timonel 2.8.0-beta.5 → 2.8.0

package/dist/src/lib/rutter.js

@@ -1,1295 +0,0 @@
-import { Chart, App, Testing } from 'cdk8s';
-import YAML from 'yaml';
-// Import resource providers
-import { CoreResources } from './resources/core/coreResources.js';
-import { StorageResources } from './resources/core/storageResources.js';
-import { AWSResources } from './resources/cloud/aws/awsResources.js';
-import { AzureResources } from './resources/cloud/azure/azureResources.js';
-import { GCPResources } from './resources/cloud/gcp/gcpResources.js';
-import { AutoscalingResources } from './resources/autoscaling/autoscalingResources.js';
-import { NetworkResources } from './resources/network/networkResources.js';
-import { KarpenterResources } from './resources/cloud/aws/karpenterResources.js';
-// Import HelmChartWriter for write functionality
-import { HelmChartWriter } from './helmChartWriter.js';
-import { include, helm } from './helm.js';
-import { generateHelpersTemplate } from './utils/helmHelpers.js';
-import { generateManifestName } from './utils/resourceNaming.js';
-/**
- * Rutter class with modular architecture
- * Provides a clean API while delegating to specialized resource providers
- * Maintains full backward compatibility with the original Rutter class
- *
- * @since 2.4.0
- */
-export class Rutter {
-    constructor(props) {
-        this.assets = [];
-        this.props = props;
-        this.meta = props.meta;
-        this.defaultValues = props.defaultValues ?? {};
-        this.envValues = props.envValues ?? {};
-        // Create CDK8s infrastructure
-        this.app = new App();
-        this.chart = new Chart(this.app, props.meta.name, {
-            ...props.chartProps,
-            ...(props.namespace ? { namespace: props.namespace } : {}),
-        });
-        // Initialize resource providers
-        this.coreResources = new CoreResources(this.chart);
-        this.storageResources = new StorageResources(this.chart);
-        this.awsResources = new AWSResources(this.chart);
-        this.azureResources = new AzureResources(this.chart);
-        this.gcpResources = new GCPResources(this.chart);
-        this.autoscalingResources = new AutoscalingResources(this.chart);
-        this.networkResources = new NetworkResources(this.chart);
-        this.karpenterResources = new KarpenterResources(this.chart);
-    }
-    // Core Kubernetes Resources
-    /**
-     * Creates a Deployment resource
-     * @param spec - Deployment specification
-     * @returns Created Deployment ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addDeployment({
-     *   name: 'web-app',
-     *   image: 'nginx:1.21',
-     *   replicas: 3,
-     *   containerPort: 80
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addDeployment(spec) {
-        return this.coreResources.addDeployment(spec);
-    }
-    /**
-     * Creates a DaemonSet resource
-     * @param spec - DaemonSet specification
-     * @returns Created DaemonSet ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addDaemonSet({
-     *   name: 'log-collector',
-     *   image: 'fluentd:v1.14',
-     *   containerPort: 24224,
-     *   hostNetwork: true
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addDaemonSet(spec) {
-        return this.coreResources.addDaemonSet(spec);
-    }
-    /**
-     * Creates a StatefulSet resource
-     * @param spec - StatefulSet specification
-     * @returns Created StatefulSet ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addStatefulSet({
-     *   name: 'database',
-     *   image: 'postgres:13',
-     *   replicas: 3,
-     *   serviceName: 'database-headless',
-     *   containerPort: 5432
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addStatefulSet(spec) {
-        return this.coreResources.addStatefulSet(spec);
-    }
-    /**
-     * Creates a Role resource for RBAC
-     * @param spec - Role specification
-     * @returns Created Role ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addRole({
-     *   name: 'pod-reader',
-     *   rules: [
-     *     {
-     *       apiGroups: [''],
-     *       resources: ['pods'],
-     *       verbs: ['get', 'list', 'watch']
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addRole(spec) {
-        return this.coreResources.addRole(spec);
-    }
-    /**
-     * Creates a ClusterRole resource for cluster-wide RBAC
-     * @param spec - ClusterRole specification
-     * @returns Created ClusterRole ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addClusterRole({
-     *   name: 'cluster-reader',
-     *   rules: [
-     *     {
-     *       apiGroups: [''],
-     *       resources: ['nodes', 'namespaces'],
-     *       verbs: ['get', 'list', 'watch']
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addClusterRole(spec) {
-        return this.coreResources.addClusterRole(spec);
-    }
