typekro 0.3.1 → 0.5.0

package/dist/factories/cilium/resources/gateway.js

@@ -0,0 +1,116 @@
+/**
+ * Cilium Gateway API and Ingress CRD Factory Functions
+ *
+ * This module provides factory functions for Cilium networking resources:
+ * - CiliumIngressClass
+ * - CiliumIngress
+ * - CiliumGatewayClassConfig (TODO)
+ * - CiliumEnvoyConfig (TODO)
+ * - CiliumClusterwideEnvoyConfig (TODO)
+ */
+import { createAlwaysReadyEvaluator } from '../../../core/readiness/index.js';
+import { createResource } from '../../shared.js';
+/**
+ * Creates a CiliumIngressClass resource
+ *
+ * IngressClass is a standard Kubernetes resource (networking.k8s.io/v1)
+ * used to specify which Ingress controller should handle the Ingress resources.
+ */
+export function CiliumIngressClass(config) {
+    const metadata = {
+        name: config.name,
+    };
+    if (config.default) {
+        metadata.annotations = {
+            'ingressclass.kubernetes.io/is-default-class': 'true',
+        };
+    }
+    return createResource({
+        apiVersion: 'networking.k8s.io/v1',
+        kind: 'IngressClass',
+        metadata,
+        spec: {
+            controller: 'cilium.io/ingress-controller',
+        },
+        id: config.id || `ciliumIngressClass-${config.name}`,
+    }).withReadinessEvaluator(createAlwaysReadyEvaluator('IngressClass'));
+}
+/**
+ * Creates a CiliumIngress (standard Kubernetes Ingress) resource
+ *
+ * Ingress is a standard Kubernetes resource (networking.k8s.io/v1)
+ * that provides HTTP/HTTPS routing to services.
+ */
+export function CiliumIngress(config) {
+    const metadata = {
+        name: config.name,
+    };
+    if (config.namespace) {
+        metadata.namespace = config.namespace;
+    }
+    if (config.annotations) {
+        metadata.annotations = config.annotations;
+    }
+    // Build rules from high-level config if provided, otherwise use explicit rules
+    let rules = config.rules;
+    if (!rules && config.host && config.serviceName && config.servicePort) {
+        const portConfig = typeof config.servicePort === 'number'
+            ? { number: config.servicePort }
+            : { name: config.servicePort };
+        rules = [
+            {
+                host: config.host,
+                http: {
+                    paths: [
+                        {
+                            path: config.path || '/',
+                            pathType: config.pathType || 'Prefix',
+                            backend: {
+                                service: {
+                                    name: config.serviceName,
+                                    port: portConfig,
+                                },
+                            },
+                        },
+                    ],
+                },
+            },
+        ];
+    }
+    // Build TLS from high-level config if provided, otherwise use explicit tls
+    let tls = config.tls;
+    if (!tls && config.tlsSecretName && config.host) {
+        tls = [
+            {
+                hosts: [config.host],
+                secretName: config.tlsSecretName,
+            },
+        ];
+    }
+    return createResource({
+        apiVersion: 'networking.k8s.io/v1',
+        kind: 'Ingress',
+        metadata,
+        spec: {
+            ingressClassName: config.ingressClassName,
+            rules,
+            tls,
+        },
+        id: config.id || `ciliumIngress-${config.name}`,
+    }).withReadinessEvaluator((resource) => {
+        // Ingress is ready when it has at least one load balancer IP/hostname
+        const status = resource.status;
+        const hasLoadBalancer = (status?.loadBalancer?.ingress?.length ?? 0) > 0;
+        return {
+            ready: hasLoadBalancer,
+            message: hasLoadBalancer
+                ? 'Ingress has load balancer endpoint'
+                : 'Waiting for load balancer endpoint',
+        };
+    });
+}
+// TODO: Implement in future tasks
+// - CiliumGatewayClassConfig
+// - CiliumEnvoyConfig
+// - CiliumClusterwideEnvoyConfig
+//# sourceMappingURL=gateway.js.map

