@ydkn/pulumi-components 0.4.4 → 0.4.6

package/lib/fcos/config.js

@@ -0,0 +1,191 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Config = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
+const compress = __importStar(require("zlib"));
+const common_1 = require("../common");
+class Config extends common_1.ComponentResource {
+    ignitionConfig;
+    /**
+     * Create a new FCOS config resource.
+     * @param name The name of the FCOS config resource.
+     * @param args A bag of arguments to control the FCOS config creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("fcos:config", name, args, opts);
+        this.ignitionConfig = pulumi
+            .all([
+            this.defaultConfig(),
+            args.hostname,
+            args.modules,
+            args.packages,
+            args.users,
+            args.disks,
+            args.filesystems,
+            args.files,
+            args.systemdUnits,
+        ])
+            .apply(([config, hostname, modules, packages, users, disks, filesystems, files, systemdUnits]) => {
+            if (hostname !== undefined) {
+                config.storage.files.push({
+                    path: "/etc/hostname",
+                    contents: this.storageContents(hostname),
+                    mode: 0o644,
+                });
+            }
+            for (const module of modules || []) {
+                config.storage.files.push({
+                    path: `/etc/modules-load.d/${module}.conf`,
+                    contents: this.storageContents(module),
+                    mode: 0o644,
+                });
+            }
+            for (const pkg of packages || []) {
+                config.storage.files.push({ path: `/etc/rpm-opstree-install/${pkg}` });
+            }
+            for (const user of users || []) {
+                config.passwd.users.push(user);
+            }
+            for (const disk of disks || []) {
+                config.storage.disks.push({
+                    device: disk.device,
+                    partitions: disk.partitions.map((partition) => {
+                        return {
+                            label: partition.label,
+                            size_mib: partition.size,
+                            start_mib: partition.start,
+                            number: partition.number,
+                            resize: partition.resize,
+                        };
+                    }),
+                    wipe_table: disk.wipeTable,
+                });
+            }
+            for (const filesystem of filesystems || []) {
+                config.storage.filesystems.push({
+                    device: filesystem.device,
+                    path: filesystem.path,
+                    format: filesystem.format,
+                    label: filesystem.label,
+                });
+                const checkSystemdName = filesystem.device.replace(/-/g, "\\x2d").replace(/^\//, "").replace(/\//g, "-");
+                config.systemd.units.push({
+                    name: `${filesystem.path.replace(/^\//, "").replace(/\//g, "-")}.mount`,
+                    enabled: true,
+                    contents: [
+                        "[Unit]",
+                        "Before=local-fs.target",
+                        `Requires=systemd-fsck@${checkSystemdName}.service`,
+                        `After=systemd-fsck@${checkSystemdName}.service`,
+                        "[Mount]",
+                        `Where=${filesystem.path}`,
+                        `What=${filesystem.device}`,
+                        `Type=${filesystem.format}`,
+                        "[Install]",
+                        "RequiredBy=local-fs.target",
+                    ].join("\n"),
+                });
+            }
+            for (const file of files || []) {
+                config.storage.files.push({
+                    path: file.path,
+                    contents: this.storageContents(file.contents),
+                    mode: file.mode ?? 0o644,
+                });
+            }
+            for (const unit of systemdUnits || []) {
+                config.systemd.units.push(unit);
+            }
+            return JSON.stringify(config);
+        });
+        this.registerOutputs();
+    }
+    defaultConfig() {
+        return {
+            ignition: { version: "3.3.0" },
+            passwd: {
+                users: [],
+            },
+            storage: {
+                disks: [],
+                filesystems: [],
+                directories: [{ path: "/etc/rpm-opstree-install" }],
+                files: [
+                    {
+                        path: "/etc/sysctl.d/20-silence-audit.conf",
+                        contents: this.storageContents("kernel.printk=4"),
+                        mode: 0o644,
+                    },
+                    {
+                        overwrite: true,
+                        path: "/etc/sysctl.d/10-fs-inotify.conf",
+                        contents: this.storageContents("fs.inotify.max_user_instances = 8192\nfs.inotify.max_user_watches = 524288"),
+                    },
+                    {
+                        overwrite: true,
+                        path: "/etc/sysctl.d/90-ipv4-ip-forward.conf",
+                        contents: this.storageContents("net.ipv4.ip_forward = 1"),
+                    },
+                    {
+                        overwrite: true,
+                        path: "/etc/sysctl.d/90-ipv6-ip-forwarding.conf",
+                        contents: this.storageContents("net.ipv6.conf.all.forwarding = 1"),
+                    },
+                    { overwrite: false, path: "/etc/systemd/resolved.conf", append: [this.storageContents("LLMNR=no")] },
+                    {
+                        path: "/usr/local/sbin/rpm-opstree-install",
+                        contents: this.storageContents(this.assetContent("rpm-opstree-install.sh")),
+                        mode: 0o755,
+                    },
+                ],
+            },
+            systemd: {
+                units: [
+                    {
+                        name: "rpm-ostree-install.service",
+                        enabled: true,
+                        contents: this.assetContent("rpm-ostree-install.service"),
+                    },
+                ],
+            },
+        };
+    }
+    assetContent(filename) {
+        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        return fs.readFileSync(path.join(__dirname, "assets", filename), "utf-8");
+    }
+    storageContents(data) {
+        return {
+            compression: "gzip",
+            source: `data:;base64,${compress.gzipSync(Buffer.from(data), { level: 9 }).toString("base64")}`,
+        };
+    }
+}
+exports.Config = Config;
+//# sourceMappingURL=config.js.map

