timonel 2.3.0 → 2.5.0

package/dist/lib/resources/cloud/azure/azureResources.js

@@ -0,0 +1,218 @@
+import { BaseResourceProvider } from '../../baseResourceProvider.js';
+/**
+ * Azure-specific Kubernetes resources provider
+ * Handles Azure integrations like Azure Disk, Azure File, Application Gateway, AGIC, and other Azure services
+ *
+ * @since 2.4.0
+ */
+export class AzureResources extends BaseResourceProvider {
+    /**
+     * Creates an Azure Disk StorageClass
+     * @param spec - Azure Disk StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureDiskStorageClass({
+     *   name: 'premium-disk',
+     *   skuName: 'Premium_LRS',
+     *   cachingMode: 'ReadOnly',
+     *   allowVolumeExpansion: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureDiskStorageClass(spec) {
+        const parameters = {
+            skuName: spec.skuName ?? 'Standard_LRS',
+            ...(spec.cachingMode ? { cachingmode: spec.cachingMode } : {}),
+            ...(spec.fsType ? { fsType: spec.fsType } : {}),
+            ...(spec.kind ? { kind: spec.kind } : {}),
+        };
+        const storageClassSpec = {
+            provisioner: 'disk.csi.azure.com',
+            parameters,
+            reclaimPolicy: spec.reclaimPolicy ?? 'Delete',
+            allowVolumeExpansion: spec.allowVolumeExpansion ?? true,
+            volumeBindingMode: spec.volumeBindingMode ?? 'WaitForFirstConsumer',
+        };
+        return this.createApiObject(spec.name, AzureResources.STORAGE_API_VERSION, 'StorageClass', storageClassSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates an Azure File StorageClass
+     * @param spec - Azure File StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureFileStorageClass({
+     *   name: 'azure-file-premium',
+     *   skuName: 'Premium_LRS',
+     *   protocol: 'nfs',
+     *   allowSharedAccess: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureFileStorageClass(spec) {
+        const parameters = {
+            skuName: spec.skuName ?? 'Standard_LRS',
+            ...(spec.protocol ? { protocol: spec.protocol } : {}),
+            ...(spec.allowSharedAccess !== undefined
+                ? { allowSharedAccess: String(spec.allowSharedAccess) }
+                : {}),
+        };
+        const storageClassSpec = {
+            provisioner: 'file.csi.azure.com',
+            parameters,
+            reclaimPolicy: spec.reclaimPolicy ?? 'Delete',
+            allowVolumeExpansion: spec.allowVolumeExpansion ?? true,
+            volumeBindingMode: spec.volumeBindingMode ?? 'Immediate',
+        };
+        return this.createApiObject(spec.name, AzureResources.STORAGE_API_VERSION, 'StorageClass', storageClassSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates an Azure Application Gateway Ingress
+     * @param spec - AGIC Ingress specification
+     * @returns Created Ingress ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addApplicationGatewayIngress({
+     *   name: 'app-gateway-ingress',
+     *   host: 'myapp.example.com',
+     *   serviceName: 'my-service',
+     *   servicePort: 80,
+     *   sslRedirect: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addApplicationGatewayIngress(spec) {
+        const annotations = {
+            'kubernetes.io/ingress.class': 'azure/application-gateway',
+            ...(spec.sslRedirect !== undefined
+                ? { 'appgw.ingress.kubernetes.io/ssl-redirect': String(spec.sslRedirect) }
+                : {}),
+            ...(spec.cookieBasedAffinity !== undefined
+                ? { 'appgw.ingress.kubernetes.io/cookie-based-affinity': String(spec.cookieBasedAffinity) }
+                : {}),
+            ...(spec.requestTimeout
+                ? { 'appgw.ingress.kubernetes.io/request-timeout': String(spec.requestTimeout) }
+                : {}),
+            ...(spec.connectionDraining !== undefined
+                ? { 'appgw.ingress.kubernetes.io/connection-draining': String(spec.connectionDraining) }
+                : {}),
+            ...(spec.annotations || {}),
+        };
+        const rules = [
+            {
+                host: spec.host,
+                http: {
+                    paths: [
+                        {
+                            path: spec.path ?? '/',
+                            pathType: 'Prefix',
