@ydkn/pulumi-components 0.8.9 → 0.9.1

package/lib/cilium/deployment.js

@@ -1,112 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-import { ComponentResource } from "../common/index.js";
-import * as kubernetes from "../kubernetes/index.js";
-import { Certificate } from "../certManager/index.js";
-export class Cilium extends ComponentResource {
-    helmRelease;
-    /**
-     * Create a new cilium resource.
-     * @param name The name of cilium resource.
-     * @param args A bag of arguments to control the cilium creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name, args, opts) {
-        super("cilium", name, args, opts);
-        opts = this.opts(k8s.Provider);
-        this.helmRelease = new kubernetes.helm.v3.Release(name, {
-            name,
-            namespace: "kube-system",
-            repositoryOpts: { repo: "https://helm.cilium.io/" },
-            chart: "cilium",
-            values: {
-                cluster: {
-                    id: args.clusterID ?? 0,
-                    name: args.clusterName ?? "default",
-                },
-                k8sClientRateLimit: { qps: 24, burst: 32, operator: { qps: 32, burst: 48 } },
-                ipv4: { enabled: args.podCIDRIPv4 !== undefined },
-                ipv6: { enabled: args.podCIDRIPv6 !== undefined },
-                rollOutCiliumPods: true,
-                ipam: {
-                    mode: "cluster-pool",
-                    operator: {
-                        clusterPoolIPv4PodCIDRList: args.podCIDRIPv4 ? [args.podCIDRIPv4] : [],
-                        clusterPoolIPv4MaskSize: 26,
-                        clusterPoolIPv6PodCIDRList: args.podCIDRIPv6 ? [args.podCIDRIPv6] : [],
-                        clusterPoolIPv6MaskSize: 110,
-                    },
-                },
-                prometheus: {
-                    enabled: true,
-                    serviceMonitor: { enabled: true },
-                },
-                operator: {
-                    replicas: 1,
-                    prometheus: {
-                        enabled: true,
-                        serviceMonitor: { enabled: true },
-                    },
-                    rollOutPods: true,
-                },
-                k8sServiceHost: args.apiServerAddress ?? "auto",
-                k8sServicePort: args.apiServerPort ?? 6443,
-                kubeProxyReplacement: true,
-                kubeProxyReplacementHealthzBindAddr: "0.0.0.0:10256",
-                localRedirectPolicy: true,
-                encryption: { enabled: args.encryption ?? false },
-                annotateK8sNode: true,
-                hubble: pulumi.all([args.hubble ?? {}]).apply(([hubble]) => {
-                    return {
-                        enabled: true,
-                        metrics: {
-                            enableOpenMetrics: true,
-                            serviceMonitor: { enabled: true },
-                        },
-                        relay: {
-                            enabled: true,
-                            rollOutPods: true,
-                            prometheus: {
-                                enabled: true,
-                                serviceMonitor: { enabled: true },
-                            },
-                        },
-                        ui: {
-                            enabled: true,
-                            rollOutPods: true,
-                            ingress: {
-                                enabled: true,
-                                className: hubble.ingressClassName ?? "cilium",
-                                annotations: {
-                                    "traefik.ingress.kubernetes.io/router.entrypoints": "websecure",
-                                    "traefik.ingress.kubernetes.io/router.tls": "true",
-                                    "cert-manager.io/cluster-issuer": hubble.clusterIssuer ?? Certificate.DefaultClusterIssuer,
-                                },
-                                hosts: [hubble.hostname],
-                                tls: [{ hosts: [hubble.hostname], secretName: "hubble-ingress-tls" }],
-                            },
-                        },
-                    };
-                }),
-                l2announcements: { enabled: true },
-                externalIPs: { enabled: true },
-                l2NeighDiscovery: { enabled: false },
-                bpf: {
-                    vlanBypass: [0, 100],
-                },
-                ingressController: pulumi.all([args.ingressController ?? {}]).apply(([ingressController]) => {
-                    return {
-                        enabled: true,
-                        loadbalancerMode: "shared",
-                        service: {
-                            labels: ingressController.serviceLabels,
-                        },
-                    };
-                }),
-                logOptions: { format: "json" },
-            },
-        }, opts);
-        this.registerOutputs();
-    }
-}
-//# sourceMappingURL=deployment.js.map

