typekro 0.33.10 → 0.35.0

package/dist/factories/traefik/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/factories/traefik/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AASzC,OAAO,EAAE,sCAAsC,EAAE,MAAM,yBAAyB,CAAC;AAEjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAEjF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,MAAM,uBAAuB,GAAG;IAC9B;QACE,WAAW,EAAE,qCAAqC;QAClD,KAAK,EAAE,4BAA4B;KACpC;IACD;QACE,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,WAAW,EAAE,sCAAsC;QACnD,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,WAAW,EAAE,8CAA8C;QAC3D,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,WAAW,EAAE,4DAA4D;QACzE,MAAM,EAAE,gBAAgB;QACxB,KAAK,EAAE,wBAAwB;KAChC;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;AAEjF,MAAM,cAAc,GAAG,IAAI,CAAC,mCAAmC,CAAC,CAAC,GAAG;AAClE,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;AAC7E,IAAI,CAAC,MAAM;KACR,YAAY,CAAC,kBAAkB,CAAC,SAAS,CAAC;KAC1C,SAAS,CAAC,EAAE,OAAO,EAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC,CACtD,CAAC;AACF,6EAA6E;AAC7E,MAAM,kBAAkB,GAAG,IAAI,CAAC,mCAAmC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACzF,8EAA8E;AAC9E,MAAM,cAAc,GAAG,8BAA8B,CAAC;AAKtD,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAQnD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;IAC1C,mEAAmE;IACnE,QAAQ,EAAE,qBAAqB;IAC/B,cAAc,EAAE,UAAU;IAC1B,6DAA6D;IAC7D,aAAa,EAAE,gBAAgB;CAChC,CAAC,CAAC;AAKH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;IAC/C,4EAA4E;IAC5E,oBAAoB,EAAE,QAAQ;IAC9B,cAAc,EAAE,SAAS;IACzB,aAAa,EAAE,uBAAuB;CACvC,CAAC,CAAC;AAKH,uEAAuE;AACvE,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;IAC5C,SAAS,EAAE;QACT,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,uDAAuD;QACpE,SAAS,EAAE,gBAAgB;QAC3B,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,QAAQ;KACpB;CACF,CAAC,CAAC;AAKH;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;IAC3C,OAAO,EAAE,QAAQ;IACjB,WAAW,EAAE,QAAQ;IACrB,SAAS,EAAE,QAAQ;IACnB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,gBAAgB;IAC3B,OAAO,EAAE,gBAAgB;IACzB,WAAW,EAAE,eAAe;IAC5B,oBAAoB,EAAE,eAAe;IACrC,UAAU,EAAE,eAAe;IAC3B,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,SAAS;CAC9B,CAAC,CAAC;AAKH,8CAA8C;AAC9C,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;IAC7C,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,QAAQ;CACvB,CAAC,CAAC;AAKH,8EAA8E;AAC9E,MAAM,2BAA2B,GAAG,oDAAoD,CAAC;AAKzF,oEAAoE;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;IAC1C,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,QAAQ;IACtB,OAAO,EAAE,8BAA8B;IACvC,0DAA0D;IAC1D,OAAO,EAAE,gBAAgB;IACzB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,qBAAqB;IAChC,WAAW,EAAE,2BAA2B;IACxC,iBAAiB,EAAE,SAAS;IAC5B,WAAW,EAAE,SAAS;IACtB,aAAa,EAAE,SAAS;IACxB,mBAAmB,EAAE,QAAQ;IAC7B,SAAS,EAAE,yBAAyB;IACpC,cAAc,EAAE,wBAAwB;IACxC,qBAAqB,EAAE;QACrB,gBAAgB,EAAE,eAAe;QACjC,oBAAoB,EAAE,gBAAgB;KACvC;IACD,qBAAqB,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE;IACrD,cAAc,EAAE,0BAA0B,CAAC,KAAK,EAAE;CACnD,CAAC,CAAC;AAKH,8CAA8C;AAC9C,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;IACzC,wEAAwE;IACxE,aAAa,EAAE,QAAQ;IACvB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE;IACtD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE;IACpD,eAAe,EAAE,QAAQ;IACzB,UAAU,EAAE,IAAI,CAAC;QACf,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,UAAU;KACpB,CAAC,CAAC,KAAK,EAAE;CACX,CAAC,CAAC;AAKH,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E,yCAAyC;AACzC,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;IAClD,aAAa,EAAE,SAAS;IACxB,UAAU,EAAE,SAAS;IACrB,UAAU,EAAE,SAAS;IACrB,iBAAiB,EAAE,wBAAwB;CAC5C,CAAC,CAAC;AAKH,8CAA8C;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;IAChD,oEAAoE;IACpE,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,QAAQ;IACjB,iEAAiE;IACjE,WAAW,EAAE,gBAAgB;IAC7B,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,uBAAuB,CAAC,KAAK,EAAE;IAC5C,cAAc,EAAE,0BAA0B,CAAC,KAAK,EAAE;IAClD,gBAAgB,EAAE,+BAA+B;CAClD,CAAC,CAAC;AAKH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;IAChD,MAAM,EAAE,6BAA6B,CAAC,KAAK,EAAE;IAC7C,cAAc,EAAE,UAAU;IAC1B,mBAAmB,EAAE,QAAQ;IAC7B,MAAM,EAAE,sBAAsB;IAC9B,aAAa,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE;CACxE,CAAC,CAAC;AAKH,iDAAiD;AACjD,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;IAC7C,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,gBAAgB;IACtB,YAAY,EAAE,QAAQ;IACtB,SAAS,EAAE,qBAAqB;IAChC,MAAM,EAAE,SAAS;IACjB,WAAW,EAAE,SAAS;IACtB,aAAa,EAAE,SAAS;IACxB,mBAAmB,EAAE,QAAQ;IAC7B,0DAA0D;IAC1D,gBAAgB,EAAE,EAAE,UAAU,EAAE,0BAA0B,EAAE;CAC7D,CAAC,CAAC;AAKH,iDAAiD;AACjD,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;IACnD,+DAA+D;IAC/D,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,gBAAgB;IAC7B,SAAS,EAAE,aAAa;IACxB,WAAW,EAAE,0BAA0B,CAAC,KAAK,EAAE;IAC/C,cAAc,EAAE,0BAA0B,CAAC,KAAK,EAAE;CACnD,CAAC,CAAC;AAKH,8BAA8B;AAC9B,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;IACnD,MAAM,EAAE,gCAAgC,CAAC,KAAK,EAAE;IAChD,cAAc,EAAE,UAAU;IAC1B,mBAAmB,EAAE,QAAQ;IAC7B,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;CAClE,CAAC,CAAC;AAKH,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;IAC3C,WAAW,EAAE;QACX,WAAW,EAAE,uBAAuB,CAAC,KAAK,EAAE;QAC5C,SAAS,EAAE,yBAAyB;KACrC;IACD,YAAY,EAAE,uBAAuB,CAAC,GAAG,CAAC;QACxC,cAAc,EAAE,gBAAgB;QAChC,aAAa,EAAE,SAAS;QACxB,UAAU,EAAE,uBAAuB,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,KAAK,EAAE;KAClF,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE;YACN,SAAS,EAAE,UAAU;YACrB,sBAAsB,EAAE,gBAAgB;SACzC;KACF;IACD,sBAAsB,EAAE;QACtB,WAAW,EAAE,uBAAuB,CAAC,KAAK,EAAE;KAC7C;CACF,CAAC,CAAC;AAKH,oEAAoE;AACpE,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAC;IACpD,aAAa,EAAE,QAAQ;IACvB,qBAAqB,EAAE,SAAS;IAChC,iBAAiB,EAAE,UAAU;IAC7B,UAAU,EAAE,IAAI,CAAC;QACf,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,QAAQ;KACvB,CAAC,CAAC,KAAK,EAAE;IACV,sBAAsB,EAAE,UAAU;IAClC,qDAAqD;IACrD,sBAAsB,EAAE,sBAAsB;IAC9C,eAAe,EAAE,SAAS;IAC1B,cAAc,EAAE,QAAQ;IACxB,aAAa,EAAE,QAAQ;IACvB,aAAa,EAAE,QAAQ;IACvB,eAAe,EAAE,UAAU;IAC3B,SAAS,EAAE;QACT,MAAM,EAAE,UAAU;QAClB,cAAc,EAAE,QAAQ;KACzB;IACD;;;;OAIG;IACH,qBAAqB,EAAE;QACrB,cAAc,EAAE,eAAe;QAC/B,wBAAwB,EAAE,eAAe;QACzC,kBAAkB,EAAE,eAAe;QACnC,kBAAkB,EAAE,eAAe;QACnC,cAAc,EAAE,eAAe;KAChC;CACF,CAAC,CAAC;AAKH,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;IAC1C,cAAc,EAAE,UAAU;IAC1B,iBAAiB,EACf,0HAA0H;CAC7H,CAAC,CAAC;AAKH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;IAC7C,aAAa,EAAE,mEAAmE;IAClF,aAAa,EAAE,mEAAmE;IAClF,eAAe,EAAE,UAAU;IAC3B,mBAAmB,EAAE,UAAU;IAC/B,4EAA4E;IAC5E,YAAY,EAAE,SAAS;IACvB,gBAAgB,EAAE,UAAU;IAC5B,wBAAwB,EAAE,SAAS;IACnC,aAAa,EAAE,uBAAuB;CACvC,CAAC,CAAC;AAKH,uBAAuB;AACvB,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;IAC5C;;;OAGG;IACH,qBAAqB,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE;IAC/C,sEAAsE;IACtE,uBAAuB,EAAE;QACvB,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE;YACT,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,UAAU;SACpB;KACF;IACD,eAAe,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE;CACxD,CAAC,CAAC;AAKH,+EAA+E;AAC/E,+DAA+D;AAC/D,+EAA+E;AAE/E,mFAAmF;AACnF,MAAM,wBAAwB,GAAG;IAC/B,WAAW,EAAE,QAAQ;IACrB,aAAa,EAAE,QAAQ;IACvB,qBAAqB,EAAE,SAAS;CACxB,CAAC;AAEX;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,wFAAwF;IACxF,OAAO,EAAE,QAAQ;IACjB,uFAAuF;IACvF,qBAAqB,EAAE,SAAS;IAChC,+EAA+E;IAC/E,sBAAsB,EAAE,UAAU;IAClC,4EAA4E;IAC5E,2BAA2B,EAAE,QAAQ;IACrC,2EAA2E;IAC3E,qBAAqB,EAAE,UAAU;IACjC,2BAA2B,EAAE,UAAU;IACvC,gBAAgB,EAAE,QAAQ;IAC1B,cAAc,EAAE,SAAS;IACzB,cAAc,EAAE,gBAAgB;IAChC,sBAAsB,EAAE,gBAAgB;IACxC,cAAc,EAAE,QAAQ;IACxB,yBAAyB,EAAE,SAAS;IACpC,wBAAwB,EAAE,SAAS;IACnC,MAAM,EAAE,wBAAwB;CACjC,CAAC,CAAC;AAKH,oFAAoF;AACpF,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;IAC9C,SAAS,EAAE,UAAU;IACrB,mDAAmD;IACnD,SAAS,EAAE,QAAQ;IACnB,KAAK,EAAE,gBAAgB;IACvB,WAAW,EAAE,gBAAgB;IAC7B,eAAe,EAAE,gBAAgB;IACjC,iBAAiB,EAAE,gBAAgB;IACnC,cAAc,EAAE,eAAe;IAC/B,cAAc,EAAE,eAAe;IAC/B,eAAe,EAAE,eAAe;IAChC,MAAM,EAAE,wBAAwB;CACjC,CAAC,CAAC;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;IACnD,+CAA+C;IAC/C,UAAU,EAAE,qBAAqB;IACjC,oEAAoE;IACpE,QAAQ,EAAE,qBAAqB;IAC/B,iEAAiE;IACjE,SAAS,EAAE,eAAe;IAC1B,kBAAkB,EAAE,4BAA4B;IAChD,QAAQ,EAAE,2BAA2B;CACtC,CAAC,CAAC;AAKH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,SAAS,EAAE,qBAAqB;IAChC,kBAAkB,EAAE,4BAA4B;CACjD,CAAC,CAAC;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;IACjD,uBAAuB,EAAE,wBAAwB;IACjD,wBAAwB,EAAE,wBAAwB;IAClD,gCAAgC,EAAE,SAAS;IAC3C,4BAA4B,EAAE,UAAU;IACxC,4BAA4B,EAAE,UAAU;IACxC,+BAA+B,EAAE,UAAU;IAC3C,oCAAoC,EAAE,UAAU;IAChD,6BAA6B,EAAE,UAAU;IACzC,sBAAsB,EAAE,gBAAgB;IACxC,gBAAgB,EAAE,SAAS;IAC3B,eAAe,EAAE,UAAU;IAC3B,oBAAoB,EAAE,UAAU;IAChC,kBAAkB,EAAE,wBAAwB;IAC5C,aAAa,EAAE,qBAAqB;IACpC,uBAAuB,EAAE,SAAS;IAClC,aAAa,EAAE,SAAS;IACxB,iBAAiB,EAAE,SAAS;IAC5B,YAAY,EAAE,SAAS;IACvB,0BAA0B,EAAE,QAAQ;IACpC,qBAAqB,EAAE,SAAS;IAChC,mBAAmB,EAAE,SAAS;IAC9B,wBAAwB,EAAE,QAAQ;IAClC,wBAAwB,EAAE,QAAQ;IAClC,kCAAkC,EAAE,QAAQ;IAC5C,YAAY,EAAE,QAAQ;IACtB,iBAAiB,EAAE,QAAQ;IAC3B,oBAAoB,EAAE,QAAQ;IAC9B,gBAAgB,EAAE,QAAQ;IAC1B,oFAAoF;IACpF,gBAAgB,EAAE,SAAS;CAC5B,CAAC,CAAC;AAKH,sEAAsE;AACtE,MAAM,CAAC,MAAM,qCAAqC,GAAG,IAAI,CAAC;IACxD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE,QAAQ;IACjB,YAAY,EAAE,SAAS;CACxB,CAAC,CAAC;AAKH,4BAA4B;AAC5B,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC;IACvD,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,QAAQ;IACrB,YAAY,EAAE,SAAS;CACxB,CAAC,CAAC;AAKH,wEAAwE;AACxE,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,SAAS;CACzB,CAAC,CAAC;AAKH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,uCAAuC,GAAG,IAAI,CAAC;IAC1D,KAAK,EAAE,UAAU;CAClB,CAAC,CAAC;AAMH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;IACnD,MAAM,EAAE,QAAQ;CACjB,CAAC,CAAC;AAKH,sCAAsC;AACtC,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,IAAI,EAAE,QAAQ;CACf,CAAC,CAAC;AAKH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,uCAAuC,GAAG,IAAI,CAAC;IAC1D,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,QAAQ;CACtB,CAAC,CAAC;AAMH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;IACnD,sBAAsB,EAAE,gBAAgB;IACxC,sBAAsB,EAAE,gBAAgB;IACxC,uBAAuB,EAAE,gBAAgB;IACzC,uBAAuB,EAAE,gBAAgB;IACzC,kBAAkB,EAAE,QAAQ;CAC7B,CAAC,CAAC;AAKH,yDAAyD;AACzD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;IAC/C,WAAW,EAAE,qBAAqB;IAClC,kBAAkB,EAAE,eAAe;IACnC,UAAU,EAAE,eAAe;IAC3B,SAAS,EAAE,UAAU;IACrB,4DAA4D;IAC5D,sBAAsB,EAAE,sBAAsB;IAC9C,6BAA6B,EAAE,SAAS;IACxC,2BAA2B,EAAE,SAAS;CACvC,CAAC,CAAC;AAKH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,qCAAqC,GAAG,IAAI,CAAC;IACxD,aAAa,EAAE,QAAQ;IACvB,cAAc,EAAE,eAAe;IAC/B,mBAAmB,EAAE,eAAe;IACpC,mBAAmB,EAAE,eAAe;IACpC,eAAe,EAAE,8BAA8B;CAChD,CAAC,CAAC;AAKH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,WAAW,EAAE,UAAU;IACvB,aAAa,EAAE,uBAAuB;IACtC,mBAAmB,EAAE,gBAAgB;CACtC,CAAC,CAAC;AAKH,sEAAsE;AACtE,MAAM,CAAC,MAAM,qCAAqC,GAAG,IAAI,CAAC;IACxD,0DAA0D;IAC1D,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,QAAQ;IAClB,eAAe,EAAE,SAAS;IAC1B,cAAc,EAAE,QAAQ;CACzB,CAAC,CAAC;AAKH,4BAA4B;AAC5B,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;IAClD,YAAY,EAAE,UAAU;IACxB,kBAAkB,EAAE,QAAQ;IAC5B,uBAAuB,EAAE,UAAU;IACnC,uBAAuB,EAAE,UAAU;IACnC,uBAAuB,EAAE,qBAAqB;CAC/C,CAAC,CAAC;AAKH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;IAChD,SAAS,EAAE,UAAU;IACrB,uEAAuE;IACvE,iBAAiB,EAAE,gCAAgC;IACnD,QAAQ,EAAE,QAAQ;IAClB,OAAO,EAAE,uBAAuB;IAChC,0DAA0D;IAC1D,sBAAsB,EAAE,UAAU;CACnC,CAAC,CAAC;AAKH,kDAAkD;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;IAC/C,WAAW,EAAE,0BAA0B,CAAC,KAAK,EAAE;CAChD,CAAC,CAAC;AAKH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,wCAAwC,GAAG,IAAI,CAAC;IAC3D,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE;QACP,WAAW,EAAE,SAAS;QACtB,YAAY,EAAE,SAAS;QACvB,OAAO,EAAE,SAAS;QAClB,eAAe,EAAE,SAAS;QAC1B,UAAU,EAAE;YACV,aAAa,EAAE,SAAS;YACxB,UAAU,EAAE,SAAS;YACrB,kBAAkB,EAAE,SAAS;YAC7B,WAAW,EAAE,SAAS;YACtB,eAAe,EAAE,SAAS;YAC1B,qBAAqB,EAAE,SAAS;YAChC,WAAW,EAAE,SAAS;YACtB,eAAe,EAAE,SAAS;SAC3B;QACD,0DAA0D;QAC1D,SAAS,EAAE;YACT,aAAa,EAAE,SAAS;YACxB,UAAU,EAAE,SAAS;YACrB,kBAAkB,EAAE,SAAS;YAC7B,WAAW,EAAE,SAAS;YACtB,eAAe,EAAE,SAAS;YAC1B,WAAW,EAAE,SAAS;YACtB,eAAe,EAAE,SAAS;SAC3B;KACF;CACF,CAAC,CAAC;AAMH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,aAAa,EAAE,SAAS;CACzB,CAAC,CAAC;AAKH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,wCAAwC,GAAG,IAAI,CAAC;IAC3D,oBAAoB,EAAE,SAAS;IAC/B,wBAAwB,EAAE,SAAS;IACnC,4BAA4B,EAAE,SAAS;IACvC,wBAAwB,EAAE,SAAS;IACnC,sBAAsB,EAAE,SAAS;IACjC,2BAA2B,EAAE,SAAS;IACtC,mBAAmB,EAAE,SAAS;CAC/B,CAAC,CAAC;AAMH,kDAAkD;AAClD,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;IACjD,eAAe,EAAE,UAAU;CAC5B,CAAC,CAAC;AAKH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,yBAAyB,CAAC,CAAC;AAK7E;;;;;;;GAOG;AACH,MAAM,8BAA8B,GAAG,IAAI,CAAC;IAC1C,YAAY,EAAE,gCAAgC;IAC9C,YAAY,EAAE,qCAAqC;IACnD,YAAY,EAAE,gCAAgC;IAC9C,QAAQ,EAAE,4BAA4B;IACtC,iBAAiB,EAAE,qCAAqC;IACxD,WAAW,EAAE,+BAA+B;IAC5C,cAAc,EAAE,kCAAkC;IAClD,aAAa,EAAE,qCAAqC;IACpD,oBAAoB,EAAE,wCAAwC;IAC9D,SAAS,EAAE,6BAA6B;IACxC,cAAc,EAAE,kCAAkC;IAClD,UAAU,EAAE,8BAA8B;IAC1C,UAAU,EAAE,8BAA8B;IAC1C,cAAc,EAAE,kCAAkC;IAClD,cAAc,EAAE,kCAAkC;IAClD,oBAAoB,EAAE,wCAAwC;IAC9D,SAAS,EAAE,6BAA6B;IACxC,YAAY,EAAE,gCAAgC;IAC9C,gBAAgB,EAAE,oCAAoC;IACtD,iBAAiB,EAAE,qCAAqC;IACxD,cAAc,EAAE,kCAAkC;IAClD,mBAAmB,EAAE,uCAAuC;IAC5D,QAAQ,EAAE,4BAA4B;IACtC,cAAc,EAAE,kCAAkC;IAClD,mBAAmB,EAAE,uCAAuC;CAC7D,CAAC,CAAC;AAQH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IAC7F,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AAiBH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,kBAAkB,EAAE,KAAK;CACjB,CAAC;AAEX,+EAA+E;AAC/E,yBAAyB;AACzB,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,0CAA0C;AAC1C,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,IAAI,EAAE,cAAc;IACpB,SAAS,EAAE,kBAAkB;IAC7B,sDAAsD;IACtD,SAAS,EAAE,wBAAwB;IACnC,cAAc,EAAE,wBAAwB;IACxC,qEAAqE;IACrE,KAAK,EAAE,YAAY;CACX,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,4BAA4B,CAAC,CAAC;AAKhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;IAClD,GAAG,sCAAsC;IACzC,kDAAkD;IAClD,cAAc,EAAE,YAAY;CAC7B,CAAC,CAAC;AAKH,wDAAwD;AACxD,MAAM,CAAC,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAK7E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,IAAI,CAAC;IAC3D,GAAG,4BAA4B;IAC/B,sFAAsF;IACtF,OAAO,EAAE,YAAY;IACrB,mFAAmF;IACnF,mBAAmB,EAAE,UAAU;IAC/B,+EAA+E;IAC/E,qBAAqB,EAAE,UAAU;IACjC;;;;OAIG;IACH,qBAAqB,EAAE,SAAS;IAChC,cAAc,EAAE,SAAS;IACzB,cAAc,EAAE,gBAAgB;IAChC,MAAM,EAAE,wBAAwB;CACjC,CAAC,CAAC;AAMH,8EAA8E;AAC9E,MAAM,wBAAwB,GAAG;IAC/B;;;;OAIG;IACH,oBAAoB,EAAE,YAAY;IAClC,kEAAkE;IAClE,kBAAkB,EAAE,4BAA4B;CACxC,CAAC;AAEX;;;;;;;;GAQG;AACH,SAAS,eAAe,CACtB,IAA2E,EAC3E,GAA4C;IAE5C,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC/E,OAAO,GAAG,CAAC,MAAM,CACf,oEAAoE;YAClE,wEAAwE,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,sCAAsC,GAAG,IAAI,CAAC;IACzD,GAAG,4BAA4B;IAC/B,GAAG,wBAAwB;IAC3B,+CAA+C;IAC/C,OAAO,EAAE,qBAAqB;IAC9B,oEAAoE;IACpE,KAAK,EAAE,qBAAqB;IAC5B,uDAAuD;IACvD,SAAS,EAAE,YAAY;IACvB;;;OAGG;IACH,QAAQ,EAAE,2BAA2B;CACtC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAK3B,wDAAwD;AACxD,MAAM,CAAC,MAAM,wCAAwC,GAAG,IAAI,CAAC;IAC3D,GAAG,4BAA4B;IAC/B,GAAG,wBAAwB;IAC3B,wDAAwD;IACxD,MAAM,EAAE,qBAAqB;CAC9B,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAM3B,oDAAoD;AACpD,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC;IACvD,GAAG,4BAA4B;IAC/B,OAAO,EAAE,8BAA8B;CACxC,CAAC,CAAC;AAKH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,2CAA2C,GAAG,IAAI,CAAC;IAC9D,GAAG,4BAA4B;IAC/B,uBAAuB;IACvB,SAAS,EAAE,kBAAkB;IAC7B,oBAAoB;IACpB,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,YAAY;CACtB,CAAC,CAAC;AAMH,sDAAsD;AACtD,MAAM,CAAC,MAAM,sCAAsC,GAAG,IAAI,CAAC;IACzD,GAAG,4BAA4B;IAC/B,SAAS,EAAE,gCAAgC;CAC5C,CAAC,CAAC;AAKH,kDAAkD;AAClD,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;IACrD,GAAG,4BAA4B;IAC/B,oCAAoC;IACpC,WAAW,EAAE,0BAA0B,CAAC,KAAK,EAAE;CAChD,CAAC,CAAC;AAoJH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC,yBAAyB,CAAC,CAAC;AAuL9E,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAG,IAAI,CAAC,wCAAwC,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,qCAAqC,CAAC;AAEpE,sDAAsD;AACtD,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAC;IACpD,IAAI,EAAE,cAAc;IACpB,6EAA6E;IAC7E,YAAY,EAAE,kBAAkB;IAChC,8CAA8C;IAC9C,MAAM,EAAE,YAAY;IACpB,oBAAoB;IACpB,WAAW,EAAE,YAAY;IACzB,KAAK,EAAE,YAAY;CACpB,CAAC,CAAC;AAKH;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;IACjD,IAAI,EAAE,cAAc;IACpB,2EAA2E;IAC3E,YAAY,EAAE,kBAAkB;IAChC,kDAAkD;IAClD,kBAAkB,EAAE,kBAAkB;IACtC,6CAA6C;IAC7C,UAAU,EAAE,YAAY;IACxB,+CAA+C;IAC/C,iBAAiB,EAAE,kBAAkB;IACrC,sBAAsB,EAAE,kBAAkB;IAC1C,oBAAoB;IACpB,WAAW,EAAE,YAAY;IACzB,qBAAqB;IACrB,UAAU,EAAE,YAAY;IACxB,mEAAmE;IACnE,kBAAkB,EAAE,SAAS;IAC7B;;;;;;;OAOG;IACH,OAAO,EAAE,qBAAqB;IAC9B,KAAK,EAAE,YAAY;CACpB,CAAC,CAAC;AAsBH,+EAA+E;AAC/E,2CAA2C;AAC3C,+EAA+E;AAE/E,MAAM,wBAAwB,GAAG,2CAA2C,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;IAC/C,IAAI,EAAE,cAAc;IACpB,YAAY,EAAE,kBAAkB;IAChC,eAAe,EAAE,YAAY;IAC7B,WAAW,EAAE,qBAAqB;IAClC,eAAe,EAAE,kBAAkB;IACnC,UAAU,EAAE;QACV,OAAO,EAAE,wBAAwB;QACjC,uCAAuC;QACvC,cAAc,EAAE,wBAAwB;KACzC;IACD;;;;;;;OAOG;IACH,cAAc,EAAE;QACd,MAAM,EAAE;YACN,cAAc,EAAE,cAAc;SAC/B;QACD,YAAY,EAAE;YACZ,cAAc,EAAE,cAAc;YAC9B,oEAAoE;YACpE,cAAc,EAAE,YAAY;YAC5B,eAAe,EAAE,YAAY;YAC7B,cAAc,EAAE,YAAY;SAC7B;KACF;IACD,YAAY,EAAE;QACZ,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,SAAS;QACxB,oBAAoB,EAAE,SAAS;KAChC;IACD,aAAa,EAAE,SAAS;IACxB,WAAW,EAAE,mEAAmE;IAChF,OAAO,EAAE;QACP;;;WAGG;QACH,QAAQ,EAAE,YAAY;QACtB;;;;WAIG;QACH,WAAW,EAAE,SAAS;QACtB,cAAc,EAAE,YAAY;KAC7B;IACD,+CAA+C;IAC/C,YAAY,EAAE,OAAO;CACtB,CAAC,CAAC;AAKH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;IAC/C,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,mCAAmC;IAC1C,YAAY,EAAE;QACZ,QAAQ,EAAE,QAAQ;QAClB,EAAE,EAAE,QAAQ;KACb;IACD,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,QAAQ;CAClB,CAAC,CAAC;AAKH,iEAAiE;AACjE,MAAM,CAAC,MAAM,wCAAwC,GAAG,IAAI,CAAC;IAC3D,IAAI,EAAE,kBAAkB;IACxB,SAAS,EAAE,kBAAkB;IAC7B,GAAG,EAAE,YAAY;CAClB,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,0CAA0C,GAAG,IAAI,CAAC;IAC7D,KAAK,EAAE,SAAS;CACjB,CAAC,CAAC"}

package/dist/factories/traefik/utils/helm-values-mapper.d.ts

@@ -0,0 +1,198 @@
+/**
+ * Traefik Helm values mapping.
+ *
+ * Turns the bootstrap composition's runtime spec into values for the official
+ * `traefik` chart 41.5.0, then applies the security pins from #172 LAST so no
+ * caller — not even the build-time `values` passthrough — can re-enable the
+ * dashboard or the insecure API.
+ *
+ * Every value produced here may be a schema reference in KRO mode. The mapping
+ * therefore never branches on a spec value; it only places values into the
+ * tree. Decisions about which configuration EXISTS live in
+ * {@link TraefikHelmValuesMapperOptions} and are concrete at build time.
+ */
+import type { RefOrValue } from '../../../core/types/references.js';
+import type { TraefikBootstrapConfig, TraefikContainerSecurityContext, TraefikHelmValues, TraefikPodSecurityContext, TraefikRawHelmValues, TraefikServiceType } from '../types.js';
+/**
+ * Pod-level security context Traefik runs with.
+ *
+ * @security Matches the chart's own hardened defaults and is re-pinned here so
+ * a values passthrough cannot drop `runAsNonRoot`.
+ *
+ * Annotated with {@link TraefikPodSecurityContext} rather than `as const`: the
+ * pin is then checked against the CLOSED managed-values type, so a chart field
+ * rename becomes a compile error instead of a silently ignored value.
+ */
+export declare const TRAEFIK_POD_SECURITY_CONTEXT: TraefikPodSecurityContext;
+/**
+ * Container-level security context Traefik runs with.
+ *
+ * @security No privilege escalation, all capabilities dropped, read-only root
+ * filesystem. Traefik needs no writable root; ACME storage, when used, gets an
+ * explicit volume.
+ */
+export declare const TRAEFIK_CONTAINER_SECURITY_CONTEXT: TraefikContainerSecurityContext;
+/**
+ * Values this factory pins unconditionally, applied after every other source.
+ *
+ * @security The chart ships `api.dashboard: true`. An edge that exposes the
+ * Traefik dashboard exposes its full routing table, and `api.insecure` serves
+ * the API unauthenticated over plain HTTP on the `traefik` entrypoint. Neither
+ * is switchable through this factory: the runtime spec cannot express `true`
+ * (`dashboard` is typed as the literal `false`) and these pins overwrite any
+ * build-time passthrough. Re-enabling them means not using this factory.
+ */
+export declare const TRAEFIK_SECURITY_PINS: {
+    api: {
+        dashboard: false;
+        insecure: false;
+        debug: false;
+    };
+    ingressRoute: {
+        dashboard: {
+            enabled: false;
+        };
+        healthcheck: {
+            enabled: false;
+        };
+    };
+    podSecurityContext: TraefikPodSecurityContext;
+    securityContext: TraefikContainerSecurityContext;
+    global: {
+        checkNewVersion: false;
+        sendAnonymousUsage: false;
+    };
+};
+/**
+ * Values that hand ownership of the entrypoint Service to TypeKro.
+ *
+ * The chart would otherwise create the Service itself, and a composition can
+ * only project a resource's status if that resource is part of its graph.
+ * Observing the chart's Service instead made every fresh direct deployment fail
+ * before it started: the direct engine resolves external references BEFORE it
+ * applies anything, and a `404` on the not-yet-created Service is fatal.
+ *
+ * Three pins make the owned Service possible. Two are constants and live here;
+ * the third takes the release name, so {@link applyTraefikOwnershipPins} adds
+ * it.
+ *
+ * - `service.enabled: false` — the chart skips its whole Service template.
+ * - `nameOverride` — fixes the chart's `app.kubernetes.io/name` pod label.
+ * - `instanceLabelOverride` — fixes `app.kubernetes.io/instance`, which the
+ *   chart otherwise derives from the Helm release name. `traefikHelmRelease`
+ *   pins `spec.releaseName` to the same name, so the two agree; the pin keeps
+ *   the selector exact even if a release ever arrives under another name.
