kube_cluster 0.7.0 → 0.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0f1c23db70574ae658780a8fcdcaefa84a23b917f206cce85749c84739ccd8c1
-  data.tar.gz: bd673c8ab74f4a2c6c046d27e40994cd7a819ad6e552b5a98e14fc1974f52bcc
+  metadata.gz: '09a4ece33b5d85dc6b05a89a322f2dcb5521b9ff50794b83b1d9603cc933b96b'
+  data.tar.gz: 97e408aca7876972b6c15f83b96c8889df81e7d86af98c7586c00ebbcdad9ad3
 SHA512:
-  metadata.gz: 49d328773bd999a1270386fec416f6a4afa0aa88d8fe6fe51e42af84e134154ac80b0220426c7be1b45e534ab2c164dc5ff22a9c0208f2d623c67aaba1be621e
-  data.tar.gz: fe000f50ed0f0b55a2b4efedc4fbedbf0bfcbf61039b64dd8584384cd0cf317d31e8b8db2d1bb79ae1b46dffcd6165ce27835d57cd5a9b86fbabdf976675dd21
+  metadata.gz: 1a86af7b79ec182074ee9ec96eefbe15a30abbfce3d4bbfce60290fc0e6fee81de0bf4d665b7851cd24ae8701e3b29149776883ea8e81cd1f2fd1fc7bd61e228
+  data.tar.gz: 6ccb1f6c68c6f91b8d261f8babb3244d476d73f60e8bbe992e50215f22d165950dc8afd730c5f2a95a11905f482f82c5f3ba32b0fd6e1ffabbd565e91501ed92

data/Gemfile.lock

@@ -1,7 +1,8 @@
 PATH
   remote: .
   specs:
-    kube_cluster (0.7.0)
+    kube_cluster (0.9.0)
+      activesupport (~> 8.0)
       kube_kubectl (~> 2.0)
       kube_schema (~> 1.5)
       scampi (~> 0.1)
@@ -9,6 +10,19 @@ PATH
 GEM
   remote: https://rubygems.org/
   specs:
+    activesupport (8.1.3)
+      base64
+      bigdecimal
+      concurrent-ruby (~> 1.0, >= 1.3.1)
+      connection_pool (>= 2.2.5)
+      drb
+      i18n (>= 1.6, < 2)
+      json
+      logger (>= 1.4.2)
+      minitest (>= 5.1)
+      securerandom (>= 0.3)
+      tzinfo (~> 2.0, >= 2.0.5)
+      uri (>= 0.13.1)
     ast (2.4.3)
     async (2.39.0)
       console (~> 1.29)
@@ -60,12 +74,14 @@ GEM
     bake-releases (0.5.4)
       bake (~> 0.21)
       markly (~> 0.8)
+    base64 (0.3.0)
     bigdecimal (4.1.2)
     build-files (1.10.2)
     colorize (1.1.0)
     colorize-extended (0.1.0)
       colorize (~> 1.1)
     concurrent-ruby (1.3.6)
+    connection_pool (3.0.2)
     console (1.34.3)
       fiber-annotation
       fiber-local (~> 1.1)
@@ -77,6 +93,7 @@ GEM
     decode (0.27.0)
       prism
       rbs
+    drb (2.2.3)
     erb (6.0.4)
     falcon (0.55.3)
       async
@@ -97,6 +114,8 @@ GEM
     fiber-storage (1.0.1)
     hana (1.3.7)
     http-accept (2.2.1)
+    i18n (1.14.8)
+      concurrent-ruby (~> 1.0)
     io-console (0.8.2)
     io-endpoint (0.17.2)
     io-event (1.16.0)
@@ -140,6 +159,9 @@ GEM
       mime-types-data (~> 3.2025, >= 3.2025.0507)
     mime-types-data (3.2026.0414)
     mini_mime (1.1.5)
+    minitest (6.0.6)
+      drb (~> 2.0)
+      prism (~> 1.5)
     msgpack (1.8.0)
     net-imap (0.6.4)
       date
@@ -215,6 +237,7 @@ GEM
       mapping (~> 1.0)
     scampi (0.1.7)
       colorize-extended
+    securerandom (0.4.1)
     shellwords (0.2.2)
     simpleidn (0.2.3)
     string-format (0.2.0)
@@ -224,9 +247,12 @@ GEM
     timeout (0.6.1)
     traces (0.18.2)
     tsort (0.2.0)
+    tzinfo (2.0.6)
+      concurrent-ruby (~> 1.0)
     unicode-display_width (3.2.0)
       unicode-emoji (~> 4.1)
     unicode-emoji (4.2.0)
+    uri (1.1.1)
     utopia (2.32.1)
       bake (~> 0.20)
       concurrent-ruby (~> 1.2)

