timonel 2.8.0-beta.4 → 2.8.0

package/dist/lib/resources/network/networkResources.js

@@ -1,310 +0,0 @@
-/**
- * @fileoverview Network resources for Kubernetes networking
- * @since 2.7.0
- */
-import { BaseResourceProvider } from '../baseResourceProvider.js';
-/**
- * Network resources provider for NetworkPolicy and Ingress
- * @extends BaseResourceProvider
- * @since 2.7.0
- */
-export class NetworkResources extends BaseResourceProvider {
-    /**
-     * Creates a NetworkPolicy resource
-     * @param spec - NetworkPolicy specification
-     * @returns Created NetworkPolicy ApiObject
-     * @since 2.7.0
-     */
-    addNetworkPolicy(spec) {
-        const policySpec = {
-            podSelector: spec.podSelector,
-        };
-        if (spec.policyTypes) {
-            policySpec['policyTypes'] = spec.policyTypes;
-        }
-        if (spec.ingress) {
-            policySpec['ingress'] = spec.ingress;
-        }
-        if (spec.egress) {
-            policySpec['egress'] = spec.egress;
-        }
-        return this.createApiObject(spec.name, NetworkResources.NETWORKING_API_VERSION, 'NetworkPolicy', policySpec, spec.labels, spec.annotations);
-    }
-    /**
-     * Creates a deny-all NetworkPolicy that blocks all ingress and egress traffic
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     * @since 2.7.0
-     */
-    addDenyAllNetworkPolicy(name, podSelector = {}, labels, annotations) {
-        return this.addNetworkPolicy({
-            name,
-            podSelector,
-            policyTypes: ['Ingress', 'Egress'],
-            ingress: [],
-            egress: [],
-            ...(labels && { labels }),
-            ...(annotations && { annotations }),
-        });
-    }
-    /**
-     * Creates a NetworkPolicy that allows traffic from specific pods
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param fromPodSelector - Pod selector for allowed source pods
-     * @param ports - Optional ports to allow
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     * @since 2.7.0
-     */
-    addAllowFromPodsNetworkPolicy(name, podSelector, fromPodSelector, ports, labels, annotations) {
-        const ingressRule = {};
-        if (fromPodSelector) {
-            ingressRule.podSelector = fromPodSelector;
-        }
-        if (ports) {
-            ingressRule.ports = ports;
-        }
-        return this.addNetworkPolicy({
-            name,
-            podSelector,
-            policyTypes: ['Ingress'],
-            ingress: [ingressRule],
-            ...(labels && { labels }),
-            ...(annotations && { annotations }),
-        });
-    }
-    /**
-     * Creates a NetworkPolicy that allows traffic from specific namespaces
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param fromNamespaceSelector - Namespace selector for allowed source namespaces
-     * @param ports - Optional ports to allow
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     * @since 2.7.0
-     */
-    addAllowFromNamespaceNetworkPolicy(name, podSelector, fromNamespaceSelector, ports, labels, annotations) {
-        const ingressRule = {};
-        if (fromNamespaceSelector) {
-            ingressRule.namespaceSelector = fromNamespaceSelector;
-        }
-        if (ports) {
-            ingressRule.ports = ports;
-        }
-        return this.addNetworkPolicy({
-            name,
-            podSelector,
-            policyTypes: ['Ingress'],
-            ingress: [ingressRule],
-            ...(labels && { labels }),
-            ...(annotations && { annotations }),
-        });
-    }
-    /**
-     * Validates TLS configuration for security compliance
-     * @param spec - Ingress specification to validate
-     * @throws Error if TLS validation fails
-     * @since 2.8.0
-     */
-    validateIngressSecurity(spec) {
-        const isProductionEnvironment = spec.environment === 'production';
-        const tlsRequired = spec.requireTLS || isProductionEnvironment;
-        // Check if TLS is required but not configured
-        if (tlsRequired && (!spec.tls || spec.tls.length === 0)) {
-            throw new Error(NetworkResources.TLS_REQUIRED_ERROR_MESSAGE);
-        }