+ *
+ * Together those two labels are exactly the chart's own pod selector, so the
+ * owned Service front-ends the same pods the chart's Service would have.
+ */
+export declare const TRAEFIK_OWNERSHIP_PINS: {
+    service: {
+        enabled: false;
+    };
+    nameOverride: string;
+};
+/** Build-time inputs that shape which configuration the values tree contains. */
+export interface TraefikHelmValuesMapperOptions {
+    /**
+     * Concrete raw chart values merged BEFORE the mapped values and the security
+     * pins, both of which win. Use for chart surface this factory does not
+     * model; see `TraefikBootstrapBuildOptions.values` for why this side of the
+     * boundary is {@link TraefikRawHelmValues} rather than the managed type.
+     */
+    readonly baseValues?: TraefikRawHelmValues;
+    /**
+     * Emit a permanent `web` → `websecure` redirect. The chart disables the
+     * redirect by omitting `ports.web.http.redirections.entryPoint`, so this is
+     * structural rather than a value. @default true
+     */
+    readonly redirectWebToWebsecure?: boolean;
+    /**
+     * Namespace Traefik is installed into.
+     *
+     * Used to name the Service whose address Traefik copies onto `Ingress`
+     * status. The chart emits that flag only when IT created the Service, so
+     * disabling the chart's Service would silently drop Ingress status hydration
+     * unless `publishedService.pathOverride` names the owned Service instead.
+     *
+     * May be a schema reference or CEL expression: it is only ever placed into
+     * the values tree, never branched on.
+     */
+    readonly targetNamespace?: RefOrValue<string>;
+}
+/**
+ * Overwrite the security-relevant values, whatever they were.
+ *
+ * Written as explicit spreads at known depths rather than a generic deep merge
+ * so the precedence is auditable by reading it.
+ */
+export declare function applyTraefikSecurityPins(values: TraefikHelmValues): TraefikHelmValues;
+/**
+ * Overwrite the values that decide who owns the entrypoint Service.
+ *
+ * Applied after `baseValues` so a passthrough cannot hand the Service back to
+ * the chart, which would produce a second Service competing for the same name.
+ *
+ * @param values - Chart values to pin.
+ * @param instanceLabel - Value for the chart's `app.kubernetes.io/instance`
+ *   pod label. Normally the release name; may be a schema reference.
+ */
+export declare function applyTraefikOwnershipPins(values: TraefikHelmValues, instanceLabel: RefOrValue<string>): TraefikHelmValues;
+/**
+ * Type of the entrypoint Service this factory owns.
+ *
+ * Lives here rather than in the composition so the Service's type and the
+ * chart values it is paired with share one default. `Cel.default` rather than
+ * `??`: a schema proxy is a truthy object, so `??` would keep the reference and
+ * drop the fallback in KRO mode.
+ *
+ * @param config - The bootstrap spec. `service.type` may be a schema reference.
+ */
+export declare function traefikEntrypointServiceType(config: TraefikBootstrapConfig): TraefikServiceType;
+/**
+ * Map the bootstrap runtime spec onto official-chart values.
+ *
+ * @param config - The bootstrap spec. Any field may be a schema reference.
+ * @param options - Build-time structural choices.
+ * @returns Chart values with the security pins already applied.
+ *
+ * @example
+ * ```typescript
+ * const values = mapTraefikConfigToHelmValues({
+ *   name: 'traefik',
+ *   namespace: 'traefik',
+ *   service: { type: 'LoadBalancer', annotations: { 'service.beta.kubernetes.io/aws-load-balancer-type': 'external' } },
+ *   providers: { crd: true, gatewayApi: false },
+ *   accessLogs: true,
+ * });
+ * ```
+ */
+export declare function mapTraefikConfigToHelmValues(config: TraefikBootstrapConfig, options?: TraefikHelmValuesMapperOptions): TraefikHelmValues;
+/** Facts about the owned entrypoint Service that the chart values no longer carry. */
+export interface TraefikHelmValuesValidationContext {
+    /**
+     * Type of the Service this factory owns. The chart values cannot say: the
+     * entrypoint Service is a TypeKro-owned resource, not a chart value.
+     */
+    readonly serviceType?: TraefikServiceType;
+}
+/**
+ * Report configuration that is legal but likely a mistake at an edge.
+ *
+ * Returns warnings rather than throwing: none of these is invalid, and a test
+ * cluster legitimately hits several of them.
+ *
+ * @param values - Chart values, normally the output of
+ *   {@link mapTraefikConfigToHelmValues}.
+ * @param context - Facts about the owned entrypoint Service. Omit it and the
+ *   Service-type warnings simply do not fire.
+ */
+export declare function validateTraefikHelmValues(values: TraefikHelmValues, context?: TraefikHelmValuesValidationContext): string[];
+/**
+ * The chart version this factory is verified against.
+ *
+ * Re-exported from the mapper so a consumer can record the pinned version
+ * alongside the values it produced.
+ */
+export declare const TRAEFIK_MAPPED_CHART_VERSION = "41.5.0";
+//# sourceMappingURL=helm-values-mapper.d.ts.map

package/dist/factories/traefik/utils/helm-values-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-values-mapper.d.ts","sourceRoot":"","sources":["../../../../src/factories/traefik/utils/helm-values-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAWpE,OAAO,KAAK,EACV,sBAAsB,EACtB,+BAA+B,EAC/B,iBAAiB,EAEjB,yBAAyB,EAEzB,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,EAAE,yBAK1C,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC,EAAE,+BAIhD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;CAME,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,sBAAsB;;;;;CAGC,CAAC;AAErC,iFAAiF;AACjF,MAAM,WAAW,8BAA8B;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAC1C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;CAC/C;AAsCD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,CAarF;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,iBAAiB,EACzB,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,GAChC,iBAAiB,CAOnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,sBAAsB,GAAG,kBAAkB,CAE/F;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,sBAAsB,EAC9B,OAAO,GAAE,8BAAmC,GAC3C,iBAAiB,CAkJnB;AAED,sFAAsF;AACtF,MAAM,WAAW,kCAAkC;IACjD;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAC3C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,kCAAuC,GAC/C,MAAM,EAAE,CAkDV;AAED;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,WAAgC,CAAC"}

package/dist/factories/traefik/utils/helm-values-mapper.js

@@ -0,0 +1,372 @@
+/**
+ * Traefik Helm values mapping.
+ *
+ * Turns the bootstrap composition's runtime spec into values for the official
+ * `traefik` chart 41.5.0, then applies the security pins from #172 LAST so no
+ * caller — not even the build-time `values` passthrough — can re-enable the
+ * dashboard or the insecure API.
+ *
+ * Every value produced here may be a schema reference in KRO mode. The mapping
+ * therefore never branches on a spec value; it only places values into the
+ * tree. Decisions about which configuration EXISTS live in
+ * {@link TraefikHelmValuesMapperOptions} and are concrete at build time.
+ */
+import { Cel } from '../../../core/references/cel.js';
+import { isCelExpression, isKubernetesRef } from '../../../utils/type-guards.js';
+import { DEFAULT_TRAEFIK_CHART_VERSION, DEFAULT_TRAEFIK_INGRESS_CLASS, DEFAULT_TRAEFIK_NAMESPACE, DEFAULT_TRAEFIK_WEB_PORT, DEFAULT_TRAEFIK_WEBSECURE_PORT, TRAEFIK_POD_NAME_LABEL_VALUE, TRAEFIK_WEBSECURE_ENTRYPOINT, } from '../constants.js';
+/**
+ * Pod-level security context Traefik runs with.
+ *
+ * @security Matches the chart's own hardened defaults and is re-pinned here so
+ * a values passthrough cannot drop `runAsNonRoot`.
+ *
+ * Annotated with {@link TraefikPodSecurityContext} rather than `as const`: the
+ * pin is then checked against the CLOSED managed-values type, so a chart field
+ * rename becomes a compile error instead of a silently ignored value.
+ */
+export const TRAEFIK_POD_SECURITY_CONTEXT = {
+    runAsNonRoot: true,
+    runAsUser: 65532,
+    runAsGroup: 65532,
+    seccompProfile: { type: 'RuntimeDefault' },
+};
+/**
+ * Container-level security context Traefik runs with.
