typekro 0.31.1 → 0.32.0

package/dist/factories/opensearch/compositions/cluster.js

@@ -0,0 +1,338 @@
+import { type } from 'arktype';
+import { kubernetesComposition } from '../../../core/composition/imperative.js';
+import { setIncludeWhen } from '../../../core/metadata/resource-metadata.js';
+import { Cel } from '../../../core/references/cel.js';
+import { isKubernetesRef } from '../../../utils/type-guards.js';
+import { certificate } from '../../cert-manager/resources/certificates.js';
+import { namespace } from '../../kubernetes/core/namespace.js';
+import { networkPolicy } from '../../kubernetes/networking/network-policy.js';
+import { DEFAULT_OPENSEARCH_OPERATOR_NAMESPACE } from '../constants.js';
+import { OPENSEARCH_HTTP_PORT, openSearchClusterResource } from '../resources/cluster.js';
+import { OpenSearchClusterStatusSchema } from '../types.js';
+const DEFAULT_OPENSEARCH_VERSION = '3.2.0';
+function resolveTopology(options) {
+    const profile = options.profile ?? 'development';
+    const nodes = options.nodes ?? 3;
+    const roles = options.roles ?? ['cluster_manager', 'data', 'ingest'];
+    if (!Number.isSafeInteger(nodes) || nodes < 3) {
+        throw new Error('makeOpenSearchCluster requires at least three nodes because the OpenSearch operator does not support single-node clusters.');
+    }
+    if (!roles.includes('cluster_manager')) {
+        throw new Error('makeOpenSearchCluster roles must include cluster_manager because its single node pool must be able to elect a cluster manager.');
+    }
+    const pdb = options.podDisruptionBudget ??
+        (profile === 'production' ? { minAvailable: Math.max(1, nodes - 1) } : undefined);
+    if (pdb?.minAvailable !== undefined && pdb.maxUnavailable !== undefined) {
+        throw new Error('makeOpenSearchCluster podDisruptionBudget accepts minAvailable or maxUnavailable, not both.');
+    }
+    if ((pdb?.minAvailable !== undefined &&
+        (!Number.isSafeInteger(pdb.minAvailable) ||
+            pdb.minAvailable < 1 ||
+            pdb.minAvailable >= nodes)) ||
+        (pdb?.maxUnavailable !== undefined &&
+            (!Number.isSafeInteger(pdb.maxUnavailable) ||
+                pdb.maxUnavailable < 0 ||
+                pdb.maxUnavailable >= nodes))) {
+        throw new Error('makeOpenSearchCluster PodDisruptionBudget must preserve at least one available node.');
+    }
+    const networkPolicy = options.networkPolicy?.enabled === true
+        ? {
+            operatorNamespace: options.networkPolicy.operatorNamespace ?? DEFAULT_OPENSEARCH_OPERATOR_NAMESPACE,
+            ingressNamespaceLabels: options.networkPolicy.ingressNamespaceLabels ?? {},
+            egressNamespaceLabels: options.networkPolicy.egressNamespaceLabels ?? [],
+            egressCidrs: options.networkPolicy.egressCidrs ?? [],
+        }
+        : profile === 'production'
+            ? {
+                operatorNamespace: options.networkPolicy?.operatorNamespace ?? DEFAULT_OPENSEARCH_OPERATOR_NAMESPACE,
+                ingressNamespaceLabels: options.networkPolicy?.ingressNamespaceLabels ?? {},
+                egressNamespaceLabels: options.networkPolicy?.egressNamespaceLabels ?? [],
+                egressCidrs: options.networkPolicy?.egressCidrs ?? [],
+            }
+            : undefined;
+    if (networkPolicy && !/^[a-z0-9]([-a-z0-9]*[a-z0-9])?$/u.test(networkPolicy.operatorNamespace)) {
+        throw new Error('makeOpenSearchCluster networkPolicy.operatorNamespace must be a non-empty Kubernetes Namespace name.');
+    }
+    if (profile === 'production' &&
+        networkPolicy &&
+        Object.keys(networkPolicy.ingressNamespaceLabels).length === 0) {
+        throw new Error('makeOpenSearchCluster production network policy requires ingressNamespaceLabels.');
+    }
+    return {
+        profile,
+        nodes,
+        roles,
+        tls: options.tls ?? 'generated',
+        snapshots: options.snapshots ?? false,
+        snapshotCredentialKeys: {
+            accessKey: options.snapshotCredentialKeys?.accessKey ?? 'accessKey',
+            secretKey: options.snapshotCredentialKeys?.secretKey ?? 'secretKey',
+        },
+        ...(pdb ? { podDisruptionBudget: pdb } : {}),
+        ...(networkPolicy ? { networkPolicy } : {}),
+    };
+}
+function buildSpecSchema(topology) {
+    const shape = {
+        name: 'string > 0',
+        namespace: 'string > 0',
+        'version?': 'string > 0',
+        'serviceName?': 'string > 0',
+        'lifecycle?': '"owned-delete" | "external-delete" | "external-retain"',
+        storage: {
+            size: 'string > 0',
+            'storageClassName?': 'string > 0',
+        },
+        'resources?': {
+            'requests?': { 'cpu?': 'string', 'memory?': 'string' },
+            'limits?': { 'cpu?': 'string', 'memory?': 'string' },
+        },
+        'adminCredentialsSecret?': { name: 'string > 0' },
+        'dashboardCredentialsSecret?': { name: 'string > 0' },
+        'monitoring?': 'boolean',
+    };
+    if (topology.tls === 'generated') {
+        shape.tls = { source: '"generated"' };
+    }
+    else if (topology.tls === 'secret') {
+        shape.tls = {
+            source: '"secret"',
+            secretName: 'string > 0',
+            adminSecretName: 'string > 0',
+            adminDn: '(string > 0)[] > 0',
+        };
+    }
+    else {
+        shape.tls = {
