@ydkn/pulumi-components 0.4.4 → 0.4.6

package/lib/avahi/deployment.ts

@@ -1,171 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-import { ComponentResource } from "../common";
-
-export interface AvahiArgs {
-  namespace?: pulumi.Input<string>;
-  allowInterfaces?: pulumi.Input<string>;
-  nodeSelector?: pulumi.Input<{ [key: string]: pulumi.Input<string> }>;
-}
-
-export class Avahi extends ComponentResource {
-  private readonly serviceAccount: k8s.core.v1.ServiceAccount;
-  private readonly clusterRole: k8s.rbac.v1.ClusterRole;
-  private readonly clusterRoleBinding: k8s.rbac.v1.ClusterRoleBinding;
-  private readonly deployment: k8s.apps.v1.Deployment;
-  private readonly podDisruptionBudget: k8s.policy.v1.PodDisruptionBudget;
-  public readonly namespace: pulumi.Output<string>;
-  public readonly labelName: pulumi.Output<string>;
-
-  /**
-   * Create a new Avahi resource.
-   * @param name The name of the Avahi resource.
-   * @param args A bag of arguments to control the Avahi creation.
-   * @param opts A bag of options that control this resource's behavior.
-   */
-  constructor(name: string, args: AvahiArgs, opts?: pulumi.ComponentResourceOptions) {
-    super("avahi", name, args, opts);
-
-    opts = this.opts(k8s.Provider);
-
-    this.namespace = args.namespace
-      ? pulumi.output(args.namespace)
-      : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
-
-    const metadata = {
-      name,
-      namespace: this.namespace,
-      labels: {
-        "app.kubernetes.io/name": "avahi",
-        "app.kubernetes.io/component": "avahi",
-        "app.kubernetes.io/instance": name,
-      },
-    };
-
-    this.serviceAccount = new k8s.core.v1.ServiceAccount(name, { metadata }, opts);
-
-    this.clusterRole = new k8s.rbac.v1.ClusterRole(
-      name,
-      {
-        metadata,
-        rules: [{ apiGroups: [""], resources: ["configmaps"], verbs: ["get", "list"] }],
-      },
-      opts
-    );
-
-    this.clusterRoleBinding = new k8s.rbac.v1.ClusterRoleBinding(
-      name,
-      {
-        metadata,
-        subjects: [
-          {
-            kind: this.serviceAccount.kind,
-            name: this.serviceAccount.metadata.name,
-            namespace: this.serviceAccount.metadata.namespace,
-          },
-        ],
-        roleRef: {
-          kind: this.clusterRole.kind,
-          name: this.clusterRole.metadata.name,
-          apiGroup: "rbac.authorization.k8s.io",
-        },
-      },
-      opts
-    );
-
-    this.labelName = pulumi.interpolate`${name}-service`;
-
-    this.deployment = new k8s.apps.v1.Deployment(
-      name,
-      {
-        metadata,
-        spec: {
-          selector: { matchLabels: metadata.labels },
-          strategy: { type: "Recreate" },
-          replicas: 1,
-          template: {
-            metadata: { labels: metadata.labels },
-            spec: {
-              serviceAccountName: this.serviceAccount.metadata.name,
-              nodeSelector: args.nodeSelector,
-              hostNetwork: true,
-              initContainers: [
-                {
-                  name: "services",
-                  image: "cyrilix/k8s-sidecar:latest",
-                  imagePullPolicy: "Always",
-                  env: [
-                    { name: "NAMESPACE", value: "ALL" },
-                    { name: "METHOD", value: "LIST" },
-                    { name: "LABEL", value: this.labelName },
-                    { name: "FOLDER", value: "/etc/avahi/services" },
-                  ],
-                  resources: {
-                    requests: { memory: "32Mi" },
-                    limits: { memory: "48Mi" },
-                  },
-                  volumeMounts: [{ name: "services", mountPath: "/etc/avahi/services" }],
-                },
-              ],
-              containers: [
-                {
-                  name: "avahi",
-                  image: "ydkn/avahi:latest",
-                  imagePullPolicy: "Always",
-                  env: [{ name: "ALLOW_INTERFACES", value: args.allowInterfaces }],
-                  resources: {
-                    requests: { memory: "8Mi" },
-                    limits: { memory: "16Mi" },
-                  },
-                  volumeMounts: [{ name: "services", mountPath: "/etc/avahi/services" }],
-                },
-              ],
-              volumes: [{ name: "services", emptyDir: {} }],
-              affinity: {
-                podAntiAffinity: {
-                  preferredDuringSchedulingIgnoredDuringExecution: [
-                    {
-                      weight: 100,
-                      podAffinityTerm: {
-                        labelSelector: {
-                          matchExpressions: [
-                            {
-                              key: "app.kubernetes.io/name",
-                              operator: "In",
-                              values: [metadata.labels["app.kubernetes.io/name"]],
-                            },
-                            {
-                              key: "app.kubernetes.io/instance",
-                              operator: "In",
-                              values: [metadata.labels["app.kubernetes.io/instance"]],
-                            },
-                          ],
-                        },
-                        topologyKey: "kubernetes.io/hostname",
-                      },
-                    },
-                  ],
-                },
-              },
-            },
-          },
-        },
-      },
-      opts
-    );
-
-    this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(
-      name,
-      {
-        metadata,
-        spec: {
-          maxUnavailable: 0,
-          selector: { matchLabels: metadata.labels },
-        },
-      },
-      opts
-    );
-
-    this.registerOutputs();
-  }
-}

