@ydkn/pulumi-components 0.4.4 → 0.4.6

package/lib/traefik/controller.js

@@ -0,0 +1,189 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Traefik = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const common_1 = require("../common");
+const kubernetes = __importStar(require("../kubernetes"));
+const prometheus_1 = require("../prometheus");
+const grafana_1 = require("../grafana");
+class Traefik extends common_1.ComponentResource {
+    helmRelease;
+    metricsService;
+    serviceMonitor;
+    grafanaDashboard;
+    namespace;
+    ingressClassName;
+    /**
+     * Create a new traefik ingress controller resource.
+     * @param name The name of the traefik ingress controller resource.
+     * @param args A bag of arguments to control the traefik ingress controller creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("traefik:controller", name, args, opts);
+        opts = this.opts(k8s.Provider);
+        if (args.replicas === undefined) {
+            args.replicas = 1;
+        }
+        if (args.serviceType === undefined) {
+            args.serviceType = "ClusterIP";
+        }
+        if (args.serviceAnnotations === undefined) {
+            args.serviceAnnotations = {};
+        }
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
+        this.ingressClassName = pulumi.output(args.ingressClass ?? "traefik");
+        this.helmRelease = new kubernetes.helm.v3.Release(name, {
+            name,
+            namespace: this.namespace,
+            repositoryOpts: { repo: "https://helm.traefik.io/traefik" },
+            chart: "traefik",
+            values: {
+                fullnameOverride: name,
+                deployment: {
+                    replicas: args.replicas,
+                    minReadySeconds: 10,
+                },
+                globalArguments: [],
+                additionalArguments: pulumi.all([args.proxyProtocolIPs]).apply(([proxyProtocolIPs]) => {
+                    const args = [
+                        "--entrypoints.web.http.redirections.entryPoint.to=:443",
+                        "--entrypoints.web.http.redirections.entryPoint.scheme=https",
+                        "--entrypoints.web.http.redirections.entrypoint.permanent=true",
+                        "--serversTransport.insecureSkipVerify=true",
+                    ];
+                    if (proxyProtocolIPs !== undefined && proxyProtocolIPs.length > 0) {
+                        args.push(`--entrypoints.web.proxyprotocol.trustedips=${proxyProtocolIPs.join(",")}`);
+                        args.push(`--entrypoints.websecure.proxyprotocol.trustedips=${proxyProtocolIPs.join(",")}`);
+                    }
+                    return args;
+                }),
+                providers: {
+                    kubernetesCRD: {
+                        ingressClass: args.ingressClass,
+                    },
+                    kubernetesIngress: {
+                        ingressClass: args.ingressClass,
+                        publishedService: { enabled: true },
+                        allowExternalNameServices: true,
+                    },
+                },
+                ingressClass: {
+                    enabled: true,
+                    isDefaultClass: args.defaultIngressClass ?? false,
+                    fallbackApiVersion: "v1",
+                },
+                ingressRoute: { dashboard: { enabled: false } },
+                logs: {
+                    general: { format: "json" },
+                    access: { enabled: false },
+                },
+                service: {
+                    type: args.serviceType,
+                    annotations: args.serviceAnnotations,
+                },
+                metrics: {
+                    prometheus: { entryPoint: "metrics", addRoutersLabels: true },
+                },
+                podDisruptionBudget: {
+                    enabled: true,
+                    maxUnavailable: "33%",
+                },
+                affinity: {
+                    podAntiAffinity: {
+                        preferredDuringSchedulingIgnoredDuringExecution: [
+                            {
+                                weight: 100,
+                                podAffinityTerm: {
+                                    labelSelector: {
+                                        matchExpressions: [
+                                            { key: "app.kubernetes.io/name", operator: "In", values: ["traefik"] },
+                                            { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
+                                        ],
+                                    },
+                                    topologyKey: "kubernetes.io/hostname",
+                                },
+                            },
+                        ],
+                    },
+                },
+                resources: {
+                    requests: { memory: "64Mi" },
+                    limits: { memory: "96Mi" },
+                },
+            },
+        }, opts);
+        const metricsMetadata = {
+            name: `${name}-metrics`,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "traefik",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.metricsService = new k8s.core.v1.Service(`${name}-metrics`, {
+            metadata: metricsMetadata,
+            spec: {
+                selector: metricsMetadata.labels,
+                ports: [{ name: "metrics", port: 9100, targetPort: "metrics" }],
+            },
+        }, { ...opts, dependsOn: [this.helmRelease] });
+        this.serviceMonitor = new prometheus_1.ServiceMonitor(`${name}-metrics`, {
+            metadata: metricsMetadata,
+            spec: {
+                namespaceSelector: { matchNames: [this.namespace] },
+                selector: { matchLabels: metricsMetadata.labels },
+                endpoints: [
+                    {
+                        port: "metrics",
+                        honorLabels: true,
+                        metricRelabelings: [
+                            {
+                                action: "drop",
+                                sourceLabels: ["__name__"],
+                                regex: ["go_.*"].join("|"),
+                            },
+                        ],
+                    },
+                ],
+            },
+        }, { ...opts, dependsOn: [this.metricsService] });
+        this.grafanaDashboard = new grafana_1.Dashboard(`${name}-grafana-dashboard`, {
+            metadata: { namespace: this.namespace, name: pulumi.interpolate `${name}-grafana-dashboard` },
+            name: "traefik",
+            // eslint-disable-next-line security/detect-non-literal-fs-filename
+            data: fs.readFileSync(path.join(__dirname, "assets", "dashboard.json"), "utf-8"),
+        }, opts);
+        this.registerOutputs();
+    }
+}
+exports.Traefik = Traefik;
+//# sourceMappingURL=controller.js.map