data/examples/02-manifest-with-middleware/manifest.rb

@@ -28,7 +28,7 @@ manifest = Kube::Cluster::Manifest.new(
 )
 
 stack = Kube::Cluster::Middleware::Stack.new do
-  use Middleware::Namespace
+  use Middleware::SetNamespace
   use Middleware::Labels
 end
 

data/guides/middleware/readme.md

@@ -24,7 +24,7 @@ Kube::Cluster::Middleware::Stack.new {
   use Middleware::ServiceForDeployment
   use Middleware::IngressForService
   use Middleware::HPAForDeployment
-  use Middleware::Namespace, "production"
+  use Middleware::SetNamespace, "production"
   use Middleware::Labels, managed_by: "kube_cluster"
   use Middleware::ResourcePreset
   use Middleware::SecurityContext

data/kube_cluster.gemspec

@@ -35,4 +35,5 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency "kube_schema", "~> 1.5"
   spec.add_dependency "kube_kubectl", "~> 2.0"
+  spec.add_dependency "activesupport", "~> 8.0"
 end

data/lib/kube/cluster/manifest.rb

@@ -14,7 +14,7 @@ module Kube
     #   manifest << Kube::Cluster["Deployment"].new { ... }
     #
     #   stack = Kube::Cluster::Middleware::Stack.new do
-    #     use Middleware::Namespace, "production"
+    #     use Middleware::SetNamespace, "production"
     #     use Middleware::Labels, app: "web-app"
     #   end
     #
@@ -77,7 +77,7 @@ test do
     }
 
     stack = Middleware::Stack.new do
-      use Middleware::Namespace, "production"
+      use Middleware::SetNamespace, "production"
     end
     stack.call(m)
 
@@ -91,7 +91,7 @@ test do
       metadata.name = "test"
     }
 
-    Middleware::Namespace.new("production").call(m)
+    Middleware::SetNamespace.new("production").call(m)
 
     yaml = m.to_yaml
     yaml.should.include "namespace: production"
@@ -102,7 +102,7 @@ test do
     m << Kube::Cluster["ConfigMap"].new { metadata.name = "a" }
     m << Kube::Cluster["ConfigMap"].new { metadata.name = "b" }
 
-    Middleware::Namespace.new("production").call(m)
+    Middleware::SetNamespace.new("production").call(m)
 
     names = m.map { |r| r.to_h.dig(:metadata, :name) }
     names.should == %w[a b]
@@ -117,7 +117,7 @@ test do
     }
 
     stack = Middleware::Stack.new do
-      use Middleware::Namespace, "staging"
+      use Middleware::SetNamespace, "staging"
       use Middleware::Labels, app: "myapp", managed_by: "kube_cluster"
     end
     stack.call(m)
@@ -144,7 +144,7 @@ test do
     m = Kube::Cluster::Manifest.new
     m << Kube::Cluster["ConfigMap"].new { metadata.name = "test" }
 
-    Middleware::Namespace.new("production").call(m)
+    Middleware::SetNamespace.new("production").call(m)
 
     enum = m.each
     enum.should.be.instance_of Enumerator
@@ -197,7 +197,7 @@ test do
 
     stack = Middleware::Stack.new do
       use Middleware::ServiceForDeployment           # generates Service
-      use Middleware::Namespace, "production"         # namespaces everything
+      use Middleware::SetNamespace, "production"         # namespaces everything
       use Middleware::Labels, managed_by: "middleware" # labels everything
     end
     stack.call(m)

data/lib/kube/cluster/middleware/namespace.rb

@@ -14,7 +14,11 @@ module Kube
       #   end
       #
       class Namespace < Middleware
-        def initialize(namespace, filter: DEFAULT_FILTER)
+        def initialize(namespace, filter: DEFAULT_FILTER, force: false)
+          unless force
+            raise "Middleware::Namespace is deprecated... use Middleware::SetNamespace"
+          end
+
           super(filter: filter)
           @namespace = namespace
         end
@@ -35,73 +39,73 @@ module Kube
   end
 end
 
