kube_cluster 0.4.3 → 0.4.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 29db1c6f54de40e913ebbf0698353380446c782e040e7eed7cefe2953f77bcb6
-  data.tar.gz: 346218c60144c14a826e2a96f622aefdd099f1ac86d339a25d7d331f27ca799d
+  metadata.gz: 26a1c3d7e082e87ebabd82669ff45af70a95d2001e6db041f9b45feaa635148c
+  data.tar.gz: d86c8e0afa46dfdd6cd0910d3e6ae2f30d8456f491a167b16b471c13cdb7ab70
 SHA512:
-  metadata.gz: c1a5e8987a539b0d47395ee463cbfce25dec2694898ffecdab4b238d1f4d14e85946bf1c39907bd63932973f80cdc79d6034ae4bac540a3ffcaa196c33811436
-  data.tar.gz: b5ce0e7cb7fe198569bf2b15d265785ad97c2e512ec5a2ecbb92eabea8b994be621f486ffd9bdf8b6843e861a672518420721cb19e02463153548632a4b86a9b
+  metadata.gz: 420a7a18d15527663f380be8760f6aab880c41823ce1440a8b32e8beb021fa9c41b7f0ee916fb877ced06b92a363d2af54833e7756fce49be312b616cf5bddf1
+  data.tar.gz: bf5ca946aebe6c5ec7f540ae00ab4028df2dad02af5a2ea81187dc7453d8dd6b6cf1b8f06dbaf2673ca5116df5b833d0e345ed95d8db59e5e1ae6968973168b1

data/.github/workflows/gh-pages.yml

@@ -0,0 +1,57 @@
+name: Github Pages
+
+on:
+  push:
+    branches:
+      - main
+
+# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages:
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+# Allow one concurrent deployment:
+concurrency:
+  group: "pages"
+  cancel-in-progress: true
+
+env:
+  BUNDLE_WITH: maintenance
+
+jobs:
+  generate:
+    runs-on: ubuntu-latest
+    
+    steps:
+    - uses: actions/checkout@v6
+
+    - uses: ruby/setup-ruby@v1
+      with:
+        ruby-version: ruby
+        bundler-cache: true
+    
+    - name: Installing packages
+      run: sudo apt-get install wget
+    
+    - name: Generate documentation
+      timeout-minutes: 5
+      run: bundle exec bake utopia:project:static --force no
+    
+    - name: Upload documentation artifact
+      uses: actions/upload-pages-artifact@v4
+      with:
+        path: docs
+  
+  deploy:
+    runs-on: ubuntu-latest
+    
+    environment:
+      name: github-pages
+      url: ${{steps.deployment.outputs.page_url}}
+    
+    needs: generate
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4

data/.github/workflows/test.yaml

@@ -0,0 +1,22 @@
+name: Test
+
+on: [push, pull_request]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.3"
+          bundler-cache: true
+
+      - run: sudo apt-get install -y ripgrep
+
+      - run: bundle exec scampi

data/Gemfile

@@ -3,3 +3,10 @@
 source "https://rubygems.org"
 
 gemspec
+
+group :maintenance, optional: true do
+	gem "utopia-project"
+	gem "bake-gem"
+	gem "bake-modernize"
+	gem "bake-releases"
+end

data/Gemfile.lock

@@ -1,26 +1,106 @@
 PATH
   remote: .
   specs:
-    kube_cluster (0.4.3)
+    kube_cluster (0.4.5)
       kube_kubectl (~> 2.0.9)
-      kube_schema (~> 1.4.1)
+      kube_schema (~> 1.4.3)
       scampi (~> 0.1)
 