package/lib/fcos/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../lib/fcos/config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uDAAyC;AACzC,2CAA6B;AAC7B,uCAAyB;AACzB,+CAAiC;AACjC,sCAA8C;AAyD9C,MAAa,MAAO,SAAQ,0BAAiB;IAC3B,cAAc,CAAwB;IAEtD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAsC;QAChF,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEvC,IAAI,CAAC,cAAc,GAAG,MAAM;aACzB,GAAG,CAAC;YACH,IAAI,CAAC,aAAa,EAAE;YACpB,IAAI,CAAC,QAAQ;YACb,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,QAAQ;YACb,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,WAAW;YAChB,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,YAAY;SAClB,CAAC;aACD,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE,EAAE;YAC/F,IAAI,QAAQ,KAAK,SAAS,EAAE;gBAC1B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;oBACxC,IAAI,EAAE,KAAK;iBACZ,CAAC,CAAC;aACJ;YAED,KAAK,MAAM,MAAM,IAAI,OAAO,IAAI,EAAE,EAAE;gBAClC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,uBAAuB,MAAM,OAAO;oBAC1C,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;oBACtC,IAAI,EAAE,KAAK;iBACZ,CAAC,CAAC;aACJ;YAED,KAAK,MAAM,GAAG,IAAI,QAAQ,IAAI,EAAE,EAAE;gBAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4BAA4B,GAAG,EAAE,EAAE,CAAC,CAAC;aACxE;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE;gBAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAChC;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE;gBAC9B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAwB,EAAE,EAAE;wBAC3D,OAAO;4BACL,KAAK,EAAE,SAAS,CAAC,KAAK;4BACtB,QAAQ,EAAE,SAAS,CAAC,IAAI;4BACxB,SAAS,EAAE,SAAS,CAAC,KAAK;4BAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;4BACxB,MAAM,EAAE,SAAS,CAAC,MAAM;yBACzB,CAAC;oBACJ,CAAC,CAAC;oBACF,UAAU,EAAE,IAAI,CAAC,SAAS;iBAC3B,CAAC,CAAC;aACJ;YAED,KAAK,MAAM,UAAU,IAAI,WAAW,IAAI,EAAE,EAAE;gBAC1C,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;oBAC9B,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,KAAK,EAAE,UAAU,CAAC,KAAK;iBACxB,CAAC,CAAC;gBAEH,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAEzG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ;oBACvE,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE;wBACR,QAAQ;wBACR,wBAAwB;wBACxB,yBAAyB,gBAAgB,UAAU;wBACnD,sBAAsB,gBAAgB,UAAU;wBAChD,SAAS;wBACT,SAAS,UAAU,CAAC,IAAI,EAAE;wBAC1B,QAAQ,UAAU,CAAC,MAAM,EAAE;wBAC3B,QAAQ,UAAU,CAAC,MAAM,EAAE;wBAC3B,WAAW;wBACX,4BAA4B;qBAC7B,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb,CAAC,CAAC;aACJ;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE;gBAC9B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;iBACzB,CAAC,CAAC;aACJ;YAED,KAAK,MAAM,IAAI,IAAI,YAAY,IAAI,EAAE,EAAE;gBACrC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACjC;YAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAEO,aAAa;QACnB,OAAO;YACL,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;YAC9B,MAAM,EAAE;gBACN,KAAK,EAAE,EAAE;aACV;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,EAAE;gBACT,WAAW,EAAE,EAAE;gBACf,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;gBACnD,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,qCAAqC;wBAC3C,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC;wBACjD,IAAI,EAAE,KAAK;qBACZ;oBACD;wBACE,SAAS,EAAE,IAAI;wBACf,IAAI,EAAE,kCAAkC;wBACxC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAC5B,4EAA4E,CAC7E;qBACF;oBACD;wBACE,SAAS,EAAE,IAAI;wBACf,IAAI,EAAE,uCAAuC;wBAC7C,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,yBAAyB,CAAC;qBAC1D;oBACD;wBACE,SAAS,EAAE,IAAI;wBACf,IAAI,EAAE,0CAA0C;wBAChD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,kCAAkC,CAAC;qBACnE;oBACD,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,EAAE;oBACpG;wBACE,IAAI,EAAE,qCAAqC;wBAC3C,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,wBAAwB,CAAC,CAAC;wBAC3E,IAAI,EAAE,KAAK;qBACZ;iBACF;aACF;YACD,OAAO,EAAE;gBACP,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,4BAA4B;wBAClC,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC;qBAC1D;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,QAAgB;QACnC,mEAAmE;QACnE,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,OAAO;YACL,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,gBAAgB,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;SAChG,CAAC;IACJ,CAAC;CACF;AA/KD,wBA+KC"}

