terruvim-core-test 0.0.1

package/dist/src/core/entrypoint.js

@@ -0,0 +1,56 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.terruvimDeploy = terruvimDeploy;
+const generateFinalConfig_1 = require("./generateFinalConfig");
+const configUtils_1 = require("./configUtils");
+const deployUtils_1 = require("./deployUtils");
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const path = __importStar(require("path"));
+async function terruvimDeploy(configDir = process.cwd()) {
+    const stack = pulumi.getStack();
+    const env = stack.replace(/^.*-/, "");
+    const { baseConfig, overlayConfig } = (0, configUtils_1.loadInfraConfigs)(env, configDir);
+    const { nested: mergedConfig, flat: flatConfigWithCustomGroup } = (0, generateFinalConfig_1.generateFinalConfig)(baseConfig, overlayConfig, env);
+    const mergedConfigPath = path.join(configDir, "generated.merged.nested.json");
+    const flatMergedConfigPath = path.join(configDir, "generated.merged.flat.json");
+    (0, configUtils_1.saveGeneratedConfigs)(mergedConfig, flatConfigWithCustomGroup, mergedConfigPath, flatMergedConfigPath);
+    const outputs = await (0, deployUtils_1.deployFromConfig)(flatMergedConfigPath);
+    const globalModule = require.main;
+    if (globalModule) {
+        Object.assign(globalModule.exports, outputs);
+    }
+    return outputs;
+}

package/dist/src/core/generateFinalConfig.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateFinalConfig = generateFinalConfig;
+const configMerge_1 = require("./configMerge");
+function generateFinalConfig(baseConfig, overlayConfig, env) {
+    const mergedConfig = (0, configMerge_1.deepMergeById)(baseConfig, overlayConfig);
+    const baseProviders = baseConfig.providers || {};
+    const overlayProviders = overlayConfig.providers || {};
+    mergedConfig.providers = (0, configMerge_1.deepMergeById)(baseProviders, overlayProviders);
+    const knownResourceTypes = (0, configMerge_1.getKnownResourceTypes)();
+    const groupedBase = (0, configMerge_1.flattenAndGroupResourcesByCategoryAndType)(baseConfig, knownResourceTypes);
+    const overlayByType = (0, configMerge_1.flattenOverlayResourcesByType)(overlayConfig, knownResourceTypes);
+    let flatConfigForDeployment = (0, configMerge_1.mergeOverlayIntoBaseByType)(groupedBase, overlayByType);
+    const baseMeta = baseConfig.meta || {};
+    const overlayMeta = overlayConfig.meta || {};
+    flatConfigForDeployment.meta = (0, configMerge_1.deepMergeById)(baseMeta, overlayMeta);
+    if (env) {
+        if (typeof flatConfigForDeployment.meta !== "object" || flatConfigForDeployment.meta === null || Array.isArray(flatConfigForDeployment.meta)) {
+            flatConfigForDeployment.meta = {};
+        }
+        flatConfigForDeployment.meta.environment = env;
+    }
+    const flatBaseProviders = baseConfig.providers || {};
+    const flatOverlayProviders = overlayConfig.providers || {};
+    flatConfigForDeployment.providers = (0, configMerge_1.deepMergeById)(flatBaseProviders, flatOverlayProviders);
+    const resourcesByFactory = {};
+    for (const category of Object.keys(flatConfigForDeployment)) {
+        if (category === "meta" || category === "providers")
+            continue;
+        for (const factory of Object.keys(flatConfigForDeployment[category])) {
+            if (!resourcesByFactory[factory])
+                resourcesByFactory[factory] = [];
+            resourcesByFactory[factory].push(...flatConfigForDeployment[category][factory]);
+        }
+    }
+    const flatConfigWithCustomGroup = {
+        RESOURCES: resourcesByFactory,
+        meta: flatConfigForDeployment.meta,
+        providers: flatConfigForDeployment.providers,
+    };
+    return {
+        nested: mergedConfig,
+        flat: flatConfigWithCustomGroup
+    };
+}