 GEM
   remote: https://rubygems.org/
   specs:
     ast (2.4.3)
+    async (2.39.0)
+      console (~> 1.29)
+      fiber-annotation
+      io-event (~> 1.11)
+      metrics (~> 0.12)
+      traces (~> 0.18)
+    async-container (0.34.5)
+      async (~> 2.22)
+    async-http (0.95.0)
+      async (>= 2.10.2)
+      async-pool (~> 0.11)
+      io-endpoint (~> 0.14)
+      io-stream (~> 0.6)
+      metrics (~> 0.12)
+      protocol-http (~> 0.62)
+      protocol-http1 (~> 0.39)
+      protocol-http2 (~> 0.26)
+      protocol-url (~> 0.2)
+      traces (~> 0.10)
+    async-http-cache (0.4.6)
+      async-http (~> 0.56)
+    async-ollama (0.10.3)
+      async
+      async-rest
+    async-pool (0.11.2)
+      async (>= 2.0)
+    async-rest (0.20.0)
+      async-http (~> 0.42)
+      protocol-url (~> 0.2)
+    async-service (0.22.0)
+      async
+      async-container (~> 0.34)
+      string-format (~> 0.2)
+    async-utilization (0.3.2)
+      console (~> 1.0)
+    bake (0.24.1)
+      bigdecimal
+      samovar (~> 2.1)
+    bake-gem (0.13.1)
+      console (~> 1.25)
+    bake-modernize (0.54.1)
+      async-http
+      async-ollama (~> 0.10)
+      bake
+      build-files (~> 1.6)
+      markly (~> 0.13)
+      rugged
+    bake-releases (0.5.4)
+      bake (~> 0.21)
+      markly (~> 0.8)
     bigdecimal (4.1.2)
+    build-files (1.10.2)
     colorize (1.1.0)
     colorize-extended (0.1.0)
       colorize (~> 1.1)
+    concurrent-ruby (1.3.6)
+    console (1.34.3)
+      fiber-annotation
+      fiber-local (~> 1.1)
+      json
     date (3.5.1)
     debug (1.11.1)
       irb (~> 1.10)
       reline (>= 0.3.8)
+    decode (0.27.0)
+      prism
+      rbs
     erb (6.0.4)
+    falcon (0.55.3)
+      async
+      async-container (~> 0.20)
+      async-http (~> 0.75)
+      async-http-cache (~> 0.4)
+      async-service (~> 0.19)
+      async-utilization (~> 0.3)
+      bundler
+      localhost (~> 1.1)
+      openssl (>= 3.0)
+      protocol-http (~> 0.31)
+      protocol-rack (~> 0.7)
+      samovar (~> 2.3)
+    fiber-annotation (0.2.0)
+    fiber-local (1.1.0)
+      fiber-storage
+    fiber-storage (1.0.1)
     hana (1.3.7)
+    http-accept (2.2.1)
     io-console (0.8.2)
+    io-endpoint (0.17.2)
+    io-event (1.15.1)
+    io-stream (0.13.0)
     irb (1.18.0)
       pp (>= 0.6.0)
       prism (>= 1.3.0)
@@ -38,11 +118,38 @@ GEM
       rubyshell (~> 1.5)
       shellwords (~> 0.2.2)
       string_builder (~> 1.2.2)
-    kube_schema (1.4.1)
+    kube_schema (1.4.3)
       json_schemer (~> 2.5.0)
       rubyshell (~> 1.5.0)