package/lib/avahi/service.ts

@@ -1,118 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-
-export interface AvahiServiceDefinitionArgs {
-  type: pulumi.Input<string>;
-  port: pulumi.Input<number>;
-  subtype?: pulumi.Input<string>;
-  hostname?: pulumi.Input<string>;
-  txtRecords?: pulumi.Input<pulumi.Input<string>[]>;
-}
-
-export interface AvahiServiceArgs {
-  metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
-  labelName: pulumi.Input<string>;
-  name: pulumi.Input<string>;
-  services: pulumi.Input<pulumi.Input<AvahiServiceDefinitionArgs>[]>;
-}
-
-export interface ConfigAvahiServicesArgs {
-  [key: string]: {
-    name: pulumi.Input<string>;
-    services: pulumi.Input<pulumi.Input<AvahiServiceDefinitionArgs>[]>;
-  };
-}
-
-export interface ConfigAvahiServiceArgs {
-  metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
-  labelName: pulumi.Input<string>;
-  services: ConfigAvahiServicesArgs;
-}
-
-export class AvahiService extends k8s.core.v1.ConfigMap {
-  /**
-   * Create a new Avahi service resource.
-   * @param name The name of the Avahi service resource.
-   * @param args A bag of arguments to control the Avahi service creation.
-   * @param opts A bag of options that control this resource's behavior.
-   */
-  constructor(name: string, args: AvahiServiceArgs, opts?: pulumi.CustomResourceOptions) {
-    const data = pulumi.all([args.name, args.services]).apply(([name, services]) => {
-      const serviceData: string[] = [
-        `<?xml version="1.0" standalone="no"?>`,
-        `<!DOCTYPE service-group SYSTEM "avahi-service.dtd">`,
-        `<service-group>`,
-        `<name replace-wildcards="yes">${name}</name>`,
-      ];
-
-      for (const service of services) {
-        serviceData.push(`<service>`);
-        serviceData.push(`<type>${service.type}</type>`);
-
-        if (service.subtype !== undefined) {
-          serviceData.push(`<subtype>${service.subtype}</subtype>`);
-        }
-
-        serviceData.push(`<port>${service.port}</port>`);
-
-        if (service.hostname !== undefined) {
-          serviceData.push(`<host-name>${service.hostname}</host-name>`);
-        }
-
-        if (service.txtRecords !== undefined) {
-          for (const txtRecord of service.txtRecords) {
-            serviceData.push(`<txt-record>${txtRecord}</txt-record>`);
-          }
-        }
-
-        serviceData.push(`</service>`);
-      }
-
-      serviceData.push(`</service-group>`);
-
-      const configMapData: { [id: string]: string } = {};
-
-      configMapData[`${name}.service`] = serviceData.join("\n");
-
-      return configMapData;
-    });
-
-    const metadata = pulumi.all([args.labelName, args.metadata]).apply(([labelName, metadata]) => {
-      if (metadata === undefined) {
-        metadata = {};
-      }
-
-      if (metadata.labels === undefined) {
-        metadata.labels = {};
-      }
-
-      // eslint-disable-next-line security/detect-object-injection
-      metadata.labels[labelName] = "true";
-
-      return metadata;
-    });
-
-    super(name, { metadata, data }, opts);
-  }
-
-  static fromConfig(args: ConfigAvahiServiceArgs, opts?: pulumi.CustomResourceOptions): AvahiService[] {
-    const services: AvahiService[] = [];
-
-    for (const name in args.services) {
-      services.push(
-        new AvahiService(
-          name,
-          {
-            // eslint-disable-next-line security/detect-object-injection
-            ...args.services[name],
-            metadata: { ...args.metadata, name: pulumi.interpolate`${name}-${args.labelName}` },
-            labelName: args.labelName,
-          },
-          opts
-        )
-      );
-    }
-
-    return services;
-  }
-}