-    /**
-     * Creates a RoleBinding resource for RBAC
-     * @param spec - RoleBinding specification
-     * @returns Created RoleBinding ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addRoleBinding({
-     *   name: 'pod-reader-binding',
-     *   roleRef: {
-     *     kind: 'Role',
-     *     name: 'pod-reader',
-     *     apiGroup: 'rbac.authorization.k8s.io'
-     *   },
-     *   subjects: [
-     *     {
-     *       kind: 'ServiceAccount',
-     *       name: 'my-service-account'
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addRoleBinding(spec) {
-        return this.coreResources.addRoleBinding(spec);
-    }
-    /**
-     * Creates a ClusterRoleBinding resource for cluster-wide RBAC
-     * @param spec - ClusterRoleBinding specification
-     * @returns Created ClusterRoleBinding ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addClusterRoleBinding({
-     *   name: 'cluster-reader-binding',
-     *   roleRef: {
-     *     kind: 'ClusterRole',
-     *     name: 'cluster-reader',
-     *     apiGroup: 'rbac.authorization.k8s.io'
-     *   },
-     *   subjects: [
-     *     {
-     *       kind: 'ServiceAccount',
-     *       name: 'monitoring-agent',
-     *       namespace: 'monitoring'
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addClusterRoleBinding(spec) {
-        return this.coreResources.addClusterRoleBinding(spec);
-    }
-    /**
-     * Creates a Job resource for batch workloads
-     * @param spec - Job specification
-     * @returns Created Job ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addJob({
-     *   name: 'data-processor',
-     *   image: 'busybox:1.35',
-     *   command: ['sh', '-c', 'echo "Processing..." && sleep 30'],
-     *   completions: 1
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addJob(spec) {
-        return this.coreResources.addJob(spec);
-    }
-    /**
-     * Creates a Service resource
-     * @param spec - Service specification
-     * @returns Created Service ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addService({
-     *   name: 'web-service',
-     *   port: 80,
-     *   targetPort: 8080,
-     *   type: 'ClusterIP'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addService(spec) {
-        return this.coreResources.addService(spec);
-    }
-    /**
-     * Creates a ConfigMap resource
-     * @param spec - ConfigMap specification
-     * @returns Created ConfigMap ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addConfigMap({
-     *   name: 'app-config',
-     *   data: {
-     *     'config.yaml': 'key: value',
-     *     'app.properties': 'debug=true'
-     *   }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addConfigMap(spec) {
-        return this.coreResources.addConfigMap(spec);
-    }
-    /**
-     * Creates a Secret resource
-     * @param spec - Secret specification
-     * @returns Created Secret ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addSecret({
-     *   name: 'app-secrets',
-     *   type: 'Opaque',
-     *   data: {
-     *     username: 'YWRtaW4=',
-     *     password: 'MWYyZDFlMmU2N2Rm'
-     *   }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addSecret(spec) {
-        return this.coreResources.addSecret(spec);
-    }
-    /**
-     * Creates a ServiceAccount resource
-     * @param spec - ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addServiceAccount({
-     *   name: 'app-service-account',
-     *   automountServiceAccountToken: false
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addServiceAccount(spec) {
-        return this.coreResources.addServiceAccount(spec);
-    }
-    // Storage Resources
-    /**
-     * Creates a PersistentVolume resource
-     * @param spec - PersistentVolume specification
-     * @returns Created PersistentVolume ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addPersistentVolume({
-     *   name: 'data-pv',
-     *   capacity: '10Gi',
-     *   accessModes: ['ReadWriteOnce'],
-     *   storageClassName: 'fast-ssd'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addPersistentVolume(spec) {
-        return this.storageResources.addPersistentVolume(spec);
-    }
-    /**
-     * Creates a PersistentVolumeClaim resource
-     * @param spec - PersistentVolumeClaim specification
-     * @returns Created PersistentVolumeClaim ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addPersistentVolumeClaim({
-     *   name: 'data-pvc',
-     *   size: '10Gi',
-     *   accessModes: ['ReadWriteOnce'],
-     *   storageClassName: 'fast-ssd'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addPersistentVolumeClaim(spec) {
-        return this.storageResources.addPersistentVolumeClaim(spec);
-    }
-    /**
-     * Creates a StorageClass resource
-     * @param spec - StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addStorageClass({