     language_server-protocol (3.17.0.5)
     lint_roller (1.1.0)
+    localhost (1.7.0)
+    logger (1.7.0)
+    mail (2.9.0)
+      logger
+      mini_mime (>= 0.1.1)
+      net-imap
+      net-pop
+      net-smtp
+    mapping (1.1.3)
+    markly (0.16.0)
+    metrics (0.15.0)
+    mime-types (3.7.0)
+      logger
+      mime-types-data (~> 3.2025, >= 3.2025.0507)
+    mime-types-data (3.2026.0414)
+    mini_mime (1.1.5)
+    msgpack (1.8.0)
+    net-imap (0.6.4)
+      date
+      net-protocol
+    net-pop (0.1.2)
+      net-protocol
+    net-protocol (0.2.2)
+      timeout
+    net-smtp (0.5.1)
+      net-protocol
+    openssl (4.0.1)
     parallel (2.1.0)
     parser (3.3.11.1)
       ast (~> 2.4.1)
@@ -51,12 +158,33 @@ GEM
       prettyprint
     prettyprint (0.2.0)
     prism (1.9.0)
+    protocol-hpack (1.5.1)
+    protocol-http (0.62.2)
+    protocol-http1 (0.39.0)
+      protocol-http (~> 0.62)
+    protocol-http2 (0.26.0)
+      protocol-hpack (~> 1.4)
+      protocol-http (~> 0.62)
+    protocol-rack (0.22.1)
+      io-stream (>= 0.10)
+      protocol-http (~> 0.58)
+      rack (>= 1.0)
+    protocol-url (0.4.0)
     psych (5.3.1)
       date
       stringio
     racc (1.8.1)
+    rack (3.2.6)
+    rackula (1.4.1)
+      falcon (~> 0.46)
+      samovar (~> 2.1)
+      variant
     rainbow (3.1.1)
     rake (13.4.2)
+    rbs (4.0.2)
+      logger
+      prism (>= 1.6.0)
+      tsort
     rdoc (7.2.0)
       erb
       psych (>= 4.0.0)
@@ -80,25 +208,63 @@ GEM
       prism (~> 1.7)
     ruby-progressbar (1.13.0)
     rubyshell (1.5.0)
+    rugged (1.9.0)
+    samovar (2.4.1)
+      console (~> 1.0)
+      mapping (~> 1.0)
     scampi (0.1.7)
       colorize-extended
     shellwords (0.2.2)
     simpleidn (0.2.3)
+    string-format (0.2.0)
     string_builder (1.2.4)
     stringio (3.2.0)
+    thread-local (1.1.0)
+    timeout (0.6.1)
+    traces (0.18.2)
     tsort (0.2.0)
     unicode-display_width (3.2.0)
       unicode-emoji (~> 4.1)
     unicode-emoji (4.2.0)
+    utopia (2.32.1)
+      bake (~> 0.20)
+      concurrent-ruby (~> 1.2)
+      console (~> 1.24)
+      http-accept (~> 2.1)
+      irb
+      mail (~> 2.6)
+      mime-types (~> 3.0)
+      msgpack
+      net-smtp
+      protocol-url (~> 0.4)
+      rack (~> 3.0)
+      samovar (~> 2.1)
+      traces (~> 0.10)
+      variant (~> 0.1)
+      xrb (~> 0.4)
+    utopia-project (0.40.0)
+      decode (~> 0.26)
+      falcon
+      markly (~> 0.15)
+      rackula (~> 1.3)
+      thread-local
+      utopia (~> 2.32)
+    variant (0.1.1)
+      thread-local
+    xrb (0.11.2)
 
