typekro 0.27.0 → 0.28.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.tsbuildinfo +1 -1
- package/dist/core/containers/build.d.ts +2 -46
- package/dist/core/containers/build.d.ts.map +1 -1
- package/dist/core/containers/build.js +219 -134
- package/dist/core/containers/build.js.map +1 -1
- package/dist/core/containers/errors.d.ts +4 -0
- package/dist/core/containers/errors.d.ts.map +1 -1
- package/dist/core/containers/errors.js +14 -1
- package/dist/core/containers/errors.js.map +1 -1
- package/dist/core/containers/exec.d.ts +6 -23
- package/dist/core/containers/exec.d.ts.map +1 -1
- package/dist/core/containers/exec.js +94 -78
- package/dist/core/containers/exec.js.map +1 -1
- package/dist/core/containers/image.d.ts +11 -7
- package/dist/core/containers/image.d.ts.map +1 -1
- package/dist/core/containers/image.js +102 -13
- package/dist/core/containers/image.js.map +1 -1
- package/dist/core/containers/index.d.ts +5 -1
- package/dist/core/containers/index.d.ts.map +1 -1
- package/dist/core/containers/index.js +3 -0
- package/dist/core/containers/index.js.map +1 -1
- package/dist/core/containers/registries/credentials.d.ts +30 -0
- package/dist/core/containers/registries/credentials.d.ts.map +1 -0
- package/dist/core/containers/registries/credentials.js +87 -0
- package/dist/core/containers/registries/credentials.js.map +1 -0
- package/dist/core/containers/registries/docker-session.d.ts +14 -0
- package/dist/core/containers/registries/docker-session.d.ts.map +1 -0
- package/dist/core/containers/registries/docker-session.js +164 -0
- package/dist/core/containers/registries/docker-session.js.map +1 -0
- package/dist/core/containers/registries/ecr.d.ts +2 -3
- package/dist/core/containers/registries/ecr.d.ts.map +1 -1
- package/dist/core/containers/registries/ecr.js +13 -22
- package/dist/core/containers/registries/ecr.js.map +1 -1
- package/dist/core/containers/registries/harbor.d.ts +7 -0
- package/dist/core/containers/registries/harbor.d.ts.map +1 -0
- package/dist/core/containers/registries/harbor.js +9 -0
- package/dist/core/containers/registries/harbor.js.map +1 -0
- package/dist/core/containers/registries/index.d.ts.map +1 -1
- package/dist/core/containers/registries/index.js +5 -0
- package/dist/core/containers/registries/index.js.map +1 -1
- package/dist/core/containers/registries/oci.d.ts +13 -0
- package/dist/core/containers/registries/oci.d.ts.map +1 -0
- package/dist/core/containers/registries/oci.js +68 -0
- package/dist/core/containers/registries/oci.js.map +1 -0
- package/dist/core/containers/registries/orbstack.d.ts +2 -3
- package/dist/core/containers/registries/orbstack.d.ts.map +1 -1
- package/dist/core/containers/registries/orbstack.js +8 -8
- package/dist/core/containers/registries/orbstack.js.map +1 -1
- package/dist/core/containers/registries/types.d.ts +75 -49
- package/dist/core/containers/registries/types.d.ts.map +1 -1
- package/dist/core/containers/registries/types.js +1 -9
- package/dist/core/containers/registries/types.js.map +1 -1
- package/dist/core/deployment/direct-factory.d.ts.map +1 -1
- package/dist/core/deployment/direct-factory.js +15 -8
- package/dist/core/deployment/direct-factory.js.map +1 -1
- package/dist/core/deployment/engine.d.ts.map +1 -1
- package/dist/core/deployment/engine.js +46 -5
- package/dist/core/deployment/engine.js.map +1 -1
- package/dist/core/deployment/kro-factory.d.ts +7 -7
- package/dist/core/deployment/kro-factory.d.ts.map +1 -1
- package/dist/core/deployment/kro-factory.js +148 -60
- package/dist/core/deployment/kro-factory.js.map +1 -1
- package/dist/core/deployment/kro-instance-safety.d.ts +7 -0
- package/dist/core/deployment/kro-instance-safety.d.ts.map +1 -1
- package/dist/core/deployment/kro-instance-safety.js +15 -0
- package/dist/core/deployment/kro-instance-safety.js.map +1 -1
- package/dist/core/deployment/kro-namespace-teardown.d.ts +7 -5
- package/dist/core/deployment/kro-namespace-teardown.d.ts.map +1 -1
- package/dist/core/deployment/kro-namespace-teardown.js +29 -10
- package/dist/core/deployment/kro-namespace-teardown.js.map +1 -1
- package/dist/core/deployment/kro-readiness.d.ts +1 -0
- package/dist/core/deployment/kro-readiness.d.ts.map +1 -1
- package/dist/core/deployment/kro-readiness.js +22 -1
- package/dist/core/deployment/kro-readiness.js.map +1 -1
- package/dist/core/deployment/rollback-manager.d.ts +13 -0
- package/dist/core/deployment/rollback-manager.d.ts.map +1 -1
- package/dist/core/deployment/rollback-manager.js +8 -0
- package/dist/core/deployment/rollback-manager.js.map +1 -1
- package/dist/core/serialization/core.js +3 -1
- package/dist/core/serialization/core.js.map +1 -1
- package/dist/core/serialization/schema.d.ts +2 -2
- package/dist/core/serialization/schema.d.ts.map +1 -1
- package/dist/core/serialization/schema.js +57 -4
- package/dist/core/serialization/schema.js.map +1 -1
- package/dist/core/types/serialization.d.ts +9 -0
- package/dist/core/types/serialization.d.ts.map +1 -1
- package/dist/factories/apisix/types.js +11 -11
- package/dist/factories/apisix/types.js.map +1 -1
- package/dist/factories/caddy/types.js +2 -2
- package/dist/factories/caddy/types.js.map +1 -1
- package/dist/factories/cert-manager/types.js +6 -6
- package/dist/factories/cert-manager/types.js.map +1 -1
- package/dist/factories/cilium/compositions/cilium-bootstrap.js +6 -6
- package/dist/factories/cilium/compositions/cilium-bootstrap.js.map +1 -1
- package/dist/factories/clickhouse/compositions/clickhouse-cluster.js +1 -1
- package/dist/factories/clickhouse/compositions/clickhouse-cluster.js.map +1 -1
- package/dist/factories/clickhouse/types.js +8 -8
- package/dist/factories/clickhouse/types.js.map +1 -1
- package/dist/factories/clickstack/types.js +5 -5
- package/dist/factories/clickstack/types.js.map +1 -1
- package/dist/factories/cnpg/types.js +6 -6
- package/dist/factories/cnpg/types.js.map +1 -1
- package/dist/factories/dagster/types.js +14 -14
- package/dist/factories/dagster/types.js.map +1 -1
- package/dist/factories/external-dns/types.js +3 -3
- package/dist/factories/external-dns/types.js.map +1 -1
- package/dist/factories/harbor/compositions/harbor-installation.d.ts +610 -0
- package/dist/factories/harbor/compositions/harbor-installation.d.ts.map +1 -0
- package/dist/factories/harbor/compositions/harbor-installation.js +348 -0
- package/dist/factories/harbor/compositions/harbor-installation.js.map +1 -0