-        // Validate TLS configuration if present
-        if (spec.tls && spec.tls.length > 0) {
-            spec.tls.forEach((tlsConfig, index) => {
-                if (!tlsConfig.secretName) {
-                    throw new Error(`TLS configuration at index ${index} must specify a secretName. ` +
-                        'The secret should contain "tls.crt" and "tls.key" data.');
-                }
-                // Validate secret name format (RFC 1123 DNS subdomain)
-                // This regex is safe as it only matches alphanumeric characters and hyphens
-                // eslint-disable-next-line security/detect-unsafe-regex
-                const secretNameRegex = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
-                if (!secretNameRegex.test(tlsConfig.secretName)) {
-                    throw new Error(`Invalid TLS secret name "${tlsConfig.secretName}" at index ${index}. ` +
-                        'Secret names must be valid RFC 1123 DNS subdomains (lowercase alphanumeric and hyphens).');
-                }
-                // Validate hosts if specified
-                if (tlsConfig.hosts && tlsConfig.hosts.length > 0) {
-                    tlsConfig.hosts.forEach((host, hostIndex) => {
-                        if (!this.isValidHostname(host)) {
-                            throw new Error(`Invalid hostname "${host}" in TLS configuration at index ${index}, host ${hostIndex}. ` +
-                                'Hostnames must be valid DNS names or wildcard patterns.');
-                        }
-                    });
-                }
-            });
-        }
-        // Validate that TLS hosts match Ingress rule hosts
-        if (spec.tls && spec.rules) {
-            const tlsHosts = new Set(spec.tls.flatMap((tls) => tls.hosts || []));
-            const ruleHosts = spec.rules
-                .map((rule) => rule.host)
-                .filter((host) => Boolean(host));
-            for (const ruleHost of ruleHosts) {
-                if (!tlsHosts.has(ruleHost)) {
-                    console.warn(`Warning: Host "${ruleHost}" in Ingress rules is not covered by TLS configuration. ` +
-                        'Consider adding it to the TLS hosts for secure communication.');
-                }
-            }
-        }
-    }
-    /**
-     * Validates hostname format (supports wildcards) with ReDoS protection
-     * @param hostname - Hostname to validate
-     * @returns True if hostname is valid
-     * @since 2.8.0
-     */
-    isValidHostname(hostname) {
-        if (!hostname || hostname.length === 0 || hostname.length > 253) {
-            return false;
-        }
-        // Split hostname into parts and validate each part
-        const parts = hostname.split('.');
-        if (parts.length < 2)
-            return false;
-        // Handle wildcard
-        if (hostname.startsWith('*.')) {
-            parts.shift(); // Remove wildcard part
-            if (parts.length < 2)
-                return false; // Must have at least two parts after wildcard
-        }
-        // Validate each part
-        return parts.every((part) => {
-            if (part.length === 0 || part.length > 63)
-                return false;
-            if (part.startsWith('-') || part.endsWith('-'))
-                return false;
-            return /^[a-z0-9-]+$/i.test(part);
-        });
-    }
-    /**
-     * Applies security defaults to Ingress annotations
-     * @param spec - Ingress specification
-     * @returns Enhanced annotations with security defaults
-     * @since 2.8.0
-     */
-    applySecurityDefaults(spec) {
-        const annotations = { ...spec.annotations };
-        // Apply SSL redirect if TLS is configured or force SSL redirect is enabled
-        if ((spec.tls && spec.tls.length > 0) || spec.forceSSLRedirect) {
-            // NGINX Ingress Controller annotations
-            annotations['nginx.ingress.kubernetes.io/ssl-redirect'] = 'true';
-            annotations['nginx.ingress.kubernetes.io/force-ssl-redirect'] = 'true';
-            // Traefik annotations
-            annotations['traefik.ingress.kubernetes.io/redirect-entry-point'] = 'https';