+            source: '"cert-manager"',
+            secretName: 'string > 0',
+            adminSecretName: 'string > 0',
+            issuerName: 'string > 0',
+            'issuerKind?': '"Issuer" | "ClusterIssuer"',
+            dnsNames: 'string[] > 0',
+            adminDn: '(string > 0)[] > 0',
+        };
+    }
+    if (topology.snapshots) {
+        shape.snapshots = {
+            repository: 'string > 0',
+            bucket: 'string > 0',
+            credentialsSecret: {
+                name: 'string > 0',
+            },
+            'endpoint?': 'string',
+            'region?': 'string',
+            'basePath?': 'string',
+        };
+    }
+    return type(shape);
+}
+export function makeOpenSearchCluster(options = {}) {
+    const topology = resolveTopology(options);
+    const specSchema = buildSpecSchema(topology);
+    return kubernetesComposition({
+        name: 'opensearch-cluster',
+        kind: 'OpenSearchClusterInstallation',
+        spec: specSchema,
+        status: OpenSearchClusterStatusSchema,
+    }, (spec) => {
+        const lifecycle = spec.lifecycle ?? 'owned-delete';
+        const clusterNamespace = namespace({
+            metadata: {
+                name: spec.namespace,
+                labels: {
+                    'app.kubernetes.io/name': 'opensearch',
+                    'app.kubernetes.io/instance': spec.name,
+                    'app.kubernetes.io/managed-by': 'typekro',
+                },
+            },
+            id: 'clusterNamespace',
+        });
+        if (isKubernetesRef(spec.name)) {
+            setIncludeWhen(clusterNamespace, [
+                Cel.expr('!has(schema.spec.lifecycle) || schema.spec.lifecycle == "owned-delete"'),
+            ]);
+        }
+        else if (lifecycle !== 'owned-delete') {
+            setIncludeWhen(clusterNamespace, [false]);
+        }
+        let serverCertificate;
+        if (topology.tls === 'cert-manager') {
+            const tls = spec.tls;
+            serverCertificate = certificate({
+                name: `${spec.name}-http`,
+                namespace: spec.namespace,
+                spec: {
+                    secretName: tls.secretName,
+                    issuerRef: {
+                        name: tls.issuerName,
+                        kind: tls.issuerKind ?? 'ClusterIssuer',
+                    },
+                    dnsNames: tls.dnsNames,
+                    usages: ['server auth'],
+                },
+                id: 'httpCertificate',
+            });
+        }
+        const cluster = openSearchClusterResource({
+            name: spec.name,
+            namespace: spec.namespace,
+            version: spec.version ?? DEFAULT_OPENSEARCH_VERSION,
+            serviceName: spec.serviceName ?? spec.name,
+            nodes: topology.nodes,
+            roles: topology.roles,
+            storage: {
+                size: spec.storage.size,
+                ...(spec.storage.storageClassName
+                    ? { storageClassName: spec.storage.storageClassName }
+                    : {}),
+                deletionPolicy: lifecycle === 'external-retain' ? 'retain' : 'delete',
+            },
+            ...(spec.resources ? { resources: spec.resources } : {}),
+            ...(spec.adminCredentialsSecret
+                ? { adminCredentialsSecret: spec.adminCredentialsSecret }
+                : {}),
+            ...(spec.dashboardCredentialsSecret
+                ? {
+                    dashboardCredentialsSecret: spec.dashboardCredentialsSecret,
+                }
+                : {}),
+            tls: topology.tls === 'generated'
+                ? { source: 'generated' }
+                : externalTls(spec.tls, topology.tls),
+            ...(topology.snapshots && spec.snapshots
+                ? {
+                    snapshots: {
+                        repository: spec.snapshots.repository,
+                        bucket: spec.snapshots.bucket,
+                        credentialsSecret: {
+                            name: spec.snapshots.credentialsSecret.name,
+                            accessKeyKey: topology.snapshotCredentialKeys.accessKey,
+                            secretKeyKey: topology.snapshotCredentialKeys.secretKey,
+                        },
+                        ...(spec.snapshots.endpoint ? { endpoint: spec.snapshots.endpoint } : {}),
+                        ...(spec.snapshots.region ? { region: spec.snapshots.region } : {}),
+                        ...(spec.snapshots.basePath ? { basePath: spec.snapshots.basePath } : {}),
+                    },
+                }
+                : {}),
+            monitoring: spec.monitoring ?? false,
+            ...(topology.podDisruptionBudget
+                ? { podDisruptionBudget: topology.podDisruptionBudget }
+                : {}),
+            id: 'cluster',
+        });
+        if (serverCertificate)
+            cluster.dependsOn(serverCertificate);
+        if (topology.networkPolicy) {
+            const podSelector = {
+                matchLabels: {
+                    'opensearch.org/opensearch-cluster': spec.name,
+                },
+            };
+            networkPolicy({
+                metadata: {
+                    name: `${spec.name}-default`,
+                    namespace: spec.namespace,
+                },
+                spec: {