package/lib/traefik/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../lib/traefik/controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uDAAyC;AACzC,wDAA0C;AAC1C,uCAAyB;AACzB,2CAA6B;AAC7B,sCAA8C;AAC9C,0DAA4C;AAC5C,8CAA+C;AAC/C,wCAAuC;AAYvC,MAAa,OAAQ,SAAQ,0BAAiB;IAC3B,WAAW,CAA6B;IACxC,cAAc,CAAsB;IACpC,cAAc,CAAiB;IAC/B,gBAAgB,CAAY;IAC7B,SAAS,CAAwB;IACjC,gBAAgB,CAAwB;IAExD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAiB,EAAE,IAAsC;QACjF,KAAK,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE9C,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;YAC/B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;SACnB;QAED,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE;YAClC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;SAChC;QAED,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE;YACzC,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC;SAC9B;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,SAAS,CAAC,CAAC;QAEtE,IAAI,CAAC,WAAW,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/C,IAAI,EACJ;YACE,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAC3D,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE;gBACN,gBAAgB,EAAE,IAAI;gBACtB,UAAU,EAAE;oBACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,eAAe,EAAE,EAAE;iBACpB;gBACD,eAAe,EAAE,EAAE;gBACnB,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE;oBACpF,MAAM,IAAI,GAAG;wBACX,wDAAwD;wBACxD,6DAA6D;wBAC7D,+DAA+D;wBAC/D,4CAA4C;qBAC7C,CAAC;oBAEF,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE;wBACjE,IAAI,CAAC,IAAI,CAAC,8CAA8C,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACtF,IAAI,CAAC,IAAI,CAAC,oDAAoD,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;qBAC7F;oBAED,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC;gBACF,SAAS,EAAE;oBACT,aAAa,EAAE;wBACb,YAAY,EAAE,IAAI,CAAC,YAAY;qBAChC;oBACD,iBAAiB,EAAE;wBACjB,YAAY,EAAE,IAAI,CAAC,YAAY;wBAC/B,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;wBACnC,yBAAyB,EAAE,IAAI;qBAChC;iBACF;gBACD,YAAY,EAAE;oBACZ,OAAO,EAAE,IAAI;oBACb,cAAc,EAAE,IAAI,CAAC,mBAAmB,IAAI,KAAK;oBACjD,kBAAkB,EAAE,IAAI;iBACzB;gBACD,YAAY,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;gBAC/C,IAAI,EAAE;oBACJ,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC3B,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;iBAC3B;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAC,WAAW;oBACtB,WAAW,EAAE,IAAI,CAAC,kBAAkB;iBACrC;gBACD,OAAO,EAAE;oBACP,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE;iBAC9D;gBACD,mBAAmB,EAAE;oBACnB,OAAO,EAAE,IAAI;oBACb,cAAc,EAAE,KAAK;iBACtB;gBACD,QAAQ,EAAE;oBACR,eAAe,EAAE;wBACf,+CAA+C,EAAE;4BAC/C;gCACE,MAAM,EAAE,GAAG;gCACX,eAAe,EAAE;oCACf,aAAa,EAAE;wCACb,gBAAgB,EAAE;4CAChB,EAAE,GAAG,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE;4CACtE,EAAE,GAAG,EAAE,4BAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;yCACtE;qCACF;oCACD,WAAW,EAAE,wBAAwB;iCACtC;6BACF;yBACF;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iBAC3B;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,MAAM,eAAe,GAAG;YACtB,IAAI,EAAE,GAAG,IAAI,UAAU;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,SAAS;gBACnC,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC3C,GAAG,IAAI,UAAU,EACjB;YACE,QAAQ,EAAE,eAAe;YACzB,IAAI,EAAE;gBACJ,QAAQ,EAAE,eAAe,CAAC,MAAM;gBAChC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;aAChE;SACF,EACD,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAC3C,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,2BAAc,CACtC,GAAG,IAAI,UAAU,EACjB;YACE,QAAQ,EAAE,eAAe;YACzB,IAAI,EAAE;gBACJ,iBAAiB,EAAE,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;gBACnD,QAAQ,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,MAAM,EAAE;gBACjD,SAAS,EAAE;oBACT;wBACE,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,IAAI;wBACjB,iBAAiB,EAAE;4BACjB;gCACE,MAAM,EAAE,MAAM;gCACd,YAAY,EAAE,CAAC,UAAU,CAAC;gCAC1B,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;6BAC3B;yBACF;qBACF;iBACF;aACF;SACF,EACD,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAC9C,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAS,CACnC,GAAG,IAAI,oBAAoB,EAC3B;YACE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,oBAAoB,EAAE;YAC5F,IAAI,EAAE,SAAS;YACf,mEAAmE;YACnE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;SACjF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AAvLD,0BAuLC"}

