timonel 2.8.1 → 2.8.3

package/dist/lib/resources/cloud/aws/awsResources.d.ts

@@ -1,164 +1,21 @@
 import type { ApiObject } from 'cdk8s';
 import * as kplus from 'cdk8s-plus-33';
 import { BaseResourceProvider } from '../../baseResourceProvider.js';
-/**
- * AWS-specific Kubernetes resources provider
- * Handles AWS integrations like EBS, EFS, ALB, IRSA, and other AWS services
- *
- * @since 2.4.0
- */
 export declare class AWSResources extends BaseResourceProvider {
     private static readonly STORAGE_API_VERSION;
-    /**
-     * Creates an AWS EBS StorageClass
-     * @param spec - EBS StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * awsResources.addEBSStorageClass({
-     *   name: 'fast-ebs',
-     *   volumeType: 'gp3',
-     *   encrypted: true,
-     *   allowVolumeExpansion: true
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
     addEBSStorageClass(spec: AWSEBSStorageClassSpec): ApiObject;
-    /**
-     * Creates an AWS EFS StorageClass
-     * @param spec - EFS StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * awsResources.addEFSStorageClass({
-     *   name: 'efs-storage',
-     *   fileSystemId: 'fs-12345678',
-     *   directoryPerms: '0755'
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
     addEFSStorageClass(spec: AWSEFSStorageClassSpec): ApiObject;
-    /**
-     * Creates an AWS IRSA (IAM Roles for Service Accounts) ServiceAccount
-     * @param spec - IRSA ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * awsResources.addIRSAServiceAccount({
-     *   name: 'aws-service-account',
-     *   roleArn: 'arn:aws:iam::123456789012:role/MyRole'
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
     addIRSAServiceAccount(spec: AWSIRSAServiceAccountSpec): kplus.ServiceAccount;
-    /**
-     * Creates an AWS ALB Ingress
-     * @param spec - ALB Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @example
-     * ```typescript
-     * awsResources.addALBIngress({
-     *   name: 'web-ingress',
-     *   rules: [{
-     *     paths: [{
-     *       path: '/',
-     *       pathType: 'Prefix',
-     *       backend: { service: { name: 'web-service', port: { number: 80 } } }
-     *     }]
-     *   }],
-     *   scheme: 'internet-facing'
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
     addALBIngress(spec: AWSALBIngressSpec): kplus.Ingress;
-    /**
-     * Validates Ingress paths format according to Kubernetes specification
-     * @param rules - Ingress rules to validate
-     * @private
-     * @since 2.5.0
-     */
     private validateIngressPaths;
-    /**
-     * Validates a single Ingress rule
-     * @param rule - Ingress rule to validate
-     * @private
-     * @since 2.5.0
-     */
     private validateIngressRule;
-    /**
-     * Validates a single Ingress path
-     * @param pathRule - Path rule to validate
-     * @private
-     * @since 2.5.0
-     */
     private validateIngressPath;
-    /**
-     * Validates path format
-     * @param path - Path to validate
-     * @private
-     * @since 2.5.0
-     */
     private validatePathFormat;
-    /**
-     * Validates path type
-     * @param pathType - Path type to validate
-     * @private
-     * @since 2.5.0
-     */
     private validatePathType;
-    /**
-     * Validates backend configuration
-     * @param backend - Backend to validate
-     * @private
-     * @since 2.5.0
-     */
     private validateBackend;
-    /**
-     * Validates StorageClass provisioner is present and valid
-     * @param provisioner - Provisioner string to validate
-     * @param storageType - Type of storage (for error messages)
-     * @private
-     * @since 2.5.0
-     */
     private validateStorageClassProvisioner;
-    /**
-     * Validates AWS IAM Role ARN format
-     * @param roleArn - Role ARN to validate
-     */
     private validateRoleArn;
-    /**
-     * Builds ALB-specific annotations
-     * @param spec - ALB Ingress specification
-     * @returns ALB annotations
-     */
     private buildALBAnnotations;
-    /**
-     * Creates a ServiceAccount with ECR access annotations