package/lib/cilium/deployment.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/cilium/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAwBtD,MAAM,OAAO,MAAO,SAAQ,iBAAiB;IAC1B,WAAW,CAA6B;IAEzD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAgB,EAAE,IAAsC;QAChF,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAElC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,CAAC,WAAW,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/C,IAAI,EACJ;YACE,IAAI;YACJ,SAAS,EAAE,aAAa;YACxB,cAAc,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE;YACnD,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE;gBACN,OAAO,EAAE;oBACP,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC;oBACvB,IAAI,EAAE,IAAI,CAAC,WAAW,IAAI,SAAS;iBACpC;gBACD,kBAAkB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC5E,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE;gBACjD,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE;gBACjD,iBAAiB,EAAE,IAAI;gBACvB,IAAI,EAAE;oBACJ,IAAI,EAAE,cAAc;oBACpB,QAAQ,EAAE;wBACR,0BAA0B,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;wBACtE,uBAAuB,EAAE,EAAE;wBAC3B,0BAA0B,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;wBACtE,uBAAuB,EAAE,GAAG;qBAC7B;iBACF;gBACD,UAAU,EAAE;oBACV,OAAO,EAAE,IAAI;oBACb,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;iBAClC;gBACD,QAAQ,EAAE;oBACR,QAAQ,EAAE,CAAC;oBACX,UAAU,EAAE;wBACV,OAAO,EAAE,IAAI;wBACb,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;qBAClC;oBACD,WAAW,EAAE,IAAI;iBAClB;gBACD,cAAc,EAAE,IAAI,CAAC,gBAAgB,IAAI,MAAM;gBAC/C,cAAc,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;gBAC1C,oBAAoB,EAAE,IAAI;gBAC1B,mCAAmC,EAAE,eAAe;gBACpD,mBAAmB,EAAE,IAAI;gBACzB,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK,EAAE;gBACjD,eAAe,EAAE,IAAI;gBACrB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE;oBACzD,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE;4BACP,iBAAiB,EAAE,IAAI;4BACvB,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;yBAClC;wBACD,KAAK,EAAE;4BACL,OAAO,EAAE,IAAI;4BACb,WAAW,EAAE,IAAI;4BACjB,UAAU,EAAE;gCACV,OAAO,EAAE,IAAI;gCACb,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;6BAClC;yBACF;wBACD,EAAE,EAAE;4BACF,OAAO,EAAE,IAAI;4BACb,WAAW,EAAE,IAAI;4BACjB,OAAO,EAAE;gCACP,OAAO,EAAE,IAAI;gCACb,SAAS,EAAE,MAAM,CAAC,gBAAgB,IAAI,QAAQ;gCAC9C,WAAW,EAAE;oCACX,kDAAkD,EAAE,WAAW;oCAC/D,0CAA0C,EAAE,MAAM;oCAClD,gCAAgC,EAAE,MAAM,CAAC,aAAa,IAAI,WAAW,CAAC,oBAAoB;iCAC3F;gCACD,KAAK,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;gCACxB,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;6BACtE;yBACF;qBACF,CAAC;gBACJ,CAAC,CAAC;gBACF,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBAClC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC9B,gBAAgB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBACpC,GAAG,EAAE;oBACH,UAAU,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC;iBACrB;gBACD,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE;oBAC1F,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,gBAAgB,EAAE,QAAQ;wBAC1B,OAAO,EAAE;4BACP,MAAM,EAAE,iBAAiB,CAAC,aAAa;yBACxC;qBACF,CAAC;gBACJ,CAAC,CAAC;gBACF,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC/B;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF"}

