aubay-oci-deploy-tool 1.0.1

package/istio/istio.js

@@ -0,0 +1,288 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Istio = void 0;
+const pulumi = require("@pulumi/pulumi");
+const k8s = require("@pulumi/kubernetes");
+class Istio {
+    constructor(clusters, subnets, config, opts) {
+        this.clusters = clusters;
+        this.subnets = subnets;
+        this.config = config;
+        this.opts = opts;
+        this.releases = [];
+        this.gwCRD = [];
+        this.deploy();
+    }
+    // ===========================================================
+    //  MAIN DEPLOY
+    // ===========================================================
+    deploy() {
+        this.clusters.apply(clusters => {
+            const allClusterValues = clusters.map(c => pulumi.all([c.clusterName, c.kubeconfig]));
+            pulumi.all(allClusterValues).apply(resolvedClusters => {
+                resolvedClusters.forEach(([clusterName, kubeconfig]) => {
+                    pulumi.log.info(`Desplegando Istio en cluster: ${clusterName}`);
+                    const provider = new k8s.Provider(`k8s-istio-${clusterName}`, { kubeconfig }, this.opts);
+                    // Crear namespace istio-system si no existe
+                    this.ensureNamespace(this.config.namespace, provider);
+                    // Instalar Base + Istiod
+                    const releases = this.installIstioControlPlane(clusterName, provider);
+                    this.releases.push(...releases);
+                    // Crear namespaces para istio-injection
+                    // this.applyNamespaceInjection(clusterName, provider);
+                    // Crear los Istio Gateways (1 por cada LB definido)
+                    this.createGateways(clusterName, provider, releases);
+                    //this.applyMtlsStrict(provider, releases);
+                    //this.applyCnpgIstioExceptions(provider, releases);
+                });
+            });
+        });
+    }
+    // ===========================================================
+    //  NAMESPACE (create if not exists)
+    // ===========================================================
+    ensureNamespace(name, provider) {
+        const ns = new k8s.core.v1.Namespace(`istio-ns-${name}`, {
+            metadata: { name },
+        }, { provider });
+        return ns;
+    }
+    // ===========================================================
+    //  ISTIO BASE + ISTIOD
+    // ===========================================================
+    installIstioControlPlane(clusterName, provider) {
+        const base = new k8s.helm.v3.Release(`istio-base-${clusterName}`, {
+            chart: "base",
+            version: this.config.chartVersion,
+            namespace: this.config.namespace,
+            repositoryOpts: { repo: "https://istio-release.storage.googleapis.com/charts" },
+        }, { provider });
+        const istiod = new k8s.helm.v3.Release(`istiod-${clusterName}`, {
+            chart: "istiod",
+            version: this.config.chartVersion,
+            namespace: this.config.namespace,
+            repositoryOpts: { repo: "https://istio-release.storage.googleapis.com/charts" },
+        }, { provider, dependsOn: [base] });
+        return [base, istiod];
+    }
+    // ===========================================================
+    //  NAMESPACES WITH SIDECAR INJECTION
+    // ===========================================================
+    applyNamespaceInjection(clusterName, provider) {
+        this.config.namespacesToInject.forEach(ns => {
+            const namespace = new k8s.core.v1.Namespace(`istio-injection-${clusterName}-${ns}`, {
+                metadata: {
+                    name: ns,
+                    labels: { "istio-injection": "enabled" },
+                },
+            }, { provider });
+            this.releases.push(namespace);
+        });
+    }
+    // ===========================================================
+    //  ISTIO GATEWAYS
+    //  (1 gateway por cada entrada en config.lb)
+    // ===========================================================
+    createGateways(clusterName, provider, opts) {
+        this.config.lb.forEach(lb => {
+            const subnetId = this.findSubnet(lb.subnetName);
+            const ingressGateway = new k8s.helm.v3.Release(`istio-gateway-${clusterName}-${lb.name}`, {
+                chart: "gateway",
+                version: this.config.chartVersion,
+                namespace: this.config.namespace,
+                repositoryOpts: {
+                    repo: "https://istio-release.storage.googleapis.com/charts",
+                },
+                values: {
+                    name: `ingressgateway-${lb.type}`,
+                    labels: {
+                        istio: `ingressgateway-${lb.type}`,
+                    },
+                    service: this.applyServiceLoadBalancerAnnotations(lb, subnetId, lb.reservedIpOcid),
+                    volumes: [
+                        {
+                            name: "tls-certs",
+                            secret: { secretName: "tls-aubay-ingress" }
+                        }
+                    ],
+                    volumeMounts: [
+                        {
+                            name: "tls-certs",
+                            mountPath: "/certs/istio"
+                        }
+                    ]
+                },
+            }, { provider, dependsOn: opts });
+            this.releases.push(ingressGateway);
+            // Creamos Gateway CRD
+            const gatewayCR = this.createGatewayCR(clusterName, lb, provider, ingressGateway);
+            this.gwCRD.push(gatewayCR);
+        });
+    }
+    applyServiceLoadBalancerAnnotations(lb, subnetId, reservedIp) {
+        const isPrivate = lb.type === "private";
+        const annotations = {
+            "oci.oraclecloud.com/load-balancer-type": "nlb",
+            "oci-network-load-balancer.oraclecloud.com/subnet": subnetId.apply(id => id),
+        };
+        if (reservedIp && isPrivate) {