-     *   name: 'fast-ssd',
-     *   provisioner: 'kubernetes.io/aws-ebs',
-     *   parameters: {
-     *     type: 'gp3',
-     *     encrypted: 'true'
-     *   }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addStorageClass(spec) {
-        return this.storageResources.addStorageClass(spec);
-    }
-    // AWS Resources
-    /**
-     * Creates an AWS EBS StorageClass
-     * @param spec - EBS StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAWSEBSStorageClass({
-     *   name: 'fast-ebs',
-     *   volumeType: 'gp3',
-     *   encrypted: true,
-     *   allowVolumeExpansion: true
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addAWSEBSStorageClass(spec) {
-        return this.awsResources.addEBSStorageClass(spec);
-    }
-    /**
-     * Creates an AWS EFS StorageClass
-     * @param spec - EFS StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAWSEFSStorageClass({
-     *   name: 'efs-storage',
-     *   fileSystemId: 'fs-12345678',
-     *   directoryPerms: '0755'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addAWSEFSStorageClass(spec) {
-        return this.awsResources.addEFSStorageClass(spec);
-    }
-    /**
-     * Creates an AWS IRSA ServiceAccount
-     * @param spec - IRSA ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAWSIRSAServiceAccount({
-     *   name: 'aws-service-account',
-     *   roleArn: 'arn:aws:iam::123456789012:role/MyRole'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addAWSIRSAServiceAccount(spec) {
-        return this.awsResources.addIRSAServiceAccount(spec);
-    }
-    /**
-     * Creates an AWS ALB Ingress
-     * @param spec - ALB Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAWSALBIngress({
-     *   name: 'web-ingress',
-     *   rules: [{
-     *     paths: [{
-     *       path: '/',
-     *       pathType: 'Prefix',
-     *       backend: { service: { name: 'web-service', port: { number: 80 } } }
-     *     }]
-     *   }],
-     *   scheme: 'internet-facing'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addAWSALBIngress(spec) {
-        return this.awsResources.addALBIngress(spec);
-    }
-    // Azure Cloud Resources
-    /**
-     * Creates an Azure Disk StorageClass
-     * @param spec - Azure Disk StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureDiskStorageClass(spec) {
-        return this.azureResources.addAzureDiskStorageClass(spec);
-    }
-    /**
-     * Creates an Azure File StorageClass
-     * @param spec - Azure File StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureFileStorageClass(spec) {
-        return this.azureResources.addAzureFileStorageClass(spec);
-    }
-    /**
-     * Creates an Azure Application Gateway Ingress
-     * @param spec - AGIC Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureApplicationGatewayIngress(spec) {
-        return this.azureResources.addApplicationGatewayIngress(spec);
-    }
-    /**
-     * Creates an Azure Key Vault SecretProviderClass
-     * @param spec - Azure Key Vault SecretProviderClass specification
-     * @returns Created SecretProviderClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureKeyVaultSecretProviderClass(spec) {
-        return this.azureResources.addAzureKeyVaultSecretProviderClass(spec);
-    }
-    /**
-     * Creates an Azure Container Registry ServiceAccount
-     * @param spec - Azure ACR ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureACRServiceAccount(spec) {
-        return this.azureResources.addAzureACRServiceAccount(spec);
-    }
-    // GCP Cloud Resources
-    /**
-     * Creates a GCP Persistent Disk StorageClass
-     * @param spec - GCP PD StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPPersistentDiskStorageClass(spec) {
-        return this.gcpResources.addPersistentDiskStorageClass(spec);
-    }
-    /**
-     * Creates a GCP Filestore StorageClass
-     * @param spec - GCP Filestore StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPFilestoreStorageClass(spec) {
-        return this.gcpResources.addFilestoreStorageClass(spec);
-    }
-    /**
-     * Creates a GCE Ingress with Google Cloud Load Balancer
-     * @param spec - GCE Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPGCEIngress(spec) {
-        return this.gcpResources.addGCEIngress(spec);
-    }
-    /**
-     * Creates a ServiceAccount with Workload Identity annotations
-     * @param spec - Workload Identity ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPWorkloadIdentityServiceAccount(spec) {
-        return this.gcpResources.addWorkloadIdentityServiceAccount(spec);
-    }
-    /**
-     * Creates a ServiceAccount with GCP Artifact Registry access
-     * @param spec - Artifact Registry ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addGCPArtifactRegistryServiceAccount({
-     *   name: 'artifact-registry-sa',
-     *   googleServiceAccount: 'my-gsa@project.iam.gserviceaccount.com'