package/lib/cilium/index.d.ts

@@ -1,5 +0,0 @@
-import { CiliumArgs, Cilium } from "./deployment.js";
-import { LocalRedirectPolicyArgs, LocalRedirectPolicy } from "./localRedirectPolicy.js";
-import { L2AnnouncementPolicySpecArgs, L2AnnouncementPolicyArgs, L2AnnouncementPolicy } from "./l2AnnouncementPolicy.js";
-import { LoadBalancerIPPoolSpecArgs, LoadBalancerIPPoolArgs, LoadBalancerIPPool } from "./loadBalancerIPPool.js";
-export { CiliumArgs, Cilium, LocalRedirectPolicyArgs, LocalRedirectPolicy, L2AnnouncementPolicySpecArgs, L2AnnouncementPolicyArgs, L2AnnouncementPolicy, LoadBalancerIPPoolSpecArgs, LoadBalancerIPPoolArgs, LoadBalancerIPPool, };

package/lib/cilium/index.js

@@ -1,6 +0,0 @@
-import { Cilium } from "./deployment.js";
-import { LocalRedirectPolicy } from "./localRedirectPolicy.js";
-import { L2AnnouncementPolicy, } from "./l2AnnouncementPolicy.js";
-import { LoadBalancerIPPool } from "./loadBalancerIPPool.js";
-export { Cilium, LocalRedirectPolicy, L2AnnouncementPolicy, LoadBalancerIPPool, };
-//# sourceMappingURL=index.js.map

package/lib/cilium/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/cilium/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAA2B,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,EAGL,oBAAoB,GACrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAsD,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEjH,OAAO,EAEL,MAAM,EAEN,mBAAmB,EAGnB,oBAAoB,EAGpB,kBAAkB,GACnB,CAAC"}

package/lib/cilium/l2AnnouncementPolicy.d.ts

@@ -1,22 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-export interface L2AnnouncementPolicySpecArgs {
-    serviceSelector?: pulumi.Input<k8s.types.input.meta.v1.LabelSelector>;
-    nodeSelector?: pulumi.Input<k8s.types.input.meta.v1.LabelSelector>;
-    interfaces?: pulumi.Input<pulumi.Input<string>[]>;
-    externalIPs?: pulumi.Input<boolean>;
-    loadBalancerIPs?: pulumi.Input<boolean>;
-}
-export interface L2AnnouncementPolicyArgs {
-    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
-    spec: pulumi.Input<L2AnnouncementPolicySpecArgs>;
-}
-export declare class L2AnnouncementPolicy extends k8s.apiextensions.CustomResource {
-    /**
-     * Create a new CiliumL2AnnouncementPolicy resource.
-     * @param name The name of the CiliumL2AnnouncementPolicy resource.
-     * @param args A bag of arguments to control the CiliumL2AnnouncementPolicy creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name: string, args: L2AnnouncementPolicyArgs, opts?: pulumi.CustomResourceOptions);
-}

package/lib/cilium/l2AnnouncementPolicy.js

@@ -1,25 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-export class L2AnnouncementPolicy extends k8s.apiextensions.CustomResource {
-    /**
-     * Create a new CiliumL2AnnouncementPolicy resource.
-     * @param name The name of the CiliumL2AnnouncementPolicy resource.
-     * @param args A bag of arguments to control the CiliumL2AnnouncementPolicy creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name, args, opts) {
-        super(name, {
-            apiVersion: "cilium.io/v2alpha1",
-            kind: "CiliumL2AnnouncementPolicy",
-            metadata: args.metadata,
-            spec: pulumi.all([args.spec]).apply(([spec]) => {
-                return {
-                    ...spec,
-                    externalIPs: spec.externalIPs ?? true,
-                    loadBalancerIPs: spec.loadBalancerIPs ?? true,
-                };
-            }),
-        }, opts);
-    }
-}
-//# sourceMappingURL=l2AnnouncementPolicy.js.map

