typekro 0.3.1 → 0.5.0

package/dist/factories/cert-manager/resources/helm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../../../src/factories/cert-manager/resources/helm.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE9E,OAAO,KAAK,EACV,4BAA4B,EAC5B,+BAA+B,EAC/B,qBAAqB,EACtB,MAAM,aAAa,CAAC;AAyCrB,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,+BAA+B,GACtC,QAAQ,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAiBpD;AA6CD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,4BAA4B,GACnC,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAwD9C;AA8BD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,qBAAqB,GAAG;IAC5E,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CA4DA"}

package/dist/factories/cert-manager/resources/helm.js

@@ -0,0 +1,253 @@
+/**
+ * Cert-Manager Helm Integration Resources
+ *
+ * This module provides wrapper functions for creating Helm resources specifically
+ * configured for cert-manager deployments. These functions wrap the generic Helm factories
+ * from src/factories/helm/ and provide cert-manager-specific configuration interfaces
+ * while reusing existing readiness evaluators.
+ */
+import { DEFAULT_FLUX_NAMESPACE } from '../../../core/config/defaults.js';
+import { isCelExpression, isKubernetesRef } from '../../../utils/type-guards.js';
+import { createHelmRepositoryReadinessEvaluator, } from '../../helm/helm-repository.js';
+import { createLabeledHelmReleaseEvaluator } from '../../helm/readiness-evaluators.js';
+import { createResource } from '../../shared.js';
+// =============================================================================
+// CERT-MANAGER HELM REPOSITORY WRAPPER
+// =============================================================================
+/**
+ * Wrapper function for creating Cert-Manager HelmRepository resources
+ *
+ * This function wraps the generic `helmRepository` factory and provides
+ * cert-manager-specific default configuration (official cert-manager chart repository).
+ * It reuses the existing Helm readiness evaluator.
+ *
+ * @param config - Cert-Manager HelmRepository configuration
+ * @returns Enhanced HelmRepository resource with cert-manager-specific settings
+ *
+ * @example
+ * Basic cert-manager repository:
+ * ```typescript
+ * const repo = certManagerHelmRepository({
+ *   name: 'cert-manager',
+ *   namespace: 'flux-system'
+ * });
+ * ```
+ *
+ * @example
+ * Repository with custom settings:
+ * ```typescript
+ * const repo = certManagerHelmRepository({
+ *   name: 'cert-manager-repo',
+ *   namespace: 'flux-system',
+ *   url: 'https://charts.jetstack.io',
+ *   interval: '10m'
+ * });
+ * ```
+ */
+/** Cert-Manager HelmRepository readiness evaluator (delegates to shared implementation) */
+const certManagerHelmRepositoryReadinessEvaluator = createHelmRepositoryReadinessEvaluator('Cert-Manager');
+export function certManagerHelmRepository(config) {
+    // For Kro deployments, we need to avoid status expectations that conflict with actual Flux status
+    // Create the resource directly without status template to avoid Kro controller conflicts
+    return createResource({
+        ...(config.id && { id: config.id }),
+        apiVersion: 'source.toolkit.fluxcd.io/v1',
+        kind: 'HelmRepository',
+        metadata: {
+            name: config.name,
+            namespace: config.namespace || DEFAULT_FLUX_NAMESPACE,
+        },
+        spec: {
+            url: config.url || 'https://charts.jetstack.io',
+            interval: config.interval || '5m',
+        },
+        // Omit status template to avoid conflicts with Kro controller
+    }).withReadinessEvaluator(certManagerHelmRepositoryReadinessEvaluator);
+}
+// =============================================================================
+// CERT-MANAGER HELM RELEASE WRAPPER
+// =============================================================================
+/**