-            // HAProxy annotations
-            annotations['haproxy.org/ssl-redirect'] = 'true';
-        }
-        // Add security headers for production environments
-        if (spec.environment === 'production' || spec.requireTLS) {
-            // NGINX security headers with CSP
-            annotations['nginx.ingress.kubernetes.io/configuration-snippet'] = `
-        more_set_headers "X-Frame-Options: DENY";
-        more_set_headers "X-Content-Type-Options: nosniff";
-        more_set_headers "X-XSS-Protection: 1; mode=block";
-        more_set_headers "Referrer-Policy: strict-origin-when-cross-origin";
-        more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';";
-      `.trim();
-        }
-        return annotations;
-    }
-    /**
-     * Creates a secure Ingress with TLS validation and environment-aware defaults
-     * @param spec - Enhanced Ingress specification
-     * @returns Created Ingress ApiObject
-     * @example
-     * ```typescript
-     * // Production Ingress with mandatory TLS
-     * networkResources.addSecureIngress({
-     *   name: 'web-ingress',
-     *   environment: 'production',
-     *   tls: [{
-     *     hosts: ['example.com'],
-     *     secretName: 'example-tls'
-     *   }],
-     *   rules: [{
-     *     host: 'example.com',
-     *     http: {
-     *       paths: [{
-     *         path: '/',
-     *         pathType: 'Prefix',
-     *         backend: {
-     *           service: { name: 'web-service', port: { number: 80 } }
-     *         }
-     *       }]
-     *     }
-     *   }]
-     * });
-     * ```
-     * @since 2.8.0
-     */
-    addSecureIngress(spec) {
-        // Validate TLS configuration and security requirements
-        this.validateIngressSecurity(spec);
-        // Apply security defaults to annotations
-        const enhancedAnnotations = this.applySecurityDefaults(spec);
-        // Create the Ingress with enhanced security
-        const ingressSpec = {};
-        if (spec.ingressClassName) {
-            ingressSpec['ingressClassName'] = spec.ingressClassName;
-        }
-        if (spec.tls) {
-            ingressSpec['tls'] = spec.tls;
-        }
-        if (spec.rules) {
-            ingressSpec['rules'] = spec.rules;
-        }
-        return this.createApiObject(spec.name, NetworkResources.NETWORKING_API_VERSION, 'Ingress', ingressSpec, spec.labels, enhancedAnnotations);
-    }
-    /**
-     * Creates an Ingress resource with optional TLS validation
-     * @param spec - Ingress specification
-     * @returns Created Ingress ApiObject
-     * @deprecated Use addSecureIngress for enhanced security validation
-     * @since 2.7.0
-     */
-    addIngress(spec) {
-        // Apply basic validation if environment is specified
-        if (spec.environment || spec.requireTLS) {
-            this.validateIngressSecurity(spec);
-            const enhancedAnnotations = this.applySecurityDefaults(spec);
-            const ingressSpec = {};
-            if (spec.ingressClassName) {
-                ingressSpec['ingressClassName'] = spec.ingressClassName;
-            }
-            if (spec.tls) {
-                ingressSpec['tls'] = spec.tls;
-            }
-            if (spec.rules) {
-                ingressSpec['rules'] = spec.rules;
-            }
-            return this.createApiObject(spec.name, NetworkResources.NETWORKING_API_VERSION, 'Ingress', ingressSpec, spec.labels, enhancedAnnotations);
-        }
-        // Legacy behavior for backward compatibility
-        const ingressSpec = {};
-        if (spec.ingressClassName) {
-            ingressSpec['ingressClassName'] = spec.ingressClassName;
-        }
-        if (spec.tls) {
-            ingressSpec['tls'] = spec.tls;
-        }
-        if (spec.rules) {
-            ingressSpec['rules'] = spec.rules;
-        }
-        return this.createApiObject(spec.name, NetworkResources.NETWORKING_API_VERSION, 'Ingress', ingressSpec, spec.labels, spec.annotations);
-    }
-}
-NetworkResources.TLS_REQUIRED_ERROR_MESSAGE = 'TLS configuration is required for production Ingress resources. Please configure the "tls" field with valid certificate references.';