+                            backend: {
+                                service: {
+                                    name: spec.serviceName,
+                                    port: { number: spec.servicePort },
+                                },
+                            },
+                        },
+                    ],
+                },
+            },
+        ];
+        const ingressSpec = {
+            rules,
+            ...(spec.tls ? { tls: spec.tls } : {}),
+        };
+        return this.createApiObject(spec.name, AzureResources.NETWORKING_API_VERSION, 'Ingress', ingressSpec, spec.labels, annotations);
+    }
+    /**
+     * Creates an Azure Key Vault SecretProviderClass
+     * @param spec - Azure Key Vault SecretProviderClass specification
+     * @returns Created SecretProviderClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureKeyVaultSecretProviderClass({
+     *   name: 'app-secrets',
+     *   keyVaultName: 'my-keyvault',
+     *   tenantId: '87654321-4321-4321-4321-210987654321',
+     *   objects: [
+     *     { objectName: 'database-password', objectType: 'secret' }
+     *   ]
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureKeyVaultSecretProviderClass(spec) {
+        // Validate object names for security
+        spec.objects.forEach((obj) => {
+            if (obj.objectName.includes('../') || obj.objectName.includes('..\\')) {
+                throw new Error(`Azure Key Vault ${spec.name}: Object name '${obj.objectName}' contains invalid path traversal sequences`);
+            }
+        });
+        const objects = spec.objects.map((obj) => ({
+            objectName: obj.objectName,
+            objectType: obj.objectType,
+            ...(obj.objectAlias ? { objectAlias: obj.objectAlias } : {}),
+            ...(obj.objectVersion ? { objectVersion: obj.objectVersion } : {}),
+        }));
+        const secretProviderSpec = {
+            secretObjects: [
+                {
+                    secretName: spec.secretName || spec.name,
+                    type: 'Opaque',
+                    data: objects.map((obj) => ({
+                        objectName: obj.objectName,
+                        key: obj.objectAlias || obj.objectName,
+                    })),
+                },
+            ],
+            parameters: {
+                keyvaultName: spec.keyVaultName,
+                tenantId: spec.tenantId,
+                objects: JSON.stringify({ array: objects }),
+                ...(spec.userAssignedIdentityID
+                    ? { userAssignedIdentityID: spec.userAssignedIdentityID }
+                    : {}),
+            },
+        };
+        return this.createApiObject(spec.name, 'secrets-store.csi.x-k8s.io/v1', 'SecretProviderClass', secretProviderSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates an Azure Container Registry ServiceAccount
+     * @param spec - Azure ACR ServiceAccount specification
+     * @returns Created ServiceAccount ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureACRServiceAccount({
+     *   name: 'acr-service-account',
+     *   acrName: 'myregistry',
+     *   resourceGroup: 'my-rg'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureACRServiceAccount(spec) {
+        const annotations = {
+            'azure.workload.identity/client-id': spec.clientId || '',
+            'azure.workload.identity/tenant-id': spec.tenantId || '',
+            ...(spec.annotations || {}),
+        };
+        const serviceAccountSpec = {};
+        return this.createApiObject(spec.name, 'v1', 'ServiceAccount', serviceAccountSpec, spec.labels, annotations);
+    }
+}
+AzureResources.STORAGE_API_VERSION = 'storage.k8s.io/v1';
+AzureResources.NETWORKING_API_VERSION = 'networking.k8s.io/v1';
+//# sourceMappingURL=azureResources.js.map

