kube_schema 1.3.1 → 1.3.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c2fbfd3f44c5ebc57a3d43c6baac8be1b64c7feed0e8c9657c951cfd530013fa
-  data.tar.gz: b0057e0e43fe1160f6ad166dc28f204e4e9870c76457db5a980556ac883200c5
+  metadata.gz: 193f973be41e7f42709ecf8d2407d47d7200ab399a441563b34342149f759956
+  data.tar.gz: 3a931d60cf56e1d03ed9a25eee098978a1e6f647113dc22f05f1858d0d03e045
 SHA512:
-  metadata.gz: 8314abd9a04c46ea3b1a2de5e5d27bbf05fb891b518881585b66d252f3a00a2cf38f33ad795a330d6477e5318edfa2ed5cdc0e6df63f06ec1f54a6a6e0629f69
-  data.tar.gz: facee27eab8f920216f537d14a1b403843cda17cb0ddf87980542e9693be2a219ea4ccb58d48665bda977554c7bc51b6d17fd7c1c82ad9283d3bfdc9c1def3ac
+  metadata.gz: d789cd2fe143a465f645f73fb7d6ecc0882ace1bbaadca2513b26053efff52bd1c162aff2fe43ee25e0bd600024366db92a221b855562d3eef4b44025f691daf
+  data.tar.gz: 94642b199d333cb7da54cc324c0ee29641431bcc4884e38b7e24e6d47eb97f886ece7f680f3923c336c62a55ff171d247d8578abde94e10cee0c5eda8a8759a6

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    kube_schema (1.3.1)
+    kube_schema (1.3.3)
       json_schemer (~> 2.5.0)
       rubyshell (~> 1.5.0)
 

data/bin/copy-schemas-over

@@ -2,6 +2,7 @@
 mkdir -p schemas
 
 git show schemas2:data/crds/05-crd-only-definitions.json > schemas/crd-definitions.json
+git show schemas2:data/crds/07-loft-definitions.json > schemas/loft-definitions.json
 
 git ls-tree --name-only schemas2 data/k8s.io/ | while read -r path; do
   git show "schemas2:$path" > "schemas/$(basename "$path")"

data/examples/custom_crds.rb

@@ -0,0 +1,117 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+# Register custom CRD schemas from datreeio/CRDs-catalog
+# https://github.com/datreeio/CRDs-catalog
+
+require_relative "../lib/kube/schema"
+require "open-uri"
+require "json"
+require "tmpdir"
+
+CATALOG = "https://raw.githubusercontent.com/datreeio/CRDs-catalog/main"
+CACHE   = "/tmp/crds-catalog"
+
+Dir.mkdir(CACHE) unless Dir.exist?(CACHE)
+
+# Download and register schemas
+{
+  "Certificate"    => ["cert-manager.io/certificate_v1.json",              "cert-manager.io/v1"],
+  "Application"    => ["argoproj.io/application_v1alpha1.json",            "argoproj.io/v1alpha1"],
+  "PrometheusRule"  => ["monitoring.coreos.com/prometheusrule_v1.json",    "monitoring.coreos.com/v1"],
+  "ExternalSecret" => ["external-secrets.io/externalsecret_v1beta1.json",  "external-secrets.io/v1beta1"],
+  "ScaledObject"   => ["keda.sh/scaledobject_v1alpha1.json",              "keda.sh/v1alpha1"],
+}.each do |kind, (path, api_version)|
+  local = File.join(CACHE, File.basename(path))
+  URI.open("#{CATALOG}/#{path}") { |f| File.write(local, f.read) } unless File.exist?(local)
+  Kube::Schema.register(kind, schema: local, api_version: api_version)
+end
+
+
+# ── Use them alongside built-in k8s types ─────────────────────
+
+manifest = Kube::Schema::Manifest.new
+
+manifest << Kube::Schema["Namespace"].new {
+  metadata.name = "prod"
+}
+
+manifest << Kube::Schema["Deployment"].new {
+  metadata.name = "web"
+  metadata.namespace = "prod"
+  spec.replicas = 3
+  spec.selector = { matchLabels: { app: "web" } }
+  spec.template.metadata = { labels: { app: "web" } }
+  spec.template.spec.containers = [
+    { name: "app", image: "nginx:1.27", ports: [{ containerPort: 80 }] }
+  ]
+}
+
+manifest << Kube::Schema["Certificate"].new {
+  metadata.name = "web-tls"
+  metadata.namespace = "prod"
+  spec.secretName = "web-tls-secret"
+  spec.issuerRef = { name: "letsencrypt-prod", kind: "ClusterIssuer" }
+  spec.dnsNames = ["example.com", "www.example.com"]
+}
+
+manifest << Kube::Schema["Application"].new {
+  metadata.name = "web"
+  metadata.namespace = "argocd"
+  spec.project = "default"
+  spec.source = {
+    repoURL: "https://github.com/example/web.git",
+    targetRevision: "HEAD",
+    path: "k8s/production"
+  }
+  spec.destination = {
+    server: "https://kubernetes.default.svc",
+    namespace: "prod"
+  }
+  spec.syncPolicy = {
+    automated: { prune: true, selfHeal: true }
+  }
+}
+
+manifest << Kube::Schema["ExternalSecret"].new {
+  metadata.name = "db-creds"
+  metadata.namespace = "prod"
+  spec.refreshInterval = "1h"
+  spec.secretStoreRef = { name: "aws-sm", kind: "ClusterSecretStore" }
+  spec.target = { name: "db-creds", creationPolicy: "Owner" }
+  spec.data = [
+    { secretKey: "password", remoteRef: { key: "prod/db", property: "password" } }
+  ]
+}
+
+manifest << Kube::Schema["ScaledObject"].new {
+  metadata.name = "web-scaler"
+  metadata.namespace = "prod"
+  spec.scaleTargetRef = { name: "web" }
+  spec.minReplicaCount = 2
+  spec.maxReplicaCount = 20
+  spec.triggers = [
+    { type: "prometheus", metadata: {
+      serverAddress: "http://prometheus:9090",
+      query: 'sum(rate(http_requests_total{app="web"}[2m]))',
+      threshold: "100"
+    }}
+  ]
+}
+
+manifest << Kube::Schema["PrometheusRule"].new {
+  metadata.name = "web-alerts"
+  metadata.namespace = "monitoring"
+  spec.groups = [{
+    name: "web.rules",
+    rules: [{
+      alert: "HighErrorRate",
+      expr: 'rate(http_requests_total{status=~"5.."}[5m]) > 0.1',
+      "for": "5m",
+      labels: { severity: "critical" },
+      annotations: { summary: "High 5xx error rate on web" }
+    }]
+  }]
+}
+
+puts manifest.to_yaml