package/lib/cilium/l2AnnouncementPolicy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"l2AnnouncementPolicy.js","sourceRoot":"","sources":["../../../lib/cilium/l2AnnouncementPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAe1C,MAAM,OAAO,oBAAqB,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IACxE;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAA8B,EAAE,IAAmC;QAC3F,KAAK,CACH,IAAI,EACJ;YACE,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,4BAA4B;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE;gBAC7C,OAAO;oBACL,GAAG,IAAI;oBACP,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;oBACrC,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI;iBAC9C,CAAC;YACJ,CAAC,CAAC;SACH,EACD,IAAI,CACL,CAAC;IACJ,CAAC;CACF"}

package/lib/cilium/loadBalancerIPPool.d.ts

@@ -1,22 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-export interface BlockArgs {
-    cidr?: pulumi.Input<string>;
-}
-export interface LoadBalancerIPPoolSpecArgs {
-    blocks?: pulumi.Input<pulumi.Input<BlockArgs>[]>;
-    serviceSelector?: pulumi.Input<k8s.types.input.meta.v1.LabelSelector>;
-}
-export interface LoadBalancerIPPoolArgs {
-    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
-    spec: pulumi.Input<LoadBalancerIPPoolSpecArgs>;
-}
-export declare class LoadBalancerIPPool extends k8s.apiextensions.CustomResource {
-    /**
-     * Create a new CiliumLoadBalancerIPPool resource.
-     * @param name The name of the CiliumLoadBalancerIPPool resource.
-     * @param args A bag of arguments to control the CiliumLoadBalancerIPPool creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name: string, args: LoadBalancerIPPoolArgs, opts?: pulumi.CustomResourceOptions);
-}

package/lib/cilium/loadBalancerIPPool.js

@@ -1,18 +0,0 @@
-import * as k8s from "@pulumi/kubernetes";
-export class LoadBalancerIPPool extends k8s.apiextensions.CustomResource {
-    /**
-     * Create a new CiliumLoadBalancerIPPool resource.
-     * @param name The name of the CiliumLoadBalancerIPPool resource.
-     * @param args A bag of arguments to control the CiliumLoadBalancerIPPool creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name, args, opts) {
-        super(name, {
-            apiVersion: "cilium.io/v2alpha1",
-            kind: "CiliumLoadBalancerIPPool",
-            metadata: args.metadata,
-            spec: args.spec,
-        }, opts);
-    }
-}
-//# sourceMappingURL=loadBalancerIPPool.js.map

package/lib/cilium/loadBalancerIPPool.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"loadBalancerIPPool.js","sourceRoot":"","sources":["../../../lib/cilium/loadBalancerIPPool.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAgB1C,MAAM,OAAO,kBAAmB,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IACtE;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAA4B,EAAE,IAAmC;QACzF,KAAK,CACH,IAAI,EACJ;YACE,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,EACD,IAAI,CACL,CAAC;IACJ,CAAC;CACF"}

package/lib/cilium/localRedirectPolicy.d.ts

@@ -1,40 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-export interface ToPortsArgs {
-    name?: pulumi.Input<string>;
-    port: pulumi.Input<string>;
-    protocol?: pulumi.Input<string>;
-}
-export interface RedirectBackendArgs {
-    localEndpointSelector?: pulumi.Input<k8s.types.input.meta.v1.LabelSelector>;
-    toPorts?: pulumi.Input<pulumi.Input<ToPortsArgs>[]>;
-}
-export interface RedirectFrontendArgs {
-    localEndpointSelector?: pulumi.Input<k8s.types.input.meta.v1.LabelSelector>;
-    toPorts?: pulumi.Input<pulumi.Input<ToPortsArgs>[]>;
-}
-export interface ServiceMatcherArgs {
-    namespace?: pulumi.Input<string>;
-    serviceName?: pulumi.Input<string>;
-    toPorts?: pulumi.Input<pulumi.Input<ToPortsArgs>[]>;
-}
-export interface RedirectFrontendArgs {
-    serviceMatcher?: pulumi.Input<ServiceMatcherArgs>;
-}
-export interface LocalRedirectPolicySpecArgs {
-    redirectBackend?: pulumi.Input<RedirectBackendArgs>;
-    redirectFrontend?: pulumi.Input<RedirectFrontendArgs>;
-}
-export interface LocalRedirectPolicyArgs {
-    metadata: pulumi.Input<k8s.types.input.meta.v1.ObjectMeta>;
-    spec: pulumi.Input<LocalRedirectPolicySpecArgs>;
-}
-export declare class LocalRedirectPolicy extends k8s.apiextensions.CustomResource {
-    /**
-     * Create a new CiliumLocalRedirectPolicy resource.
-     * @param name The name of the CiliumLocalRedirectPolicy resource.
-     * @param args A bag of arguments to control the CiliumLocalRedirectPolicy creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name: string, args: LocalRedirectPolicyArgs, opts?: pulumi.CustomResourceOptions);
-}

