typekro 0.44.0 → 0.45.0

package/dist/factories/aws-load-balancer-controller/compositions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/aws-load-balancer-controller/compositions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,gDAAgD,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/factories/aws-load-balancer-controller/constants.d.ts

@@ -0,0 +1,21 @@
+/** Pinned chart version. */
+export declare const DEFAULT_AWS_LBC_CHART_VERSION = "3.5.0";
+/** Controller version bundled with {@link DEFAULT_AWS_LBC_CHART_VERSION}. */
+export declare const DEFAULT_AWS_LBC_APP_VERSION = "v3.5.0";
+/** Chart name inside the eks-charts repository. */
+export declare const AWS_LBC_CHART_NAME = "aws-load-balancer-controller";
+/** The eks-charts Helm repository. */
+export declare const DEFAULT_AWS_LBC_REPOSITORY_URL = "https://aws.github.io/eks-charts";
+/** `HelmRepository` name the bootstrap composition owns as a singleton. */
+export declare const DEFAULT_AWS_LBC_REPOSITORY_NAME = "eks-charts";
+/** Conventional release name, and the service account name the bootstrap pins. */
+export declare const DEFAULT_AWS_LBC_NAME = "aws-load-balancer-controller";
+/** Namespace the controller is installed into by default, as in the upstream docs. */
+export declare const DEFAULT_AWS_LBC_NAMESPACE = "kube-system";
+/** Flux CRD policy applied to install and upgrade. */
+export declare const DEFAULT_AWS_LBC_CRDS_POLICY = "CreateReplace";
+/** API group/version of `TargetGroupBinding` and `IngressClassParams`. */
+export declare const AWS_LBC_ELBV2_API_VERSION = "elbv2.k8s.aws/v1beta1";
+/** IAM policy the controller's role needs, for {@link DEFAULT_AWS_LBC_APP_VERSION}. */
+export declare const AWS_LBC_IAM_POLICY_URL = "https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v3.5.0/docs/install/iam_policy.json";
+//# sourceMappingURL=constants.d.ts.map

package/dist/factories/aws-load-balancer-controller/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/factories/aws-load-balancer-controller/constants.ts"],"names":[],"mappings":"AAUA,4BAA4B;AAC5B,eAAO,MAAM,6BAA6B,UAAU,CAAC;AACrD,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,WAAW,CAAC;AACpD,mDAAmD;AACnD,eAAO,MAAM,kBAAkB,iCAAiC,CAAC;AACjE,sCAAsC;AACtC,eAAO,MAAM,8BAA8B,qCAAqC,CAAC;AACjF,2EAA2E;AAC3E,eAAO,MAAM,+BAA+B,eAAe,CAAC;AAC5D,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,iCAAiC,CAAC;AACnE,sFAAsF;AACtF,eAAO,MAAM,yBAAyB,gBAAgB,CAAC;AACvD,sDAAsD;AACtD,eAAO,MAAM,2BAA2B,kBAAkB,CAAC;AAC3D,0EAA0E;AAC1E,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AACjE,uFAAuF;AACvF,eAAO,MAAM,sBAAsB,uHACmF,CAAC"}

package/dist/factories/aws-load-balancer-controller/constants.js

@@ -0,0 +1,29 @@
+// AWS Load Balancer Controller factory constants.
+//
+// Verified against the `aws-load-balancer-controller` chart 3.5.0 (appVersion
+// `v3.5.0`) published on https://aws.github.io/eks-charts.
+// The chart ships its CRDs (TargetGroupBinding, IngressClassParams, the
+// gateway.k8s.aws configuration kinds, ...) in its `crds/` directory. Flux
+// SKIPS `crds/` on upgrade by default, so without `CreateReplace` a chart bump
+// would run a newer controller against the CRD schemas of the first install.
+/** Pinned chart version. */
+export const DEFAULT_AWS_LBC_CHART_VERSION = '3.5.0';
+/** Controller version bundled with {@link DEFAULT_AWS_LBC_CHART_VERSION}. */
+export const DEFAULT_AWS_LBC_APP_VERSION = 'v3.5.0';
+/** Chart name inside the eks-charts repository. */
+export const AWS_LBC_CHART_NAME = 'aws-load-balancer-controller';
+/** The eks-charts Helm repository. */
+export const DEFAULT_AWS_LBC_REPOSITORY_URL = 'https://aws.github.io/eks-charts';
+/** `HelmRepository` name the bootstrap composition owns as a singleton. */
+export const DEFAULT_AWS_LBC_REPOSITORY_NAME = 'eks-charts';
+/** Conventional release name, and the service account name the bootstrap pins. */
+export const DEFAULT_AWS_LBC_NAME = 'aws-load-balancer-controller';
+/** Namespace the controller is installed into by default, as in the upstream docs. */
+export const DEFAULT_AWS_LBC_NAMESPACE = 'kube-system';
+/** Flux CRD policy applied to install and upgrade. */
+export const DEFAULT_AWS_LBC_CRDS_POLICY = 'CreateReplace';
+/** API group/version of `TargetGroupBinding` and `IngressClassParams`. */
+export const AWS_LBC_ELBV2_API_VERSION = 'elbv2.k8s.aws/v1beta1';
+/** IAM policy the controller's role needs, for {@link DEFAULT_AWS_LBC_APP_VERSION}. */
+export const AWS_LBC_IAM_POLICY_URL = 'https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v3.5.0/docs/install/iam_policy.json';
+//# sourceMappingURL=constants.js.map