+ * Wrapper function for creating Cert-Manager HelmRelease resources
+ *
+ * This function wraps the generic `helmRelease` factory and provides
+ * cert-manager-specific default configuration (chart name, repository reference).
+ * It reuses the existing Helm readiness evaluator.
+ *
+ * @param config - Cert-Manager HelmRelease configuration
+ * @returns Enhanced HelmRelease resource with cert-manager-specific configuration
+ *
+ * @example
+ * Basic cert-manager release:
+ * ```typescript
+ * const release = certManagerHelmRelease({
+ *   name: 'cert-manager',
+ *   namespace: 'cert-manager',
+ *   repositoryName: 'cert-manager-repo'
+ * });
+ * ```
+ *
+ * @example
+ * Release with custom values:
+ * ```typescript
+ * const release = certManagerHelmRelease({
+ *   name: 'cert-manager',
+ *   namespace: 'cert-manager',
+ *   repositoryName: 'cert-manager-repo',
+ *   values: {
+ *     installCRDs: false,
+ *     replicaCount: 2,
+ *     webhook: { enabled: true }
+ *   }
+ * });
+ * ```
+ */
+/** Cert-Manager HelmRelease readiness evaluator (delegates to shared implementation) */
+const certManagerHelmReleaseReadinessEvaluator = createLabeledHelmReleaseEvaluator('Cert-Manager');
+export function certManagerHelmRelease(config) {
+    // Create a HelmRelease that properly references the HelmRepository by name
+    // We need to use createResource directly to have full control over the sourceRef
+    // CRITICAL: Helm values MUST be static - they cannot contain KubernetesRef objects
+    // from schema proxies because Kro/Flux cannot handle CEL expressions inside spec.values.
+    // The HelmRelease spec.values field is an arbitrary object without a defined schema,
+    // so any KubernetesRef objects will serialize incorrectly (as empty objects or strings).
+    //
+    // We set these critical values with sensible defaults to ensure cert-manager installs correctly:
+    // 1. installCRDs: true — required for cert-manager to function
+    // 2. startupapicheck.enabled: true — validates webhook readiness before marking ready
+    //
+    // NOTE: config.values may already be the result of mapCertManagerConfigToHelmValues()
+    // from the bootstrap composition (see utils/helm-values-mapper.ts).
+    // We just sanitize the values to remove any proxy references.
+    // The bootstrap composition's startupapicheck settings take precedence via the spread.
+    const baseValues = config.values ? sanitizeHelmValues(config.values) : {};
+    const finalValues = {
+        // Always install CRDs — required for cert-manager to function
+        installCRDs: true,
+        // Enable startupapicheck by default with increased timeout to ensure webhook is ready.
+        // This prevents "webhook not found" errors when deploying cert-manager CRDs.
+        startupapicheck: {
+            enabled: true,
+            timeout: '5m',
+        },
+        // Spread baseValues LAST so caller-provided values (including from the bootstrap
+        // composition) take precedence over our defaults above
+        ...baseValues,
+    };
+    return createResource({
+        ...(config.id && { id: config.id }),
+        apiVersion: 'helm.toolkit.fluxcd.io/v2',
+        kind: 'HelmRelease',
+        metadata: {
+            name: config.name,
+            namespace: config.namespace || 'cert-manager',
+        },
+        spec: {
+            interval: '5m',
+            chart: {
+                spec: {
+                    chart: 'cert-manager',
+                    version: config.version || '*',
+                    sourceRef: {
+                        kind: 'HelmRepository',
+                        name: config.repositoryName || 'cert-manager-repo',
+                        namespace: DEFAULT_FLUX_NAMESPACE, // HelmRepositories are typically in flux-system
+                    },
+                },
+            },
+            values: finalValues,
+        },