+            annotations["oci-network-load-balancer.oraclecloud.com/assigned-private-ipv4"] = pulumi.output(reservedIp);
+            annotations["oci-network-load-balancer.oraclecloud.com/internal"] = "true";
+        }
+        const svc = {
+            type: "LoadBalancer",
+            annotations,
+            ports: [
+                { name: "http2", port: 80 },
+                { name: "https", port: 443 },
+            ],
+        };
+        if (reservedIp && !isPrivate) {
+            svc.loadBalancerIP = reservedIp;
+        }
+        if (isPrivate) {
+            svc.ports = [
+                ...svc.ports,
+                { name: "registration", port: 1515 },
+                { name: "events", port: 1514 },
+            ];
+        }
+        return svc;
+    }
+    createGatewayCR(clusterName, lb, provider, dependsOn) {
+        const servers = [
+            {
+                port: { number: 80, name: "http", protocol: "HTTP" },
+                hosts: ["*"],
+            },
+            {
+                port: { number: 443, name: "https", protocol: "HTTPS" },
+                hosts: ["*"],
+                tls: {
+                    mode: "SIMPLE",
+                    privateKey: "/certs/istio/tls.key",
+                    serverCertificate: "/certs/istio/tls.crt",
+                },
+            },
+        ];
+        if (lb.type === "private") {
+            servers.push({
+                port: { number: 1515, name: "registration", protocol: "TCP" },
+                hosts: ["*"],
+            }, {
+                port: { number: 1514, name: "events", protocol: "TCP" },
+                hosts: ["*"],
+            });
+        }
+        return new k8s.apiextensions.CustomResource(`istio-gateway-crd-${clusterName}-${lb.name}`, {
+            apiVersion: "networking.istio.io/v1beta1",
+            kind: "Gateway",
+            metadata: {
+                name: `gw-${lb.type}`,
+                namespace: this.config.namespace,
+            },
+            spec: {
+                selector: {
+                    istio: `ingressgateway-${lb.type}`,
+                },
+                servers
+            }
+        }, { provider, dependsOn: dependsOn });
+    }
+    applyMtlsStrict(provider, opts) {
+        new k8s.apiextensions.CustomResource("istio-mtls-strict", {
+            apiVersion: "security.istio.io/v1beta1",
+            kind: "PeerAuthentication",
+            metadata: { name: "default", namespace: "istio-system" },
+            spec: {
+                mtls: { mode: "STRICT" }
+            },
+        }, { provider, dependsOn: opts });
+    }
+    // ===========================================================
+    //  SUBNET LOOKUP
+    // ===========================================================
+    findSubnet(subnetName) {
+        return this.subnets.apply(subnets => pulumi.all(subnets.map(s => pulumi.all([s.displayName, s.id]).apply(([name, id]) => name === subnetName ? id : undefined))).apply(ids => {
+            const found = ids.find(id => id !== undefined);
+            if (!found) {
+                throw new Error(`No se encontró la subnet ${subnetName}`);
+            }
+            return found;
+        }));
+    }
+    // ===========================================================
+    //  CNPG (PostgreSQL Operator) – Istio Exceptions
+    //  Permite al operator hablar con las BDs aunque estas tengan sidecar
+    // ===========================================================
+    applyCnpgIstioExceptions(provider, opts) {
+        const namespace = this.config.cnpgNamespace && this.config.cnpgNamespace !== ""
+            ? this.config.cnpgNamespace
+            : "databases";
+        //
+        // 1. PeerAuthentication
+        // Deshabilita mTLS SOLO en el puerto 8000 de los pods de PostgreSQL
+        //
+        const pa = new k8s.apiextensions.CustomResource("cnpg-peer-auth", {
+            apiVersion: "security.istio.io/v1beta1",
+            kind: "PeerAuthentication",
+            metadata: {
+                name: "cnpg-operator-mtls",
+                namespace,
+            },
+            spec: {
+                selector: {
+                    matchLabels: {
+                        "cnpg.io/podRole": "instance",
+                    },
+                },
+                mtls: { mode: "STRICT" },
+                portLevelMtls: {
+                    "8000": { mode: "DISABLE" },
+                },
+            },
+        }, { provider, dependsOn: opts });
+        //
+        // 2. AuthorizationPolicy
+        // Permite que SOLO el operator acceda al puerto 8000
+        //
+        const ap = new k8s.apiextensions.CustomResource("cnpg-authorization-policy", {
+            apiVersion: "security.istio.io/v1beta1",
+            kind: "AuthorizationPolicy",
+            metadata: {
+                name: "cnpg-operator-access",
+                namespace,
+            },
+            spec: {
+                selector: {
+                    matchLabels: {
+                        "cnpg.io/podRole": "instance",
+                    },
+                },
+                rules: [
+                    {
+                        from: [
+                            {
+                                source: {
+                                    principals: [
+                                        "cluster.local/ns/cnpg-system/sa/cnpg-operator",
+                                    ],
+                                },
+                            },
+                        ],
+                        to: [
+                            {
+                                operation: {
+                                    ports: ["8000"],
+                                },
+                            },
+                        ],
+                    },
+                ],
+            },
+        }, { provider, dependsOn: opts });
+        return [pa, ap];
+    }
+}
+exports.Istio = Istio;
+//# sourceMappingURL=istio.js.map