-NetworkResources.NETWORKING_API_VERSION = 'networking.k8s.io/v1';
-//# sourceMappingURL=networkResources.js.map

package/dist/lib/resources/network/networkResources.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"networkResources.js","sourceRoot":"","sources":["../../../../src/lib/resources/network/networkResources.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAuHlE;;;;GAIG;AACH,MAAM,OAAO,gBAAiB,SAAQ,oBAAoB;IAKxD;;;;;OAKG;IACH,gBAAgB,CAAC,IAAuB;QACtC,MAAM,UAAU,GAA4B;YAC1C,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC;QAEF,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,UAAU,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,UAAU,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACrC,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,gBAAgB,CAAC,sBAAsB,EACvC,eAAe,EACf,UAAU,EACV,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,uBAAuB,CACrB,IAAY,EACZ,cAAgD,EAAE,EAClD,MAA+B,EAC/B,WAAoC;QAEpC,OAAO,IAAI,CAAC,gBAAgB,CAAC;YAC3B,IAAI;YACJ,WAAW;YACX,WAAW,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;YAClC,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;YACzB,GAAG,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;OAUG;IACH,6BAA6B,CAC3B,IAAY,EACZ,WAA6C,EAC7C,eAAiD,EACjD,KAAkC,EAClC,MAA+B,EAC/B,WAAoC;QAEpC,MAAM,WAAW,GAAsB,EAAE,CAAC;QAE1C,IAAI,eAAe,EAAE,CAAC;YACpB,WAAW,CAAC,WAAW,GAAG,eAAe,CAAC;QAC5C,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,WAAW,CAAC,KAAK,GAAG,KAAK,CAAC;QAC5B,CAAC;QAED,OAAO,IAAI,CAAC,gBAAgB,CAAC;YAC3B,IAAI;YACJ,WAAW;YACX,WAAW,EAAE,CAAC,SAAS,CAAC;YACxB,OAAO,EAAE,CAAC,WAAW,CAAC;YACtB,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;YACzB,GAAG,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;OAUG;IACH,kCAAkC,CAChC,IAAY,EACZ,WAA6C,EAC7C,qBAA6D,EAC7D,KAAkC,EAClC,MAA+B,EAC/B,WAAoC;QAEpC,MAAM,WAAW,GAAsB,EAAE,CAAC;QAE1C,IAAI,qBAAqB,EAAE,CAAC;YAC1B,WAAW,CAAC,iBAAiB,GAAG,qBAAqB,CAAC;QACxD,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,WAAW,CAAC,KAAK,GAAG,KAAK,CAAC;QAC5B,CAAC;QAED,OAAO,IAAI,CAAC,gBAAgB,CAAC;YAC3B,IAAI;YACJ,WAAW;YACX,WAAW,EAAE,CAAC,SAAS,CAAC;YACxB,OAAO,EAAE,CAAC,WAAW,CAAC;YACtB,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;YACzB,GAAG,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,uBAAuB,CAAC,IAAiB;QAC/C,MAAM,uBAAuB,GAAG,IAAI,CAAC,WAAW,KAAK,YAAY,CAAC;QAClE,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,IAAI,uBAAuB,CAAC;QAE/D,8CAA8C;QAC9C,IAAI,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;QAC/D,CAAC;QAED,wCAAwC;QACxC,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;gBACpC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,8BAA8B;wBAC/D,yDAAyD,CAC5D,CAAC;gBACJ,CAAC;gBAED,uDAAuD;gBACvD,4EAA4E;gBAC5E,wDAAwD;gBACxD,MAAM,eAAe,GAAG,mCAAmC,CAAC;gBAC5D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,KAAK,CACb,4BAA4B,SAAS,CAAC,UAAU,cAAc,KAAK,IAAI;wBACrE,0FAA0F,CAC7F,CAAC;gBACJ,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAClD,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;wBAC1C,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;4BAChC,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,mCAAmC,KAAK,UAAU,SAAS,IAAI;gCACtF,yDAAyD,CAC5D,CAAC;wBACJ,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,mDAAmD;QACnD,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;YACrE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK;iBACzB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;iBACxB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAEnD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5B,OAAO,CAAC,IAAI,CACV,kBAAkB,QAAQ,0DAA0D;wBAClF,+DAA+D,CAClE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,QAAgB;QACtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,mDAAmD;QACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAEnC,kBAAkB;QAClB,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,uBAAuB;YACtC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,8CAA8C;QACpF,CAAC;QAED,qBAAqB;QACrB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,KAAK,CAAC;YACxD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7D,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,IAAiB;QAC7C,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAE5C,2EAA2E;QAC3E,