alasio 7.0.0 → 9.0.0

package/dist/cli/src/manifests/collector.js

@@ -1,33 +1,54 @@
+import { COMPUTE_CTL_PORT } from "../../../neon/control/branches.js";
 import { imageReference } from "../images.js";
-import { COLLECTOR_PORT, collectorRuns, componentName, given, goJson, lakeRuns, NAMESPACE, neonName, ONE, replicasOf, restrictedContainer, selectorLabels, sha256, stackLabels, stackPodSpec, } from "./common.js";
+import { COLLECTOR_PORT, collectorRuns, componentName, given, goJson, lakeRuns, NAMESPACE, ONE, replicasOf, restrictedContainer, scaled, selectorLabels, sha256, stackLabels, stackPodSpec } from "./common.js";
+import { LOG_BROKERS, LOG_METRICS_PORT, LOG_RECORD_BYTES, logPrincipalSecret, TELEMETRY_TOPICS } from "./log.js";
+import { replicaBudget, spread } from "./disruption.js";
+import { JUICEFS_METRICS_PORT, sandboxServiceRuns, WORKSPACE_MOUNT_COMPONENT } from "./sandbox-gateway.js";
+import { INTAKE_COMPONENT, LAKE_METRICS_PORT, LAKE_QUERY_PORT, LOADER_COMPONENT, QUERY_COMPONENT } from "./lake.js";
+import { COMPONENTS, FILER_STORE, FILER_STORE_USERS, METRICS_PORT as SEAWEEDFS_METRICS_PORT } from "./object-store.js";
 import { priority } from "./priorities.js";
+import { cpuScaledObject } from "./scalers.js";
 import { verticalPodAutoscaler } from "./sizing.js";
-import { DRIVER_METRICS_PORT, DRIVER_POD_NAME, JUICEFS_METRICS_PORT, MOUNT_POD_NAME } from "./juicefs-csi.js";
-import { LAKE_INTAKE_PORT } from "./lake.js";
-import { COMPONENTS, FILER_STORE, FILER_STORE_USERS, METRICS_PORT as SEAWEEDFS_METRICS_PORT } from "./object-store.js";
 import { VALKEY_PORT, valkeyPassword } from "./valkey.js";
+import { WEBHOOK_HEALTH_PORT } from "./webhook.js";
 import { VALKEY } from "./workspace-storage.js";
-/** The collector's name, its pods' component, and its Service's. */
+/** The gateway's name, its pods' component, and its Service's, which every producer exports to. */
 export const COLLECTOR = componentName("collector");
-const COMPONENT = "collector";
+export const GATEWAY_COMPONENT = "collector";
+/** The scraper's name and its pods' component. */
+export const SCRAPER = componentName("collector-scraper");
+export const SCRAPER_COMPONENT = "collector-scraper";
 /**
  * How often it scrapes the stack. The stack's metrics are most of all the telemetry
  * there is (the pageserver's alone half of it), some 30 points a second at this interval.
  */
 const SCRAPE_INTERVAL = "60s";
 /**
- * How it batches spans and log records: a request of at most as many as one insert of
- * the lake inlines (neon/lake/src/otel.ts's INLINED_ROWS), within 5 seconds of the first,
- * so those few, which a query wants at once, are inlined in the catalog and make no file.
+ * How the scraper batches what it scrapes: a minute's at a time, an export of up to
+ * 10,000 points, some megabytes at most, which the log takes as one record of up to
+ * 8 MiB (./log.ts) and the intake writes in one commit, a file of each kind's.
  */
-const BATCH = { send_batch_size: 1000, send_batch_max_size: 1000, timeout: "5s" };
+const METRICS_BATCH = { send_batch_size: 10_000, send_batch_max_size: 10_000, timeout: "60s" };
 /**
- * How it batches metric points: a minute's at a time, a request of thousands, which the
- * lake writes as a file of each kind's rather than inline in its catalog. Measured on the
- * stack, inlining them all cost Neon some 45 KB of WAL a second and the catalog 130 MB an
- * hour until flushed; a request every 5 seconds not inlined, 50 files a minute.
+ * Each node's filesystem, read from its kubelet's stats (k8s.node.filesystem.available and
+ * .capacity): a kubeletstats receiver of each node the Kubernetes observer lists, with the
+ * scraper's ServiceAccount, whose serving certificate is the node's own.
  */
-const METRICS_BATCH = { send_batch_size: 10_000, send_batch_max_size: 10_000, timeout: "60s" };
+const NODE_STATS = {
+    watch_observers: ["k8s_observer"],
+    receivers: {
+        kubeletstats: {
+            rule: 'type == "k8s.node"',
+            config: {
+                auth_type: "serviceAccount",
+                endpoint: "`endpoint`:`kubelet_endpoint_port`",
+                insecure_skip_verify: true,
+                collection_interval: SCRAPE_INTERVAL,
+                metric_groups: ["node"],
+            },
+        },
+    },
+};
 /** Whether the bundled object store runs, whose parts it scrapes and whose filer store it reads. */
 const seaweedfsRuns = ({ neon, objectStore }) => neon.enabled && objectStore.bundled.enabled;
 /** The object store's parts it scrapes, by their pods' component: all but the filer store, which it reads as a Valkey. */
@@ -42,64 +63,58 @@ function valkeys(config) {
             : []),
     ];
 }
-/** What it scrapes: each job's targets, by job, each of neon-control's replicas, the object store's parts, and with workspace storage JuiceFS's pods. */
-function scrapes(config) {
-    const { neon, workspaceStorage } = config;
-    if (!neon.enabled)
-        return [];
-    const safekeeper = neonName("safekeeper");
-    const targets = {
-        pageserver: [`${neonName("pageserver")}:9898`],
-        "storage-controller": [`${neonName("storage-controller")}:1234`],
-        "storage-broker": [`${neonName("storage-broker")}:50051`],
-        compute: [`${neonName("compute")}:3080`],
-        proxy: [`${neonName("proxy")}:7001`],
-        safekeeper: Array.from({ length: neon.safekeepers.scaling.min }, (_, index) => `${safekeeper}-${index}.${safekeeper}:7676`),
-        ...(lakeRuns(config) ? { lake: [`${componentName("lake")}:9464`] } : {}),
-    };
-    // The pods of `namespace` the label `label` selects: each running one at its address, on
-    // the port `port` they serve their metrics on, named by its pod. The collector reads `$`
-    // as the start of a variable, and `$$` as a `$`.
