kube_cluster 0.9.1 → 0.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 612bfaf35673ef4d8eafca1a4c08760d2561b0f68d105fc845cfaaef9a08b649
-  data.tar.gz: dd784e188cf30368c95827b988e00d2b2673fff6935986d1ccc9d8afc6bc2aff
+  metadata.gz: 32be3af77f3bccfbae533150de67954f7830f00c06f0be3c1b67b14a14dc5df0
+  data.tar.gz: c55c32cbe6d5d613e818e15af4c88edb29a4fc5509a6713b3eb1c8889de025a6
 SHA512:
-  metadata.gz: 8efb5ae223fa5a51d729e96a0c0dc33fa030ee0cb200562d7abafc90e4acf5e306c5629ef6cc0b6dde0e14afe093a43261a017e47638b7a1410165b679fd3061
-  data.tar.gz: 0ee4ec3a3dd13793fb4b5c9771e27f8d42de3401eed42c85f1682017d6d9b1c175871b51a00d4c9064742e1a5e4d82b6a70a3e4f9bdf1574d014d146f3cd0051
+  metadata.gz: 910bfcff299cc94a90793078aae2d758c1efac25d82d9bec8c1627a399b01d3cff913c531dfa0de65a24e493364abaf1df2539d9c07841e67fec6bb657ce848a
+  data.tar.gz: 4cac04a6d8915fabbd978dd74f9a69631510b2981653de2ab18c262dd5d0bc7e0bb7dc5ac352f3d9b8ea4945f31091c904db111654240a159976aaecd7408618

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    kube_cluster (0.9.1)
+    kube_cluster (0.10.0)
       activesupport (~> 8.0)
       kube_kubectl (~> 2.0)
       kube_schema (~> 1.5)

data/lib/kube/cluster/standard/deployment_with_service.rb

@@ -13,6 +13,7 @@ module Kube
           port:,
           namespace: 'default',
           env: {},
+          command: nil,
           security_context: nil,
           pod_security_context: nil,
           volume_mounts: {},
@@ -50,6 +51,7 @@ module Kube
               ports: [{ name: 'http', containerPort: port, protocol: 'TCP' }],
               env: processed_env
             }
+            container[:command] = command if command
             container[:securityContext] = security_context if security_context
             container[:volumeMounts] = processed_volumes[:volume_mounts] unless processed_volumes[:volume_mounts].empty?
 

data/lib/kube/cluster/standard/secret.rb

@@ -7,6 +7,8 @@ module Kube
   module Cluster
     module Standard
       class Secret < Kube::Cluster["Secret"]
+        KeyRef = Struct.new(:secret, :key_name)
+
         def initialize(name:, **data, &block)
           super() {
             metadata.name = name
@@ -14,6 +16,14 @@ module Kube
             instance_exec(&block) if block_given?
           }
         end
+
+        def secret_name
+          to_h.dig(:metadata, :name)
+        end
+
+        def key(key_name)
+          KeyRef.new(self, key_name)
+        end
       end
     end
   end

data/lib/kube/cluster/standard/volume_processing.rb

@@ -25,6 +25,26 @@ module Kube
 
           input.each do |mount_path, source|
             case source
+            when Secret::KeyRef
+              secret_name = source.secret.secret_name
+              key  = source.key_name
+              # Unique, DNS-1123-safe volume name per key so multiple keys from
+              # the same secret don't collide on the volume name.
+              vol  = "#{secret_name}-#{key.tr('._', '--')}"
+              volumes << {
+                name: vol,
+                secret: {
+                  secretName: secret_name,
+                  items: [{ key: key, path: key }]
+                }
+              }
+              mounts << {
+                name: vol,
+                mountPath: mount_path,
+                subPath: key,
+                readOnly: true
+              }
+
             when ESO::ExternalSecret::KeyRef
               name = source.secret.secret_name
               key  = source.key_name

data/lib/kube/cluster/version.rb

@@ -2,6 +2,6 @@
 
 module Kube
   module Cluster
-    VERSION = "0.9.1"
+    VERSION = "0.10.0"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kube_cluster
 version: !ruby/object:Gem::Version
-  version: 0.9.1
+  version: 0.10.0
 platform: ruby
 authors:
 - Nathan K