package/lib/cilium/localRedirectPolicy.js

@@ -1,13 +0,0 @@
-import * as k8s from "@pulumi/kubernetes";
-export class LocalRedirectPolicy extends k8s.apiextensions.CustomResource {
-    /**
-     * Create a new CiliumLocalRedirectPolicy resource.
-     * @param name The name of the CiliumLocalRedirectPolicy resource.
-     * @param args A bag of arguments to control the CiliumLocalRedirectPolicy creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name, args, opts) {
-        super(name, { apiVersion: "cilium.io/v2", kind: "CiliumLocalRedirectPolicy", metadata: args.metadata, spec: args.spec }, opts);
-    }
-}
-//# sourceMappingURL=localRedirectPolicy.js.map

package/lib/cilium/localRedirectPolicy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"localRedirectPolicy.js","sourceRoot":"","sources":["../../../lib/cilium/localRedirectPolicy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAsC1C,MAAM,OAAO,mBAAoB,SAAQ,GAAG,CAAC,aAAa,CAAC,cAAc;IACvE;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAA6B,EAAE,IAAmC;QAC1F,KAAK,CACH,IAAI,EACJ,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,2BAA2B,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAC3G,IAAI,CACL,CAAC;IACJ,CAAC;CACF"}

package/lib/kubernetes/interfaceBridge/assets/bridge.sh

@@ -1,43 +0,0 @@
-#!/usr/bin/env sh
-
-# Adpated from https://github.com/tinkerbell/charts/blob/main/tinkerbell/stack/templates/init_configmap.yaml
-
-# shellcheck disable=SC2116
-
-set -xeuo
-
-src_interface=$(nsenter -t1 -n ip route | awk '/default/ {print $5}' | head -n1)
-if [ -n "${IFACE}" ]; then
-  src_interface="${IFACE}"
-fi
-
-interface_type="macvlan"
-interface_mode="bridge"
-interface_name="${interface_type}0"
-
-# Delete existing interfaces in the container
-ip link del macvlan0 || true
-ip link del ipvlan0 || true
-ip link del ipvlan0-wa || true
-
-# Delete existing interfaces in the host namespace
-nsenter -t1 -n ip link del macvlan0 || true
-nsenter -t1 -n ip link del ipvlan0 || true
-nsenter -t1 -n ip link del ipvlan0-wa || true
-
-# Create the interface
-nsenter -t1 -n ip link add "${interface_name}" link "${src_interface}" type "${interface_type}" mode "${interface_mode}" || true
-
-# Move the interface into the Pod container
-pid="$(echo $$)"
-nsenter -t1 -n ip link set "${interface_name}" netns "${pid}" || nsenter -t1 -n ip link delete "${interface_name}"
-
-# Bring up the interface
-ip link set dev "${interface_name}" up
-
-# Set the IP address/route
-if [ -n "${IP}" ]; then
-  ip addr add "${IP}" dev "${interface_name}" || true
-else
-  ip addr add "127.1.1.1/32" dev "${interface_name}" noprefixroute || true
-fi

package/lib/kubernetes/interfaceBridge/bridge.d.ts

@@ -1,6 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-export declare const bridgePodSpec: {
-    hostPID: boolean;
-};
-export declare const bridgeInitContainer: (interfaceName?: pulumi.Input<string>, ip?: pulumi.Input<string>) => pulumi.Output<k8s.types.input.core.v1.Container>;