-    const podsJob = (job, namespace, label, port) => ({
+/**
+ * The scrape job `job` of the pods of `namespace` whose component matches `components`:
+ * each running one at its address, on `port`, named by its pod, and labelled with its
+ * component where `labelled`. The collector reads `$` as the start of a variable, and
+ * `$$` as a `$`.
+ */
+function podJob(job, namespace, components, port, labelled = false) {
+    return {
         job_name: job,
         scrape_interval: SCRAPE_INTERVAL,
-        kubernetes_sd_configs: [{
-                role: "pod",
-                namespaces: { names: [namespace] },
-                selectors: [{ role: "pod", label }],
-            }],
+        kubernetes_sd_configs: [{ role: "pod", namespaces: { names: [namespace] } }],
         relabel_configs: [
+            { source_labels: ["__meta_kubernetes_pod_label_app_kubernetes_io_component"], regex: components.join("|"), action: "keep" },
             { source_labels: ["__meta_kubernetes_pod_phase"], regex: "Running", action: "keep" },
             { source_labels: ["__meta_kubernetes_pod_ip"], target_label: "__address__", replacement: `$$1:${port}` },
             { source_labels: ["__meta_kubernetes_pod_name"], target_label: "pod" },
-        ],
-    });
-    // The object store's parts, each pod of each, which the collector may list in its own
-    // namespace, as their gateways' count moves; each labelled with its part.
-    const seaweedfsJob = {
-        job_name: "seaweedfs",
-        scrape_interval: SCRAPE_INTERVAL,
-        kubernetes_sd_configs: [{ role: "pod", namespaces: { names: [NAMESPACE] } }],
-        relabel_configs: [
-            { source_labels: ["__meta_kubernetes_pod_label_app_kubernetes_io_component"], regex: SEAWEEDFS_SCRAPED.join("|"), action: "keep" },
-            { source_labels: ["__meta_kubernetes_pod_phase"], regex: "Running", action: "keep" },
-            { source_labels: ["__meta_kubernetes_pod_ip"], target_label: "__address__", replacement: `$$1:${SEAWEEDFS_METRICS_PORT}` },
-            { source_labels: ["__meta_kubernetes_pod_name"], target_label: "pod" },
-            { source_labels: ["__meta_kubernetes_pod_label_app_kubernetes_io_component"], target_label: "component" },
+            ...(labelled ? [{ source_labels: ["__meta_kubernetes_pod_label_app_kubernetes_io_component"], target_label: "component" }] : []),
         ],
     };
+}
+/** What it scrapes, a job of each component's pods, by the job's name, which its metrics' service is named. */
+function scrapes(config) {
+    const { neon } = config;
+    const stack = {
+        ...(neon.enabled
+            ? {
+                pageserver: [["neon-pageserver"], 9898],
+                "storage-controller": [["neon-storage-controller"], 1234],
+                "storage-broker": [["neon-storage-broker"], 50051],
+                // The primary and, where the lake runs, its read replica.
+                compute: [["neon-compute", "neon-compute-ro"], COMPUTE_CTL_PORT],
+                // Each replica's own wakes and sleeps, as any of them wakes a compute.
+                "neon-control": [["neon-control"], 8080],
+                proxy: [["neon-proxy"], 7001],
+                safekeeper: [["neon-safekeeper"], 7676],
+            }
+            : {}),
+        ...(lakeRuns(config)
+            ? { "lake-loader": [[LOADER_COMPONENT], LAKE_METRICS_PORT], "lake-query": [[QUERY_COMPONENT], LAKE_QUERY_PORT], "lake-intake": [[INTAKE_COMPONENT], LAKE_METRICS_PORT] }
+            : {}),
+        log: [["log"], LOG_METRICS_PORT],
+        webhook: [["webhook"], WEBHOOK_HEALTH_PORT],
+    };
     return [
-        ...Object.keys(targets).sort().map((job) => ({ job_name: job, scrape_interval: SCRAPE_INTERVAL, static_configs: [{ targets: targets[job] }] })),
-        ...(seaweedfsRuns(config) ? [seaweedfsJob] : []),
-        // Each replica's own wakes and sleeps, as any of them wakes a compute.
-        podsJob("neon-control", NAMESPACE, "app.kubernetes.io/component=neon-control", 8080),
-        // The mount pods, the clients, and the controller's and node service's, the driver.
-        ...(workspaceStorage.enabled
-            ? [
-                podsJob("juicefs", workspaceStorage.csi.namespace, `app.kubernetes.io/name=${MOUNT_POD_NAME}`, JUICEFS_METRICS_PORT),
-                podsJob("juicefs-csi", workspaceStorage.csi.namespace, `app.kubernetes.io/name=${DRIVER_POD_NAME}`, DRIVER_METRICS_PORT),
-            ]
-            : []),
+        ...Object.keys(stack).sort().map((job) => {
+            const [components, port] = stack[job] ?? [[], 0];
+            return podJob(job, NAMESPACE, components, port);
+        }),
+        // The object store's parts, each labelled with its part.
+        ...(seaweedfsRuns(config) ? [podJob("seaweedfs", NAMESPACE, SEAWEEDFS_SCRAPED, SEAWEEDFS_METRICS_PORT, true)] : []),
+        // Each node's mount of workspace storage, JuiceFS's client.
+        ...(sandboxServiceRuns(config) ? [podJob("juicefs", NAMESPACE, [WORKSPACE_MOUNT_COMPONENT], JUICEFS_METRICS_PORT)] : []),
     ];
 }
 /** The exporter to telemetry.otlpEndpoint, by its name in the collector's configuration, in the protocol it is set to, with its headers. */
@@ -110,20 +125,50 @@ function externalExporter({ telemetry }) {
         return { "otlp/external": { endpoint, tls: { insecure: endpoint.startsWith("http://") }, ...headers } };
     return { "otlphttp/external": { endpoint, encoding: otlpProtocol === "http/json" ? "json" : "proto", ...headers } };
 }
-/** The collector's configuration. */
-function collectorConfig(config) {
-    const { telemetry } = config;
-    const scraped = scrapes(config);
-    const read = valkeys(config);
+/** What the gateway is given, and the scraper: its health, its OTLP receiver, and none of its own metrics. */
+const BASE = {
+    extensions: { health_check: { endpoint: "0.0.0.0:13133" } },
+    receivers: { otlp: { protocols: { http: { endpoint: `0.0.0.0:${COLLECTOR_PORT}` } } } },
+};
+const SERVICE = { extensions: ["health_check"], telemetry: { metrics: { level: "none" } } };
+/**
+ * The gateway's configuration: every signal from its OTLP receiver straight to the log,
+ * each to its topic, acked by every replica the log keeps of it, unbatched and unqueued,
+ * so its producer's export is answered by the log's, compressed with zstd, as the log keeps
+ * it (./log.ts logAccess); and to the external endpoint.