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addGCPArtifactRegistryServiceAccount(spec) {
-        return this.gcpResources.addArtifactRegistryServiceAccount(spec);
-    }
-    // AWS Karpenter Resources
-    /**
-     * Creates a Karpenter NodePool resource
-     * @param spec - NodePool specification
-     * @returns Created NodePool ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterNodePool({
-     *   name: 'default-nodepool',
-     *   template: {
-     *     spec: {
-     *       nodeClassRef: {
-     *         apiVersion: 'karpenter.k8s.aws/v1beta1',
-     *         kind: 'EC2NodeClass',
-     *         name: 'default'
-     *       }
-     *     }
-     *   }
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addKarpenterNodePool(spec) {
-        return this.karpenterResources.addKarpenterNodePool(spec);
-    }
-    /**
-     * Creates a Karpenter NodeClaim resource
-     * @param spec - NodeClaim specification
-     * @returns Created NodeClaim ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterNodeClaim({
-     *   name: 'my-node-claim',
-     *   nodeClassRef: {
-     *     apiVersion: 'karpenter.k8s.aws/v1beta1',
-     *     kind: 'EC2NodeClass',
-     *     name: 'default'
-     *   }
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addKarpenterNodeClaim(spec) {
-        return this.karpenterResources.addKarpenterNodeClaim(spec);
-    }
-    /**
-     * Creates a Karpenter EC2NodeClass resource
-     * @param spec - EC2NodeClass specification
-     * @returns Created EC2NodeClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterEC2NodeClass({
-     *   name: 'default',
-     *   amiFamily: 'AL2',
-     *   subnetSelectorTerms: [{ tags: { 'karpenter.sh/discovery': 'my-cluster' } }],
-     *   securityGroupSelectorTerms: [{ tags: { 'karpenter.sh/discovery': 'my-cluster' } }]
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addKarpenterEC2NodeClass(spec) {
-        return this.karpenterResources.addKarpenterEC2NodeClass(spec);
-    }
-    /**
-     * Creates a Karpenter NodePool with optimized disruption settings for cost efficiency
-     * @param spec - NodePool specification with disruption optimization
-     * @returns Created NodePool ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterNodePoolWithDisruption({
-     *   name: 'cost-optimized',
-     *   nodeClassRef: {
-     *     apiVersion: 'karpenter.k8s.aws/v1beta1',
-     *     kind: 'EC2NodeClass',
-     *     name: 'default'
-     *   },
-     *   consolidationPolicy: 'WhenEmptyOrUnderutilized',
-     *   consolidateAfter: '30s',
-     *   expireAfter: '24h',
-     *   disruptionBudgets: [
-     *     { nodes: '20%' },
-     *     { nodes: '0', schedule: '0 9 * * 1-5', duration: '8h' }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.7.1
-     */
-    addKarpenterNodePoolWithDisruption(spec) {
-        return this.karpenterResources.addKarpenterNodePoolWithDisruption(spec);
-    }
-    /**
-     * Creates a Karpenter NodePool with scheduling constraints and priorities
-     * @param spec - NodePool specification with scheduling optimization
-     * @returns Created NodePool ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterNodePoolWithScheduling({
-     *   name: 'gpu-workloads',
-     *   nodeClassRef: {
-     *     apiVersion: 'karpenter.k8s.aws/v1beta1',
-     *     kind: 'EC2NodeClass',
-     *     name: 'gpu-nodeclass'
-     *   },
-     *   requirements: [
-     *     { key: 'node.kubernetes.io/instance-type', operator: 'In', values: ['g4dn.xlarge', 'g4dn.2xlarge'] }
-     *   ],
-     *   taints: [
-     *     { key: 'nvidia.com/gpu', effect: 'NoSchedule' }
-     *   ],
-     *   terminationGracePeriod: '60s',
-     *   weight: 100
-     * });
-     * ```
-     *
-     * @since 2.7.1
-     */
-    addKarpenterNodePoolWithScheduling(spec) {
-        return this.karpenterResources.addKarpenterNodePoolWithScheduling(spec);
-    }
-    // Network Resources
-    /**
-     * Creates a NetworkPolicy resource
-     * @param spec - NetworkPolicy specification
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addNetworkPolicy({
-     *   name: 'deny-all',
-     *   podSelector: {},
-     *   policyTypes: ['Ingress', 'Egress']
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addNetworkPolicy(spec) {
-        return this.networkResources.addNetworkPolicy(spec);
-    }
-    /**
-     * Creates a NetworkPolicy from a predefined template
-     * @param templateName - Name of the predefined template
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     * @example
-     * ```typescript
-     * // Create a deny-all policy
-     * rutter.addNetworkPolicyFromTemplate(
-     *   'deny-all',
-     *   'default-deny',
-     *   { matchLabels: { app: 'web' } }
-     * );
-     * ```
-     * @since 2.9.0
-     */