-test do
-  Middleware = Kube::Cluster::Middleware
-
-  it "sets_namespace_on_configmap" do
-    m = manifest(Kube::Cluster["ConfigMap"].new { metadata.name = "test" })
-
-    Middleware::Namespace.new("production").call(m)
-
-    m.resources.first.to_h.dig(:metadata, :namespace).should == "production"
-  end
-
-  it "sets_namespace_on_deployment" do
-    m = manifest(Kube::Cluster["Deployment"].new { metadata.name = "web" })
-
-    Middleware::Namespace.new("staging").call(m)
-
-    m.resources.first.to_h.dig(:metadata, :namespace).should == "staging"
-  end
-
-  it "skips_namespace_resource" do
-    m = manifest(Kube::Cluster["Namespace"].new { metadata.name = "my-ns" })
-
-    Middleware::Namespace.new("production").call(m)
-
-    m.resources.first.to_h.dig(:metadata, :namespace).should.be.nil
-  end
-
-  it "skips_cluster_role" do
-    m = manifest(Kube::Cluster["ClusterRole"].new { metadata.name = "admin" })
-
-    Middleware::Namespace.new("production").call(m)
-
-    m.resources.first.to_h.dig(:metadata, :namespace).should.be.nil
-  end
-
-  it "skips_cluster_role_binding" do
-    m = manifest(Kube::Cluster["ClusterRoleBinding"].new { metadata.name = "admin-binding" })
-
-    Middleware::Namespace.new("production").call(m)
-
-    m.resources.first.to_h.dig(:metadata, :namespace).should.be.nil
-  end
-
-  it "overwrites_existing_namespace" do
-    m = manifest(Kube::Cluster["ConfigMap"].new {
-      metadata.name = "test"
-      metadata.namespace = "old"
-    })
-
-    Middleware::Namespace.new("new").call(m)
-
-    m.resources.first.to_h.dig(:metadata, :namespace).should == "new"
-  end
-
-  it "returns_new_resource_instance" do
-    resource = Kube::Cluster["ConfigMap"].new { metadata.name = "test" }
-    manifest(resource).tap do |m|
-      Middleware::Namespace.new("production").call(m)
-      resource.equal?(m.resources.first).should.be.false
-    end
-  end
-
-  private
-
-    def manifest(*resources)
-      Kube::Cluster::Manifest.new.tap do |manifest|
-        resources.each { |x| manifest << x }
-      end
-    end
-end
+#test do
+#  Middleware = Kube::Cluster::Middleware
+#
+#  it "sets_namespace_on_configmap" do
+#    m = manifest(Kube::Cluster["ConfigMap"].new { metadata.name = "test" })
+#
+#    Middleware::Namespace.new("production").call(m)
+#
+#    m.resources.first.to_h.dig(:metadata, :namespace).should == "production"
+#  end
+#
+#  it "sets_namespace_on_deployment" do
+#    m = manifest(Kube::Cluster["Deployment"].new { metadata.name = "web" })
+#
+#    Middleware::Namespace.new("staging").call(m)
+#
+#    m.resources.first.to_h.dig(:metadata, :namespace).should == "staging"
+#  end
+#
+#  it "skips_namespace_resource" do
+#    m = manifest(Kube::Cluster["Namespace"].new { metadata.name = "my-ns" })
+#
+#    Middleware::Namespace.new("production").call(m)
+#
+#    m.resources.first.to_h.dig(:metadata, :namespace).should.be.nil
+#  end
+#
+#  it "skips_cluster_role" do
+#    m = manifest(Kube::Cluster["ClusterRole"].new { metadata.name = "admin" })
+#
+#    Middleware::Namespace.new("production").call(m)
+#
+#    m.resources.first.to_h.dig(:metadata, :namespace).should.be.nil
+#  end
+#
+#  it "skips_cluster_role_binding" do
+#    m = manifest(Kube::Cluster["ClusterRoleBinding"].new { metadata.name = "admin-binding" })
+#
+#    Middleware::Namespace.new("production").call(m)
+#
+#    m.resources.first.to_h.dig(:metadata, :namespace).should.be.nil
+#  end
+#
+#  it "overwrites_existing_namespace" do
+#    m = manifest(Kube::Cluster["ConfigMap"].new {
+#      metadata.name = "test"
+#      metadata.namespace = "old"
+#    })
+#
+#    Middleware::Namespace.new("new").call(m)
+#
+#    m.resources.first.to_h.dig(:metadata, :namespace).should == "new"
+#  end
+#
+#  it "returns_new_resource_instance" do
+#    resource = Kube::Cluster["ConfigMap"].new { metadata.name = "test" }
+#    manifest(resource).tap do |m|
+#      Middleware::Namespace.new("production").call(m)
+#      resource.equal?(m.resources.first).should.be.false
+#    end
+#  end
+#
+#  private
+#
+#    def manifest(*resources)
+#      Kube::Cluster::Manifest.new.tap do |manifest|
+#        resources.each { |x| manifest << x }
+#      end
+#    end
+#end

