feat: add ementas service with Pulumi

schemas/crds.schema.json

@@ -0,0 +1,108 @@
+{
+    "$schema": "https://json-schema.org/draft-07/schema",
+    "$id": "https://niployments.niaefeup.pt/schemas/crds.schema.json",
+    "title": "CRDs Download Configuration",
+    "description": "Configuration for the download and extraction of CRDs, used for Pulumi-based resources",
+    "type": "object",
+    "required": ["manifests"],
+    "additionalProperties": false,
+    "properties": {
+        "repositories": {
+            "description": "List of repositories to add to the Helm client",
+            "type": "array",
+            "minItems": 1,
+            "items": {
+                "type": "object",
+                "required": ["name", "url"],
+                "additionalProperties": false,
+                "properties": {
+                    "name": {
+                        "type": "string"
+                    },
+                    "url": {
+                        "type": "string"
+                    }
+                }
+            }
+        },
+        "manifests": {
+            "description": "List of manifests to download and extract CRDs from",
+            "type": "array",
+            "minItems": 1,
+            "items": {
+                "type": "object",
+                "oneOf": [
+                    {
+                        "type":"object",
+                        "required": ["type", "chart"],
+                        "additionalProperties": false,
+                        "properties": {
+                            "type": {
+                                "description": "Method for downloading the CRDs",
+                                "type": "string",
+                                "enum": ["helm"]
+                            },
+                            "chart": {
+                                "description": "Name of the Helm chart to download",
+                                "type": "string",
+                                "examples": ["traefik/traefik"]
+                            },
+                            "version": {
+                                "description": "Version of the Helm chart to download",
+                                "type": "string",
+                                "examples": ["28.3.0"]
+                            }
+                        }
+                    },
+                    {
+                        "type":"object",
+                        "required": ["type", "chart"],
+                        "additionalProperties": false,
+                        "properties": {
+                            "type": {
+                                "description": "Method for downloading the CRDs",
+                                "type": "string",
+                                "enum": ["template"]
+                            },
+                            "chart": {
+                                "description": "Name of the Helm chart to download",
+                                "type": "string",
+                                "examples": ["jetstack/cert-manager"]
+                            },
+                            "version": {
+                                "description": "Version of the Helm chart to download",
+                                "type": "string",
+                                "examples": ["v1.14.7"]
+                            },
+                            "options": {
+                                "description": "Options to pass to the Helm template command",
+                                "type": "string"
+                            }
+                        }
+                    },
+                    {
+                        "type":"object",
+                        "required": ["type", "name", "url"],
+                        "additionalProperties": false,
+                        "properties": {
+                            "type": {
+                                "description": "Method for downloading the CRDs",
+                                "type": "string",
+                                "enum": ["curl"]
+                            },
+                            "name": {
+                                "description": "Name of the manifest to download",
+                                "type": "string",
+                                "examples": ["cloudnative-pg/cloudnative-pg"]
+                            },
+                            "url": {
+                                "description": "URL to download the chart from",
+                                "type": "string"
+                            }
+                        }
+                    }
+                ]
+            }
+        }
+    }
+}

services/cert-manager/deploy-dev.sh

@@ -5,6 +5,6 @@ helm repo update
 
 kubectl apply -f $(dirname $0)/00-namespace.yaml
 
-helm upgrade --install -f $(dirname $0)/values.yaml cert-manager jetstack/cert-manager --namespace cert-manager
+helm upgrade --install -f $(dirname $0)/values.yaml cert-manager jetstack/cert-manager --version v1.14.7 --namespace cert-manager
 
 kubectl apply -f $(dirname $0)/01-cluster-issuer-dev.yaml

services/databases/mongodb/deploy-mongodb-dev.sh

@@ -8,7 +8,7 @@ mongodb_dir='./services/databases/mongodb'
 pods=$(cat $mongodb_dir/mongodb-cluster.yaml | awk '{if ($1 == "members:") print $2}')
 