package/lib/aws/accessKey.ts

@@ -1,40 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as aws from "@pulumi/aws";
-import { ComponentResource } from "../common";
-
-export interface AccessKeyArgs {
-  /**
-   * Name
-   */
-  name?: pulumi.Input<string>;
-}
-
-export class AccessKey extends ComponentResource {
-  public readonly user: aws.iam.User;
-  public readonly accessKey: aws.iam.AccessKey;
-
-  /**
-   * Create a new AWS access key resource.
-   * @param name The name of the AWS access key resource.
-   * @param args A bag of arguments to control the AWS access key creation.
-   * @param opts A bag of options that control this resource's behavior.
-   */
-  constructor(name: string, args: AccessKeyArgs, opts?: pulumi.ComponentResourceOptions) {
-    super("aws:accessKey", name, {}, opts);
-
-    opts = this.opts(aws.Provider);
-
-    this.user = new aws.iam.User(name, { name: args.name ?? name }, opts);
-    this.accessKey = this.newAccessKey(name, new Date(), opts);
-
-    this.registerOutputs();
-  }
-
-  private newAccessKey(name: string, date: Date, opts?: pulumi.ComponentResourceOptions): aws.iam.AccessKey {
-    return new aws.iam.AccessKey(
-      `${name}-${date.getFullYear()}-${date.getMonth() + 1}`,
-      { user: this.user.name },
-      { ...opts, dependsOn: this.user }
-    );
-  }
-}

package/lib/aws/bucket.ts

@@ -1,71 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as random from "@pulumi/random";
-import * as aws from "@pulumi/aws";
-import { ComponentResource } from "../common";
-import { AccessKey } from "./accessKey";
-
-export interface BucketArgs extends aws.s3.BucketArgs {
-  /**
-   * Optional: Name
-   */
-  name?: pulumi.Input<string>;
-  /**
-   * Optional: Protect critical resources
-   */
-  protect?: boolean;
-}
-
-export class Bucket extends ComponentResource {
-  private readonly id: pulumi.Output<string>;
-  public readonly bucket: aws.s3.Bucket;
-  public readonly accessKey: AccessKey;
-  public readonly userPolicy: aws.iam.UserPolicy;
-
-  /**
-   * Create a new AWS bucket resource.
-   * @param name The name of the AWS bucket resource.
-   * @param args A bag of arguments to control the AWS bucket creation.
-   * @param opts A bag of options that control this resource's behavior.
-   */
-  constructor(name: string, args: BucketArgs, opts?: pulumi.ComponentResourceOptions) {
-    super("aws:bucket", name, args, opts);
-
-    const emptyOpts = this.opts();
-    const awsOpts = this.opts(aws.Provider);
-
-    this.id = new random.RandomId(
-      `${name}-bucket`,
-      { byteLength: 6, prefix: pulumi.interpolate`${args.name ?? name}-` },
-      { ...emptyOpts, protect: args.protect }
-    ).hex;
-
-    this.bucket = new aws.s3.Bucket(name, { ...args, bucket: this.id }, { ...awsOpts, protect: args.protect });
-
-    this.accessKey = new AccessKey(name, { name: this.id }, awsOpts);
-
-    this.userPolicy = new aws.iam.UserPolicy(
-      name,
-      {
-        user: this.accessKey.user.name,
-        policy: {
-          Version: "2012-10-17",
-          Statement: [
-            {
-              Effect: "Allow",
-              Action: ["s3:ListBucket"],
-              Resource: [pulumi.interpolate`arn:aws:s3:::${this.bucket.id}`],
-            },
-            {
-              Effect: "Allow",
-              Action: ["s3:*Object"],
-              Resource: [pulumi.interpolate`arn:aws:s3:::${this.bucket.id}/*`],
-            },
-          ],
-        },
-      },
-      awsOpts
-    );
-
-    this.registerOutputs();
-  }
-}