 PLATFORMS
   ruby
   x86_64-linux
 
 DEPENDENCIES
+  bake-gem
+  bake-modernize
+  bake-releases
   kube_cluster!
   rake (~> 13.0)
   rubocop (~> 1.21)
+  utopia-project
 
 BUNDLED WITH
    2.6.9

data/guides/crds/readme.md

@@ -0,0 +1,26 @@
+# Custom Resource Definitions
+
+This guide covers registering CRDs from Helm charts as first-class resources.
+
+## Registering CRDs
+
+```ruby
+chart = Kube::Helm::Repo.new("jetstack", url: "https://charts.jetstack.io")
+  .fetch("cert-manager", version: "1.17.2")
+
+chart.crds.each { |crd|
+  s = crd.to_json_schema
+  Kube::Schema.register(s[:kind], schema: s[:schema], api_version: s[:api_version])
+}
+```
+
+## Using Registered CRDs
+
+Once registered, CRDs work like any built-in resource:
+
+```ruby
+issuer = Kube::Cluster["ClusterIssuer"].new {
+  metadata.name = "letsencrypt"
+  spec.acme.server = "https://acme-v02.api.letsencrypt.org/directory"
+}
+```

data/guides/dirty-tracking/readme.md

@@ -0,0 +1,25 @@
+# Dirty Tracking
+
+This guide covers dirty tracking and patching for resources connected to a live cluster.
+
+## Connecting to a Cluster
+
+```ruby
+cluster = Kube::Cluster.connect(kubeconfig: "~/.kube/config")
+```
+
+## Creating and Patching Resources
+
+```ruby
+config = Kube::Cluster["ConfigMap"].new(cluster:) {
+  metadata.name = "app-config"
+  self.data = { version: "1" }
+}
+
+config.apply           # creates on cluster
+config.data.version = "2"
+config.changed?        # => true
+config.patch           # sends only { data: { version: "2" } }
+```
+
+Changes are tracked automatically. When you call `patch`, only the modified fields are sent to the cluster.

data/guides/getting-started/readme.md

@@ -0,0 +1,36 @@
+# Getting Started
+
+This guide walks you through installing kube_cluster and defining your first Kubernetes resource in Ruby.
+
+## Install
+
+```ruby
+gem "kube_cluster", "~> 0.3"
+```
+
+## Define a Resource
+
+```ruby
+pod = Kube::Cluster["Pod"].new {
+  metadata.name = "redis"
+  spec.containers = [{ name: "redis", image: "redis:8" }]
+}
+
+puts pod.to_yaml
+```
+
+## Subclass for Reuse
+
+```ruby
+class RedisPod < Kube::Cluster["Pod"]
+  def initialize(&block)
+    super {
+      metadata.name = "redis"
+      spec.containers = [{ name: "redis", image: "redis:8", ports: [{ containerPort: 6379 }] }]
+    }
+    instance_exec(&block) if block_given?
+  end
+end
+
+puts RedisPod.new { metadata.namespace = "production" }.to_yaml
+```

data/guides/helm-charts/readme.md

@@ -0,0 +1,16 @@
+# Helm Charts
+
+This guide covers loading Helm charts as kube_cluster manifests.
+
+## Loading a Chart
+
+```ruby
+manifest = Kube::Helm::Repo
+  .new("bitnami", url: "https://charts.bitnami.com/bitnami")
+  .fetch("nginx", version: "18.1.0")
+  .apply_values("replicaCount" => 3)
+
+puts manifest.to_yaml
+```
+
+Helm charts are fetched, templated, and returned as standard kube_cluster manifests. You can then apply middleware, modify resources, or deploy them.

data/guides/links.yaml

@@ -0,0 +1,12 @@
+getting-started:
+  order: 1
+resources:
+  order: 2
+middleware:
+  order: 3
+dirty-tracking:
+  order: 4
+helm-charts:
+  order: 5
+crds:
+  order: 6

data/guides/middleware/readme.md

@@ -0,0 +1,49 @@
+# Middleware
+
+This guide covers the middleware stack that transforms a single Deployment declaration into a fully-configured stack.
+
+## The Middleware Stack
+
+```ruby
+manifest = Kube::Cluster::Manifest.new(
+  Kube::Cluster["Deployment"].new {
+    metadata.name = "web"
+    metadata.labels = {
+      "app.kubernetes.io/expose": "app.example.com",
+      "app.kubernetes.io/autoscale": "2-10",
+      "app.kubernetes.io/size": "small"
+    }
+    spec.selector.matchLabels = { app: "web" }
+    spec.template.spec.containers = [
+      { name: "web", image: "nginx", ports: [{ name: "http", containerPort: 8080 }] }
+    ]
+  }
+)
+
+Kube::Cluster::Middleware::Stack.new {
+  use Middleware::ServiceForDeployment
+  use Middleware::IngressForService
+  use Middleware::HPAForDeployment
+  use Middleware::Namespace, "production"
+  use Middleware::Labels, managed_by: "kube_cluster"
+  use Middleware::ResourcePreset
+  use Middleware::SecurityContext
+  use Middleware::PodAntiAffinity
+}.call(manifest)
+
+puts manifest.to_yaml  # => Deployment, Service, Ingress, HPA -- all configured
+```
+
+## Available Middleware
+
+| Middleware | Effect |
+|---|---|
+| `Namespace` | Sets `metadata.namespace` on all resources |
+| `Labels` | Merges standard Kubernetes labels |
+| `Annotations` | Merges annotations |
+| `ResourcePreset` | Injects CPU/memory from `app.kubernetes.io/size` (nano to 2xlarge) |
+| `SecurityContext` | Injects restricted/baseline security contexts |
+| `PodAntiAffinity` | Spreads pods across nodes |
+| `ServiceForDeployment` | Generates Service from named container ports |
+| `IngressForService` | Generates Ingress from `app.kubernetes.io/expose` label |
+| `HPAForDeployment` | Generates HPA from `app.kubernetes.io/autoscale` label |