package/dist/factories/aws-load-balancer-controller/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/factories/aws-load-balancer-controller/constants.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,8EAA8E;AAC9E,2DAA2D;AAE3D,wEAAwE;AACxE,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAE7E,4BAA4B;AAC5B,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAC;AACrD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,2BAA2B,GAAG,QAAQ,CAAC;AACpD,mDAAmD;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AACjE,sCAAsC;AACtC,MAAM,CAAC,MAAM,8BAA8B,GAAG,kCAAkC,CAAC;AACjF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,+BAA+B,GAAG,YAAY,CAAC;AAC5D,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,8BAA8B,CAAC;AACnE,sFAAsF;AACtF,MAAM,CAAC,MAAM,yBAAyB,GAAG,aAAa,CAAC;AACvD,sDAAsD;AACtD,MAAM,CAAC,MAAM,2BAA2B,GAAG,eAAe,CAAC;AAC3D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GACjC,oHAAoH,CAAC"}

package/dist/factories/aws-load-balancer-controller/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * AWS Load Balancer Controller.
+ *
+ * Installs the controller from the eks-charts repository through Flux, and
+ * exposes typed `TargetGroupBinding` and `IngressClassParams` factories.
+ * TypeKro creates no AWS resources: the IAM role and policy, and the subnet
+ * discovery tags, are prerequisites.
+ *
+ * @see docs/api/aws-load-balancer-controller/index.md
+ */
+export * from './compositions/index.js';
+export * from './constants.js';
+export * from './resources/index.js';
+export type * from './types.js';
+export { AwsLoadBalancerControllerBootstrapConfigSchema, AwsLoadBalancerControllerBootstrapStatusSchema, } from './types.js';
+export * from './utils/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/aws-load-balancer-controller/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/factories/aws-load-balancer-controller/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,mBAAmB,YAAY,CAAC;AAChC,OAAO,EACL,8CAA8C,EAC9C,8CAA8C,GAC/C,MAAM,YAAY,CAAC;AACpB,cAAc,kBAAkB,CAAC"}

package/dist/factories/aws-load-balancer-controller/index.js

@@ -0,0 +1,16 @@
+/**
+ * AWS Load Balancer Controller.
+ *
+ * Installs the controller from the eks-charts repository through Flux, and
+ * exposes typed `TargetGroupBinding` and `IngressClassParams` factories.
+ * TypeKro creates no AWS resources: the IAM role and policy, and the subnet
+ * discovery tags, are prerequisites.
+ *
+ * @see docs/api/aws-load-balancer-controller/index.md
+ */
+export * from './compositions/index.js';
+export * from './constants.js';
+export * from './resources/index.js';
+export { AwsLoadBalancerControllerBootstrapConfigSchema, AwsLoadBalancerControllerBootstrapStatusSchema, } from './types.js';
+export * from './utils/index.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/aws-load-balancer-controller/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/factories/aws-load-balancer-controller/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AAErC,OAAO,EACL,8CAA8C,EAC9C,8CAA8C,GAC/C,MAAM,YAAY,CAAC;AACpB,cAAc,kBAAkB,CAAC"}