-    addNetworkPolicyFromTemplate(templateName, name, podSelector, labels, annotations) {
-        return this.networkResources.addNetworkPolicyFromTemplate(templateName, name, podSelector, labels, annotations);
-    }
-    /**
-     * Gets predefined NetworkPolicy templates for common security patterns
-     * @returns Array of predefined NetworkPolicy templates
-     * @since 2.9.0
-     */
-    static getNetworkPolicyTemplates() {
-        return NetworkResources.getNetworkPolicyTemplates();
-    }
-    /**
-     * Creates a deny-all NetworkPolicy that blocks all traffic
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addDenyAllNetworkPolicy('deny-all', { matchLabels: { app: 'web' } });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addDenyAllNetworkPolicy(name, podSelector = {}, labels, annotations) {
-        return this.networkResources.addDenyAllNetworkPolicy(name, podSelector, labels, annotations);
-    }
-    /**
-     * Creates a NetworkPolicy that allows traffic from specific pods
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param fromPodSelector - Pod selector for allowed source pods
-     * @param ports - Optional ports to allow
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAllowFromPodsNetworkPolicy(
-     *   'allow-from-frontend',
-     *   { matchLabels: { app: 'backend' } },
-     *   { matchLabels: { app: 'frontend' } },
-     *   [{ port: 8080, protocol: 'TCP' }]
-     * );
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addAllowFromPodsNetworkPolicy(name, podSelector, fromPodSelector, ports, labels, annotations) {
-        return this.networkResources.addAllowFromPodsNetworkPolicy(name, podSelector, fromPodSelector, ports, labels, annotations);
-    }
-    /**
-     * Creates a NetworkPolicy that allows traffic from specific namespaces
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param fromNamespaceSelector - Namespace selector for allowed source namespaces
-     * @param ports - Optional ports to allow
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAllowFromNamespaceNetworkPolicy(
-     *   'allow-from-monitoring',
-     *   { matchLabels: { app: 'web' } },
-     *   { matchLabels: { name: 'monitoring' } },
-     *   [{ port: 9090, protocol: 'TCP' }]
-     * );
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addAllowFromNamespaceNetworkPolicy(name, podSelector, fromNamespaceSelector, ports, labels, annotations) {
-        return this.networkResources.addAllowFromNamespaceNetworkPolicy(name, podSelector, fromNamespaceSelector, ports, labels, annotations);
-    }
-    addIngress(specOrName, host, serviceName, servicePort, options) {
-        if (typeof specOrName === 'string') {
-            return this.createSimpleIngress(specOrName, host, serviceName, servicePort, options);
-        }
-        // Original spec-based overload
-        return this.networkResources.addIngress(specOrName);
-    }
-    /**
-     * Creates a simple Ingress with enhanced options
-     * @private
-     */
-    createSimpleIngress(name, host, serviceName, servicePort, options) {
-        const tlsSecretName = typeof options?.tls === 'string' ? options.tls : `${name}-tls`;
-        const annotations = this.buildIngressAnnotations(options);
-        const spec = {
-            name,
-            rules: [
-                {
-                    host,
-                    http: {
-                        paths: [
-                            {
-                                path: options?.path || '/',
-                                pathType: options?.pathType || 'Prefix',
-                                backend: {
-                                    service: {
-                                        name: serviceName,
-                                        port: { number: servicePort },
-                                    },
-                                },
-                            },
-                        ],
-                    },
-                },
-            ],
-            ...(options?.className && { ingressClassName: options.className }),
-            ...(Object.keys(annotations).length > 0 && { annotations }),
-            ...(options?.tls && {
-                tls: [
-                    {
-                        hosts: [host],
-                        secretName: tlsSecretName,
-                    },
-                ],
-            }),
-        };
-        return this.networkResources.addIngress(spec);
-    }
-    /**
-     * Builds annotations for Ingress based on options
-     * @private
-     */
-    buildIngressAnnotations(options) {
-        const annotations = { ...options?.annotations };
-        this.addSSLRedirectAnnotation(annotations, options);
-        this.addCertManagerAnnotation(annotations, options);
-        this.addNginxAnnotations(annotations, options);
-        return annotations;