package/lib/fcos/host.d.ts

@@ -0,0 +1,34 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as tls from "@pulumi/tls";
+import { ComponentResource } from "../common";
+import { ConfigArgs } from "./config";
+export interface HostUserArgs {
+    /**
+     * Username
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Optional: Groups
+     */
+    groups?: pulumi.Input<pulumi.Input<string>[]>;
+}
+export interface HostArgs extends ConfigArgs {
+    /**
+     * Optional: Users with SSH access
+     */
+    sshUsers?: pulumi.Input<pulumi.Input<HostUserArgs>[]>;
+}
+export declare class Host extends ComponentResource {
+    readonly sshPrivateKeys: pulumi.Output<{
+        [key: string]: tls.PrivateKey;
+    }>;
+    readonly ignitionConfig: pulumi.Output<string>;
+    /**
+     * Create a new FCOS host resource.
+     * @param name The name of the FCOS host resource.
+     * @param args A bag of arguments to control the FCOS host creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: HostArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=host.d.ts.map

package/lib/fcos/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../../lib/fcos/host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAY,UAAU,EAAU,MAAM,UAAU,CAAC;AAExD,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,QAAS,SAAQ,UAAU;IAC1C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;CACvD;AAED,qBAAa,IAAK,SAAQ,iBAAiB;IACzC,SAAgB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,UAAU,CAAA;KAAE,CAAC,CAAC;IACjF,SAAgB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEtD;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;CAyDjF"}