package/istio/istio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"istio.js","sourceRoot":"","sources":["../../src/istio/istio.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,0CAA0C;AAK1C,MAAa,KAAK;IAKd,YACY,QAAyC,EACzC,OAAyC,EACzC,MAAmB,EACnB,IAAmC;QAHnC,aAAQ,GAAR,QAAQ,CAAiC;QACzC,YAAO,GAAP,OAAO,CAAkC;QACzC,WAAM,GAAN,MAAM,CAAa;QACnB,SAAI,GAAJ,IAAI,CAA+B;QAPxC,aAAQ,GAA0B,EAAE,CAAC;QACrC,UAAK,GAAuC,EAAE,CAAA;QAQjD,IAAI,CAAC,MAAM,EAAE,CAAC;IAClB,CAAC;IAED,8DAA8D;IAC9D,eAAe;IACf,8DAA8D;IACtD,MAAM;QACV,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC3B,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACtC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAC5C,CAAC;YAEF,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE;gBAClD,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE;oBAEnD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iCAAiC,WAAW,EAAE,CAAC,CAAC;oBAEhE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAC7B,aAAa,WAAW,EAAE,EAC1B,EAAE,UAAU,EAAE,EACd,IAAI,CAAC,IAAI,CACZ,CAAC;oBAEF,4CAA4C;oBAC5C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBAEtD,yBAAyB;oBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;oBACtE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;oBAEhC,wCAAwC;oBACxC,uDAAuD;oBAEvD,oDAAoD;oBACpD,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAErD,2CAA2C;oBAE3C,oDAAoD;gBACxD,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,8DAA8D;IAC9D,oCAAoC;IACpC,8DAA8D;IACtD,eAAe,CAAC,IAAY,EAAE,QAAsB;QACxD,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAChC,YAAY,IAAI,EAAE,EAClB;YACI,QAAQ,EAAE,EAAE,IAAI,EAAE;SACrB,EACD,EAAE,QAAQ,EAAE,CACf,CAAC;QACF,OAAO,EAAE,CAAC;IACd,CAAC;IAED,8DAA8D;IAC9D,uBAAuB;IACvB,8DAA8D;IACtD,wBAAwB,CAAC,WAAmB,EAAE,QAAsB;QACxE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAChC,cAAc,WAAW,EAAE,EAC3B;YACI,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,cAAc,EAAE,EAAE,IAAI,EAAE,qDAAqD,EAAE;SAClF,EACD,EAAE,QAAQ,EAAE,CACf,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAClC,UAAU,WAAW,EAAE,EACvB;YACI,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,cAAc,EAAE,EAAE,IAAI,EAAE,qDAAqD,EAAE;SAClF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAClC,CAAC;QACF,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,8DAA8D;IAC9D,qCAAqC;IACrC,8DAA8D;IACtD,uBAAuB,CAAC,WAAmB,EAAE,QAAsB;QACvE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;YACxC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACvC,mBAAmB,WAAW,IAAI,EAAE,EAAE,EACtC;gBACI,QAAQ,EAAE;oBACN,IAAI,EAAE,EAAE;oBACR,MAAM,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE;iBAC3C;aACJ,EACD,EAAE,QAAQ,EAAE,CACf,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAgB,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,8DAA8D;IAC9D,kBAAkB;IAClB,6CAA6C;IAC7C,8DAA8D;IACtD,cAAc,CAAC,WAAmB,EAAE,QAAsB,EAAE,IAA4B;QAC5F,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;YACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;YAEhD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1C,iBAAiB,WAAW,IAAI,EAAE,CAAC,IAAI,EAAE,EACzC;gBACI,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBAChC,cAAc,EAAE;oBACZ,IAAI,EAAE,qDAAqD;iBAC9D;gBACD,MAAM,EAAE;oBACJ,IAAI,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE;oBACjC,MAAM,EAAE;wBACJ,KAAK,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE;qBACrC;oBACD,OAAO,EAAE,IAAI,CAAC,mCAAmC,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC;oBAClF,OAAO,EAAE;wBACL;4BACI,IAAI,EAAE,WAAW;4BACjB,MAAM,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE;yBAC9C;qBACJ;oBACD,YAAY,EAAE;wBACV;4BACI,IAAI,EAAE,WAAW;4BACjB,SAAS,EAAE,cAAc;yBAC5B;qBACJ;iBACJ;aACJ,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAChC,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAEnC,sBAAsB;YACtB,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;YAElF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,mCAAmC,CACvC,EAAoB,EACpB,QAA+B,EAC/B,UAAiC;QAEjC,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;QAExC,MAAM,WAAW,GAAmD;YAChE,wCAAwC,EAAE,KAAK;YAC/C,kDAAkD,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;SAC/E,CAAC;QAEF,IAAG,UAAU,IAAI,SAAS,EAAE,CAAC;YACzB,WAAW,CAAC,iEAAiE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3G,WAAW,CAAC,oDAAoD,CAAC,GAAG,MAAM,CAAC;QAC/E,CAAC;QAED,MAAM,GAAG,GAAQ;YACb,IAAI,EAAE,cAAc;YACpB,WAAW;YACX,KAAK,EAAE;gBACH,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC3B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE;aAC/B;SACJ,CAAC;QAEF,IAAI,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3B,GAAG,CAAC,cAAc,GAAG,UAAU,CAAC;QACpC,CAAC;QAED,IAAG,SAAS,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,GAAG;gBACR,GAAG,GAAG,CAAC,KAAK;gBACZ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE;gBACpC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;aACjC,CAAA;QACL,CAAC;QAED,OAAO,GAAG,CAAC;IACf,CAAC;IAEO,eAAe,CACnB,WAAmB,EACnB,EAAiB,EACjB,QAAsB,EACtB,SAA8B;QAE9B,MAAM,OAAO,GAAU;YACnB;gBACI,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;gBACpD,KAAK,EAAE,CAAC,GAAG,CAAC;aACf;YACD;gBACI,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE;gBACvD,KAAK,EAAE,CAAC,GAAG,CAAC;gBACZ,GAAG,EAAE;oBACD,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,sBAAsB;oBAClC,iBAAiB,EAAE,sBAAsB;iBAC5C;aACJ;SACJ,CAAC;QAEF,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CACR;gBACI,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC7D,KAAK,EAAE,CAAC,GAAG,CAAC;aACf,EACD;gBACI,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBACvD,KAAK,EAAE,CAAC,GAAG,CAAC;aACf,CACJ,CAAC;QACN,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CACvC,qBAAqB,WAAW,IAAI,EAAE,CAAC,IAAI,EAAE,EAC7C;YACI,UAAU,EAAE,6BAA6B;YACzC,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE;gBACN,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE;gBACrB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;aACnC;YACD,IAAI,EAAE;gBACF,QAAQ,EAAE;oBACN,KAAK,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE;iBACrC;gBACD,OAAO;aACV;SACJ,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CACrC,CAAC;IACN,CAAC;IAGO,eAAe,CAAC,QAAsB,EAAE,IAA4B;QACxE,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAChC,mBAAmB,EACnB;YACI,UAAU,EAAE,2BAA2B;YACvC,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE;YACxD,IAAI,EAAE;gBACF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC3B;SACJ,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAChC,CAAC;IACN,CAAC;IAED,8DAA8D;IAC9D,iBAAiB;IACjB,8DAA8D;IACtD,UAAU,CAAC,UAAkB;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAChC,MAAM,CAAC,GAAG,CACN,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACZ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CACnD,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CACvC,CACJ,CACJ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC,CACL,CAAC;IACN,CAAC;IAED,8DAA8D;IAC9D,iDAAiD;IACjD,sEAAsE;IACtE,8DAA8D;IACtD,wBAAwB,CAChC,QAAsB,EACtB,IAAsC;QAElC,MAAM,SAAS,GACX,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,EAAE;YACzD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa;YAC3B,CAAC,CAAC,WAAW,CAAC;QAEtB,EAAE;QACF,wBAAwB;QACxB,oEAAoE;QACpE,EAAE;QACF,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAC3C,gBAAgB,EAChB;YACI,UAAU,EAAE,2BAA2B;YACvC,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE;gBACN,IAAI,EAAE,oBAAoB;gBAC1B,SAAS;aACZ;YACD,IAAI,EAAE;gBACF,QAAQ,EAAE;oBACN,WAAW,EAAE;wBACT,iBAAiB,EAAE,UAAU;qBAChC;iBACJ;gBACD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,aAAa,EAAE;oBACX,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;iBAC9B;aACJ;SACJ,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAChC,CAAC;QAEF,EAAE;QACF,yBAAyB;QACzB,qDAAqD;QACrD,EAAE;QACF,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAC3C,2BAA2B,EAC3B;YACI,UAAU,EAAE,2BAA2B;YACvC,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE;gBACN,IAAI,EAAE,sBAAsB;gBAC5B,SAAS;aACZ;YACD,IAAI,EAAE;gBACF,QAAQ,EAAE;oBACN,WAAW,EAAE;wBACT,iBAAiB,EAAE,UAAU;qBAChC;iBACJ;gBACD,KAAK,EAAE;oBACH;wBACI,IAAI,EAAE;4BACF;gCACI,MAAM,EAAE;oCACJ,UAAU,EAAE;wCACR,+CAA+C;qCAClD;iCACJ;6BACJ;yBACJ;wBACD,EAAE,EAAE;4BACA;gCACI,SAAS,EAAE;oCACP,KAAK,EAAE,CAAC,MAAM,CAAC;iCAClB;6BACJ;yBACJ;qBACJ;iBACJ;aACJ;SACJ,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAChC,CAAC;QAEF,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACpB,CAAC;CACJ;AAjYD,sBAiYC"}