-    }
-    /**
-     * Adds SSL redirect annotation based on class and options
-     * @private
-     */
-    addSSLRedirectAnnotation(annotations, options) {
-        if (!options?.tls || options.sslRedirect === false)
-            return;
-        if (options.className === 'nginx' || !options.className) {
-            annotations['nginx.ingress.kubernetes.io/ssl-redirect'] = 'true';
-        }
-        else if (options.className === 'alb') {
-            annotations['alb.ingress.kubernetes.io/ssl-redirect'] = '443';
-        }
-    }
-    /**
-     * Adds cert-manager annotation if specified
-     * @private
-     */
-    addCertManagerAnnotation(annotations, options) {
-        if (options?.certManager) {
-            annotations['cert-manager.io/cluster-issuer'] = options.certManager;
-        }
-    }
-    /**
-     * Adds NGINX-specific annotations
-     * @private
-     */
-    addNginxAnnotations(annotations, options) {
-        if (options?.className !== 'nginx' && options?.className)
-            return;
-        if (options?.cors) {
-            annotations['nginx.ingress.kubernetes.io/enable-cors'] = 'true';
-        }
-        if (options?.bodySize) {
-            annotations['nginx.ingress.kubernetes.io/proxy-body-size'] = options.bodySize;
-        }
-        if (options?.timeout) {
-            annotations['nginx.ingress.kubernetes.io/proxy-read-timeout'] = options.timeout.toString();
-        }
-        if (options?.backendProtocol && options.backendProtocol !== 'HTTP') {
-            annotations['nginx.ingress.kubernetes.io/backend-protocol'] = options.backendProtocol;
-        }
-        if (options?.rewriteTarget) {
-            annotations['nginx.ingress.kubernetes.io/rewrite-target'] = options.rewriteTarget;
-        }
-    }
-    /**
-     * Creates a secure Ingress resource with TLS validation and environment-aware security defaults
-     * @param spec - Enhanced Ingress specification with security options
-     * @returns Created Ingress ApiObject
-     *
-     * @example
-     * ```typescript
-     * // Production Ingress with mandatory TLS
-     * rutter.addSecureIngress({
-     *   name: 'secure-web-ingress',
-     *   environment: 'production',
-     *   tls: [{
-     *     hosts: ['secure.example.com'],
-     *     secretName: 'secure-example-tls'
-     *   }],
-     *   forceSSLRedirect: true,
-     *   rules: [{
-     *     host: 'secure.example.com',
-     *     http: {
-     *       paths: [{
-     *         path: '/',
-     *         pathType: 'Prefix',
-     *         backend: {
-     *           service: { name: 'web-service', port: { number: 80 } }
-     *         }
-     *       }]
-     *     }
-     *   }]
-     * });
-     * ```
-     *
-     * @since 2.8.0
-     */
-    addSecureIngress(spec) {
-        return this.networkResources.addSecureIngress(spec);
-    }
-    // AWS ECR ServiceAccount
-    /**
-     * Creates a ServiceAccount with ECR access annotations
-     * @param spec - ECR ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAWSECRServiceAccount({
-     *   name: 'ecr-service-account',
-     *   roleArn: 'arn:aws:iam::123456789012:role/ECRAccessRole'
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addAWSECRServiceAccount(spec) {
-        return this.awsResources.addECRServiceAccount(spec);
-    }
-    // Autoscaling Resources
-    /**
-     * Creates a Horizontal Pod Autoscaler (HPA) resource
-     * @param spec - HPA specification
-     * @returns Created HPA ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addHorizontalPodAutoscaler({
-     *   name: 'web-hpa',
-     *   scaleTargetRef: {
-     *     apiVersion: 'apps/v1',
-     *     kind: 'Deployment',
-     *     name: 'web-app'
-     *   },
-     *   minReplicas: 2,
-     *   maxReplicas: 10,
-     *   metrics: [{
-     *     type: 'Resource',
-     *     resource: {
-     *       name: 'cpu',
-     *       target: { type: 'Utilization', averageUtilization: 70 }
-     *     }
-     *   }]
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addHorizontalPodAutoscaler(spec) {
-        return this.autoscalingResources.addHorizontalPodAutoscaler(spec);
-    }
-    /**
-     * Creates a Vertical Pod Autoscaler (VPA) resource
-     * @param spec - VPA specification
-     * @returns Created VPA ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addVerticalPodAutoscaler({
-     *   name: 'web-vpa',
-     *   targetRef: {
-     *     apiVersion: 'apps/v1',
-     *     kind: 'Deployment',
-     *     name: 'web-app'
-     *   },
-     *   updatePolicy: { updateMode: 'Auto' }
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addVerticalPodAutoscaler(spec) {
-        return this.autoscalingResources.addVerticalPodAutoscaler(spec);
-    }
-    /**
-     * Creates a CronJob resource
-     * @param spec - CronJob specification