package/lib/fcos/host.js

@@ -0,0 +1,80 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Host = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const tls = __importStar(require("@pulumi/tls"));
+const common_1 = require("../common");
+const config_1 = require("./config");
+class Host extends common_1.ComponentResource {
+    sshPrivateKeys;
+    ignitionConfig;
+    /**
+     * Create a new FCOS host resource.
+     * @param name The name of the FCOS host resource.
+     * @param args A bag of arguments to control the FCOS host creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("fcos:host", name, args, opts);
+        const emptyOpts = this.opts();
+        this.sshPrivateKeys = pulumi.all([args.sshUsers]).apply(([sshUsers]) => {
+            const sshPrivateKeys = {};
+            for (const sshUser of sshUsers || []) {
+                sshPrivateKeys[sshUser.name] = new tls.PrivateKey(`${name}-${sshUser.name}`, { algorithm: "ED25519" }, emptyOpts);
+            }
+            return sshPrivateKeys;
+        });
+        this.ignitionConfig = new config_1.Config(name, {
+            ...args,
+            modules: pulumi.all([args.modules]).apply(([modules]) => (modules || []).concat("wireguard")),
+            packages: pulumi
+                .all([args.packages])
+                .apply(([packages]) => (packages || []).concat("netcat", "tcpdump", "iperf3", "htop", "golang-gvisor")),
+            users: pulumi
+                .all([args.users, args.sshUsers, this.sshPrivateKeys])
+                .apply(([users, sshUsers, sshPrivateKeys]) => {
+                const allUsers = [];
+                for (const user of users || []) {
+                    allUsers.push(user);
+                }
+                for (const sshUser of sshUsers || []) {
+                    allUsers.push({
+                        name: sshUser.name,
+                        groups: sshUser.groups,
+                        sshAuthorizedKeys: sshPrivateKeys[sshUser.name].publicKeyOpenssh.apply((key) => [key.trim()]),
+                    });
+                }
+                return allUsers;
+            }),
+            systemdUnits: pulumi
+                .all([args.systemdUnits])
+                .apply(([systemdUnits]) => (systemdUnits || []).concat({ mask: true, name: "docker.service" }, { mask: true, name: "docker.socket" })),
+        }, emptyOpts).ignitionConfig;
+        this.registerOutputs();
+    }
+}
+exports.Host = Host;
+//# sourceMappingURL=host.js.map

package/lib/fcos/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../../lib/fcos/host.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uDAAyC;AACzC,iDAAmC;AACnC,sCAA8C;AAC9C,qCAAwD;AAoBxD,MAAa,IAAK,SAAQ,0BAAiB;IACzB,cAAc,CAAmD;IACjE,cAAc,CAAwB;IAEtD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAc,EAAE,IAAsC;QAC9E,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAErC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE9B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE;YACrE,MAAM,cAAc,GAAsC,EAAE,CAAC;YAE7D,KAAK,MAAM,OAAO,IAAI,QAAQ,IAAI,EAAE,EAAE;gBACpC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAC/C,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EACzB,EAAE,SAAS,EAAE,SAAS,EAAE,EACxB,SAAS,CACV,CAAC;aACH;YAED,OAAO,cAAc,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,GAAG,IAAI,eAAM,CAC9B,IAAI,EACJ;YACE,GAAG,IAAI;YACP,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7F,QAAQ,EAAE,MAAM;iBACb,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;iBACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;YACzG,KAAK,EAAE,MAAM;iBACV,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;iBACrD,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAA6B,EAAE,CAAC;gBAE9C,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE;oBAC9B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACrB;gBAED,KAAK,MAAM,OAAO,IAAI,QAAQ,IAAI,EAAE,EAAE;oBACpC,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,iBAAiB,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;qBAC9F,CAAC,CAAC;iBACJ;gBAED,OAAO,QAAQ,CAAC;YAClB,CAAC,CAAC;YACJ,YAAY,EAAE,MAAM;iBACjB,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;iBACxB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CACxB,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAC3G;SACJ,EACD,SAAS,CACV,CAAC,cAAc,CAAC;QAEjB,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF;AAnED,oBAmEC"}

package/lib/fcos/index.d.ts

@@ -0,0 +1,4 @@
+import { PartitionArgs, DiskArgs, FilesystemArgs, UserArgs, FilesArgs, SystemdUnitArgs, IgnitionArgs, ConfigArgs, Config } from "./config";
+import { HostUserArgs, HostArgs, Host } from "./host";
+export { PartitionArgs, DiskArgs, FilesystemArgs, UserArgs, FilesArgs, SystemdUnitArgs, IgnitionArgs, ConfigArgs, Config, HostUserArgs, HostArgs, Host, };
+//# sourceMappingURL=index.d.ts.map

