QACzE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAmC,CAAC;IAC7D,CAAC;CACF;AA5CD,kCA4CC"}

package/lib/certManager/index.d.ts

@@ -0,0 +1,5 @@
+import { LetsEncryptCloudflareArgs, CertManagerArgs, CertManager } from "./operator";
+import { IssuerRefArgs, PrivateKeyArgs, CertificateSpecArgs, CertificateArgs, Certificate } from "./certificate";
+import { SelfSignedArgs, CaArgs, PrivateKeySecretRefArgs, SecretKeyRefArgs, CloudflareSolverArgs, DnsSolverArgs, SolverArgs, AcmeArgs, IssuerSpecArgs, IssuerArgs, Issuer, ClusterIssuer } from "./issuer";
+export { LetsEncryptCloudflareArgs, CertManagerArgs, CertManager, SelfSignedArgs, CaArgs, PrivateKeySecretRefArgs, SecretKeyRefArgs, CloudflareSolverArgs, DnsSolverArgs, SolverArgs, AcmeArgs, IssuerSpecArgs, IssuerArgs, Issuer, ClusterIssuer, IssuerRefArgs, PrivateKeyArgs, CertificateSpecArgs, CertificateArgs, Certificate, };
+//# sourceMappingURL=index.d.ts.map

package/lib/certManager/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/certManager/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjH,OAAO,EACL,cAAc,EACd,MAAM,EACN,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,QAAQ,EACR,cAAc,EACd,UAAU,EACV,MAAM,EACN,aAAa,EACd,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,yBAAyB,EACzB,eAAe,EACf,WAAW,EACX,cAAc,EACd,MAAM,EACN,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,QAAQ,EACR,cAAc,EACd,UAAU,EACV,MAAM,EACN,aAAa,EACb,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,WAAW,GACZ,CAAC"}

package/lib/certManager/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Certificate = exports.ClusterIssuer = exports.Issuer = exports.CertManager = void 0;
+const operator_1 = require("./operator");
+Object.defineProperty(exports, "CertManager", { enumerable: true, get: function () { return operator_1.CertManager; } });
+const certificate_1 = require("./certificate");
+Object.defineProperty(exports, "Certificate", { enumerable: true, get: function () { return certificate_1.Certificate; } });
+const issuer_1 = require("./issuer");
+Object.defineProperty(exports, "Issuer", { enumerable: true, get: function () { return issuer_1.Issuer; } });
+Object.defineProperty(exports, "ClusterIssuer", { enumerable: true, get: function () { return issuer_1.ClusterIssuer; } });
+//# sourceMappingURL=index.js.map

package/lib/certManager/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/certManager/index.ts"],"names":[],"mappings":";;;AAAA,yCAAqF;AAoBnF,4FApBmD,sBAAW,OAoBnD;AAnBb,+CAAiH;AAoC/G,4FApC4E,yBAAW,OAoC5E;AAnCb,qCAakB;AAgBhB,uFAlBA,eAAM,OAkBA;AACN,8FAlBA,sBAAa,OAkBA"}