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC/D,uCAAuC;YACvC,WAAW,CAAC,0CAA0C,CAAC,GAAG,MAAM,CAAC;YACjE,WAAW,CAAC,gDAAgD,CAAC,GAAG,MAAM,CAAC;YAEvE,sBAAsB;YACtB,WAAW,CAAC,oDAAoD,CAAC,GAAG,OAAO,CAAC;YAE5E,sBAAsB;YACtB,WAAW,CAAC,0BAA0B,CAAC,GAAG,MAAM,CAAC;QACnD,CAAC;QAED,mDAAmD;QACnD,IAAI,IAAI,CAAC,WAAW,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzD,kCAAkC;YAClC,WAAW,CAAC,mDAAmD,CAAC,GAAG;;;;;;OAMlE,CAAC,IAAI,EAAE,CAAC;QACX,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,gBAAgB,CAAC,IAAiB;QAChC,uDAAuD;QACvD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAEnC,yCAAyC;QACzC,MAAM,mBAAmB,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAE7D,4CAA4C;QAC5C,MAAM,WAAW,GAA4B,EAAE,CAAC;QAEhD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,WAAW,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC1D,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;QAChC,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,gBAAgB,CAAC,sBAAsB,EACvC,SAAS,EACT,WAAW,EACX,IAAI,CAAC,MAAM,EACX,mBAAmB,CACpB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CAAC,IAAiB;QAC1B,qDAAqD;QACrD,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,mBAAmB,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAE7D,MAAM,WAAW,GAA4B,EAAE,CAAC;YAEhD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC1B,WAAW,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC;YAC1D,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;YAChC,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YACpC,CAAC;YAED,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,gBAAgB,CAAC,sBAAsB,EACvC,SAAS,EACT,WAAW,EACX,IAAI,CAAC,MAAM,EACX,mBAAmB,CACpB,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,MAAM,WAAW,GAA4B,EAAE,CAAC;QAEhD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,WAAW,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC1D,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;QAChC,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,gBAAgB,CAAC,sBAAsB,EACvC,SAAS,EACT,WAAW,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;;AA7YuB,2CAA0B,GAChD,qIAAqI,CAAC;AAChH,uCAAsB,GAAG,sBAAsB,CAAC"}

package/dist/lib/resources/validation/validationResources.d.ts

@@ -1,26 +0,0 @@
-/**
- * @fileoverview Validation and security resources for Kubernetes
- * @since 2.3.0
- */
-import { BaseResourceProvider } from '../baseResourceProvider.js';
-/**
- * Validation and security resources provider for NetworkPolicies and security policies
- *
- * @extends BaseResourceProvider
- * @since 2.3.0
- */
-export declare class ValidationResources extends BaseResourceProvider {
-    /**
-     * Add NetworkPolicy for network segmentation
-     */
-    addNetworkPolicy(_spec: unknown): void;
-    /**
-     * Add PodSecurityPolicy (deprecated but still used)
-     */
-    addPodSecurityPolicy(_spec: unknown): void;
-    /**
-     * Add SecurityContext validation
-     */
-    addSecurityContextConstraints(_spec: unknown): void;
-}
-//# sourceMappingURL=validationResources.d.ts.map

package/dist/lib/resources/validation/validationResources.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"validationResources.d.ts","sourceRoot":"","sources":["../../../../src/lib/resources/validation/validationResources.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,oBAAoB;IAC3D;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,OAAO;IAK/B;;OAEG;IACH,oBAAoB,CAAC,KAAK,EAAE,OAAO;IAInC;;OAEG;IACH,6BAA6B,CAAC,KAAK,EAAE,OAAO;CAG7C"}

package/dist/lib/resources/validation/validationResources.js

@@ -1,33 +0,0 @@
-/**
- * @fileoverview Validation and security resources for Kubernetes
- * @since 2.3.0
- */
-import { BaseResourceProvider } from '../baseResourceProvider.js';
-/**
- * Validation and security resources provider for NetworkPolicies and security policies
- *
- * @extends BaseResourceProvider
- * @since 2.3.0
- */
-export class ValidationResources extends BaseResourceProvider {
-    /**
-     * Add NetworkPolicy for network segmentation
-     */
-    addNetworkPolicy(_spec) {
-        // Implementation moved from CoreResources
-        // TODO: Move NetworkPolicy implementation here
-    }
-    /**
-     * Add PodSecurityPolicy (deprecated but still used)
-     */