+                    podSelector,
+                    policyTypes: ['Ingress', 'Egress'],
+                    ingress: [
+                        {
+                            _from: [{ podSelector: {} }],
+                        },
+                        {
+                            _from: [
+                                {
+                                    namespaceSelector: {
+                                        matchLabels: {
+                                            'kubernetes.io/metadata.name': topology.networkPolicy.operatorNamespace,
+                                        },
+                                    },
+                                },
+                            ],
+                            ports: [{ protocol: 'TCP', port: OPENSEARCH_HTTP_PORT }],
+                        },
+                        ...(Object.keys(topology.networkPolicy.ingressNamespaceLabels).length > 0
+                            ? [
+                                {
+                                    _from: [
+                                        {
+                                            namespaceSelector: {
+                                                matchLabels: topology.networkPolicy.ingressNamespaceLabels,
+                                            },
+                                        },
+                                    ],
+                                    ports: [
+                                        {
+                                            protocol: 'TCP',
+                                            port: OPENSEARCH_HTTP_PORT,
+                                        },
+                                    ],
+                                },
+                            ]
+                            : []),
+                    ],
+                    egress: [
+                        { to: [{ podSelector: {} }] },
+                        {
+                            to: [
+                                {
+                                    namespaceSelector: {
+                                        matchLabels: {
+                                            'kubernetes.io/metadata.name': 'kube-system',
+                                        },
+                                    },
+                                },
+                            ],
+                            ports: [
+                                { protocol: 'UDP', port: 53 },
+                                { protocol: 'TCP', port: 53 },
+                            ],
+                        },
+                        ...topology.networkPolicy.egressNamespaceLabels.map((matchLabels) => ({
+                            to: [{ namespaceSelector: { matchLabels } }],
+                        })),
+                        ...topology.networkPolicy.egressCidrs.map((cidr) => ({
+                            to: [{ ipBlock: { cidr } }],
+                        })),
+                    ],
+                },
+                id: 'networkPolicy',
+            });
+        }
+        const failed = Cel.expr('cluster.status.componentsStatus.exists(c, c.status == "Failed" || c.status == "Error")');
+        const ready = Cel.expr(`cluster.status.initialized == true && cluster.status.availableNodes >= ${topology.nodes} && (cluster.status.health == "green" || cluster.status.health == "yellow") && cluster.status.version == cluster.spec.general.version`);
+        return {
+            ready,
+            failed,
+            phase: Cel.expr(`cluster.status.componentsStatus.exists(c, c.status == "Failed" || c.status == "Error") ? "Failed" : (cluster.status.initialized == true && cluster.status.availableNodes >= ${topology.nodes} && (cluster.status.health == "green" || cluster.status.health == "yellow") && cluster.status.version == cluster.spec.general.version ? "Ready" : "Installing")`),
+            endpoint: `https://${cluster.spec.general.serviceName}.${cluster.metadata.namespace}.svc.cluster.local:${OPENSEARCH_HTTP_PORT}`,
+            credentialsSecret: Cel.expr(`has(cluster.spec.security.config.adminCredentialsSecret) && cluster.spec.security.config.adminCredentialsSecret.name != "" ? cluster.spec.security.config.adminCredentialsSecret.name : string(cluster.metadata.name) + "-admin-password"`),
+            version: cluster.status.version,
+            availableNodes: cluster.status.availableNodes,
+            health: cluster.status.health,
+            snapshotRepository: Cel.expr('has(cluster.spec.general.snapshotRepositories) && cluster.spec.general.snapshotRepositories.size() > 0 ? cluster.spec.general.snapshotRepositories[0].name : ""'),
+        };
+    }, topology.tls === 'generated'
+        ? undefined
+        : {
+            schemaFieldValidations: {
+                'tls.adminDn': 'size(self) > 0 && self.all(dn, size(dn) > 0)',
+            },
+        });
+}
+export const openSearchCluster = makeOpenSearchCluster();
+function externalTls(tls, source) {
+    if (tls.source === 'generated') {
+        throw new Error(`makeOpenSearchCluster configured TLS source ${source}, but the instance supplied generated TLS.`);
+    }
+    return {
+        source,
+        secretName: tls.secretName,
+        adminSecretName: tls.adminSecretName,
+        adminDn: tls.adminDn,
+    };
+}
+//# sourceMappingURL=cluster.js.map