package/lib/fcos/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/fcos/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,QAAQ,EACR,cAAc,EACd,QAAQ,EACR,SAAS,EACT,eAAe,EACf,YAAY,EACZ,UAAU,EACV,MAAM,EACP,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAEtD,OAAO,EACL,aAAa,EACb,QAAQ,EACR,cAAc,EACd,QAAQ,EACR,SAAS,EACT,eAAe,EACf,YAAY,EACZ,UAAU,EACV,MAAM,EACN,YAAY,EACZ,QAAQ,EACR,IAAI,GACL,CAAC"}

package/lib/fcos/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Host = exports.Config = void 0;
+const config_1 = require("./config");
+Object.defineProperty(exports, "Config", { enumerable: true, get: function () { return config_1.Config; } });
+const host_1 = require("./host");
+Object.defineProperty(exports, "Host", { enumerable: true, get: function () { return host_1.Host; } });
+//# sourceMappingURL=index.js.map

package/lib/fcos/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/fcos/index.ts"],"names":[],"mappings":";;;AAAA,qCAUkB;AAYhB,uFAbA,eAAM,OAaA;AAXR,iCAAsD;AAcpD,qFAd+B,WAAI,OAc/B"}

package/lib/freeradius/deployment.d.ts

@@ -0,0 +1,40 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as k8s from "@pulumi/kubernetes";
+import { ComponentResource } from "../common";
+export interface LdapArgs {
+    hostname: pulumi.Input<string>;
+    username: pulumi.Input<string>;
+    password: pulumi.Input<string>;
+    baseDN: pulumi.Input<string>;
+}
+export interface FreeRadiusServerArgs {
+    namespace?: pulumi.Input<string>;
+    hostname: pulumi.Input<string>;
+    domain: pulumi.Input<string>;
+    ldap: pulumi.Input<LdapArgs>;
+    resources?: pulumi.Input<k8s.types.input.core.v1.ResourceRequirements>;
+    protect?: boolean;
+}
+export declare class FreeRadiusServer extends ComponentResource {
+    private readonly localSecret;
+    private readonly configs;
+    private readonly issuer;
+    private readonly caCertificate;
+    private readonly caIssuer;
+    private readonly certificate;
+    private readonly deployment;
+    private readonly podDisruptionBudget;
+    private readonly service;
+    readonly namespace: pulumi.Output<string>;
+    readonly clientSecret: pulumi.Output<string>;
+    readonly ip: pulumi.Output<string>;
+    /**
+     * Create a new FreeRadius server resource.
+     * @param name The name of the FreeRadius server resource.
+     * @param args A bag of arguments to control the FreeRadius server creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: FreeRadiusServerArgs, opts?: pulumi.ComponentResourceOptions);
+    private static renderAssetTemplate;
+}
+//# sourceMappingURL=deployment.d.ts.map

package/lib/freeradius/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../lib/freeradius/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAG1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;IACvE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,gBAAiB,SAAQ,iBAAiB;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,SAAgB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,SAAgB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,SAAgB,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE1C;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,wBAAwB;IAmM5F,OAAO,CAAC,MAAM,CAAC,mBAAmB;CAGnC"}