package/dist/factories/aws-load-balancer-controller/resources/elbv2.d.ts

@@ -0,0 +1,45 @@
+import type { Composable, Enhanced, ReadinessEvaluator } from '../../../core/types/index.js';
+import type { IngressClassParamsConfig, IngressClassParamsSpec, TargetGroupBindingConfig, TargetGroupBindingSpec, TargetGroupBindingStatus } from '../types.js';
+/**
+ * A `TargetGroupBinding` is ready once the controller has reconciled its
+ * current generation and reports no failing condition.
+ */
+export declare const targetGroupBindingReadinessEvaluator: ReadinessEvaluator<unknown>;
+/**
+ * Register a Service's endpoints with an existing ELBv2 target group.
+ *
+ * @example
+ * ```typescript
+ * targetGroupBinding({
+ *   name: 'web',
+ *   namespace: 'apps',
+ *   spec: {
+ *     serviceRef: { name: 'web', port: 80 },
+ *     targetGroupARN: 'arn:aws:elasticloadbalancing:us-east-1:111122223333:targetgroup/web/0123456789abcdef',
+ *     targetType: 'ip',
+ *   },
+ *   id: 'webTargets',
+ * });
+ * ```
+ *
+ * @throws {ValidationError} when neither `targetGroupARN` nor `targetGroupName`
+ * is set (or both are empty strings), or when concrete values break a static
+ * rule of the controller's webhook: `nodeSelector` with `ip` targets,
+ * `iamRoleArnToAssume` or a QUIC / TCP_QUIC protocol with `instance` targets, or
+ * a malformed `vpcID`.
+ */
+export declare function targetGroupBinding(config: Composable<TargetGroupBindingConfig>): Enhanced<TargetGroupBindingSpec, TargetGroupBindingStatus>;
+/**
+ * Create a cluster-scoped `IngressClassParams`, the settings an `IngressClass`
+ * applies to every Ingress that uses it.
+ *
+ * @example
+ * ```typescript
+ * ingressClassParams({
+ *   name: 'internal',
+ *   spec: { scheme: 'internal', group: { name: 'internal' }, targetType: 'ip' },
+ * });
+ * ```
+ */
+export declare function ingressClassParams(config: Composable<IngressClassParamsConfig>): Enhanced<IngressClassParamsSpec, object>;
+//# sourceMappingURL=elbv2.d.ts.map

package/dist/factories/aws-load-balancer-controller/resources/elbv2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elbv2.d.ts","sourceRoot":"","sources":["../../../../src/factories/aws-load-balancer-controller/resources/elbv2.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,UAAU,EACV,QAAQ,EACR,kBAAkB,EAEnB,MAAM,8BAA8B,CAAC;AAItC,OAAO,KAAK,EACV,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,aAAa,CAAC;AAErB;;;GAGG;AACH,eAAO,MAAM,oCAAoC,EAAE,kBAAkB,CAAC,OAAO,CAyB5E,CAAC;AA0FF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,UAAU,CAAC,wBAAwB,CAAC,GAC3C,QAAQ,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAY5D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,UAAU,CAAC,wBAAwB,CAAC,GAC3C,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAW1C"}