package/dist/factories/opensearch/compositions/cluster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cluster.js","sourceRoot":"","sources":["../../../../src/factories/opensearch/compositions/cluster.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAC7E,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAC9E,OAAO,EAAE,qCAAqC,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAM1F,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAoE3C,SAAS,eAAe,CAAC,OAAsC;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,aAAa,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,4HAA4H,CAC7H,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,gIAAgI,CACjI,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GACP,OAAO,CAAC,mBAAmB;QAC3B,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpF,IAAI,GAAG,EAAE,YAAY,KAAK,SAAS,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,IACE,CAAC,GAAG,EAAE,YAAY,KAAK,SAAS;QAC9B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC;YACtC,GAAG,CAAC,YAAY,GAAG,CAAC;YACpB,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,CAAC;QAC/B,CAAC,GAAG,EAAE,cAAc,KAAK,SAAS;YAChC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC;gBACxC,GAAG,CAAC,cAAc,GAAG,CAAC;gBACtB,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa,EAAE,OAAO,KAAK,IAAI;QACrC,CAAC,CAAC;YACE,iBAAiB,EACf,OAAO,CAAC,aAAa,CAAC,iBAAiB,IAAI,qCAAqC;YAClF,sBAAsB,EAAE,OAAO,CAAC,aAAa,CAAC,sBAAsB,IAAI,EAAE;YAC1E,qBAAqB,EAAE,OAAO,CAAC,aAAa,CAAC,qBAAqB,IAAI,EAAE;YACxE,WAAW,EAAE,OAAO,CAAC,aAAa,CAAC,WAAW,IAAI,EAAE;SACrD;QACH,CAAC,CAAC,OAAO,KAAK,YAAY;YACxB,CAAC,CAAC;gBACE,iBAAiB,EACf,OAAO,CAAC,aAAa,EAAE,iBAAiB,IAAI,qCAAqC;gBACnF,sBAAsB,EAAE,OAAO,CAAC,aAAa,EAAE,sBAAsB,IAAI,EAAE;gBAC3E,qBAAqB,EAAE,OAAO,CAAC,aAAa,EAAE,qBAAqB,IAAI,EAAE;gBACzE,WAAW,EAAE,OAAO,CAAC,aAAa,EAAE,WAAW,IAAI,EAAE;aACtD;YACH,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,aAAa,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CACb,sGAAsG,CACvG,CAAC;IACJ,CAAC;IACD,IACE,OAAO,KAAK,YAAY;QACxB,aAAa;QACb,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,MAAM,KAAK,CAAC,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO;QACP,KAAK;QACL,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,WAAW;QAC/B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK;QACrC,sBAAsB,EAAE;YACtB,SAAS,EAAE,OAAO,CAAC,sBAAsB,EAAE,SAAS,IAAI,WAAW;YACnE,SAAS,EAAE,OAAO,CAAC,sBAAsB,EAAE,SAAS,IAAI,WAAW;SACpE;QACD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAA0B;IACjD,MAAM,KAAK,GAA4B;QACrC,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,YAAY;QACxB,cAAc,EAAE,YAAY;QAC5B,YAAY,EAAE,wDAAwD;QACtE,OAAO,EAAE;YACP,IAAI,EAAE,YAAY;YAClB,mBAAmB,EAAE,YAAY;SAClC;QACD,YAAY,EAAE;YACZ,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;YACtD,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;SACrD;QACD,yBAAyB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;QACjD,6BAA6B,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;QACrD,aAAa,EAAE,SAAS;KACzB,CAAC;IACF,IAAI,QAAQ,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QACjC,KAAK,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACxC,CAAC;SAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,CAAC,GAAG,GAAG;YACV,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,YAAY;YACxB,eAAe,EAAE,YAAY;YAC7B,OAAO,EAAE,oBAAoB;SAC9B,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,GAAG,GAAG;YACV,MAAM,EAAE,gBAAgB;YACxB,UAAU,EAAE,YAAY;YACxB,eAAe,EAAE,YAAY;YAC7B,UAAU,EAAE,YAAY;YACxB,aAAa,EAAE,4BAA4B;YAC3C,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,oBAAoB;SAC9B,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,KAAK,CAAC,SAAS,GAAG;YAChB,UAAU,EAAE,YAAY;YACxB,MAAM,EAAE,YAAY;YACpB,iBAAiB,EAAE;gBACjB,IAAI,EAAE,YAAY;aACnB;YACD,WAAW,EAAE,QAAQ;YACrB,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,QAAQ;SACtB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,KAAc,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAGnC,UAAmB,EAAa;IAEhC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,qBAAqB,CAC1B;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,+BAA+B;QACrC,IAAI,EAAE,UAAmB;QACzB,MAAM,EAAE,6BAA6B;KACtC,EACD,CAAC,IAAkC,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC;QACnD,MAAM,gBAAgB,GAAG,SAAS,CAAC;YACjC,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,SAAS;gBACpB,MAAM,EAAE;oBACN,wBAAwB,EAAE,YAAY;oBACtC,4BAA4B,EAAE,IAAI,CAAC,IAAI;oBACvC,8BAA8B,EAAE,SAAS;iBAC1C;aACF;YACD,EAAE,EAAE,kBAAkB;SACvB,CAAC,CAAC;QACH,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,cAAc,CAAC,gBAAgB,EAAE;gBAC/B,GAAG,CAAC,IAAI,CACN,wEAAwE,CACzE;aACF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YACxC,cAAc,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,iBAA6D,CAAC;QAClE,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAGhB,CAAC;YACF,iBAAiB,GAAG,WAAW,CAAC;gBAC9B,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,OAAO;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI,EAAE;oBACJ,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,SAAS,EAAE;wBACT,IAAI,EAAE,GAAG,CAAC,UAAU;wBACpB,IAAI,EAAE,GAAG,CAAC,UAAU,IAAI,eAAe;qBACxC;oBACD,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,MAAM,EAAE,CAAC,aAAa,CAAC;iBACxB;gBACD,EAAE,EAAE,iBAAiB;aACtB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,yBAAyB,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,0BAA0B;YACnD,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI;YAC1C,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE;gBACP,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;gBACvB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB;oBAC/B,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE;oBACrD,CAAC,CAAC,EAAE,CAAC;gBACP,cAAc,EAAE,SAAS,KAAK,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;aACtE;YACD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,sBAAsB;gBAC7B,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,EAAE;gBACzD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,0BAA0B;gBACjC,CAAC,CAAC;oBACE,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;iBAC5D;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,EACD,QAAQ,CAAC,GAAG,KAAK,WAAW;gBAC1B,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE;gBACzB,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC;YACzC,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;gBACtC,CAAC,CAAC;oBACE,SAAS,EAAE;wBACT,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU;wBACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;wBAC7B,iBAAiB,EAAE;4BACjB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI;4BAC3C,YAAY,EAAE,QAAQ,CAAC,sBAAsB,CAAC,SAAS;4BACvD,YAAY,EAAE,QAAQ,CAAC,sBAAsB,CAAC,SAAS;yBACxD;wBACD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC1E;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;YACpC,GAAG,CAAC,QAAQ,CAAC,mBAAmB;gBAC9B,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,EAAE;gBACvD,CAAC,CAAC,EAAE,CAAC;YACP,EAAE,EAAE,SAAS;SACd,CAAC,CAAC;QACH,IAAI,iBAAiB;YAAE,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAE5D,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG;gBAClB,WAAW,EAAE;oBACX,mCAAmC,EAAE,IAAI,CAAC,IAAI;iBAC/C;aACF,CAAC;YACF,aAAa,CAAC;gBACZ,QAAQ,EAAE;oBACR,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,UAAU;oBAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B;gBACD,IAAI,EAAE;oBACJ,WAAW;oBACX,WAAW,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;oBAClC,OAAO,EAAE;wBACP;4BACE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;yBAC7B;wBACD;4BACE,KAAK,EAAE;gCACL;oCACE,iBAAiB,EAAE;wCACjB,WAAW,EAAE;4CACX,6BAA6B,EAAE,QAAQ,CAAC,aAAa,CAAC,iBAAiB;yCACxE;qCACF;iCACF;6BACF;4BACD,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;yBACzD;wBACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,MAAM,GAAG,CAAC;4BACvE,CAAC,CAAC;gCACE;oCACE,KAAK,EAAE;wCACL;4CACE,iBAAiB,EAAE;gDACjB,WAAW,EAAE,QAAQ,CAAC,aAAa,CAAC,sBAAsB;6CAC3D;yCACF;qCACF;oCACD,KAAK,EAAE;wCACL;4CACE,QAAQ,EAAE,KAAc;4CACxB,IAAI,EAAE,oBAAoB;yCAC3B;qCACF;iCACF;6BACF;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR;oBACD,MAAM,EAAE;wBACN,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE;wBAC7B;4BACE,EAAE,EAAE;gCACF;oCACE,iBAAiB,EAAE;wCACjB,WAAW,EAAE;4CACX,6BAA6B,EAAE,aAAa;yCAC7C;qCACF;iCACF;6BACF;4BACD,KAAK,EAAE;gCACL,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;gCAC7B,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;6BAC9B;yBACF;wBACD,GAAG,QAAQ,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;4BACpE,EAAE,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC;yBAC7C,CAAC,CAAC;wBACH,GAAG,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BACnD,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;yBAC5B,CAAC,CAAC;qBACJ;iBACF;gBACD,EAAE,EAAE,eAAe;aACpB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CACrB,wFAAwF,CACzF,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CACpB,0EAA0E,QAAQ,CAAC,KAAK,uIAAuI,CAChO,CAAC;QACF,OAAO;YACL,KAAK;YACL,MAAM;YACN,KAAK,EAAE,GAAG,CAAC,IAAI,CACb,+KAA+K,QAAQ,CAAC,KAAK,iKAAiK,CAC/V;YACD,QAAQ,EAAE,WAAW,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,sBAAsB,oBAAoB,EAAE;YAC/H,iBAAiB,EAAE,GAAG,CAAC,IAAI,CACzB,2OAA2O,CAC5O;YACD,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;YAC/B,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc;YAC7C,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;YAC7B,kBAAkB,EAAE,GAAG,CAAC,IAAI,CAC1B,iKAAiK,CAClK;SACF,CAAC;IACJ,CAAC,EACD,QAAQ,CAAC,GAAG,KAAK,WAAW;QAC1B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,sBAAsB,EAAE;gBACtB,aAAa,EAAE,8CAA8C;aAC9D;SACF,CAC0F,CAAC;AACpG,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,qBAAqB,EAAE,CAAC;AAEzD,SAAS,WAAW,CAClB,GAAgD,EAChD,MAAiC;IAOjC,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,+CAA+C,MAAM,4CAA4C,CAClG,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM;QACN,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;AACJ,CAAC"}