+    }).withReadinessEvaluator(certManagerHelmReleaseReadinessEvaluator);
+}
+/**
+ * Sanitizes Helm values by removing any KubernetesRef objects or other non-serializable values.
+ * This is necessary because Helm values must be static - they cannot contain CEL expressions
+ * or schema proxy references.
+ *
+ * @param values - The Helm values object to sanitize
+ * @returns A sanitized copy of the values with only primitive types, arrays, and plain objects
+ */
+function sanitizeHelmValues(values) {
+    return JSON.parse(JSON.stringify(values, (_key, value) => {
+        // Skip KubernetesRef objects — schema proxy references can't be used in Helm values
+        if (isKubernetesRef(value)) {
+            return undefined;
+        }
+        // Skip CelExpression objects — CEL expressions can't be used in Helm values
+        if (isCelExpression(value)) {
+            return undefined;
+        }
+        return value;
+    }));
+}
+// =============================================================================
+// HELM VALUES MAPPING SYSTEM
+// =============================================================================
+/**
+ * Validates Cert-Manager Helm values configuration
+ *
+ * This function validates that the generated Helm values are compatible
+ * with the cert-manager Helm chart requirements.
+ *
+ * @param values - Helm values to validate
+ * @returns Validation result with any errors found
+ *
+ * @example
+ * ```typescript
+ * const values = mapCertManagerConfigToHelmValues(config);
+ * const validation = validateCertManagerHelmValues(values);
+ * if (!validation.valid) {
+ *   console.error('Validation errors:', validation.errors);
+ * }
+ * ```
+ */
+export function validateCertManagerHelmValues(values) {
+    const errors = [];
+    // Note: installCRDs defaults to true for TypeKro comprehensive deployment
+    // This ensures TypeKro can replace kubectl for complete deployments
+    // Validate replica counts
+    if (values.replicaCount !== undefined && values.replicaCount < 1) {
+        errors.push('replicaCount must be at least 1');
+    }
+    if (values.webhook?.replicaCount !== undefined && values.webhook.replicaCount < 1) {
+        errors.push('webhook.replicaCount must be at least 1');
+    }
+    if (values.cainjector?.replicaCount !== undefined && values.cainjector.replicaCount < 1) {
+        errors.push('cainjector.replicaCount must be at least 1');
+    }
+    // Validate resource requirements format
+    const validateResources = (resources, component) => {
+        if (resources) {
+            if (resources.limits) {
+                if (resources.limits.cpu && typeof resources.limits.cpu !== 'string') {
+                    errors.push(`${component}.resources.limits.cpu must be a string`);
+                }
+                if (resources.limits.memory && typeof resources.limits.memory !== 'string') {
+                    errors.push(`${component}.resources.limits.memory must be a string`);
+                }
+            }
+            if (resources.requests) {
+                if (resources.requests.cpu && typeof resources.requests.cpu !== 'string') {
+                    errors.push(`${component}.resources.requests.cpu must be a string`);
+                }
+                if (resources.requests.memory && typeof resources.requests.memory !== 'string') {
+                    errors.push(`${component}.resources.requests.memory must be a string`);
+                }
+            }
+        }
+    };
+    if (values.controller?.resources) {
+        validateResources(values.controller.resources, 'controller');
+    }
+    if (values.webhook?.resources) {
+        validateResources(values.webhook.resources, 'webhook');
+    }
+    if (values.cainjector?.resources) {
+        validateResources(values.cainjector.resources, 'cainjector');
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+    };
+}
+//# sourceMappingURL=helm.js.map

