cdk8s-plus-33 2.0.0

package/git-hooks/README.md

@@ -0,0 +1,9 @@
+# Git Hooks
+
+This directory contains git hooks that the core team uses for various tasks.
+
+- Commit signoff for automatic compliance of the [DCO](../CONTRIBUTING.md#developer-certificate-of-origin-dco).
+
+## Setup
+
+To setup these git hooks, run `./git-hooks/setup.sh` from the root directory of the project.

package/git-hooks/prepare-commit-msg

@@ -0,0 +1,18 @@
+#!/bin/sh
+
+NAME=$(git config user.name)
+EMAIL=$(git config user.email)
+
+if [ -z "$NAME" ]; then
+    echo "empty git config user.name"
+    exit 1
+fi
+
+if [ -z "$EMAIL" ]; then
+    echo "empty git config user.email"
+    exit 1
+fi
+
+git interpret-trailers --if-exists doNothing --trailer \
+    "Signed-off-by: $NAME <$EMAIL>" \
+    --in-place "$1"

package/git-hooks/setup.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+
+##############################################
+# Setup shared .git hooks for this project.
+#
+
+hooksdir="$(cd $(dirname $0) && pwd)"
+
+git config core.hooksPath ${hooksdir}
+echo "Configured core.hooksPath to ${hooksdir}"

package/lib/_action.d.ts

@@ -0,0 +1,21 @@
+import { Container } from './container';
+import * as k8s from './imports/k8s';
+import { ConnectionScheme } from './probe';
+/**
+ * Utility class to implement the conversion between our API and the k8s action
+ * structure. Used both for probes and handlers.
+ *
+ * @internal
+ */
+export declare class Action {
+    static fromTcpSocket(container: Container, options?: {
+        port?: number;
+        host?: string;
+    }): k8s.TcpSocketAction;
+    static fromCommand(command: string[]): k8s.ExecAction;
+    static fromHttpGet(container: Container, path: string, options?: {
+        port?: number;
+        scheme?: ConnectionScheme;
+        host?: string;
+    }): k8s.HttpGetAction;
+}

package/lib/_action.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Action = void 0;
+const k8s = require("./imports/k8s");
+const probe_1 = require("./probe");
+/**
+ * Utility class to implement the conversion between our API and the k8s action
+ * structure. Used both for probes and handlers.
+ *
+ * @internal
+ */
+class Action {
+    static fromTcpSocket(container, options = {}) {
+        return {
+            port: k8s.IntOrString.fromNumber(options.port ?? container.portNumber ?? 80),
+            host: options.host,
+        };
+    }
+    static fromCommand(command) {
+        return { command };
+    }
+    static fromHttpGet(container, path, options = {}) {
+        return {
+            path,
+            port: k8s.IntOrString.fromNumber(options.port ?? container.portNumber ?? 80),
+            scheme: options.scheme ?? probe_1.ConnectionScheme.HTTP,
+            host: options.host,
+        };
+    }
+}
+exports.Action = Action;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/api-resource.d.ts