package/network/config.d.ts

@@ -0,0 +1,3 @@
+import { IVcnConfig } from "./interfaces";
+export declare const compartmentId: string;
+export declare const vcns: IVcnConfig[];

package/network/config.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.vcns = exports.compartmentId = void 0;
+const pulumi = require("@pulumi/pulumi");
+const stack = pulumi.getStack();
+const infraConfig = new pulumi.Config("infra");
+exports.compartmentId = infraConfig.require("compartmentId");
+// Config de red
+const networkConfig = new pulumi.Config("network");
+// Leemos el array completo de VCNs
+const rawVcns = networkConfig.requireObject("vcns");
+// Inyectamos automáticamente el compartmentId a cada VCN
+exports.vcns = rawVcns.map(vcn => ({
+    ...vcn,
+    compartmentId: exports.compartmentId,
+    // Por si quieres añadir un sufijo con el stack (dev, prod…)
+    name: `${stack}-${vcn.name}`,
+    subnets: vcn.subnets.map(subnet => ({
+        ...subnet,
+        name: `${stack}-${subnet.name}`,
+    })),
+}));
+//# sourceMappingURL=config.js.map

package/network/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/network/config.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AAGzC,MAAM,KAAK,GAAW,MAAM,CAAC,QAAQ,EAAE,CAAC;AAExC,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAClC,QAAA,aAAa,GAAW,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAE1E,gBAAgB;AAChB,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAEnD,mCAAmC;AACnC,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAsC,MAAM,CAAC,CAAC;AAEzF,yDAAyD;AAC5C,QAAA,IAAI,GAAiB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClD,GAAG,GAAG;IACN,aAAa,EAAE,qBAAa;IAC5B,4DAA4D;IAC5D,IAAI,EAAE,GAAG,KAAK,IAAI,GAAG,CAAC,IAAI,EAAE;IAC5B,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChC,GAAG,MAAM;QACT,IAAI,EAAE,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE;KAClC,CAAC,CAAC;CACN,CAAC,CAAC,CAAC"}

package/network/interfaces.d.ts

@@ -0,0 +1,31 @@
+import * as oci from "@pulumi/oci";
+export interface INetwork {
+    vcns: oci.core.VirtualNetwork[];
+    subnets: oci.core.Subnet[];
+    nats: oci.core.NatGateway[];
+    igws: oci.core.InternetGateway[];
+    routeTables: oci.core.RouteTable[];
+    securityLists: oci.core.SecurityList[];
+    sgw: oci.core.ServiceGateway[];
+    drgAttachments?: oci.core.DrgAttachment[];
+}
+export interface IVcnConfig {
+    name: string;
+    cidr: string;
+    compartmentId: string;
+    subnets: ISubnetConfig[];
+    drGatewayOcid?: string;
+}
+export interface ISubnetConfig {
+    name: string;
+    cidr: string;
+    isPublic: boolean;
+    routeRules?: IDrgRouteRuleConfig[];
+    ingressRules?: oci.types.input.Core.SecurityListIngressSecurityRule[];
+    egressRules?: oci.types.input.Core.SecurityListEgressSecurityRule[];
+}
+export interface IDrgRouteRuleConfig {
+    destination: string;
+    destinationType?: string;
+    description?: string;
+}

package/network/interfaces.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=interfaces.js.map

package/network/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../src/network/interfaces.ts"],"names":[],"mappings":""}

package/network/network.d.ts

@@ -0,0 +1,28 @@
+import * as oci from "@pulumi/oci";
+import { IVcnConfig, INetwork } from "./interfaces";
+import { IRegion } from "../region/interfaces";
+export declare class Network implements INetwork {
+    private vcnsConfig;
+    private region;
+    vcns: oci.core.VirtualNetwork[];
+    subnets: oci.core.Subnet[];
+    nats: oci.core.NatGateway[];
+    igws: oci.core.InternetGateway[];
+    routeTables: oci.core.RouteTable[];
+    securityLists: oci.core.SecurityList[];
+    sgw: oci.core.ServiceGateway[];
+    drgAttachments: oci.core.DrgAttachment[];
+    constructor(vcnsConfig: IVcnConfig[], region: IRegion);
+    private buildNetwork;
+    private createVcn;
+    private createDrgAttachment;
+    private createNat;
+    private createIgw;
+    private createServiceGateway;
+    private createSecurityList;
+    private getDefaultIngressRules;
+    private getDefaultEgressRules;
+    private createPublicRouteTable;
+    private createPrivateRouteTable;
+    private createSubnet;
+}