package/dist/factories/aws-load-balancer-controller/resources/elbv2.js

@@ -0,0 +1,148 @@
+// Typed `elbv2.k8s.aws/v1beta1` resources served by the controller.
+import { ValidationError } from '../../../core/errors.js';
+import { createAlwaysReadyEvaluator } from '../../../core/readiness/index.js';
+import { isCelExpression, isKubernetesRef } from '../../../utils/type-guards.js';
+import { createResource } from '../../shared.js';
+import { AWS_LBC_ELBV2_API_VERSION } from '../constants.js';
+/**
+ * A `TargetGroupBinding` is ready once the controller has reconciled its
+ * current generation and reports no failing condition.
+ */
+export const targetGroupBindingReadinessEvaluator = (live) => {
+    const resource = live;
+    const observed = resource?.status?.observedGeneration;
+    const generation = resource?.metadata?.generation ?? 1;
+    if (observed === undefined || observed < generation) {
+        return {
+            ready: false,
+            reason: 'NotReconciled',
+            message: 'TargetGroupBinding not yet reconciled by the AWS Load Balancer Controller',
+        };
+    }
+    const failing = resource?.status?.conditions?.find((c) => c.status === 'False');
+    if (failing) {
+        return {
+            ready: false,
+            reason: failing.reason ?? failing.type,
+            message: failing.message ?? `TargetGroupBinding condition ${failing.type} is False`,
+        };
+    }
+    return { ready: true, message: 'TargetGroupBinding reconciled' };
+};
+/** A value only known per instance: a schema or resource reference, or CEL. */
+function isGraphValue(value) {
+    return isKubernetesRef(value) || isCelExpression(value);
+}
+/** The VPC ID format the controller's webhook accepts (v3.5.0). */
+const VPC_ID_PATTERN = /^(?:vpc-[0-9a-f]{8}|vpc-[0-9a-f]{17}|vpc-[0-9a-f]{32})$/;
+/** A concrete, non-empty string; `undefined` for a graph value or anything else. */
+function concreteString(value) {
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+/**
+ * Reject at build time the TargetGroupBindings the controller's validating
+ * webhook (v3.5.0) would reject on static grounds alone, so the mistake shows
+ * up in the composition rather than as a failed apply. Checks that need the
+ * AWS target group (protocol, IP address type and VPC matching it) stay with
+ * the webhook. A reference or CEL value is only known per instance, so a check
+ * that involves one is skipped; the webhook still checks the resolved value.
+ */
+function validateTargetGroupBinding(config) {
+    const spec = config.spec;
+    // A whole spec given as a graph value: nothing is known until an instance.
+    if (isGraphValue(spec))
+        return;
+    const fields = (spec ?? {});
+    const name = typeof config.name === 'string' ? config.name : '<reference>';
+    const fail = (message, field, suggestions) => {
+        throw new ValidationError(`TargetGroupBinding '${name}': ${message}`, 'TargetGroupBinding', name, field, suggestions);
+    };
+    // The CRD accepts a binding with neither, but the webhook refuses it, and
+    // it treats an empty string as unset.
+    const isSet = (value) => isGraphValue(value) || concreteString(value) !== undefined;
+    if (!isSet(fields.targetGroupARN) && !isSet(fields.targetGroupName)) {
+        fail('names no target group: set spec.targetGroupARN or spec.targetGroupName (a non-empty ' +
+            'string). The AWS Load Balancer Controller rejects a binding without one.', 'spec.targetGroupARN', [
+            'Set spec.targetGroupARN to the ARN of an existing target group.',
+            'Or set spec.targetGroupName; the controller looks the ARN up by name.',
+        ]);
+    }
+    const targetType = concreteString(fields.targetType);
+    if (targetType === 'ip' &&
+        fields.nodeSelector !== undefined &&
+        !isGraphValue(fields.nodeSelector)) {
+        fail('spec.nodeSelector only applies to instance targets, and targetType is ip.', 'spec.nodeSelector', ["Remove spec.nodeSelector, or use targetType 'instance'."]);
+    }
+    if (targetType === 'instance' && concreteString(fields.iamRoleArnToAssume) !== undefined) {
+        fail('a cross-account binding (spec.iamRoleArnToAssume) needs ip targets, and targetType is instance.', 'spec.targetType', ["Use targetType 'ip' with spec.iamRoleArnToAssume."]);
+    }
+    const protocol = concreteString(fields.targetGroupProtocol);
+    if (targetType === 'instance' && (protocol === 'QUIC' || protocol === 'TCP_QUIC')) {
+        fail(`${protocol} target groups do not support instance targets.`, 'spec.targetType', [
+            "Use targetType 'ip' for a QUIC or TCP_QUIC target group.",
+        ]);
+    }
+    const vpcID = concreteString(fields.vpcID);
+    if (vpcID !== undefined && !VPC_ID_PATTERN.test(vpcID)) {
+        fail(`spec.vpcID '${vpcID}' is not a VPC ID: it must be 'vpc-' followed by 8, 17 or 32 ` +
+            'lowercase hex characters.', 'spec.vpcID', ['Leave spec.vpcID unset to let the controller read it from the target group.']);
+    }
+}
+/**
+ * Register a Service's endpoints with an existing ELBv2 target group.
+ *
+ * @example
+ * ```typescript
+ * targetGroupBinding({
+ *   name: 'web',
+ *   namespace: 'apps',
+ *   spec: {
+ *     serviceRef: { name: 'web', port: 80 },
+ *     targetGroupARN: 'arn:aws:elasticloadbalancing:us-east-1:111122223333:targetgroup/web/0123456789abcdef',
+ *     targetType: 'ip',
+ *   },
+ *   id: 'webTargets',
+ * });
+ * ```
+ *
+ * @throws {ValidationError} when neither `targetGroupARN` nor `targetGroupName`
+ * is set (or both are empty strings), or when concrete values break a static
+ * rule of the controller's webhook: `nodeSelector` with `ip` targets,
+ * `iamRoleArnToAssume` or a QUIC / TCP_QUIC protocol with `instance` targets, or
+ * a malformed `vpcID`.
+ */
+export function targetGroupBinding(config) {
+    validateTargetGroupBinding(config);
+    return createResource({
+        ...(config.id ? { id: config.id } : {}),
+        apiVersion: AWS_LBC_ELBV2_API_VERSION,
+        kind: 'TargetGroupBinding',
+        metadata: {
+            name: config.name,
+            ...(config.namespace ? { namespace: config.namespace } : {}),
+        },
+        spec: config.spec,
+    }).withReadinessEvaluator(targetGroupBindingReadinessEvaluator);
+}
+/**
+ * Create a cluster-scoped `IngressClassParams`, the settings an `IngressClass`
+ * applies to every Ingress that uses it.
+ *
+ * @example
+ * ```typescript
+ * ingressClassParams({
+ *   name: 'internal',
+ *   spec: { scheme: 'internal', group: { name: 'internal' }, targetType: 'ip' },
+ * });
+ * ```
+ */
+export function ingressClassParams(config) {
+    return createResource({
+        ...(config.id ? { id: config.id } : {}),
+        apiVersion: AWS_LBC_ELBV2_API_VERSION,
+        kind: 'IngressClassParams',
+        metadata: { name: config.name },
+        spec: (config.spec ?? {}),
+    }, { scope: 'cluster' }).withReadinessEvaluator(createAlwaysReadyEvaluator('IngressClassParams'));
+}
+//# sourceMappingURL=elbv2.js.map