data/lib/kube/cluster/middleware/set_namespace.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+require "bundler/setup"
+require 'kube/cluster'
+
+module Kube
+  module Cluster
+    class Middleware
+      # Sets +metadata.namespace+ on all namespace-scoped resources,
+      # skipping HelmCharts and resources that already have a
+      # non-default namespace set.
+      #
+      #   use SetNamespace, 'authelia'
+      #
+      class SetNamespace < Middleware
+        def initialize(namespace)
+          super(filter: ->(r) { r.kind != 'HelmChart' })
+          @namespace = namespace
+        end
+
+        def call(manifest)
+          manifest.resources.map! { |resource|
+            filter(resource) {
+              next resource if resource.cluster_scoped?
+
+              h = resource.to_h
+              h[:metadata] ||= {}
+              next resource if h[:metadata][:namespace] && h[:metadata][:namespace] != 'default'
+
+              h[:metadata][:namespace] = @namespace
+              resource.rebuild(h)
+            }
+          }
+        end
+      end
+    end
+  end
+end

data/lib/kube/cluster/middleware/set_reloader_auto.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+require "bundler/setup"
+require 'kube/cluster'
+
+module Kube
+  module Cluster
+    class Middleware
+      # Adds +reloader.stakater.com/auto: "true"+ to Deployments,
+      # StatefulSets, and DaemonSets so Stakater Reloader triggers
+      # rolling restarts when referenced ConfigMaps or Secrets change.
+      #
+      #   use SetReloaderAuto
+      #
+      class SetReloaderAuto < Middleware
+        KINDS = %w[Deployment StatefulSet DaemonSet].freeze
+
+        def initialize
+          super(filter: ->(r) { KINDS.include?(r.kind) })
+        end
+
+        def call(manifest)
+          manifest.resources.map! { |resource|
+            filter(resource) {
+              h = resource.to_h
+              h[:metadata] ||= {}
+              h[:metadata][:annotations] ||= {}
+              h[:metadata][:annotations][:'reloader.stakater.com/auto'] = 'true'
+              resource.rebuild(h)
+            }
+          }
+        end
+      end
+    end
+  end
+end

data/lib/kube/cluster/middleware/stack.rb

@@ -9,7 +9,7 @@ module Kube
       #   stack = Kube::Cluster::Middleware::Stack.new do
       #     use Middleware::ServiceForDeployment
       #     use Middleware::Labels, app: "web"
-      #     use Middleware::Namespace, "production"
+      #     use Middleware::SetNamespace, "production"
       #   end
       #
       #   stack.call(manifest)

data/lib/kube/cluster/standard/cdi/data_volume.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+require "bundler/setup"
+require "kube/cluster"
+
+module Kube
+  module Cluster
+    module Standard
+      module CDI
+        #class DataVolume < Kube::Cluster['DataVolume']
+        #  def initialize(name:, &block)
+        #    super() {
+        #      metadata.name = name
+        #      instance_exec(&block) if block
+        #    }
+        #  end
+        #end
+      end
+    end
+  end
+end
+
+test do
+  #describe "CDI::DataVolume" do
+  #  it "initializes without error" do
+  #    Kube::Cluster::Standard::CDI::DataVolume
+  #      .new(
+  #        name: "my-example-volume"
+  #      )
+  #      .to_yaml
+  #      .is_a?(String)
+  #      .should == true
+  #  end
+  #end
+end

