typekro 0.44.1 → 0.45.0

package/dist/factories/aws-load-balancer-controller/types.d.ts

@@ -0,0 +1,267 @@
+import type { V1LabelSelector, V1ResourceRequirements, V1Toleration, V1TopologySpreadConstraint } from '@kubernetes/client-node';
+import { type Type } from 'arktype';
+import type { HelmReleaseLifecycleOptions } from '../helm/types.js';
+/** Runtime spec of the AWS Load Balancer Controller bootstrap. */
+export interface AwsLoadBalancerControllerBootstrapConfig {
+    /** Helm release name. The service account name does not follow it. */
+    name: string;
+    /** Install namespace. @default 'kube-system' */
+    namespace?: string;
+    /** Chart version. @default DEFAULT_AWS_LBC_CHART_VERSION */
+    chartVersion?: string;
+    /** EKS cluster name. Required by the chart. */
+    clusterName: string;
+    /** AWS region. Discovered from instance metadata when unset. */
+    region?: string;
+    /** VPC ID. Discovered from instance metadata when unset. */
+    vpcId?: string;
+    /** Controller replicas. @default 2 (chart default) */
+    replicaCount?: number;
+    /** Override the controller image, e.g. a regional or private ECR mirror. */
+    image?: {
+        repository?: string;
+        tag?: string;
+        pullPolicy?: 'Always' | 'IfNotPresent' | 'Never';
+    };
+    /**
+     * The controller's service account, named `aws-load-balancer-controller`
+     * unless `name` is set. TypeKro creates no IAM: put the IRSA role in
+     * `annotations` (`eks.amazonaws.com/role-arn`), or associate an EKS Pod
+     * Identity with that name in this namespace.
+     */
+    serviceAccount?: {
+        create?: boolean;
+        name?: string;
+        annotations?: Record<string, string>;
+    };
+    /** PodDisruptionBudget spec. Rendered only above 1 replica. @default { maxUnavailable: 1 } */
+    podDisruptionBudget?: {
+        minAvailable?: number;
+        maxUnavailable?: number;
+    };
+    topologySpreadConstraints?: V1TopologySpreadConstraint[];
+    /**
+     * Make the controller the default for every new `type: LoadBalancer`
+     * Service. @default false, so Services owned by another controller are
+     * never taken over.
+     */
+    enableServiceMutatorWebhook?: boolean;
+    /** Create the `alb` IngressClass. @default true (chart default) */
+    createIngressClassResource?: boolean;
+    /** IngressClass name the controller serves. @default 'alb' (chart default) */
+    ingressClass?: string;
+    /**
+     * Default target type for Ingresses and Services. `ip` needs pod IPs routable
+     * from the VPC (Amazon VPC CNI, Cilium ENI mode); use `instance` with an
+     * overlay CNI such as Cilium in VXLAN/Geneve mode. @default 'ip'
+     */
+    defaultTargetType?: 'ip' | 'instance';
+    resources?: V1ResourceRequirements;
+    nodeSelector?: Record<string, string>;
+    tolerations?: V1Toleration[];
+    logLevel?: 'info' | 'debug';
+}
+/** Status of the AWS Load Balancer Controller bootstrap. */
+export interface AwsLoadBalancerControllerBootstrapStatus {
+    ready: boolean;
+    failed: boolean;
+    phase: 'Ready' | 'Installing' | 'Failed';
+    /** Chart version Flux installed, read from the release history. */
+    version: string;
+}
+/** Build-time options of {@link makeAwsLoadBalancerControllerBootstrap}. Must be concrete. */
+export interface AwsLoadBalancerControllerBootstrapOptions extends HelmReleaseLifecycleOptions {
+    /** Composition name. @default 'aws-load-balancer-controller-bootstrap' */
+    name?: string;
+    /** Custom resource kind. @default 'AwsLoadBalancerControllerBootstrap' */
+    kind?: string;
+    /**
+     * Raw chart values for settings the spec does not map, applied at build
+     * time. Setting a value the spec maps (`image`, `serviceAccount.annotations`,
+     * `resources`, ...) throws: set it through the spec, per instance. A
+     * `podDisruptionBudget` here replaces the default PDB (use it for a
+     * percentage); an instance's `spec.podDisruptionBudget` replaces it whole.
+     */
+    values?: Record<string, unknown>;
+}
+/** ArkType schema for {@link AwsLoadBalancerControllerBootstrapConfig}. */
+export declare const AwsLoadBalancerControllerBootstrapConfigSchema: Type<AwsLoadBalancerControllerBootstrapConfig>;
+/** ArkType schema for {@link AwsLoadBalancerControllerBootstrapStatus}. */
+export declare const AwsLoadBalancerControllerBootstrapStatusSchema: Type<AwsLoadBalancerControllerBootstrapStatus>;
+/** Config of the eks-charts `HelmRepository`. */
+export interface AwsLoadBalancerControllerHelmRepositoryConfig {
+    /** @default DEFAULT_AWS_LBC_REPOSITORY_NAME */
+    name?: string;
+    /** @default 'flux-system' */
+    namespace?: string;
+    /** @default DEFAULT_AWS_LBC_REPOSITORY_URL */
+    url?: string;
+    /** @default '1h' */
+    interval?: string;
+    id?: string;
+}
+/** Config of the controller `HelmRelease`. */
