pangea-akeyless 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: fb29e4e23c9e0dbad3deaf56258c0a9dbe08a09ced9cdf8a52c65f05235dc2cd
+  data.tar.gz: 6664ae48b009e048e40a89e0f831ed1dd805a01fe5ae4703f0fce5b8775a24dc
+SHA512:
+  metadata.gz: a91e979be9c76cfb3059f22b9675d09a1d0680f34093fd76e1f347cbca3bdcb8dc9f4fe280ff7cd4ca2836dafc11bbccbef04fad742ff0944b8f8cd66554e09b
+  data.tar.gz: b7860429531960897e586276ab8fd0a642481f3433a5acdb9b929dcd7b410f52c9fcc3972f21694274df81403f5abb738a6edf58732a31ad928c509747482a75

data/.github/workflows/auto-bump.yml

@@ -0,0 +1,11 @@
+name: auto-bump
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  bump:
+    uses: pleme-io/substrate/.github/workflows/gem-auto-bump.yml@main
+    secrets:
+      BOT_PAT: ${{ secrets.BOT_PAT }}

data/.github/workflows/ci.yml

@@ -0,0 +1,7 @@
+name: ci
+
+on: [push, pull_request]
+
+jobs:
+  check:
+    uses: pleme-io/substrate/.github/workflows/gem-ci.yml@main

data/.github/workflows/release.yml

@@ -0,0 +1,22 @@
+name: release
+
+on:
+  push:
+    tags: ['v*']
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to publish (informational; lib/pangea-akeyless/version.rb is source of truth)'
+        required: false
+
+permissions:
+  contents: write
+
+jobs:
+  gem:
+    name: Build & push to rubygems.org
+    uses: pleme-io/substrate/.github/workflows/gem-release.yml@main
+    with:
+      gem-name: pangea-akeyless
+    secrets:
+      RUBYGEMS_API_KEY: ${{ secrets.RUBYGEMS_API_KEY }}

data/.gitignore

@@ -0,0 +1,8 @@
+/.bundle/
+/vendor/bundle/
+/coverage/
+/.rspec_status
+*.gem
+Gemfile.lock
+/vendor/
+/coverage/

data/.rspec

@@ -0,0 +1,3 @@
+--require spec_helper
+--color
+--format progress

data/AGENTS.md

@@ -0,0 +1,3 @@
+# Agents
+
+See [CLAUDE.md](./CLAUDE.md) for guidance on this repository.

data/CLAUDE.md

@@ -0,0 +1,79 @@
+# pangea-akeyless
+
+> **★★★ CSE / Knowable Construction.** This repo operates under **Constructive Substrate Engineering** — canonical specification at [`pleme-io/theory/CONSTRUCTIVE-SUBSTRATE-ENGINEERING.md`](https://github.com/pleme-io/theory/blob/main/CONSTRUCTIVE-SUBSTRATE-ENGINEERING.md). The Compounding Directive (operational rules: solve once, load-bearing fixes only, idiom-first, models stay current, direction beats velocity) is in the org-level pleme-io/CLAUDE.md ★★★ section. Read both before non-trivial changes.
+
+
+Akeyless provider resources for the Pangea infrastructure DSL. All resource
+code is **auto-generated** by `pangea-forge` via `iac-forge-cli`. Manual edits
+to resource files will be overwritten on the next generation run.
+
+## Structure
+
+```
+bin/
+  generate                   # Regeneration script
+lib/
+  pangea-akeyless.rb         # Entry point (generated — requires all resources)
+  pangea-akeyless/version.rb # Version constant (manual)
+  pangea/
+    types/akeyless_types.rb  # Provider-specific Dry::Types (manual)
+    resources/
+      akeyless.rb            # Aggregator module (generated)
+      akeyless_*/            # 238 resource directories (generated)
+        types.rb             # Dry::Struct attributes class
+        resource.rb          # ResourceBuilder DSL
+spec/
+  spec_helper.rb             # Test setup (manual)
+  resources/                 # RSpec stubs (generated)
+```
+
+## Generated vs Manual
+
+| File | Source |
+|------|--------|
+| `lib/pangea/resources/akeyless_*/` | Generated by pangea-forge |
+| `lib/pangea-akeyless.rb` | Generated (require file) |
+| `lib/pangea/resources/akeyless.rb` | Generated (aggregator) |
+| `spec/resources/*.rb` | Generated (RSpec stubs) |
+| `lib/pangea-akeyless/version.rb` | Manual |
+| `lib/pangea/types/akeyless_types.rb` | Manual |
+| `spec/spec_helper.rb` | Manual |
+| `Gemfile`, `*.gemspec`, `flake.nix` | Manual |
+
+## Regeneration
+
+```sh
+# Using the bundled script (uses default paths)
+bin/generate
+
+# With custom paths
+AKEYLESS_OPENAPI_SPEC=path/to/openapi.yaml \
+AKEYLESS_RESOURCES=path/to/resources/ \
+AKEYLESS_PROVIDER=path/to/provider.toml \
+IAC_FORGE=path/to/iac-forge \
+bin/generate
+```
+
+Default paths:
+- Spec: `~/code/github/pleme-io/akeyless-go/api/openapi.yaml`
+- Resources: `~/code/github/pleme-io/akeyless-terraform-resources/resources`
+- Provider: `~/code/github/pleme-io/akeyless-terraform-resources/provider.toml`
+
+## Resource count
+
+- **238 resources** (auth methods, dynamic secrets, rotated secrets, targets,
+  keys, certificates, gateway config, roles, event forwarders, misc)
+
+## Dependencies
+
+- pangea-core ~> 0.2
+- terraform-synthesizer ~> 0.0.28
+- dry-types ~> 1.7
+- dry-struct ~> 1.6
+
+## Testing
+
+```sh
+bundle exec rspec                            # Run all tests
+bundle exec rspec spec/resources/            # All resource specs
+```