+ */
+function gatewayConfig(config) {
     const exporters = {
-        ...(lakeRuns(config) ? { "otlphttp/lake": { endpoint: `http://${componentName("lake")}:${LAKE_INTAKE_PORT}` } } : {}),
-        ...(telemetry.otlpEndpoint ? externalExporter(config) : {}),
+        ...(lakeRuns(config)
+            ? {
+                kafka: {
+                    brokers: [LOG_BROKERS],
+                    protocol_version: "4.2.0",
+                    auth: { sasl: { username: "gateway", password: "${env:LOG_PASSWORD}", mechanism: "SCRAM-SHA-512" } },
+                    traces: { topic: TELEMETRY_TOPICS.traces, encoding: "otlp_proto" },
+                    logs: { topic: TELEMETRY_TOPICS.logs, encoding: "otlp_proto" },
+                    metrics: { topic: TELEMETRY_TOPICS.metrics, encoding: "otlp_proto" },
+                    producer: { required_acks: -1, max_message_bytes: LOG_RECORD_BYTES, compression: "zstd" },
+                    timeout: "10s",
+                    sending_queue: { enabled: false },
+                    retry_on_failure: { enabled: false },
+                },
+            }
+            : {}),
+        ...(config.telemetry.otlpEndpoint ? externalExporter(config) : {}),
     };
-    const sent = (processor) => ({ receivers: ["otlp"], processors: [processor], exporters: Object.keys(exporters) });
+    // Nothing between: a log record without an id of its own the lake's intake knows by what it
+    // is (neon/lake/src/otel.ts logRecordId), so the same record sent twice is one.
+    const sent = { receivers: ["otlp"], exporters: Object.keys(exporters) };
+    return { ...BASE, exporters, service: { ...SERVICE, pipelines: { traces: sent, logs: sent, metrics: sent } } };
+}
+/** The scraper's configuration: what it scrapes and reads, of the stack's, and of each node's filesystem, batched a minute's at a time, to the gateway. */
+function scraperConfig(scraped, read) {
+    const stack = [...(scraped.length > 0 ? ["prometheus"] : []), ...read.map(({ receiver }) => receiver)];
     return {
-        extensions: { health_check: { endpoint: "0.0.0.0:13133" } },
+        extensions: { ...BASE.extensions, k8s_observer: { auth_type: "serviceAccount", observe_nodes: true, observe_pods: false } },
         receivers: {
-            otlp: { protocols: { http: { endpoint: `0.0.0.0:${COLLECTOR_PORT}` } } },
+            "receiver_creator/nodes": NODE_STATS,
             ...(scraped.length > 0 ? { prometheus: { config: { scrape_configs: scraped } } } : {}),
             ...Object.fromEntries(read.map(({ receiver, name, username, variable }) => [receiver, {
                     endpoint: `${name}:${VALKEY_PORT}`,
@@ -137,93 +182,157 @@ function collectorConfig(config) {
                 }])),
         },
         processors: {
-            batch: BATCH,
-            "batch/metrics": METRICS_BATCH,
-            // What the collector scrapes is the stack's.
-            ...(scraped.length > 0 ? { "resource/stack": { attributes: [{ key: "service.namespace", value: "alasio-neon", action: "upsert" }] } } : {}),
+            batch: METRICS_BATCH,
+            // What the scraper scrapes is the stack's.
+            "resource/stack": { attributes: [{ key: "service.namespace", value: "alasio-neon", action: "upsert" }] },
         },
-        exporters,
+        exporters: { "otlphttp/gateway": { endpoint: `http://${COLLECTOR}:${COLLECTOR_PORT}` } },
         service: {
-            extensions: ["health_check"],
-            telemetry: { metrics: { level: "none" } },
+            ...SERVICE,
+            extensions: [...SERVICE.extensions, "k8s_observer"],
             pipelines: {
-                traces: sent("batch"),
-                logs: sent("batch"),
-                metrics: sent("batch/metrics"),
-                ...(scraped.length > 0
-                    ? {
-                        "metrics/stack": {
-                            receivers: ["prometheus", ...read.map(({ receiver }) => receiver)],
-                            processors: ["resource/stack", "batch/metrics"],
-                            exporters: Object.keys(exporters),
-                        },
-                    }
-                    : {}),
+                "metrics/nodes": { receivers: ["receiver_creator/nodes"], processors: ["batch"], exporters: ["otlphttp/gateway"] },
+                ...(stack.length > 0 ? { metrics: { receivers: stack, processors: ["resource/stack", "batch"], exporters: ["otlphttp/gateway"] } } : {}),
             },
         },
     };
 }
-/** The collector's objects, when it runs. */
-export function collectorObjects(config) {
-    if (!collectorRuns(config))
-        return [];
-    const { telemetry, workspaceStorage } = config;
-    const configuration = collectorConfig(config);
-    // The namespaces it finds pods to scrape in: the driver's, JuiceFS's, and its own, neon-control's and the object store's parts'.
-    const listed = [...(workspaceStorage.enabled ? [workspaceStorage.csi.namespace] : []), ...(config.neon.enabled ? [NAMESPACE] : [])];
-    const metadata = { name: COLLECTOR, namespace: NAMESPACE, labels: stackLabels(COMPONENT) };
+/** A collector's container, `name`, run on the configuration its ConfigMap mounts at /etc/otelcol. */
+function collectorContainer(config, name, { env, resources, ports, headers }) {
+    return {
+        name,
+        image: imageReference(config.images.collector),
+        imagePullPolicy: config.images.pullPolicy,
+        args: ["--config=/etc/otelcol/config.yaml"],
+        ...given("env", env),
+        ports: [...ports, { name: "health", containerPort: 13133 }],
+        readinessProbe: { httpGet: { path: "/", port: "health" }, periodSeconds: 5 },
+        securityContext: { ...restrictedContainer(), readOnlyRootFilesystem: true },
+        ...(resources ? { resources } : {}),
+        volumeMounts: [
+            { name: "config", mountPath: "/etc/otelcol", readOnly: true },
+            ...(headers ? [{ name: "headers", mountPath: "/etc/otelcol/headers", readOnly: true }] : []),
+        ],
+    };
+}
+/**
+ * The gateway's objects: who it is, its configuration, its Service, its Deployment, and what
+ * scales and sizes it. Its ServiceAccount, of no rights and no token in its pods, is named in
+ * its pods as it is: where a pod template names none, Kubernetes keeps the one it was named
+ * before in serviceAccount, deprecated, which a template applied over an older one keeps, so
+ * its pods would name a ServiceAccount the installation no longer has.