package/dist/lib/resources/cloud/azure/azureResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azureResources.js","sourceRoot":"","sources":["../../../../../src/lib/resources/cloud/azure/azureResources.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;GAKG;AACH,MAAM,OAAO,cAAe,SAAQ,oBAAoB;IAItD;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,CAAC,IAA+B;QACtD,MAAM,UAAU,GAA2B;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,cAAc;YACvC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,WAAW,EAAE,oBAAoB;YACjC,UAAU;YACV,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ;YAC7C,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;YACvD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,sBAAsB;SACpE,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,cAAc,CAAC,mBAAmB,EAClC,cAAc,EACd,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,CAAC,IAA+B;QACtD,MAAM,UAAU,GAA2B;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,cAAc;YACvC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE;gBACvD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,WAAW,EAAE,oBAAoB;YACjC,UAAU;YACV,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ;YAC7C,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;YACvD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,WAAW;SACzD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,cAAc,CAAC,mBAAmB,EAClC,cAAc,EACd,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,4BAA4B,CAAC,IAA0B;QACrD,MAAM,WAAW,GAA2B;YAC1C,6BAA6B,EAAE,2BAA2B;YAC1D,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE,0CAA0C,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;gBAC1E,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,mDAAmD,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE;gBAC3F,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,cAAc;gBACrB,CAAC,CAAC,EAAE,6CAA6C,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;gBAChF,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,iDAAiD,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE;gBACxF,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;SAC5B,CAAC;QAEF,MAAM,KAAK,GAAG;YACZ;gBACE,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE;oBACJ,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG;4BACtB,QAAQ,EAAE,QAAQ;4BAClB,OAAO,EAAE;gCACP,OAAO,EAAE;oCACP,IAAI,EAAE,IAAI,CAAC,WAAW;oCACtB,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE;iCACnC;6BACF;yBACF;qBACF;iBACF;aACF;SACF,CAAC;QAEF,MAAM,WAAW,GAAG;YAClB,KAAK;YACL,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,cAAc,CAAC,sBAAsB,EACrC,SAAS,EACT,WAAW,EACX,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,mCAAmC,CAAC,IAA0C;QAC5E,qCAAqC;QACrC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3B,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,CAAC,IAAI,kBAAkB,GAAG,CAAC,UAAU,6CAA6C,CAC1G,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAC,CAAC;QAEJ,MAAM,kBAAkB,GAAG;YACzB,aAAa,EAAE;gBACb;oBACE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI;oBACxC,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU;qBACvC,CAAC,CAAC;iBACJ;aACF;YACD,UAAU,EAAE;gBACV,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBAC3C,GAAG,CAAC,IAAI,CAAC,sBAAsB;oBAC7B,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,EAAE;oBACzD,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,+BAA+B,EAC/B,qBAAqB,EACrB,kBAAkB,EAClB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB,CAAC,IAAgC;QACxD,MAAM,WAAW,GAA2B;YAC1C,mCAAmC,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;YACxD,mCAAmC,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;YACxD,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;SAC5B,CAAC;QAEF,MAAM,kBAAkB,GAAG,EAAE,CAAC;QAE9B,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,IAAI,EACJ,gBAAgB,EAChB,kBAAkB,EAClB,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;IACJ,CAAC;;AArQuB,kCAAmB,GAAG,mBAAmB,CAAC;AAC1C,qCAAsB,GAAG,sBAAsB,CAAC"}

package/dist/lib/resources/cloud/gcp/gcpResources.d.ts

@@ -0,0 +1,133 @@
+import type { ApiObject } from 'cdk8s';
+import { BaseResourceProvider } from '../../baseResourceProvider.js';
+/**
+ * GCP-specific Kubernetes resources provider
+ * Handles GCP integrations like Persistent Disk, Filestore, GCE Ingress, Workload Identity, and other GCP services
+ *
+ * @since 2.4.0
+ */
+export declare class GCPResources extends BaseResourceProvider {
+    private static readonly STORAGE_API_VERSION;
+    private static readonly CORE_API_VERSION;
+    private static readonly NETWORKING_API_VERSION;
+    /**
+     * Creates a GCP Persistent Disk StorageClass
+     * @param spec - GCP PD StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * gcpResources.addPersistentDiskStorageClass({
+     *   name: 'fast-ssd',
+     *   type: 'pd-ssd',
+     *   replicationType: 'regional-pd',
