typekro 0.3.0 → 0.4.0

package/dist/factories/cilium/resources/networking.d.ts

@@ -0,0 +1,202 @@
+/**
+ * Cilium Networking CRD Factory Functions
+ *
+ * This module provides factory functions for Cilium networking resources:
+ * - CiliumNetworkPolicy
+ * - CiliumClusterwideNetworkPolicy
+ *
+ * Each factory function includes embedded readiness evaluators for proper
+ * lifecycle management and status monitoring.
+ */
+import type { Enhanced, ReadinessEvaluator } from '../../../core/types/index.js';
+import type { CiliumNetworkPolicy, CiliumClusterwideNetworkPolicy, CiliumNetworkPolicyConfig, CiliumClusterwideNetworkPolicyConfig, CiliumNetworkPolicySpec, CiliumNetworkPolicyStatus, CiliumClusterwideNetworkPolicySpec, CiliumClusterwideNetworkPolicyStatus } from '../types.js';
+/**
+ * Embedded readiness evaluator for CiliumNetworkPolicy
+ *
+ * Evaluates policy readiness based on:
+ * - Policy acceptance by Cilium agent
+ * - Endpoint selection and rule application
+ * - Error conditions and validation status
+ */
+export declare const ciliumNetworkPolicyReadinessEvaluator: ReadinessEvaluator;
+/**
+ * Factory function for CiliumNetworkPolicy
+ *
+ * Creates a Cilium network policy resource with comprehensive configuration
+ * options for ingress and egress rules, endpoint selection, and L7 policies.
+ *
+ * @param resource - CiliumNetworkPolicy resource definition
+ * @returns Enhanced CiliumNetworkPolicy resource with embedded readiness evaluator
+ *
+ * @example
+ * Basic network policy:
+ * ```typescript
+ * const policy = ciliumNetworkPolicy({
+ *   apiVersion: 'cilium.io/v2',
+ *   kind: 'CiliumNetworkPolicy',
+ *   metadata: {
+ *     name: 'allow-frontend',
+ *     namespace: 'default'
+ *   },
+ *   spec: {
+ *     endpointSelector: {
+ *       matchLabels: { app: 'frontend' }
+ *     },
+ *     ingress: [{
+ *       fromEndpoints: [{
+ *         matchLabels: { app: 'backend' }
+ *       }],
+ *       toPorts: [{
+ *         ports: [{ port: '8080', protocol: 'TCP' }]
+ *       }]
+ *     }]
+ *   }
+ * });
+ * ```
+ *
+ * @example
+ * L7 HTTP policy:
+ * ```typescript
+ * const httpPolicy = ciliumNetworkPolicy({
+ *   apiVersion: 'cilium.io/v2',
+ *   kind: 'CiliumNetworkPolicy',
+ *   metadata: {
+ *     name: 'api-access',
+ *     namespace: 'default'
+ *   },
+ *   spec: {
+ *     endpointSelector: {
+ *       matchLabels: { app: 'api' }
+ *     },
+ *     ingress: [{
+ *       fromEndpoints: [{
+ *         matchLabels: { app: 'frontend' }
+ *       }],
+ *       toPorts: [{
+ *         ports: [{ port: '8080', protocol: 'TCP' }],
+ *         rules: {
+ *           http: [{
+ *             method: 'GET',
+ *             path: '/api/v1/.*'
+ *           }]
+ *         }
+ *       }]
+ *     }]
+ *   }
+ * });
+ * ```
+ */
+export declare function ciliumNetworkPolicy(resource: CiliumNetworkPolicy): Enhanced<CiliumNetworkPolicySpec, CiliumNetworkPolicyStatus>;
+/**
+ * Embedded readiness evaluator for CiliumClusterwideNetworkPolicy
+ *
+ * Evaluates cluster-wide policy readiness based on:
+ * - Policy acceptance across all nodes
+ * - Node selector validation
+ * - Cluster-wide rule application status
+ */
+export declare const ciliumClusterwideNetworkPolicyReadinessEvaluator: ReadinessEvaluator;
+/**
+ * Factory function for CiliumClusterwideNetworkPolicy
+ *
+ * Creates a cluster-wide Cilium network policy resource that applies across
+ * all nodes in the cluster. Supports node selection and cluster-wide rules.
+ *
+ * @param resource - CiliumClusterwideNetworkPolicy resource definition
+ * @returns Enhanced CiliumClusterwideNetworkPolicy resource with embedded readiness evaluator
+ *
+ * @example
+ * Cluster-wide deny-all policy:
+ * ```typescript
+ * const denyAll = ciliumClusterwideNetworkPolicy({
+ *   apiVersion: 'cilium.io/v2',
+ *   kind: 'CiliumClusterwideNetworkPolicy',