package/network/network.js

@@ -0,0 +1,218 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Network = void 0;
+const oci = require("@pulumi/oci");
+class Network {
+    constructor(vcnsConfig, region) {
+        this.vcnsConfig = vcnsConfig;
+        this.region = region;
+        this.vcns = [];
+        this.subnets = [];
+        this.nats = [];
+        this.igws = [];
+        this.routeTables = [];
+        this.securityLists = [];
+        this.sgw = [];
+        this.drgAttachments = [];
+        this.buildNetwork();
+    }
+    buildNetwork() {
+        this.vcnsConfig.forEach(vcn => {
+            let privateRt;
+            let publicRt;
+            const vcnCreated = this.createVcn(vcn);
+            this.vcns.push(vcnCreated);
+            if (vcn.drGatewayOcid) {
+                const drgAttachment = this.createDrgAttachment(vcnCreated, vcn.drGatewayOcid, vcn.name);
+                this.drgAttachments.push(drgAttachment);
+            }
+            const hasPrivateSubnets = vcn.subnets.some(subnet => !subnet.isPublic);
+            const hasPublicSubnets = vcn.subnets.some(subnet => subnet.isPublic);
+            if (hasPrivateSubnets) {
+                const nat = this.createNat(vcnCreated, vcn.name);
+                this.nats.push(nat);
+                const sgw = this.createServiceGateway(vcnCreated, vcn.name);
+                this.sgw.push(sgw);
+                privateRt = this.createPrivateRouteTable(vcnCreated, nat, sgw, vcn);
+                this.routeTables.push(privateRt);
+            }
+            if (hasPublicSubnets) {
+                const igw = this.createIgw(vcnCreated, vcn.name);
+                this.igws.push(igw);
+                publicRt = this.createPublicRouteTable(vcnCreated, igw, vcn.name);
+                this.routeTables.push(publicRt);
+            }
+            vcn.subnets.forEach(subnet => {
+                const securityList = this.createSecurityList(vcnCreated, subnet);
+                this.securityLists.push(securityList);
+                const routeTable = subnet.isPublic ? publicRt : privateRt;
+                const subnetCreated = this.createSubnet(vcnCreated, subnet, routeTable, securityList);
+                this.subnets.push(subnetCreated);
+            });
+        });
+    }
+    createVcn(vcnConfig) {
+        return new oci.core.VirtualNetwork(vcnConfig.name, {
+            compartmentId: vcnConfig.compartmentId,
+            cidrBlock: vcnConfig.cidr,
+            displayName: vcnConfig.name,
+        });
+    }
+    createDrgAttachment(vcn, drgId, vcnName) {
+        return new oci.core.DrgAttachment(`${vcnName}-drg-attach`, {
+            drgId: drgId,
+            displayName: `${vcnName}-drg-attach`,
+            networkDetails: {
+                type: "VCN",
+                id: vcn.id,
+            },
+        });
+    }
+    createNat(vcn, vcnName) {
+        return new oci.core.NatGateway(`${vcnName}-nat`, {
+            compartmentId: vcn.compartmentId,
+            vcnId: vcn.id,
+            displayName: `${vcnName}-nat`
+        });
+    }
+    createIgw(vcn, vcnName) {
+        return new oci.core.InternetGateway(`${vcnName}-igw`, {
+            compartmentId: vcn.compartmentId,
+            vcnId: vcn.id,
+            displayName: `${vcnName}-igw`
+        });
+    }
+    createServiceGateway(vcn, vcnName) {
+        const allServices = oci.core.getServicesOutput({});
+        const servicesId = allServices.apply(s => s.services.find(srv => srv.cidrBlock?.includes(`all-${this.region.shortCode}-services-in-oracle-services-network`))?.id);
+        return new oci.core.ServiceGateway(`${vcnName}-sgw`, {
+            compartmentId: vcn.compartmentId,
+            vcnId: vcn.id,
+            displayName: `${vcnName}-sgw`,
+            services: [{
+                    serviceId: servicesId
+                }]
+        });
+    }
+    createSecurityList(vcn, subnetCfg) {
+        const defaultIngressRules = this.getDefaultIngressRules(vcn);
+        const defaultEgressRules = this.getDefaultEgressRules();
+        return new oci.core.SecurityList(`${subnetCfg.name}-sl`, {
+            compartmentId: vcn.compartmentId,
+            vcnId: vcn.id,
+            displayName: `${subnetCfg.name}-sl`,
+            ingressSecurityRules: [
+                ...defaultIngressRules,