package/dist/factories/aws-load-balancer-controller/resources/elbv2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elbv2.js","sourceRoot":"","sources":["../../../../src/factories/aws-load-balancer-controller/resources/elbv2.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAO9E,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAS5D;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAgC,CAC/E,IAAa,EACG,EAAE;IAClB,MAAM,QAAQ,GAAG,IAGT,CAAC;IACT,MAAM,QAAQ,GAAG,QAAQ,EAAE,MAAM,EAAE,kBAAkB,CAAC;IACtD,MAAM,UAAU,GAAG,QAAQ,EAAE,QAAQ,EAAE,UAAU,IAAI,CAAC,CAAC;IACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,UAAU,EAAE,CAAC;QACpD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,2EAA2E;SACrF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IAChF,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI;YACtC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,gCAAgC,OAAO,CAAC,IAAI,WAAW;SACpF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;AACnE,CAAC,CAAC;AAEF,+EAA+E;AAC/E,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,eAAe,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,mEAAmE;AACnE,MAAM,cAAc,GAAG,yDAAyD,CAAC;AAEjF,oFAAoF;AACpF,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,0BAA0B,CAAC,MAA4C;IAC9E,MAAM,IAAI,GAAY,MAAM,CAAC,IAAI,CAAC;IAClC,2EAA2E;IAC3E,IAAI,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO;IAC/B,MAAM,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;IAC3E,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,KAAa,EAAE,WAAqB,EAAS,EAAE;QAC5E,MAAM,IAAI,eAAe,CACvB,uBAAuB,IAAI,MAAM,OAAO,EAAE,EAC1C,oBAAoB,EACpB,IAAI,EACJ,KAAK,EACL,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC;IAEF,0EAA0E;IAC1E,sCAAsC;IACtC,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;IAC7F,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QACpE,IAAI,CACF,sFAAsF;YACpF,0EAA0E,EAC5E,qBAAqB,EACrB;YACE,iEAAiE;YACjE,uEAAuE;SACxE,CACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrD,IACE,UAAU,KAAK,IAAI;QACnB,MAAM,CAAC,YAAY,KAAK,SAAS;QACjC,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,EAClC,CAAC;QACD,IAAI,CACF,2EAA2E,EAC3E,mBAAmB,EACnB,CAAC,yDAAyD,CAAC,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,UAAU,IAAI,cAAc,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,SAAS,EAAE,CAAC;QACzF,IAAI,CACF,iGAAiG,EACjG,iBAAiB,EACjB,CAAC,mDAAmD,CAAC,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC5D,IAAI,UAAU,KAAK,UAAU,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,UAAU,CAAC,EAAE,CAAC;QAClF,IAAI,CAAC,GAAG,QAAQ,iDAAiD,EAAE,iBAAiB,EAAE;YACpF,0DAA0D;SAC3D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,IAAI,CACF,eAAe,KAAK,+DAA+D;YACjF,2BAA2B,EAC7B,YAAY,EACZ,CAAC,6EAA6E,CAAC,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA4C;IAE5C,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,cAAc,CAAmD;QACtE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,UAAU,EAAE,yBAAyB;QACrC,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D;QACD,IAAI,EAAE,MAAM,CAAC,IAA8B;KAC5C,CAAC,CAAC,sBAAsB,CAAC,oCAAoC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA4C;IAE5C,OAAO,cAAc,CACnB;QACE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,UAAU,EAAE,yBAAyB;QACrC,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;QAC/B,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAA2B;KACpD,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAC7E,CAAC"}