package/dist/factories/cilium/resources/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../../../src/factories/cilium/resources/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAsDjD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAgC;IACjE,MAAM,QAAQ,GAA2D;QACvE,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;IAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,QAAQ,CAAC,WAAW,GAAG;YACrB,6CAA6C,EAAE,MAAM;SACtD,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,UAAU,EAAE,sBAAsB;QAClC,IAAI,EAAE,cAAc;QACpB,QAAQ;QACR,IAAI,EAAE;YACJ,UAAU,EAAE,8BAA8B;SAC3C;QACD,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,sBAAsB,MAAM,CAAC,IAAI,EAAE;KACrD,CAAC,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,cAAc,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAA2B;IACvD,MAAM,QAAQ,GAA+E;QAC3F,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;IAEF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACxC,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAC5C,CAAC;IAED,+EAA+E;IAC/E,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACzB,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACtE,MAAM,UAAU,GACd,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACpC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;YAChC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QAEnC,KAAK,GAAG;YACN;gBACE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE;oBACJ,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,GAAG;4BACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ;4BACrC,OAAO,EAAE;gCACP,OAAO,EAAE;oCACP,IAAI,EAAE,MAAM,CAAC,WAAW;oCACxB,IAAI,EAAE,UAAU;iCACjB;6BACF;yBACF;qBACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACrB,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChD,GAAG,GAAG;YACJ;gBACE,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;gBACpB,UAAU,EAAE,MAAM,CAAC,aAAa;aACjC;SACF,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,UAAU,EAAE,sBAAsB;QAClC,IAAI,EAAE,SAAS;QACf,QAAQ;QACR,IAAI,EAAE;YACJ,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,KAAK;YACL,GAAG;SACJ;QACD,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,iBAAiB,MAAM,CAAC,IAAI,EAAE;KAChD,CAAC,CAAC,sBAAsB,CAAC,CAAC,QAAiC,EAAE,EAAE;QAC9D,sEAAsE;QACtE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAEX,CAAC;QACd,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAEzE,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,eAAe;gBACtB,CAAC,CAAC,oCAAoC;gBACtC,CAAC,CAAC,oCAAoC;SACzC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,kCAAkC;AAClC,6BAA6B;AAC7B,sBAAsB;AACtB,iCAAiC"}

package/dist/factories/cilium/resources/helm.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Cilium Helm Integration Resources
+ *
+ * This module provides wrapper functions for creating Helm resources specifically
+ * configured for Cilium deployments. These functions wrap the generic Helm factories
+ * from src/factories/helm/ and provide Cilium-specific configuration interfaces
+ * while reusing existing readiness evaluators.
+ */
+import { type HelmRepositorySpec, type HelmRepositoryStatus } from '../../helm/helm-repository.js';
+import type { HelmReleaseSpec, HelmReleaseStatus } from '../../helm/types.js';
+import type { CiliumBootstrapConfig, CiliumHelmReleaseConfig, CiliumHelmRepositoryConfig, CiliumHelmValues } from '../types.js';
+export declare function ciliumHelmRepository(config: CiliumHelmRepositoryConfig): import("../../index.js").Enhanced<HelmRepositorySpec, HelmRepositoryStatus>;
+/**
+ * Wrapper function for creating Cilium HelmRelease resources
+ *
+ * This function wraps the generic `helmRelease` factory and provides
+ * Cilium-specific configuration with proper chart reference and values mapping.
+ * It reuses the existing Helm readiness evaluator.
+ *
+ * @param config - Cilium HelmRelease configuration
+ * @returns Enhanced HelmRelease resource with Cilium-specific configuration
+ *
+ * @example
+ * Basic Cilium release:
+ * ```typescript
+ * const release = ciliumHelmRelease({
+ *   name: 'cilium',
+ *   namespace: 'kube-system',
+ *   version: '1.18.1',
+ *   repositoryName: 'cilium',
+ *   repositoryNamespace: 'flux-system'
+ * });
+ * ```
+ *
+ * @example
+ * Release with custom values:
+ * ```typescript
+ * const release = ciliumHelmRelease({
+ *   name: 'cilium',
+ *   namespace: 'kube-system',
+ *   version: '1.18.1',
+ *   repositoryName: 'cilium',
+ *   repositoryNamespace: 'flux-system',
+ *   values: {
+ *     cluster: { name: 'production', id: 1 },
+ *     kubeProxyReplacement: 'strict'
+ *   }
+ * });
+ * ```
+ */
+export declare function ciliumHelmRelease(config: CiliumHelmReleaseConfig): import("../../index.js").Enhanced<HelmReleaseSpec, HelmReleaseStatus>;
+/**
+ * Maps Cilium bootstrap configuration to Helm values
+ *
+ * This function converts the TypeKro CiliumBootstrapConfig interface
+ * to the Helm values format expected by the Cilium chart.