- package/dist/factories/harbor/compositions/index.d.ts +2 -0
- package/dist/factories/harbor/compositions/index.d.ts.map +1 -0
- package/dist/factories/harbor/compositions/index.js +2 -0
- package/dist/factories/harbor/compositions/index.js.map +1 -0
- package/dist/factories/harbor/index.d.ts +7 -0
- package/dist/factories/harbor/index.d.ts.map +1 -0
- package/dist/factories/harbor/index.js +7 -0
- package/dist/factories/harbor/index.js.map +1 -0
- package/dist/factories/harbor/provider/harbor-api.d.ts +123 -0
- package/dist/factories/harbor/provider/harbor-api.d.ts.map +1 -0
- package/dist/factories/harbor/provider/harbor-api.js +595 -0
- package/dist/factories/harbor/provider/harbor-api.js.map +1 -0
- package/dist/factories/harbor/provider/index.d.ts +4 -0
- package/dist/factories/harbor/provider/index.d.ts.map +1 -0
- package/dist/factories/harbor/provider/index.js +4 -0
- package/dist/factories/harbor/provider/index.js.map +1 -0
- package/dist/factories/harbor/provider/kubernetes-secret-store.d.ts +12 -0
- package/dist/factories/harbor/provider/kubernetes-secret-store.d.ts.map +1 -0
- package/dist/factories/harbor/provider/kubernetes-secret-store.js +81 -0
- package/dist/factories/harbor/provider/kubernetes-secret-store.js.map +1 -0
- package/dist/factories/harbor/provider/rook-s3-binding.d.ts +30 -0
- package/dist/factories/harbor/provider/rook-s3-binding.d.ts.map +1 -0
- package/dist/factories/harbor/provider/rook-s3-binding.js +74 -0
- package/dist/factories/harbor/provider/rook-s3-binding.js.map +1 -0
- package/dist/factories/harbor/resources/helm.d.ts +12 -0
- package/dist/factories/harbor/resources/helm.d.ts.map +1 -0
- package/dist/factories/harbor/resources/helm.js +46 -0
- package/dist/factories/harbor/resources/helm.js.map +1 -0
- package/dist/factories/harbor/resources/index.d.ts +2 -0
- package/dist/factories/harbor/resources/index.d.ts.map +1 -0
- package/dist/factories/harbor/resources/index.js +2 -0
- package/dist/factories/harbor/resources/index.js.map +1 -0
- package/dist/factories/harbor/types.d.ts +319 -0
- package/dist/factories/harbor/types.d.ts.map +1 -0
- package/dist/factories/harbor/types.js +252 -0
- package/dist/factories/harbor/types.js.map +1 -0
- package/dist/factories/harbor/utils/helm-values-mapper.d.ts +8 -0
- package/dist/factories/harbor/utils/helm-values-mapper.d.ts.map +1 -0
- package/dist/factories/harbor/utils/helm-values-mapper.js +322 -0
- package/dist/factories/harbor/utils/helm-values-mapper.js.map +1 -0
- package/dist/factories/harbor/utils/index.d.ts +2 -0
- package/dist/factories/harbor/utils/index.d.ts.map +1 -0
- package/dist/factories/harbor/utils/index.js +2 -0
- package/dist/factories/harbor/utils/index.js.map +1 -0
- package/dist/factories/helm/helm-release.d.ts +10 -0
- package/dist/factories/helm/helm-release.d.ts.map +1 -1
- package/dist/factories/helm/helm-release.js +30 -2
- package/dist/factories/helm/helm-release.js.map +1 -1
- package/dist/factories/helm/readiness-evaluators.d.ts.map +1 -1
- package/dist/factories/helm/readiness-evaluators.js +26 -1
- package/dist/factories/helm/readiness-evaluators.js.map +1 -1
- package/dist/factories/helm/types.d.ts +5 -0
- package/dist/factories/helm/types.d.ts.map +1 -1
- package/dist/factories/index.d.ts +1 -0
- package/dist/factories/index.d.ts.map +1 -1
- package/dist/factories/index.js +4 -0
- package/dist/factories/index.js.map +1 -1
- package/dist/factories/inngest/types.js +8 -8
- package/dist/factories/inngest/types.js.map +1 -1
- package/dist/factories/kubernetes/networking/network-policy.d.ts.map +1 -1
- package/dist/factories/kubernetes/networking/network-policy.js +34 -1
- package/dist/factories/kubernetes/networking/network-policy.js.map +1 -1
- package/dist/factories/ory/types.js +40 -40
- package/dist/factories/ory/types.js.map +1 -1
- package/dist/factories/rook/compositions/index.d.ts +1 -0
- package/dist/factories/rook/compositions/index.d.ts.map +1 -1
- package/dist/factories/rook/compositions/index.js +1 -0
- package/dist/factories/rook/compositions/index.js.map +1 -1
- package/dist/factories/rook/compositions/rook-ceph-operator-installation.d.ts +2 -0
- package/dist/factories/rook/compositions/rook-ceph-operator-installation.d.ts.map +1 -1
- package/dist/factories/rook/compositions/rook-ceph-operator-installation.js +17 -0
- package/dist/factories/rook/compositions/rook-ceph-operator-installation.js.map +1 -1
- package/dist/factories/rook/compositions/rook-ceph-platform.d.ts +181 -0
- package/dist/factories/rook/compositions/rook-ceph-platform.d.ts.map +1 -0
- package/dist/factories/rook/compositions/rook-ceph-platform.js +388 -0
- package/dist/factories/rook/compositions/rook-ceph-platform.js.map +1 -0
- package/dist/factories/rook/resources/bucket-storage-class.d.ts.map +1 -1
- package/dist/factories/rook/resources/bucket-storage-class.js +4 -1
- package/dist/factories/rook/resources/bucket-storage-class.js.map +1 -1
- package/dist/factories/rook/resources/ceph-object-store.d.ts.map +1 -1
- package/dist/factories/rook/resources/ceph-object-store.js +2 -0
- package/dist/factories/rook/resources/ceph-object-store.js.map +1 -1
- package/dist/factories/rook/resources/helm.d.ts +4 -0
- package/dist/factories/rook/resources/helm.d.ts.map +1 -1
- package/dist/factories/rook/resources/helm.js +22 -0
- package/dist/factories/rook/resources/helm.js.map +1 -1
- package/dist/factories/rook/types.d.ts +180 -1
- package/dist/factories/rook/types.d.ts.map +1 -1
- package/dist/factories/rook/types.js +100 -9
- package/dist/factories/rook/types.js.map +1 -1
- package/dist/factories/rook/utils/helm-values-mapper.d.ts +34 -1
- package/dist/factories/rook/utils/helm-values-mapper.d.ts.map +1 -1
- package/dist/factories/rook/utils/helm-values-mapper.js +207 -0
- package/dist/factories/rook/utils/helm-values-mapper.js.map +1 -1
- package/dist/factories/searxng/types.js +2 -2
- package/dist/factories/searxng/types.js.map +1 -1
- package/dist/factories/valkey/types.js +4 -4
- package/dist/factories/valkey/types.js.map +1 -1
- package/dist/factories/webapp/types.js +8 -8
- package/dist/factories/webapp/types.js.map +1 -1
- package/package.json +6 -1
|
@@ -0,0 +1,348 @@
|
|
|
1
|
+
import { kubernetesComposition } from '../../../core/composition/imperative.js';
|
|
2
|
+
import { Cel } from '../../../core/references/cel.js';
|
|
3
|
+
import { observedResource } from '../../../core/references/external-refs.js';