package/dist/factories/aws-load-balancer-controller/resources/helm.d.ts

@@ -0,0 +1,36 @@
+import type { Composable, Enhanced, ReadinessEvaluator } from '../../../core/types/index.js';
+import { type HelmRepositorySpec, type HelmRepositoryStatus } from '../../helm/helm-repository.js';
+import type { HelmReleaseSpec, HelmReleaseStatus } from '../../helm/types.js';
+import type { AwsLoadBalancerControllerHelmReleaseConfig, AwsLoadBalancerControllerHelmRepositoryConfig } from '../types.js';
+/** Readiness of the controller `HelmRelease`, from its Flux conditions. */
+export declare const awsLoadBalancerControllerHelmReleaseReadinessEvaluator: ReadinessEvaluator<unknown>;
+/**
+ * Create the Flux `HelmRepository` for the eks-charts repository.
+ *
+ * @example
+ * ```typescript
+ * awsLoadBalancerControllerHelmRepository({ id: 'eksCharts' });
+ * ```
+ */
+export declare function awsLoadBalancerControllerHelmRepository(config?: Composable<AwsLoadBalancerControllerHelmRepositoryConfig>): Enhanced<HelmRepositorySpec, HelmRepositoryStatus>;
+/**
+ * Create the Flux `HelmRelease` installing the AWS Load Balancer Controller.
+ *
+ * The chart ships its CRDs in `crds/`, so `install.crds` and `upgrade.crds`
+ * default to `CreateReplace`: Flux skips `crds/` on upgrade otherwise. Every
+ * lifecycle field can be overridden; see "Install, upgrade and CRD policy" in
+ * the Flux docs.
+ *
+ * @example
+ * ```typescript
+ * awsLoadBalancerControllerHelmRelease({
+ *   name: 'aws-load-balancer-controller',
+ *   values: mapAwsLoadBalancerControllerConfigToHelmValues({
+ *     name: 'aws-load-balancer-controller',
+ *     clusterName: 'prod',
+ *   }),
+ * });
+ * ```
+ */
+export declare function awsLoadBalancerControllerHelmRelease(config: Composable<AwsLoadBalancerControllerHelmReleaseConfig>): Enhanced<HelmReleaseSpec, HelmReleaseStatus>;
+//# sourceMappingURL=helm.d.ts.map

package/dist/factories/aws-load-balancer-controller/resources/helm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../../../src/factories/aws-load-balancer-controller/resources/helm.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAC7F,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAU9E,OAAO,KAAK,EACV,0CAA0C,EAC1C,6CAA6C,EAC9C,MAAM,aAAa,CAAC;AAMrB,2EAA2E;AAC3E,eAAO,MAAM,sDAAsD,EAAE,kBAAkB,CAAC,OAAO,CAC5B,CAAC;AAEpE;;;;;;;GAOG;AACH,wBAAgB,uCAAuC,CACrD,MAAM,GAAE,UAAU,CAAC,6CAA6C,CAAM,GACrE,QAAQ,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAcpD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,UAAU,CAAC,0CAA0C,CAAC,GAC7D,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAyC9C"}