 helm repo add mongodb https://mongodb.github.io/helm-charts
-helm install community-operator mongodb/community-operator --namespace mongodb --create-namespace
+helm install community-operator mongodb/community-operator --namespace mongodb --create-namespace --set operator.watchNamespace="*"
 kubectl apply -f $mongodb_dir/mongodb-cluster.yaml --namespace mongodb
 sleep 20  # Wait a little bit for first pod to be created
 

services/pulumi/.gitignore

@@ -0,0 +1,3 @@
+/bin/
+/node_modules/
+/crds/

services/pulumi/Pulumi.prod.yaml

@@ -0,0 +1,7 @@
+encryptionsalt: v1:6vimz/8deKQ=:v1:2jXtXVp4buA9Qw0S:Msz9WV6s+ixqlVstCWD6COpFetFONg==
+config:
+  niployments:ementas-mongodb-uri: mongodb://nimentas:[email protected]:27017,mongodb-op-1.mongodb-op-svc.mongodb.svc.cluster.local:27017,mongodb-op-2.mongodb-op-svc.mongodb.svc.cluster.local:27017/nimentas?replicaSet=mongodb-op&ssl=false
+  niployments:mongodb/admin-password:
+    secure: v1:f6NgA0SBJ6F+P7gK:FOskiEA/fOLlODxh97fwz8jB06g=
+  niployments:mongodb/nimentas-password:
+    secure: v1:PB1bxtgnlIy6WG0S:7L4PZjiDpx5/IQlr/FPwoohK4QA=

services/pulumi/Pulumi.yaml

@@ -0,0 +1,7 @@
+name: niployments
+runtime: nodejs
+description: Pulumi program to manage the niployments cluster
+config:
+  pulumi:tags:
+    value:
+      pulumi:template: kubernetes-typescript

services/pulumi/crds.yaml

@@ -0,0 +1,46 @@
+# yaml-language-server: $schema=../../schemas/crds.schema.json
+repositories:
+  - name: jetstack
+    url: https://charts.jetstack.io
+  - name: clustersecret
+    url: https://charts.clustersecret.io/
+  - name: mongodb
+    url: https://mongodb.github.io/helm-charts
+  - name: longhorn
+    url: https://charts.longhorn.io
+  - name: traefik
+    url: https://traefik.github.io/charts
+
+manifests:
+  # cert-manager
+  - type: template
+    chart: jetstack/cert-manager
+    version: v1.14.7
+    options: |
+      --values=../cert-manager/values.yaml
+      --namespace=cert-manager
+  # cilium - no CRDs
+  # cluster-secret
+  - type: helm
+    chart: clustersecret/cluster-secret
+  # databases/mongodb
+  - type: template
+    chart: mongodb/community-operator
+    options: |
+      --namespace=mongodb
+  # databases/postgresql
+  - type: curl
+    name: cloudnative-pg/cloudnative-pg
+    url: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.22/releases/cnpg-1.22.2.yaml
+  # image-registry (harbor) - no CRDs
+  # storage/longhorn
+  - type: template
+    chart: longhorn/longhorn
+    version: 1.6.1
+    options: |
+      --values=../storage/longhorn/prod-values.yaml
+      --namespace=longhorn
+  # traefik
+  - type: helm
+    chart: traefik/traefik
+    version: 28.3.0

services/pulumi/index.ts

@@ -0,0 +1,4 @@
+import { apps } from "./services/databases/mongodb";
+import "./services/ementas";
+
+apps.commit();

services/pulumi/package.json

@@ -0,0 +1,19 @@
+{
+    "name": "niployments",
+    "main": "index.ts",
+    "devDependencies": {
+        "@types/node": "^18.19.39",
+        "typescript": "^5.5.3"
+    },
+    "dependencies": {
+        "@pulumi/kubernetes": "^4.14.0",
+        "@pulumi/pulumi": "^3.121.0"
+    },
+    "imports": {
+        "#crds": "./crds/nodejs/index.ts",
+        "#resources/": "./resources/",
+        "#services/": "./services/",
+        "#utils/": "./utils/"
+    },
+    "packageManager": "[email protected]+sha512.67f5879916a9293e5cf059c23853d571beaf4f753c707f40cb22bed5fb1578c6aad3b6c4107ccb3ba0b35be003eb621a16471ac836c87beb53f9d54bb4612724"
+}