-     * @param spec - ECR ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * awsResources.addECRServiceAccount({
-     *   name: 'ecr-service-account',
-     *   roleArn: 'arn:aws:iam::123456789012:role/ECRAccessRole'
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
     addECRServiceAccount(spec: AWSECRServiceAccountSpec): kplus.ServiceAccount;
 }
 export interface AWSEBSStorageClassSpec {
@@ -237,4 +94,3 @@ export interface AWSALBIngressSpec {
     labels?: Record<string, string>;
     annotations?: Record<string, string>;
 }
-//# sourceMappingURL=awsResources.d.ts.map

package/dist/lib/resources/cloud/aws/awsResources.js

@@ -1,29 +1,6 @@
 import * as kplus from 'cdk8s-plus-33';
 import { BaseResourceProvider } from '../../baseResourceProvider.js';
-/**
- * AWS-specific Kubernetes resources provider
- * Handles AWS integrations like EBS, EFS, ALB, IRSA, and other AWS services
- *
- * @since 2.4.0
- */
 export class AWSResources extends BaseResourceProvider {
-    /**
-     * Creates an AWS EBS StorageClass
-     * @param spec - EBS StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * awsResources.addEBSStorageClass({
-     *   name: 'fast-ebs',
-     *   volumeType: 'gp3',
-     *   encrypted: true,
-     *   allowVolumeExpansion: true
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
     addEBSStorageClass(spec) {
         const parameters = {
             type: spec.volumeType ?? 'gp3',
@@ -40,26 +17,9 @@ export class AWSResources extends BaseResourceProvider {
             allowVolumeExpansion: spec.allowVolumeExpansion ?? true,
             volumeBindingMode: spec.volumeBindingMode ?? 'WaitForFirstConsumer',
         };
-        // Validate EBS-specific provisioner
         this.validateStorageClassProvisioner(provisioner, 'EBS');
         return this.createRootLevelApiObject(spec.name, AWSResources.STORAGE_API_VERSION, 'StorageClass', fields, spec.labels, spec.annotations);
     }
-    /**
-     * Creates an AWS EFS StorageClass
-     * @param spec - EFS StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * awsResources.addEFSStorageClass({
-     *   name: 'efs-storage',
-     *   fileSystemId: 'fs-12345678',
-     *   directoryPerms: '0755'
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
     addEFSStorageClass(spec) {
         const parameters = {
             ...(spec.fileSystemId ? { fileSystemId: spec.fileSystemId } : {}),
@@ -75,25 +35,9 @@ export class AWSResources extends BaseResourceProvider {
             reclaimPolicy: spec.reclaimPolicy ?? 'Delete',
             volumeBindingMode: spec.volumeBindingMode ?? 'Immediate',
         };
-        // Validate EFS-specific provisioner
         this.validateStorageClassProvisioner(provisioner, 'EFS');
         return this.createRootLevelApiObject(spec.name, AWSResources.STORAGE_API_VERSION, 'StorageClass', fields, spec.labels, spec.annotations);
     }
-    /**
-     * Creates an AWS IRSA (IAM Roles for Service Accounts) ServiceAccount
-     * @param spec - IRSA ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * awsResources.addIRSAServiceAccount({
-     *   name: 'aws-service-account',
-     *   roleArn: 'arn:aws:iam::123456789012:role/MyRole'
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
     addIRSAServiceAccount(spec) {
         this.validateRoleArn(spec.roleArn);
         const annotations = {
@@ -108,7 +52,6 @@ export class AWSResources extends BaseResourceProvider {
             },
             automountToken: spec.automountServiceAccountToken ?? true,
         });
-        // Add image pull secrets if specified
         if (spec.imagePullSecrets) {
             spec.imagePullSecrets.forEach((secret) => {
                 serviceAccount.addSecret(kplus.Secret.fromSecretName(this.chart, `${spec.name}-secret-${secret.name}`, secret.name));
@@ -116,30 +59,7 @@ export class AWSResources extends BaseResourceProvider {
         }
         return serviceAccount;
     }
-    /**
-     * Creates an AWS ALB Ingress
-     * @param spec - ALB Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @example
-     * ```typescript
-     * awsResources.addALBIngress({