+export interface AwsLoadBalancerControllerHelmReleaseConfig extends HelmReleaseLifecycleOptions {
+    /** Release name. */
+    name: string;
+    /** Namespace of the HelmRelease object. @default 'flux-system' */
+    namespace?: string;
+    /** Namespace the controller is installed into. @default 'kube-system' */
+    targetNamespace?: string;
+    /** @default DEFAULT_AWS_LBC_CHART_VERSION */
+    version?: string;
+    /** @default DEFAULT_AWS_LBC_REPOSITORY_NAME */
+    repositoryName?: string;
+    /** @default the HelmRelease namespace */
+    repositoryNamespace?: string;
+    /** @default '10m' */
+    interval?: string;
+    /** Chart values. Build them with `mapAwsLoadBalancerControllerConfigToHelmValues`. */
+    values?: Record<string, unknown>;
+    id?: string;
+}
+/** Spec of the shared eks-charts `HelmRepository` singleton. */
+export interface AwsLoadBalancerControllerHelmRepositorySingletonSpec {
+    name: string;
+    namespace: string;
+    url: string;
+}
+export declare const AwsLoadBalancerControllerHelmRepositorySingletonSpecSchema: Type<AwsLoadBalancerControllerHelmRepositorySingletonSpec>;
+export declare const AwsLoadBalancerControllerHelmRepositorySingletonStatusSchema: Type<{
+    ready: boolean;
+}>;
+/** A port on a Service or pod: a number or a port name. */
+export type AwsLbcPort = number | string;
+/**
+ * The target group a `TargetGroupBinding` binds to: its ARN, its name, or both.
+ * The CRD makes neither field required, but the controller's webhook rejects a
+ * binding with neither, so the type requires at least one. With both set, the
+ * controller uses the ARN and does not look the name up.
+ */
+export type TargetGroupBindingTargetGroup = {
+    /** ARN of an existing target group. Takes precedence over `targetGroupName`. */
+    targetGroupARN: string;
+    /** Name of an existing target group. Ignored while `targetGroupARN` is set. */
+    targetGroupName?: string;
+} | {
+    /** ARN of an existing target group. Takes precedence over `targetGroupName`. */
+    targetGroupARN?: string;
+    /** Name of an existing target group, which the controller resolves to its ARN. */
+    targetGroupName: string;
+};
+/** Spec of an `elbv2.k8s.aws/v1beta1` `TargetGroupBinding`. */
+export type TargetGroupBindingSpec = TargetGroupBindingSpecFields & TargetGroupBindingTargetGroup;
+/** The `TargetGroupBinding` spec fields other than the target group itself. */
+export interface TargetGroupBindingSpecFields {
+    /** The Service (and its port) whose endpoints become targets. */
+    serviceRef: {
+        name: string;
+        port: AwsLbcPort;
+    };
+    targetType?: 'instance' | 'ip';
+    /** Protocol of a target group the controller looks up by name. */
+    targetGroupProtocol?: 'HTTP' | 'HTTPS' | 'TCP' | 'TLS' | 'UDP' | 'TCP_UDP' | 'QUIC' | 'TCP_QUIC';
+    ipAddressType?: 'ipv4' | 'ipv6';
+    /** Security group rules the controller manages so the load balancer reaches the targets. */
+    networking?: {
+        ingress?: {
+            from: ({
+                ipBlock: {
+                    cidr: string;
+                };
+            } | {
+                securityGroup: {
+                    groupID: string;
+                };
+            })[];
+            /** Required by the CRD. An empty port entry opens every TCP port. */
+            ports: {
+                port?: AwsLbcPort;
+                protocol?: 'TCP' | 'UDP';
+            }[];
+        }[];
+    };
+    /** Restrict `instance` targets to matching nodes. */
+    nodeSelector?: V1LabelSelector;
+    vpcID?: string;
+    multiClusterTargetGroup?: boolean;
+    /** Assume this role to reach a target group in another account. */
+    iamRoleArnToAssume?: string;
+    assumeRoleExternalId?: string;
+}
+/** Status of a `TargetGroupBinding`. */
+export interface TargetGroupBindingStatus {
+    observedGeneration?: number;
+    conditions?: {
+        type: string;
+        status: string;
+        reason?: string;
+        message?: string;
+    }[];
+}
+/** Config of {@link targetGroupBinding}. */
+export interface TargetGroupBindingConfig {
+    name: string;
+    namespace?: string;
+    spec: TargetGroupBindingSpec;
+    id?: string;
+}
+/** Spec of a cluster-scoped `elbv2.k8s.aws/v1beta1` `IngressClassParams`. */
+export interface IngressClassParamsSpec {
+    /** Ingresses from these namespaces only may use the class. */
+    namespaceSelector?: V1LabelSelector;
+    /** Merge every Ingress of the class into one ALB. */
+    group?: {
+        name: string;
+    };
+    scheme?: 'internal' | 'internet-facing';
+    ipAddressType?: 'ipv4' | 'dualstack' | 'dualstack-without-public-ipv4';
+    targetType?: 'instance' | 'ip';
+    /** Subnets by ID or by tag. Otherwise the controller discovers them by tag. */
+    subnets?: {
+        ids?: string[];
+        tags?: Record<string, string[]>;
+    };
+    tags?: {
+        key: string;
+        value: string;
+    }[];