|
|
4
|
+
import { isKubernetesRef } from '../../../utils/type-guards.js';
|
|
5
|
+
import { certificate } from '../../cert-manager/resources/certificates.js';
|
|
6
|
+
import { configMap } from '../../kubernetes/config/config-map.js';
|
|
7
|
+
import { namespace } from '../../kubernetes/core/namespace.js';
|
|
8
|
+
import { networkPolicy } from '../../kubernetes/networking/network-policy.js';
|
|
9
|
+
import { DEFAULT_HARBOR_CHART_VERSION, DEFAULT_HARBOR_REPOSITORY_NAME, DEFAULT_HARBOR_REPOSITORY_URL, DEFAULT_HARBOR_VERSION, harborHelmRelease, harborHelmRepository, } from '../resources/helm.js';
|
|
10
|
+
import { HarborLocalInstallationConfigSchema, HarborProductionInstallationConfigSchema, HarborInstallationStatusSchema, } from '../types.js';
|
|
11
|
+
import { mapHarborLocalInstallationToHelmValues, mapHarborProductionInstallationToHelmValues, } from '../utils/helm-values-mapper.js';
|
|
12
|
+
const DEFAULT_HARBOR_NAMESPACE = 'harbor-system';
|
|
13
|
+
/** Install the official Harbor chart with a bounded, explicitly non-HA development profile. */
|
|
14
|
+
export const harborLocalInstallation = kubernetesComposition({
|
|
15
|
+
name: 'harbor-local-installation',
|
|
16
|
+
kind: 'HarborLocalInstallation',
|
|
17
|
+
spec: HarborLocalInstallationConfigSchema,
|
|
18
|
+
status: HarborInstallationStatusSchema,
|
|
19
|
+
}, (spec) => createHarborInstallation(spec, 'local-development'));
|
|
20
|
+
/** Install the official Harbor chart with external state and HA component requirements. */
|
|
21
|
+
export const harborProductionInstallation = kubernetesComposition({
|
|
22
|
+
name: 'harbor-production-installation',
|
|
23
|
+
kind: 'HarborProductionInstallation',
|
|
24
|
+
spec: HarborProductionInstallationConfigSchema,
|
|
25
|
+
status: HarborInstallationStatusSchema,
|
|
26
|
+
}, (spec) => createHarborInstallation(spec, 'production'), {
|
|
27
|
+
schemaFieldValidations: {
|
|
28
|
+
exposure: "self.tls.enabled && self.tls.source != 'none' && (self.type != 'ingress' || (has(self.ingress) && size(self.ingress.host) > 0)) && (self.tls.source != 'secret' || (has(self.tls.secretName) && size(self.tls.secretName) > 0))",
|
|
29
|
+
certificate: 'size(self.secretName) > 0',
|
|
30
|
+
storage: 'self.secure && !self.skipVerify',
|
|
31
|
+
networkPolicy: 'self.enabled && size(self.ingressNamespaceLabels) > 0 && (size(self.egressNamespaceLabels) > 0 || (has(self.egressCidrs) && size(self.egressCidrs) > 0))',
|
|
32
|
+
},
|
|
33
|
+
});
|
|
34
|
+
function createHarborInstallation(spec, profile) {
|
|
35
|
+
const graphMode = isKubernetesRef(spec.name);
|
|
36
|
+
const targetNamespace = graphMode
|
|
37
|
+
? Cel.expr('has(schema.spec.namespace) ? schema.spec.namespace : "harbor-system"')
|
|
38
|
+
: (spec.namespace ?? DEFAULT_HARBOR_NAMESPACE);
|
|
39
|
+
const ownsTargetNamespace = graphMode
|
|
40
|
+
? Cel.expr('!has(schema.spec.namespaceOwnership) || schema.spec.namespaceOwnership == "owned"')
|
|
41
|
+
: spec.namespaceOwnership !== 'external';
|
|
42
|
+
const repositoryName = graphMode
|
|
43
|
+
? Cel.expr('has(schema.spec.repositoryName) ? schema.spec.repositoryName : "harbor"')
|
|
44
|
+
: (spec.repositoryName ?? DEFAULT_HARBOR_REPOSITORY_NAME);
|
|
45
|
+
const repositoryNamespace = graphMode
|
|
46
|
+
? Cel.expr('has(schema.spec.repositoryNamespace) ? schema.spec.repositoryNamespace : (has(schema.spec.namespace) ? schema.spec.namespace : "harbor-system")')
|
|
47
|
+
: (spec.repositoryNamespace ?? targetNamespace);
|
|
48
|
+
const repositoryUrl = graphMode
|
|
49
|
+
? Cel.expr('has(schema.spec.repositoryUrl) ? schema.spec.repositoryUrl : "https://helm.goharbor.io"')
|
|
50
|
+
: (spec.repositoryUrl ?? DEFAULT_HARBOR_REPOSITORY_URL);
|
|
51
|
+
const ownsRepositoryNamespace = graphMode
|
|
52
|
+
? Cel.expr('!has(schema.spec.repositoryNamespaceOwnership) || schema.spec.repositoryNamespaceOwnership == "owned"')
|
|
53
|
+
: spec.repositoryNamespaceOwnership !== 'external';
|
|
54
|
+
const chartVersion = graphMode
|
|
55
|
+
? Cel.expr('has(schema.spec.chartVersion) ? schema.spec.chartVersion : "1.19.1"')
|
|
56
|
+
: (spec.chartVersion ?? DEFAULT_HARBOR_CHART_VERSION);
|
|
57
|
+
const harborVersion = graphMode
|
|
58
|
+
? Cel.expr('has(schema.spec.harborVersion) ? schema.spec.harborVersion : "v2.15.1"')
|
|
59
|
+
: (spec.harborVersion ?? DEFAULT_HARBOR_VERSION);
|
|
60
|
+
const policyEnabled = graphMode
|
|
61
|
+
? Cel.expr('has(schema.spec.networkPolicy) && schema.spec.networkPolicy.enabled')
|
|
62
|
+
: (spec.networkPolicy?.enabled ?? false);
|
|
63
|
+
namespace({
|
|
64
|
+
id: 'harborNamespace',
|
|
65
|
+
metadata: {
|
|
66
|
+
name: targetNamespace,
|
|
67
|
+
labels: {
|
|
68
|
+
'app.kubernetes.io/name': 'harbor',
|
|
69
|
+
'app.kubernetes.io/instance': spec.name,
|
|
70
|
+
'app.kubernetes.io/managed-by': 'typekro',
|
|
71
|
+
'typekro.dev/profile': profile,
|
|
72
|
+
},
|
|
73
|
+
},
|
|
74
|
+
}).withIncludeWhen(ownsTargetNamespace);
|
|
75
|
+
namespace({
|
|
76
|
+
id: 'harborRepositoryNamespace',
|
|
77
|
+
metadata: {
|
|
78
|
+
name: repositoryNamespace,
|
|
79
|
+
labels: {
|
|
80
|
+
'app.kubernetes.io/name': 'harbor-helm-source',
|
|
81
|
+
'app.kubernetes.io/managed-by': 'typekro',
|
|
82
|
+
},
|
|
83
|
+
},
|
|
84
|
+
}).withIncludeWhen(graphMode
|
|
85
|
+
? Cel.expr('(!has(schema.spec.repositoryNamespaceOwnership) || schema.spec.repositoryNamespaceOwnership == "owned") && (has(schema.spec.repositoryNamespace) && schema.spec.repositoryNamespace != (has(schema.spec.namespace) ? schema.spec.namespace : "harbor-system"))')
|
|
86
|
+
: ownsRepositoryNamespace && repositoryNamespace !== targetNamespace);
|
|
87
|
+
const repository = harborHelmRepository({
|
|
88
|
+
id: 'harborRepository',
|
|
89
|
+
name: repositoryName,
|
|
90
|
+
namespace: repositoryNamespace,
|
|
91
|
+
url: repositoryUrl,
|
|
92
|
+
});
|
|
93
|
+
configMap({
|
|
94
|
+
id: 'harborMetadata',
|
|
95
|
+
metadata: {
|
|
96
|
+
name: graphMode
|
|
97
|
+
? Cel.expr('schema.spec.name + "-typekro-metadata"')
|
|
98
|
+
: `${spec.name}-typekro-metadata`,
|
|
99
|
+
namespace: targetNamespace,
|
|
100
|
+
labels: {
|
|
101
|
+
'app.kubernetes.io/name': 'harbor',
|
|
102
|
+
'app.kubernetes.io/managed-by': 'typekro',
|
|
103
|
+
},
|
|
104
|
+
annotations: {
|
|
105
|
+
'typekro.dev/endpoint': spec.exposure.externalUrl,
|
|
106
|
+
'typekro.dev/chart-version': chartVersion,