+     *   allowVolumeExpansion: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addPersistentDiskStorageClass(spec: GCPPersistentDiskStorageClassSpec): ApiObject;
+    /**
+     * Creates a GCP Filestore StorageClass
+     * @param spec - GCP Filestore StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * gcpResources.addFilestoreStorageClass({
+     *   name: 'filestore-premium',
+     *   tier: 'premium',
+     *   network: 'default',
+     *   allowVolumeExpansion: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addFilestoreStorageClass(spec: GCPFilestoreStorageClassSpec): ApiObject;
+    /**
+     * Creates a GCE Ingress with Google Cloud Load Balancer
+     * @param spec - GCE Ingress specification
+     * @returns Created Ingress ApiObject
+     *
+     * @example
+     * ```typescript
+     * gcpResources.addGCEIngress({
+     *   name: 'gce-ingress',
+     *   host: 'myapp.example.com',
+     *   serviceName: 'my-service',
+     *   servicePort: 80,
+     *   staticIPName: 'my-static-ip',
+     *   managedCertificate: 'my-ssl-cert'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addGCEIngress(spec: GCPGCEIngressSpec): ApiObject;
+    /**
+     * Creates a ServiceAccount with Workload Identity annotations
+     * @param spec - Workload Identity ServiceAccount specification
+     * @returns Created ServiceAccount ApiObject
+     *
+     * @example
+     * ```typescript
+     * gcpResources.addWorkloadIdentityServiceAccount({
+     *   name: 'workload-identity-sa',
+     *   googleServiceAccount: 'my-gsa@my-project.iam.gserviceaccount.com',
+     *   namespace: 'default'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addWorkloadIdentityServiceAccount(spec: GCPWorkloadIdentityServiceAccountSpec): ApiObject;
+}
+export interface GCPPersistentDiskStorageClassSpec {
+    name: string;
+    type?: 'pd-standard' | 'pd-ssd' | 'pd-balanced';
+    replicationType?: 'none' | 'regional-pd';
+    fsType?: string;
+    reclaimPolicy?: 'Delete' | 'Retain';
+    allowVolumeExpansion?: boolean;
+    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface GCPFilestoreStorageClassSpec {
+    name: string;
+    tier?: 'standard' | 'premium' | 'basic-hdd' | 'basic-ssd';
+    network?: string;
+    location?: string;
+    reclaimPolicy?: 'Delete' | 'Retain';
+    allowVolumeExpansion?: boolean;
+    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface GCPGCEIngressSpec {
+    name: string;
+    host: string;
+    serviceName: string;
+    servicePort: number;
+    path?: string;
+    staticIPName?: string;
+    managedCertificate?: string;
+    sslRedirect?: boolean;
+    backendConfig?: Record<string, unknown>;
+    tls?: Array<{
+        hosts: string[];
+        secretName: string;
+    }>;
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface GCPWorkloadIdentityServiceAccountSpec {
+    name: string;
+    googleServiceAccount: string;
+    namespace?: string;
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+//# sourceMappingURL=gcpResources.d.ts.map

package/dist/lib/resources/cloud/gcp/gcpResources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcpResources.d.ts","sourceRoot":"","sources":["../../../../../src/lib/resources/cloud/gcp/gcpResources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,oBAAoB;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAuB;IAClE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAA0B;IAExE;;;;;;;;;;;;;;;;OAgBG;IACH,6BAA6B,CAAC,IAAI,EAAE,iCAAiC,GAAG,SAAS;IAyBjF;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,CAAC,IAAI,EAAE,4BAA4B,GAAG,SAAS;IAyBvE;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS;IAqDjD;;;;;;;;;;;;;;;OAeG;IACH,iCAAiC,CAAC,IAAI,EAAE,qCAAqC,GAAG,SAAS;CAiB1F;AAGD,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,aAAa,GAAG,QAAQ,GAAG,aAAa,CAAC;IAChD,eAAe,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,iBAAiB,CAAC,EAAE,WAAW,GAAG,sBAAsB,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,iBAAiB,CAAC,EAAE,WAAW,GAAG,sBAAsB,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,GAAG,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,qCAAqC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC"}

package/dist/lib/resources/cloud/gcp/gcpResources.js

@@ -0,0 +1,162 @@
+import { BaseResourceProvider } from '../../baseResourceProvider.js';
+/**
+ * GCP-specific Kubernetes resources provider
