kube_cluster 1.7.0 → 1.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c57aae5fbe1903b9bc6bd63073ed4dd9d5731102b524077c4969051593b84b86
-  data.tar.gz: 19a1be373f25d1faee87bf83072c45987ecac39cc384c932168e4afefc42a7ac
+  metadata.gz: 2597321a575128ac29f8ef080595e150dab2d37bdf55562d75de3c252ab785a3
+  data.tar.gz: 2513bd35ac124e04f574f3ecab461288c6989a474a48dbe517962f8e26a35275
 SHA512:
-  metadata.gz: db92c45266952b68584a01029cd2502caa5ab1ea2e9d010e91bf70b9385227578378d36be82c3c83eb3cf3966b04b2547732d63bd706555cd3fef6e14c28c869
-  data.tar.gz: a53b5a9d8165400643e0693259940f5cf2695d97afd12a258e20dc7ecbd9bfd04aed135803e1d402ec2c3215bb5e17e64d98da8725cb45175a3d208b08c419b1
+  metadata.gz: 6ff84fb925d204f79a3bda56f5831df808e67d477b25f98d2cace2e9bee9dc868246ac613e98c9b8dca976bd6b31a80618b1da89bd52b40f8fccd0ee842d55a8
+  data.tar.gz: a937837dce0b8ca84e5f3a092adeee6388239cfeccf4f767f2dc2b1f57c402bf388f1a1c6efbfa40817d1ec75ebb5246d921a97b3e871b3822e52a1b34d0a8d1

data/CHANGELOG.md

@@ -5,6 +5,52 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.9.0] - 2026-09-28
+
+### Added
+- Ruby pattern matching for resources and manifests, inherited from
+  kube_schema 1.12.0 (`Resource#deconstruct_keys`, `Manifest#deconstruct`):
+
+      deployment => {metadata: {name:, namespace:}}
+
+      Deployment = Kube::Cluster["Deployment"]
+      manifest => [Deployment => dep, *rest]
+
+  `Kube::Cluster["Deployment"]` cannot be written inline in a pattern — Ruby
+  parses `Const[...]` as array-pattern syntax, not a method call. Assign the
+  class to a constant, or pin the expression:
+  `^(Kube::Cluster["Deployment"])`.
+
+### Changed
+- Requires kube_schema `~> 1.12.0`.
+
+## [1.8.0] - 2026-09-17
+
+### Added
+- `Standard::RbacRules` — the rules-shorthand builder behind
+  `Standard::Role`, now a shared module. The spec grammar handles
+  `"resource"`, `"resource/subresource"`, `"group/resource"` and
+  `"group/resource/subresource"`: the first segment is an API group when
+  `Kube::Schema.api_groups` knows it (`batch`, `apps`, `argoproj.io`, ...) or
+  when it contains a dot (API groups are DNS subdomains, which covers CRD
+  groups no schema has registered). Verbs are stringified, so symbols work.
+- `Standard::ClusterRole` — the rules shorthand, cluster-wide.
+- `Standard::ClusterRoleBinding` — wires a ClusterRole to a ServiceAccount,
+  mirroring `Standard::RoleBinding`.
+- `Middleware::SetNamespace` now fills blank ServiceAccount subject
+  namespaces on ClusterRoleBinding as well as RoleBinding. ClusterRoleBinding
+  is cluster-scoped, so there is no metadata.namespace to copy from — the
+  middleware fills the subjects directly.
+- `ClusterRole` and `ClusterRoleBinding` pinned in the resolve table.
+
+### Changed
+- Requires kube_schema `~> 1.11.0` for `Kube::Schema.api_groups`.
+
+### Fixed
+- The rules shorthand parsed `"pods/exec"` as `apiGroups: ["pods"],
+  resources: ["exec"]` — a rule matching nothing. Core subresources now
+  render as `apiGroups: [""], resources: ["pods/exec"]`.
+
 ## [1.7.0] - 2026-09-17
 
 ### Added

data/Gemfile.lock

@@ -1,10 +1,10 @@
 PATH
   remote: .
   specs:
-    kube_cluster (1.7.0)
+    kube_cluster (1.8.0)
       activesupport (~> 8.0)
       kube_kubectl (~> 2.0)
-      kube_schema (~> 1.10.0)
+      kube_schema (~> 1.11.0)
 