-    addPodSecurityPolicy(_spec) {
-        // TODO: Implement PodSecurityPolicy
-    }
-    /**
-     * Add SecurityContext validation
-     */
-    addSecurityContextConstraints(_spec) {
-        // TODO: Implement SecurityContextConstraints for OpenShift
-    }
-}
-//# sourceMappingURL=validationResources.js.map

package/dist/lib/resources/validation/validationResources.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"validationResources.js","sourceRoot":"","sources":["../../../../src/lib/resources/validation/validationResources.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE;;;;;GAKG;AACH,MAAM,OAAO,mBAAoB,SAAQ,oBAAoB;IAC3D;;OAEG;IACH,gBAAgB,CAAC,KAAc;QAC7B,0CAA0C;QAC1C,+CAA+C;IACjD,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,KAAc;QACjC,oCAAoC;IACtC,CAAC;IAED;;OAEG;IACH,6BAA6B,CAAC,KAAc;QAC1C,2DAA2D;IAC7D,CAAC;CACF"}

package/dist/lib/utils/podTemplates.d.ts

@@ -1,192 +0,0 @@
-/**
- * @fileoverview Pod template utilities for generating reusable Kubernetes pod specifications
- * @since 2.5.0
- */
-/**
- * Container specification for pod templates
- * @interface ContainerSpec
- * @since 2.5.0
- */
-export interface ContainerSpec {
-    /** Container name */
-    name: string;
-    /** Container image */
-    image: string;
-    /** Container port */
-    port?: number;
-    /** Environment variables */
-    env?: Array<{
-        name: string;
-        value?: string;
-        valueFrom?: unknown;
-    }>;
-    /** Resource requirements */
-    resources?: {
-        requests?: {
-            cpu?: string;
-            memory?: string;
-        };
-        limits?: {
-            cpu?: string;
-            memory?: string;
-        };
-    };
-    /** Volume mounts */
-    volumeMounts?: Array<{
-        name: string;
-        mountPath: string;
-        readOnly?: boolean;
-    }>;
-    /** Security context */
-    securityContext?: unknown;
-    /** Liveness probe */
-    livenessProbe?: unknown;
-    /** Readiness probe */
-    readinessProbe?: unknown;
-    /** Startup probe */
-    startupProbe?: unknown;
-    /** Command to run */
-    command?: string[];
-    /** Arguments to command */
-    args?: string[];
-}
-/**
- * Pod template specification
- * @interface PodTemplateSpec
- * @since 2.5.0
- */
-export interface PodTemplateSpec {
-    /** Pod name */
-    name: string;
-    /** Container specifications */
-    containers: ContainerSpec[];
-    /** Init containers */
-    initContainers?: ContainerSpec[];
-    /** Volumes */
-    volumes?: Array<unknown>;
-    /** Service account name */
-    serviceAccountName?: string;
-    /** Restart policy */
-    restartPolicy?: 'Always' | 'OnFailure' | 'Never';
-    /** Node selector */
-    nodeSelector?: Record<string, string>;
-    /** Tolerations */
-    tolerations?: Array<unknown>;
-    /** Affinity */
-    affinity?: unknown;
-    /** Security context */
-    securityContext?: unknown;
-    /** DNS policy */
-    dnsPolicy?: string;
-    /** Host network */
-    hostNetwork?: boolean;
-    /** Priority class name */
-    priorityClassName?: string;
-    /** Labels */
-    labels?: Record<string, string>;
-    /** Annotations */
-    annotations?: Record<string, string>;
-}
-/**
- * Security profile for pod templates
- * @since 2.5.0
- */
-export type SecurityProfile = 'baseline' | 'restricted' | 'privileged';
-/**
- * Workload type for pod templates
- * @since 2.5.0
- */
-export type WorkloadType = 'web' | 'api' | 'worker' | 'database' | 'cache' | 'batch';
-/**
- * Creates a secure pod template with best practices
- * @param spec - Pod template specification
- * @param profile - Security profile to apply
- * @returns Pod template object
- *
- * @example
- * ```typescript
- * const template = createSecurePodTemplate({
- *   name: 'web-app',
- *   containers: [{
- *     name: 'app',
- *     image: 'nginx:1.27',
- *     port: 80
- *   }]
- * }, 'restricted');
- * ```
- *
- * @since 2.5.0
- */
-export declare function createSecurePodTemplate(spec: PodTemplateSpec, profile?: SecurityProfile): Record<string, unknown>;
-/**
- * Creates a workload-optimized pod template
- * @param spec - Pod template specification
- * @param workloadType - Type of workload
