@firestartr/cli 1.45.0-snapshot-17 → 1.45.0

package/build/index.js

@@ -262633,8 +262633,8 @@ function sleep(ms) {
 }
 
 // EXTERNAL MODULE: ../../node_modules/lodash/lodash.js
-var lodash = __nccwpck_require__(78018);
-var lodash_default = /*#__PURE__*/__nccwpck_require__.n(lodash);
+var lodash_lodash = __nccwpck_require__(78018);
+var lodash_default = /*#__PURE__*/__nccwpck_require__.n(lodash_lodash);
 ;// CONCATENATED MODULE: ../catalog_common/src/generic/name.ts
 
 
@@ -270521,7 +270521,7 @@ function helperCTX(patch) {
 
 
 
-class UUIDInitializer extends InitializerPatches {
+class uuid_UUIDInitializer extends InitializerPatches {
     constructor() {
         super(...arguments);
         this.applicableProviders = ['github', 'terraform'];
@@ -270530,9 +270530,9 @@ class UUIDInitializer extends InitializerPatches {
         return true;
     }
     async __patches(claim, previousCR) {
-        if (UUIDInitializer.applicableKinds.indexOf(claim.kind) === -1) {
+        if (uuid_UUIDInitializer.applicableKinds.indexOf(claim.kind) === -1) {
             throw new InitializerError(`${claim.name} is of kind ${claim.kind}, which is not allowed. ` +
-                `Allowed kinds: ${UUIDInitializer.applicableKinds}`);
+                `Allowed kinds: ${uuid_UUIDInitializer.applicableKinds}`);
         }
         const uuid = false;
         const fBuildWriteConnectionSecretToRef = (cr, crKind) => {
@@ -270569,7 +270569,7 @@ class UUIDInitializer extends InitializerPatches {
         ];
     }
 }
-UUIDInitializer.applicableKinds = [
+uuid_UUIDInitializer.applicableKinds = [
     'GroupClaim',
     'UserClaim',
     'ComponentClaim',
@@ -270640,7 +270640,7 @@ class NormalizerError extends Error {
 
 
 
-class NameNormalizer extends Normalizer {
+class name_NameNormalizer extends Normalizer {
     constructor() {
         super(...arguments);
         this.applicableProviders = ['all'];
@@ -270668,11 +270668,11 @@ class NameNormalizer extends Normalizer {
                     const provider = helperCTX(this).provider;
                     const annotation = catalog_common.generic.getFirestartrAnnotation('external-name');
                     const providerName = claim.providers[provider].name;
-                    if (previousCR && !lodash.isEmpty(previousCR)) {
+                    if (previousCR && !lodash_lodash.isEmpty(previousCR)) {
                         cr.metadata.annotations[annotation] = providerName;
                         cr.metadata.name = previousCR.metadata.name;
                         if (previousCR.writeConnectionSecretToRef &&
-                            !lodash.isEmpty(previousCR.writeConnectionSecretToRef)) {
+                            !lodash_lodash.isEmpty(previousCR.writeConnectionSecretToRef)) {
                             cr.writeConnectionSecretToRef.name =
                                 previousCR.writeConnectionSecretToRef.name;
                         }
@@ -271061,7 +271061,7 @@ class GlobalDefault extends DefaultSection {
  * - __getDesiredPatches(): a list of fast-json-patch patches
  *
  */
-class InitializerDefault extends DefaultSection {
+class initializer_InitializerDefault extends DefaultSection {
     constructor(data) {
         super();
         this.applicableProviders = ['github'];
@@ -271124,7 +271124,7 @@ class InitializerDefault extends DefaultSection {
 ;// CONCATENATED MODULE: ../cdk8s_renderer/src/initializers/claimRef.ts
 