package/dist/factories/aws-load-balancer-controller/resources/helm.js

@@ -0,0 +1,96 @@
+// AWS Load Balancer Controller Helm resources: the eks-charts repository and
+// the controller release.
+import { DEFAULT_FLUX_NAMESPACE } from '../../../core/config/defaults.js';
+import { createHelmRepositoryReadinessEvaluator, } from '../../helm/helm-repository.js';
+import { helmReleaseLifecycle } from '../../helm/lifecycle.js';
+import { createLabeledHelmReleaseEvaluator } from '../../helm/readiness-evaluators.js';
+import { createResource } from '../../shared.js';
+import { AWS_LBC_CHART_NAME, DEFAULT_AWS_LBC_CHART_VERSION, DEFAULT_AWS_LBC_CRDS_POLICY, DEFAULT_AWS_LBC_NAMESPACE, DEFAULT_AWS_LBC_REPOSITORY_NAME, DEFAULT_AWS_LBC_REPOSITORY_URL, } from '../constants.js';
+const repositoryReadinessEvaluator = createHelmRepositoryReadinessEvaluator('AWS Load Balancer Controller');
+/** Readiness of the controller `HelmRelease`, from its Flux conditions. */
+export const awsLoadBalancerControllerHelmReleaseReadinessEvaluator = createLabeledHelmReleaseEvaluator('AWS Load Balancer Controller');
+/**
+ * Create the Flux `HelmRepository` for the eks-charts repository.
+ *
+ * @example
+ * ```typescript
+ * awsLoadBalancerControllerHelmRepository({ id: 'eksCharts' });
+ * ```
+ */
+export function awsLoadBalancerControllerHelmRepository(config = {}) {
+    return createResource({
+        ...(config.id ? { id: config.id } : {}),
+        apiVersion: 'source.toolkit.fluxcd.io/v1',
+        kind: 'HelmRepository',
+        metadata: {
+            name: config.name ?? DEFAULT_AWS_LBC_REPOSITORY_NAME,
+            namespace: config.namespace ?? DEFAULT_FLUX_NAMESPACE,
+        },
+        spec: {
+            url: config.url ?? DEFAULT_AWS_LBC_REPOSITORY_URL,
+            interval: config.interval ?? '1h',
+        },
+    }).withReadinessEvaluator(repositoryReadinessEvaluator);
+}
+/**
+ * Create the Flux `HelmRelease` installing the AWS Load Balancer Controller.
+ *
+ * The chart ships its CRDs in `crds/`, so `install.crds` and `upgrade.crds`
+ * default to `CreateReplace`: Flux skips `crds/` on upgrade otherwise. Every
+ * lifecycle field can be overridden; see "Install, upgrade and CRD policy" in
+ * the Flux docs.
+ *
+ * @example
+ * ```typescript
+ * awsLoadBalancerControllerHelmRelease({
+ *   name: 'aws-load-balancer-controller',
+ *   values: mapAwsLoadBalancerControllerConfigToHelmValues({
+ *     name: 'aws-load-balancer-controller',
+ *     clusterName: 'prod',
+ *   }),
+ * });
+ * ```
+ */
+export function awsLoadBalancerControllerHelmRelease(config) {
+    const namespace = config.namespace ?? DEFAULT_FLUX_NAMESPACE;
+    return createResource({
+        ...(config.id ? { id: config.id } : {}),
+        apiVersion: 'helm.toolkit.fluxcd.io/v2',
+        kind: 'HelmRelease',
+        metadata: { name: config.name, namespace },
+        spec: {
+            interval: config.interval ?? '10m',
+            chart: {
+                spec: {
+                    chart: AWS_LBC_CHART_NAME,
+                    version: config.version ?? DEFAULT_AWS_LBC_CHART_VERSION,
+                    sourceRef: {
+                        kind: 'HelmRepository',
+                        name: config.repositoryName ?? DEFAULT_AWS_LBC_REPOSITORY_NAME,
+                        namespace: config.repositoryNamespace ?? namespace,
+                    },
+                },
+            },
+            targetNamespace: config.targetNamespace ?? DEFAULT_AWS_LBC_NAMESPACE,
+            // Without it Flux names the release `<targetNamespace>-<name>`, which
+            // moves whenever the install namespace does and renames the chart's
+            // objects with it.
+            releaseName: config.name,
+            ...helmReleaseLifecycle(config, {
+                install: {
+                    timeout: '10m',
+                    remediation: { retries: 3 },
+                    createNamespace: true,
+                    crds: DEFAULT_AWS_LBC_CRDS_POLICY,
+                },
+                upgrade: {
+                    timeout: '10m',
+                    remediation: { retries: 3, remediateLastFailure: true, strategy: 'rollback' },
+                    crds: DEFAULT_AWS_LBC_CRDS_POLICY,
+                },
+            }),
+            ...(config.values ? { values: config.values } : {}),
+        },
+    }).withReadinessEvaluator(awsLoadBalancerControllerHelmReleaseReadinessEvaluator);
+}
+//# sourceMappingURL=helm.js.map