package/lib/freeradius/deployment.js

@@ -0,0 +1,199 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FreeRadiusServer = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const random = __importStar(require("@pulumi/random"));
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const path = __importStar(require("path"));
+const templateFile = __importStar(require("template-file"));
+const common_1 = require("../common");
+const kubernetes = __importStar(require("../kubernetes"));
+const certManager = __importStar(require("../certManager"));
+class FreeRadiusServer extends common_1.ComponentResource {
+    localSecret;
+    configs;
+    issuer;
+    caCertificate;
+    caIssuer;
+    certificate;
+    deployment;
+    podDisruptionBudget;
+    service;
+    namespace;
+    clientSecret;
+    ip;
+    /**
+     * Create a new FreeRadius server resource.
+     * @param name The name of the FreeRadius server resource.
+     * @param args A bag of arguments to control the FreeRadius server creation.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        super("freeradius", name, args, opts);
+        if (args.resources === undefined) {
+            args.resources = { requests: { memory: "96Mi" }, limits: { memory: "128Mi" } };
+        }
+        const emptyOpts = this.opts();
+        const k8sOpts = this.opts(k8s.Provider);
+        this.namespace = args.namespace
+            ? pulumi.output(args.namespace)
+            : new k8s.core.v1.Namespace(name, { metadata: { name } }, k8sOpts).metadata.name;
+        const metadata = {
+            name,
+            namespace: this.namespace,
+            labels: {
+                "app.kubernetes.io/name": "freeradius",
+                "app.kubernetes.io/component": "freeradius",
+                "app.kubernetes.io/instance": name,
+            },
+        };
+        this.localSecret = pulumi.secret(new random.RandomString(`${name}-local-secret`, { special: false, length: 48 }, emptyOpts).result);
+        this.clientSecret = pulumi.secret(new random.RandomString(`${name}-client-secret`, { special: false, length: 48 }, { ...emptyOpts, protect: args.protect }).result);
+        this.configs = new k8s.core.v1.Secret(`${name}-configs`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-configs` },
+            stringData: pulumi
+                .all([args.domain, args.ldap, this.localSecret, this.clientSecret])
+                .apply(([domain, ldap, localSecret, clientSecret]) => {
+                const vars = {
+                    ldap: { hostname: ldap.hostname, username: ldap.username, password: ldap.password, baseDN: ldap.baseDN },
+                    domain,
+                    localSecret,
+                    clientSecret,
+                };
+                return {
+                    default: FreeRadiusServer.renderAssetTemplate("default", vars),
+                    eap: FreeRadiusServer.renderAssetTemplate("eap", vars),
+                    "inner-tunnel": FreeRadiusServer.renderAssetTemplate("inner-tunnel", vars),
+                    ldap: FreeRadiusServer.renderAssetTemplate("ldap", vars),
+                    "proxy.conf": FreeRadiusServer.renderAssetTemplate("proxy.conf", vars),
+                    "clients.conf": FreeRadiusServer.renderAssetTemplate("clients.conf", vars),
+                };
+            }),
+        }, k8sOpts);
+        this.issuer = new certManager.Issuer(name, { metadata, spec: { selfSigned: {} } }, k8sOpts);
+        this.caCertificate = new certManager.Certificate(`${name}-ca`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-ca` },
+            spec: {
+                isCA: true,
+                commonName: "RADIUS",
+                dnsNames: [args.hostname],
+                duration: "876000h",
+                renewBefore: "8760h",
+                privateKey: { algorithm: "RSA", size: 4096, rotationPolicy: "Always" },
+                issuerRef: { kind: this.issuer.kind, name: this.issuer.metadata.name },
+            },
+        }, k8sOpts);
+        this.caIssuer = new certManager.Issuer(`${name}-ca`, {
+            metadata: { ...metadata, name: pulumi.interpolate `${name}-ca` },
+            spec: { ca: { secretName: this.caCertificate.secretName } },
+        }, k8sOpts);
+        this.certificate = new certManager.Certificate(name, {
+            metadata,
+            spec: {