data/guides/resources/readme.md

@@ -0,0 +1,50 @@
+# Resources
+
+This guide covers defining and working with Kubernetes resources as Ruby objects.
+
+## Defining Resources
+
+Every Kubernetes kind is accessible by name:
+
+```ruby
+pod = Kube::Cluster["Pod"].new {
+  metadata.name = "redis"
+  spec.containers = [{ name: "redis", image: "redis:8" }]
+}
+```
+
+## Subclassing
+
+Create reusable resource templates by subclassing:
+
+```ruby
+class RedisPod < Kube::Cluster["Pod"]
+  def initialize(&block)
+    super {
+      metadata.name = "redis"
+      spec.containers = [{ name: "redis", image: "redis:8", ports: [{ containerPort: 6379 }] }]
+    }
+    instance_exec(&block) if block_given?
+  end
+end
+
+puts RedisPod.new { metadata.namespace = "production" }.to_yaml
+```
+
+## Manifests
+
+Group resources into multi-document YAML using manifests:
+
+```ruby
+manifest = Kube::Cluster::Manifest.new(
+  Kube::Cluster["Deployment"].new {
+    metadata.name = "web"
+    spec.selector.matchLabels = { app: "web" }
+    spec.template.spec.containers = [
+      { name: "web", image: "nginx", ports: [{ name: "http", containerPort: 8080 }] }
+    ]
+  }
+)
+
+puts manifest.to_yaml
+```

data/kube_cluster.gemspec

@@ -20,7 +20,7 @@ Gem::Specification.new do |spec|
 
   spec.metadata["homepage_uri"] = spec.homepage
   spec.metadata["source_code_uri"] = spec.homepage
-  spec.metadata["documentation_uri"] = spec.homepage
+  spec.metadata["documentation_uri"] = "https://general-intelligence-systems.github.io/kube_cluster/"
   spec.metadata["rubygems_mfa_required"] = "true"
 
   spec.files = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
@@ -33,6 +33,6 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "rake", "~> 13.0"
   spec.add_development_dependency "rubocop", "~> 1.21"
 
-  spec.add_dependency "kube_schema", "~> 1.4.1"
+  spec.add_dependency "kube_schema", "~> 1.4.3"
   spec.add_dependency "kube_kubectl", "~> 2.0.9"
 end

data/lib/kube/cluster/resource.rb

@@ -51,7 +51,7 @@ module Kube
       end
 
       # Build a new resource of the same schema subclass from a hash.
-      def rebuild(hash)
+      def rebuild(hash = {})
         self.class.new(hash)
       end
 

data/lib/kube/cluster/version.rb

@@ -2,6 +2,6 @@
 
 module Kube
   module Cluster
-    VERSION = "0.4.3"
+    VERSION = "0.4.5"
   end
 end

