kube-dsl 0.6.1 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ee0373d4a49b731e08d691b25c84ba5c71f8e9a4018f411ba5bb8da87448096a
-  data.tar.gz: 7ffcad491b24630b21ae7a8799f75089816b066f4a9671db5774999d0fbac434
+  metadata.gz: 641c36c885caa0297fecc54a22de1dcd4a79d1f90eb7be9856eaeb185c2bf817
+  data.tar.gz: 4b79ad723e0a1554dd42abacca6a21cea294ac6b78925939b1b24eeca955cfed
 SHA512:
-  metadata.gz: 3d584e068dffddfea89b6aaca1baa27633fe8681d161a53cc274daa20426496a1358c71223866dfde883ba80d2119a021110196fac087d20fd5d1d82380e57fd
-  data.tar.gz: ef1c9a440f42c5d8777ff0dc08377e264456344754f09f146e848ae2964811d67c23ddb6cbbf4fa18fc1755161bddb6fc73d7646e1041a30c1bf178534076d75
+  metadata.gz: 228bf0eb5b9155a59bf7eaa044a0c457b6d396fd1b9827f9bca6e2dc3e767464c553d6b240939a1f93a33be5012a4a63bd42817bb5e37dfff8c8c112e77143ec
+  data.tar.gz: 899dd22a29b9393aa71bdf043f52cfbb72444519e1c2372154363d46ebd8ac86478ff2e85fb319dadc3b9be31d0dfa241a372503b9af3230e98aa5f5017367df

data/CHANGELOG.md

@@ -1,3 +1,13 @@
+## 0.7.0
+* Upgrade to v1.22 of the Kubernetes schema.
+* Add Sorbet type signatures to all DSL objects.
+* Add the missing `Apiextensions::V1::JSON` class (thanks Sorbet).
+* Handle so-called "inline" refs in schema definitions.
+  - The JSON schema format can contain refs that point to other files, which is what the `Ref` class handles.
+  - However, schemas can also contain objects described entirely within other objects. Both objects live in the same file. The `InlineRef` class was created to represent objects defined inside the same file as their parent.
+* Allow certain special fields to be blank.
+  - Necessary to fully support cert-manager.
+
 ## 0.6.1
 * Fix additional naming discrepancy in autoload manifests causing "API" to become "Api."
 

data/Gemfile

@@ -7,6 +7,12 @@ group :development, :test do
   gem 'rake'
 end
 
+group :development do
+  # lock to a specific version to prevent breaking CI when new versions come out
+  gem 'sorbet', '= 0.5.6433'
+  gem 'parlour', '~> 6.0'
+end
+
 group :test do
   gem 'rspec', '~> 3.0'
 end

data/Rakefile

@@ -21,10 +21,12 @@ task :generate do
   FileUtils.rm_rf('./lib/kube-dsl/entrypoint.rb')
   FileUtils.rm_rf('./lib/kube-dsl/dsl.rb')
   FileUtils.rm_rf('./lib/kube-dsl/dsl')
+  FileUtils.rm_rf('./sorbet/rbi/kube-dsl')
+
   FileUtils.mkdir_p('./lib/kube-dsl/dsl')
   FileUtils.mkdir_p('./vendor')
 
-  export_url = "https://github.com/instrumenta/kubernetes-json-schema/trunk/v#{KubeDSL::KUBERNETES_VERSION}-local"
+  export_url = "https://github.com/yannh/kubernetes-json-schema/trunk/v#{KubeDSL::KUBERNETES_VERSION}-local"
   local_schema_path = "vendor/kubernetes-json-schema/v#{KubeDSL::KUBERNETES_VERSION}-local"
 
   unless File.exist?(local_schema_path)
@@ -52,9 +54,95 @@ task :generate do
   )
 