 
-class InitializerClaimRef extends InitializerPatches {
+class claimRef_InitializerClaimRef extends InitializerPatches {
     constructor() {
         super(...arguments);
         this.applicableProviders = ['github', 'terraform'];
@@ -271155,7 +271155,7 @@ class InitializerClaimRef extends InitializerPatches {
         ];
     }
 }
-InitializerClaimRef.applicableKinds = [
+claimRef_InitializerClaimRef.applicableKinds = [
     'GroupClaim',
     'UserClaim',
     'ComponentClaim',
@@ -271475,13 +271475,13 @@ function setPath(pathName, pathValue) {
     __PATH_VARIABLES[pathName] = pathValue;
 }
 let renamesEnabled = false;
-function getRenamesEnabled() {
+function config_getRenamesEnabled() {
     return renamesEnabled;
 }
 function setRenamesEnabled(enabled) {
     renamesEnabled = enabled;
 }
-var AllowedProviders;
+var config_AllowedProviders;
 (function (AllowedProviders) {
     AllowedProviders["all"] = "all";
     AllowedProviders["github"] = "github";
@@ -271490,7 +271490,7 @@ var AllowedProviders;
     AllowedProviders["catalog"] = "catalog";
     AllowedProviders["argocd"] = "argocd";
     AllowedProviders["externalSecrets"] = "externalSecrets";
-})(AllowedProviders || (AllowedProviders = {}));
+})(config_AllowedProviders || (config_AllowedProviders = {}));
 let configuredProvider = null;
 function configureProvider(provider) {
     if (configuredProvider)
@@ -271502,21 +271502,21 @@ class ConfigError extends Error {
         super(`${errorType}: ${message}`);
     }
 }
-function getSelectedKindClaimCrMap(provider = getConfiguredProvider().toString()) {
+function getSelectedKindClaimCrMap(provider = config_getConfiguredProvider().toString()) {
     return PROVIDER_CLAIM_CR_MAP[provider.toString()];
 }
-function getConfiguredProvider() {
+function config_getConfiguredProvider() {
     if (!configuredProvider)
         throw new ConfigError('Provider config error', 'No provider configured, please call configureProvider()');
     return configuredProvider;
 }
 const PROVIDER_CLAIM_CR_MAP = {
-    [AllowedProviders.github.toString()]: {
+    [config_AllowedProviders.github.toString()]: {
         GroupClaim: 'FirestartrGithubGroup',
         UserClaim: 'FirestartrGithubMembership',
         ComponentClaim: 'FirestartrGithubRepository',
     },
-    [AllowedProviders.catalog.toString()]: {
+    [config_AllowedProviders.catalog.toString()]: {
         GroupClaim: 'Group',
         UserClaim: 'User',
         ComponentClaim: 'Component',
@@ -271538,7 +271538,7 @@ function configurePathsForRendering() {
     const configPath = '/tmp/defaults';
     createInitializers(configPath);
     createExpanders(configPath);
-    configureProvider(AllowedProviders.all);
+    configureProvider(config_AllowedProviders.all);
     setPath('initializers', configPath);
     setPath('crs', '/tmp/resources_from_main_branch');
     setPath('globals', configPath);
@@ -272285,18 +272285,18 @@ PolicyInitializer.applicableKinds = ['TFWorkspaceClaim'];
 
 
 const INITIALIZERS = [
-    UUIDInitializer,
-    InitializerClaimRef,
+    uuid_UUIDInitializer,
+    claimRef_InitializerClaimRef,
     BackstageInitializer,
     PolicyInitializer,
     SyncerInitializer,
 ];
 const INITIALIZERS_BY_FILE_NAME = {
     [TechnologyInitializer.FILE_NAME()]: TechnologyInitializer,
-    defaults_github_repository: InitializerDefault,
-    defaults_github_membership: InitializerDefault,
-    defaults_github_group: InitializerDefault,
-    defaults_github_orgwebhook: InitializerDefault,
+    defaults_github_repository: initializer_InitializerDefault,
+    defaults_github_membership: initializer_InitializerDefault,
+    defaults_github_group: initializer_InitializerDefault,
+    defaults_github_orgwebhook: initializer_InitializerDefault,
 };
 const SCHEMAS_BY_INITIALIZER_NAME = {
     [TechnologyInitializer.FILE_NAME()]: technologies,
@@ -272547,6 +272547,10 @@ class FirestartrAllClaim {
                             type: 'string',
                             pattern: '^system:.+$',
                         },
+                        owner: {
+                            type: 'string',
+                            pattern: '^[^:]+:[^:]+$',
+                        },
                         providers: {
                             type: 'object',
                             properties: {
@@ -272556,6 +272560,7 @@ class FirestartrAllClaim {
                             },
                         },
                     },
+                    required: ['owner'],
                     additionalProperties: true,
                 },
             ],
@@ -272643,6 +272648,10 @@ class FirestartrAllClaim {
                             type: 'string',
                             pattern: '^system:.+$',
                         },
+                        owner: {
+                            type: 'string',
+                            pattern: '^[^:]+:[^:]+$',
+                        },
                         providers: {
                             type: 'object',
                             properties: {
@@ -272653,6 +272662,7 @@ class FirestartrAllClaim {
                             required: ['terraform'],
                         },
                     },
+                    required: ['owner'],
                     additionalProperties: true,
                 },
             ],
@@ -273652,7 +273662,7 @@ function validatek8sLimits(moduleContent) {
 