+ */
+function gatewayObjects(config) {
+    const { telemetry } = config;
+    const { scaling, resources } = telemetry.collector.gateway;
+    const configuration = gatewayConfig(config);
+    const metadata = { name: COLLECTOR, namespace: NAMESPACE, labels: stackLabels(GATEWAY_COMPONENT) };
     const configMap = { apiVersion: "v1", kind: "ConfigMap", metadata, data: { "config.yaml": goJson(configuration, "  ") } };
     const service = {
         apiVersion: "v1",
         kind: "Service",
         metadata,
-        spec: { selector: selectorLabels(COMPONENT), ports: [{ name: "otlp-http", port: COLLECTOR_PORT, targetPort: "otlp-http" }] },
+        spec: { selector: selectorLabels(GATEWAY_COMPONENT), ports: [{ name: "otlp-http", port: COLLECTOR_PORT, targetPort: "otlp-http" }] },
     };
+    const env = lakeRuns(config) ? [{ name: "LOG_PASSWORD", valueFrom: { secretKeyRef: { name: logPrincipalSecret("gateway"), key: "password" } } }] : [];
+    const volumes = [
+        { name: "config", configMap: { name: COLLECTOR } },
+        // The external exporter's headers: a YAML map, under the key headersKey + ".yaml"
+        // in the headers Secret, since the collector takes headers as a map.
+        ...(telemetry.headersSecret
+            ? [{ name: "headers", secret: { secretName: telemetry.headersSecret, items: [{ key: `${telemetry.headersKey}.yaml`, path: "headers.yaml" }] } }]
+            : []),
+    ];
+    const deployment = {
+        apiVersion: "apps/v1",
+        kind: "Deployment",
+        metadata,
+        spec: {
+            ...replicasOf(scaling),
+            selector: { matchLabels: selectorLabels(GATEWAY_COMPONENT) },
+            template: {
+                metadata: { labels: stackLabels(GATEWAY_COMPONENT), annotations: { "checksum/config": sha256(goJson(configuration)) } },
+                spec: {
+                    serviceAccountName: COLLECTOR,
+                    automountServiceAccountToken: false,
+                    ...priority("floor"),
+                    ...stackPodSpec(config),
+                    ...spread(GATEWAY_COMPONENT, scaling),
+                    containers: [
+                        collectorContainer(config, "collector", { env, resources, ports: [{ name: "otlp-http", containerPort: COLLECTOR_PORT }], headers: Boolean(telemetry.headersSecret) }),
+                    ],
+                    volumes,
+                },
+            },
+        },
+    };
+    const serviceAccount = { apiVersion: "v1", kind: "ServiceAccount", metadata, automountServiceAccountToken: false };
+    return [
+        serviceAccount,
+        configMap,
+        service,
+        deployment,
+        // Its start is its configuration read and its exporters connected, in seconds; then the
+        // batches its clients held while it was not ready, a minute's at most.
+        ...cpuScaledObject(deployment, scaling, { percent: 80, startUpSeconds: 60 }),
+        ...replicaBudget(GATEWAY_COMPONENT, NAMESPACE, scaling),
+        verticalPodAutoscaler(deployment, "InPlace", scaled(scaling) ? ["memory"] : undefined),
+    ];
+}
+/** The scraper's objects: who it is, that it may list the nodes and read their kubelets' stats, and the pods it scrapes, its configuration and its Deployment. */
+function scraperObjects(config) {
+    const scraped = scrapes(config);
+    const read = valkeys(config);
+    const configuration = scraperConfig(scraped, read);
+    const metadata = { name: SCRAPER, namespace: NAMESPACE, labels: stackLabels(SCRAPER_COMPONENT) };
+    const configMap = { apiVersion: "v1", kind: "ConfigMap", metadata, data: { "config.yaml": goJson(configuration, "  ") } };
     const deployment = {
         apiVersion: "apps/v1",
         kind: "Deployment",
         metadata,
         spec: {
             ...replicasOf(ONE),
-            selector: { matchLabels: selectorLabels(COMPONENT) },
+            selector: { matchLabels: selectorLabels(SCRAPER_COMPONENT) },
             template: {
-                metadata: { labels: stackLabels(COMPONENT), annotations: { "checksum/config": sha256(goJson(configuration)) } },
+                metadata: { labels: stackLabels(SCRAPER_COMPONENT), annotations: { "checksum/config": sha256(goJson(configuration)) } },
                 spec: {
-                    ...(listed.length > 0 ? { serviceAccountName: COLLECTOR } : {}),
+                    serviceAccountName: SCRAPER,
                     ...priority("floor"),
                     ...stackPodSpec(config),
-                    containers: [{
-                            name: "collector",
-                            image: imageReference(telemetry.collector.image),
-                            imagePullPolicy: "IfNotPresent",
-                            args: ["--config=/etc/otelcol/config.yaml"],
-                            ...given("env", valkeys(config).map(({ secret, variable }) => ({ name: variable, valueFrom: valkeyPassword(secret) }))),
-                            ports: [{ name: "otlp-http", containerPort: COLLECTOR_PORT }, { name: "health", containerPort: 13133 }],
-                            readinessProbe: { httpGet: { path: "/", port: "health" }, periodSeconds: 5 },
-                            securityContext: { ...restrictedContainer(), readOnlyRootFilesystem: true },
-                            resources: telemetry.collector.resources,
-                            volumeMounts: [
-                                { name: "config", mountPath: "/etc/otelcol", readOnly: true },
-                                ...(telemetry.headersSecret ? [{ name: "headers", mountPath: "/etc/otelcol/headers", readOnly: true }] : []),
-                            ],
-                        }],
-                    volumes: [
-                        { name: "config", configMap: { name: COLLECTOR } },
-                        // The external exporter's headers: a YAML map, under the key headersKey + ".yaml"
-                        // in the headers Secret, since the collector takes headers as a map.