-     *   name: 'web-ingress',
-     *   rules: [{
-     *     paths: [{
-     *       path: '/',
-     *       pathType: 'Prefix',
-     *       backend: { service: { name: 'web-service', port: { number: 80 } } }
-     *     }]
-     *   }],
-     *   scheme: 'internet-facing'
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
     addALBIngress(spec) {
-        // Validate ingress paths format
         this.validateIngressPaths(spec.rules);
         const annotations = this.buildALBAnnotations(spec);
         const ingress = new kplus.Ingress(this.chart, spec.name, {
@@ -150,21 +70,15 @@ export class AWSResources extends BaseResourceProvider {
             },
             className: spec.ingressClassName ?? 'alb',
         });
-        // Add rules to the ingress
         spec.rules.forEach((rule) => {
             rule.paths.forEach((path) => {
-                // Create a service reference for the backend - we need to create a Service instance that references the existing service
-                const service = new kplus.Service(this.chart, `${spec.name}-service-ref-${path.backend.service.name}`, {
-                // This creates a reference to an existing service by name
-                // The service should already exist in the cluster
-                });
+                const service = new kplus.Service(this.chart, `${spec.name}-service-ref-${path.backend.service.name}`, {});
                 const backend = kplus.IngressBackend.fromService(service, {
                     port: path.backend.service.port.number || parseInt(path.backend.service.port.name || '80'),
                 });
                 ingress.addRule(path.path, backend, path.pathType);
             });
         });
-        // Add TLS configuration if specified
         if (spec.tls) {
             spec.tls.forEach((tlsConfig) => {
                 if (tlsConfig.secretName && tlsConfig.hosts) {
@@ -179,23 +93,11 @@ export class AWSResources extends BaseResourceProvider {
         }
         return ingress;
     }
-    /**
-     * Validates Ingress paths format according to Kubernetes specification
-     * @param rules - Ingress rules to validate
-     * @private
-     * @since 2.5.0
-     */
     validateIngressPaths(rules) {
         for (const rule of rules) {
             this.validateIngressRule(rule);
         }
     }
-    /**
-     * Validates a single Ingress rule
-     * @param rule - Ingress rule to validate
-     * @private
-     * @since 2.5.0
-     */
     validateIngressRule(rule) {
         if (!rule.paths || !Array.isArray(rule.paths)) {
             throw new Error('Ingress rule must have a paths array');
@@ -204,56 +106,29 @@ export class AWSResources extends BaseResourceProvider {
             this.validateIngressPath(pathRule);
         }
     }
-    /**
-     * Validates a single Ingress path
-     * @param pathRule - Path rule to validate
-     * @private
-     * @since 2.5.0
-     */
     validateIngressPath(pathRule) {
         this.validatePathFormat(pathRule.path);
         this.validatePathType(pathRule.pathType);
         this.validateBackend(pathRule.backend);
     }
-    /**
-     * Validates path format
-     * @param path - Path to validate
-     * @private
-     * @since 2.5.0
-     */
     validatePathFormat(path) {
         if (!path || typeof path !== 'string') {
             throw new Error('Ingress path must be a non-empty string');
         }
-        // Normalize path and check for traversal attempts
         const normalizedPath = path.replace(/\/+/g, '/');
         if (!normalizedPath.startsWith('/')) {
             throw new Error(`Ingress path "${path}" must start with /`);
         }
-        // For Kubernetes Ingress paths, we allow URL patterns but warn about suspicious ones
         if (normalizedPath.includes('../') || normalizedPath.includes('./')) {
-            // Note: These could be valid URL patterns in some cases, but are suspicious
             console.warn(`Warning: Ingress path "${path}" contains path traversal-like sequences`);
         }
     }
-    /**
-     * Validates path type