package/dist/src/core/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./configMerge"), exports);
+__exportStar(require("./configUtils"), exports);
+__exportStar(require("./generateFinalConfig"), exports);
+__exportStar(require("./deployUtils"), exports);
+__exportStar(require("./entrypoint"), exports);
+__exportStar(require("./dependencyResolver"), exports);
+__exportStar(require("./resourceMap"), exports);
+__exportStar(require("./dynamicResourceManager"), exports);

package/dist/src/core/resourceMap.js

@@ -0,0 +1,99 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resourceRegistry = void 0;
+exports.registerResource = registerResource;
+exports.getResourceOutput = getResourceOutput;
+exports.resolveOutputsInObject = resolveOutputsInObject;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+exports.resourceRegistry = {};
+function registerResource(id, resource, outputs) {
+    if (!resource) {
+        console.warn(`[DEBUG] Resource ${id} is undefined and cannot be registered.`);
+        return;
+    }
+    exports.resourceRegistry[id] = outputs.reduce((acc, output) => {
+        if (resource[output] !== undefined) {
+            acc[output] = resource[output];
+        }
+        else {
+        }
+        return acc;
+    }, {});
+}
+function getResourceOutput(resourceId, outputKey) {
+    const resource = exports.resourceRegistry[resourceId];
+    if (!resource) {
+        throw new Error(`Resource ${resourceId} not found in the registry. Ensure it is registered before accessing outputs.`);
+    }
+    if (!resource[outputKey]) {
+        throw new Error(`Output ${outputKey} not found for resource ${resourceId}. Available outputs: ${Object.keys(resource).join(", ")}`);
+    }
+    return resource[outputKey];
+}
+function resolveOutputsInObject(obj, inputs) {
+    if (typeof obj === "string") {
+        const regex = /\$\{output:([\w-]+)\.([\w-]+)\}/g;
+        const matches = [...obj.matchAll(regex)];
+        if (matches.length === 0)
+            return pulumi.output(obj);
+        const outputs = matches.map(m => {
+            const val = inputs[m[1]]?.[m[2]];
+            return pulumi.Output.isInstance(val) ? val : pulumi.output(val);
+        });
+        return pulumi.all(outputs).apply(values => {
+            let result = obj;
+            matches.forEach((m, i) => {
+                result = result.replace(m[0], values[i]);
+            });
+            return result;
+        });
+    }
+    else if (Array.isArray(obj)) {
+        const resolvedArr = obj.map(item => resolveOutputsInObject(item, inputs));
+        return pulumi.all(resolvedArr);
+    }
+    else if (typeof obj === "object" && obj !== null) {
+        const keys = Object.keys(obj);
+        const resolved = {};
+        keys.forEach(key => {
+            resolved[key] = resolveOutputsInObject(obj[key], inputs);
+        });
+        return pulumi.all(resolved);
+    }
+    else {
+        return pulumi.output(obj);
+    }
+}