-                        ...(telemetry.headersSecret
-                            ? [{ name: "headers", secret: { secretName: telemetry.headersSecret, items: [{ key: `${telemetry.headersKey}.yaml`, path: "headers.yaml" }] } }]
-                            : []),
+                    containers: [
+                        collectorContainer(config, "scraper", {
+                            env: read.map(({ secret, variable }) => ({ name: variable, valueFrom: valkeyPassword(secret) })),
+                            resources: config.telemetry.collector.scraper.resources,
+                            ports: [],
+                            headers: false,
+                        }),
                     ],
+                    volumes: [{ name: "config", configMap: { name: SCRAPER } }],
                 },
             },
         },
     };
-    const sized = [deployment, verticalPodAutoscaler(deployment, "InPlace")];
-    if (listed.length === 0)
-        return [configMap, service, ...sized];
-    // Who the collector is, and that it may find the pods it scrapes in the namespaces they are in.
+    const sized = [configMap, deployment, verticalPodAutoscaler(deployment, "InPlace")];
+    // Who the scraper is, and that it may list the nodes and read their kubelets' stats.
     const serviceAccount = { apiVersion: "v1", kind: "ServiceAccount", metadata };
+    const clusterMetadata = { name: SCRAPER, labels: metadata.labels };
+    const nodeReader = {
+        apiVersion: "rbac.authorization.k8s.io/v1",
+        kind: "ClusterRole",
+        metadata: clusterMetadata,
+        rules: [{ apiGroups: [""], resources: ["nodes"], verbs: ["get", "list", "watch"] }, { apiGroups: [""], resources: ["nodes/stats"], verbs: ["get"] }],
+    };
+    const nodeReading = {
+        apiVersion: "rbac.authorization.k8s.io/v1",
+        kind: "ClusterRoleBinding",
+        metadata: clusterMetadata,
+        subjects: [{ kind: "ServiceAccount", name: SCRAPER, namespace: NAMESPACE }],
+        roleRef: { apiGroup: "rbac.authorization.k8s.io", kind: "ClusterRole", name: SCRAPER },
+    };
+    if (scraped.length === 0)
+        return [serviceAccount, nodeReader, nodeReading, ...sized];
+    // And that it may find the pods it scrapes in its own namespace, where they are.
+    const listed = [NAMESPACE];
     const podLister = (namespace) => {
         const inNamespace = { ...metadata, namespace };
         const role = {
@@ -236,11 +345,17 @@ export function collectorObjects(config) {
             apiVersion: "rbac.authorization.k8s.io/v1",
             kind: "RoleBinding",
             metadata: inNamespace,
-            subjects: [{ kind: "ServiceAccount", name: COLLECTOR, namespace: NAMESPACE }],
-            roleRef: { apiGroup: "rbac.authorization.k8s.io", kind: "Role", name: COLLECTOR },
+            subjects: [{ kind: "ServiceAccount", name: SCRAPER, namespace: NAMESPACE }],
+            roleRef: { apiGroup: "rbac.authorization.k8s.io", kind: "Role", name: SCRAPER },
         };
         return [role, binding];
     };
-    return [serviceAccount, ...listed.flatMap(podLister), configMap, service, ...sized];
+    return [serviceAccount, nodeReader, nodeReading, ...listed.flatMap(podLister), ...sized];
+}
+/** The collector's objects, when it runs: its gateway's, and its scraper's. */
+export function collectorObjects(config) {
+    if (!collectorRuns(config))
+        return [];
+    return [...gatewayObjects(config), ...scraperObjects(config)];
 }
 //# sourceMappingURL=collector.js.map

package/dist/cli/src/manifests/collector.js.map

@@ -1 +1 @@
-{"version":3,"file":"collector.js","sourceRoot":"","sources":["../../../../src/manifests/collector.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,EACb,KAAK,EACL,MAAM,EACN,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,GAAG,EACH,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,MAAM,EACN,WAAW,EACX,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,IAAI,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACvH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAEhD,oEAAoE;AACpE,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;AACpD,MAAM,SAAS,GAAG,WAAW,CAAC;AAE9B;;;GAGG;AACH,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;GAIG;AACH,MAAM,KAAK,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAElF;;;;;GAKG;AACH,MAAM,aAAa,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAE/F,oGAAoG;AACpG,MAAM,aAAa,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAiB,EAAW,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;AAErH,0HAA0H;AAC1H,MAAM,iBAAiB,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;AAW7G,uIAAuI;AACvI,SAAS,OAAO,CAAC,MAAqB;IACpC,MAAM,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC;IACxC,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9H,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC;YACvB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;YAC9I,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,yJAAyJ;AACzJ,SAAS,OAAO,CAAC,MAAqB;IACpC,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IAC1C,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,OAAO,GAA6B;QACxC,UAAU,EAAE,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC;QAC9C,oBAAoB,EAAE,CAAC,GAAG,QAAQ,CAAC,oBAAoB,CAAC,OAAO,CAAC;QAChE,gBAAgB,EAAE,CAAC,GAAG,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QACzD,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC;QACxC,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;QACpC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,UAAU,IAAI,KAAK,IAAI,UAAU,OAAO,CAAC;QAC3H,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;IACF,yFAAyF;IACzF,yFAAyF;IACzF,iDAAiD;IACjD,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,SAAiB,EAAE,KAAa,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC;QAChF,QAAQ,EAAE,GAAG;QACb,eAAe,EAAE,eAAe;QAChC,qBAAqB,EAAE,CAAC;gBACtB,IAAI,EAAE,KAAK;gBACX,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE;gBAClC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;aACpC,CAAC;QACF,eAAe,EAAE;YACf,EAAE,aAAa,EAAE,CAAC,6BAA6B,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE;YACpF,EAAE,aAAa,EAAE,CAAC,0BAA0B,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,IAAI,EAAE,EAAE;YACxG,EAAE,aAAa,EAAE,CAAC,4BAA4B,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE;SACvE;KACF,CAAC,CAAC;IACH,sFAAsF;IACtF,0EAA0E;IAC1E,MAAM,YAAY,GAAG;QACnB,QAAQ,EAAE,WAAW;QACrB,eAAe,EAAE,eAAe;QAChC,qBAAqB,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAC5E,eAAe,EAAE;YACf,EAAE,aAAa,EAAE,CAAC,yDAAyD,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;YAClI,EAAE,aAAa,EAAE,CAAC,6BAA6B,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE;YACpF,EAAE,aAAa,EAAE,CAAC,0BAA0B,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,sBAAsB,EAAE,EAAE;YAC1H,EAAE,aAAa,EAAE,CAAC,4BAA4B,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE;YACtE,EAAE,aAAa,EAAE,CAAC,yDAAyD,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE;SAC1G;KACF,CAAC;IACF,OAAO;QACL,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/I,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,uEAAuE;QACvE,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,0CAA0C,EAAE,IAAI,CAAC;QACpF,oFAAoF;QACpF,GAAG,CAAC,gBAAgB,CAAC,OAAO;YAC1B,CAAC,CAAC;gBACA,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,0BAA0B,cAAc,EAAE,EAAE,oBAAoB,CAAC;gBACpH,OAAO,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,0BAA0B,eAAe,EAAE,EAAE,mBAAmB,CAAC;aACzH;YACD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,4IAA4I;AAC5I,SAAS,gBAAgB,CAAC,EAAE,SAAS,EAAiB;IACpD,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,SAAS,CAAC;IAC1E,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,IAAI,YAAY,KAAK,MAAM;QAAE,OAAO,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC;IACrI,OAAO,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC;AACtH,CAAC;AAED,qCAAqC;AACrC,SAAS,eAAe,CAAC,MAAqB;IAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,UAAU,aAAa,CAAC,MAAM,CAAC,IAAI,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrH,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC1H,OAAO;QACL,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE;QAC3D,SAAS,EAAE;YACT,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,cAAc,EAAE,EAAE,EAAE,EAAE;YACxE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;oBACpF,QAAQ,EAAE,GAAG,IAAI,IAAI,WAAW,EAAE;oBAClC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjC,QAAQ,EAAE,UAAU,QAAQ,GAAG;oBAC/B,mBAAmB,EAAE,eAAe;oBACpC,+DAA+D;oBAC/D,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;oBACjD,iHAAiH;oBACjH,mBAAmB,EAAE,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;iBAC7D,CAAC,CAAC,CAAC;SACL;QACD,UAAU,EAAE;YACV,KAAK,EAAE,KAAK;YACZ,eAAe,EAAE,aAAa;YAC9B,6CAA6C;YAC7C,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5I;QACD,SAAS;QACT,OAAO,EAAE;YACP,UAAU,EAAE,CAAC,cAAc,CAAC;YAC5B,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACzC,SAAS,EAAE;gBACT,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC;gBACrB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;gBACnB,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC;gBAC9B,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBACpB,CAAC,CAAC;wBACA,eAAe,EAAE;4BACf,SAAS,EAAE,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;4BAClE,UAAU,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;4BAC/C,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;yBAClC;qBACF;oBACD,CAAC,CAAC,EAAE,CAAC;aACR;SACF;KACF,CAAC;AACJ,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IAC/C,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9C,iIAAiI;IACjI,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpI,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;IAC3F,MAAM,SAAS,GAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACvI,MAAM,OAAO,GAAc;QACzB,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,SAAS;QACf,QAAQ;QACR,IAAI,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,EAAE;KAC7H,CAAC;IACF,MAAM,UAAU,GAAiB;QAC/B,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,YAAY;QAClB,QAAQ;QACR,IAAI,EAAE;YACJ,GAAG,UAAU,CAAC,GAAG,CAAC;YAClB,QAAQ,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE;YACpD,QAAQ,EAAE;gBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE;gBAC/G,IAAI,EAAE;oBACJ,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/D,GAAG,QAAQ,CAAC,OAAO,CAAC;oBACpB,GAAG,YAAY,CAAC,MAAM,CAAC;oBACvB,UAAU,EAAE,CAAC;4BACX,IAAI,EAAE,WAAW;4BACjB,KAAK,EAAE,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC;4BAChD,eAAe,EAAE,cAAc;4BAC/B,IAAI,EAAE,CAAC,mCAAmC,CAAC;4BAC3C,GAAG,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;4BACvH,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;4BACvG,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;4BAC5E,eAAe,EAAE,EAAE,GAAG,mBAAmB,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;4BAC3E,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,SAAS;4BACxC,YAAY,EAAE;gCACZ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;gCAC7D,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;6BAC7G;yBACF,CAAC;oBACF,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;wBAClD,kFAAkF;wBAClF,qEAAqE;wBACrE,GAAG,CAAC,SAAS,CAAC,aAAa;4BACzB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,UAAU,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;4BAChJ,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF;aACF;SACF;KACF,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;IAC/D,gGAAgG;IAChG,MAAM,cAAc,GAAqB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;IAChG,MAAM,SAAS,GAAG,CAAC,SAAiB,EAAsB,EAAE;QAC1D,MAAM,WAAW,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAW;YACnB,UAAU,EAAE,8BAA8B;YAC1C,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,WAAW;YACrB,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;SACnF,CAAC;QACF,MAAM,OAAO,GAAkB;YAC7B,UAAU,EAAE,8BAA8B;YAC1C,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;YAC7E,OAAO,EAAE,EAAE,QAAQ,EAAE,2BAA2B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;SAClF,CAAC;QACF,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,OAAO,CAAC,cAAc,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;AACtF,CAAC"}
+{"version":3,"file":"collector.js","sourceRoot":"","sources":["../../../../src/manifests/collector.ts"],"names":[],"mappings":"AA4CA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhN,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjH,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAC3G,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACpH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,IAAI,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACvH,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAEhD,mGAAmG;AACnG,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAC7C,kDAAkD;AAClD,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD;;;GAGG;AACH,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;GAIG;AACH,MAAM,aAAa,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAE/F;;;;GAIG;AACH,MAAM,UAAU,GAAG;IACjB,eAAe,EAAE,CAAC,cAAc,CAAC;IACjC,SAAS,EAAE;QACT,YAAY,EAAE;YACZ,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE;gBACN,SAAS,EAAE,gBAAgB;gBAC3B,QAAQ,EAAE,oCAAoC;gBAC9C,oBAAoB,EAAE,IAAI;gBAC1B,mBAAmB,EAAE,eAAe;gBACpC,aAAa,EAAE,CAAC,MAAM,CAAC;aACxB;SACF;KACF;CACF,CAAC;AAEF,oGAAoG;AACpG,MAAM,aAAa,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAiB,EAAW,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;AAErH,0HAA0H;AAC1H,MAAM,iBAAiB,