+    loadBalancerAttributes?: {
+        key: string;
+        value: string;
+    }[];
+    loadBalancerName?: string;
+    sslPolicy?: string;
+    certificateArn?: string[];
+    inboundCIDRs?: string[];
+    /** Managed prefix lists allowed to reach the load balancer. */
+    prefixListsIDs?: string[];
+    /** Redirect HTTP to this HTTPS port on every Ingress of the class. */
+    sslRedirectPort?: string;
+    wafv2AclArn?: string;
+    wafv2AclName?: string;
+    /** Per-listener attributes, keyed by port and protocol. */
+    listeners?: {
+        port?: number;
+        protocol?: string;
+        listenerAttributes?: {
+            key: string;
+            value: string;
+        }[];
+    }[];
+    /** Pre-provisioned ALB capacity. */
+    minimumLoadBalancerCapacity?: {
+        capacityUnits: number;
+    };
+    /** Take the load balancer's IPv4 addresses from an IPAM pool. */
+    ipamConfiguration?: {
+        ipv4IPAMPoolId?: string;
+    };
+}
+/** Config of {@link ingressClassParams}. */
+export interface IngressClassParamsConfig {
+    name: string;
+    spec?: IngressClassParamsSpec;
+    id?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/factories/aws-load-balancer-controller/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/factories/aws-load-balancer-controller/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,YAAY,EACZ,0BAA0B,EAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,EAAQ,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAMpE,kEAAkE;AAClE,MAAM,WAAW,wCAAwC;IACvD,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,QAAQ,GAAG,cAAc,GAAG,OAAO,CAAA;KAAE,CAAC;IAChG;;;;;OAKG;IACH,cAAc,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IAC3F,8FAA8F;IAC9F,mBAAmB,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,yBAAyB,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACzD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,mEAAmE;IACnE,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,IAAI,GAAG,UAAU,CAAC;IACtC,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC7B;AAED,4DAA4D;AAC5D,MAAM,WAAW,wCAAwC;IACvD,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,GAAG,YAAY,GAAG,QAAQ,CAAC;IACzC,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,8FAA8F;AAC9F,MAAM,WAAW,yCAA0C,SAAQ,2BAA2B;IAC5F,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAiBD,2EAA2E;AAC3E,eAAO,MAAM,8CAA8C,EAAE,IAAI,CAAC,wCAAwC,CAmDtG,CAAC;AAEL,2EAA2E;AAC3E,eAAO,MAAM,8CAA8C,EAAE,IAAI,CAAC,wCAAwC,CAMtG,CAAC;AAML,iDAAiD;AACjD,MAAM,WAAW,6CAA6C;IAC5D,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,8CAA8C;AAC9C,MAAM,WAAW,0CAA2C,SAAQ,2BAA2B;IAC7F,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,gEAAgE;AAChE,MAAM,WAAW,oDAAoD;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,eAAO,MAAM,0DAA0D,EAAE,IAAI,CAAC,oDAAoD,CACxD,CAAC;AAE3E,eAAO,MAAM,4DAA4D,EAAE,IAAI,CAAC;IAC9E,KAAK,EAAE,OAAO,CAAC;CAChB,CAA8B,CAAC;AAMhC,2DAA2D;AAC3D,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,MAAM,6BAA6B,GACrC;IACE,gFAAgF;IAChF,cAAc,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEN,+DAA+D;AAC/D,MAAM,MAAM,sBAAsB,GAAG,4BAA4B,GAAG,6BAA6B,CAAC;AAElG,+EAA+E;AAC/E,MAAM,WAAW,4BAA4B;IAC3C,iEAAiE;IACjE,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC;IAC/C,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;IACjG,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,4FAA4F;IAC5F,UAAU,CAAC,EAAE;QACX,OAAO,CAAC,EAAE;YACR,IAAI,EAAE,CAAC;gBAAE,OAAO,EAAE;oBAAE,IAAI,EAAE,MAAM,CAAA;iBAAE,CAAA;aAAE,GAAG;gBAAE,aAAa,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAA;aAAE,CAAC,EAAE,CAAC;YACjF,qEAAqE;YACrE,KAAK,EAAE;gBAAE,IAAI,CAAC,EAAE,UAAU,CAAC;gBAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,KAAK,CAAA;aAAE,EAAE,CAAC;SAC1D,EAAE,CAAC;KACL,CAAC;IACF,qDAAqD;IACrD,YAAY,CAAC,EAAE,eAAe,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,mEAAmE;IACnE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,wCAAwC;AACxC,MAAM,WAAW,wBAAwB;IACvC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACpF;AAED,4CAA4C;AAC5C,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,sBAAsB,CAAC;IAC7B,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,6EAA6E;AAC7E,MAAM,WAAW,sBAAsB;IACrC,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,eAAe,CAAC;IACpC,qDAAqD;IACrD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACzB,MAAM,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,+BAA+B,CAAC;IACvE,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,+EAA+E;IAC/E,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;KAAE,CAAC;IAC9D,IAAI,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxC,sBAAsB,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,kBAAkB,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KACvD,EAAE,CAAC;IACJ,oCAAoC;IACpC,2BAA2B,CAAC,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,iEAAiE;IACjE,iBAAiB,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACjD;AAED,4CAA4C;AAC5C,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;CACb"}