package/lib/kubernetes/interfaceBridge/bridge.js

@@ -1,26 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as path from "path";
-import * as fs from "fs";
-import * as url from "url";
-export const bridgePodSpec = { hostPID: true };
-export const bridgeInitContainer = (interfaceName, ip) => {
-    return pulumi.output({
-        name: "bridge-broadcast-interface",
-        image: "ghcr.io/jacobweinstock/relay-init:latest",
-        command: [
-            "/bin/sh",
-            "-c",
-            fs.readFileSync(path.join(path.dirname(url.fileURLToPath(import.meta.url)), "assets", "bridge.sh"), "utf-8"),
-        ],
-        env: [
-            { name: "IFACE", value: interfaceName ?? "" },
-            { name: "IP", value: ip ?? "" },
-        ],
-        securityContext: { privileged: true },
-        resources: {
-            requests: { memory: "16Mi" },
-            limits: { memory: "24Mi" },
-        },
-    });
-};
-//# sourceMappingURL=bridge.js.map

package/lib/kubernetes/interfaceBridge/bridge.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../../lib/kubernetes/interfaceBridge/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAEzC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAE3B,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAE/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,aAAoC,EACpC,EAAyB,EACyB,EAAE;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,4BAA4B;QAClC,KAAK,EAAE,0CAA0C;QACjD,OAAO,EAAE;YACP,SAAS;YACT,IAAI;YACJ,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC;SAC7G;QACD,GAAG,EAAE;YACH,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,IAAI,EAAE,EAAE;YAC7C,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE;SAChC;QACD,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;QACrC,SAAS,EAAE;YACT,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;YAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;SAC3B;KACF,CAAC,CAAC;AACL,CAAC,CAAC"}

package/lib/kubernetes/interfaceBridge/index.d.ts

@@ -1,2 +0,0 @@
-import { bridgePodSpec, bridgeInitContainer } from "./bridge.js";
-export { bridgePodSpec, bridgeInitContainer };

package/lib/kubernetes/interfaceBridge/index.js

@@ -1,3 +0,0 @@
-import { bridgePodSpec, bridgeInitContainer } from "./bridge.js";
-export { bridgePodSpec, bridgeInitContainer };
-//# sourceMappingURL=index.js.map

package/lib/kubernetes/interfaceBridge/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../lib/kubernetes/interfaceBridge/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC"}

package/lib/netbird/assets/nftables.sh

@@ -1,44 +0,0 @@
-#!/bin/sh
-
-INTERVAL="20"
-INITAL_DELAY="10"
-
-apk --quiet --no-cache add nftables
-
-sleep "${INITAL_DELAY}" &
-wait $!
-
-while :; do
-  if [ -n "${NETWORK_RANGE}" ]; then
-    input_handle=$(nft -a -n list chain ip netbird netbird-acl-input-filter 2>/dev/null | grep "iifname \"${NB_INTERFACE_NAME}\" ip saddr ${NETWORK_RANGE} ip daddr ${NETWORK_RANGE} jump netbird-acl-input-rules" | awk '{print $NF}')
-    if [ -z "${input_handle}" ]; then
-      nft insert rule ip netbird netbird-acl-input-filter iifname "${NB_INTERFACE_NAME}" ip saddr "${NETWORK_RANGE}" ip daddr "${NETWORK_RANGE}" jump netbird-acl-input-rules
-    fi
-
-    output_handle=$(nft -a -n list chain ip netbird netbird-acl-output-filter 2>/dev/null | grep "oifname \"${NB_INTERFACE_NAME}\" ip saddr ${NETWORK_RANGE} ip daddr ${NETWORK_RANGE} jump netbird-acl-output-rules" | awk '{print $NF}')
-    if [ -z "${output_handle}" ]; then
-      nft insert rule ip netbird netbird-acl-output-filter oifname "${NB_INTERFACE_NAME}" ip saddr "${NETWORK_RANGE}" ip daddr "${NETWORK_RANGE}" jump netbird-acl-output-rules
-    fi
-  fi
-
-  if [ "${MASQUERADE_ALL}" = "true" ]; then
-    if ! nft -a -n list chain ip netbird netbird-rt-postrouting 2>/dev/null | grep "type nat hook postrouting priority" >/dev/null; then
-      nft add chain ip netbird netbird-rt-postrouting '{ type nat hook postrouting priority srcnat - 1; }'
-    fi
-
-    masquerade_handle=$(nft -a -n list chain ip netbird netbird-rt-postrouting 2>/dev/null | grep "oifname \"${NB_INTERFACE_NAME}\" masquerade" | awk '{print $NF}')
-    if [ -z "${masquerade_handle}" ]; then
-      nft insert rule ip netbird netbird-rt-postrouting oifname "${NB_INTERFACE_NAME}" masquerade
-    fi
-  fi
-
-  if [ -n "${MSS}" ]; then
-    mss_handle=$(nft -a -n list chain ip netbird netbird-rt-fwd 2>/dev/null | grep "oifname \"${NB_INTERFACE_NAME}\"" | grep "maxseg size set ${MSS}" | awk '{print $NF}')
-    if [ -z "${mss_handle}" ]; then
-      nft insert rule ip netbird netbird-rt-fwd oifname "${NB_INTERFACE_NAME}" tcp flags syn / syn,rst counter tcp option maxseg size set "${MSS}"
-    fi
-  fi
-
-  sleep "${INTERVAL}" &
-  wait $!
-done