   generator.generate_resource_files
+  generator.generate_rbi_files
   generator.generate_autoload_files
   generator.generate_entrypoint_file do |resource, ns|
     version = resource.ref.version || ''
     !version.include?('beta') && !version.include?('alpha')
   end
+
+  json_code_files = {
+    'lib/kube-dsl/dsl/apiextensions/v1/json.rb' => 'KubeDSL::DSL::Apiextensions::V1'
+  }
+
+  json_code_files.each do |path, namespace|
+    puts "Writing #{path}"
+
+    File.open(path, 'w+') do |f|
+      f.write(<<~RUBY)
+        # typed: strict
+
+        module #{namespace}
+          class JSON < ::KubeDSL::DSLObject
+            def serialize
+              @value
+            end
+
+            def value(val = nil)
+              if val
+                @value = val
+              end
+
+              @value
+            end
+
+            def kind_sym
+              :JSON
+            end
+          end
+        end
+      RUBY
+    end
+
+    autoload_file = "#{File.dirname(path)}.rb"
+    autoload_contents = File.read(autoload_file)
+    autoload_lines = autoload_contents.strip.split("\n")
+    autoloads = autoload_lines[1..-2]
+    autoload_path = path.sub(/\Alib\//, '').chomp('.rb')
+    autoloads << "  autoload :JSON, '#{autoload_path}'"
+    autoloads.sort!
+    autoload_lines[1..-2] = autoloads
+
+    puts "Writing #{autoload_file}"
+    File.write(autoload_file, autoload_lines.join("\n"))
+  end
+
+  json_rbi_files = {
+    'sorbet/rbi/kube-dsl/dsl/apiextensions/v1/json.rbi' => 'KubeDSL::DSL::Apiextensions::V1'
+  }
+
+  json_rbi_files.each do |path, namespace|
+    puts "Writing #{path}"
+
+    File.open(path, 'w+') do |f|
+      f.write(<<~RUBY)
+        # typed: strict
+
+        module #{namespace}
+          class JSON < ::KubeDSL::DSLObject
+            JSONType = T.type_alias do
+              T.any(
+                T::Array[T.any(String, Integer, Float, T::Boolean, T::Array[T.untyped])],
+                T::Hash[Symbol, T.any(String, Integer, Float, T::Boolean, T::Array[T.untyped], T::Hash[Symbol, T.untyped])]
+              )
+            end
+
+            sig { params(block: T.nilable(T.proc.void)).void }
+            def initialize(&block)
+              @value = T.let(@value, JSONType)
+            end
+
+            sig { returns(JSONType) }
+            def serialize; end
+
+            sig { returns(Symbol) }
+            def kind_sym; end
+
+            sig { params(val: T.nilable(JSONType)).returns(JSONType) }
+            def value(val = nil); end
+          end
+        end
+      RUBY
+    end
+  end
 end

data/kube-dsl.gemspec

@@ -11,7 +11,8 @@ Gem::Specification.new do |s|
   s.description = s.summary = 'A Ruby DSL for defining Kubernetes resources.'
 
   s.add_dependency 'dry-inflector', '~> 0.2'
+  s.add_dependency 'sorbet-runtime-stub', '~> 0.2'
 
   s.require_path = 'lib'
-  s.files = Dir['{lib,spec}/**/*', 'Gemfile', 'LICENSE', 'CHANGELOG.md', 'README.md', 'Rakefile', 'kube-dsl.gemspec']
+  s.files = Dir['{lib,spec,rbi}/**/*', 'Gemfile', 'LICENSE', 'CHANGELOG.md', 'README.md', 'Rakefile', 'kube-dsl.gemspec']
 end

data/lib/kube-dsl/allow_blank.rb

@@ -0,0 +1,9 @@
+module KubeDSL
+  class AllowBlank
+    attr_reader :value
+
+    def initialize(value)
+      @value = value
+    end
+  end
+end

data/lib/kube-dsl/array_field_res.rb

@@ -1,6 +1,8 @@
+# typed: true
 module KubeDSL
   class ArrayFieldRes
     include StringHelpers
+    include RbiHelpers
 