package/dist/factories/aws-load-balancer-controller/types.js

@@ -0,0 +1,81 @@
+// AWS Load Balancer Controller types.
+//
+// Config contracts are interfaces and each ArkType schema is annotated with
+// its interface, so the published declarations stay small; the schemas are
+// what validates direct-mode input and generates the KRO SimpleSchema.
+import { type } from 'arktype';
+const imageSchema = {
+    'repository?': 'string > 0',
+    'tag?': 'string > 0',
+    'pullPolicy?': '"Always" | "IfNotPresent" | "Never"',
+};
+const labelSelectorSchema = {
+    'matchLabels?': 'Record<string, string>',
+    'matchExpressions?': type({
+        key: 'string',
+        operator: 'string',
+        'values?': 'string[]',
+    }).array(),
+};
+/** ArkType schema for {@link AwsLoadBalancerControllerBootstrapConfig}. */
+export const AwsLoadBalancerControllerBootstrapConfigSchema = type({
+    name: 'string > 0',
+    'namespace?': 'string > 0',
+    'chartVersion?': 'string > 0',
+    clusterName: 'string > 0',
+    'region?': 'string > 0',
+    'vpcId?': 'string > 0',
+    'replicaCount?': 'number.integer >= 1',
+    'image?': imageSchema,
+    'serviceAccount?': {
+        'create?': 'boolean',
+        'name?': 'string > 0',
+        'annotations?': 'Record<string, string>',
+    },
+    // Integers only: a `number | string` union collapses to a schemaless
+    // `object` in KRO's SimpleSchema, which rejects a plain integer, and the
+    // chart passes these straight into the PDB, where a string must be a
+    // percentage. For a percentage, set `podDisruptionBudget` in build-time
+    // `values`; it becomes the default an instance's PDB replaces.
+    'podDisruptionBudget?': {
+        'minAvailable?': 'number.integer >= 0',
+        'maxUnavailable?': 'number.integer >= 0',
+    },
+    'topologySpreadConstraints?': type({
+        maxSkew: 'number.integer > 0',
+        topologyKey: 'string',
+        whenUnsatisfiable: '"DoNotSchedule" | "ScheduleAnyway"',
+        'labelSelector?': labelSelectorSchema,
+        'minDomains?': 'number.integer > 0',
+        'matchLabelKeys?': 'string[]',
+        'nodeAffinityPolicy?': '"Honor" | "Ignore"',
+        'nodeTaintsPolicy?': '"Honor" | "Ignore"',
+    }).array(),
+    'enableServiceMutatorWebhook?': 'boolean',
+    'createIngressClassResource?': 'boolean',
+    'ingressClass?': 'string > 0',
+    'defaultTargetType?': '"ip" | "instance"',
+    'resources?': {
+        'limits?': 'Record<string, string>',
+        'requests?': 'Record<string, string>',
+    },
+    'nodeSelector?': 'Record<string, string>',
+    'tolerations?': type({
+        'key?': 'string',
+        'operator?': '"Exists" | "Equal"',
+        'value?': 'string',
+        'effect?': '"NoSchedule" | "PreferNoSchedule" | "NoExecute"',
+        'tolerationSeconds?': 'number.integer',
+    }).array(),
+    'logLevel?': '"info" | "debug"',
+});
+/** ArkType schema for {@link AwsLoadBalancerControllerBootstrapStatus}. */
+export const AwsLoadBalancerControllerBootstrapStatusSchema = type({
+    ready: 'boolean',
+    failed: 'boolean',
+    phase: '"Ready" | "Installing" | "Failed"',
+    version: 'string',
+});
+export const AwsLoadBalancerControllerHelmRepositorySingletonSpecSchema = type({ name: 'string > 0', namespace: 'string > 0', url: 'string > 0' });
+export const AwsLoadBalancerControllerHelmRepositorySingletonStatusSchema = type({ ready: 'boolean' });
+//# sourceMappingURL=types.js.map