-     * @param pathType - Path type to validate
-     * @private
-     * @since 2.5.0
-     */
     validatePathType(pathType) {
         const validPathTypes = ['Exact', 'Prefix', 'ImplementationSpecific'];
         if (!validPathTypes.includes(pathType)) {
             throw new Error(`Invalid pathType "${pathType}". Must be one of: ${validPathTypes.join(', ')}`);
         }
     }
-    /**
-     * Validates backend configuration
-     * @param backend - Backend to validate
-     * @private
-     * @since 2.5.0
-     */
     validateBackend(backend) {
         if (!backend?.service?.name) {
             throw new Error('Ingress path backend must specify service name');
@@ -267,13 +142,6 @@ export class AWSResources extends BaseResourceProvider {
             throw new Error(`Invalid port number ${port.number}. Must be between 1 and 65535`);
         }
     }
-    /**
-     * Validates StorageClass provisioner is present and valid
-     * @param provisioner - Provisioner string to validate
-     * @param storageType - Type of storage (for error messages)
-     * @private
-     * @since 2.5.0
-     */
     validateStorageClassProvisioner(provisioner, storageType) {
         if (!provisioner || typeof provisioner !== 'string' || provisioner.trim() === '') {
             throw new Error(`${storageType} StorageClass must have a valid provisioner`);
@@ -282,7 +150,6 @@ export class AWSResources extends BaseResourceProvider {
             EBS: 'ebs.csi.aws.com',
             EFS: 'efs.csi.aws.com',
         };
-        // Validate provisioner matches storage type
         const expectedProvisioner = validProvisioners[storageType];
         if (!expectedProvisioner) {
             throw new Error(`Invalid storage type: ${storageType}`);
@@ -291,12 +158,7 @@ export class AWSResources extends BaseResourceProvider {
             throw new Error(`Invalid AWS ${storageType} provisioner "${provisioner}". Must be: ${expectedProvisioner}`);
         }
     }
-    /**
-     * Validates AWS IAM Role ARN format
-     * @param roleArn - Role ARN to validate
-     */
     validateRoleArn(roleArn) {
-        // Skip validation for Helm template values
         if (roleArn.includes('{{') && roleArn.includes('}}')) {
             return;
         }
@@ -305,15 +167,8 @@ export class AWSResources extends BaseResourceProvider {
             throw new Error(`Invalid AWS IAM Role ARN format: ${roleArn}`);
         }
     }
-    /**
-     * Builds ALB-specific annotations
-     * @param spec - ALB Ingress specification
-     * @returns ALB annotations
-     */
     buildALBAnnotations(spec) {
         const annotations = {
-            // Remove deprecated kubernetes.io/ingress.class annotation
-            // Use spec.ingressClassName instead
             ...(spec.annotations ?? {}),
         };
         if (spec.scheme) {
@@ -333,21 +188,6 @@ export class AWSResources extends BaseResourceProvider {
         }
         return annotations;
     }
-    /**
-     * Creates a ServiceAccount with ECR access annotations
-     * @param spec - ECR ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * awsResources.addECRServiceAccount({
-     *   name: 'ecr-service-account',
-     *   roleArn: 'arn:aws:iam::123456789012:role/ECRAccessRole'
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
     addECRServiceAccount(spec) {
         const annotations = {
             'eks.amazonaws.com/role-arn': spec.roleArn,
@@ -361,7 +201,6 @@ export class AWSResources extends BaseResourceProvider {
             },
             automountToken: spec.automountServiceAccountToken ?? true,
         });
-        // Add image pull secrets if specified
         if (spec.imagePullSecrets) {
             spec.imagePullSecrets.forEach((secret) => {
                 serviceAccount.addSecret(kplus.Secret.fromSecretName(this.chart, `${spec.name}-ecr-secret-${secret.name}`, secret.name));
@@ -371,4 +210,3 @@ export class AWSResources extends BaseResourceProvider {
     }
 }
 AWSResources.STORAGE_API_VERSION = 'storage.k8s.io/v1';
-//# sourceMappingURL=awsResources.js.map