 GEM
   remote: https://rubygems.org/
@@ -132,7 +132,7 @@ GEM
       rubyshell (~> 1.5)
       shellwords (~> 0.2.2)
       string_builder (~> 1.2.2)
-    kube_schema (1.10.0)
+    kube_schema (1.11.0)
       json_schemer (~> 2.5.0)
       rubyshell (~> 1.5.0)
     lefthook (2.1.10)

data/flake.lock

@@ -1,23 +1,45 @@
 {
   "nodes": {
+    "mine": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1790556091,
+        "narHash": "sha256-+kgvg6vuaxjEUUad6pL+pxa3LZFveq3XvWGSZ+Z9gOA=",
+        "owner": "n-at-han-k",
+        "repo": "flake.nix",
+        "rev": "d023f40398596a5d80bf03e429c678a99b3f259a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "n-at-han-k",
+        "repo": "flake.nix",
+        "type": "github"
+      }
+    },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1776169885,
-        "narHash": "sha256-l/iNYDZ4bGOAFQY2q8y5OAfBBtrDAaPuRQqWaFHVRXM=",
+        "lastModified": 1780902259,
+        "narHash": "sha256-q8yYEC5f1mFlQO9RGna4LTc9QrcvWunX6FYp83munkQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "4bd9165a9165d7b5e33ae57f3eecbcb28fb231c9",
+        "rev": "bd0ff2d3eac24699c3664d5966b9ef36f388e2ca",
         "type": "github"
       },
       "original": {
         "owner": "NixOS",
-        "ref": "nixos-unstable",
         "repo": "nixpkgs",
+        "rev": "bd0ff2d3eac24699c3664d5966b9ef36f388e2ca",
         "type": "github"
       }
     },
     "root": {
       "inputs": {
+        "mine": "mine",
         "nixpkgs": "nixpkgs",
         "utils": "utils"
       }
@@ -37,9 +59,24 @@
         "type": "github"
       }
     },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
     "utils": {
       "inputs": {
-        "systems": "systems"
+        "systems": "systems_2"
       },
       "locked": {
         "lastModified": 1731533236,

data/flake.nix

@@ -2,30 +2,31 @@
   description = "Ruby gem flake";
 
   inputs = {
-    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    nixpkgs.url = "github:NixOS/nixpkgs/bd0ff2d3eac24699c3664d5966b9ef36f388e2ca"; # == this machine's system nixpkgs
     utils.url = "github:numtide/flake-utils";
+    mine.url = "github:n-at-han-k/flake.nix";
+    mine.inputs.nixpkgs.follows = "nixpkgs";
   };
-  outputs = { self, nixpkgs, utils }:
+  outputs = { self, nixpkgs, utils, mine }:
     utils.lib.eachDefaultSystem (system:
       let
+        # No mine.overlays.default: it overrides pkg-config, which stdenv
+        # splices, so the overlay rebuilds stdenv and all of nixpkgs from
+        # source. mine.inputs.nixpkgs.follows makes it redundant anyway.
         pkgs = nixpkgs.legacyPackages.${system};
-        ruby = pkgs.ruby_3_4; # Specify version
+        ruby = pkgs.ruby_3_4;
         kubectlWithKubeconfig = pkgs.writeShellScriptBin "kubectl" ''
           #!${pkgs.bash}/bin/bash
           KUBECONFIG="$PWD/kubeconfig.yaml" ${pkgs.kubectl}/bin/kubectl "$@"
         '';
       in
       {
-        devShells.default = pkgs.mkShell {
-          nativeBuildInputs = [
-            pkgs.pkg-config # native extension discovery
-          ];
-
+        # pkg-config, bundix, libyaml, openssl, overmind, tmux and `bundix -l`
+        # come from mkRubyShell.
+        devShells.default = mine.lib.${system}.mkRubyShell {
           buildInputs = [
             pkgs.trufflehog
             ruby
-            pkgs.libyaml # psych gem
-            pkgs.openssl # openssl gem
             kubectlWithKubeconfig
           ];
 
@@ -42,4 +43,3 @@
       }
     );
 }
-