pulumi-extra-crds 1.0.0

package/.github/workflows/generate.yml

@@ -0,0 +1,66 @@
+name: Generate CRDs
+
+on:
+  workflow_dispatch:   # manual trigger
+  schedule:
+    - cron: "0 3 * * 1"  # run weekly
+  push:
+    branches: [ main ]
+
+jobs:
+  generate-crds:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install TypeScript
+        run: npm install -g typescript
+        
+      - name: Install dependencies
+        run: npm install
+ 
+
+      - name: Fetch latest Gateway API release
+        run: |
+          GW_VERSION=$(curl -s https://api.github.com/repos/kubernetes-sigs/gateway-api/releases/latest | jq -r .tag_name)
+          echo "GW_VERSION=$GW_VERSION" >> $GITHUB_ENV
+
+      - name: Fetch latest Cert-Manager release
+        run: |
+          CM_VERSION=$(curl -s https://api.github.com/repos/cert-manager/cert-manager/releases/latest | jq -r .tag_name)
+          echo "CM_VERSION=$CM_VERSION" >> $GITHUB_ENV
+
+      - name: Download crd2pulumi binary
+        run: |
+          CRD2PULUMI_VERSION=1.6.0
+          curl -L "https://github.com/pulumi/crd2pulumi/releases/download/v${CRD2PULUMI_VERSION}/crd2pulumi-v${CRD2PULUMI_VERSION}-linux-amd64.tar.gz" -o crd2pulumi.tar.gz
+          tar -xzf crd2pulumi.tar.gz
+          chmod +x crd2pulumi
+          sudo mv crd2pulumi /usr/local/bin/crd2pulumi
+          crd2pulumi version
+
+      - name: Run CRD generation script
+        run: node generate-crds.js
+
+      - name: Commit changes
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git add generated/crds .crd2pulumi-checksum
+          git commit -m "Update CRDs" || echo "No changes to commit"
+          git push
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Publish to npm
+        if: github.ref == 'refs/heads/main'
+        run: npm publish
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package/generate-crds.js

@@ -0,0 +1,114 @@
+const fs = require('fs');
+const path = require('path');
+const https = require('https');
+const crypto = require('crypto');
+const { execSync } = require('child_process');
+
+const PROJECT_ROOT = process.cwd(); 
+
+const OUTPUT_DIR = path.join(PROJECT_ROOT, 'generated/crds');
+const TEMP_DIR = path.join(PROJECT_ROOT, 'temp_crds');
+const CHECKSUM_FILE = path.join(PROJECT_ROOT, '.crd2pulumi-checksum');
+
+const GW_VERSION = process.env.GW_VERSION || 'v1.1.0';
+const GW_URL = `https://github.com/kubernetes-sigs/gateway-api/releases/download/${GW_VERSION}/experimental-install.yaml`;
+const GW_FILE = 'gateway-api.yaml';
+
+const CM_VERSION = process.env.CM_VERSION || 'v1.15.0';
+const CM_URL = `https://github.com/cert-manager/cert-manager/releases/download/${CM_VERSION}/cert-manager.crds.yaml`;
+const CM_FILE = 'cert-manager.yaml';
+
+const downloadFile = (url, filename) => {
+    return new Promise((resolve, reject) => {
+        const destPath = path.join(TEMP_DIR, filename);
+        const file = fs.createWriteStream(destPath);
+
+        const request = (uri) => {
+            https.get(uri, (response) => {
+                if (response.statusCode === 301 || response.statusCode === 302) {
+                    return request(response.headers.location);
+                }
+                if (response.statusCode !== 200) {
+                    reject(new Error(`Failed to download ${uri}: ${response.statusCode}`));
+                    return;
+                }
+                console.log(`Downloading ${filename}...`);
+                response.pipe(file);
+                file.on('finish', () => {
+                    file.close();
+                    resolve(destPath);
+                });
+            }).on('error', (err) => {
+                fs.unlink(destPath, () => {});
+                reject(err);
+            });
+        };
+        request(url);
+    });
+};
+
+const computeHash = (filePaths) => {
+    const hash = crypto.createHash('sha256');
+    filePaths.sort().forEach(fp => hash.update(fs.readFileSync(fp)));
+    return hash.digest('hex');
+};
+
+async function main() {
+    if (fs.existsSync(TEMP_DIR)) fs.rmSync(TEMP_DIR, { recursive: true, force: true });
+    fs.mkdirSync(TEMP_DIR);
+
+    try {
+        const gwPath = await downloadFile(GW_URL, GW_FILE);
+        const cmPath = await downloadFile(CM_URL, CM_FILE);
+        const allFiles = [gwPath, cmPath];
+        const newHash = computeHash(allFiles);
+
+        let oldHash = null;
+        if (fs.existsSync(CHECKSUM_FILE)) {
+            oldHash = fs.readFileSync(CHECKSUM_FILE, 'utf8').trim();
+        }
+
+        if (oldHash === newHash && fs.existsSync(OUTPUT_DIR)) {
+            console.log('CRDs unchanged. Skipping.');
+        } else {
+            console.log('Regenerating CRDs...');
+            if (fs.existsSync(OUTPUT_DIR)) fs.rmSync(OUTPUT_DIR, { recursive: true, force: true });
+            fs.mkdirSync(OUTPUT_DIR, { recursive: true });
+            execSync(`crd2pulumi --nodejsPath "${OUTPUT_DIR}" --force "${gwPath}" "${cmPath}"`, { stdio: 'inherit' });
+
+            const pkgPath = path.join(OUTPUT_DIR, 'package.json');
+            if (fs.existsSync(pkgPath)) {
+                const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+                if (pkg.scripts) delete pkg.scripts;
+                fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2));
+            }
+
+            const tsconfig = {
+                compilerOptions: {
+                    target: "es2020",
+                    module: "commonjs",
+                    moduleResolution: "node",
+                    declaration: true,
+                    skipLibCheck: true,
+                },
+                include: ["**/*.ts"],
+                exclude: ["node_modules"]
+            };
+            fs.writeFileSync(path.join(OUTPUT_DIR, 'tsconfig.json'), JSON.stringify(tsconfig, null, 2));
+            
+            try {
+                execSync('npx tsc', { cwd: OUTPUT_DIR, stdio: 'inherit' });
+            } catch (e) { console.warn("TSC warnings ignored."); }
+
+            fs.writeFileSync(CHECKSUM_FILE, newHash);
+            console.log(`Success!`);
+        }
+    } catch (error) {
+        console.error(error);
+        process.exit(1);
+    } finally {
+        if (fs.existsSync(TEMP_DIR)) fs.rmSync(TEMP_DIR, { recursive: true, force: true });
+    }
+}
+
+main();

package/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "pulumi-extra-crds",
+  "version": "1.0.0",
+  "license": "Apache-2.0",
+  "scripts": {
+    "generate": "node scripts/generate-crds.js",
+    "build": "tsc -p tsconfig.json"
+  },
+  "dependencies": {
+    "@pulumi/kubernetes": "^4.23.0",
+    "@pulumi/pulumi": "^3.113.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.0.0",
+    "@types/node": "^20.0.0"
+  }
+}

package/tsconfig.json

@@ -0,0 +1,12 @@
+{
+  "compilerOptions": {
+    "target": "es2020",
+    "module": "commonjs",
+    "moduleResolution": "node",
+    "declaration": true,
+    "skipLibCheck": true,
+    "esModuleInterop": true
+  },
+  "include": ["generated/**/*.ts", "**/*.ts"],
+  "exclude": ["node_modules"]
+}