-     * @returns Created CronJob ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addCronJob({
-     *   name: 'backup-job',
-     *   schedule: '0 2 * * *',
-     *   jobTemplate: {
-     *     spec: {
-     *       template: {
-     *         spec: {
-     *           containers: [{
-     *             name: 'backup',
-     *             image: 'backup:latest',
-     *             command: ['backup.sh']
-     *           }],
-     *           restartPolicy: 'OnFailure'
-     *         }
-     *       }
-     *     }
-     *   }
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addCronJob(spec) {
-        return this.autoscalingResources.addCronJob(spec);
-    }
-    // Utility methods
-    /**
-     * Adds a custom resource definition (CRD) YAML or object
-     * @param yamlOrObject - CRD YAML content string or object
-     * @param id - Unique identifier for the CRD
-     *
-     * @example
-     * ```typescript
-     * // Using YAML string
-     * rutter.addCrd(`
-     * apiVersion: apiextensions.k8s.io/v1
-     * kind: CustomResourceDefinition
-     * metadata:
-     *   name: example.com
-     * spec:
-     *   group: example.com
-     *   versions: []
-     * `);
-     *
-     * // Using object
-     * rutter.addCrd({
-     *   apiVersion: 'apiextensions.k8s.io/v1',
-     *   kind: 'CustomResourceDefinition',
-     *   metadata: { name: 'example.com' },
-     *   spec: { group: 'example.com', versions: [] }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addCrd(yamlOrObject, id = 'crd') {
-        let yaml;
-        let crdObject;
-        if (typeof yamlOrObject === 'string') {
-            // Validate YAML string
-            try {
-                crdObject = YAML.parse(yamlOrObject);
-                yaml = yamlOrObject.trim();
-            }
-            catch (error) {
-                throw new Error(`Invalid YAML provided to addCrd(): ${error instanceof Error ? error.message : 'Unknown error'}`);
-            }
-        }
-        else if (typeof yamlOrObject === 'object' && yamlOrObject !== null) {
-            // Use object directly and convert to YAML
-            crdObject = yamlOrObject;
-            try {
-                yaml = YAML.stringify(yamlOrObject).trim();
-            }
-            catch (error) {
-                throw new Error(`Failed to convert object to YAML in addCrd(): ${error instanceof Error ? error.message : 'Unknown error'}`);
-            }
-        }
-        else {
-            throw new Error('addCrd() requires either a YAML string or an object');
-        }
-        // Ensure we have valid content
-        if (!yaml) {
-            throw new Error('addCrd() received empty or invalid content');
-        }
-        // Validate CRD structure
-        this.validateCrdStructure(crdObject);
-        this.assets.push({ id, yaml, target: 'crds' });
-    }
-    /**
-     * Validates CRD structure according to Kubernetes specification
-     * @param crd - CRD object to validate
-     * @private
-     * @since 2.5.0
-     */
-    validateCrdStructure(crd) {
-        if (crd['apiVersion'] !== 'apiextensions.k8s.io/v1') {
-            throw new Error('CRD must use apiVersion: apiextensions.k8s.io/v1');
-        }
-        if (crd['kind'] !== 'CustomResourceDefinition') {
-            throw new Error('CRD must have kind: CustomResourceDefinition');
-        }
-        if (!crd['metadata'] || typeof crd['metadata'] !== 'object' || crd['metadata'] === null) {
-            throw new Error('CRD must have a metadata object');
-        }
-        const metadata = crd['metadata'];
-        if (!metadata['name'] || typeof metadata['name'] !== 'string') {
-            throw new Error('CRD must have a valid metadata.name');
-        }
-        if (!crd['spec'] || typeof crd['spec'] !== 'object' || crd['spec'] === null) {
-            throw new Error('CRD must have a spec object');
-        }
-        const spec = crd['spec'];
-        if (!spec['group'] || typeof spec['group'] !== 'string') {
-            throw new Error('CRD must have a valid spec.group');
-        }
-        if (!Array.isArray(spec['versions']) || spec['versions'].length === 0) {
-            throw new Error('CRD must have at least one version in spec.versions');
-        }
-    }
-    /**
-     * Gets chart metadata
-     * @returns Chart metadata
-     *
-     * @since 1.0.0
-     */
-    getMeta() {
-        return { ...this.meta };
-    }
-    /**
-     * Gets default values
-     * @returns Default values object
-     *
-     * @since 1.0.0
-     */
-    getDefaultValues() {
-        return { ...this.defaultValues };
-    }
-    /**
-     * Gets environment-specific values
-     * @returns Environment values object
-     *
-     * @since 1.0.0
-     */
-    getEnvValues() {
-        return { ...this.envValues };
-    }
-    /**
-     * Gets all assets (CRDs, etc.)
