Merge remote-tracking branch 'origin/feature/pulumi' into feature/minio

.github/actions/prepare-pulumi-project/action.yaml

@@ -0,0 +1,46 @@
+name: "Prepare Pulumi project"
+description: "Installs dependencies and clones the project"
+inputs:
+  node-version:
+    description: "Node version"
+    required: false
+    default: "22"
+  crd2pulumi-version:
+    description: "crd2pulumi version"
+    required: false
+    default: "v1.4.0"
+  yq-version:
+    description: "yq version"
+    required: false
+    default: "v4.40.3"
+runs:
+  using: composite
+  steps:
+
+    - name: Install yq
+      shell: sh
+      run: sudo curl -L https://github.com/mikefarah/yq/releases/download/${{ inputs.yq-version }}/yq_linux_amd64 -o /usr/bin/yq && sudo chmod +x /usr/bin/yq
+
+    - name: Install crd2pulumi
+      shell: sh
+      run: |
+        mkdir -p ./bin/crd2pulumi
+        cd ./bin/crd2pulumi
+        echo "crd2pulumi" > files.txt
+        curl -L https://github.com/pulumi/crd2pulumi/releases/download/${{ inputs.crd2pulumi-version }}/crd2pulumi-${{ inputs.crd2pulumi-version }}-linux-amd64.tar.gz | tar -T files.txt -xvz
+        sudo mv crd2pulumi /usr/bin/crd2pulumi
+        sudo chmod +x /usr/bin/crd2pulumi
+  
+    - uses: pnpm/action-setup@v4
+      with:
+        package_json_file: services/pulumi/package.json
+
+    - uses: actions/setup-node@v4
+      with:
+        node-version: ${{ inputs.node-version }}
+        cache: "pnpm"
+        cache-dependency-path: services/pulumi/pnpm-lock.yaml
+
+    - name: Sync CRDs
+      shell: sh
+      run: ./services/pulumi/sync-crds.sh

.github/workflows/pulumi-linter.yaml

@@ -0,0 +1,30 @@
+name: pulumi-lint
+
+on:
+  pull_request: 
+    branches: [ "main" ]
+    paths: [ "services/pulumi/**" ]
+  push:
+    branches: [ "main" ]
+    paths: [ "services/pulumi/**" ]
+
+jobs:
+  format:
+    name: Prettier
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/prepare-pulumi-project
+      - name: Run prettier
+        working-directory: services/pulumi/niployments
+        run: pnpm run prettier
+
+  lint:
+    name: ESLint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/prepare-pulumi-project
+      - name: Run ESLint
+        working-directory: services/pulumi/niployments
+        run: pnpm run lint

services/pulumi/.gitignore

@@ -1,3 +1,3 @@
-/bin/
-/node_modules/
+bin/
+node_modules/
 /crds/

services/pulumi/crds.yaml

@@ -7,6 +7,8 @@ repositories:
   # mongodb official charts are not needed while temporary fix is in use
   # - name: mongodb
   #   url: https://mongodb.github.io/helm-charts
+  - name: mittwald
+    url: https://helm.mittwald.de
   - name: longhorn
     url: https://charts.longhorn.io
   - name: traefik
@@ -41,6 +43,7 @@ manifests:
     name: cloudnative-pg/cloudnative-pg
     url: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.22/releases/cnpg-1.22.2.yaml
   # image-registry (harbor) - no CRDs
+  # replicator - no CRDs
   # storage/longhorn
   - type: template
     chart: longhorn/longhorn

services/pulumi/niployments/.prettierignore

@@ -0,0 +1,7 @@
+# Pnpm files
+/node_modules/
+/bin/
+package.json
+
+# Assets
+/assets/

services/pulumi/niployments/.prettierrc

@@ -0,0 +1,3 @@
+{
+  "tabWidth": 2
+}

services/pulumi/niployments/Pulumi.prod.yaml

@@ -0,0 +1,6 @@
+encryptionsalt: v1:upriG3hjats=:v1:Mjju6ZYDjjKKyVPn:Bn6nuCMHoUCltZWaXycxDl5bvv7ndA==
+config:
+  niployments:mongodb/admin-password:
+    secure: v1:GXCb2z0V4Az3053O:y6EgjlKVYr6BWebVazmAmdC/YCI=
+  niployments:mongodb/nimentas-password:
+    secure: v1:HxF47P+9RXfi4nfc:47vWUGoYJgjmqxaWwT2M8SSCgI0=