package/dist/factories/cert-manager/resources/helm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.js","sourceRoot":"","sources":["../../../../src/factories/cert-manager/resources/helm.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACjF,OAAO,EACL,sCAAsC,GAGvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AAEvF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAOjD,gFAAgF;AAChF,uCAAuC;AACvC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,2FAA2F;AAC3F,MAAM,2CAA2C,GAC/C,sCAAsC,CAAC,cAAc,CAAC,CAAC;AAEzD,MAAM,UAAU,yBAAyB,CACvC,MAAuC;IAEvC,kGAAkG;IAClG,yFAAyF;IACzF,OAAO,cAAc,CAA2C;QAC9D,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QACnC,UAAU,EAAE,6BAA6B;QACzC,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,sBAAsB;SACtD;QACD,IAAI,EAAE;YACJ,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,4BAA4B;YAC/C,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;SAClC;QACD,8DAA8D;KAC/D,CAAC,CAAC,sBAAsB,CAAC,2CAA2C,CAAC,CAAC;AACzE,CAAC;AAED,gFAAgF;AAChF,oCAAoC;AACpC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,wFAAwF;AACxF,MAAM,wCAAwC,GAAG,iCAAiC,CAAC,cAAc,CAAC,CAAC;AAEnG,MAAM,UAAU,sBAAsB,CACpC,MAAoC;IAEpC,2EAA2E;IAC3E,iFAAiF;IAEjF,mFAAmF;IACnF,yFAAyF;IACzF,qFAAqF;IACrF,yFAAyF;IACzF,EAAE;IACF,iGAAiG;IACjG,+DAA+D;IAC/D,sFAAsF;IACtF,EAAE;IACF,sFAAsF;IACtF,oEAAoE;IACpE,8DAA8D;IAC9D,uFAAuF;IACvF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAG;QAClB,8DAA8D;QAC9D,WAAW,EAAE,IAAI;QACjB,uFAAuF;QACvF,6EAA6E;QAC7E,eAAe,EAAE;YACf,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;SACd;QACD,iFAAiF;QACjF,uDAAuD;QACvD,GAAG,UAAU;KACd,CAAC;IAEF,OAAO,cAAc,CAAqC;QACxD,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QACnC,UAAU,EAAE,2BAA2B;QACvC,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,cAAc;SAC9C;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE;gBACL,IAAI,EAAE;oBACJ,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,GAAG;oBAC9B,SAAS,EAAE;wBACT,IAAI,EAAE,gBAAyB;wBAC/B,IAAI,EAAE,MAAM,CAAC,cAAc,IAAI,mBAAmB;wBAClD,SAAS,EAAE,sBAAsB,EAAE,gDAAgD;qBACpF;iBACF;aACF;YACD,MAAM,EAAE,WAAW;SACpB;KACF,CAAC,CAAC,sBAAsB,CAAC,wCAAwC,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,MAA+B;IACzD,OAAO,IAAI,CAAC,KAAK,CACf,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACrC,oFAAoF;QACpF,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,4EAA4E;QAC5E,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAA6B;IAIzE,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,0EAA0E;IAC1E,oEAAoE;IAEpE,0BAA0B;IAC1B,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,EAAE,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QACxF,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;IAED,wCAAwC;IACxC,MAAM,iBAAiB,GAAG,CACxB,SAAmF,EACnF,SAAiB,EACjB,EAAE;QACF,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;gBACrB,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;oBACrE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,wCAAwC,CAAC,CAAC;gBACpE,CAAC;gBACD,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC3E,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,2CAA2C,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YACD,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC,QAAQ,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;oBACzE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,0CAA0C,CAAC,CAAC;gBACtE,CAAC;gBACD,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,IAAI,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC/E,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,6CAA6C,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;QACjC,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;QAC9B,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;QACjC,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/factories/cert-manager/resources/index.d.ts