+ *
+ * @param config - Cilium bootstrap configuration
+ * @returns Helm values object for Cilium chart
+ *
+ * @example
+ * ```typescript
+ * const config: CiliumBootstrapConfig = {
+ *   cluster: { name: 'production', id: 1 },
+ *   networking: { kubeProxyReplacement: 'strict' }
+ * };
+ * const helmValues = mapCiliumConfigToHelmValues(config);
+ * ```
+ */
+export declare function mapCiliumConfigToHelmValues(config: CiliumBootstrapConfig): CiliumHelmValues;
+/**
+ * Validates Cilium Helm values configuration
+ *
+ * This function validates that the generated Helm values are compatible
+ * with the Cilium chart and contain all required fields.
+ *
+ * @param values - Helm values to validate
+ * @returns Validation result with any errors
+ *
+ * @example
+ * ```typescript
+ * const values = mapCiliumConfigToHelmValues(config);
+ * const validation = validateCiliumHelmValues(values);
+ * if (!validation.valid) {
+ *   console.error('Validation errors:', validation.errors);
+ * }
+ * ```
+ */
+export declare function validateCiliumHelmValues(values: CiliumHelmValues): {
+    valid: boolean;
+    errors: string[];
+};
+//# sourceMappingURL=helm.d.ts.map

package/dist/factories/cilium/resources/helm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../../../src/factories/cilium/resources/helm.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE9E,OAAO,KAAK,EACV,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,gBAAgB,EACjB,MAAM,aAAa,CAAC;AAuCrB,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,0BAA0B,+EAkBtE;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,uBAAuB,yEA6BhE;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,qBAAqB,GAAG,gBAAgB,CAkK3F;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG;IAClE,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAmEA"}

package/dist/factories/cilium/resources/helm.js

@@ -0,0 +1,369 @@
+/**
+ * Cilium Helm Integration Resources
+ *
+ * This module provides wrapper functions for creating Helm resources specifically
+ * configured for Cilium deployments. These functions wrap the generic Helm factories
+ * from src/factories/helm/ and provide Cilium-specific configuration interfaces
+ * while reusing existing readiness evaluators.
+ */
+import { createHelmRepositoryReadinessEvaluator, } from '../../helm/helm-repository.js';
+import { helmReleaseReadinessEvaluator } from '../../helm/readiness-evaluators.js';
+import { createResource } from '../../shared.js';
+// =============================================================================
+// CILIUM HELM REPOSITORY WRAPPER
+// =============================================================================
+/**
+ * Wrapper function for creating Cilium HelmRepository resources
+ *
+ * This function wraps the generic `helmRepository` factory and provides
+ * Cilium-specific configuration with proper defaults and validation.
+ * It reuses the existing Helm readiness evaluator.
+ *
+ * @param config - Cilium HelmRepository configuration
+ * @returns Enhanced HelmRepository resource with Cilium-specific settings
+ *
+ * @example
+ * Basic Cilium repository:
+ * ```typescript
+ * const repo = ciliumHelmRepository({
+ *   name: 'cilium',
+ *   namespace: 'flux-system'
+ * });
+ * ```
+ *
+ * @example
+ * Repository with custom settings:
+ * ```typescript
+ * const repo = ciliumHelmRepository({
+ *   name: 'cilium-repo',
+ *   namespace: 'flux-system',
+ *   interval: '10m',
+ *   timeout: '5m'
+ * });
+ * ```
+ */
+/** Cilium HelmRepository readiness evaluator (delegates to shared implementation) */
+const ciliumHelmRepositoryReadinessEvaluator = createHelmRepositoryReadinessEvaluator('Cilium');
+export function ciliumHelmRepository(config) {
+    // For Kro deployments, we need to avoid status expectations that conflict with actual Flux status
+    // Create the resource directly without status template to avoid Kro controller conflicts
+    return createResource({
+        ...(config.id && { id: config.id }),
+        apiVersion: 'source.toolkit.fluxcd.io/v1',
+        kind: 'HelmRepository',
+        metadata: {
+            name: config.name,
+            ...(config.namespace && { namespace: config.namespace }),
+        },
+        spec: {
+            url: 'https://helm.cilium.io/',
+            interval: config.interval || '5m',
+            type: 'default',
+        },
+        // Omit status template to avoid conflicts with Kro controller
+    }).withReadinessEvaluator(ciliumHelmRepositoryReadinessEvaluator);
+}
+// =============================================================================
+// CILIUM HELM RELEASE WRAPPER
+// =============================================================================
+/**
+ * Wrapper function for creating Cilium HelmRelease resources
+ *
+ * This function wraps the generic `helmRelease` factory and provides
+ * Cilium-specific configuration with proper chart reference and values mapping.