data/Gemfile

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+source "https://rubygems.org"
+
+gemspec
+
+gem "pangea-core", path: "../pangea-core"

data/Rakefile

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new(:spec)
+
+task default: :spec

data/bin/generate

@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SPEC="${AKEYLESS_OPENAPI_SPEC:-$HOME/code/github/pleme-io/akeyless-go/api/openapi.yaml}"
+RESOURCES="${AKEYLESS_RESOURCES:-$HOME/code/github/pleme-io/akeyless-terraform-resources/resources}"
+PROVIDER="${AKEYLESS_PROVIDER:-$HOME/code/github/pleme-io/akeyless-terraform-resources/provider.toml}"
+IAC_FORGE="${IAC_FORGE:-iac-forge}"
+REPO_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+
+echo "=> Generating pangea-akeyless from OpenAPI spec"
+echo "   Spec: $SPEC"
+echo "   Resources: $RESOURCES"
+echo "   Provider: $PROVIDER"
+
+# Generate to temp dir
+TMPDIR=$(mktemp -d)
+trap "rm -rf $TMPDIR" EXIT
+
+$IAC_FORGE generate --backend pangea \
+  --spec "$SPEC" \
+  --resources "$RESOURCES" \
+  --output "$TMPDIR" \
+  --provider "$PROVIDER"
+
+# Remove old generated resource directories (preserve akeyless_types.rb, version.rb, etc.)
+rm -rf "$REPO_ROOT"/lib/pangea/resources/akeyless_*/
+rm -rf "$REPO_ROOT"/spec/resources/
+
+# Copy generated files
+for dir in $(ls -1 "$TMPDIR/lib/pangea/resources/"); do
+  cp -R "$TMPDIR/lib/pangea/resources/$dir" "$REPO_ROOT/lib/pangea/resources/"
+done
+
+mkdir -p "$REPO_ROOT/spec/resources"
+cp "$TMPDIR"/spec/resources/*.rb "$REPO_ROOT/spec/resources/"
+
+# Overwrite the require file and aggregator
+cat "$TMPDIR/lib/pangea-akeyless.rb" > "$REPO_ROOT/lib/pangea-akeyless.rb"
+cat "$TMPDIR/lib/pangea/resources/akeyless.rb" > "$REPO_ROOT/lib/pangea/resources/akeyless.rb"
+
+resource_count=$(ls -1d "$REPO_ROOT"/lib/pangea/resources/akeyless_*/ 2>/dev/null | wc -l | tr -d ' ')
+file_count=$(ls -1 "$REPO_ROOT"/lib/pangea/resources/akeyless_*/*.rb 2>/dev/null | wc -l | tr -d ' ')
+spec_count=$(ls -1 "$REPO_ROOT"/spec/resources/*.rb 2>/dev/null | wc -l | tr -d ' ')
+
+echo "=> Done."
+echo "   Resources: $resource_count"
+echo "   Generated files: $file_count"
+echo "   Spec stubs: $spec_count"