+                ...(subnetCfg.ingressRules ?? []),
+            ],
+            egressSecurityRules: [
+                ...defaultEgressRules,
+                ...(subnetCfg.egressRules ?? []),
+            ],
+        });
+    }
+    getDefaultIngressRules(vcn) {
+        return [
+            {
+                protocol: "6", // TCP
+                source: "0.0.0.0/0",
+                sourceType: "CIDR_BLOCK",
+                tcpOptions: { min: 22, max: 22 },
+                description: "SSH from anywhere (port 22)",
+            },
+            {
+                protocol: "1", // ICMP
+                source: "0.0.0.0/0",
+                sourceType: "CIDR_BLOCK",
+                icmpOptions: { type: 3, code: 4 },
+                description: "ICMP Fragmentation Needed",
+            },
+            {
+                protocol: "1", // ICMP
+                source: vcn.cidrBlock,
+                sourceType: "CIDR_BLOCK",
+                icmpOptions: { type: 3 },
+                description: "ICMP Destination Unreachable within VCN",
+            },
+        ];
+    }
+    getDefaultEgressRules() {
+        return [
+            {
+                protocol: "all",
+                destination: "0.0.0.0/0",
+                destinationType: "CIDR_BLOCK",
+                description: "Allow all outbound traffic"
+            },
+        ];
+    }
+    createPublicRouteTable(vcn, igw, vcnName) {
+        return new oci.core.RouteTable(`${vcnName}-public-rt`, {
+            compartmentId: vcn.compartmentId,
+            vcnId: vcn.id,
+            routeRules: [
+                {
+                    destination: "0.0.0.0/0",
+                    networkEntityId: igw.id,
+                    destinationType: "CIDR_BLOCK",
+                    description: "Route traffic from public subnets to IGW",
+                },
+            ],
+            displayName: `${vcnName}-public-rt`
+        });
+    }
+    createPrivateRouteTable(vcn, nat, sgw, vcnCfg) {
+        // rutas básicas: NAT y Service Gateway
+        const baseRouteRules = [
+            {
+                destination: "0.0.0.0/0",
+                networkEntityId: nat.id,
+                destinationType: "CIDR_BLOCK",
+                description: "Route traffic from private subnets to NAT",
+            },
+            {
+                destination: `all-${this.region.shortCode}-services-in-oracle-services-network`,
+                destinationType: "SERVICE_CIDR_BLOCK",
+                networkEntityId: sgw.id,
+                description: "Access Oracle Services via Service Gateway"
+            }
+        ];
+        // si hay DRG, agregamos rutas de DRG
+        const drgRouteRules = [];
+        if (vcnCfg.drGatewayOcid) {
+            // recorremos todas las subnets y sus routeRules
+            vcnCfg.subnets.forEach(subnet => {
+                if (subnet.routeRules && subnet.routeRules.length > 0) {
+                    subnet.routeRules.forEach(rule => {
+                        drgRouteRules.push({
+                            destination: rule.destination,
+                            destinationType: rule.destinationType ?? "CIDR_BLOCK",
+                            networkEntityId: vcnCfg.drGatewayOcid, // apuntamos al DRG
+                            description: rule.description ?? "Route to DRG"
+                        });
+                    });
+                }
+            });
+        }
+        const allRouteRules = [...baseRouteRules, ...drgRouteRules];
+        return new oci.core.RouteTable(`${vcnCfg.name}-private-rt`, {
+            compartmentId: vcnCfg.compartmentId,
+            vcnId: vcn.id,
+            displayName: `${vcnCfg.name}-private-rt`,
+            routeRules: allRouteRules
+        });
+    }
+    createSubnet(vcn, subnetConfig, routeTable, securityList) {
+        return new oci.core.Subnet(subnetConfig.name, {
+            compartmentId: vcn.compartmentId,
+            vcnId: vcn.id,
+            displayName: subnetConfig.name,
+            cidrBlock: subnetConfig.cidr,
+            prohibitPublicIpOnVnic: !subnetConfig.isPublic,
+            routeTableId: routeTable?.id,
+            securityListIds: [securityList.id]
+        });
+    }
+}
+exports.Network = Network;
+//# sourceMappingURL=network.js.map