|
|
107
|
+
'typekro.dev/harbor-version': harborVersion,
|
|
108
|
+
'typekro.dev/profile': profile,
|
|
109
|
+
'typekro.dev/tls-enabled': graphMode
|
|
110
|
+
? Cel.expr(spec.exposure.tls.enabled, ' ? "true" : "false"')
|
|
111
|
+
: String(spec.exposure.tls.enabled),
|
|
112
|
+
'typekro.dev/network-policy-enabled': graphMode
|
|
113
|
+
? Cel.expr(policyEnabled, ' ? "true" : "false"')
|
|
114
|
+
: String(policyEnabled),
|
|
115
|
+
},
|
|
116
|
+
},
|
|
117
|
+
immutable: true,
|
|
118
|
+
data: {},
|
|
119
|
+
});
|
|
120
|
+
certificate({
|
|
121
|
+
id: 'harborCertificate',
|
|
122
|
+
name: graphMode
|
|
123
|
+
? Cel.expr('schema.spec.certificate.secretName + "-certificate"')
|
|
124
|
+
: `${spec.certificate?.secretName ?? spec.name}-certificate`,
|
|
125
|
+
namespace: targetNamespace,
|
|
126
|
+
spec: {
|
|
127
|
+
secretName: graphMode
|
|
128
|
+
? Cel.expr('schema.spec.certificate.secretName')
|
|
129
|
+
: (spec.certificate?.secretName ?? ''),
|
|
130
|
+
dnsNames: [
|
|
131
|
+
graphMode
|
|
132
|
+
? Cel.expr('schema.spec.exposure.ingress.host')
|
|
133
|
+
: (spec.exposure.ingress?.host ?? ''),
|
|
134
|
+
],
|
|
135
|
+
issuerRef: {
|
|
136
|
+
name: graphMode
|
|
137
|
+
? Cel.expr('schema.spec.certificate.issuerRef.name')
|
|
138
|
+
: (spec.certificate?.issuerRef.name ?? ''),
|
|
139
|
+
kind: graphMode
|
|
140
|
+
? Cel.expr('has(schema.spec.certificate.issuerRef.kind) ? schema.spec.certificate.issuerRef.kind : "ClusterIssuer"')
|
|
141
|
+
: (spec.certificate?.issuerRef.kind ?? 'ClusterIssuer'),
|
|
142
|
+
group: graphMode
|
|
143
|
+
? Cel.expr('has(schema.spec.certificate.issuerRef.group) ? schema.spec.certificate.issuerRef.group : "cert-manager.io"')
|
|
144
|
+
: (spec.certificate?.issuerRef.group ?? 'cert-manager.io'),
|
|
145
|
+
},
|
|
146
|
+
duration: graphMode
|
|
147
|
+
? Cel.expr('has(schema.spec.certificate.duration) ? schema.spec.certificate.duration : "2160h"')
|
|
148
|
+
: (spec.certificate?.duration ?? '2160h'),
|
|
149
|
+
renewBefore: graphMode
|
|
150
|
+
? Cel.expr('has(schema.spec.certificate.renewBefore) ? schema.spec.certificate.renewBefore : "720h"')
|
|
151
|
+
: (spec.certificate?.renewBefore ?? '720h'),
|
|
152
|
+
},
|
|
153
|
+
}).withIncludeWhen(graphMode
|
|
154
|
+
? Cel.expr('schema.spec.exposure.tls.source == "cert-manager"')
|
|
155
|
+
: spec.exposure.tls.source === 'cert-manager');
|
|
156
|
+
const values = profile === 'production'
|
|
157
|
+
? mapHarborProductionInstallationToHelmValues(spec)
|
|
158
|
+
: mapHarborLocalInstallationToHelmValues(spec);
|
|
159
|
+
const storageCredentials = observedResource({
|
|
160
|
+
apiVersion: 'v1',
|
|
161
|
+
kind: 'Secret',
|
|
162
|
+
metadata: { name: spec.storage.existingSecret, namespace: targetNamespace },
|
|
163
|
+
id: 'harborStorageCredentials',
|
|
164
|
+
});
|
|
165
|
+
const adminCredentials = observeHarborSecret('harborAdminCredentials', spec.adminPasswordSecret.name, targetNamespace);
|
|
166
|
+
const encryptionKey = observeHarborSecret('harborEncryptionKey', spec.componentSecrets.encryptionKey, targetNamespace);
|
|
167
|
+
const coreCredentials = observeHarborSecret('harborCoreCredentials', spec.componentSecrets.core, targetNamespace);
|
|
168
|
+
const jobserviceCredentials = observeHarborSecret('harborJobserviceCredentials', spec.componentSecrets.jobservice, targetNamespace);
|
|
169
|
+
const registryCredentials = observeHarborSecret('harborRegistryCredentials', spec.componentSecrets.registry, targetNamespace);
|
|
170
|
+
const registryBasicAuth = observeHarborSecret('harborRegistryBasicAuth', spec.componentSecrets.registryCredentials, targetNamespace);
|
|
171
|
+
const databaseCredentials = profile === 'production'
|
|
172
|
+
? observedResource({
|
|
173
|
+
apiVersion: 'v1',
|
|
174
|
+
kind: 'Secret',
|
|
175
|
+
metadata: {
|
|
176
|
+
name: spec.database.existingSecret,
|
|
177
|
+
namespace: targetNamespace,
|
|
178
|
+
},
|
|
179
|
+
id: 'harborDatabaseCredentials',
|
|
180
|
+
})
|
|
181
|
+
: undefined;
|
|
182
|
+
const cacheCredentials = profile === 'production'
|
|
183
|
+
? observedResource({
|
|
184
|
+
apiVersion: 'v1',
|
|
185
|
+
kind: 'Secret',
|
|
186
|
+
metadata: {
|
|
187
|
+
name: spec.cache.existingSecret,
|
|
188
|
+
namespace: targetNamespace,
|
|
189
|
+
},
|
|
190
|
+
id: 'harborCacheCredentials',
|
|
191
|
+
})
|
|
192
|
+
: undefined;
|
|
193
|
+
const defaultPolicy = networkPolicy({
|
|
194
|
+
id: 'harborNetworkPolicy',
|
|
195
|
+
metadata: {
|
|
196
|
+
name: graphMode ? Cel.expr('schema.spec.name + "-network"') : `${spec.name}-network`,
|
|
197
|
+
namespace: targetNamespace,
|
|
198
|
+
labels: { 'app.kubernetes.io/name': 'harbor', 'app.kubernetes.io/managed-by': 'typekro' },
|
|
199
|
+
},
|
|
200
|
+
spec: {
|
|
201
|
+
podSelector: { matchLabels: { release: spec.name, app: 'harbor' } },
|
|
202
|
+
policyTypes: ['Ingress', 'Egress'],
|
|
203
|
+
ingress: [{ _from: [{ podSelector: {} }] }],
|
|
204
|
+
egress: harborEgressRules(spec, graphMode),
|
|
205
|
+
},
|
|
206
|
+
}).withIncludeWhen(policyEnabled);
|
|
207
|
+
const ingressPolicy = networkPolicy({
|
|
208
|
+
id: 'harborIngressNetworkPolicy',
|
|
209
|
+
metadata: {
|
|
210
|
+
name: graphMode ? Cel.expr('schema.spec.name + "-ingress"') : `${spec.name}-ingress`,
|
|
211
|
+
namespace: targetNamespace,
|
|
212
|
+
labels: { 'app.kubernetes.io/name': 'harbor', 'app.kubernetes.io/managed-by': 'typekro' },
|
|
213
|
+
},
|
|
214
|
+
spec: {
|
|
215
|
+
podSelector: { matchLabels: { release: spec.name, app: 'harbor' } },
|
|
216
|
+
policyTypes: ['Ingress'],
|
|
217
|
+
ingress: harborIngressRules(spec, graphMode),
|
|
218
|
+
},
|
|
219
|
+
}).withIncludeWhen(policyEnabled);
|
|
220
|
+
const release = harborHelmRelease({
|
|
221
|
+
id: 'harborRelease',
|
|
222
|
+
name: spec.name,
|
|
223
|
+
namespace: targetNamespace,
|
|
224
|
+
version: chartVersion,
|
|
225
|
+
repositoryName,
|
|
226
|
+
repositoryNamespace,
|
|
227
|
+
repositoryUrl,
|
|
228
|
+
values,
|
|
229
|
+
});
|
|
230
|
+
release.dependsOn(repository);
|
|
231
|
+
// KRO must model external Secret observations explicitly so its controller
|
|
232
|
+
// delays the HelmRelease until they exist. Direct mode has no deployable
|
|
233
|
+
// graph node for an external observation; its caller prepares those Secrets
|
|
234
|
+
// before deploy(), and Flux readiness remains the integration check.