package/lib/oauth2Proxy/deployment.d.ts

@@ -1,20 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import { ComponentResource } from "../common/index.js";
-export interface OAuth2ProxyArgs {
-    namespace?: pulumi.Input<string>;
-    replicas?: pulumi.Input<number>;
-    hostname: pulumi.Input<string>;
-    ingressClassName?: pulumi.Input<string>;
-    clusterIssuer?: pulumi.Input<string>;
-}
-export declare class OAuth2Proxy extends ComponentResource {
-    private readonly helmRelease;
-    readonly namespace: pulumi.Output<string>;
-    /**
-     * Create a new OAuth2-Proxy resource.
-     * @param name The name of OAuth2-Proxy resource.
-     * @param args A bag of arguments to control the OAuth2-Proxy creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name: string, args: OAuth2ProxyArgs, opts?: pulumi.ComponentResourceOptions);
-}

package/lib/oauth2Proxy/deployment.js

@@ -1,56 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-import { ComponentResource } from "../common/index.js";
-import * as kubernetes from "../kubernetes/index.js";
-import { Certificate } from "../certManager/index.js";
-export class OAuth2Proxy extends ComponentResource {
-    helmRelease;
-    namespace;
-    /**
-     * Create a new OAuth2-Proxy resource.
-     * @param name The name of OAuth2-Proxy resource.
-     * @param args A bag of arguments to control the OAuth2-Proxy creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name, args, opts) {
-        super("oauth2proxy", name, args, opts);
-        opts = this.opts(k8s.Provider);
-        args.replicas ??= 1;
-        this.namespace = args.namespace
-            ? pulumi.output(args.namespace)
-            : new k8s.core.v1.Namespace(name, { metadata: { name } }, opts).metadata.name;
-        this.helmRelease = new kubernetes.helm.v3.Release(name, {
-            name,
-            namespace: this.namespace,
-            repositoryOpts: { repo: "https://oauth2-proxy.github.io/manifests" },
-            chart: "oauth2-proxy",
-            values: {
-                fullnameOverride: name,
-                replicaCount: args.replicas,
-                alphaConfig: { enabled: true, serverConfigData: {}, metricsConfigData: {} },
-                //service: { ipDualStack: { enabled: true } },
-                resources: {
-                    requests: { memory: "128Mi" },
-                    limits: { memory: "192Mi" },
-                },
-                /*
-      
-      
-                */
-                ingress: {
-                    enabled: false,
-                    className: args.ingressClassName,
-                    annotations: {
-                        "traefik.ingress.kubernetes.io/router.entrypoints": "websecure",
-                        "traefik.ingress.kubernetes.io/router.tls": "true",
-                        "cert-manager.io/cluster-issuer": args.clusterIssuer ?? Certificate.DefaultClusterIssuer,
-                    },
-                    hosts: [{ host: args.hostname, paths: [{ path: "/", pathType: "Prefix" }] }],
-                    tls: [{ secretName: `${name}-tls`, hosts: [args.hostname] }],
-                },
-            },
-        }, opts);
-        this.registerOutputs();
-    }
-}
-//# sourceMappingURL=deployment.js.map