+ *
+ * @security No privilege escalation, all capabilities dropped, read-only root
+ * filesystem. Traefik needs no writable root; ACME storage, when used, gets an
+ * explicit volume.
+ */
+export const TRAEFIK_CONTAINER_SECURITY_CONTEXT = {
+    allowPrivilegeEscalation: false,
+    readOnlyRootFilesystem: true,
+    capabilities: { drop: ['ALL'] },
+};
+/**
+ * Values this factory pins unconditionally, applied after every other source.
+ *
+ * @security The chart ships `api.dashboard: true`. An edge that exposes the
+ * Traefik dashboard exposes its full routing table, and `api.insecure` serves
+ * the API unauthenticated over plain HTTP on the `traefik` entrypoint. Neither
+ * is switchable through this factory: the runtime spec cannot express `true`
+ * (`dashboard` is typed as the literal `false`) and these pins overwrite any
+ * build-time passthrough. Re-enabling them means not using this factory.
+ */
+export const TRAEFIK_SECURITY_PINS = {
+    api: { dashboard: false, insecure: false, debug: false },
+    ingressRoute: { dashboard: { enabled: false }, healthcheck: { enabled: false } },
+    podSecurityContext: TRAEFIK_POD_SECURITY_CONTEXT,
+    securityContext: TRAEFIK_CONTAINER_SECURITY_CONTEXT,
+    global: { checkNewVersion: false, sendAnonymousUsage: false },
+};
+/**
+ * Values that hand ownership of the entrypoint Service to TypeKro.
+ *
+ * The chart would otherwise create the Service itself, and a composition can
+ * only project a resource's status if that resource is part of its graph.
+ * Observing the chart's Service instead made every fresh direct deployment fail
+ * before it started: the direct engine resolves external references BEFORE it
+ * applies anything, and a `404` on the not-yet-created Service is fatal.
+ *
+ * Three pins make the owned Service possible. Two are constants and live here;
+ * the third takes the release name, so {@link applyTraefikOwnershipPins} adds
+ * it.
+ *
+ * - `service.enabled: false` — the chart skips its whole Service template.
+ * - `nameOverride` — fixes the chart's `app.kubernetes.io/name` pod label.
+ * - `instanceLabelOverride` — fixes `app.kubernetes.io/instance`, which the
+ *   chart otherwise derives from the Helm release name. `traefikHelmRelease`
+ *   pins `spec.releaseName` to the same name, so the two agree; the pin keeps
+ *   the selector exact even if a release ever arrives under another name.
+ *
+ * Together those two labels are exactly the chart's own pod selector, so the
+ * owned Service front-ends the same pods the chart's Service would have.
+ */
+export const TRAEFIK_OWNERSHIP_PINS = {
+    service: { enabled: false },
+    nameOverride: TRAEFIK_POD_NAME_LABEL_VALUE,
+};
+/**
+ * Whether a value is a graph value — a schema/resource reference or a CEL
+ * expression — rather than a concrete literal.
+ *
+ * The distinction matters wherever the mapper must ask a QUESTION about a
+ * value instead of merely placing it: a reference has to be interrogated in
+ * CEL, a literal in JavaScript.
+ */
+function isGraphValue(value) {
+    return isKubernetesRef(value) || isCelExpression(value);
+}
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * Merge `override` onto `base` one level deep.
+ *
+ * Only top-level sections are merged; a section present in both is replaced
+ * key-by-key rather than recursively, which keeps the merge from ever spreading
+ * a nested schema reference.
+ */
+function mergeSections(base, override) {
+    const merged = { ...base };
+    for (const [key, value] of Object.entries(override)) {
+        const existing = merged[key];
+        merged[key] =
+            isPlainObject(existing) && isPlainObject(value) ? { ...existing, ...value } : value;
+    }
+    return merged;
+}
+/**
+ * Overwrite the security-relevant values, whatever they were.
+ *
+ * Written as explicit spreads at known depths rather than a generic deep merge
+ * so the precedence is auditable by reading it.
+ */
+export function applyTraefikSecurityPins(values) {
+    return {
+        ...values,
+        api: { ...values.api, ...TRAEFIK_SECURITY_PINS.api },
+        ingressRoute: {
+            ...values.ingressRoute,
+            dashboard: { ...values.ingressRoute?.dashboard, enabled: false },
+            healthcheck: { ...values.ingressRoute?.healthcheck, enabled: false },
+        },
+        podSecurityContext: { ...values.podSecurityContext, ...TRAEFIK_POD_SECURITY_CONTEXT },
+        securityContext: { ...values.securityContext, ...TRAEFIK_CONTAINER_SECURITY_CONTEXT },
+        global: { ...values.global, ...TRAEFIK_SECURITY_PINS.global },
+    };
+}
+/**
+ * Overwrite the values that decide who owns the entrypoint Service.
+ *
+ * Applied after `baseValues` so a passthrough cannot hand the Service back to
+ * the chart, which would produce a second Service competing for the same name.
+ *
+ * @param values - Chart values to pin.
+ * @param instanceLabel - Value for the chart's `app.kubernetes.io/instance`
+ *   pod label. Normally the release name; may be a schema reference.
+ */
+export function applyTraefikOwnershipPins(values, instanceLabel) {
+    return {
+        ...values,
+        service: { ...values.service, ...TRAEFIK_OWNERSHIP_PINS.service },
+        nameOverride: TRAEFIK_OWNERSHIP_PINS.nameOverride,
+        instanceLabelOverride: instanceLabel,
+    };
+}
+/**
+ * Type of the entrypoint Service this factory owns.
+ *
+ * Lives here rather than in the composition so the Service's type and the
+ * chart values it is paired with share one default. `Cel.default` rather than
+ * `??`: a schema proxy is a truthy object, so `??` would keep the reference and
+ * drop the fallback in KRO mode.
+ *
+ * @param config - The bootstrap spec. `service.type` may be a schema reference.
+ */
+export function traefikEntrypointServiceType(config) {
+    return Cel.default(config.service?.type, 'LoadBalancer');
+}
+/**
+ * Map the bootstrap runtime spec onto official-chart values.
+ *
+ * @param config - The bootstrap spec. Any field may be a schema reference.
+ * @param options - Build-time structural choices.
+ * @returns Chart values with the security pins already applied.
+ *
+ * @example
+ * ```typescript
+ * const values = mapTraefikConfigToHelmValues({
+ *   name: 'traefik',
+ *   namespace: 'traefik',
+ *   service: { type: 'LoadBalancer', annotations: { 'service.beta.kubernetes.io/aws-load-balancer-type': 'external' } },
+ *   providers: { crd: true, gatewayApi: false },
+ *   accessLogs: true,
+ * });
+ * ```
+ */
+export function mapTraefikConfigToHelmValues(config, options = {}) {
+    // Every spec-derived default goes through `Cel.default`, never `??`: a schema
+    // proxy is a truthy object, so `??` would silently keep the reference and
+    // drop the fallback in KRO mode, leaving the chart's own default in place and
+    // making direct and KRO deployments disagree.
+    const ingressClass = Cel.default(config.ingressClass, DEFAULT_TRAEFIK_INGRESS_CLASS);
+    const redirect = options.redirectWebToWebsecure ?? true;
+    // OTLP is enabled by the PRESENCE of an endpoint. In KRO mode the endpoint is
+    // a schema reference, so the enablement has to be a CEL comparison — a
+    // JavaScript truthiness test on a proxy is always true. With a concrete spec
+    // the same question is answered in JavaScript, because CEL over a literal
+    // would have to quote the value itself.
+    const endpointInput = config.otlp?.endpoint;
+    const otlpEndpoint = Cel.default(endpointInput, '');
+    const otlpEnabled = isGraphValue(endpointInput)
+        ? // Compare the GUARDED expression, not the bare reference: `schema.spec.otlp`
+            // is absent whenever the block is omitted, and unguarded field selection on
+            // an absent message is a CEL evaluation error rather than a false.
+            Cel.expr(otlpEndpoint, ' != ""')
+        : typeof endpointInput === 'string' && endpointInput.length > 0;
+    const otlpInsecure = Cel.default(config.otlp?.insecure, true);
+    const otlpServiceName = Cel.default(config.otlp?.serviceName, 'traefik');
+    // `expose` is a structural choice (whether a port EXISTS on the Service), so
+    // it is not spec-driven: the composition OWNS the entrypoint Service and
+    // always publishes both entrypoints. These chart-side values only matter if
+    // the chart's own Service is re-enabled through `baseValues`, which the
+    // ownership pins prevent — they are kept so the values tree still states the
+    // intent for anyone reading it.