@@ -0,0 +1,298 @@
+/**
+ * Represents a resource or collection of resources.
+ */
+export interface IApiResource {
+    /**
+     * The group portion of the API version (e.g. `authorization.k8s.io`).
+     */
+    readonly apiGroup: string;
+    /**
+     * The name of a resource type as it appears in the relevant API endpoint.
+     * @example - "pods" or "pods/log"
+     * @see https://kubernetes.io/docs/reference/access-authn-authz/rbac/#referring-to-resources
+     */
+    readonly resourceType: string;
+    /**
+     * The unique, namespace-global, name of an object inside the Kubernetes cluster.
+     *
+     * If this is omitted, the ApiResource should represent all objects of the given type.
+     */
+    readonly resourceName?: string;
+}
+/**
+ * An API Endpoint can either be a resource descriptor (e.g /pods)
+ * or a non resource url (e.g /healthz). It must be one or the other, and not both.
+ */
+export interface IApiEndpoint {
+    /**
+     * Return the IApiResource this object represents.
+     */
+    asApiResource(): IApiResource | undefined;
+    /**
+     * Return the non resource url this object represents.
+     */
+    asNonApiResource(): string | undefined;
+}
+/**
+ * Options for `ApiResource`.
+ */
+export interface ApiResourceOptions {
+    /**
+     * The group portion of the API version (e.g. `authorization.k8s.io`).
+     */
+    readonly apiGroup: string;
+    /**
+     * The name of the resource type as it appears in the relevant API endpoint.
+     * @example - "pods" or "pods/log"
+     * @see https://kubernetes.io/docs/reference/access-authn-authz/rbac/#referring-to-resources
+     */
+    readonly resourceType: string;
+}
+/**
+ * Represents information about an API resource type.
+ */
+export declare class ApiResource implements IApiResource, IApiEndpoint {
+    /**
+     * API resource information for Binding.
+     */
+    static readonly BINDINGS: ApiResource;
+    /**
+     * API resource information for ComponentStatus.
+     */
+    static readonly COMPONENT_STATUSES: ApiResource;
+    /**
+     * API resource information for ConfigMap.
+     */
+    static readonly CONFIG_MAPS: ApiResource;
+    /**
+     * API resource information for Endpoints.
+     */
+    static readonly ENDPOINTS: ApiResource;
+    /**
+     * API resource information for Event.
+     */
+    static readonly EVENTS: ApiResource;
+    /**
+     * API resource information for LimitRange.
+     */
+    static readonly LIMIT_RANGES: ApiResource;
+    /**
+     * API resource information for Namespace.
+     */
+    static readonly NAMESPACES: ApiResource;
+    /**
+     * API resource information for Node.
+     */
+    static readonly NODES: ApiResource;
+    /**
+     * API resource information for PersistentVolumeClaim.
+     */
+    static readonly PERSISTENT_VOLUME_CLAIMS: ApiResource;
+    /**
+     * API resource information for PersistentVolume.
+     */
+    static readonly PERSISTENT_VOLUMES: ApiResource;
+    /**
+     * API resource information for Pod.
+     */
+    static readonly PODS: ApiResource;
+    /**
+     * API resource information for PodTemplate.
+     */
+    static readonly POD_TEMPLATES: ApiResource;
+    /**
+     * API resource information for ReplicationController.
+     */
+    static readonly REPLICATION_CONTROLLERS: ApiResource;
+    /**
+     * API resource information for ResourceQuota.
+     */
+    static readonly RESOURCE_QUOTAS: ApiResource;
+    /**
+     * API resource information for Secret.
+     */
+    static readonly SECRETS: ApiResource;
+    /**
+     * API resource information for ServiceAccount.
+     */
+    static readonly SERVICE_ACCOUNTS: ApiResource;
+    /**
+     * API resource information for Service.
+     */
+    static readonly SERVICES: ApiResource;
+    /**
+     * API resource information for MutatingWebhookConfiguration.
+     */
+    static readonly MUTATING_WEBHOOK_CONFIGURATIONS: ApiResource;
+    /**
+     * API resource information for ValidatingWebhookConfiguration.
+     */
+    static readonly VALIDATING_WEBHOOK_CONFIGURATIONS: ApiResource;
+    /**
+     * API resource information for CustomResourceDefinition.
+     */
+    static readonly CUSTOM_RESOURCE_DEFINITIONS: ApiResource;
+    /**
+     * API resource information for APIService.
+     */
+    static readonly API_SERVICES: ApiResource;
+    /**
+     * API resource information for ControllerRevision.
+     */
+    static readonly CONTROLLER_REVISIONS: ApiResource;
+    /**
+     * API resource information for DaemonSet.
+     */
+    static readonly DAEMON_SETS: ApiResource;
+    /**
+     * API resource information for Deployment.
+     */
+    static readonly DEPLOYMENTS: ApiResource;