package/lib/oauth2Proxy/deployment.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../../lib/oauth2Proxy/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAUtD,MAAM,OAAO,WAAY,SAAQ,iBAAiB;IAC/B,WAAW,CAA6B;IACzC,SAAS,CAAwB;IAEjD;;;;;OAKG;IACH,YAAY,IAAY,EAAE,IAAqB,EAAE,IAAsC;QACrF,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEvC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC;QAEpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;YAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhF,IAAI,CAAC,WAAW,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/C,IAAI,EACJ;YACE,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,EAAE,IAAI,EAAE,0CAA0C,EAAE;YACpE,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE;gBACN,gBAAgB,EAAE,IAAI;gBACtB,YAAY,EAAE,IAAI,CAAC,QAAQ;gBAC3B,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE;gBAC3E,8CAA8C;gBAC9C,SAAS,EAAE;oBACT,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;oBAC7B,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;iBAC5B;gBAED;;;kBAGE;gBAEF,OAAO,EAAE;oBACP,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,IAAI,CAAC,gBAAgB;oBAChC,WAAW,EAAE;wBACX,kDAAkD,EAAE,WAAW;wBAC/D,0CAA0C,EAAE,MAAM;wBAClD,gCAAgC,EAAE,IAAI,CAAC,aAAa,IAAI,WAAW,CAAC,oBAAoB;qBACzF;oBACD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;oBAC5E,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;iBAC7D;aACF;SACF,EACD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;CACF"}

package/lib/oauth2Proxy/index.d.ts

@@ -1,2 +0,0 @@
-import { OAuth2ProxyArgs, OAuth2Proxy } from "./deployment.js";
-export { OAuth2ProxyArgs, OAuth2Proxy };

package/lib/oauth2Proxy/index.js

@@ -1,3 +0,0 @@
-import { OAuth2Proxy } from "./deployment.js";
-export { OAuth2Proxy };
-//# sourceMappingURL=index.js.map

package/lib/oauth2Proxy/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/oauth2Proxy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAmB,WAAW,EAAE,CAAC"}

package/lib/paperless/deployment.d.ts

@@ -1,36 +0,0 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as k8s from "@pulumi/kubernetes";
-import { ComponentResource } from "../common/index.js";
-export interface RedisArgs {
-    address: pulumi.Input<string>;
-    database?: pulumi.Input<number>;
-}
-export interface PaperlessArgs {
-    namespace?: pulumi.Input<string>;
-    replicas?: pulumi.Input<number>;
-    storageClassName?: pulumi.Input<string>;
-    storage?: pulumi.Input<string>;
-    redis?: pulumi.Input<RedisArgs>;
-    hostname: pulumi.Input<string>;
-    ingressClassName?: pulumi.Input<string>;
-    ingressAnnotations?: pulumi.Input<{
-        [key: string]: pulumi.Input<string>;
-    }>;
-    resources?: pulumi.Input<k8s.types.input.core.v1.ResourceRequirements>;
-    protect?: boolean;
-}
-export declare class Paperless extends ComponentResource {
-    private readonly dataVolumeClaim;
-    private readonly deployment;
-    private readonly podDisruptionBudget;
-    private readonly service;
-    private readonly ingress;
-    readonly namespace: pulumi.Output<string>;
-    /**
-     * Create a new paperless resource.
-     * @param name The name of the paperless resource.
-     * @param args A bag of arguments to control the paperless creation.
-     * @param opts A bag of options that control this resource's behavior.
-     */
-    constructor(name: string, args: PaperlessArgs, opts?: pulumi.ComponentResourceOptions);
-}