|
|
235
|
+
if (graphMode) {
|
|
236
|
+
release.dependsOn(storageCredentials);
|
|
237
|
+
release.dependsOn(adminCredentials);
|
|
238
|
+
release.dependsOn(encryptionKey);
|
|
239
|
+
release.dependsOn(coreCredentials);
|
|
240
|
+
release.dependsOn(jobserviceCredentials);
|
|
241
|
+
release.dependsOn(registryCredentials);
|
|
242
|
+
release.dependsOn(registryBasicAuth);
|
|
243
|
+
if (databaseCredentials)
|
|
244
|
+
release.dependsOn(databaseCredentials);
|
|
245
|
+
if (cacheCredentials)
|
|
246
|
+
release.dependsOn(cacheCredentials);
|
|
247
|
+
}
|
|
248
|
+
// Production always requires the policies, so they are safe hard
|
|
249
|
+
// dependencies. The local profile permits policy omission; a dependency on
|
|
250
|
+
// a skipped KRO child would otherwise make the HelmRelease unreconcilable.
|
|
251
|
+
if (profile === 'production') {
|
|
252
|
+
release.dependsOn(defaultPolicy);
|
|
253
|
+
release.dependsOn(ingressPolicy);
|
|
254
|
+
}
|
|
255
|
+
const ready = Cel.expr(release.status.conditions, '.exists(c, c.type == "Ready" && c.status == "True")');
|
|
256
|
+
const readyExpression = 'harborRelease.status.conditions.exists(c, c.type == "Ready" && c.status == "True")';
|
|
257
|
+
const failed = Cel.expr(release.status.conditions, '.exists(c, c.type == "Ready" && c.status == "False")');
|
|
258
|
+
return {
|
|
259
|
+
ready,
|
|
260
|
+
failed,
|
|
261
|
+
phase: Cel.expr('harborRelease.status.conditions.exists(c, c.type == "Ready" && c.status == "False") ? "Failed" : (harborRelease.status.conditions.exists(c, c.type == "Ready" && c.status == "True") ? "Ready" : "Installing")'),
|
|
262
|
+
endpoint: Cel.expr('harborMetadata.metadata.annotations["typekro.dev/endpoint"]'),
|
|
263
|
+
chartVersion: Cel.expr('harborMetadata.metadata.annotations["typekro.dev/chart-version"]'),
|
|
264
|
+
harborVersion: Cel.expr('harborMetadata.metadata.annotations["typekro.dev/harbor-version"]'),
|
|
265
|
+
profile: Cel.expr('harborMetadata.metadata.annotations["typekro.dev/profile"]'),
|
|
266
|
+
observedGeneration: Cel.expr('has(harborRelease.status.observedGeneration) ? harborRelease.status.observedGeneration : 0'),
|
|
267
|
+
tlsEnabled: Cel.expr('harborMetadata.metadata.annotations["typekro.dev/tls-enabled"] == "true"'),
|
|
268
|
+
// These fields are installation-capability readiness, not merely
|
|
269
|
+
// credential-presence flags. An observed Secret is a prerequisite, but it
|
|
270
|
+
// is not evidence that Harbor has successfully connected to the provider.
|
|
271
|
+
// The HelmRelease Ready condition is the chart's bounded integration
|
|
272
|
+
// acknowledgement, so do not report a provider ready ahead of it.
|
|
273
|
+
storageReady: graphMode
|
|
274
|
+
? Cel.expr(`${readyExpression} && harborStorageCredentials.metadata.name != ""`)
|
|
275
|
+
: ready,
|
|
276
|
+
databaseReady: databaseCredentials
|
|
277
|
+
? graphMode
|
|
278
|
+
? Cel.expr(`${readyExpression} && harborDatabaseCredentials.metadata.name != ""`)
|
|
279
|
+
: ready
|
|
280
|
+
: ready,
|
|
281
|
+
cacheReady: cacheCredentials
|
|
282
|
+
? graphMode
|
|
283
|
+
? Cel.expr(`${readyExpression} && harborCacheCredentials.metadata.name != ""`)
|
|
284
|
+
: ready
|
|
285
|
+
: ready,
|
|
286
|
+
networkPolicyReady: graphMode
|
|
287
|
+
? Cel.expr('harborMetadata.metadata.annotations["typekro.dev/network-policy-enabled"] != "true" || (harborNetworkPolicy.metadata.name != "" && harborIngressNetworkPolicy.metadata.name != "")')
|
|
288
|
+
: policyEnabled
|
|
289
|
+
? Cel.expr('harborNetworkPolicy.metadata.name != "" && harborIngressNetworkPolicy.metadata.name != ""')
|
|
290
|
+
: true,
|
|
291
|
+
conditions: release.status.conditions,
|
|
292
|
+
};
|
|
293
|
+
}
|
|
294
|
+
function observeHarborSecret(id, name, namespaceName) {
|
|
295
|
+
return observedResource({
|
|
296
|
+
apiVersion: 'v1',
|
|
297
|
+
kind: 'Secret',
|
|
298
|
+
metadata: { name, namespace: namespaceName },
|
|
299
|
+
id,
|
|
300
|
+
});
|
|
301
|
+
}
|
|
302
|
+
function harborIngressRules(spec, graphMode) {
|
|
303
|
+
if (graphMode) {
|
|
304
|
+
return Cel.expr('has(schema.spec.networkPolicy.ingressNamespaceLabels) ? [{"from":[{"namespaceSelector":{"matchLabels":schema.spec.networkPolicy.ingressNamespaceLabels}}],"ports":[{"protocol":"TCP","port":8080},{"protocol":"TCP","port":8443}]}] : []');
|
|
305
|
+
}
|
|
306
|
+
const labels = spec.networkPolicy?.ingressNamespaceLabels;
|
|
307
|
+
return labels
|
|
308
|
+
? [
|
|
309
|
+
{
|
|
310
|
+
_from: [{ namespaceSelector: { matchLabels: labels } }],
|
|
311
|
+
ports: [
|
|
312
|
+
{ protocol: 'TCP', port: 8080 },
|
|
313
|
+
{ protocol: 'TCP', port: 8443 },
|
|
314
|
+
],
|
|
315
|
+
},
|
|
316
|
+
]
|
|
317
|
+
: [];
|
|
318
|
+
}
|
|
319
|
+
function harborEgressRules(spec, graphMode) {
|
|
320
|
+
if (graphMode) {
|
|
321
|
+
return Cel.expr('[{"to":[{"podSelector":{}}]},{"to":[{"namespaceSelector":{"matchLabels":{"kubernetes.io/metadata.name":"kube-system"}},"podSelector":{"matchLabels":{"k8s-app":"kube-dns"}}}],"ports":[{"protocol":"UDP","port":53},{"protocol":"TCP","port":53}]}] + (has(schema.spec.networkPolicy.egressNamespaceLabels) ? schema.spec.networkPolicy.egressNamespaceLabels : []).map(labels, {"to":[{"namespaceSelector":{"matchLabels":labels}}]}) + (has(schema.spec.networkPolicy.egressCidrs) ? schema.spec.networkPolicy.egressCidrs.map(cidr, {"to":[{"ipBlock":{"cidr":cidr}}]}) : [])');
|
|
322
|
+
}
|
|
323
|
+
return [
|
|
324
|
+
{ to: [{ podSelector: {} }] },
|
|
325
|
+
{
|
|
326
|
+
to: [
|
|
327
|
+
{
|
|
328
|
+
namespaceSelector: { matchLabels: { 'kubernetes.io/metadata.name': 'kube-system' } },
|
|
329
|
+
podSelector: { matchLabels: { 'k8s-app': 'kube-dns' } },
|
|
330
|
+
},
|
|
331
|
+
],
|
|
332
|
+
ports: [
|
|
333
|
+
{ protocol: 'UDP', port: 53 },
|
|
334
|
+
{ protocol: 'TCP', port: 53 },
|
|
335
|
+
],
|
|
336
|
+
},
|
|
337
|
+
...(spec.networkPolicy?.egressNamespaceLabels ?? []).map((matchLabels) => ({
|
|
338
|
+
to: [{ namespaceSelector: { matchLabels } }],
|
|
339
|
+
})),
|
|
340
|
+
...(spec.networkPolicy?.egressCidrs ?? []).map((cidr) => ({
|
|
341
|
+
to: [{ ipBlock: { cidr } }],
|
|
342
|
+
})),
|
|
343
|
+
];
|
|
344
|
+
}
|
|
345
|
+
/** Explicit shared-platform lifecycle names. */
|
|
346
|
+
export const harborLocalPlatform = harborLocalInstallation;
|
|
347
|
+
export const harborProductionPlatform = harborProductionInstallation;
|
|
348
|
+