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;AAW7G,uIAAuI;AACvI,SAAS,OAAO,CAAC,MAAqB;IACpC,MAAM,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC;IACxC,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9H,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC;YACvB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;YAC9I,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CAAC,GAAW,EAAE,SAAiB,EAAE,UAA6B,EAAE,IAAY,EAAE,QAAQ,GAAG,KAAK;IAC3G,OAAO;QACL,QAAQ,EAAE,GAAG;QACb,eAAe,EAAE,eAAe;QAChC,qBAAqB,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAC5E,eAAe,EAAE;YACf,EAAE,aAAa,EAAE,CAAC,yDAAyD,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;YAC3H,EAAE,aAAa,EAAE,CAAC,6BAA6B,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE;YACpF,EAAE,aAAa,EAAE,CAAC,0BAA0B,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,IAAI,EAAE,EAAE;YACxG,EAAE,aAAa,EAAE,CAAC,4BAA4B,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE;YACtE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,yDAAyD,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACjI;KACF,CAAC;AACJ,CAAC;AAED,+GAA+G;AAC/G,SAAS,OAAO,CAAC,MAAqB;IACpC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IACxB,MAAM,KAAK,GAA2E;QACpF,GAAG,CAAC,IAAI,CAAC,OAAO;YACd,CAAC,CAAC;gBACA,UAAU,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC;gBACvC,oBAAoB,EAAE,CAAC,CAAC,yBAAyB,CAAC,EAAE,IAAI,CAAC;gBACzD,gBAAgB,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,KAAK,CAAC;gBAClD,0DAA0D;gBAC1D,OAAO,EAAE,CAAC,CAAC,cAAc,EAAE,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;gBAChE,uEAAuE;gBACvE,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC;gBACxC,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC;gBAC7B,UAAU,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC;aAC/B;YACV,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAClB,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,CAAC,EAAW;YACjL,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;QAChC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;KAC5C,CAAC;IACF,OAAO;QACL,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACvC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACjD,OAAO,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC;QACF,yDAAyD;QACzD,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnH,4DAA4D;QAC5D,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,yBAAyB,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACzH,CAAC;AACJ,CAAC;AAED,4IAA4I;AAC5I,SAAS,gBAAgB,CAAC,EAAE,SAAS,EAAiB;IACpD,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,SAAS,CAAC;IAC1E,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,IAAI,YAAY,KAAK,MAAM;QAAE,OAAO,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC;IACrI,OAAO,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC;AACtH,CAAC;AAED,8GAA8G;AAC9G,MAAM,IAAI,GAAG;IACX,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE;IAC3D,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,cAAc,EAAE,EAAE,EAAE,EAAE,EAAE;CACxF,CAAC;AACF,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAE5F;;;;;GAKG;AACH,SAAS,aAAa,CAAC,MAAqB;IAC1C,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAClB,CAAC,CAAC;gBACA,KAAK,EAAE;oBACL,OAAO,EAAE,CAAC,WAAW,CAAC;oBACtB,gBAAgB,EAAE,OAAO;oBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,qBAAqB,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE;oBACpG,MAAM,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;oBAClE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE;oBAC9D,OAAO,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE;oBACpE,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,EAAE;oBACzF,OAAO,EAAE,KAAK;oBACd,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;oBACjC,gBAAgB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;iBACrC;aACF;YACD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;IACF,4FAA4F;IAC5F,gFAAgF;IAChF,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;IACxE,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACjH,CAAC;AAED,2JAA2J;AAC3J,SAAS,aAAa,CAAC,OAA0B,EAAE,IAA2B;IAC5E,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvG,OAAO;QACL,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE;QAC3H,SAAS,EAAE;YACT,wBAAwB,EAAE,UAAU;YACpC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;oBACpF,QAAQ,EAAE,GAAG,IAAI,IAAI,WAAW,EAAE;oBAClC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjC,QAAQ,EAAE,UAAU,QAAQ,GAAG;oBAC/B,mBAAmB,EAAE,eAAe;oBACpC,+DAA+D;oBAC/D,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;oBACjD,iHAAiH;oBACjH,mBAAmB,EAAE,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;iBAC7D,CAAC,CAAC,CAAC;SACL;QACD,UAAU,EAAE;YACV,KAAK,EAAE,aAAa;YACpB,2CAA2C;YAC3C,gBAAgB,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;SACzG;QACD,SAAS,EAAE,EAAE,kBAAkB,EAAE,EAAE,QAAQ,EAAE,UAAU,SAAS,IAAI,cAAc,EAAE,EAAE,EAAE;QACxF,OAAO,EAAE;YACP,GAAG,OAAO;YACV,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC;YACnD,SAAS,EAAE;gBACT,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,wBAAwB,CAAC,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,kBAAkB,CAAC,EAAE;gBAClH,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,gBAAgB,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzI;SACF;KACF,CAAC;AACJ,CAAC;AAUD,sGAAsG;AACtG,SAAS,kBAAkB,CAAC,MAAqB,EAAE,IAAY,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAsB;IACrH,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QAC9C,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;QACzC,IAAI,EAAE,CAAC,mCAAmC,CAAC;QAC3C,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC;QACpB,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC3D,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;QAC5E,eAAe,EAAE,EAAE,GAAG,mBAAmB,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;QAC3E,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC7D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,MAAqB;IAC3C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC7B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC;IAC3D,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC;IACnG,MAAM,SAAS,GAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACvI,MAAM,OAAO,GAAc;QACzB,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,SAAS;QACf,QAAQ;QACR,IAAI,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,EAAE;KACrI,CAAC;IACF,MAAM,GAAG,GAAe,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClK,MAAM,OAAO,GAAe;QAC1B,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QAClD,kFAAkF;QAClF,qEAAqE;QACrE,GAAG,CAAC,SAAS,CAAC,aAAa;YACzB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,UAAU,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;YAChJ,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,MAAM,UAAU,GAAiB;QAC/B,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