package/dist/factories/opensearch/compositions/index.d.ts

@@ -0,0 +1,4 @@
+export * from './cluster.js';
+export * from './operator-bootstrap.js';
+export * from './repository.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/opensearch/compositions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/opensearch/compositions/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC"}

package/dist/factories/opensearch/compositions/index.js

@@ -0,0 +1,4 @@
+export * from './cluster.js';
+export * from './operator-bootstrap.js';
+export * from './repository.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/opensearch/compositions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/opensearch/compositions/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC"}

package/dist/factories/opensearch/compositions/operator-bootstrap.d.ts

@@ -0,0 +1,40 @@
+import { type OpenSearchOperatorBootstrapBuildOptions } from '../types.js';
+/**
+ * Explicitly owned operator installation. Deleting its KRO instance uninstalls
+ * the operator; shared consumers should use openSearchOperatorBootstrap.
+ */
+export declare const openSearchOperatorInstallation: import("../../../index.js").CallableComposition<{
+    name: string;
+    namespace?: string;
+    version?: string;
+    repositoryName?: string;
+    repositoryNamespace?: string;
+    customValues?: Record<string, unknown>;
+}, {
+    ready: boolean;
+    failed: boolean;
+    phase: "Ready" | "Failed" | "Installing";
+    version: string;
+}>;
+/**
+ * Create a shared operator reference whose complete installation is owned by
+ * one singleton instance in typekro-singletons. Ownership is build-time so a
+ * KRO schema proxy can never silently change lifecycle semantics.
+ */
+export declare function makeOpenSearchOperatorBootstrap(options?: OpenSearchOperatorBootstrapBuildOptions): import("../../../index.js").CallableComposition<{
+    name: string;
+}, {
+    ready: boolean;
+    failed: boolean;
+    phase: "Ready" | "Failed" | "Installing";
+    version: string;
+}>;
+export declare const openSearchOperatorBootstrap: import("../../../index.js").CallableComposition<{
+    name: string;
+}, {
+    ready: boolean;
+    failed: boolean;
+    phase: "Ready" | "Failed" | "Installing";
+    version: string;
+}>;
+//# sourceMappingURL=operator-bootstrap.d.ts.map

package/dist/factories/opensearch/compositions/operator-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-bootstrap.d.ts","sourceRoot":"","sources":["../../../../src/factories/opensearch/compositions/operator-bootstrap.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,uCAAuC,EAM7C,MAAM,aAAa,CAAC;AAGrB;;;GAGG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;EA4C1C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,GAAE,uCAA4C;;;;;;;GA8BtD;AAED,eAAO,MAAM,2BAA2B;;;;;;;EAAoC,CAAC"}

package/dist/factories/opensearch/compositions/operator-bootstrap.js

@@ -0,0 +1,89 @@
+import { kubernetesComposition } from '../../../core/composition/imperative.js';
+import { DEFAULT_FLUX_NAMESPACE } from '../../../core/config/defaults.js';
+import { singleton } from '../../../core/singleton/singleton.js';
+import { helmReleaseConditionSummary } from '../../helm/status.js';
+import { namespace } from '../../kubernetes/core/namespace.js';
+import { DEFAULT_OPENSEARCH_OPERATOR_NAMESPACE } from '../constants.js';
+import { DEFAULT_OPENSEARCH_OPERATOR_REPOSITORY_NAME, DEFAULT_OPENSEARCH_OPERATOR_REPOSITORY_URL, DEFAULT_OPENSEARCH_OPERATOR_VERSION, openSearchOperatorHelmRelease, } from '../resources/helm.js';
+import { OpenSearchOperatorBootstrapConfigSchema, OpenSearchOperatorBootstrapStatusSchema, OpenSearchOperatorReferenceConfigSchema, } from '../types.js';
+import { openSearchHelmRepositoryBootstrap } from './repository.js';
+/**
+ * Explicitly owned operator installation. Deleting its KRO instance uninstalls
+ * the operator; shared consumers should use openSearchOperatorBootstrap.
+ */
+export const openSearchOperatorInstallation = kubernetesComposition({
+    name: 'opensearch-operator-installation',
+    kind: 'OpenSearchOperatorInstallation',
+    spec: OpenSearchOperatorBootstrapConfigSchema,
+    status: OpenSearchOperatorBootstrapStatusSchema,
+}, (spec) => {
+    const operatorNamespace = spec.namespace || DEFAULT_OPENSEARCH_OPERATOR_NAMESPACE;
+    const version = spec.version || DEFAULT_OPENSEARCH_OPERATOR_VERSION;
+    const repositoryName = spec.repositoryName || DEFAULT_OPENSEARCH_OPERATOR_REPOSITORY_NAME;
+    const repositoryNamespace = spec.repositoryNamespace || DEFAULT_FLUX_NAMESPACE;
+    namespace({
+        metadata: {
+            name: operatorNamespace,
+            labels: {
+                'app.kubernetes.io/name': 'opensearch-operator',
+                'app.kubernetes.io/managed-by': 'typekro',
+            },
+        },
+        id: 'operatorNamespace',
+    });
+    const _repository = singleton(openSearchHelmRepositoryBootstrap, {
+        id: 'opensearch-helm-repository',
+        spec: {
+            name: repositoryName,
+            namespace: repositoryNamespace,
+            url: DEFAULT_OPENSEARCH_OPERATOR_REPOSITORY_URL,
+        },
+    });
+    const release = openSearchOperatorHelmRelease({
+        name: spec.name,
+        namespace: operatorNamespace,
+        version,
+        repositoryName,
+        repositoryNamespace,
+        values: spec.customValues,
+        id: 'operatorRelease',
+    });
+    return {
+        ...helmReleaseConditionSummary(release),
+        version: release.spec.chart.spec.version,
+    };
+});
+/**
+ * Create a shared operator reference whose complete installation is owned by
+ * one singleton instance in typekro-singletons. Ownership is build-time so a
+ * KRO schema proxy can never silently change lifecycle semantics.
+ */
+export function makeOpenSearchOperatorBootstrap(options = {}) {
+    const installation = {
+        name: options.name ?? 'opensearch-operator',
+        namespace: options.namespace ?? DEFAULT_OPENSEARCH_OPERATOR_NAMESPACE,
+        version: options.version ?? DEFAULT_OPENSEARCH_OPERATOR_VERSION,
+        repositoryName: options.repositoryName ?? DEFAULT_OPENSEARCH_OPERATOR_REPOSITORY_NAME,
+        repositoryNamespace: options.repositoryNamespace ?? DEFAULT_FLUX_NAMESPACE,
+        ...(options.customValues ? { customValues: options.customValues } : {}),
+    };
+    return kubernetesComposition({
+        name: 'opensearch-operator-bootstrap',
+        kind: 'OpenSearchOperatorBootstrap',
+        spec: OpenSearchOperatorReferenceConfigSchema,
+        status: OpenSearchOperatorBootstrapStatusSchema,
+    }, (_spec) => {
+        const owner = singleton(openSearchOperatorInstallation, {
+            id: 'opensearch-operator',
+            spec: installation,
+        });
+        return {
+            ready: owner.status.ready,
+            failed: owner.status.failed,
+            phase: owner.status.phase,
+            version: owner.status.version,
+        };
+    });
+}
+export const openSearchOperatorBootstrap = makeOpenSearchOperatorBootstrap();
+//# sourceMappingURL=operator-bootstrap.js.map