+ * It reuses the existing Helm readiness evaluator.
+ *
+ * @param config - Cilium HelmRelease configuration
+ * @returns Enhanced HelmRelease resource with Cilium-specific configuration
+ *
+ * @example
+ * Basic Cilium release:
+ * ```typescript
+ * const release = ciliumHelmRelease({
+ *   name: 'cilium',
+ *   namespace: 'kube-system',
+ *   version: '1.18.1',
+ *   repositoryName: 'cilium',
+ *   repositoryNamespace: 'flux-system'
+ * });
+ * ```
+ *
+ * @example
+ * Release with custom values:
+ * ```typescript
+ * const release = ciliumHelmRelease({
+ *   name: 'cilium',
+ *   namespace: 'kube-system',
+ *   version: '1.18.1',
+ *   repositoryName: 'cilium',
+ *   repositoryNamespace: 'flux-system',
+ *   values: {
+ *     cluster: { name: 'production', id: 1 },
+ *     kubeProxyReplacement: 'strict'
+ *   }
+ * });
+ * ```
+ */
+export function ciliumHelmRelease(config) {
+    // Create a HelmRelease that properly references the HelmRepository by name
+    // We need to use createResource directly to have full control over the sourceRef
+    return createResource({
+        ...(config.id && { id: config.id }),
+        apiVersion: 'helm.toolkit.fluxcd.io/v2',
+        kind: 'HelmRelease',
+        metadata: {
+            name: config.name,
+            ...(config.namespace && { namespace: config.namespace }),
+            ...(config.labels && { labels: config.labels }),
+            ...(config.annotations && { annotations: config.annotations }),
+        },
+        spec: {
+            interval: config.interval || '5m',
+            chart: {
+                spec: {
+                    chart: 'cilium',
+                    ...(config.version && { version: config.version }),
+                    sourceRef: {
+                        kind: 'HelmRepository',
+                        name: config.repositoryName,
+                        namespace: config.repositoryNamespace,
+                    },
+                },
+            },
+            ...(config.values && { values: config.values }),
+        },
+    }).withReadinessEvaluator(helmReleaseReadinessEvaluator);
+}
+// =============================================================================
+// HELM VALUES MAPPING SYSTEM
+// =============================================================================
+/**
+ * Maps Cilium bootstrap configuration to Helm values
+ *
+ * This function converts the TypeKro CiliumBootstrapConfig interface
+ * to the Helm values format expected by the Cilium chart.
