feat: add AlicloudCdnComponent

.changeset/sour-emus-compare.md

@@ -0,0 +1,5 @@
+---
+'@pulumi-helpers/component-alicloud-cdn': minor
+---
+
+add AlicloudCdnComponent

components/acme-cert/package.json

@@ -4,8 +4,7 @@
   "keywords": [
     "pulumi",
     "pulumi-component",
-    "acme",
-    "cert"
+    "acme-cert"
   ],
   "repository": {
     "type": "git",

components/alicloud-cdn/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@pulumi-helpers/component-alicloud-cdn",
+  "version": "0.0.0",
+  "keywords": [
+    "pulumi",
+    "pulumi-component",
+    "alicloud-cdn"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/bingtsingw/pulumi-helpers"
+  },
+  "license": "MIT",
+  "author": {
+    "name": "bingtsingw",
+    "email": "[email protected]",
+    "url": "https://github.com/bingtsingw"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "check-type": "tsc --noEmit",
+    "dev": "tsup --watch",
+    "lint:js": "eslint . --cache --ext .js,.jsx,.ts,.tsx",
+    "lint:js:fix": "eslint . --cache --ext .js,.jsx,.ts,.tsx --fix",
+    "test": "bun test"
+  },
+  "eslintConfig": {
+    "extends": "@xstools-dev/eslint-config/base",
+    "rules": {
+      "no-new": "off"
+    }
+  },
+  "dependencies": {
+    "@pulumi/alicloud": "^3.62.0"
+  },
+  "devDependencies": {
+    "@pulumi/pulumi": "^3.131.0"
+  },
+  "peerDependencies": {
+    "@pulumi/pulumi": "*"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "tsup": {
+    "entry": [
+      "src/index.ts"
+    ],
+    "format": [
+      "cjs"
+    ],
+    "dts": true,
+    "clean": true,
+    "treeshake": true,
+    "minify": true
+  }
+}