     attr_reader :name, :required, :elem_res
 
@@ -19,9 +21,20 @@ module KubeDSL
       ]
     end
 
+    def fields_to_rbi(inflector)
+      [
+        'T::Sig::WithoutRuntime.sig {',
+        '  params(',
+        '    elem_name: T.nilable(Symbol),',
+        "    block: T.nilable(T.proc.returns(#{rbi_type_for(ruby_type)}))",
+        "  ).returns(T::Array[#{rbi_type_for(ruby_type)}])",
+        '}',
+        "def #{plural_name(inflector)}(elem_name = nil, &block); end"
+      ]
+    end
+
     def validations(inflector)
       [].tap do |result|
-        ruby_type = [*elem_res.ref.ruby_namespace, elem_res.ref.kind].join('::')
         result << "validates :#{plural_name(inflector)}, array: { kind_of: #{ruby_type} }, presence: #{required? ? 'true' : 'false'}"
       end
     end
@@ -37,5 +50,9 @@ module KubeDSL
         underscore(inflector.singularize(name))
       )
     end
+
+    def ruby_type
+      @ruby_type ||= [*elem_res.ref.ruby_namespace, elem_res.ref.kind].join('::')
+    end
   end
 end

data/lib/kube-dsl/builder.rb

@@ -1,12 +1,12 @@
+# typed: false
+
 require 'json'
 
 module KubeDSL
   class Builder
-    include StringHelpers
-
     attr_reader :schema_dir, :output_dir, :autoload_prefix
     attr_reader :dsl_namespace, :entrypoint_namespace
-    attr_reader :inflector, :resolvers
+    attr_reader :inflector, :resolvers, :serialize_handlers
 
     def initialize(schema_dir:, output_dir:, autoload_prefix:, inflector:, dsl_namespace:, entrypoint_namespace:)
       @schema_dir = schema_dir
@@ -15,7 +15,9 @@ module KubeDSL
       @inflector = inflector
       @dsl_namespace = dsl_namespace
       @entrypoint_namespace = entrypoint_namespace
-      @resolvers ||= {}
+      @resolvers = {}
+      @serialize_handlers = []
+      @resources = nil
     end
 
     def register_resolver(*prefixes, &resolver)
@@ -24,6 +26,12 @@ module KubeDSL
       end
     end
 
+    def register_serialize_handler(namespace, version, kind, field, &block)
+      @serialize_handlers << SerializeHandler.new(
+        namespace, version, kind, field, &block
+      )
+    end
+
     def each_resource_file
       return to_enum(__method__) unless block_given?
 
@@ -33,25 +41,7 @@ module KubeDSL
     end
 
     def entrypoint(&block)
-      ''.tap do |ruby_code|
-        ruby_code << "module #{entrypoint_namespace.join('::')}::Entrypoint\n"
-
-        each_resource do |resource|
-          ns = resource.ref.ruby_namespace.join('::')
-          next if block && !block.call(resource, ns)
-
-          ruby_code << "  def #{underscore(resource.ref.kind)}(&block)\n"
-          ruby_code << "    ::#{ns}::#{resource.ref.kind}.new(&block)\n"
-          ruby_code << "  end\n\n"
-        end
-
-        ruby_code.strip!
-        ruby_code << "\nend\n"
-      end
-    end
-
-    def entrypoint_path
-      File.join(output_dir, File.dirname(autoload_prefix), 'entrypoint.rb')
+      EntrypointBuilder.new(self, &block)
     end
 
     def each_autoload_file(&block)
@@ -74,15 +64,15 @@ module KubeDSL
     end
 
     def parse_ref(ref_str)
-      Ref.new(ref_str, dsl_namespace, inflector, schema_dir, autoload_prefix)
+      Ref.new(ref_str, dsl_namespace, inflector, schema_dir, autoload_prefix, serialize_handlers)
     end
 
-    private
-
     def each_resource
       return to_enum(__method__) unless block_given?
 
-      resources.each do |res|
+      load_resources unless @resources
+
+      @resources.each do |res|
         # "External" resources are ones that live outside the current
         # schema, i.e. k8s resources like ObjectMeta that other
         # k8s-compatible schemas depend on.
@@ -95,9 +85,13 @@ module KubeDSL
       end
     end
 
-    def resources
+    private
+
+    def load_resources
+      @resources = []
+
       JSON.parse(File.read(start_path))['oneOf'].map do |entry|
-        resource_from_ref(resolve_ref(entry['$ref']))
+        @resources << resource_from_ref(resolve_ref(entry['$ref']))
       end
     end
 