+ *
+ * @param config - Cilium bootstrap configuration
+ * @returns Helm values object for Cilium chart
+ *
+ * @example
+ * ```typescript
+ * const config: CiliumBootstrapConfig = {
+ *   cluster: { name: 'production', id: 1 },
+ *   networking: { kubeProxyReplacement: 'strict' }
+ * };
+ * const helmValues = mapCiliumConfigToHelmValues(config);
+ * ```
+ */
+export function mapCiliumConfigToHelmValues(config) {
+    const values = {
+        // Cluster configuration
+        cluster: {
+            name: config.cluster.name,
+            id: config.cluster.id,
+        },
+    };
+    // Networking configuration
+    if (config.networking) {
+        const networking = config.networking;
+        if (networking.ipam) {
+            values.ipam = {
+                mode: networking.ipam.mode || 'kubernetes',
+            };
+            if (networking.ipam.operator) {
+                values.ipam.operator = {};
+                if (networking.ipam.operator.clusterPoolIPv4PodCIDRList) {
+                    values.ipam.operator.clusterPoolIPv4PodCIDRList =
+                        networking.ipam.operator.clusterPoolIPv4PodCIDRList;
+                }
+                if (networking.ipam.operator.clusterPoolIPv6PodCIDRList) {
+                    values.ipam.operator.clusterPoolIPv6PodCIDRList =
+                        networking.ipam.operator.clusterPoolIPv6PodCIDRList;
+                }
+            }
+        }
+        if (networking.kubeProxyReplacement) {
+            // Convert string values to boolean/string format expected by Cilium Helm chart
+            switch (networking.kubeProxyReplacement) {
+                case 'disabled':
+                    values.kubeProxyReplacement = false;
+                    break;
+                case 'partial':
+                    values.kubeProxyReplacement = 'partial';
+                    break;
+                case 'strict':
+                    values.kubeProxyReplacement = true;
+                    break;
+                default:
+                    values.kubeProxyReplacement = networking.kubeProxyReplacement;
+            }
+        }
+        if (networking.routingMode) {
+            values.routingMode = networking.routingMode;
+        }
+        if (networking.tunnelProtocol) {
+            values.tunnelProtocol = networking.tunnelProtocol;
+        }
+        if (networking.autoDirectNodeRoutes !== undefined) {
+            values.autoDirectNodeRoutes = networking.autoDirectNodeRoutes;
+        }
+        if (networking.endpointRoutes) {
+            values.endpointRoutes = networking.endpointRoutes;
+        }
+        if (networking.hostServices) {
+            values.hostServices = networking.hostServices;
+        }
+        if (networking.nodePort) {
+            values.nodePort = networking.nodePort;
+        }
+        if (networking.externalIPs) {
+            values.externalIPs = networking.externalIPs;
+        }
+        if (networking.hostPort) {
+            values.hostPort = networking.hostPort;
+        }
+        if (networking.loadBalancer) {
+            values.loadBalancer = networking.loadBalancer;
+        }
+    }
+    // Security configuration
+    if (config.security) {
+        const security = config.security;
+        if (security.encryption) {
+            values.encryption = security.encryption;
+        }
+        if (security.authentication) {
+            values.authentication = security.authentication;
+        }
+        if (security.policyEnforcement) {
+            values.policyEnforcement = security.policyEnforcement;
+        }
+        if (security.policyAuditMode !== undefined) {
+            values.policyAuditMode = security.policyAuditMode;
+        }
+    }
+    // BGP configuration
+    if (config.bgp) {
+        values.bgp = config.bgp;
+    }
+    // Gateway API configuration
+    if (config.gatewayAPI) {
+        values.gatewayAPI = config.gatewayAPI;
+    }
+    // Observability configuration
+    if (config.observability) {
+        const observability = config.observability;
+        if (observability.hubble) {
+            values.hubble = observability.hubble;
+        }
+        if (observability.prometheus) {
+            values.prometheus = observability.prometheus;
+        }
+    }
+    // Operator configuration
+    if (config.operator) {
+        values.operator = config.operator;
+    }
+    // Agent configuration
+    if (config.agent) {
+        values.agent = config.agent;
+    }
+    // Advanced configuration
+    if (config.advanced) {
+        const advanced = config.advanced;
+        if (advanced.bpf) {
+            values.bpf = advanced.bpf;
+        }
+        if (advanced.k8s) {
+            values.k8s = advanced.k8s;
+        }
+        if (advanced.cni) {
+            values.cni = advanced.cni;
+        }
+    }
+    // Custom values (merge last to allow overrides)
+    if (config.customValues) {
+        Object.assign(values, config.customValues);
+    }
+    return values;
+}
+/**
+ * Validates Cilium Helm values configuration
+ *
+ * This function validates that the generated Helm values are compatible
+ * with the Cilium chart and contain all required fields.