+ * Handles GCP integrations like Persistent Disk, Filestore, GCE Ingress, Workload Identity, and other GCP services
+ *
+ * @since 2.4.0
+ */
+export class GCPResources extends BaseResourceProvider {
+    /**
+     * Creates a GCP Persistent Disk StorageClass
+     * @param spec - GCP PD StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * gcpResources.addPersistentDiskStorageClass({
+     *   name: 'fast-ssd',
+     *   type: 'pd-ssd',
+     *   replicationType: 'regional-pd',
+     *   allowVolumeExpansion: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addPersistentDiskStorageClass(spec) {
+        const parameters = {
+            type: spec.type ?? 'pd-standard',
+            ...(spec.replicationType ? { 'replication-type': spec.replicationType } : {}),
+            ...(spec.fsType ? { fstype: spec.fsType } : {}),
+        };
+        const storageClassSpec = {
+            provisioner: 'pd.csi.storage.gke.io',
+            parameters,
+            reclaimPolicy: spec.reclaimPolicy ?? 'Delete',
+            allowVolumeExpansion: spec.allowVolumeExpansion ?? true,
+            volumeBindingMode: spec.volumeBindingMode ?? 'WaitForFirstConsumer',
+        };
+        return this.createApiObject(spec.name, GCPResources.STORAGE_API_VERSION, 'StorageClass', storageClassSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates a GCP Filestore StorageClass
+     * @param spec - GCP Filestore StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * gcpResources.addFilestoreStorageClass({
+     *   name: 'filestore-premium',
+     *   tier: 'premium',
+     *   network: 'default',
+     *   allowVolumeExpansion: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addFilestoreStorageClass(spec) {
+        const parameters = {
+            tier: spec.tier ?? 'standard',
+            network: spec.network ?? 'default',
+            ...(spec.location ? { location: spec.location } : {}),
+        };
+        const storageClassSpec = {
+            provisioner: 'filestore.csi.storage.gke.io',
+            parameters,
+            reclaimPolicy: spec.reclaimPolicy ?? 'Delete',
+            allowVolumeExpansion: spec.allowVolumeExpansion ?? true,
+            volumeBindingMode: spec.volumeBindingMode ?? 'Immediate',
+        };
+        return this.createApiObject(spec.name, GCPResources.STORAGE_API_VERSION, 'StorageClass', storageClassSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates a GCE Ingress with Google Cloud Load Balancer
+     * @param spec - GCE Ingress specification
+     * @returns Created Ingress ApiObject
+     *
+     * @example
+     * ```typescript
+     * gcpResources.addGCEIngress({
+     *   name: 'gce-ingress',
+     *   host: 'myapp.example.com',
+     *   serviceName: 'my-service',
+     *   servicePort: 80,
+     *   staticIPName: 'my-static-ip',
+     *   managedCertificate: 'my-ssl-cert'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addGCEIngress(spec) {
+        const annotations = {
+            'kubernetes.io/ingress.class': 'gce',
+            ...(spec.staticIPName
+                ? { 'kubernetes.io/ingress.global-static-ip-name': spec.staticIPName }
+                : {}),
+            ...(spec.managedCertificate
+                ? { 'networking.gke.io/managed-certificates': spec.managedCertificate }
+                : {}),
+            ...(spec.sslRedirect !== undefined
+                ? { 'ingress.gcp.kubernetes.io/force-ssl-redirect': String(spec.sslRedirect) }
+                : {}),
+            ...(spec.backendConfig
+                ? { 'cloud.google.com/backend-config': JSON.stringify(spec.backendConfig) }
+                : {}),
+            ...(spec.annotations || {}),
+        };
+        const rules = [
+            {
+                host: spec.host,
+                http: {
+                    paths: [
+                        {
+                            path: spec.path ?? '/*',
+                            pathType: 'ImplementationSpecific',
+                            backend: {
+                                service: {
+                                    name: spec.serviceName,
+                                    port: { number: spec.servicePort },
+                                },
+                            },
+                        },
+                    ],
+                },
+            },
+        ];