package/dist/factories/aws-load-balancer-controller/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/factories/aws-load-balancer-controller/types.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,uEAAuE;AAQvE,OAAO,EAAa,IAAI,EAAE,MAAM,SAAS,CAAC;AAkF1C,MAAM,WAAW,GAAG;IAClB,aAAa,EAAE,YAAY;IAC3B,MAAM,EAAE,YAAY;IACpB,aAAa,EAAE,qCAAqC;CAC5C,CAAC;AAEX,MAAM,mBAAmB,GAAG;IAC1B,cAAc,EAAE,wBAAwB;IACxC,mBAAmB,EAAE,IAAI,CAAC;QACxB,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,UAAU;KACtB,CAAC,CAAC,KAAK,EAAE;CACF,CAAC;AAEX,2EAA2E;AAC3E,MAAM,CAAC,MAAM,8CAA8C,GACzD,IAAI,CAAC;IACH,IAAI,EAAE,YAAY;IAClB,YAAY,EAAE,YAAY;IAC1B,eAAe,EAAE,YAAY;IAC7B,WAAW,EAAE,YAAY;IACzB,SAAS,EAAE,YAAY;IACvB,QAAQ,EAAE,YAAY;IACtB,eAAe,EAAE,qBAAqB;IACtC,QAAQ,EAAE,WAAW;IACrB,iBAAiB,EAAE;QACjB,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,YAAY;QACrB,cAAc,EAAE,wBAAwB;KACzC;IACD,qEAAqE;IACrE,yEAAyE;IACzE,qEAAqE;IACrE,wEAAwE;IACxE,+DAA+D;IAC/D,sBAAsB,EAAE;QACtB,eAAe,EAAE,qBAAqB;QACtC,iBAAiB,EAAE,qBAAqB;KACzC;IACD,4BAA4B,EAAE,IAAI,CAAC;QACjC,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,QAAQ;QACrB,iBAAiB,EAAE,oCAAoC;QACvD,gBAAgB,EAAE,mBAAmB;QACrC,aAAa,EAAE,oBAAoB;QACnC,iBAAiB,EAAE,UAAU;QAC7B,qBAAqB,EAAE,oBAAoB;QAC3C,mBAAmB,EAAE,oBAAoB;KAC1C,CAAC,CAAC,KAAK,EAAE;IACV,8BAA8B,EAAE,SAAS;IACzC,6BAA6B,EAAE,SAAS;IACxC,eAAe,EAAE,YAAY;IAC7B,oBAAoB,EAAE,mBAAmB;IACzC,YAAY,EAAE;QACZ,SAAS,EAAE,wBAAwB;QACnC,WAAW,EAAE,wBAAwB;KACtC;IACD,eAAe,EAAE,wBAAwB;IACzC,cAAc,EAAE,IAAI,CAAC;QACnB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,oBAAoB;QACjC,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,iDAAiD;QAC5D,oBAAoB,EAAE,gBAAgB;KACvC,CAAC,CAAC,KAAK,EAAE;IACV,WAAW,EAAE,kBAAkB;CAChC,CAAC,CAAC;AAEL,2EAA2E;AAC3E,MAAM,CAAC,MAAM,8CAA8C,GACzD,IAAI,CAAC;IACH,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,mCAAmC;IAC1C,OAAO,EAAE,QAAQ;CAClB,CAAC,CAAC;AA+CL,MAAM,CAAC,MAAM,0DAA0D,GACrE,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,4DAA4D,GAEpE,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC"}

package/dist/factories/aws-load-balancer-controller/utils/helm-values-mapper.d.ts

@@ -0,0 +1,27 @@
+import type { AwsLoadBalancerControllerBootstrapConfig } from '../types.js';
+/**
+ * Reject build-time `values` that set a chart value the spec maps, at any
+ * depth (`image.tag` falls under the spec's `image`).
+ *
+ * @throws {ValidationError} naming the spec field to use instead.
+ */
+export declare function assertAwsLoadBalancerControllerBuildTimeValues(values: Record<string, unknown> | undefined): void;
+/**
+ * Map the bootstrap spec to `aws-load-balancer-controller` chart values.
+ *
+ * Works on a concrete spec (direct mode) and on the schema proxy (KRO mode).
+ * `values` is a concrete, build-time overlay for chart settings the spec does
+ * not map; setting one the spec maps throws (see
+ * {@link assertAwsLoadBalancerControllerBuildTimeValues}). Its
+ * `podDisruptionBudget` replaces the TypeKro default PDB, and an instance's own
+ * `spec.podDisruptionBudget` replaces either one whole, so its two exclusive
+ * fields never combine. Both modes render the same result.
+ *
+ * @example
+ * ```typescript
+ * mapAwsLoadBalancerControllerConfigToHelmValues({ name: 'lbc', clusterName: 'prod' });
+ * // { clusterName: 'prod', defaultTargetType: 'ip', keepTLSSecret: true, ... }
+ * ```
+ */
+export declare function mapAwsLoadBalancerControllerConfigToHelmValues(config: AwsLoadBalancerControllerBootstrapConfig, values?: Record<string, unknown>): Record<string, unknown>;
+//# sourceMappingURL=helm-values-mapper.d.ts.map