package/dist/factories/opensearch/compositions/operator-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-bootstrap.js","sourceRoot":"","sources":["../../../../src/factories/opensearch/compositions/operator-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,EAAE,qCAAqC,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EACL,2CAA2C,EAC3C,0CAA0C,EAC1C,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,uCAAuC,EACvC,uCAAuC,EAEvC,uCAAuC,GACxC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AAEpE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CACjE;IACE,IAAI,EAAE,kCAAkC;IACxC,IAAI,EAAE,gCAAgC;IACtC,IAAI,EAAE,uCAAuC;IAC7C,MAAM,EAAE,uCAAuC;CAChD,EACD,CAAC,IAAuC,EAAE,EAAE;IAC1C,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,IAAI,qCAAqC,CAAC;IAClF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,mCAAmC,CAAC;IACpE,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,2CAA2C,CAAC;IAC1F,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,IAAI,sBAAsB,CAAC;IAC/E,SAAS,CAAC;QACR,QAAQ,EAAE;YACR,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE;gBACN,wBAAwB,EAAE,qBAAqB;gBAC/C,8BAA8B,EAAE,SAAS;aAC1C;SACF;QACD,EAAE,EAAE,mBAAmB;KACxB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,SAAS,CAAC,iCAAiC,EAAE;QAC/D,EAAE,EAAE,4BAA4B;QAChC,IAAI,EAAE;YACJ,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,mBAAmB;YAC9B,GAAG,EAAE,0CAA0C;SAChD;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,6BAA6B,CAAC;QAC5C,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,iBAAiB;QAC5B,OAAO;QACP,cAAc;QACd,mBAAmB;QACnB,MAAM,EAAE,IAAI,CAAC,YAAY;QACzB,EAAE,EAAE,iBAAiB;KACtB,CAAC,CAAC;IACH,OAAO;QACL,GAAG,2BAA2B,CAAC,OAAO,CAAC;QACvC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO;KACzC,CAAC;AACJ,CAAC,CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,UAAmD,EAAE;IAErD,MAAM,YAAY,GAAsC;QACtD,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,qBAAqB;QAC3C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,qCAAqC;QACrE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,mCAAmC;QAC/D,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,2CAA2C;QACrF,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,sBAAsB;QAC1E,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;IACF,OAAO,qBAAqB,CAC1B;QACE,IAAI,EAAE,+BAA+B;QACrC,IAAI,EAAE,6BAA6B;QACnC,IAAI,EAAE,uCAAuC;QAC7C,MAAM,EAAE,uCAAuC;KAChD,EACD,CAAC,KAAwC,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,8BAA8B,EAAE;YACtD,EAAE,EAAE,qBAAqB;YACzB,IAAI,EAAE,YAAY;SACnB,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YAC3B,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;YACzB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;SAC9B,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,+BAA+B,EAAE,CAAC"}

package/dist/factories/opensearch/compositions/repository.d.ts

@@ -0,0 +1,8 @@
+export declare const openSearchHelmRepositoryBootstrap: import("../../../index.js").CallableComposition<{
+    name: string;
+    namespace: string;
+    url: string;
+}, {
+    ready: boolean;
+}>;
+//# sourceMappingURL=repository.d.ts.map