-     * @returns Array of assets
-     *
-     * @since 1.0.0
-     */
-    getAssets() {
-        return [...this.assets];
-    }
-    /**
-     * Converts the chart to SynthAsset array for HelmChartWriter
-     * @returns Array of synthesized assets
-     *
-     * @since 2.4.0
-     */
-    toSynthArray() {
-        // Use cdk8s Testing.synth to obtain manifest objects
-        const manifestObjs = Testing.synth(this.chart);
-        // Enforce common labels best-practice on all rendered objects
-        const enriched = manifestObjs.map((obj) => {
-            if (obj && typeof obj === 'object') {
-                const o = obj;
-                o.metadata = o.metadata ?? {};
-                o.metadata.labels = o.metadata.labels ?? {};
-                const labels = o.metadata.labels;
-                const defaults = {
-                    'helm.sh/chart': '{{ .Chart.Name }}-{{ .Chart.Version }}',
-                    'app.kubernetes.io/name': include(Rutter.HELPER_NAME),
-                    'app.kubernetes.io/instance': helm.releaseName,
-                    'app.kubernetes.io/version': helm.chartVersion,
-                    'app.kubernetes.io/managed-by': '{{ .Release.Service }}',
-                    'app.kubernetes.io/part-of': helm.chartName,
-                };
-                // Apply defaults only if not already set
-                for (const [key, value] of Object.entries(defaults)) {
-                    if (!(key in labels)) {
-                        // eslint-disable-next-line security/detect-object-injection -- Safe: controlled label assignment
-                        labels[key] = value;
-                    }
-                }
-            }
-            return obj;
-        });
-        const synthAssets = [];
-        if (this.props.singleManifestFile) {
-            // Combine all resources into single manifest
-            const combinedYaml = enriched
-                .map((obj) => YAML.stringify(obj).trim())
-                .filter(Boolean)
-                .join('\n---\n');
-            const manifestId = this.props.manifestPrefix ?? 'manifests';
-            synthAssets.push({ id: manifestId, yaml: combinedYaml });
-        }
-        else {
-            // Create separate files for each resource (default behavior)
-            enriched.forEach((obj, index) => {
-                const yaml = YAML.stringify(obj).trim();
-                if (yaml) {
-                    const manifestId = generateManifestName(obj, this.props.namingStrategy ?? 'descriptive', index + 1, this.props.manifestPrefix);
-                    synthAssets.push({ id: manifestId, yaml });
-                }
-            });
-        }
-        // Add any additional assets (CRDs, etc.)
-        this.assets.forEach((asset) => {
-            synthAssets.push({ id: asset.id, yaml: asset.yaml });
-        });
-        return synthAssets;
-    }
-    /**
-     * Writes the Helm chart to the specified output directory
-     * @param outDir - Output directory path
-     *
-     * @since 1.0.0
-     */
-    write(outDir) {
-        // Generate helpers template
-        let helpersContent;
-        if (this.props.helpersTpl) {
-            if (typeof this.props.helpersTpl === 'string') {
-                helpersContent = this.props.helpersTpl;
-            }
-            else {
-                helpersContent = this.props.helpersTpl
-                    .map((helper) => `{{/*
-${helper.name}
-*/}}
-{{- define "${helper.name}" -}}
-${helper.template}
-{{- end }}`)
-                    .join('\n\n');
-            }
-        }
-        else {
-            // Auto-generate standard helpers
-            helpersContent = generateHelpersTemplate(this.props.cloudProvider);
-        }
-        HelmChartWriter.write({
-            outDir,
-            meta: this.meta,
-            defaultValues: this.defaultValues,
-            envValues: this.envValues,
-            assets: this.toSynthArray(),
-            helpersTpl: helpersContent,
-        });
-    }
-}
-// Constants for labels
-Rutter.HELPER_NAME = 'chart.name';
-//# sourceMappingURL=rutter.js.map