@@ -179,15 +173,36 @@ module KubeDSL
             res.fields[name] = ArrayFieldRes.new(
               name, required, resource_from_ref(ref)
             )
+          elsif prop.dig('items', 'properties')
+            child_ref = InlineRef.new(name, prop['items'], res.ref, serialize_handlers)
+            child_res = resource_from_ref(child_ref)
+            @resources << child_res
+            res.fields[name] = ArrayFieldRes.new(name, required, child_res)
           else
+            types = if result = prop.dig('items', 'type')
+              Array(result)
+            elsif result = prop.dig('items', 'types')
+              Array(result)
+            else
+              ['string']
+            end
+
             res.fields[name] = FieldRes.new(
-              name, (prop.dig('items', 'types') || ['string']).first, required
+              name, types.first, required
             )
           end
 
-        when 'object' # this means key/value pairs
-          type = prop.dig('additionalProperties', 'format') || 'string'
-          res.fields[name] = KeyValueFieldRes.new(name, res, type, required)
+        when 'object'
+          if prop.include?('properties')
+            child_ref = InlineRef.new(name, prop, res.ref, serialize_handlers)
+            child_res = resource_from_ref(child_ref)
+            @resources << child_res
+            res.fields[name] = ObjectFieldRes.new(name, child_res)
+          else
+            # no sub-properties this means key/value pairs
+            type = prop.dig('additionalProperties', 'format') || 'string'
+            res.fields[name] = KeyValueFieldRes.new(name, res, type, required)
+          end
 
         when 'string', 'integer', 'number', 'boolean', 'date-time'
           enum = prop['enum']
@@ -201,6 +216,8 @@ module KubeDSL
           end
 
         else
+          return unless prop.include?('$ref')
+
           ref = resolve_ref(prop['$ref'])
 
           if ref.object?

data/lib/kube-dsl/default_field_res.rb

@@ -1,3 +1,4 @@
+# typed: true
 require 'json'
 
 module KubeDSL
@@ -16,6 +17,10 @@ module KubeDSL
       []
     end
 
+    def fields_to_rbi(_inflector)
+      []
+    end
+
     def validations(_inflector)
       []
     end

data/lib/kube-dsl/dsl/admissionregistration/v1/mutating_webhook.rb

@@ -1,47 +1,55 @@
-module KubeDSL::DSL::Admissionregistration::V1
-  class MutatingWebhook < ::KubeDSL::DSLObject
-    value_field :admission_review_versions
-    object_field(:client_config) { KubeDSL::DSL::Admissionregistration::V1::WebhookClientConfig.new }
-    value_field :failure_policy
-    value_field :match_policy
-    value_field :name
-    object_field(:namespace_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
-    object_field(:object_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
-    value_field :reinvocation_policy
-    array_field(:rule) { KubeDSL::DSL::Admissionregistration::V1::RuleWithOperations.new }
-    value_field :side_effects
-    value_field :timeout_seconds
+# typed: true
 
-    validates :admission_review_versions, field: { format: :string }, presence: false
-    validates :client_config, object: { kind_of: KubeDSL::DSL::Admissionregistration::V1::WebhookClientConfig }
-    validates :failure_policy, field: { format: :string }, presence: false
-    validates :match_policy, field: { format: :string }, presence: false
-    validates :name, field: { format: :string }, presence: false
-    validates :namespace_selector, object: { kind_of: KubeDSL::DSL::Meta::V1::LabelSelector }
-    validates :object_selector, object: { kind_of: KubeDSL::DSL::Meta::V1::LabelSelector }
-    validates :reinvocation_policy, field: { format: :string }, presence: false
-    validates :rules, array: { kind_of: KubeDSL::DSL::Admissionregistration::V1::RuleWithOperations }, presence: false
-    validates :side_effects, field: { format: :string }, presence: false
-    validates :timeout_seconds, field: { format: :integer }, presence: false
+module KubeDSL
+  module DSL
+    module Admissionregistration
+      module V1
+        class MutatingWebhook < ::KubeDSL::DSLObject
+          value_field :admission_review_versions
+          object_field(:client_config) { KubeDSL::DSL::Admissionregistration::V1::WebhookClientConfig.new }
+          value_field :failure_policy
+          value_field :match_policy
+          value_field :name
+          object_field(:namespace_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+          object_field(:object_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+          value_field :reinvocation_policy
+          array_field(:rule) { KubeDSL::DSL::Admissionregistration::V1::RuleWithOperations.new }
+          value_field :side_effects
+          value_field :timeout_seconds
 