data/lib/kube/cluster/standard/cloud_native_pg/cluster.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require "bundler/setup"
+require "kube/cluster"
+
+module Kube
+  module Cluster
+    module Standard
+      module CloudNativePg
+        #class Cluster < Kube::Cluster["Cluster"]
+        #end
+      end
+    end
+  end
+end
+
+test do
+  #describe "CloudNativePg::Cluster" do
+  #  it "initializes without error" do
+  #    Kube::Cluster::Standard::CloudNativePg::Cluster
+  #      .new()
+  #      .to_yaml
+  #      .is_a?(String)
+  #      .should == true
+  #  end
+  #end
+end

data/lib/kube/cluster/standard/cloud_native_pg/database_with_external_secret.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+require "bundler/setup"
+require "kube/cluster"
+
+module Kube
+  module Cluster
+    module Standard
+      module CloudNativePg
+        class DatabaseWithExternalSecret < Kube::Cluster::Manifest
+          def initialize(name:, cluster: "postgres", owner: "app", &block)
+            database = Kube::Cluster["Database"].new {
+              metadata.name = name
+              spec.cluster = { name: cluster }
+              spec.databaseReclaimPolicy = "retain"
+              spec.ensure = "present"
+              spec.name = name
+              spec.owner = owner
+            }
+
+            external_secret = CloudNativePg::ExternalSecret.new(name: name)
+
+            super(database, external_secret)
+            instance_exec(&block) if block
+          end
+        end
+      end
+    end
+  end
+end
+
+test do
+  describe "CloudNativePg::DatabaseWithExternalSecret" do
+    it "initializes without error" do
+      Kube::Cluster::Standard::CloudNativePg::DatabaseWithExternalSecret
+        .new(
+          name: "my-example-cluster"
+        )
+        .to_yaml
+        .is_a?(String)
+        .should == true
+    end
+  end
+end

data/lib/kube/cluster/standard/cloud_native_pg/external_secret.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+require "bundler/setup"
+require "kube/cluster"
+
+module Kube
+  module Cluster
+    module Standard
+      module CloudNativePg
+        class ExternalSecret < Kube::Cluster["ExternalSecret"]
+
+          DB_HOST = "postgres-rw.cloudnative-pg.svc.cluster.local"
+
+          def initialize(name:, env_prefix: "DB", db_host: DB_HOST, &block)
+            super() {
+              metadata.name = "#{name}-db"
+              spec.refreshInterval = "1h"
+              spec.secretStoreRef = { kind: "ClusterSecretStore", name: "cnpg-credentials" }
+              spec.target = {
+                name: "#{name}-db",
+                creationPolicy: "Owner",
+                deletionPolicy: "Retain",
+                template: {
+                  data: {
+                    "#{env_prefix}_URL"      => "jdbc:postgresql://#{db_host}:5432/#{name}",
+                    "#{env_prefix}_USER"     => "{{ .username }}",
+                    "#{env_prefix}_PASSWORD" => "{{ .password }}",
+                  },
+                },
+              }
+              spec.data = [
+                { secretKey: "username", remoteRef: { key: "postgres-app", property: "username" } },
+                { secretKey: "password", remoteRef: { key: "postgres-app", property: "password" } },
+              ]
+
+              instance_exec(&block) if block_given?
+            }
+          end
+        end
+      end
+    end
+  end
+end
+
+test do
+  describe "CloudNativePg::ExternalSecret" do
+    it "initializes without error" do
+      Kube::Cluster::Standard::CloudNativePg::ExternalSecret
+        .new(
+          name: "my-external-secret"
+        )
+        .to_yaml
+        .is_a?(String)
+        .should == true
+    end
+  end
+end

data/lib/kube/cluster/standard/config_map.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+require "bundler/setup"
+require "kube/cluster"
+
+module Kube
+  module Cluster
+    module Standard
+      class ConfigMap < Kube::Cluster['ConfigMap']
+
+        # wtf is this????? I hate it... claude made it and it needs to dead...
+        KeyRef = Struct.new(:config_map, :key_name)
+
+        def initialize(name: 'config', **options, &block)
+          super(**options) do
+            metadata.name = name
+            instance_exec(&block) if block
+          end
+        end
+
+        def config_map_name
+          to_h.dig(:metadata, :name)
+        end
+
+        def key(key_name)
+          KeyRef.new(self, key_name)
+        end
+      end
+    end
+  end
+end
+
+test do
+  describe "ConfigMap" do
+    it "initializes without error" do
+      Kube::Cluster::Standard::ConfigMap
+        .new(
+          #name: "example-config"
+        )
+        .to_yaml
+        .is_a?(String)
+        .should == true
+    end
+  end
+end