+                isCA: true,
+                commonName: args.hostname,
+                dnsNames: [args.hostname],
+                duration: "87600h",
+                renewBefore: "2160h",
+                privateKey: { algorithm: "RSA", size: 4096, rotationPolicy: "Always" },
+                issuerRef: { kind: this.caIssuer.kind, name: this.caIssuer.metadata.name },
+            },
+        }, k8sOpts);
+        this.deployment = new k8s.apps.v1.Deployment(name, {
+            metadata,
+            spec: {
+                selector: { matchLabels: metadata.labels },
+                strategy: { type: "Recreate" },
+                replicas: 1,
+                template: {
+                    metadata: {
+                        labels: metadata.labels,
+                        annotations: { "backup.velero.io/backup-volumes": "data" },
+                    },
+                    spec: {
+                        containers: [
+                            {
+                                name: "freeradius",
+                                image: "freeradius/freeradius-server:latest-alpine",
+                                imagePullPolicy: "Always",
+                                ports: [
+                                    { name: "radius", containerPort: 1812, protocol: "UDP" },
+                                    { name: "radius-acct", containerPort: 1813, protocol: "UDP" },
+                                ],
+                                resources: args.resources,
+                                volumeMounts: [
+                                    { name: "configs", mountPath: "/opt/etc/raddb/sites-enabled/default", subPath: "default" },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/mods-enabled/eap", subPath: "eap" },
+                                    {
+                                        name: "configs",
+                                        mountPath: "/opt/etc/raddb/sites-enabled/inner-tunnel",
+                                        subPath: "inner-tunnel",
+                                    },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/mods-enabled/ldap", subPath: "ldap" },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/proxy.conf", subPath: "proxy.conf" },
+                                    { name: "configs", mountPath: "/opt/etc/raddb/clients.conf", subPath: "clients.conf" },
+                                    { name: "ca-tls", mountPath: "/opt/etc/raddb/certs/ca.crt", subPath: "tls.crt" },
+                                    { name: "tls", mountPath: "/opt/etc/raddb/certs/server.crt", subPath: "tls.crt" },
+                                    { name: "tls", mountPath: "/opt/etc/raddb/certs/server.key", subPath: "tls.key" },
+                                ],
+                            },
+                        ],
+                        volumes: [
+                            { name: "configs", secret: { secretName: this.configs.metadata.name } },
+                            { name: "ca-tls", secret: { secretName: this.caCertificate.secretName } },
+                            { name: "tls", secret: { secretName: this.certificate.secretName } },
+                        ],
+                    },
+                },
+            },
+        }, k8sOpts);
+        this.podDisruptionBudget = new k8s.policy.v1.PodDisruptionBudget(name, {
+            metadata,
+            spec: {
+                minAvailable: 1,
+                selector: { matchLabels: metadata.labels },
+            },
+        }, k8sOpts);
+        this.service = new kubernetes.v1.Service(name, {
+            metadata,
+            spec: {
+                selector: metadata.labels,
+                ports: [
+                    { name: "radius", port: 1812, targetPort: "radius", protocol: "UDP" },
+                    { name: "radius-acct", port: 1813, targetPort: "radius-acct", protocol: "UDP" },
+                ],
+            },
+            hostnames: [args.hostname],
+        }, { ...k8sOpts, dependsOn: [this.deployment] });
+        this.ip = this.service.spec.clusterIP;
+        this.registerOutputs();
+    }
+    static renderAssetTemplate(filename, data) {
+        return pulumi.output(templateFile.renderFile(path.join(__dirname, "assets", `${filename}.tmpl`), data));
+    }
+}
+exports.FreeRadiusServer = FreeRadiusServer;
+//# sourceMappingURL=deployment.js.map