package/dist/factories/aws-load-balancer-controller/utils/helm-values-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-values-mapper.d.ts","sourceRoot":"","sources":["../../../../src/factories/aws-load-balancer-controller/utils/helm-values-mapper.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AA+D5E;;;;;GAKG;AACH,wBAAgB,8CAA8C,CAC5D,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC1C,IAAI,CA8BN;AAoBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,8CAA8C,CAC5D,MAAM,EAAE,wCAAwC,EAChD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8CzB"}

package/dist/factories/aws-load-balancer-controller/utils/helm-values-mapper.js

@@ -0,0 +1,171 @@
+import { isMergeableValuesObject } from '../../../core/aspects/values-merge.js';
+import { ValidationError } from '../../../core/errors.js';
+import { Cel } from '../../../core/references/cel.js';
+import { isCelExpression, isKubernetesRef } from '../../../utils/type-guards.js';
+import { DEFAULT_AWS_LBC_NAME } from '../constants.js';
+// In KRO mode every optional spec field is a schema proxy, and a proxy is
+// truthy, never `undefined`. So the mapper never branches on a spec value and
+// never spreads one. It places each field into the values tree as-is: the
+// serializer renders an unset optional field as `omit()`, which leaves the
+// chart's own default in place. Where TypeKro's default differs from the
+// chart's, `Cel.default` applies it (plain `??` for concrete direct values).
+// Drop `undefined` leaves and empty objects from a concrete tree. Graph values
+// (schema references and CEL expressions) are kept whole.
+function prune(value) {
+    if (value === null ||
+        typeof value !== 'object' ||
+        Array.isArray(value) ||
+        isKubernetesRef(value) ||
+        isCelExpression(value)) {
+        return value;
+    }
+    const pruned = {};
+    for (const [key, child] of Object.entries(value)) {
+        const next = prune(child);
+        if (next !== undefined)
+            pruned[key] = next;
+    }
+    return Object.keys(pruned).length > 0 ? pruned : undefined;
+}
+// Chart values the spec maps, named by their chart path, which is also the
+// spec field that feeds them. Build-time `values` may not set these: a KRO
+// instance's value is a schema reference the overlay could only replace, so
+// an overlay would silently drop what the instance sets (an IRSA role
+// annotation, a private image repository), in direct mode as well to keep the
+// two modes alike. `podDisruptionBudget` is handled separately below.
+const SPEC_MAPPED_VALUES = new Set([
+    'clusterName',
+    'region',
+    'vpcId',
+    'replicaCount',
+    'image',
+    'serviceAccount.create',
+    'serviceAccount.name',
+    'serviceAccount.annotations',
+    'topologySpreadConstraints',
+    'enableServiceMutatorWebhook',
+    'createIngressClassResource',
+    'ingressClass',
+    'defaultTargetType',
+    'resources',
+    'nodeSelector',
+    'tolerations',
+    'logLevel',
+]);
+// A section the mapper builds field by field. An overlay may add the fields
+// the spec does not map (e.g. `serviceAccount.automountServiceAccountToken`).
+const MAPPER_SECTION = 'serviceAccount';
+function isUnsafeKey(key) {
+    return key === '__proto__' || key === 'constructor' || key === 'prototype';
+}
+/**
+ * Reject build-time `values` that set a chart value the spec maps, at any
+ * depth (`image.tag` falls under the spec's `image`).
+ *
+ * @throws {ValidationError} naming the spec field to use instead.
+ */
+export function assertAwsLoadBalancerControllerBuildTimeValues(values) {
+    if (!values)
+        return;
+    const conflicts = [];
+    for (const [key, value] of Object.entries(values)) {
+        if (isUnsafeKey(key))
+            continue;
+        if (key === MAPPER_SECTION) {
+            if (!isMergeableValuesObject(value)) {
+                conflicts.push(key);
+                continue;
+            }
+            for (const field of Object.keys(value)) {
+                if (SPEC_MAPPED_VALUES.has(`${key}.${field}`))
+                    conflicts.push(`${key}.${field}`);
+            }
+        }
+        else if (SPEC_MAPPED_VALUES.has(key)) {
+            conflicts.push(key);
+        }
+    }
+    if (conflicts.length === 0)
+        return;
+    const paths = conflicts.map((path) => `values.${path}`).join(', ');
+    throw new ValidationError(`AWS Load Balancer Controller build-time ${paths} ${conflicts.length === 1 ? 'sets a chart value' : 'set chart values'} the spec maps. ` +
+        'Set it through the spec instead (' +
+        conflicts.map((path) => `spec.${path}`).join(', ') +
+        "): build-time values cannot merge with an instance's spec, and replacing it would " +
+        'drop what the instance sets, such as an IRSA role annotation or a private image repository.', 'AwsLoadBalancerControllerBootstrap', 'values', `values.${conflicts[0]}`, conflicts.map((path) => `Move values.${path} to spec.${path}.`));
+}
+// Lay the checked overlay over the mapped values: new keys are added, and the
+// service-account section takes the overlay's extra fields.
+function applyOverlay(base, overlay) {
+    const merged = { ...base };
+    for (const [key, value] of Object.entries(overlay)) {
+        if (isUnsafeKey(key))
+            continue;
+        const current = merged[key];
+        merged[key] =
+            key === MAPPER_SECTION && isMergeableValuesObject(current) && isMergeableValuesObject(value)
+                ? applyOverlay(current, value)
+                : value;
+    }
+    return merged;
+}
+/**
+ * Map the bootstrap spec to `aws-load-balancer-controller` chart values.
+ *
+ * Works on a concrete spec (direct mode) and on the schema proxy (KRO mode).
+ * `values` is a concrete, build-time overlay for chart settings the spec does
+ * not map; setting one the spec maps throws (see
+ * {@link assertAwsLoadBalancerControllerBuildTimeValues}). Its
+ * `podDisruptionBudget` replaces the TypeKro default PDB, and an instance's own
+ * `spec.podDisruptionBudget` replaces either one whole, so its two exclusive
+ * fields never combine. Both modes render the same result.
+ *
+ * @example
+ * ```typescript
+ * mapAwsLoadBalancerControllerConfigToHelmValues({ name: 'lbc', clusterName: 'prod' });
+ * // { clusterName: 'prod', defaultTargetType: 'ip', keepTLSSecret: true, ... }
+ * ```
+ */
+export function mapAwsLoadBalancerControllerConfigToHelmValues(config, values) {
+    assertAwsLoadBalancerControllerBuildTimeValues(values);
+    const { podDisruptionBudget: overlayPdb, ...overlay } = values ?? {};
+    const mapped = {
+        clusterName: config.clusterName,
+        region: config.region,
+        vpcId: config.vpcId,
+        replicaCount: config.replicaCount,
+        image: config.image,
+        serviceAccount: {
+            create: Cel.default(config.serviceAccount?.create, true),
+            // Pinned rather than derived from the release name, so the IRSA trust
+            // policy or Pod Identity association has a name that cannot drift.
+            name: Cel.default(config.serviceAccount?.name, DEFAULT_AWS_LBC_NAME),
+            annotations: config.serviceAccount?.annotations,
+        },
+        // The chart renders a PDB only above one replica, and its default is none.
+        // A build-time PDB (say a percentage, which the integer-only spec field
+        // cannot express) replaces TypeKro's default; an instance's own PDB
+        // replaces either one whole.
+        podDisruptionBudget: Cel.default(config.podDisruptionBudget, (overlayPdb ?? { maxUnavailable: 1 })),
+        topologySpreadConstraints: config.topologySpreadConstraints,
+        // Off by default: the webhook makes this controller claim every new
+        // `type: LoadBalancer` Service, including ones another controller owns.
+        enableServiceMutatorWebhook: Cel.default(config.enableServiceMutatorWebhook, false),
+        createIngressClassResource: config.createIngressClassResource,
+        ingressClass: config.ingressClass,
+        // `ip` targets pods directly (VPC CNI); the chart's `instance` default
+        // routes through NodePorts.
+        defaultTargetType: Cel.default(config.defaultTargetType, 'ip'),
+        resources: config.resources,
+        nodeSelector: config.nodeSelector,
+        tolerations: config.tolerations,
+        logLevel: config.logLevel,
+        // The chart regenerates the self-signed webhook certificate on every
+        // upgrade unless told to keep it, which briefly breaks the webhooks while
+        // the new CA bundle propagates.
+        keepTLSSecret: true,
+    };
+    const pruned = (prune(mapped) ?? {});
+    return applyOverlay(pruned, overlay);
+}
+//# sourceMappingURL=helm-values-mapper.js.map