package/lib/blocky/deployment.ts

@@ -1,134 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-import * as fs from "fs";
-import * as path from "path";
-import * as yaml from "js-yaml";
-import { ComponentResource } from "../common";
-import * as kubernetes from "../kubernetes";
-import { Dashboard } from "../grafana";
-
-export interface BlockyArgs {
-  namespace?: pulumi.Input<string>;
-  nameservers?: pulumi.Input<pulumi.Input<string>[]>;
-  blocklists?: pulumi.Input<{ [key: string]: pulumi.Input<pulumi.Input<string>[]> }>;
-  hostname?: pulumi.Input<string>;
-  replicas?: pulumi.Input<number>;
-}
-
-export class Blocky extends ComponentResource {
-  private readonly helmRelease: kubernetes.helm.v3.Release;
-  private readonly service: kubernetes.v1.Service;
-  private readonly grafanaDashboard: Dashboard;
-  public readonly namespace: pulumi.Output<string>;
-
-  /**
-   * Create a new Blocky resource.
-   * @param name The name of the Blocky resource.
-   * @param args A bag of arguments to control the Blocky creation.
-   * @param opts A bag of options that control this resource's behavior.
-   */
-  constructor(name: string, args: BlockyArgs, opts?: pulumi.ComponentResourceOptions) {
-    super("blocky", name, args, opts);
-
-    opts = this.opts(k8s.Provider);
-
-    if (args.replicas === undefined) {
-      args.replicas = 1;
-    }
-
-    this.namespace = args.namespace
-      ? pulumi.output(args.namespace)
-      : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
-
-    const metadata = {
-      name,
-      namespace: this.namespace,
-      labels: {
-        "app.kubernetes.io/name": "blocky",
-        "app.kubernetes.io/instance": name,
-      },
-    };
-
-    this.helmRelease = new kubernetes.helm.v3.Release(
-      name,
-      {
-        name: metadata.name,
-        namespace: metadata.namespace,
-        repositoryOpts: { repo: "https://k8s-at-home.com/charts/" },
-        chart: "blocky",
-        values: {
-          fullnameOverride: name,
-          controller: { replicas: args.replicas },
-          config: pulumi.all([args.nameservers, args.blocklists]).apply(([nameservers, blocklists]) =>
-            yaml.dump({
-              logLevel: "warn",
-              logFormat: "json",
-              httpPort: 4000,
-              upstream: { default: nameservers ?? ["9.9.9.9", "149.112.112.112"] },
-              blocking: {
-                blackLists: blocklists,
-                clientGroupsBlock: { default: Object.keys(blocklists) },
-                blockType: "nxDomain",
-              },
-              caching: { prefetching: true },
-              prometheus: { enable: true, path: "/metrics" },
-            })
-          ),
-          metrics: { enabled: true, prometheusRule: { enabled: false } },
-          affinity: {
-            podAntiAffinity: {
-              preferredDuringSchedulingIgnoredDuringExecution: [
-                {
-                  weight: 100,
-                  podAffinityTerm: {
-                    labelSelector: {
-                      matchExpressions: [
-                        { key: "app.kubernetes.io/name", operator: "In", values: ["blocky"] },
-                        { key: "app.kubernetes.io/instance", operator: "In", values: [name] },
-                      ],
-                    },
-                    topologyKey: "kubernetes.io/hostname",
-                  },
-                },
-              ],
-            },
-          },
-          resources: {
-            requests: { memory: "64Mi" },
-            limits: { memory: "96Mi" },
-          },
-        },
-      },
-      opts
-    );
-
-    this.service = new kubernetes.v1.Service(
-      `${name}-dns`,
-      {
-        metadata: { ...metadata, name: pulumi.interpolate`${name}-dns` },
-        spec: {
-          selector: metadata.labels,
-          ports: [
-            { name: "udp", protocol: "UDP", port: 53 },
-            { name: "tcp", protocol: "TCP", port: 53 },
-          ],
-        },
-        hostnames: args.hostname ? [args.hostname] : undefined,
-      },
-      { ...opts, dependsOn: [this.helmRelease] }
-    );
-
-    this.grafanaDashboard = new Dashboard(
-      `${name}-grafana-dashboard`,
-      {
-        metadata: { ...metadata, name: pulumi.interpolate`${name}-grafana-dashboard` },
-        name: "blocky",
-        // eslint-disable-next-line security/detect-non-literal-fs-filename
-        data: fs.readFileSync(path.join(__dirname, "assets", "dashboard.json"), "utf-8"),
-      },
-      opts
-    );
-
-    this.registerOutputs();
-  }
-}