package/lib/freeradius/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/freeradius/deployment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uDAAyC;AACzC,uDAAyC;AACzC,wDAA0C;AAC1C,2CAA6B;AAC7B,4DAA8C;AAC9C,sCAA8C;AAC9C,0DAA4C;AAC5C,4DAA8C;AAkB9C,MAAa,gBAAiB,SAAQ,0BAAiB;IACpC,WAAW,CAAwB;IACnC,OAAO,CAAqB;IAC5B,MAAM,CAAqB;IAC3B,aAAa,CAA0B;IACvC,QAAQ,CAAqB;IAC7B,WAAW,CAA0B;IACrC,UAAU,CAAyB;IACnC,mBAAmB,CAAoC;IACvD,OAAO,CAAwB;IAChC,SAAS,CAAwB;IACjC,YAAY,CAAwB;IACpC,EAAE,CAAwB;IAE1C;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAA0B,EAAE,IAAsC;QAC1F,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEtC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE;YAChC,IAAI,CAAC,SAAS,GAAG,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;SAChF;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEnF,MAAM,QAAQ,GAAG;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,YAAY;gBACtC,6BAA6B,EAAE,YAAY;gBAC3C,4BAA4B,EAAE,IAAI;aACnC;SACF,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAC9B,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,eAAe,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,MAAM,CAClG,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAC/B,IAAI,MAAM,CAAC,YAAY,CACrB,GAAG,IAAI,gBAAgB,EACvB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAC9B,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CACxC,CAAC,MAAM,CACT,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACnC,GAAG,IAAI,UAAU,EACjB;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,UAAU,EAAE;YACpE,UAAU,EAAE,MAAM;iBACf,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;iBAClE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,EAAE;gBACnD,MAAM,IAAI,GAAG;oBACX,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;oBACxG,MAAM;oBACN,WAAW;oBACX,YAAY;iBACb,CAAC;gBAEF,OAAO;oBACL,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC;oBAC9D,GAAG,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC;oBACtD,cAAc,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,cAAc,EAAE,IAAI,CAAC;oBAC1E,IAAI,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC;oBACxD,YAAY,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC;oBACtE,cAAc,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,cAAc,EAAE,IAAI,CAAC;iBAC3E,CAAC;YACJ,CAAC,CAAC;SACL,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAE5F,IAAI,CAAC,aAAa,GAAG,IAAI,WAAW,CAAC,WAAW,CAC9C,GAAG,IAAI,KAAK,EACZ;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,KAAK,EAAE;YAC/D,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,QAAQ;gBACpB,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACzB,QAAQ,EAAE,SAAS;gBACnB,WAAW,EAAE,OAAO;gBACpB,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;aACvE;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,MAAM,CACpC,GAAG,IAAI,KAAK,EACZ;YACE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAA,GAAG,IAAI,KAAK,EAAE;YAC/D,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE;SAC5D,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,WAAW,CAC5C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,IAAI,CAAC,QAAQ;gBACzB,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,OAAO;gBACpB,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;aAC3E;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAC1C,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC9B,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE;oBACR,QAAQ,EAAE;wBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,WAAW,EAAE,EAAE,iCAAiC,EAAE,MAAM,EAAE;qBAC3D;oBACD,IAAI,EAAE;wBACJ,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,YAAY;gCAClB,KAAK,EAAE,4CAA4C;gCACnD,eAAe,EAAE,QAAQ;gCACzB,KAAK,EAAE;oCACL,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;oCACxD,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;iCAC9D;gCACD,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,YAAY,EAAE;oCACZ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,sCAAsC,EAAE,OAAO,EAAE,SAAS,EAAE;oCAC1F,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,iCAAiC,EAAE,OAAO,EAAE,KAAK,EAAE;oCACjF;wCACE,IAAI,EAAE,SAAS;wCACf,SAAS,EAAE,2CAA2C;wCACtD,OAAO,EAAE,cAAc;qCACxB;oCACD,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,kCAAkC,EAAE,OAAO,EAAE,MAAM,EAAE;oCACnF,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,2BAA2B,EAAE,OAAO,EAAE,YAAY,EAAE;oCAClF,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,6BAA6B,EAAE,OAAO,EAAE,cAAc,EAAE;oCAEtF,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,6BAA6B,EAAE,OAAO,EAAE,SAAS,EAAE;oCAChF,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,iCAAiC,EAAE,OAAO,EAAE,SAAS,EAAE;oCACjF,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,iCAAiC,EAAE,OAAO,EAAE,SAAS,EAAE;iCAClF;6BACF;yBACF;wBACD,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;4BACvE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE;4BACzE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE;yBACrE;qBACF;iBACF;aACF;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAC9D,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,YAAY,EAAE,CAAC;gBACf,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE;aAC3C;SACF,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,CACtC,IAAI,EACJ;YACE,QAAQ;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,KAAK,EAAE;oBACL,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;oBACrE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;iBAChF;aACF;YACD,SAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;SAC3B,EACD,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAC7C,CAAC;QAEF,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAEtC,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAEO,MAAM,CAAC,mBAAmB,CAAC,QAAgB,EAAE,IAAuB;QAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1G,CAAC;CACF;AA1ND,4CA0NC"}

package/lib/freeradius/{index.ts → index.d.ts}

@@ -1,3 +1,3 @@
 import { FreeRadiusServerArgs, FreeRadiusServer } from "./deployment";
-
 export { FreeRadiusServerArgs, FreeRadiusServer };
+//# sourceMappingURL=index.d.ts.map

package/lib/freeradius/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/freeradius/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEtE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,CAAC"}

package/lib/freeradius/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FreeRadiusServer = void 0;
+const deployment_1 = require("./deployment");
+Object.defineProperty(exports, "FreeRadiusServer", { enumerable: true, get: function () { return deployment_1.FreeRadiusServer; } });
+//# sourceMappingURL=index.js.map

package/lib/freeradius/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/freeradius/index.ts"],"names":[],"mappings":";;;AAAA,6CAAsE;AAEvC,iGAFA,6BAAgB,OAEA"}