package/dist/factories/aws-load-balancer-controller/resources/helm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.js","sourceRoot":"","sources":["../../../../src/factories/aws-load-balancer-controller/resources/helm.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,0BAA0B;AAE1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,OAAO,EACL,sCAAsC,GAGvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AAEvF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,EACzB,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,iBAAiB,CAAC;AAMzB,MAAM,4BAA4B,GAAG,sCAAsC,CACzE,8BAA8B,CAC/B,CAAC;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sDAAsD,GACjE,iCAAiC,CAAC,8BAA8B,CAAC,CAAC;AAEpE;;;;;;;GAOG;AACH,MAAM,UAAU,uCAAuC,CACrD,SAAoE,EAAE;IAEtE,OAAO,cAAc,CAA2C;QAC9D,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,UAAU,EAAE,6BAA6B;QACzC,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,+BAA+B;YACpD,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,sBAAsB;SACtD;QACD,IAAI,EAAE;YACJ,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,8BAA8B;YACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;SAClC;KACF,CAAC,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,oCAAoC,CAClD,MAA8D;IAE9D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,sBAAsB,CAAC;IAC7D,OAAO,cAAc,CAAqC;QACxD,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,UAAU,EAAE,2BAA2B;QACvC,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE;QAC1C,IAAI,EAAE;YACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;YAClC,KAAK,EAAE;gBACL,IAAI,EAAE;oBACJ,KAAK,EAAE,kBAAkB;oBACzB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,6BAA6B;oBACxD,SAAS,EAAE;wBACT,IAAI,EAAE,gBAAyB;wBAC/B,IAAI,EAAE,MAAM,CAAC,cAAc,IAAI,+BAA+B;wBAC9D,SAAS,EAAE,MAAM,CAAC,mBAAmB,IAAI,SAAS;qBACnD;iBACF;aACF;YACD,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,yBAAyB;YACpE,sEAAsE;YACtE,oEAAoE;YACpE,mBAAmB;YACnB,WAAW,EAAE,MAAM,CAAC,IAAI;YACxB,GAAG,oBAAoB,CAAC,MAAM,EAAE;gBAC9B,OAAO,EAAE;oBACP,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;oBAC3B,eAAe,EAAE,IAAI;oBACrB,IAAI,EAAE,2BAA2B;iBAClC;gBACD,OAAO,EAAE;oBACP,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE;oBAC7E,IAAI,EAAE,2BAA2B;iBAClC;aACF,CAAC;YACF,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD;KACF,CAAC,CAAC,sBAAsB,CAAC,sDAAsD,CAAC,CAAC;AACpF,CAAC"}

package/dist/factories/aws-load-balancer-controller/resources/index.d.ts

@@ -0,0 +1,3 @@
+export { ingressClassParams, targetGroupBinding, targetGroupBindingReadinessEvaluator, } from './elbv2.js';
+export { awsLoadBalancerControllerHelmRelease, awsLoadBalancerControllerHelmReleaseReadinessEvaluator, awsLoadBalancerControllerHelmRepository, } from './helm.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/aws-load-balancer-controller/resources/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/aws-load-balancer-controller/resources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,oCAAoC,GACrC,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oCAAoC,EACpC,sDAAsD,EACtD,uCAAuC,GACxC,MAAM,WAAW,CAAC"}

package/dist/factories/aws-load-balancer-controller/resources/index.js

@@ -0,0 +1,3 @@
+export { ingressClassParams, targetGroupBinding, targetGroupBindingReadinessEvaluator, } from './elbv2.js';
+export { awsLoadBalancerControllerHelmRelease, awsLoadBalancerControllerHelmReleaseReadinessEvaluator, awsLoadBalancerControllerHelmRepository, } from './helm.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/aws-load-balancer-controller/resources/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/aws-load-balancer-controller/resources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,oCAAoC,GACrC,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oCAAoC,EACpC,sDAAsD,EACtD,uCAAuC,GACxC,MAAM,WAAW,CAAC"}