package/lib/traefik/{index.ts → index.d.ts}

@@ -1,5 +1,5 @@
 import { TraefikArgs, Traefik } from "./controller";
 import { SecureIngressArgs, SecureIngress } from "./secureIngress";
 import { Middleware, MiddlewareArgs } from "./middleware";
-
 export { TraefikArgs, Traefik, SecureIngressArgs, SecureIngress, Middleware, MiddlewareArgs };
+//# sourceMappingURL=index.d.ts.map

package/lib/traefik/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/traefik/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC"}

package/lib/traefik/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Middleware = exports.SecureIngress = exports.Traefik = void 0;
+const controller_1 = require("./controller");
+Object.defineProperty(exports, "Traefik", { enumerable: true, get: function () { return controller_1.Traefik; } });
+const secureIngress_1 = require("./secureIngress");
+Object.defineProperty(exports, "SecureIngress", { enumerable: true, get: function () { return secureIngress_1.SecureIngress; } });
+const middleware_1 = require("./middleware");
+Object.defineProperty(exports, "Middleware", { enumerable: true, get: function () { return middleware_1.Middleware; } });
+//# sourceMappingURL=index.js.map

package/lib/traefik/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/traefik/index.ts"],"names":[],"mappings":";;;AAAA,6CAAoD;AAI9B,wFAJA,oBAAO,OAIA;AAH7B,mDAAmE;AAGjB,8FAHtB,6BAAa,OAGsB;AAF/D,6CAA0D;AAEO,2FAFxD,uBAAU,OAEwD"}

package/lib/traefik/middleware.d.ts

@@ -0,0 +1,27 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+export interface MiddlewareHeadersArgs {
+    customRequestHeaders?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    customResponseHeaders?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+}
+export interface MiddlewareSpecArgs {
+    headers?: pulumi.Input<MiddlewareHeadersArgs>;
+}
+export interface MiddlewareArgs {
+    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
+    spec: pulumi.Input<MiddlewareSpecArgs>;
+}
+export declare class Middleware extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new middlware resource.
+     * @param name The name of the middlware resource.
+     * @param args A bag of arguments to control the middlware creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: MiddlewareArgs, opts?: pulumi.CustomResourceOptions);
+}
+//# sourceMappingURL=middleware.d.ts.map

package/lib/traefik/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../lib/traefik/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C,MAAM,WAAW,qBAAqB;IACpC,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;IAC7E,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;CACxC;AAED,qBAAa,UAAW,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC9D;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAYpF"}