//# sourceMappingURL=harbor-installation.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"harbor-installation.js","sourceRoot":"","sources":["../../../../src/factories/harbor/compositions/harbor-installation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAC9E,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,EAC9B,6BAA6B,EAC7B,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,mCAAmC,EAEnC,wCAAwC,EACxC,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sCAAsC,EACtC,2CAA2C,GAC5C,MAAM,gCAAgC,CAAC;AAExC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAEjD,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAC1D;IACE,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,yBAAyB;IAC/B,IAAI,EAAE,mCAAmC;IACzC,MAAM,EAAE,8BAA8B;CACvC,EACD,CAAC,IAAmC,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAC7F,CAAC;AAEF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,4BAA4B,GAAG,qBAAqB,CAC/D;IACE,IAAI,EAAE,gCAAgC;IACtC,IAAI,EAAE,8BAA8B;IACpC,IAAI,EAAE,wCAAwC;IAC9C,MAAM,EAAE,8BAA8B;CACvC,EACD,CAAC,IAAwC,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,EAAE,YAAY,CAAC,EAC1F;IACE,sBAAsB,EAAE;QACtB,QAAQ,EACN,iOAAiO;QACnO,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,iCAAiC;QAC1C,aAAa,EACX,0JAA0J;KAC7J;CACF,CACF,CAAC;AAEF,SAAS,wBAAwB,CAC/B,IAAwE,EACxE,OAA2C;IAE3C,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,SAAS;QAC/B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,sEAAsE,CAAC;QAC1F,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,wBAAwB,CAAC,CAAC;IACjD,MAAM,mBAAmB,GAAG,SAAS;QACnC,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,mFAAmF,CACpF;QACH,CAAC,CAAC,IAAI,CAAC,kBAAkB,KAAK,UAAU,CAAC;IAC3C,MAAM,cAAc,GAAG,SAAS;QAC9B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,yEAAyE,CAAC;QAC7F,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,8BAA8B,CAAC,CAAC;IAC5D,MAAM,mBAAmB,GAAG,SAAS;QACnC,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,iJAAiJ,CAClJ;QACH,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,IAAI,eAAe,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,SAAS;QAC7B,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,yFAAyF,CAC1F;QACH,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,6BAA6B,CAAC,CAAC;IAC1D,MAAM,uBAAuB,GAAG,SAAS;QACvC,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,uGAAuG,CACxG;QACH,CAAC,CAAC,IAAI,CAAC,4BAA4B,KAAK,UAAU,CAAC;IACrD,MAAM,YAAY,GAAG,SAAS;QAC5B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,qEAAqE,CAAC;QACzF,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,4BAA4B,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,SAAS;QAC7B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,wEAAwE,CAAC;QAC5F,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,sBAAsB,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,SAAS;QAC7B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,qEAAqE,CAAC;QAC1F,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC;IAE3C,SAAS,CAAC;QACR,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE;YACR,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE;gBACN,wBAAwB,EAAE,QAAQ;gBAClC,4BAA4B,EAAE,IAAI,CAAC,IAAI;gBACvC,8BAA8B,EAAE,SAAS;gBACzC,qBAAqB,EAAE,OAAO;aAC/B;SACF;KACF,CAAC,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;IAExC,SAAS,CAAC;QACR,EAAE,EAAE,2BAA2B;QAC/B,QAAQ,EAAE;YACR,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE;gBACN,wBAAwB,EAAE,oBAAoB;gBAC9C,8BAA8B,EAAE,SAAS;aAC1C;SACF;KACF,CAAC,CAAC,eAAe,CAChB,SAAS;QACP,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,gQAAgQ,CACjQ;QACH,CAAC,CAAC,uBAAuB,IAAI,mBAAmB,KAAK,eAAe,CACvE,CAAC;IAEF,MAAM,UAAU,GAAG,oBAAoB,CAAC;QACtC,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,mBAAmB;QAC9B,GAAG,EAAE,aAAa;KACnB,CAAC,CAAC;IAEH,SAAS,CAAC;QACR,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,SAAS;gBACb,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,wCAAwC,CAAC;gBAC5D,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB;YACnC,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE;gBACN,wBAAwB,EAAE,QAAQ;gBAClC,8BAA8B,EAAE,SAAS;aAC1C;YACD,WAAW,EAAE;gBACX,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;gBACjD,2BAA2B,EAAE,YAAY;gBACzC,4BAA4B,EAAE,aAAa;gBAC3C,qBAAqB,EAAE,OAAO;gBAC9B,yBAAyB,EAAE,SAAS;oBAClC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC;oBACpE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBACrC,oCAAoC,EAAE,SAAS;oBAC7C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,aAAa,EAAE,qBAAqB,CAAC;oBACxD,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;aAC1B;SACF;QACD,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IAEH,WAAW,CAAC;QACV,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,SAAS;YACb,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,qDAAqD,CAAC;YACzE,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,IAAI,IAAI,CAAC,IAAI,cAAc;QAC9D,SAAS,EAAE,eAAe;QAC1B,IAAI,EAAE;YACJ,UAAU,EAAE,SAAS;gBACnB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,oCAAoC,CAAC;gBACxD,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,IAAI,EAAE,CAAC;YACxC,QAAQ,EAAE;gBACR,SAAS;oBACP,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,mCAAmC,CAAC;oBACvD,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;aACxC;YACD,SAAS,EAAE;gBACT,IAAI,EAAE,SAAS;oBACb,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,wCAAwC,CAAC;oBAC5D,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC5C,IAAI,EAAE,SAAS;oBACb,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,wGAAwG,CACzG;oBACH,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,IAAI,eAAe,CAAC;gBACzD,KAAK,EAAE,SAAS;oBACd,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,4GAA4G,CAC7G;oBACH,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,KAAK,IAAI,iBAAiB,CAAC;aAC7D;YACD,QAAQ,EAAE,SAAS;gBACjB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,oFAAoF,CACrF;gBACH,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,IAAI,OAAO,CAAC;YAC3C,WAAW,EAAE,SAAS;gBACpB,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,yFAAyF,CAC1F;gBACH,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,IAAI,MAAM,CAAC;SAC9C;KACF,CAAC,CAAC,eAAe,CAChB,SAAS;QACP,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,mDAAmD,CAAC;QACxE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,cAAc,CAChD,CAAC;IAEF,MAAM,MAAM,GACV,OAAO,KAAK,YAAY;QACtB,CAAC,CAAC,2CAA2C,CAAC,IAA0C,CAAC;QACzF,CAAC,CAAC,sCAAsC,CAAC,IAAqC,CAAC,CAAC;IAEpF,MAAM,kBAAkB,GAAG,gBAAgB,CAA+C;QACxF,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE;QAC3E,EAAE,EAAE,0BAA0B;KAC/B,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,mBAAmB,CAC1C,wBAAwB,EACxB,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAC7B,eAAe,CAChB,CAAC;IACF,MAAM,aAAa,GAAG,mBAAmB,CACvC,qBAAqB,EACrB,IAAI,CAAC,gBAAgB,CAAC,aAAa,EACnC,eAAe,CAChB,CAAC;IACF,MAAM,eAAe,GAAG,mBAAmB,CACzC,uBAAuB,EACvB,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAC1B,eAAe,CAChB,CAAC;IACF,MAAM,qBAAqB,GAAG,mBAAmB,CAC/C,6BAA6B,EAC7B,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAChC,eAAe,CAChB,CAAC;IACF,MAAM,mBAAmB,GAAG,mBAAmB,CAC7C,2BAA2B,EAC3B,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAC9B,eAAe,CAChB,CAAC;IACF,MAAM,iBAAiB,GAAG,mBAAmB,CAC3C,yBAAyB,EACzB,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,EACzC,eAAe,CAChB,CAAC;IACF,MAAM,mBAAmB,GACvB,OAAO,KAAK,YAAY;QACtB,CAAC,CAAC,gBAAgB,CAA+C;YAC7D,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE;gBACR,IAAI,EAAG,IAA2C,CAAC,QAAQ,CAAC,cAAc;gBAC1E,SAAS,EAAE,eAAe;aAC3B;YACD,EAAE,EAAE,2BAA2B;SAChC,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,gBAAgB,GACpB,OAAO,KAAK,