@@ -0,0 +1,5 @@
+export * from './helm.js';
+export * from './certificates.js';
+export * from './issuers.js';
+export * from './challenges.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/cert-manager/resources/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/cert-manager/resources/index.ts"],"names":[],"mappings":"AACA,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/factories/cert-manager/resources/index.js

@@ -0,0 +1,6 @@
+// Cert-Manager CRD factory functions
+export * from './helm.js';
+export * from './certificates.js';
+export * from './issuers.js';
+export * from './challenges.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/cert-manager/resources/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/cert-manager/resources/index.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/factories/cert-manager/resources/issuers.d.ts

@@ -0,0 +1,79 @@
+import type { Enhanced } from '../../../core/types/index.js';
+import type { ClusterIssuerConfig, IssuerConfig, IssuerStatus } from '../types.js';
+/**
+ * ClusterIssuer Factory Function
+ *
+ * Creates a cert-manager ClusterIssuer resource with comprehensive configuration options.
+ * Supports all issuer types including ACME, CA, Vault, Venafi, and self-signed issuers.
+ *
+ * Features:
+ * - Full cert-manager.io/v1 API support
+ * - Embedded readiness evaluator for issuer lifecycle tracking
+ * - Support for all major certificate authorities and ACME providers
+ * - Comprehensive DNS01 and HTTP01 challenge solver configuration
+ * - Cluster-wide certificate issuance capabilities
+ *
+ * @param config - ClusterIssuer configuration following cert-manager.io/v1 API
+ * @returns Enhanced ClusterIssuer resource with readiness evaluation
+ *
+ * @example
+ * ```typescript
+ * // Self-signed issuer
+ * const selfSigned = clusterIssuer({
+ *   name: 'selfsigned-issuer',
+ *   spec: {
+ *     selfSigned: {}
+ *   }
+ * });
+ *
+ * // Let's Encrypt with HTTP01 challenge
+ * const letsEncrypt = clusterIssuer({
+ *   name: 'letsencrypt-prod',
+ *   spec: {
+ *     acme: {
+ *       server: 'https://acme-v02.api.letsencrypt.org/directory',
+ *       email: 'admin@example.com',
+ *       privateKeySecretRef: { name: 'letsencrypt-prod' },
+ *       solvers: [{
+ *         http01: {
+ *           ingress: { class: 'nginx' }
+ *         }
+ *       }]
+ *     }
+ *   }
+ * });
+ * ```
+ */
+export declare function clusterIssuer(config: ClusterIssuerConfig): Enhanced<ClusterIssuerConfig['spec'], IssuerStatus>;
+/**
+ * Issuer Factory Function
+ *
+ * Creates a cert-manager Issuer resource with comprehensive configuration options.
+ * Supports all issuer types including ACME, CA, Vault, Venafi, and self-signed issuers.
+ *
+ * Features:
+ * - Full cert-manager.io/v1 API support
+ * - Embedded readiness evaluator for issuer lifecycle tracking
+ * - Support for all major certificate authorities and ACME providers
+ * - Comprehensive DNS01 and HTTP01 challenge solver configuration
+ * - Namespace-scoped certificate issuance capabilities
+ *
+ * @param config - Issuer configuration following cert-manager.io/v1 API
+ * @returns Enhanced Issuer resource with readiness evaluation
+ *
+ * @example
+ * ```typescript
+ * // Namespace-scoped CA issuer
+ * const caIssuer = issuer({
+ *   name: 'ca-issuer',
+ *   namespace: 'default',
+ *   spec: {
+ *     ca: {
+ *       secretName: 'ca-key-pair'
+ *     }
+ *   }
+ * });
+ * ```
+ */
+export declare function issuer(config: IssuerConfig): Enhanced<IssuerConfig['spec'], IssuerStatus>;
+//# sourceMappingURL=issuers.d.ts.map

package/dist/factories/cert-manager/resources/issuers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issuers.d.ts","sourceRoot":"","sources":["../../../../src/factories/cert-manager/resources/issuers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAYnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,mBAAmB,GAC1B,QAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAgBrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAczF"}