data/readme.md

@@ -0,0 +1,27 @@
+# kube_cluster
+
+Ruby-native Kubernetes. Define, transform, and deploy cluster resources with pure Ruby.
+
+## Usage
+
+Please see the [project documentation](https://general-intelligence-systems.github.io/kube_cluster/) for more details.
+
+  - [Getting Started](https://general-intelligence-systems.github.io/kube_cluster/guides/getting-started/index) - This guide walks you through installing kube_cluster and defining your first Kubernetes resource in Ruby.
+
+  - [Resources](https://general-intelligence-systems.github.io/kube_cluster/guides/resources/index) - This guide covers defining and working with Kubernetes resources as Ruby objects.
+
+  - [Middleware](https://general-intelligence-systems.github.io/kube_cluster/guides/middleware/index) - This guide covers the middleware stack that transforms a single Deployment declaration into a fully-configured stack.
+
+  - [Dirty Tracking](https://general-intelligence-systems.github.io/kube_cluster/guides/dirty-tracking/index) - This guide covers dirty tracking and patching for resources connected to a live cluster.
+
+  - [Helm Charts](https://general-intelligence-systems.github.io/kube_cluster/guides/helm-charts/index) - This guide covers loading Helm charts as kube_cluster manifests.
+
+  - [Custom Resource Definitions](https://general-intelligence-systems.github.io/kube_cluster/guides/crds/index) - This guide covers registering CRDs from Helm charts as first-class resources.
+
+## See Also
+
+- [Examples directory](https://github.com/general-intelligence-systems/kube_cluster/tree/main/examples)
+
+## License
+
+Apache-2.0

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kube_cluster
 version: !ruby/object:Gem::Version
-  version: 0.4.3
+  version: 0.4.5
 platform: ruby
 authors:
 - Nathan K
@@ -57,14 +57,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.4.1
+        version: 1.4.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.4.1
+        version: 1.4.3
 - !ruby/object:Gem::Dependency
   name: kube_kubectl
   requirement: !ruby/object:Gem::Requirement
@@ -90,14 +90,15 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".envrc"
+- ".github/workflows/gh-pages.yml"
 - ".github/workflows/release.yml"
 - ".github/workflows/tag-gem-version-bump.yml"
+- ".github/workflows/test.yaml"
 - ".gitignore"
 - ".rubocop.yml"
 - Gemfile
 - Gemfile.lock
 - LICENSE
-- README.md
 - Rakefile
 - bin/console
 - bin/dev
@@ -163,6 +164,13 @@ files:
 - examples/README.md
 - flake.lock
 - flake.nix
+- guides/crds/readme.md
+- guides/dirty-tracking/readme.md
+- guides/getting-started/readme.md
+- guides/helm-charts/readme.md
+- guides/links.yaml
+- guides/middleware/readme.md
+- guides/resources/readme.md
 - kube_cluster.gemspec
 - lib/kube/cli/cluster.rb
 - lib/kube/cluster.rb
@@ -192,13 +200,14 @@ files:
 - lib/kube/helm/chart.rb
 - lib/kube/helm/endpoint.rb
 - lib/kube/helm/repo.rb
+- readme.md
 homepage: https://github.com/general-intelligence-systems/kube_cluster
 licenses:
 - Apache-2.0
 metadata:
   homepage_uri: https://github.com/general-intelligence-systems/kube_cluster
   source_code_uri: https://github.com/general-intelligence-systems/kube_cluster
-  documentation_uri: https://github.com/general-intelligence-systems/kube_cluster
+  documentation_uri: https://general-intelligence-systems.github.io/kube_cluster/
   rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:

data/README.md

@@ -1,138 +0,0 @@
-# kube_cluster
-
-Ruby-native Kubernetes. Define, transform, and deploy cluster resources with pure Ruby.
-
-## Install
-
-```ruby
-gem "kube_cluster", "~> 0.3"
-```
-
-## Examples
-
-### Define a resource
-
-```ruby
-pod = Kube::Cluster["Pod"].new {
-  metadata.name = "redis"
-  spec.containers = [{ name: "redis", image: "redis:8" }]
-}
-
-puts pod.to_yaml
-```
-
-### Subclass for reuse
-
-```ruby
-class RedisPod < Kube::Cluster["Pod"]
-  def initialize(&block)
-    super {
-      metadata.name = "redis"
-      spec.containers = [{ name: "redis", image: "redis:8", ports: [{ containerPort: 6379 }] }]
-    }
-    instance_exec(&block) if block_given?
-  end
-end
-
-puts RedisPod.new { metadata.namespace = "production" }.to_yaml
-```
-
-### Manifest + middleware
-
-One Deployment declaration becomes a fully-configured stack:
-
-```ruby
-manifest = Kube::Cluster::Manifest.new(
-  Kube::Cluster["Deployment"].new {
-    metadata.name = "web"
-    metadata.labels = {
-      "app.kubernetes.io/expose": "app.example.com",
-      "app.kubernetes.io/autoscale": "2-10",
-      "app.kubernetes.io/size": "small"
-    }
-    spec.selector.matchLabels = { app: "web" }
-    spec.template.spec.containers = [
-      { name: "web", image: "nginx", ports: [{ name: "http", containerPort: 8080 }] }
-    ]
-  }
-)
-
-Kube::Cluster::Middleware::Stack.new {
-  use Middleware::ServiceForDeployment
-  use Middleware::IngressForService
-  use Middleware::HPAForDeployment
-  use Middleware::Namespace, "production"
-  use Middleware::Labels, managed_by: "kube_cluster"
-  use Middleware::ResourcePreset
-  use Middleware::SecurityContext
-  use Middleware::PodAntiAffinity
-}.call(manifest)
-
-puts manifest.to_yaml  # => Deployment, Service, Ingress, HPA — all configured
-```
-
-### Dirty tracking + patching
-
-```ruby
-cluster = Kube::Cluster.connect(kubeconfig: "~/.kube/config")
-
-config = Kube::Cluster["ConfigMap"].new(cluster:) {
-  metadata.name = "app-config"
-  self.data = { version: "1" }
-}
-
-config.apply           # creates on cluster
-config.data.version = "2"
-config.changed?        # => true
-config.patch           # sends only { data: { version: "2" } }
-```
-
-### Helm charts as manifests
-
-```ruby
-manifest = Kube::Helm::Repo
-  .new("bitnami", url: "https://charts.bitnami.com/bitnami")
-  .fetch("nginx", version: "18.1.0")
-  .apply_values("replicaCount" => 3)
-
-puts manifest.to_yaml
-```
-
-### Register CRDs as first-class resources
-
-```ruby
-chart = Kube::Helm::Repo.new("jetstack", url: "https://charts.jetstack.io")
-  .fetch("cert-manager", version: "1.17.2")
-
-chart.crds.each { |crd|
-  s = crd.to_json_schema
-  Kube::Schema.register(s[:kind], schema: s[:schema], api_version: s[:api_version])
-}
-
-issuer = Kube::Cluster["ClusterIssuer"].new {
-  metadata.name = "letsencrypt"
-  spec.acme.server = "https://acme-v02.api.letsencrypt.org/directory"
-}
-```
-
-## Middleware
-
-| Middleware | Effect |
-|---|---|
-| `Namespace` | Sets `metadata.namespace` on all resources |
-| `Labels` | Merges standard Kubernetes labels |
-| `Annotations` | Merges annotations |
-| `ResourcePreset` | Injects CPU/memory from `app.kubernetes.io/size` (nano → 2xlarge) |
-| `SecurityContext` | Injects restricted/baseline security contexts |
-| `PodAntiAffinity` | Spreads pods across nodes |
-| `ServiceForDeployment` | Generates Service from named container ports |
-| `IngressForService` | Generates Ingress from `app.kubernetes.io/expose` label |
-| `HPAForDeployment` | Generates HPA from `app.kubernetes.io/autoscale` label |
-
-## More examples
-
-See the [`examples/`](examples/) directory for complete runnable projects.
-
-## License
-
-Apache-2.0