package/dist/factories/opensearch/compositions/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../src/factories/opensearch/compositions/repository.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,iCAAiC;;;;;;EAqB7C,CAAC"}

package/dist/factories/opensearch/compositions/repository.js

@@ -0,0 +1,21 @@
+import { kubernetesComposition } from '../../../core/composition/imperative.js';
+import { Cel } from '../../../core/references/cel.js';
+import { openSearchOperatorHelmRepository } from '../resources/helm.js';
+import { OpenSearchHelmRepositorySingletonSpecSchema, OpenSearchHelmRepositorySingletonStatusSchema, } from '../types.js';
+export const openSearchHelmRepositoryBootstrap = kubernetesComposition({
+    name: 'opensearch-helm-repository',
+    kind: 'OpenSearchHelmRepository',
+    spec: OpenSearchHelmRepositorySingletonSpecSchema,
+    status: OpenSearchHelmRepositorySingletonStatusSchema,
+}, (spec) => {
+    const repository = openSearchOperatorHelmRepository({
+        name: spec.name,
+        namespace: spec.namespace,
+        url: spec.url,
+        id: 'repository',
+    });
+    return {
+        ready: Cel.expr(repository.status.conditions, '.exists(c, c.type == "Ready" && c.status == "True")'),
+    };
+});
+//# sourceMappingURL=repository.js.map

package/dist/factories/opensearch/compositions/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../../src/factories/opensearch/compositions/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AACtD,OAAO,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EACL,2CAA2C,EAC3C,6CAA6C,GAC9C,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,iCAAiC,GAAG,qBAAqB,CACpE;IACE,IAAI,EAAE,4BAA4B;IAClC,IAAI,EAAE,0BAA0B;IAChC,IAAI,EAAE,2CAA2C;IACjD,MAAM,EAAE,6CAA6C;CACtD,EACD,CAAC,IAAI,EAAE,EAAE;IACP,MAAM,UAAU,GAAG,gCAAgC,CAAC;QAClD,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,EAAE,EAAE,YAAY;KACjB,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,IAAI,CACb,UAAU,CAAC,MAAM,CAAC,UAAU,EAC5B,qDAAqD,CACtD;KACF,CAAC;AACJ,CAAC,CACF,CAAC"}

package/dist/factories/opensearch/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const DEFAULT_OPENSEARCH_OPERATOR_NAMESPACE = "opensearch-operator-system";
+//# sourceMappingURL=constants.d.ts.map

package/dist/factories/opensearch/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/factories/opensearch/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qCAAqC,+BACpB,CAAC"}

package/dist/factories/opensearch/constants.js

@@ -0,0 +1,2 @@
+export const DEFAULT_OPENSEARCH_OPERATOR_NAMESPACE = 'opensearch-operator-system';
+//# sourceMappingURL=constants.js.map

package/dist/factories/opensearch/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/factories/opensearch/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qCAAqC,GAChD,4BAA4B,CAAC"}

package/dist/factories/opensearch/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Official OpenSearch Kubernetes operator integration for TypeKro.
+ *
+ * The operator bootstrap owns the cluster-scoped controller and CRDs. Cluster
+ * compositions own only their declared namespace, OpenSearchCluster,
+ * certificate, and network-policy resources.
+ */
+export * from './compositions/index.js';
+export * from './constants.js';
+export * from './resources/index.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/opensearch/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/factories/opensearch/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC"}

package/dist/factories/opensearch/index.js

@@ -0,0 +1,12 @@
+/**
+ * Official OpenSearch Kubernetes operator integration for TypeKro.
+ *
+ * The operator bootstrap owns the cluster-scoped controller and CRDs. Cluster
+ * compositions own only their declared namespace, OpenSearchCluster,
+ * certificate, and network-policy resources.
+ */
+export * from './compositions/index.js';
+export * from './constants.js';
+export * from './resources/index.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/opensearch/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/factories/opensearch/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC"}

package/dist/factories/opensearch/resources/cluster.d.ts

@@ -0,0 +1,6 @@
+import type { Composable, Enhanced, ResourceStatus } from '../../../core/types/index.js';
+import type { OpenSearchClusterObservedStatus, OpenSearchClusterResourceConfig, OpenSearchClusterResourceSpec } from '../types.js';
+export declare const OPENSEARCH_HTTP_PORT = 9200;
+export declare function openSearchClusterReadinessEvaluator(liveResource: unknown): ResourceStatus;
+export declare function openSearchClusterResource(config: Composable<OpenSearchClusterResourceConfig>): Enhanced<OpenSearchClusterResourceSpec, OpenSearchClusterObservedStatus>;
+//# sourceMappingURL=cluster.d.ts.map

package/dist/factories/opensearch/resources/cluster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cluster.d.ts","sourceRoot":"","sources":["../../../../src/factories/opensearch/resources/cluster.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEzF,OAAO,KAAK,EACV,+BAA+B,EAC/B,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC,wBAAgB,mCAAmC,CAAC,YAAY,EAAE,OAAO,GAAG,cAAc,CAmDzF;AAqHD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,UAAU,CAAC,+BAA+B,CAAC,GAClD,QAAQ,CAAC,6BAA6B,EAAE,+BAA+B,CAAC,CA8B1E"}