components/alicloud-cdn/src/index.ts

@@ -0,0 +1,171 @@
+import * as alicloud from '@pulumi/alicloud';
+import * as pulumi from '@pulumi/pulumi';
+
+interface AlicloudCdnProps {
+  resourceGroupId: string;
+  type: 'web' | 'download' | 'video';
+  scope: 'domestic' | 'overseas' | 'global';
+  sources: { content: string; type: 'oss' | 'ipaddr' | 'domain'; port: number }[];
+  domain: { host: string; record: string };
+  cert?: { pub: string; pri: string };
+}
+
+export class AlicloudCdnComponent extends pulumi.ComponentResource {
+  private cdnName: string;
+  private dnsName: string;
+  private host: string;
+
+  public constructor(
+    private name: string,
+    private props: AlicloudCdnProps,
+    opts?: pulumi.ComponentResourceOptions,
+  ) {
+    super('pkg:index:AlicloudCdnComponent', name, {}, opts);
+
+    this.cdnName = `${this.name}-cdn`;
+    this.dnsName = `${this.cdnName}-dns`;
+    this.host = `${this.props.domain.record}.${this.props.domain.host}`;
+
+    const cdn = this.createCdn();
+
+    this.configBasic(cdn);
+
+    this.configHttps(cdn);
+
+    this.registerOutputs();
+  }
+
+  private createCdn() {
+    const cdn = new alicloud.cdn.DomainNew(
+      this.cdnName,
+      {
+        resourceGroupId: this.props.resourceGroupId,
+        cdnType: this.props.type,
+        scope: this.props.scope,
+        sources: this.props.sources,
+        domainName: this.host,
+        ...(this.props.cert
+          ? {
+              certificateConfig: {
+                certType: 'upload',
+                privateKey: this.props.cert.pri,
+                serverCertificate: this.props.cert.pub,
+              },
+            }
+          : {}),
+      },
+      { parent: this },
+    );
+
+    new alicloud.dns.Record(
+      this.dnsName,
+      {
+        hostRecord: this.props.domain.record,
+        name: this.props.domain.host,
+        type: 'CNAME',
+        value: cdn.cname,
+      },
+      { parent: this },
+    );
+
+    return cdn;
+  }
+
+  private configBasic(cdn: alicloud.cdn.DomainNew) {
+    // IPv6开关
+    new alicloud.cdn.DomainConfig(
+      `${this.cdnName}-ipv6`,
+      {
+        domainName: cdn.domainName,
+        functionName: 'ipv6',
+        functionArgs: [
+          { argName: 'switch', argValue: 'on' },
+          { argName: 'region', argValue: '*' },
+        ],
+      },
+      { parent: this },
+    );
+
+    // 回源HOST
+    new alicloud.cdn.DomainConfig(
+      `${this.cdnName}-set_req_host_header`,
+      {
+        domainName: cdn.domainName,
+        functionName: 'set_req_host_header',
+        functionArgs: [{ argName: 'domain_name', argValue: this.host }],
+      },
+      { parent: this },
+    );
+
+    // 回源协议
+    new alicloud.cdn.DomainConfig(
+      `${this.cdnName}-forward_scheme`,
+      {
+        domainName: cdn.domainName,
+        functionName: 'forward_scheme',
+        functionArgs: [
+          { argName: 'enable', argValue: 'on' },
+          { argName: 'scheme_origin', argValue: 'https' },
+        ],
+      },
+      { parent: this },
+    );
+  }
+
+  private configHttps(cdn: alicloud.cdn.DomainNew) {
+    // HTTP/2 OCSP设置
+    new alicloud.cdn.DomainConfig(
+      `${this.cdnName}-https_option`,
+      {
+        domainName: cdn.domainName,
+        functionName: 'https_option',
+        functionArgs: [
+          { argName: 'http2', argValue: 'on' },
+          { argName: 'ocsp_stapling', argValue: 'on' },
+        ],
+      },
+      { parent: this, ignoreChanges: ['functionArgs'] },
+    );
+
+    // 强制跳转
+    new alicloud.cdn.DomainConfig(
+      `${this.cdnName}-https_force`,
+      {
+        domainName: cdn.domainName,
+        functionName: 'https_force',
+        functionArgs: [{ argName: 'enable', argValue: 'on' }],
+      },
+      { parent: this },
+    );
+
+    // TLS版本
+    new alicloud.cdn.DomainConfig(
+      `${this.cdnName}-https_tls_version`,
+      {
+        domainName: cdn.domainName,
+        functionName: 'https_tls_version',
+        functionArgs: [
+          { argName: 'tls10', argValue: 'on' },
+          { argName: 'tls11', argValue: 'on' },
+          { argName: 'tls12', argValue: 'on' },
+          { argName: 'tls13', argValue: 'on' },
+        ],
+      },
+      { parent: this },
+    );
+
+    // HSTS
+    new alicloud.cdn.DomainConfig(
+      `${this.cdnName}-hsts`,
+      {
+        domainName: cdn.domainName,
+        functionName: 'HSTS',
+        functionArgs: [
+          { argName: 'enabled', argValue: 'on' },
+          { argName: 'https_hsts_max_age', argValue: '5184000' },
+        ],
+      },
+      { parent: this },
+    );
+  }
+}

components/alicloud-cdn/tsconfig.json

@@ -0,0 +1,4 @@
+{
+  "extends": "@xstools-dev/typescript-config/base/tsconfig.json",
+  "include": ["src"]
+}

components/random-password/package.json

@@ -4,8 +4,7 @@
   "keywords": [
     "pulumi",
     "pulumi-component",
-    "random",
-    "password"
+    "random-password"
   ],
   "repository": {
     "type": "git",

components/random-suffix/package.json

@@ -4,8 +4,7 @@
   "keywords": [
     "pulumi",
     "pulumi-component",
-    "random",
-    "password"
+    "random-suffix"
   ],
   "repository": {
     "type": "git",