package/lib/traefik/middleware.js

@@ -0,0 +1,45 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Middleware = void 0;
+const k8s = __importStar(require("@pulumi/kubernetes"));
+class Middleware extends k8s.apiextensions.CustomResource {
+    /**
+     * Create a new middlware resource.
+     * @param name The name of the middlware resource.
+     * @param args A bag of arguments to control the middlware creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super(name, {
+            apiVersion: "traefik.containo.us/v1alpha1",
+            kind: "Middleware",
+            metadata: args.metadata,
+            spec: args.spec,
+        }, opts);
+    }
+}
+exports.Middleware = Middleware;
+//# sourceMappingURL=middleware.js.map

package/lib/traefik/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../lib/traefik/middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wDAA0C;AAgB1C,MAAa,UAAW,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IAC9D;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAoB,EAAE,IAAmC;QACjF,KAAK,CACH,IAAI,EACJ;YACE,UAAU,EAAE,8BAA8B;YAC1C,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,EACD,IAAI,CACL,CAAC;IACJ,CAAC;CACF;AAnBD,gCAmBC"}

package/lib/traefik/secureIngress.d.ts

@@ -0,0 +1,32 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+export interface SecureIngressArgs {
+    /**
+     * Metadata for the ingress resource
+     */
+    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
+    /**
+     * Spec for the ingress resource
+     */
+    spec: pulumi.Input<k8s.types.input.networking.v1.IngressSpec>;
+    /**
+     * Optional: Name of issuer
+     */
+    issuer?: pulumi.Input<string>;
+    /**
+     * Optional: Name of cluster issuer
+     */
+    clusterIssuer?: pulumi.Input<string>;
+}
+export declare class SecureIngress extends k8s.networking.v1.Ingress {
+    private static readonly defaultClusterIssuer;
+    /**
+     * Create a new secure ingress resource.
+     * @param name The name of the secure ingress resource.
+     * @param args A bag of arguments to control the secure ingress creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: SecureIngressArgs, opts?: pulumi.CustomResourceOptions);
+    private static hosts;
+}
+//# sourceMappingURL=secureIngress.d.ts.map

package/lib/traefik/secureIngress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secureIngress.d.ts","sourceRoot":"","sources":["../../../lib/traefik/secureIngress.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;IAC9D;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACtC;AAED,qBAAa,aAAc,SAAQ,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAiB;IAE7D;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;IAoCtF,OAAO,CAAC,MAAM,CAAC,KAAK;CAarB"}

package/lib/traefik/secureIngress.js

@@ -0,0 +1,81 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecureIngress = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const k8s = __importStar(require("@pulumi/kubernetes"));
+class SecureIngress extends k8s.networking.v1.Ingress {
+    static defaultClusterIssuer = "letsencrypt";
+    /**
+     * Create a new secure ingress resource.
+     * @param name The name of the secure ingress resource.
+     * @param args A bag of arguments to control the secure ingress creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        const ingressArgs = pulumi
+            .all([args.metadata, args.spec, args.issuer, args.clusterIssuer])
+            .apply(([metadataWrapped, specWrapped, issuer, clusterIssuer]) => {
+            const metadata = metadataWrapped;
+            const spec = specWrapped;
+            if (metadata.annotations === undefined) {
+                metadata.annotations = {};
+            }
+            const annotations = {
+                "traefik.ingress.kubernetes.io/router.entrypoints": "websecure",
+                "traefik.ingress.kubernetes.io/router.tls": "true",
+            };
+            if (issuer !== undefined) {
+                annotations["cert-manager.io/issuer"] = issuer;
+            }
+            else if (clusterIssuer !== undefined) {
+                annotations["cert-manager.io/cluster-issuer"] = clusterIssuer;
+            }
+            else {
+                annotations["cert-manager.io/cluster-issuer"] = SecureIngress.defaultClusterIssuer;
+            }
+            metadata.annotations = { ...annotations, ...metadata.annotations };
+            if (spec.tls === undefined) {
+                spec.tls = [{ hosts: SecureIngress.hosts(spec.rules), secretName: pulumi.interpolate `${name}-tls` }];
+            }
+            return { metadata, spec };
+        });
+        super(name, ingressArgs, opts);
+    }
+    static hosts(rules) {
+        if (rules === undefined) {
+            return [];
+        }
+        return rules
+            .map((r) => {
+            return r.host;
+        })
+            .filter((h) => {
+            return h !== undefined;
+        });
+    }
+}
+exports.SecureIngress = SecureIngress;
+//# sourceMappingURL=secureIngress.js.map