package/dist/factories/aws-load-balancer-controller/utils/helm-values-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-values-mapper.js","sourceRoot":"","sources":["../../../../src/factories/aws-load-balancer-controller/utils/helm-values-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAGvD,0EAA0E;AAC1E,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;AAE7E,+EAA+E;AAC/E,0DAA0D;AAC1D,SAAS,KAAK,CAAC,KAAc;IAC3B,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,eAAe,CAAC,KAAK,CAAC;QACtB,eAAe,CAAC,KAAK,CAAC,EACtB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,2EAA2E;AAC3E,2EAA2E;AAC3E,4EAA4E;AAC5E,sEAAsE;AACtE,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,aAAa;IACb,QAAQ;IACR,OAAO;IACP,cAAc;IACd,OAAO;IACP,uBAAuB;IACvB,qBAAqB;IACrB,4BAA4B;IAC5B,2BAA2B;IAC3B,6BAA6B;IAC7B,4BAA4B;IAC5B,cAAc;IACd,mBAAmB;IACnB,WAAW;IACX,cAAc;IACd,aAAa;IACb,UAAU;CACX,CAAC,CAAC;AAEH,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8CAA8C,CAC5D,MAA2C;IAE3C,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,WAAW,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAC3B,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;oBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;aAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACnC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,IAAI,eAAe,CACvB,2CAA2C,KAAK,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,kBAAkB,kBAAkB;QACtI,mCAAmC;QACnC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAClD,oFAAoF;QACpF,6FAA6F,EAC/F,oCAAoC,EACpC,QAAQ,EACR,UAAU,SAAS,CAAC,CAAC,CAAC,EAAE,EACxB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,IAAI,YAAY,IAAI,GAAG,CAAC,CAChE,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,SAAS,YAAY,CACnB,IAA6B,EAC7B,OAAgC;IAEhC,MAAM,MAAM,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,WAAW,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC;YACT,GAAG,KAAK,cAAc,IAAI,uBAAuB,CAAC,OAAO,CAAC,IAAI,uBAAuB,CAAC,KAAK,CAAC;gBAC1F,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;gBAC9B,CAAC,CAAC,KAAK,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,8CAA8C,CAC5D,MAAgD,EAChD,MAAgC;IAEhC,8CAA8C,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,EAAE,mBAAmB,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;IACrE,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE;YACd,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC;YACxD,sEAAsE;YACtE,mEAAmE;YACnE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,oBAAoB,CAAC;YACpE,WAAW,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW;SAChD;QACD,2EAA2E;QAC3E,wEAAwE;QACxE,oEAAoE;QACpE,6BAA6B;QAC7B,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAC9B,MAAM,CAAC,mBAAmB,EAC1B,CAAC,UAAU,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAEnC,CACF;QACD,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,oEAAoE;QACpE,wEAAwE;QACxE,2BAA2B,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,2BAA2B,EAAE,KAAK,CAAC;QACnF,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,uEAAuE;QACvE,4BAA4B;QAC5B,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC;QAC9D,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,qEAAqE;QACrE,0EAA0E;QAC1E,gCAAgC;QAChC,aAAa,EAAE,IAAI;KACpB,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAA4B,CAAC;IAChE,OAAO,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC"}