package/dist/factories/cert-manager/resources/issuers.js

@@ -0,0 +1,109 @@
+// Cert-Manager Issuer Resources
+import { createConditionBasedReadinessEvaluator } from '../../../core/readiness/index.js';
+import { createResource } from '../../shared.js';
+/** Evaluates ClusterIssuer readiness via standard Ready condition check. */
+const clusterIssuerReadinessEvaluator = createConditionBasedReadinessEvaluator({
+    kind: 'ClusterIssuer',
+});
+/** Evaluates Issuer readiness via standard Ready condition check. */
+const issuerReadinessEvaluator = createConditionBasedReadinessEvaluator({
+    kind: 'Issuer',
+});
+/**
+ * ClusterIssuer Factory Function
+ *
+ * Creates a cert-manager ClusterIssuer resource with comprehensive configuration options.
+ * Supports all issuer types including ACME, CA, Vault, Venafi, and self-signed issuers.
+ *
+ * Features:
+ * - Full cert-manager.io/v1 API support
+ * - Embedded readiness evaluator for issuer lifecycle tracking
+ * - Support for all major certificate authorities and ACME providers
+ * - Comprehensive DNS01 and HTTP01 challenge solver configuration
+ * - Cluster-wide certificate issuance capabilities
+ *
+ * @param config - ClusterIssuer configuration following cert-manager.io/v1 API
+ * @returns Enhanced ClusterIssuer resource with readiness evaluation
+ *
+ * @example
+ * ```typescript
+ * // Self-signed issuer
+ * const selfSigned = clusterIssuer({
+ *   name: 'selfsigned-issuer',
+ *   spec: {
+ *     selfSigned: {}
+ *   }
+ * });
+ *
+ * // Let's Encrypt with HTTP01 challenge
+ * const letsEncrypt = clusterIssuer({
+ *   name: 'letsencrypt-prod',
+ *   spec: {
+ *     acme: {
+ *       server: 'https://acme-v02.api.letsencrypt.org/directory',
+ *       email: 'admin@example.com',
+ *       privateKeySecretRef: { name: 'letsencrypt-prod' },
+ *       solvers: [{
+ *         http01: {
+ *           ingress: { class: 'nginx' }
+ *         }
+ *       }]
+ *     }
+ *   }
+ * });
+ * ```
+ */
+export function clusterIssuer(config) {
+    return createResource({
+        apiVersion: 'cert-manager.io/v1',
+        kind: 'ClusterIssuer',
+        metadata: {
+            name: config.name,
+        },
+        spec: config.spec,
+        ...(config.id && { id: config.id }),
+    }, { scope: 'cluster' }).withReadinessEvaluator(clusterIssuerReadinessEvaluator);
+}
+/**
+ * Issuer Factory Function
+ *
+ * Creates a cert-manager Issuer resource with comprehensive configuration options.
+ * Supports all issuer types including ACME, CA, Vault, Venafi, and self-signed issuers.
+ *
+ * Features:
+ * - Full cert-manager.io/v1 API support
+ * - Embedded readiness evaluator for issuer lifecycle tracking
+ * - Support for all major certificate authorities and ACME providers
+ * - Comprehensive DNS01 and HTTP01 challenge solver configuration
+ * - Namespace-scoped certificate issuance capabilities
+ *
+ * @param config - Issuer configuration following cert-manager.io/v1 API
+ * @returns Enhanced Issuer resource with readiness evaluation
+ *
+ * @example
+ * ```typescript
+ * // Namespace-scoped CA issuer
+ * const caIssuer = issuer({
+ *   name: 'ca-issuer',
+ *   namespace: 'default',
+ *   spec: {
+ *     ca: {
+ *       secretName: 'ca-key-pair'
+ *     }
+ *   }
+ * });
+ * ```
+ */
+export function issuer(config) {
+    return createResource({
+        apiVersion: 'cert-manager.io/v1',
+        kind: 'Issuer',
+        metadata: {
+            name: config.name,
+            ...(config.namespace && { namespace: config.namespace }),
+        },
+        spec: config.spec,
+        ...(config.id && { id: config.id }),
+    }).withReadinessEvaluator(issuerReadinessEvaluator);
+}
+//# sourceMappingURL=issuers.js.map

package/dist/factories/cert-manager/resources/issuers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issuers.js","sourceRoot":"","sources":["../../../../src/factories/cert-manager/resources/issuers.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,OAAO,EAAE,sCAAsC,EAAE,MAAM,kCAAkC,CAAC;AAE1F,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAGjD,4EAA4E;AAC5E,MAAM,+BAA+B,GAAG,sCAAsC,CAAC;IAC7E,IAAI,EAAE,eAAe;CACtB,CAAC,CAAC;AAEH,qEAAqE;AACrE,MAAM,wBAAwB,GAAG,sCAAsC,CAAC;IACtE,IAAI,EAAE,QAAQ;CACf,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,UAAU,aAAa,CAC3B,MAA2B;IAE3B,OAAO,cAAc,CACnB;QACE,UAAU,EAAE,oBAAoB;QAChC,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB;QACD,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;KACpC,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC,sBAAsB,CAAC,+BAA+B,CAGvD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,MAAM,CAAC,MAAoB;IACzC,OAAO,cAAc,CAAC;QACpB,UAAU,EAAE,oBAAoB;QAChC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;SACzD;QACD,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;KACpC,CAAC,CAAC,sBAAsB,CAAC,wBAAwB,CAGjD,CAAC;AACJ,CAAC"}