+    const webPort = {
+        exposedPort: Cel.default(config.entrypoints?.web?.exposedPort, DEFAULT_TRAEFIK_WEB_PORT),
+        expose: { default: true },
+        ...(redirect
+            ? {
+                http: {
+                    redirections: {
+                        entryPoint: {
+                            to: TRAEFIK_WEBSECURE_ENTRYPOINT,
+                            scheme: 'https',
+                            permanent: true,
+                        },
+                    },
+                },
+            }
+            : {}),
+    };
+    const websecurePort = {
+        exposedPort: Cel.default(config.entrypoints?.websecure?.exposedPort, DEFAULT_TRAEFIK_WEBSECURE_PORT),
+        expose: { default: true },
+        // TLS lives under `http` in chart 41.5.0 — `ports.websecure.tls` is
+        // rejected outright by the chart's values.schema.json.
+        http: { tls: { enabled: true } },
+        // An edge fronting requests longer than Traefik's 60s default must raise
+        // the responding timeouts here as well as the upstream ServersTransport.
+        transport: {
+            respondingTimeouts: {
+                readTimeout: Cel.default(config.entrypoints?.websecure?.readTimeout, '90s'),
+                writeTimeout: Cel.default(config.entrypoints?.websecure?.writeTimeout, '90s'),
+                idleTimeout: Cel.default(config.entrypoints?.websecure?.idleTimeout, '180s'),
+            },
+        },
+    };
+    const mapped = {
+        // Pin the resource-name anchor to `config.name`. The chart's fullname
+        // template would otherwise decide the name of the ServiceAccount, RBAC and
+        // Deployment — and of the Service the chart's Ingress `publishedService`
+        // path points at, which must match the Service this factory owns.
+        fullnameOverride: config.name,
+        deployment: { replicas: Cel.default(config.replicas, 2) },
+        ingressClass: {
+            enabled: true,
+            // Claiming the cluster-default IngressClass would silently capture every
+            // class-less Ingress in the cluster. Opt in through `baseValues`.
+            isDefaultClass: false,
+            name: ingressClass,
+        },
+        providers: {
+            kubernetesCRD: {
+                enabled: Cel.default(config.providers?.crd, true),
+                ingressClass,
+            },
+            kubernetesIngress: {
+                enabled: Cel.default(config.providers?.kubernetesIngress, false),
+                // The chart emits `--providers.kubernetesingress.ingressendpoint.
+                // publishedservice` only when it created the Service itself, or when a
+                // pathOverride names one. This factory owns the Service, so the
+                // override is what keeps `Ingress.status.loadBalancer` hydrating. The
+                // path is `<namespace>/<name>` — the same value the chart's own default
+                // would have produced.
+                publishedService: {
+                    enabled: true,
+                    pathOverride: Cel.template('%s/%s', options.targetNamespace ?? Cel.default(config.namespace, DEFAULT_TRAEFIK_NAMESPACE), config.name),
+                },
+            },
+            kubernetesGateway: {
+                enabled: Cel.default(config.providers?.gatewayApi, false),
+            },
+        },
+        log: { level: Cel.default(config.logLevel, 'INFO'), format: 'json' },
+        accessLog: {
+            enabled: Cel.default(config.accessLogs, true),
+            format: 'json',
+            // Health and metrics traffic on the internal entrypoint would otherwise
+            // dominate the access log.
+            addInternals: false,
+        },
+        metrics: {
+            otlp: {
+                enabled: otlpEnabled,
+                grpc: { enabled: otlpEnabled, endpoint: otlpEndpoint, insecure: otlpInsecure },
+            },
+        },
+        tracing: {
+            serviceName: otlpServiceName,
+            otlp: {
+                enabled: otlpEnabled,
+                grpc: { enabled: otlpEnabled, endpoint: otlpEndpoint, insecure: otlpInsecure },
+            },
+        },
+        ports: {
+            web: webPort,
+            websecure: websecurePort,
+            // @security The internal entrypoint serves /ping, metrics and the (pinned
+            // off) dashboard. It must never be published by the Service.
+            traefik: { expose: { default: false } },
+        },
+        // No `service` section: the entrypoint Service — its type, annotations and
+        // published ports — is a resource this factory owns, not a chart value.
+        resources: {
+            requests: { cpu: '100m', memory: '128Mi' },
+            limits: { cpu: '1', memory: '512Mi' },
+        },
+    };
+    const merged = mergeSections(options.baseValues ?? {}, mapped);
+    return applyTraefikSecurityPins(applyTraefikOwnershipPins(merged, config.name));
+}
+/**
+ * Report configuration that is legal but likely a mistake at an edge.
+ *
+ * Returns warnings rather than throwing: none of these is invalid, and a test
+ * cluster legitimately hits several of them.
+ *
+ * @param values - Chart values, normally the output of
+ *   {@link mapTraefikConfigToHelmValues}.
+ * @param context - Facts about the owned entrypoint Service. Omit it and the
+ *   Service-type warnings simply do not fire.
+ */
+export function validateTraefikHelmValues(values, context = {}) {
+    const warnings = [];
+    if (values.api?.dashboard === true) {
+        warnings.push('Traefik dashboard is enabled. This factory pins api.dashboard to false; seeing it enabled means the pins were bypassed.');
+    }
+    if (values.api?.insecure === true) {
+        warnings.push('Traefik insecure API is enabled. This factory pins api.insecure to false; seeing it enabled means the pins were bypassed.');
+    }
+    if (values.podSecurityContext?.runAsNonRoot !== true) {
+        warnings.push('Traefik podSecurityContext.runAsNonRoot is not true. The proxy binds unprivileged container ports and does not need root.');
+    }
+    if (values.providers?.kubernetesCRD?.enabled === false) {
+        warnings.push('The Kubernetes CRD provider is disabled. IngressRoute, Middleware, TLSOption, TLSStore and TraefikService resources will not be reconciled.');
+    }
+    if (values.ingressClass?.isDefaultClass === true) {
+        warnings.push('Traefik is claiming the cluster-default IngressClass. Every Ingress without an explicit class will be routed by this installation.');
+    }
+    if (values.service?.enabled === true) {
+        warnings.push('The chart is creating its own entrypoint Service. This factory owns that Service so its address can be projected into the status contract; seeing it enabled means the ownership pins were bypassed.');
+    }
+    if (values.deployment?.replicas === 1 && context.serviceType === 'LoadBalancer') {
+        warnings.push('A single Traefik replica behind a LoadBalancer has no rolling-update headroom. Consider replicas >= 2 for a production edge.');
+    }
+    if (!values.resources?.requests) {
+        warnings.push('No resource requests specified for Traefik. Set CPU and memory requests so the edge is not evicted first under pressure.');
+    }
+    if (values.ports?.traefik?.expose?.default === true) {
+        warnings.push('The internal `traefik` entrypoint is exposed by the Service. It serves /ping and metrics and should stay cluster-internal.');
+    }
+    return warnings;
+}
+/**
+ * The chart version this factory is verified against.
+ *
+ * Re-exported from the mapper so a consumer can record the pinned version
+ * alongside the values it produced.