 
 const NORMALIZERS = [
-    NameNormalizer,
+    name_NameNormalizer,
     RefValuesNormalizer,
     TFWorkspaceNormalizer,
     RevisionNormalizer,
@@ -273717,6 +273727,7 @@ function extractAllRefs(claimData) {
             break;
         }
     }
+    refsExtractor_log(`Refs for ${parsedClaim.kind}-${parsedClaim.name}: ${[...new Set(refs)].join(',')}`);
     return [...new Set(refs)];
 }
 function extractVirtualRefs(parsedClaim) {
@@ -273925,9 +273936,14 @@ async function loadClaim(claimRef, org, defaults = loadClaimDefaults(), patchCla
     }
     return result;
 }
-const LoadedClaims = {};
-const VisitedClaims = {};
-const DuplicatedClaims = {};
+let LoadedClaims = {};
+let VisitedClaims = {};
+let DuplicatedClaims = {};
+function resetLazyLoader() {
+    LoadedClaims = {};
+    VisitedClaims = {};
+    DuplicatedClaims = {};
+}
 async function lazyGetClaim(kind, name, org, cwd) {
     const indice = `${kind}-${name}`;
     lazy_loader_log(`Lazy loading ${kind}-${name} with index ${indice}`);
@@ -273951,6 +273967,7 @@ async function getClaimsByName(name, cwd = '.') {
         const handler = (0,external_node_child_process_namespaceObject.spawn)('grep', ['-r', '-l', '--include=*', '-E', `name: "?${name}"?`, '.'], {
             cwd: cwd,
         });
+        lazy_loader_log(`Running ${['grep', '-r', '-l', '--include', '-E', 'name: "' + name + '"?', '.'].join(' ')}`);
         const entradas = [];
         const chunks = [];
         handler.stdout.on('data', (data) => {
@@ -274008,13 +274025,13 @@ async function loadRawClaim(entry) {
 async function setVirtualClaimAdditionalData(renderedData, claim, claimRef) {
     const virtualClaim = getVirtualClaim(claim.kind, claim.name);
     renderedData[claimRef]['initializers'] = [
-        new UUIDInitializer(claim),
-        new InitializerClaimRef(),
-        new InitializerDefault(virtualClaim.getDefaultConfig()),
+        new uuid_UUIDInitializer(claim),
+        new claimRef_InitializerClaimRef(),
+        new initializer_InitializerDefault(virtualClaim.getDefaultConfig()),
     ];
     renderedData[claimRef]['globals'] = [];
     renderedData[claimRef]['overrides'] = [];
-    renderedData[claimRef]['normalizers'] = [new NameNormalizer()];
+    renderedData[claimRef]['normalizers'] = [new name_NameNormalizer()];
     return renderedData;
 }
 async function setNonVirtualClaimAdditionalData(renderedData, claim, claimRef, loadInitializers, loadGlobals, loadOverrides, loadNormalizers) {
@@ -274217,19 +274234,19 @@ async function loadInitializers(claim, initializersPath = config_getPath('initia
  *   · The claim's applicable initializers, globals and overrides
  *
  */
-async function loadClaims(claimsPath = config_getPath('claims')) {
+async function loadClaims(claimsPath = getPath('claims')) {
     const result = {};
     const defaultsClaims = loadClaimDefaults();
-    await crawler_crawl(claimsPath, (entry) => {
+    await crawl(claimsPath, (entry) => {
         return isYamlFile.test(entry);
     }, async (entry, data) => {
-        const claim = loader_patchClaim(catalog_common.io.fromYaml(data), defaultsClaims);
+        const claim = loader_patchClaim(common.io.fromYaml(data), defaultsClaims);
         if (!('kind' in claim && 'name' in claim)) {
             throw new Error(`Invalid claim file ${entry}`);
         }
         try {
-            validateClaim(claim, base[`${claim.kind}Schema`]);
-            await optionalValidation(claim);
+            ClaimValidation.validateClaim(claim, claims[`${claim.kind}Schema`]);
+            await ClaimValidation.optionalValidation(claim);
         }
         catch (err) {
             throw new Error(`Validating ${claim.kind + '-' + claim.name}: ${JSON.stringify(err, null, 2)}`);
@@ -274326,7 +274343,7 @@ async function loadRenames(claims, crs) {
         if (!anyCr?.metadata?.annotations)
             continue;
         // if the annotation is a claimRef
-        const annotationName = catalog_common.generic.getFirestartrAnnotation('claim-ref');
+        const annotationName = common.generic.getFirestartrAnnotation('claim-ref');
         const annotations = anyCr?.metadata?.annotations || {};
         if (annotationName in annotations) {
             const claimRef = anyCr.metadata.annotations[annotationName];
@@ -274408,7 +274425,7 @@ async function loadClaimsList(claimRefList, claimsPath = config_getPath('claims'
         crs: {},
     };
     const defaults = loadClaimDefaults();
-    for (const claimRef of claimRefList) {
+    for await (const claimRef of claimRefList) {
         const renderedClaimData = await loadClaim(claimRef, getOrg(), defaults, loader_patchClaim, loadInitializers, loadGlobals, loadOverrides, loadNormalizers, claimsPath);
         data.renderClaims = lodash_default().merge(data.renderClaims, renderedClaimData);
     }
@@ -274427,7 +274444,7 @@ function getOrg() {
 