,YAAY;QAClB,QAAQ;QACR,IAAI,EAAE;YACJ,GAAG,UAAU,CAAC,OAAO,CAAC;YACtB,QAAQ,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,iBAAiB,CAAC,EAAE;YAC5D,QAAQ,EAAE;gBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE;gBACvH,IAAI,EAAE;oBACJ,kBAAkB,EAAE,SAAS;oBAC7B,4BAA4B,EAAE,KAAK;oBACnC,GAAG,QAAQ,CAAC,OAAO,CAAC;oBACpB,GAAG,YAAY,CAAC,MAAM,CAAC;oBACvB,GAAG,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC;oBACrC,UAAU,EAAE;wBACV,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;qBACtK;oBACD,OAAO;iBACR;aACF;SACF;KACF,CAAC;IACF,MAAM,cAAc,GAAqB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC;IACrI,OAAO;QACL,cAAc;QACd,SAAS;QACT,OAAO;QACP,UAAU;QACV,wFAAwF;QACxF,uEAAuE;QACvE,GAAG,eAAe,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QAC5E,GAAG,aAAa,CAAC,iBAAiB,EAAE,SAAS,EAAE,OAAO,CAAC;QACvD,qBAAqB,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;KACvF,CAAC;AACJ,CAAC;AAED,kKAAkK;AAClK,SAAS,cAAc,CAAC,MAAqB;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,aAAa,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC;IACjG,MAAM,SAAS,GAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACvI,MAAM,UAAU,GAAiB;QAC/B,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,YAAY;QAClB,QAAQ;QACR,IAAI,EAAE;YACJ,GAAG,UAAU,CAAC,GAAG,CAAC;YAClB,QAAQ,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,iBAAiB,CAAC,EAAE;YAC5D,QAAQ,EAAE;gBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE;gBACvH,IAAI,EAAE;oBACJ,kBAAkB,EAAE,OAAO;oBAC3B,GAAG,QAAQ,CAAC,OAAO,CAAC;oBACpB,GAAG,YAAY,CAAC,MAAM,CAAC;oBACvB,UAAU,EAAE;wBACV,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE;4BACpC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;4BAChG,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS;4BACvD,KAAK,EAAE,EAAE;4BACT,OAAO,EAAE,KAAK;yBACf,CAAC;qBACH;oBACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;iBAC5D;aACF;SACF;KACF,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACpF,qFAAqF;IACrF,MAAM,cAAc,GAAqB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;IAChG,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACnE,MAAM,UAAU,GAAkB;QAChC,UAAU,EAAE,8BAA8B;QAC1C,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,eAAe;QACzB,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;KACrJ,CAAC;IACF,MAAM,WAAW,GAAyB;QACxC,UAAU,EAAE,8BAA8B;QAC1C,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QAC3E,OAAO,EAAE,EAAE,QAAQ,EAAE,2BAA2B,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;KACvF,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,CAAC;IACrF,iFAAiF;IACjF,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,SAAS,GAAG,CAAC,SAAiB,EAAsB,EAAE;QAC1D,MAAM,WAAW,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAW;YACnB,UAAU,EAAE,8BAA8B;YAC1C,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,WAAW;YACrB,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;SACnF,CAAC;QACF,MAAM,OAAO,GAAkB;YAC7B,UAAU,EAAE,8BAA8B;YAC1C,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;YAC3E,OAAO,EAAE,EAAE,QAAQ,EAAE,2BAA2B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;SAChF,CAAC;QACF,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,OAAO,CAAC,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,OAAO,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/cli/src/manifests/common.js

@@ -19,14 +19,19 @@ export const NAMESPACE = "alasio";
 export const RELEASE = "alasio";
 /** main: alasio's own environment. */
 export const MAIN_ENVIRONMENT = { namespace: NAMESPACE, branch: null };
-/** The label of a branch environment's objects and namespaces, whose value is its name. */
-export const BRANCH_LABEL = "alasio.dev/branch";
+export { BRANCH_LABEL } from "../../../src/branch/names.js";
 /** A component's name: `alasio-<component>`. */
 export function componentName(component) {
     return `${RELEASE}-${component}`;
 }
 /** The Secret of a branch environment's token, which its parent forks the sessions it inherited for (src/branch/fork.ts). */
 export const BRANCH_FORK_SECRET = componentName("branch-fork");
+/**
+ * The Secret of an environment's callers' key to the sandbox gateway, of the gateway's
+ * (src/binder/names.ts environmentKey), in its alasio's namespace: main's, as Neon's setup
+ * renders it, and a branch environment's, as `alasio branch create` writes it.
+ */
+export const SESSIONS_CALLER_SECRET = componentName("sessions-caller");
 /** A Neon service's name: `alasio-neon-<component>`. */
 export function neonName(component) {
     return componentName(`neon-${component}`);
@@ -46,6 +51,15 @@ export function labels(component) {
 export function stackLabels(component) {
     return { ...labels(component), "alasio.dev/stack": "neon" };
 }
+/**
+ * Labels as a StatefulSet's claim template carries them: `of`, but the release's version,
+ * as Kubernetes changes no StatefulSet's claim templates, which the version would change at
+ * each release, every upgrade refused.
+ */
+export function claimLabels(of) {
+    const { "app.kubernetes.io/version": _version, ...kept } = of;
+    return kept;
+}
 /** The labels that select a component's pods. */
 export function selectorLabels(component) {
     return { "app.kubernetes.io/name": "alasio", "app.kubernetes.io/instance": RELEASE, "app.kubernetes.io/component": component };
@@ -54,6 +68,8 @@ export function selectorLabels(component) {
 export const ONE = { min: 1, max: 1 };
 /** Whether a scaler moves a component of `scale` between its min and max. */
 export const scaled = ({ min, max }) => min !== max;
+/** Whether a component of `scale` sleeps, none of its pods running, until its scaler wakes it. */
+export const sleeps = ({ min }) => min === 0;
 /**
  * The replicas of a workload of `scale`: the count it fixes; or none where its scaler
  * moves it, which then owns the field, as applying alasio would take it back otherwise.
@@ -213,4 +229,18 @@ export function goJson(value, indent) {
 export function sha256(text) {
     return createHash("sha256").update(text).digest("hex");
 }
+/** A Role in `namespace` of `rules`, named for the ServiceAccount `account` of alasio's namespace, and its binding to it. */
+export function accountRole(account, component, namespace, rules) {
+    const metadata = { name: account, namespace, labels: labels(component) };
+    return [
+        { apiVersion: "rbac.authorization.k8s.io/v1", kind: "Role", metadata, rules },
+        {
+            apiVersion: "rbac.authorization.k8s.io/v1",
+            kind: "RoleBinding",
+            metadata,
+            roleRef: { apiGroup: "rbac.authorization.k8s.io", kind: "Role", name: account },
+            subjects: [{ kind: "ServiceAccount", name: account, namespace: NAMESPACE }],
+        },
+    ];
+}
 //# sourceMappingURL=common.js.map