+    /**
+     * API resource information for ReplicaSet.
+     */
+    static readonly REPLICA_SETS: ApiResource;
+    /**
+     * API resource information for StatefulSet.
+     */
+    static readonly STATEFUL_SETS: ApiResource;
+    /**
+     * API resource information for TokenReview.
+     */
+    static readonly TOKEN_REVIEWS: ApiResource;
+    /**
+     * API resource information for LocalSubjectAccessReview.
+     */
+    static readonly LOCAL_SUBJECT_ACCESS_REVIEWS: ApiResource;
+    /**
+     * API resource information for SelfSubjectAccessReview.
+     */
+    static readonly SELF_SUBJECT_ACCESS_REVIEWS: ApiResource;
+    /**
+     * API resource information for SelfSubjectRulesReview.
+     */
+    static readonly SELF_SUBJECT_RULES_REVIEWS: ApiResource;
+    /**
+     * API resource information for SubjectAccessReview.
+     */
+    static readonly SUBJECT_ACCESS_REVIEWS: ApiResource;
+    /**
+     * API resource information for HorizontalPodAutoscaler.
+     */
+    static readonly HORIZONTAL_POD_AUTOSCALERS: ApiResource;
+    /**
+     * API resource information for CronJob.
+     */
+    static readonly CRON_JOBS: ApiResource;
+    /**
+     * API resource information for Job.
+     */
+    static readonly JOBS: ApiResource;
+    /**
+     * API resource information for CertificateSigningRequest.
+     */
+    static readonly CERTIFICATE_SIGNING_REQUESTS: ApiResource;
+    /**
+     * API resource information for Lease.
+     */
+    static readonly LEASES: ApiResource;
+    /**
+     * API resource information for EndpointSlice.
+     */
+    static readonly ENDPOINT_SLICES: ApiResource;
+    /**
+     * API resource information for FlowSchema.
+     */
+    static readonly FLOW_SCHEMAS: ApiResource;
+    /**
+     * API resource information for PriorityLevelConfiguration.
+     */
+    static readonly PRIORITY_LEVEL_CONFIGURATIONS: ApiResource;
+    /**
+     * API resource information for IngressClass.
+     */
+    static readonly INGRESS_CLASSES: ApiResource;
+    /**
+     * API resource information for Ingress.
+     */
+    static readonly INGRESSES: ApiResource;
+    /**
+     * API resource information for NetworkPolicy.
+     */
+    static readonly NETWORK_POLICIES: ApiResource;
+    /**
+     * API resource information for RuntimeClass.
+     */
+    static readonly RUNTIME_CLASSES: ApiResource;
+    /**
+     * API resource information for PodDisruptionBudget.
+     */
+    static readonly POD_DISRUPTION_BUDGETS: ApiResource;
+    /**
+     * API resource information for ClusterRoleBinding.
+     */
+    static readonly CLUSTER_ROLE_BINDINGS: ApiResource;
+    /**
+     * API resource information for ClusterRole.
+     */
+    static readonly CLUSTER_ROLES: ApiResource;
+    /**
+     * API resource information for RoleBinding.
+     */
+    static readonly ROLE_BINDINGS: ApiResource;
+    /**
+     * API resource information for Role.
+     */
+    static readonly ROLES: ApiResource;
+    /**
+     * API resource information for PriorityClass.
+     */
+    static readonly PRIORITY_CLASSES: ApiResource;
+    /**
+     * API resource information for CSIDriver.
+     */
+    static readonly CSI_DRIVERS: ApiResource;
+    /**
+     * API resource information for CSINode.
+     */
+    static readonly CSI_NODES: ApiResource;
+    /**
+     * API resource information for CSIStorageCapacity.
+     */
+    static readonly CSI_STORAGE_CAPACITIES: ApiResource;
+    /**
+     * API resource information for StorageClass.
+     */
+    static readonly STORAGE_CLASSES: ApiResource;
+    /**
+     * API resource information for VolumeAttachment.
+     */
+    static readonly VOLUME_ATTACHMENTS: ApiResource;
+    /**
+     * API resource information for a custom resource type.
+     */
+    static custom(options: ApiResourceOptions): ApiResource;
+    /**
+     * The group portion of the API version (e.g. `authorization.k8s.io`).
+     */
+    readonly apiGroup: string;
+    /**
+     * The name of the resource type as it appears in the relevant API endpoint.
+     * @example - "pods" or "pods/log"
+     * @see https://kubernetes.io/docs/reference/access-authn-authz/rbac/#referring-to-resources
+     */
+    readonly resourceType: string;
+    private constructor();
+    asApiResource(): IApiResource | undefined;
+    asNonApiResource(): string | undefined;
+}
+/**
+ * Factory for creating non api resources.
+ */
+export declare class NonApiResource implements IApiEndpoint {
+    private readonly nonResourceUrl;
+    static of(url: string): NonApiResource;
+    private constructor();
+    asApiResource(): IApiResource | undefined;
+    asNonApiResource(): string | undefined;
+}