+ */
+export const TRAEFIK_MAPPED_CHART_VERSION = DEFAULT_TRAEFIK_CHART_VERSION;
+//# sourceMappingURL=helm-values-mapper.js.map

package/dist/factories/traefik/utils/helm-values-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-values-mapper.js","sourceRoot":"","sources":["../../../../src/factories/traefik/utils/helm-values-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACjF,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,yBAAyB,EACzB,wBAAwB,EACxB,8BAA8B,EAC9B,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,iBAAiB,CAAC;AAYzB;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAA8B;IACrE,YAAY,EAAE,IAAI;IAClB,SAAS,EAAE,KAAK;IAChB,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;CAC3C,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAoC;IACjF,wBAAwB,EAAE,KAAK;IAC/B,sBAAsB,EAAE,IAAI;IAC5B,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;CAChC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE;IACxD,YAAY,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;IAChF,kBAAkB,EAAE,4BAA4B;IAChD,eAAe,EAAE,kCAAkC;IACnD,MAAM,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE;CAC3B,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;IAC3B,YAAY,EAAE,4BAA4B;CACR,CAAC;AA+BrC;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,eAAe,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,IAA0B,EAC1B,QAA2B;IAE3B,MAAM,MAAM,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC;YACT,aAAa,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACxF,CAAC;IACD,OAAO,MAA2B,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAyB;IAChE,OAAO;QACL,GAAG,MAAM;QACT,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,qBAAqB,CAAC,GAAG,EAAE;QACpD,YAAY,EAAE;YACZ,GAAG,MAAM,CAAC,YAAY;YACtB,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAChE,WAAW,EAAE,EAAE,GAAG,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE;SACrE;QACD,kBAAkB,EAAE,EAAE,GAAG,MAAM,CAAC,kBAAkB,EAAE,GAAG,4BAA4B,EAAE;QACrF,eAAe,EAAE,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,GAAG,kCAAkC,EAAE;QACrF,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,qBAAqB,CAAC,MAAM,EAAE;KAC9D,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAyB,EACzB,aAAiC;IAEjC,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,sBAAsB,CAAC,OAAO,EAAE;QACjE,YAAY,EAAE,sBAAsB,CAAC,YAAY;QACjD,qBAAqB,EAAE,aAAuB;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAA8B;IACzE,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAA8B,EAC9B,UAA0C,EAAE;IAE5C,8EAA8E;IAC9E,0EAA0E;IAC1E,8EAA8E;IAC9E,8CAA8C;IAC9C,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC;IAExD,8EAA8E;IAC9E,uEAAuE;IACvE,6EAA6E;IAC7E,0EAA0E;IAC1E,wCAAwC;IACxC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC;IAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,WAAW,GAAY,YAAY,CAAC,aAAa,CAAC;QACtD,CAAC,CAAC,6EAA6E;YAC7E,4EAA4E;YAC5E,mEAAmE;YACnE,GAAG,CAAC,IAAI,CAAU,YAAY,EAAE,QAAQ,CAAC;QAC3C,CAAC,CAAC,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAEzE,6EAA6E;IAC7E,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,gCAAgC;IAChC,MAAM,OAAO,GAAsB;QACjC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,CAAC;QACxF,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QACzB,GAAG,CAAC,QAAQ;YACV,CAAC,CAAC;gBACE,IAAI,EAAE;oBACJ,YAAY,EAAE;wBACZ,UAAU,EAAE;4BACV,EAAE,EAAE,4BAA4B;4BAChC,MAAM,EAAE,OAAO;4BACf,SAAS,EAAE,IAAI;yBAChB;qBACF;iBACF;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,aAAa,GAAsB;QACvC,WAAW,EAAE,GAAG,CAAC,OAAO,CACtB,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,EAC1C,8BAA8B,CAC/B;QACD,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QACzB,oEAAoE;QACpE,uDAAuD;QACvD,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAChC,yEAAyE;QACzE,yEAAyE;QACzE,SAAS,EAAE;YACT,kBAAkB,EAAE;gBAClB,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC;gBAC3E,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC;gBAC7E,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC;aAC7E;SACF;KACF,CAAC;IAEF,MAAM,MAAM,GAAsB;QAChC,sEAAsE;QACtE,2EAA2E;QAC3E,yEAAyE;QACzE,kEAAkE;QAClE,gBAAgB,EAAE,MAAM,CAAC,IAAI;QAC7B,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE;QACzD,YAAY,EAAE;YACZ,OAAO,EAAE,IAAI;YACb,yEAAyE;YACzE,kEAAkE;YAClE,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,YAAY;SACnB;QACD,SAAS,EAAE;YACT,aAAa,EAAE;gBACb,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC;gBACjD,YAAY;aACb;YACD,iBAAiB,EAAE;gBACjB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,EAAE,KAAK,CAAC;gBAChE,kEAAkE;gBAClE,uEAAuE;gBACvE,gEAAgE;gBAChE,sEAAsE;gBACtE,wEAAwE;gBACxE,uBAAuB;gBACvB,gBAAgB,EAAE;oBAChB,OAAO,EAAE,IAAI;oBACb,YAAY,EAAE,GAAG,CAAC,QAAQ,CACxB,OAAO,EACP,OAAO,CAAC,eAAe,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,yBAAyB,CAAC,EACnF,MAAM,CAAC,IAAI,CACZ;iBACF;aACF;YACD,iBAAiB,EAAE;gBACjB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC;aAC1D;SACF;QACD,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;QACpE,SAAS,EAAE;YACT,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC;YAC7C,MAAM,EAAE,MAAM;YACd,wEAAwE;YACxE,2BAA2B;YAC3B,YAAY,EAAE,KAAK;SACpB;QACD,OAAO,EAAE;YACP,IAAI,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE;aAC/E;SACF;QACD,OAAO,EAAE;YACP,WAAW,EAAE,eAAe;YAC5B,IAAI,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE;aAC/E;SACF;QACD,KAAK,EAAE;YACL,GAAG,EAAE,OAAO;YACZ,SAAS,EAAE,aAAa;YACxB,0EAA0E;YAC1E,6DAA6D;YAC7D,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;SACxC;QACD,2EAA2E;QAC3E,wEAAwE;QACxE,SAAS,EAAE;YACT,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;YAC1C,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;SACtC;KACF,CAAC;IAEF,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO,wBAAwB,CAAC,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAClF,CAAC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAyB,EACzB,UAA8C,EAAE;IAEhD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,MAAM,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CACX,yHAAyH,CAC1H,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CACX,2HAA2H,CAC5H,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,kBAAkB,EAAE,YAAY,KAAK,IAAI,EAAE,CAAC;QACrD,QAAQ,CAAC,IAAI,CACX,2HAA2H,CAC5H,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CACX,6IAA6I,CAC9I,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,EAAE,cAAc,KAAK,IAAI,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CACX,oIAAoI,CACrI,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CACX,sMAAsM,CACvM,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,WAAW,KAAK,cAAc,EAAE,CAAC;QAChF,QAAQ,CAAC,IAAI,CACX,8HAA8H,CAC/H,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CACX,0HAA0H,CAC3H,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CACX,4HAA4H,CAC7H,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,6BAA6B,CAAC"}

package/dist/factories/traefik/utils/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Traefik utilities.
+ */
+export { applyTraefikOwnershipPins, applyTraefikSecurityPins, mapTraefikConfigToHelmValues, TRAEFIK_CONTAINER_SECURITY_CONTEXT, TRAEFIK_MAPPED_CHART_VERSION, TRAEFIK_OWNERSHIP_PINS, TRAEFIK_POD_SECURITY_CONTEXT, TRAEFIK_SECURITY_PINS, traefikEntrypointServiceType, type TraefikHelmValuesMapperOptions, type TraefikHelmValuesValidationContext, validateTraefikHelmValues, } from './helm-values-mapper.js';
+export { assertTraefikMiddlewareSpec, traefikMiddlewareKeys, validateTraefikMiddlewareSpec, } from './middleware-validation.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/traefik/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/traefik/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,EAC5B,kCAAkC,EAClC,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,EAC5B,qBAAqB,EACrB,4BAA4B,EAC5B,KAAK,8BAA8B,EACnC,KAAK,kCAAkC,EACvC,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC"}

package/dist/factories/traefik/utils/index.js

@@ -0,0 +1,6 @@
+/**
+ * Traefik utilities.
+ */
+export { applyTraefikOwnershipPins, applyTraefikSecurityPins, mapTraefikConfigToHelmValues, TRAEFIK_CONTAINER_SECURITY_CONTEXT, TRAEFIK_MAPPED_CHART_VERSION, TRAEFIK_OWNERSHIP_PINS, TRAEFIK_POD_SECURITY_CONTEXT, TRAEFIK_SECURITY_PINS, traefikEntrypointServiceType, validateTraefikHelmValues, } from './helm-values-mapper.js';
+export { assertTraefikMiddlewareSpec, traefikMiddlewareKeys, validateTraefikMiddlewareSpec, } from './middleware-validation.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/traefik/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/traefik/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,EAC5B,kCAAkC,EAClC,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,EAC5B,qBAAqB,EACrB,4BAA4B,EAG5B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC"}