package/dist/src/factories/accountPermissions.js

@@ -0,0 +1,134 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccountPermissions = void 0;
+const aws = __importStar(require("@pulumi/aws"));
+const pulumi = __importStar(require("@pulumi/pulumi"));
+class AccountPermissions extends pulumi.ComponentResource {
+    static nonAutomationUserAssumeRoleName = "DeveloperRole";
+    static automationUserAssumeRoleName = "AutomationRole";
+    prefix;
+    automationUser;
+    managementAccountId;
+    constructor(name, args, opts) {
+        if (!opts.provider) {
+            throw new Error("Provider resource option is required");
+        }
+        super("acme:permissions:AccountPermissions", name, undefined, opts);
+        this.prefix = args.resourceNamesPrefix;
+        this.automationUser = args.automationUser;
+        this.managementAccountId = args.managementAccountId;
+        this.createRole();
+        this.createAutomationRole();
+        super.registerOutputs();
+    }
+    createRole() {
+        const devActions = ["s3:*", "cloudwatch:*", "dynamodb:*", "ec2:*"];
+        const permissionsBoundary = new aws.iam.Policy(`${this.prefix}DevBoundary`, {
+            policy: {
+                Version: "2012-10-17",
+                Statement: [
+                    {
+                        Effect: "Allow",
+                        Action: devActions,
+                        Resource: "*",
+                    },
+                ],
+            },
+        }, { parent: this });
+        const role = new aws.iam.Role(`${this.prefix}DevRole`, {
+            name: AccountPermissions.nonAutomationUserAssumeRoleName,
+            assumeRolePolicy: {
+                Version: "2012-10-17",
+                Statement: [
+                    {
+                        Effect: "Allow",
+                        Principal: {
+                            AWS: pulumi.interpolate `arn:aws:iam::${this.managementAccountId}:root`,
+                        },
+                        Action: "sts:AssumeRole",
+                    },
+                ],
+            },
+            permissionsBoundary: permissionsBoundary.arn,
+        }, { parent: this });
+        const attachment = new aws.iam.RolePolicyAttachment(`${this.prefix}RPAttach`, {
+            policyArn: permissionsBoundary.arn,
+            role: role,
+        }, { parent: this });
+    }
+    createAutomationRole() {
+        const actions = [
+            "s3:*",
+            "cloudwatch:*",
+            "ec2:*",
+            "dynamodb:*",
+            "iam:*",
+        ];
+        const permissionsBoundary = new aws.iam.Policy(`${this.prefix}AutomationUserBoundary`, {
+            policy: {
+                Version: "2012-10-17",
+                Statement: [
+                    {
+                        Effect: "Allow",
+                        Action: actions,
+                        Resource: "*",
+                    },
+                ],
+            },
+        }, { parent: this });
+        const automationRole = new aws.iam.Role(`${this.prefix}AutomationUserRole`, {
+            name: AccountPermissions.automationUserAssumeRoleName,
+            assumeRolePolicy: {
+                Version: "2012-10-17",
+                Statement: [
+                    {
+                        Effect: "Allow",
+                        Principal: {
+                            AWS: this.automationUser.arn,
+                        },
+                        Action: "sts:AssumeRole",
+                    },
+                ],
+            },
+            permissionsBoundary: permissionsBoundary.arn,
+        }, { parent: this });
+        const attachment = new aws.iam.RolePolicyAttachment(`${this.prefix}UserPolicyAttach`, {
+            policyArn: permissionsBoundary.arn,
+            role: automationRole,
+        }, { parent: this });
+    }
+}
+exports.AccountPermissions = AccountPermissions;

package/dist/src/factories/acmFactory.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AcmFactory = void 0;
+const resourceFactory_1 = require("./resourceFactory");
+const validateAcmConfig_1 = require("./validateAcmConfig");
+const createAwsAcmCertificate_1 = require("./createAwsAcmCertificate");
+class AcmFactory extends resourceFactory_1.ResourceFactory {
+    async createResource(config) {
+        (0, validateAcmConfig_1.validateAcmConfig)(config);
+        return (0, createAwsAcmCertificate_1.createAwsAcmCertificate)(config.configuration.domainName, {
+            domainName: config.configuration.domainName,
+            validationMethod: config.configuration.validationMethod || "DNS",
+            subjectAlternativeNames: config.configuration.subjectAlternativeNames,
+            tags: config.configuration.tags,
+            options: config.configuration.options,
+            validationOptions: config.configuration.domainValidationOptions,
+            keyAlgorithm: config.configuration.keyAlgorithm,
+        });
+    }
+    getOutputs(resource) {
+        return {
+            arn: resource.arn,
+            domainName: resource.domainName,
+        };
+    }
+    validateConfig(config) {
+        (0, validateAcmConfig_1.validateAcmConfig)(config);
+    }
+}
+exports.AcmFactory = AcmFactory;