package/lib/traefik/secureIngress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secureIngress.js","sourceRoot":"","sources":["../../../lib/traefik/secureIngress.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uDAAyC;AACzC,wDAA0C;AAqB1C,MAAa,aAAc,SAAQ,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO;IAClD,MAAM,CAAU,oBAAoB,GAAG,aAAa,CAAC;IAE7D;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAuB,EAAE,IAAmC;QACpF,MAAM,WAAW,GAAG,MAAM;aACvB,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;aAChE,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,EAAE;YAC/D,MAAM,QAAQ,GAAG,eAAqD,CAAC;YACvE,MAAM,IAAI,GAAG,WAAwD,CAAC;YAEtE,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE;gBACtC,QAAQ,CAAC,WAAW,GAAG,EAAE,CAAC;aAC3B;YAED,MAAM,WAAW,GAA4C;gBAC3D,kDAAkD,EAAE,WAAW;gBAC/D,0CAA0C,EAAE,MAAM;aACnD,CAAC;YAEF,IAAI,MAAM,KAAK,SAAS,EAAE;gBACxB,WAAW,CAAC,wBAAwB,CAAC,GAAG,MAAM,CAAC;aAChD;iBAAM,IAAI,aAAa,KAAK,SAAS,EAAE;gBACtC,WAAW,CAAC,gCAAgC,CAAC,GAAG,aAAa,CAAC;aAC/D;iBAAM;gBACL,WAAW,CAAC,gCAAgC,CAAC,GAAG,aAAa,CAAC,oBAAoB,CAAC;aACpF;YAED,QAAQ,CAAC,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YAEnE,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE;gBAC1B,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,MAAM,EAAE,CAAC,CAAC;aACtG;YAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEL,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,KAA+E;QAClG,IAAI,KAAK,KAAK,SAAS,EAAE;YACvB,OAAO,EAAE,CAAC;SACX;QAED,OAAQ,KAAqD;aAC1D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,OAAO,CAAC,CAAC,IAAI,CAAC;QAChB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACZ,OAAO,CAAC,KAAK,SAAS,CAAC;QACzB,CAAC,CAAa,CAAC;IACnB,CAAC;;AAzDH,sCA0DC"}

package/lib/ubuntu/deployment.d.ts

@@ -0,0 +1,39 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { ComponentResource } from "../common";
+export interface UbuntuArgs {
+    namespace?: pulumi.Input<string>;
+    hostname?: pulumi.Input<string>;
+    authorizedKeys?: pulumi.Input<pulumi.Input<string>[]>;
+    packages?: pulumi.Input<pulumi.Input<string>[]>;
+    volumes?: pulumi.Input<pulumi.Input<k8s.types.input.core.v1.Volume>[]>;
+    volumeMounts?: pulumi.Input<pulumi.Input<k8s.types.input.core.v1.VolumeMount>[]>;
+    nodeSelector?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    replicas?: pulumi.Input<number>;
+    hostNetwork?: pulumi.Input<boolean>;
+}
+export declare class Ubuntu extends ComponentResource {
+    private static readonly sshContainerPort;
+    private readonly sshPrivateKeysRSA;
+    private readonly sshPrivateKeysECDSA;
+    private readonly sshPrivateKeysED25519;
+    private readonly serviceAccount;
+    private readonly clusterRole;
+    private readonly clusterRoleBinding;
+    private readonly initScript;
+    private readonly sshSecret;
+    private readonly deployment;
+    private readonly podDisruptionBudget;
+    private readonly service;
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * Create a new Ubuntu resource.
+     * @param name The name of the Ubuntu resource.
+     * @param args A bag of arguments to control the Ubuntu creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: UbuntuArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=deployment.d.ts.map

package/lib/ubuntu/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../lib/ubuntu/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAG1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAG9C,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;CACrC;AAED,qBAAa,MAAO,SAAQ,iBAAiB;IAC3C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAM;IAE9C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAiB;IACnD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAiB;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAiB;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAiC;IACpE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAwOnF"}