-    def serialize
-      {}.tap do |result|
-        result[:admissionReviewVersions] = admission_review_versions
-        result[:clientConfig] = client_config.serialize
-        result[:failurePolicy] = failure_policy
-        result[:matchPolicy] = match_policy
-        result[:name] = name
-        result[:namespaceSelector] = namespace_selector.serialize
-        result[:objectSelector] = object_selector.serialize
-        result[:reinvocationPolicy] = reinvocation_policy
-        result[:rules] = rules.map(&:serialize)
-        result[:sideEffects] = side_effects
-        result[:timeoutSeconds] = timeout_seconds
-      end
-    end
+          validates :admission_review_versions, field: { format: :string }, presence: false
+          validates :client_config, object: { kind_of: KubeDSL::DSL::Admissionregistration::V1::WebhookClientConfig }
+          validates :failure_policy, field: { format: :string }, presence: false
+          validates :match_policy, field: { format: :string }, presence: false
+          validates :name, field: { format: :string }, presence: false
+          validates :namespace_selector, object: { kind_of: KubeDSL::DSL::Meta::V1::LabelSelector }
+          validates :object_selector, object: { kind_of: KubeDSL::DSL::Meta::V1::LabelSelector }
+          validates :reinvocation_policy, field: { format: :string }, presence: false
+          validates :rules, array: { kind_of: KubeDSL::DSL::Admissionregistration::V1::RuleWithOperations }, presence: false
+          validates :side_effects, field: { format: :string }, presence: false
+          validates :timeout_seconds, field: { format: :integer }, presence: false
 
-    def kind_sym
-      :mutating_webhook
+          def serialize
+            {}.tap do |result|
+              result[:admissionReviewVersions] = admission_review_versions
+              result[:clientConfig] = client_config.serialize
+              result[:failurePolicy] = failure_policy
+              result[:matchPolicy] = match_policy
+              result[:name] = name
+              result[:namespaceSelector] = namespace_selector.serialize
+              result[:objectSelector] = object_selector.serialize
+              result[:reinvocationPolicy] = reinvocation_policy
+              result[:rules] = rules.map(&:serialize)
+              result[:sideEffects] = side_effects
+              result[:timeoutSeconds] = timeout_seconds
+            end
+          end
+
+          def kind_sym
+            :mutating_webhook
+          end
+        end
+      end
     end
   end
-end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/mutating_webhook_configuration.rb

@@ -1,22 +1,30 @@
-module KubeDSL::DSL::Admissionregistration::V1
-  class MutatingWebhookConfiguration < ::KubeDSL::DSLObject
-    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
-    array_field(:webhook) { KubeDSL::DSL::Admissionregistration::V1::MutatingWebhook.new }
+# typed: true
 
-    validates :metadata, object: { kind_of: KubeDSL::DSL::Meta::V1::ObjectMeta }
-    validates :webhooks, array: { kind_of: KubeDSL::DSL::Admissionregistration::V1::MutatingWebhook }, presence: false
+module KubeDSL
+  module DSL
+    module Admissionregistration
+      module V1
+        class MutatingWebhookConfiguration < ::KubeDSL::DSLObject
+          object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
+          array_field(:webhook) { KubeDSL::DSL::Admissionregistration::V1::MutatingWebhook.new }
 
-    def serialize
-      {}.tap do |result|
-        result[:apiVersion] = "admissionregistration.k8s.io/v1"
-        result[:kind] = "MutatingWebhookConfiguration"
-        result[:metadata] = metadata.serialize
-        result[:webhooks] = webhooks.map(&:serialize)
-      end
-    end
+          validates :metadata, object: { kind_of: KubeDSL::DSL::Meta::V1::ObjectMeta }
+          validates :webhooks, array: { kind_of: KubeDSL::DSL::Admissionregistration::V1::MutatingWebhook }, presence: false
 