+        const ingressSpec = {
+            rules,
+            ...(spec.tls ? { tls: spec.tls } : {}),
+        };
+        return this.createApiObject(spec.name, GCPResources.NETWORKING_API_VERSION, 'Ingress', ingressSpec, spec.labels, annotations);
+    }
+    /**
+     * Creates a ServiceAccount with Workload Identity annotations
+     * @param spec - Workload Identity ServiceAccount specification
+     * @returns Created ServiceAccount ApiObject
+     *
+     * @example
+     * ```typescript
+     * gcpResources.addWorkloadIdentityServiceAccount({
+     *   name: 'workload-identity-sa',
+     *   googleServiceAccount: 'my-gsa@my-project.iam.gserviceaccount.com',
+     *   namespace: 'default'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addWorkloadIdentityServiceAccount(spec) {
+        const annotations = {
+            'iam.gke.io/gcp-service-account': spec.googleServiceAccount,
+            ...(spec.annotations || {}),
+        };
+        const serviceAccountSpec = {};
+        return this.createApiObject(spec.name, GCPResources.CORE_API_VERSION, 'ServiceAccount', serviceAccountSpec, spec.labels, annotations);
+    }
+}
+GCPResources.STORAGE_API_VERSION = 'storage.k8s.io/v1';
+GCPResources.CORE_API_VERSION = 'v1';
+GCPResources.NETWORKING_API_VERSION = 'networking.k8s.io/v1';
+//# sourceMappingURL=gcpResources.js.map

package/dist/lib/resources/cloud/gcp/gcpResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcpResources.js","sourceRoot":"","sources":["../../../../../src/lib/resources/cloud/gcp/gcpResources.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;GAKG;AACH,MAAM,OAAO,YAAa,SAAQ,oBAAoB;IAKpD;;;;;;;;;;;;;;;;OAgBG;IACH,6BAA6B,CAAC,IAAuC;QACnE,MAAM,UAAU,GAA2B;YACzC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,aAAa;YAChC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,WAAW,EAAE,uBAAuB;YACpC,UAAU;YACV,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ;YAC7C,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;YACvD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,sBAAsB;SACpE,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,YAAY,CAAC,mBAAmB,EAChC,cAAc,EACd,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,CAAC,IAAkC;QACzD,MAAM,UAAU,GAA2B;YACzC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,UAAU;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS;YAClC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,WAAW,EAAE,8BAA8B;YAC3C,UAAU;YACV,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ;YAC7C,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;YACvD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,WAAW;SACzD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,YAAY,CAAC,mBAAmB,EAChC,cAAc,EACd,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,IAAuB;QACnC,MAAM,WAAW,GAA2B;YAC1C,6BAA6B,EAAE,KAAK;YACpC,GAAG,CAAC,IAAI,CAAC,YAAY;gBACnB,CAAC,CAAC,EAAE,6CAA6C,EAAE,IAAI,CAAC,YAAY,EAAE;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,kBAAkB;gBACzB,CAAC,CAAC,EAAE,wCAAwC,EAAE,IAAI,CAAC,kBAAkB,EAAE;gBACvE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE,8CAA8C,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;gBAC9E,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,aAAa;gBACpB,CAAC,CAAC,EAAE,iCAAiC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;gBAC3E,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;SAC5B,CAAC;QAEF,MAAM,KAAK,GAAG;YACZ;gBACE,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE;oBACJ,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;4BACvB,QAAQ,EAAE,wBAAwB;4BAClC,OAAO,EAAE;gCACP,OAAO,EAAE;oCACP,IAAI,EAAE,IAAI,CAAC,WAAW;oCACtB,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE;iCACnC;6BACF;yBACF;qBACF;iBACF;aACF;SACF,CAAC;QAEF,MAAM,WAAW,GAAG;YAClB,KAAK;YACL,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,YAAY,CAAC,sBAAsB,EACnC,SAAS,EACT,WAAW,EACX,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,iCAAiC,CAAC,IAA2C;QAC3E,MAAM,WAAW,GAA2B;YAC1C,gCAAgC,EAAE,IAAI,CAAC,oBAAoB;YAC3D,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;SAC5B,CAAC;QAEF,MAAM,kBAAkB,GAAG,EAAE,CAAC;QAE9B,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,YAAY,CAAC,gBAAgB,EAC7B,gBAAgB,EAChB,kBAAkB,EAClB,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;IACJ,CAAC;;AAhMuB,gCAAmB,GAAG,mBAAmB,CAAC;AAC1C,6BAAgB,GAAG,IAAI,CAAC;AACxB,mCAAsB,GAAG,sBAAsB,CAAC"}