+ *
+ * @param values - Helm values to validate
+ * @returns Validation result with any errors
+ *
+ * @example
+ * ```typescript
+ * const values = mapCiliumConfigToHelmValues(config);
+ * const validation = validateCiliumHelmValues(values);
+ * if (!validation.valid) {
+ *   console.error('Validation errors:', validation.errors);
+ * }
+ * ```
+ */
+export function validateCiliumHelmValues(values) {
+    const errors = [];
+    // Validate required cluster configuration
+    if (!values.cluster) {
+        errors.push('cluster configuration is required');
+    }
+    else {
+        if (!values.cluster.name) {
+            errors.push('cluster.name is required');
+        }
+        if (typeof values.cluster.id !== 'number' || values.cluster.id < 0 || values.cluster.id > 255) {
+            errors.push('cluster.id must be a number between 0 and 255');
+        }
+    }
+    // Validate IPAM configuration if present
+    if (values.ipam) {
+        const validIpamModes = ['kubernetes', 'cluster-pool', 'azure', 'aws-eni', 'crd'];
+        if (values.ipam.mode && !validIpamModes.includes(values.ipam.mode)) {
+            errors.push(`ipam.mode must be one of: ${validIpamModes.join(', ')}`);
+        }
+    }
+    // Validate kube-proxy replacement if present
+    if (values.kubeProxyReplacement !== undefined) {
+        const validModes = [true, false, 'partial'];
+        if (!validModes.includes(values.kubeProxyReplacement)) {
+            errors.push(`kubeProxyReplacement must be one of: true, false, 'partial'`);
+        }
+    }
+    // Validate routing mode if present
+    if (values.routingMode) {
+        const validModes = ['tunnel', 'native'];
+        if (!validModes.includes(values.routingMode)) {
+            errors.push(`routingMode must be one of: ${validModes.join(', ')}`);
+        }
+    }
+    // Validate tunnel protocol if present
+    if (values.tunnelProtocol) {
+        const validProtocols = ['vxlan', 'geneve'];
+        if (!validProtocols.includes(values.tunnelProtocol)) {
+            errors.push(`tunnelProtocol must be one of: ${validProtocols.join(', ')}`);
+        }
+    }
+    // Validate policy enforcement if present
+    if (values.policyEnforcement) {
+        const validModes = ['default', 'always', 'never'];
+        if (!validModes.includes(values.policyEnforcement)) {
+            errors.push(`policyEnforcement must be one of: ${validModes.join(', ')}`);
+        }
+    }
+    // Validate encryption configuration if present
+    if (values.encryption?.enabled && values.encryption.type) {
+        const validTypes = ['wireguard', 'ipsec'];
+        if (!validTypes.includes(values.encryption.type)) {
+            errors.push(`encryption.type must be one of: ${validTypes.join(', ')}`);
+        }
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+    };
+}
+//# sourceMappingURL=helm.js.map

package/dist/factories/cilium/resources/helm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.js","sourceRoot":"","sources":["../../../../src/factories/cilium/resources/helm.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,sCAAsC,GAGvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAQjD,gFAAgF;AAChF,iCAAiC;AACjC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qFAAqF;AACrF,MAAM,sCAAsC,GAAG,sCAAsC,CAAC,QAAQ,CAAC,CAAC;AAEhG,MAAM,UAAU,oBAAoB,CAAC,MAAkC;IACrE,kGAAkG;IAClG,yFAAyF;IACzF,OAAO,cAAc,CAA2C;QAC9D,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QACnC,UAAU,EAAE,6BAA6B;QACzC,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;SACzD;QACD,IAAI,EAAE;YACJ,GAAG,EAAE,yBAAyB;YAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjC,IAAI,EAAE,SAAS;SAChB;QACD,8DAA8D;KAC/D,CAAC,CAAC,sBAAsB,CAAC,sCAAsC,CAAC,CAAC;AACpE,CAAC;AAED,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA+B;IAC/D,2EAA2E;IAC3E,iFAAiF;IACjF,OAAO,cAAc,CAAqC;QACxD,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QACnC,UAAU,EAAE,2BAA2B;QACvC,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;SAC/D;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjC,KAAK,EAAE;gBACL,IAAI,EAAE;oBACJ,KAAK,EAAE,QAAQ;oBACf,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;oBAClD,SAAS,EAAE;wBACT,IAAI,EAAE,gBAAyB;wBAC/B,IAAI,EAAE,MAAM,CAAC,cAAc;wBAC3B,SAAS,EAAE,MAAM,CAAC,mBAAmB;qBACtC;iBACF;aACF;YACD,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;SAChD;KACF,CAAC,CAAC,sBAAsB,CAAC,6BAA6B,CAAC,CAAC;AAC3D,CAAC;AAED,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAA6B;IACvE,MAAM,MAAM,GAAqB;QAC/B,wBAAwB;QACxB,OAAO,EAAE;YACP,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;SACtB;KACF,CAAC;IAEF,2BAA2B;IAC3B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QAErC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,GAAG;gBACZ,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,YAAY;aAC3C,CAAC;YAEF,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;gBAC1B,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,EAAE,CAAC;oBACxD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B;wBAC7C,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC;gBACxD,CAAC;gBACD,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