package/network/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/network/network.ts"],"names":[],"mappings":";;;AAAA,mCAAmC;AAInC,MAAa,OAAO;IAUhB,YAAoB,UAAwB,EAAU,MAAe;QAAjD,eAAU,GAAV,UAAU,CAAc;QAAU,WAAM,GAAN,MAAM,CAAS;QAT9D,SAAI,GAA8B,EAAE,CAAC;QACrC,YAAO,GAAsB,EAAE,CAAC;QAChC,SAAI,GAA0B,EAAE,CAAC;QACjC,SAAI,GAA+B,EAAE,CAAC;QACtC,gBAAW,GAA0B,EAAE,CAAC;QACxC,kBAAa,GAA4B,EAAE,CAAC;QAC5C,QAAG,GAA8B,EAAE,CAAC;QACpC,mBAAc,GAA6B,EAAE,CAAC;QAGjD,IAAI,CAAC,YAAY,EAAE,CAAC;IACxB,CAAC;IAEO,YAAY;QAChB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;YAC1B,IAAI,SAA8B,CAAC;YACnC,IAAI,QAA6B,CAAC;YAElC,MAAM,UAAU,GAA4B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAE3B,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACpB,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC5C,CAAC;YAED,MAAM,iBAAiB,GAAY,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChF,MAAM,gBAAgB,GAAY,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE9E,IAAG,iBAAiB,EAAE,CAAC;gBACnB,MAAM,GAAG,GAAwB,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAEpB,MAAM,GAAG,GAA4B,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAEnB,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;gBACnE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACpC,CAAC;YAED,IAAG,gBAAgB,EAAE,CAAC;gBAClB,MAAM,GAAG,GAA6B,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC3E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAEpB,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;YAED,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;gBACzB,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBACjE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAEtC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;gBAE1D,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;gBACtF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,SAAS,CAAC,SAAqB;QACnC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE;YAC/C,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,SAAS,EAAE,SAAS,CAAC,IAAI;YACzB,WAAW,EAAE,SAAS,CAAC,IAAI;SAC9B,CAAC,CAAC;IACP,CAAC;IAEO,mBAAmB,CAAC,GAA4B,EAAE,KAAa,EAAE,OAAe;QACpF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,OAAO,aAAa,EAAE;YACvD,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,GAAG,OAAO,aAAa;YACpC,cAAc,EAAE;gBACZ,IAAI,EAAE,KAAK;gBACX,EAAE,EAAE,GAAG,CAAC,EAAE;aACb;SACJ,CAAC,CAAC;IACP,CAAC;IAEO,SAAS,CAAC,GAA4B,EAAE,OAAe;QAC3D,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,OAAO,MAAM,EAAE;YAC7C,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,WAAW,EAAE,GAAG,OAAO,MAAM;SAChC,CAAC,CAAC;IACP,CAAC;IAEO,SAAS,CAAC,GAA4B,EAAE,OAAe;QAC3D,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,OAAO,MAAM,EAAE;YAClD,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,WAAW,EAAE,GAAG,OAAO,MAAM;SAChC,CAAC,CAAC;IACP,CAAC;IAEO,oBAAoB,CAAC,GAA4B,EAAE,OAAe;QACtE,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CACrC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAClB,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,sCAAsC,CAAC,CAC9F,EAAE,EAAG,CACT,CAAC;QAEF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,OAAO,MAAM,EAAE;YACjD,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,WAAW,EAAE,GAAG,OAAO,MAAM;YAC7B,QAAQ,EAAE,CAAC;oBACP,SAAS,EAAE,UAAU;iBACxB,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAEO,kBAAkB,CAAC,GAA4B,EAAE,SAAwB;QAC7E,MAAM,mBAAmB,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAExD,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,IAAI,KAAK,EAAE;YACrD,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,WAAW,EAAE,GAAG,SAAS,CAAC,IAAI,KAAK;YACnC,oBAAoB,EAAE;gBAClB,GAAG,mBAAmB;gBACtB,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC;aACpC;YACD,mBAAmB,EAAE;gBACjB,GAAG,kBAAkB;gBACrB,GAAG,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC;aACnC;SACJ,CAAC,CAAC;IACP,CAAC;IAEO,sBAAsB,CAAC,GAA4B;QACvD,OAAO;YACH;gBACI,QAAQ,EAAE,GAAG,EAAE,MAAM;gBACrB,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,YAAY;gBACxB,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAChC,WAAW,EAAE,6BAA6B;aAC7C;YACD;gBACI,QAAQ,EAAE,GAAG,EAAE,OAAO;gBACtB,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,YAAY;gBACxB,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;gBACjC,WAAW,EAAE,2BAA2B;aAC3C;YACD;gBACI,QAAQ,EAAE,GAAG,EAAE,OAAO;gBACtB,MAAM,EAAE,GAAG,CAAC,SAAS;gBACrB,UAAU,EAAE,YAAY;gBACxB,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;gBACxB,WAAW,EAAE,yCAAyC;aACzD;SACJ,CAAC;IACN,CAAC;IAEO,qBAAqB;QACzB,OAAO;YACH;gBACI,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,WAAW;gBACxB,eAAe,EAAE,YAAY;gBAC7B,WAAW,EAAE,4BAA4B;aAC5C;SACJ,CAAC;IACN,CAAC;IAEO,sBAAsB,CAAC,GAA4B,EAAE,GAA6B,EAAE,OAAe;QACvG,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,OAAO,YAAY,EAAE;YACnD,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,UAAU,EAAE;gBACR;oBACI,WAAW,EAAE,WAAW;oBACxB,eAAe,EAAE,GAAG,CAAC,EAAE;oBACvB,eAAe,EAAE,YAAY;oBAC7B,WAAW,EAAE,0CAA0C;iBAC1D;aACJ;YACD,WAAW,EAAE,GAAG,OAAO,YAAY;SACtC,CAAC,CAAC;IACP,CAAC;IAEO,uBAAuB,CAC3B,GAA4B,EAC5B,GAAwB,EACxB,GAA4B,EAC5B,MAAkB;QAGlB,uCAAuC;QACvC,MAAM,cAAc,GAA+C;YAC/D;gBACI,WAAW,EAAE,WAAW;gBACxB,eAAe,EAAE,GAAG,CAAC,EAAE;gBACvB,eAAe,EAAE,YAAY;gBAC7B,WAAW,EAAE,2CAA2C;aAC3D;YACD;gBACI,WAAW,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,sCAAsC;gBAC/E,eAAe,EAAE,oBAAoB;gBACrC,eAAe,EAAE,GAAG,CAAC,EAAE;gBACvB,WAAW,EAAE,4CAA4C;aAC5D;SACJ,CAAC;QAEF,qCAAqC;QACrC,MAAM,aAAa,GAA+C,EAAE,CAAC;QACrE,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACvB,gDAAgD;YAChD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC5B,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpD,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;wBAC7B,aAAa,CAAC,IAAI,CAAC;4BACf,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,YAAY;4BACrD,eAAe,EAAE,MAAM,CAAC,aAAc,EAAE,mBAAmB;4BAC3D,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,cAAc;yBAClD,CAAC,CAAC;oBACP,CAAC,CAAC,CAAC;gBACP,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,aAAa,CAAC,CAAC;QAE5D,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,IAAI,aAAa,EAAE;YACxD,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI,aAAa;YACxC,UAAU,EAAE,aAAa;SAC5B,CAAC,CAAC;IACP,CAAC;IAEO,YAAY,CAChB,GAA4B,EAC5B,YAA2B,EAC3B,UAA+B,EAC/B,YAAmC;QAEnC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE;YAC1C,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,WAAW,EAAE,YAAY,CAAC,IAAI;YAC9B,SAAS,EAAE,YAAY,CAAC,IAAI;YAC5B,sBAAsB,EAAE,CAAC,YAAY,CAAC,QAAQ;YAC9C,YAAY,EAAE,UAAU,EAAE,EAAE;YAC5B,eAAe,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;SACrC,CAAC,CAAC;IACP,CAAC;CACJ;AA7PD,0BA6PC"}

package/oke/config.d.ts

@@ -0,0 +1,3 @@
+import { IOkeClusterConfig } from "./interfaces";
+export declare const ociCompartmentId: string;
+export declare const clusters: IOkeClusterConfig[];