YAAY;QACtB,CAAC,CAAC,gBAAgB,CAA+C;YAC7D,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE;gBACR,IAAI,EAAG,IAA2C,CAAC,KAAK,CAAC,cAAc;gBACvE,SAAS,EAAE,eAAe;aAC3B;YACD,EAAE,EAAE,wBAAwB;SAC7B,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,aAAa,GAAG,aAAa,CAAC;QAClC,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE;YACR,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,+BAA+B,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,UAAU;YAC5F,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,8BAA8B,EAAE,SAAS,EAAE;SAC1F;QACD,IAAI,EAAE;YACJ,WAAW,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACnE,WAAW,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;YAClC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,EAAE,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC;SAC3C;KACF,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAClC,MAAM,aAAa,GAAG,aAAa,CAAC;QAClC,EAAE,EAAE,4BAA4B;QAChC,QAAQ,EAAE;YACR,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAS,+BAA+B,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,UAAU;YAC5F,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,8BAA8B,EAAE,SAAS,EAAE;SAC1F;QACD,IAAI,EAAE;YACJ,WAAW,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACnE,WAAW,EAAE,CAAC,SAAS,CAAC;YACxB,OAAO,EAAE,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC;SAC7C;KACF,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,iBAAiB,CAAC;QAChC,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,eAAe;QAC1B,OAAO,EAAE,YAAY;QACrB,cAAc;QACd,mBAAmB;QACnB,aAAa;QACb,MAAM;KACP,CAAC,CAAC;IACH,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9B,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,qEAAqE;IACrE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACtC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACpC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACjC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACnC,OAAO,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACzC,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACvC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACrC,IAAI,mBAAmB;YAAE,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAChE,IAAI,gBAAgB;YAAE,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC5D,CAAC;IACD,iEAAiE;IACjE,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACjC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CACpB,OAAO,CAAC,MAAM,CAAC,UAAU,EACzB,qDAAqD,CACtD,CAAC;IACF,MAAM,eAAe,GACnB,oFAAoF,CAAC;IACvF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CACrB,OAAO,CAAC,MAAM,CAAC,UAAU,EACzB,sDAAsD,CACvD,CAAC;IACF,OAAO;QACL,KAAK;QACL,MAAM;QACN,KAAK,EAAE,GAAG,CAAC,IAAI,CACb,gNAAgN,CACjN;QACD,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAS,6DAA6D,CAAC;QACzF,YAAY,EAAE,GAAG,CAAC,IAAI,CACpB,kEAAkE,CACnE;QACD,aAAa,EAAE,GAAG,CAAC,IAAI,CACrB,mEAAmE,CACpE;QACD,OAAO,EAAE,GAAG,CAAC,IAAI,CACf,4DAA4D,CAC7D;QACD,kBAAkB,EAAE,GAAG,CAAC,IAAI,CAC1B,4FAA4F,CAC7F;QACD,UAAU,EAAE,GAAG,CAAC,IAAI,CAClB,0EAA0E,CAC3E;QACD,iEAAiE;QACjE,0EAA0E;QAC1E,0EAA0E;QAC1E,qEAAqE;QACrE,kEAAkE;QAClE,YAAY,EAAE,SAAS;YACrB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,GAAG,eAAe,kDAAkD,CAAC;YACzF,CAAC,CAAC,KAAK;QACT,aAAa,EAAE,mBAAmB;YAChC,CAAC,CAAC,SAAS;gBACT,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,GAAG,eAAe,mDAAmD,CAAC;gBAC1F,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,KAAK;QACT,UAAU,EAAE,gBAAgB;YAC1B,CAAC,CAAC,SAAS;gBACT,CAAC,CAAC,GAAG,CAAC,IAAI,CAAU,GAAG,eAAe,gDAAgD,CAAC;gBACvF,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,KAAK;QACT,kBAAkB,EAAE,SAAS;YAC3B,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,oLAAoL,CACrL;YACH,CAAC,CAAC,aAAa;gBACb,CAAC,CAAC,GAAG,CAAC,IAAI,CACN,2FAA2F,CAC5F;gBACH,CAAC,CAAC,IAAI;QACV,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU,EAAE,IAAY,EAAE,aAAqB;IAC1E,OAAO,gBAAgB,CAA+C;QACpE,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE;QAC5C,EAAE;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAwE,EACxE,SAAkB;IAElB,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,IAAI,CAGb,0OAA0O,CAC3O,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,sBAAsB,CAAC;IAC1D,OAAO,MAAM;QACX,CAAC,CAAC;YACE;gBACE,KAAK,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC;gBACvD,KAAK,EAAE;oBACL,EAAE,QAAQ,EAAE,KAAc,EAAE,IAAI,EAAE,IAAI,EAAE;oBACxC,EAAE,QAAQ,EAAE,KAAc,EAAE,IAAI,EAAE,IAAI,EAAE;iBACzC;aACF;SACF;QACH,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAwE,EACxE,SAAkB;IAElB,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,IAAI,CAGb,kjBAAkjB,CACnjB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE;QAC7B;YACE,EAAE,EAAE;gBACF;oBACE,iBAAiB,EAAE,EAAE,WAAW,EAAE,EAAE,6BAA6B,EAAE,aAAa,EAAE,EAAE;oBACpF,WAAW,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE;iBACxD;aACF;YACD,KAAK,EAAE;gBACL,EAAE,QAAQ,EAAE,KAAc,EAAE,IAAI,EAAE,EAAE,EAAE;gBACtC,EAAE,QAAQ,EAAE,KAAc,EAAE,IAAI,EAAE,EAAE,EAAE;aACvC;SACF;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,qBAAqB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACzE,EAAE,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxD,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;SAC5B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAC3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/harbor/compositions/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/harbor/compositions/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
/** Official Harbor registry platform and API resources. */
|
|
2
|
+
export * from './compositions/index.js';
|
|
3
|
+
export * from './provider/index.js';
|
|
4
|
+
export * from './resources/index.js';
|
|
5
|
+
export * from './types.js';
|
|
6
|
+
export * from './utils/index.js';
|
|
7
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/factories/harbor/index.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC"}
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
/** Official Harbor registry platform and API resources. */
|
|
2
|
+
export * from './compositions/index.js';
|
|
3
|
+
export * from './provider/index.js';
|
|
4
|
+
export * from './resources/index.js';
|
|
5
|
+
export * from './types.js';
|
|
6
|
+
export * from './utils/index.js';
|
|
7
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/factories/harbor/index.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC"}
|
|
@@ -0,0 +1,123 @@
|
|
|
1
|
+
import { Buffer } from 'node:buffer';
|
|
2
|
+
import type { OciRegistryCredentialProvider } from '../../../core/containers/registries/types.js';
|
|
3
|
+
import type { KubernetesClientConfig } from '../../../core/kubernetes/client-provider.js';
|
|
4
|
+
import { type HarborKubernetesStore } from './kubernetes-secret-store.js';
|
|
5
|
+
export interface HarborApiTransportRequest {
|
|
6
|
+
method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
|
|
7
|
+
path: string;
|
|
8
|
+
body?: unknown | undefined;
|
|
9
|
+
signal?: AbortSignal | undefined;
|
|
10
|
+
}
|
|
11
|
+
export interface HarborApiTransportResponse<T = unknown> {
|
|
12
|
+
status: number;