- * @returns Pod template object
- *
- * @example
- * ```typescript
- * const template = createWorkloadPodTemplate({
- *   name: 'api-server',
- *   containers: [{
- *     name: 'api',
- *     image: 'myapi:latest',
- *     port: 8080
- *   }]
- * }, 'api');
- * ```
- *
- * @since 2.5.0
- */
-export declare function createWorkloadPodTemplate(spec: PodTemplateSpec, workloadType: WorkloadType): Record<string, unknown>;
-/**
- * Creates a multi-container pod template with sidecar pattern
- * @param mainContainer - Main application container
- * @param sidecars - Sidecar containers
- * @param options - Additional pod options
- * @returns Pod template object
- *
- * @example
- * ```typescript
- * const template = createSidecarPodTemplate(
- *   { name: 'app', image: 'myapp:latest', port: 8080 },
- *   [{ name: 'proxy', image: 'envoy:latest', port: 9901 }],
- *   { name: 'app-with-proxy' }
- * );
- * ```
- *
- * @since 2.5.0
- */
-export declare function createSidecarPodTemplate(mainContainer: ContainerSpec, sidecars: ContainerSpec[], options: Partial<PodTemplateSpec>): Record<string, unknown>;
-/**
- * Creates a pod template with health checks
- * @param spec - Pod template specification
- * @param healthConfig - Health check configuration
- * @returns Pod template object
- *
- * @example
- * ```typescript
- * const template = createHealthyPodTemplate({
- *   name: 'web-app',
- *   containers: [{
- *     name: 'app',
- *     image: 'nginx:1.27',
- *     port: 80
- *   }]
- * }, {
- *   httpPath: '/health',
- *   port: 80
- * });
- * ```
- *
- * @since 2.5.0
- */
-export declare function createHealthyPodTemplate(spec: PodTemplateSpec, healthConfig: {
-    httpPath?: string;
-    port?: number;
-    initialDelaySeconds?: number;
-    periodSeconds?: number;
-    timeoutSeconds?: number;
-    failureThreshold?: number;
-}): Record<string, unknown>;
-//# sourceMappingURL=podTemplates.d.ts.map

package/dist/lib/utils/podTemplates.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"podTemplates.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/podTemplates.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,GAAG,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACnE,4BAA4B;IAC5B,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7C,MAAM,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC5C,CAAC;IACF,oBAAoB;IACpB,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC9E,uBAAuB;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,qBAAqB;IACrB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sBAAsB;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oBAAoB;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,qBAAqB;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,eAAe;IACf,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,sBAAsB;IACtB,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,cAAc;IACd,OAAO,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,2BAA2B;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB;IACrB,aAAa,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;IACjD,oBAAoB;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,kBAAkB;IAClB,WAAW,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,eAAe;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uBAAuB;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0BAA0B;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa;IACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC;AAEvE;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;AAErF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,eAAe,EACrB,OAAO,GAAE,eAA4B,GACpC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA6DzB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,eAAe,EACrB,YAAY,EAAE,YAAY,GACzB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYzB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,aAAa,EAC5B,QAAQ,EAAE,aAAa,EAAE,EACzB,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAChC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQzB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,eAAe,EACrB,YAAY,EAAE;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACA,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQzB"}