package/lib/certManager/certificate.ts

@@ -1,168 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-
-export interface IssuerRefArgs {
-  /**
-   * Issuer name
-   */
-  name: pulumi.Input<string>;
-  /**
-   * Optional: Kind of Issuer
-   */
-  kind?: pulumi.Input<string>;
-}
-
-export interface PrivateKeyArgs {
-  /**
-   * Optional: Crypto algorithm
-   */
-  algorithm?: pulumi.Input<string>;
-  /**
-   * Optional: Key size
-   */
-  size?: pulumi.Input<number>;
-  /**
-   * Optional: Rotation policy
-   */
-  rotationPolicy?: pulumi.Input<string>;
-}
-
-export interface PasswordSecretRefArgs {
-  /**
-   * Secret name
-   */
-  name: pulumi.Input<string>;
-  /**
-   * Secret key
-   */
-  key: pulumi.Input<string>;
-}
-
-export interface Pkcs12Args {
-  /**
-   * Optional: Create a PKCS12 bundle
-   */
-  create?: pulumi.Input<boolean>;
-  /**
-   * Password secret
-   */
-  passwordSecretRef: pulumi.Input<PasswordSecretRefArgs>;
-}
-
-export interface JksArgs {
-  /**
-   * Optional: Create a JKS bundle
-   */
-  create?: pulumi.Input<boolean>;
-  /**
-   * Password secret
-   */
-  passwordSecretRef: pulumi.Input<PasswordSecretRefArgs>;
-}
-
-export interface KeystoresArgs {
-  /**
-   * Optional: PKCS12
-   */
-  pkcs12?: pulumi.Input<Pkcs12Args>;
-  /**
-   * Optional: JKS
-   */
-  jks?: pulumi.Input<JksArgs>;
-}
-
-export interface CertificateSpecArgs {
-  /**
-   * DNS names
-   */
-  dnsNames: pulumi.Input<pulumi.Input<string>[]>;
-  /**
-   * Issuer reference
-   */
-  issuerRef: pulumi.Input<IssuerRefArgs>;
-  /**
-   * Optional: Common name
-   */
-  commonName?: pulumi.Input<string>;
-  /**
-   * Optional: Validity duration
-   */
-  duration?: pulumi.Input<string>;
-  /**
-   * Optional: Renew before expiration
-   */
-  renewBefore?: pulumi.Input<string>;
-  /**
-   * Optional: Name of secret to store certificate
-   */
-  secretName?: pulumi.Input<string>;
-  /**
-   * Optional: Private key options
-   */
-  privateKey?: pulumi.Input<PrivateKeyArgs>;
-  /**
-   * Optional: Is a certification authority
-   */
-  isCA?: pulumi.Input<boolean>;
-  /**
-   * Optional: Keystores
-   */
-  keystores?: pulumi.Input<KeystoresArgs>;
-}
-
-export interface CertificateArgs {
-  /**
-   * Metadata for the certificate resource
-   */
-  metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
-  /**
-   * Spec for the certificate resource
-   */
-  spec: pulumi.Input<CertificateSpecArgs>;
-}
-
-export class Certificate extends k8s.apiextensions.CustomResource {
-  public readonly secretName: pulumi.Output<string>;
-  public readonly hostnames: pulumi.Output<pulumi.Output<string>[]>;
-
-  /**
-   * Create a new certificate resource.
-   * @param name The name of the certificate resource.
-   * @param args A bag of arguments to control the certificate creation.
-   * @param opts A bag of options that control this resource's behavior.
-   */
-  constructor(name: string, args: CertificateArgs, opts?: pulumi.CustomResourceOptions) {
-    const spec = pulumi.all([args.spec]).apply(([specWrapped]) => {
-      const spec = specWrapped as CertificateSpecArgs;
-
-      if (spec.secretName === undefined) {
-        spec.secretName = `${name}-tls`;
-      }
-
-      if (spec.privateKey === undefined) {
-        spec.privateKey = {};
-      }
-
-      spec.privateKey = pulumi.all([spec.privateKey]).apply(([privateKeyWrapped]) => {
-        const privateKey = privateKeyWrapped as PrivateKeyArgs;
-
-        if (privateKey.rotationPolicy === undefined) {
-          privateKey.rotationPolicy = "Always";
-        }
-
-        return privateKey;
-      });
-
-      if (spec.issuerRef === undefined) {
-        spec.issuerRef = { name: "letsencrypt", kind: "ClusterIssuer" };
-      }
-
-      return spec;
-    });
-
-    super(name, { apiVersion: "cert-manager.io/v1", kind: "Certificate", metadata: args.metadata, spec }, opts);
-
-    this.hostnames = spec.dnsNames as pulumi.Output<pulumi.Output<string>[]>;
-    this.secretName = spec.secretName as pulumi.Output<string>;
-  }
-}