|
|
13
|
+
body?: T | undefined;
|
|
14
|
+
headers: Record<string, string | string[] | undefined>;
|
|
15
|
+
}
|
|
16
|
+
export interface HarborApiTransport {
|
|
17
|
+
request<T = unknown>(request: HarborApiTransportRequest): Promise<HarborApiTransportResponse<T>>;
|
|
18
|
+
}
|
|
19
|
+
export interface HarborApiClientOptions {
|
|
20
|
+
endpoint: string;
|
|
21
|
+
credentialProvider: OciRegistryCredentialProvider;
|
|
22
|
+
ca?: string | Buffer;
|
|
23
|
+
rejectUnauthorized?: boolean;
|
|
24
|
+
/** Permit Basic authentication over plain HTTP. Development loopback only. */
|
|
25
|
+
allowPlainHttp?: boolean;
|
|
26
|
+
timeoutMs?: number;
|
|
27
|
+
}
|
|
28
|
+
export interface HarborProjectPolicy {
|
|
29
|
+
name: string;
|
|
30
|
+
public?: boolean;
|
|
31
|
+
storageLimitBytes?: number;
|
|
32
|
+
autoScan?: boolean;
|
|
33
|
+
autoSbomGeneration?: boolean;
|
|
34
|
+
/** Existing Harbor registry endpoint registration used to create a proxy-cache project. */
|
|
35
|
+
proxyCacheRegistryId?: number;
|
|
36
|
+
/** Declaratively create/update the proxy-cache registry endpoint before the project. */
|
|
37
|
+
proxyCache?: HarborProxyCacheRegistryPolicy;
|
|
38
|
+
/** Existing scanner registration UUID assigned to the project. */
|
|
39
|
+
scannerUuid?: string;
|
|
40
|
+
immutableTags?: {
|
|
41
|
+
repositoryPattern?: string;
|
|
42
|
+
tagPattern?: string;
|
|
43
|
+
};
|
|
44
|
+
retention?: {
|
|
45
|
+
keepMostRecent: number;
|
|
46
|
+
scheduleCron?: string;
|
|
47
|
+
repositoryPattern?: string;
|
|
48
|
+
tagPattern?: string;
|
|
49
|
+
includeUntagged?: boolean;
|
|
50
|
+
};
|
|
51
|
+
}
|
|
52
|
+
export interface HarborProxyCacheRegistryPolicy {
|
|
53
|
+
name: string;
|
|
54
|
+
url: string;
|
|
55
|
+
/** Harbor adapter type such as docker-hub, harbor, aws-ecr, or github-ghcr. */
|
|
56
|
+
type: string;
|
|
57
|
+
description?: string;
|
|
58
|
+
insecure?: boolean;
|
|
59
|
+
caCertificate?: string;
|
|
60
|
+
credentialProvider?: OciRegistryCredentialProvider;
|
|
61
|
+
}
|
|
62
|
+
export interface HarborRobotPolicy {
|
|
63
|
+
name: string;
|
|
64
|
+
secretName: string;
|
|
65
|
+
access: 'pull' | 'push';
|
|
66
|
+
description?: string;
|
|
67
|
+
durationDays?: number;
|
|
68
|
+
}
|
|
69
|
+
export interface ReconcileHarborProjectOptions {
|
|
70
|
+
project: HarborProjectPolicy;
|
|
71
|
+
robots: HarborRobotPolicy[];
|
|
72
|
+
secretNamespace: string;
|
|
73
|
+
registry: string;
|
|
74
|
+
kubeConfig?: KubernetesClientConfig;
|
|
75
|
+
store?: HarborKubernetesStore;
|
|
76
|
+
signal?: AbortSignal;
|
|
77
|
+
}
|
|
78
|
+
export interface ReconciledHarborProject {
|
|
79
|
+
project: string;
|
|
80
|
+
projectId: number;
|
|
81
|
+
robots: Array<{
|
|
82
|
+
name: string;
|
|
83
|
+
id: number;
|
|
84
|
+
secretName: string;
|
|
85
|
+
access: 'pull' | 'push';
|
|
86
|
+
}>;
|
|
87
|
+
}
|
|
88
|
+
export interface DeleteHarborProjectOptions {
|
|
89
|
+
/** Destructive confirmation; must exactly match the project argument. */
|
|
90
|
+
confirmProjectName: string;
|
|
91
|
+
/**
|
|
92
|
+
* Delete every repository in the confirmed project before deleting it.
|
|
93
|
+
* Harbor rejects non-empty project deletion; this remains opt-in because
|
|
94
|
+
* repository deletion is irreversible.
|
|
95
|
+
*/
|
|
96
|
+
purgeRepositories?: boolean;
|
|
97
|
+
/** Bounded repository/project deletion convergence window. @default 60000 */
|
|
98
|
+
timeoutMs?: number;
|
|
99
|
+
signal?: AbortSignal;
|
|
100
|
+
/** Namespace containing robot pull/push Secrets created for this project. */
|
|
101
|
+
secretNamespace?: string;
|
|
102
|
+
/** Explicit project-owned robot Secret names to remove after Harbor accepts deletion. */
|
|
103
|
+
robotSecretNames?: readonly string[];
|
|
104
|
+
kubeConfig?: KubernetesClientConfig;
|
|
105
|
+
store?: HarborKubernetesStore;
|
|
106
|
+
}
|
|
107
|
+
/** Error intentionally excludes response/request bodies because robot secrets can appear there. */
|
|
108
|
+
export declare class HarborApiError extends Error {
|
|
109
|
+
readonly status: number | undefined;
|
|
110
|
+
readonly path: string;
|
|
111
|
+
constructor(message: string, status: number | undefined, path: string);
|
|
112
|
+
}
|
|
113
|
+
/** Pinned Harbor v2 API client with bounded Node HTTP transport and custom CA support. */
|
|
114
|
+
export declare class HarborApiClient {
|
|
115
|
+
readonly transport: HarborApiTransport;
|
|
116
|
+
constructor(options: HarborApiClientOptions | HarborApiTransport);
|
|
117
|
+
request<T = unknown>(request: HarborApiTransportRequest, allowedStatuses?: number[]): Promise<HarborApiTransportResponse<T>>;
|
|
118
|
+
}
|
|
119
|
+
/** Reconcile one private project, its immutable-tag policy, and purpose-scoped robot Secrets. */
|
|
120
|
+
export declare function reconcileHarborProject(client: HarborApiClient, options: ReconcileHarborProjectOptions): Promise<ReconciledHarborProject>;
|
|
121
|
+
/** Project deletion is deliberately separate and requires an exact-name confirmation. */
|
|
122
|
+
export declare function deleteHarborProject(client: HarborApiClient, project: string, options: DeleteHarborProjectOptions): Promise<void>;
|
|
123
|
+
//# sourceMappingURL=harbor-api.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"harbor-api.d.ts","sourceRoot":"","sources":["../../../../src/factories/harbor/provider/harbor-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAMrC,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,0BAA0B,CAAC,CAAC,GAAG,OAAO;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC;CAClG;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,6BAA6B,CAAC;IAClD,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,8EAA8E;IAC9E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,2FAA2F;IAC3F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,wFAAwF;IACxF,UAAU,CAAC,EAAE,8BAA8B,CAAC;IAC5C,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE;QACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,SAAS,CAAC,EAAE;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;CACH;AAED,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,6BAA6B,CAAC;CACpD;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1F;AAED,MAAM,WAAW,0BAA0B;IACzC,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,KAAK,CAAC,EAAE,qBAAqB,CAAC;CAC/B;AAmDD,mGAAmG;AACnG,qBAAa,cAAe,SAAQ,KAAK;IAGrC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAFrB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,IAAI,EAAE,MAAM;CAKxB;AAED,0FAA0F;AAC1F,qBAAa,eAAe;IAC1B,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;gBAE3B,OAAO,EAAE,sBAAsB,GAAG,kBAAkB;IAI1D,OAAO,CAAC,CAAC,GAAG,OAAO,EACvB,OAAO,EAAE,yBAAyB,EAClC,eAAe,GAAE,MAAM,EAAU,GAChC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;CAW1C;AAED,iGAAiG;AACjG,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAgElC;AAED,yFAAyF;AACzF,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,IAAI,CAAC,CAmCf"}
|