+ *   metadata: {
+ *     name: 'deny-all-ingress'
+ *   },
+ *   spec: {
+ *     endpointSelector: {}, // Selects all endpoints
+ *     ingress: [], // Empty ingress rules = deny all
+ *     egress: []   // Empty egress rules = deny all
+ *   }
+ * });
+ * ```
+ *
+ * @example
+ * Node-specific cluster policy:
+ * ```typescript
+ * const nodePolicy = ciliumClusterwideNetworkPolicy({
+ *   apiVersion: 'cilium.io/v2',
+ *   kind: 'CiliumClusterwideNetworkPolicy',
+ *   metadata: {
+ *     name: 'worker-node-policy'
+ *   },
+ *   spec: {
+ *     nodeSelector: {
+ *       matchLabels: { 'node-role.kubernetes.io/worker': '' }
+ *     },
+ *     ingress: [{
+ *       fromEntities: ['host'],
+ *       toPorts: [{
+ *         ports: [{ port: '9100', protocol: 'TCP' }]
+ *       }]
+ *     }]
+ *   }
+ * });
+ * ```
+ */
+export declare function ciliumClusterwideNetworkPolicy(resource: CiliumClusterwideNetworkPolicy): Enhanced<CiliumClusterwideNetworkPolicySpec, CiliumClusterwideNetworkPolicyStatus>;
+/**
+ * Simple factory function for CiliumNetworkPolicy
+ *
+ * Creates a CiliumNetworkPolicy with simplified configuration and sensible defaults.
+ *
+ * @param config - Simplified CiliumNetworkPolicy configuration
+ * @returns Enhanced CiliumNetworkPolicy resource with embedded readiness evaluator
+ *
+ * @example
+ * ```typescript
+ * const policy = NetworkPolicy({
+ *   name: 'allow-frontend',
+ *   namespace: 'default',
+ *   spec: {
+ *     endpointSelector: {
+ *       matchLabels: { app: 'frontend' }
+ *     },
+ *     ingress: [{
+ *       fromEndpoints: [{
+ *         matchLabels: { app: 'backend' }
+ *       }],
+ *       toPorts: [{
+ *         ports: [{ port: '8080', protocol: 'TCP' }]
+ *       }]
+ *     }]
+ *   },
+ *   id: 'frontendPolicy'
+ * });
+ * ```
+ */
+export declare function NetworkPolicy(config: CiliumNetworkPolicyConfig): Enhanced<CiliumNetworkPolicySpec, CiliumNetworkPolicyStatus>;
+/**
+ * Simple factory function for CiliumClusterwideNetworkPolicy
+ *
+ * Creates a CiliumClusterwideNetworkPolicy with simplified configuration and sensible defaults.
+ *
+ * @param config - Simplified CiliumClusterwideNetworkPolicy configuration
+ * @returns Enhanced CiliumClusterwideNetworkPolicy resource with embedded readiness evaluator
+ *
+ * @example
+ * ```typescript
+ * const denyAll = ClusterwideNetworkPolicy({
+ *   name: 'deny-all-ingress',
+ *   spec: {
+ *     endpointSelector: {}, // Selects all endpoints
+ *     ingress: [], // Empty ingress rules = deny all
+ *     egress: []   // Empty egress rules = deny all
+ *   },
+ *   id: 'denyAllPolicy'
+ * });
+ * ```
+ */
+export declare function ClusterwideNetworkPolicy(config: CiliumClusterwideNetworkPolicyConfig): Enhanced<CiliumClusterwideNetworkPolicySpec, CiliumClusterwideNetworkPolicyStatus>;
+//# sourceMappingURL=networking.d.ts.map

package/dist/factories/cilium/resources/networking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"networking.d.ts","sourceRoot":"","sources":["../../../../src/factories/cilium/resources/networking.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAkB,MAAM,8BAA8B,CAAC;AAEjG,OAAO,KAAK,EACV,mBAAmB,EACnB,8BAA8B,EAC9B,yBAAyB,EACzB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,kCAAkC,EAClC,oCAAoC,EAErC,MAAM,aAAa,CAAC;AAMrB;;;;;;;GAOG;AACH,eAAO,MAAM,qCAAqC,EAAE,kBAyJnD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,mBAAmB,GAC5B,QAAQ,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAmE9D;AAMD;;;;;;;GAOG;AACH,eAAO,MAAM,gDAAgD,EAAE,kBA2H9D,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,8BAA8B,GACvC,QAAQ,CAAC,kCAAkC,EAAE,oCAAoC,CAAC,CA4EpF;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,yBAAyB,GAChC,QAAQ,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAW9D;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,oCAAoC,GAC3C,QAAQ,CAAC,kCAAkC,EAAE,oCAAoC,CAAC,CAUpF"}