package/dist/factories/aws-load-balancer-controller/utils/index.d.ts

@@ -0,0 +1,2 @@
+export { mapAwsLoadBalancerControllerConfigToHelmValues } from './helm-values-mapper.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/aws-load-balancer-controller/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/factories/aws-load-balancer-controller/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8CAA8C,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/factories/aws-load-balancer-controller/utils/index.js

@@ -0,0 +1,2 @@
+export { mapAwsLoadBalancerControllerConfigToHelmValues } from './helm-values-mapper.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/aws-load-balancer-controller/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/factories/aws-load-balancer-controller/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8CAA8C,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/factories/cert-manager/compositions/cert-manager-bootstrap.d.ts

@@ -24,16 +24,18 @@ import { CertManagerBootstrapConfigSchema, CertManagerBootstrapStatusSchema } fr
  *   name: 'cert-manager',
  *   namespace: 'cert-manager',
  *   version: '1.19.3',
- *   installCRDs: true,
+ *   crds: { enabled: true, keep: true },
+ *   replicaCount: 2,
  *   controller: {
  *     resources: {
  *       requests: { cpu: '100m', memory: '128Mi' },
  *       limits: { cpu: '500m', memory: '512Mi' }
- *     }
+ *     },
+ *     podDisruptionBudget: { enabled: true }
  *   },
  *   webhook: {
- *     enabled: true,
- *     replicaCount: 2
+ *     replicaCount: 2,
+ *     podDisruptionBudget: { enabled: true }
  *   },
  *   prometheus: {
  *     enabled: true,

package/dist/factories/cert-manager/compositions/cert-manager-bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cert-manager-bootstrap.d.ts","sourceRoot":"","sources":["../../../../src/factories/cert-manager/compositions/cert-manager-bootstrap.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAK7E,OAAO,EAEL,gCAAgC,EAChC,gCAAgC,EACjC,MAAM,aAAa,CAAC;AAGrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,eAAO,MAAM,oBAAoB,EAAE,mBAAmB,CACpD,OAAO,gCAAgC,CAAC,KAAK,EAC7C,OAAO,gCAAgC,CAAC,KAAK,CA4Q9C,CAAC"}
+{"version":3,"file":"cert-manager-bootstrap.d.ts","sourceRoot":"","sources":["../../../../src/factories/cert-manager/compositions/cert-manager-bootstrap.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAI7E,OAAO,EAEL,gCAAgC,EAChC,gCAAgC,EACjC,MAAM,aAAa,CAAC;AAOrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,eAAO,MAAM,oBAAoB,EAAE,mBAAmB,CACpD,OAAO,gCAAgC,CAAC,KAAK,EAC7C,OAAO,gCAAgC,CAAC,KAAK,CA4E9C,CAAC"}