-    def kind_sym
-      :mutating_webhook_configuration
+          def serialize
+            {}.tap do |result|
+              result[:apiVersion] = "admissionregistration.k8s.io/v1"
+              result[:kind] = "MutatingWebhookConfiguration"
+              result[:metadata] = metadata.serialize
+              result[:webhooks] = webhooks.map(&:serialize)
+            end
+          end
+
+          def kind_sym
+            :mutating_webhook_configuration
+          end
+        end
+      end
     end
   end
-end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/mutating_webhook_configuration_list.rb

@@ -1,22 +1,30 @@
-module KubeDSL::DSL::Admissionregistration::V1
-  class MutatingWebhookConfigurationList < ::KubeDSL::DSLObject
-    array_field(:item) { KubeDSL::DSL::Admissionregistration::V1::MutatingWebhookConfiguration.new }
-    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ListMeta.new }
+# typed: true
 
-    validates :items, array: { kind_of: KubeDSL::DSL::Admissionregistration::V1::MutatingWebhookConfiguration }, presence: false
-    validates :metadata, object: { kind_of: KubeDSL::DSL::Meta::V1::ListMeta }
+module KubeDSL
+  module DSL
+    module Admissionregistration
+      module V1
+        class MutatingWebhookConfigurationList < ::KubeDSL::DSLObject
+          array_field(:item) { KubeDSL::DSL::Admissionregistration::V1::MutatingWebhookConfiguration.new }
+          object_field(:metadata) { KubeDSL::DSL::Meta::V1::ListMeta.new }
 
-    def serialize
-      {}.tap do |result|
-        result[:apiVersion] = "admissionregistration.k8s.io/v1"
-        result[:items] = items.map(&:serialize)
-        result[:kind] = "MutatingWebhookConfigurationList"
-        result[:metadata] = metadata.serialize
-      end
-    end
+          validates :items, array: { kind_of: KubeDSL::DSL::Admissionregistration::V1::MutatingWebhookConfiguration }, presence: false
+          validates :metadata, object: { kind_of: KubeDSL::DSL::Meta::V1::ListMeta }
 
-    def kind_sym
-      :mutating_webhook_configuration_list
+          def serialize
+            {}.tap do |result|
+              result[:apiVersion] = "admissionregistration.k8s.io/v1"
+              result[:items] = items.map(&:serialize)
+              result[:kind] = "MutatingWebhookConfigurationList"
+              result[:metadata] = metadata.serialize
+            end
+          end
+
+          def kind_sym
+            :mutating_webhook_configuration_list
+          end
+        end
+      end
     end
   end
-end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/rule_with_operations.rb

@@ -1,29 +1,37 @@
-module KubeDSL::DSL::Admissionregistration::V1
-  class RuleWithOperations < ::KubeDSL::DSLObject
-    value_field :api_groups
-    value_field :api_versions
-    value_field :operations
-    value_field :resources
-    value_field :scope
+# typed: true
 
-    validates :api_groups, field: { format: :string }, presence: false
-    validates :api_versions, field: { format: :string }, presence: false
-    validates :operations, field: { format: :string }, presence: false
-    validates :resources, field: { format: :string }, presence: false
-    validates :scope, field: { format: :string }, presence: false
+module KubeDSL
+  module DSL
+    module Admissionregistration
+      module V1
+        class RuleWithOperations < ::KubeDSL::DSLObject
+          value_field :api_groups
+          value_field :api_versions
+          value_field :operations
+          value_field :resources
+          value_field :scope
 
-    def serialize
-      {}.tap do |result|
-        result[:apiGroups] = api_groups
-        result[:apiVersions] = api_versions
-        result[:operations] = operations
-        result[:resources] = resources
-        result[:scope] = scope
-      end
-    end
+          validates :api_groups, field: { format: :string }, presence: false
+          validates :api_versions, field: { format: :string }, presence: false
+          validates :operations, field: { format: :string }, presence: false
+          validates :resources, field: { format: :string }, presence: false
+          validates :scope, field: { format: :string }, presence: false
 
-    def kind_sym
-      :rule_with_operations
+          def serialize
+            {}.tap do |result|
+              result[:apiGroups] = api_groups
+              result[:apiVersions] = api_versions
+              result[:operations] = operations
+              result[:resources] = resources
+              result[:scope] = scope
+            end
+          end
+
+          def kind_sym
+            :rule_with_operations
+          end
+        end
+      end
     end
   end
-end
+end