,EAAE,CAAC;oBACxD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B;wBAC7C,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,oBAAoB,EAAE,CAAC;YACpC,+EAA+E;YAC/E,QAAQ,UAAU,CAAC,oBAAoB,EAAE,CAAC;gBACxC,KAAK,UAAU;oBACb,MAAM,CAAC,oBAAoB,GAAG,KAAK,CAAC;oBACpC,MAAM;gBACR,KAAK,SAAS;oBACZ,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC;oBACxC,MAAM;gBACR,KAAK,QAAQ;oBACX,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC;oBACnC,MAAM;gBACR;oBACE,MAAM,CAAC,oBAAoB,GAAG,UAAU,CAAC,oBAAoB,CAAC;YAClE,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3B,MAAM,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC9C,CAAC;QAED,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;YAC9B,MAAM,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QACpD,CAAC;QAED,IAAI,UAAU,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAClD,MAAM,CAAC,oBAAoB,GAAG,UAAU,CAAC,oBAAoB,CAAC;QAChE,CAAC;QAED,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;YAC9B,MAAM,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QACpD,CAAC;QAED,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YAC5B,MAAM,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAChD,CAAC;QAED,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACxC,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3B,MAAM,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC9C,CAAC;QAED,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACxC,CAAC;QAED,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YAC5B,MAAM,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAChD,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEjC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QAC1C,CAAC;QAED,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC5B,MAAM,CAAC,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC;QAClD,CAAC;QAED,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,CAAC;QACxD,CAAC;QAED,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC;QACpD,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IAC1B,CAAC;IAED,4BAA4B;IAC5B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACxC,CAAC;IAED,8BAA8B;IAC9B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAE3C,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;QACvC,CAAC;QAED,IAAI,aAAa,CAAC,UAAU,EAAE,CAAC;YAC7B,MAAM,CAAC,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACpC,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEjC,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC5B,CAAC;QAED,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC5B,CAAC;QAED,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAI/D,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,0CAA0C;IAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;YAC9F,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,cAAc,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,6BAA6B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,+BAA+B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,kCAAkC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,qCAAqC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,MAAM,CAAC,UAAU,EAAE,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,mCAAmC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/factories/cilium/resources/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Cilium CRD Factory Functions
+ *
+ * This module provides organized access to Cilium Custom Resource Definition
+ * factory functions, organized by functional area.
+ */
+export * from './gateway.js';
+export * from './helm.js';
+export * from './networking.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/cilium/resources/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/cilium/resources/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,cAAc,cAAc,CAAC;AAI7B,cAAc,WAAW,CAAC;AAI1B,cAAc,iBAAiB,CAAC"}

package/dist/factories/cilium/resources/index.js

@@ -0,0 +1,19 @@
+/**
+ * Cilium CRD Factory Functions
+ *
+ * This module provides organized access to Cilium Custom Resource Definition
+ * factory functions, organized by functional area.
+ */
+// =============================================================================
+// GATEWAY API RESOURCES
+// =============================================================================
+export * from './gateway.js';
+// =============================================================================
+// HELM INTEGRATION RESOURCES
+// =============================================================================
+export * from './helm.js';
+// =============================================================================
+// NETWORKING RESOURCES
+// =============================================================================
+export * from './networking.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/cilium/resources/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/cilium/resources/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAChF,cAAc,cAAc,CAAC;AAC7B,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAChF,cAAc,WAAW,CAAC;AAC1B,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAChF,cAAc,iBAAiB,CAAC"}