 ;// CONCATENATED MODULE: ../cdk8s_renderer/src/validations/wellKnownStructures.ts
 
-function isCollaborator(struc) {
+function wellKnownStructures_isCollaborator(struc) {
     return hasProperties(struc, ['collaborator', 'role']);
 }
 function hasProperties(struc, properties) {
@@ -274439,7 +274456,7 @@ function hasProperties(struc, properties) {
     return true;
 }
 function hasProperty(struc, property) {
-    return lodash_default().has(struc, property);
+    return lodash.has(struc, property);
 }
 
 ;// CONCATENATED MODULE: ../cdk8s_renderer/src/validations/references.ts
@@ -274531,7 +274548,7 @@ Check the following Claims to ensure that the tfStateKey is unique:
 function validateReferencesInCR(cr, crs) {
     if (isCatalogEntity(cr)) {
         if (getConfiguredProvider() === AllowedProviders.catalog) {
-            validateCatalogEntities(cr, crs);
+            //validateCatalogEntities(cr, crs);
             //console.log(`Skip validation ${cr.name}`);
         }
     }
@@ -274562,7 +274579,7 @@ function throwIfRefNotFoundInCatalog(crs, refObj, refStr, crStr) {
  */
 function validateNonCatalogEntities(cr, crs) {
     for (const rel of references_WELL_KNOWN_RELATIONS[cr.kind] || []) {
-        const propertyRef = lodash_default().get(cr, rel);
+        const propertyRef = _.get(cr, rel);
         if (!propertyRef) {
             throw new Error(`CR ${cr.kind} ${cr.metadata.name} does not have property ${rel}`);
         }
@@ -274592,8 +274609,8 @@ function validateNonCatalogEntities(cr, crs) {
  */
 function validateCatalogEntities(cr, crs) {
     for (const rel of WELL_KNOWN_RELATIONS_CATALOG[cr.kind]) {
-        if (lodash_default().has(cr, rel)) {
-            const refObject = lodash_default().get(cr, rel);
+        if (_.has(cr, rel)) {
+            const refObject = _.get(cr, rel);
             const catalogEntityName = extractNameCatalogEntity(cr);
             if (!Array.isArray(refObject)) {
                 const propertyRef = createCatalogEntityPropertyRef(refObject);
@@ -276131,6 +276148,10 @@ const KINDS_CR_MAP = {
 };
 
 
+
+
+
+const claimUtils_log = src_default()('firestartr:utils:path-resolver');
 function resolveStringReference(reference) {
     const referenceElements = reference.split(':');
     const actualKind = KINDS_CR_MAP[referenceElements[0]];
@@ -276139,6 +276160,11 @@ function resolveStringReference(reference) {
         name: referenceElements[1],
     };
 }
+async function* claimsRefListAsGenerator(refs) {
+    for (const ref of refs) {
+        yield ref;
+    }
+}
 // Given a fileList "<file1>,<file2>....<fileN>"
 // It parses the files an returns a list of references
 // in the form of <kind>-<name>
@@ -276147,8 +276173,8 @@ function resolveClaimFilesList(claimRefsList) {
     const refList = [];
     for (const file of fileList) {
         try {
-            const data = external_fs_.readFileSync(file, 'utf-8');
-            const claim = catalog_common.io.fromYaml(data);
+            const data = fs.readFileSync(file, 'utf-8');
+            const claim = common.io.fromYaml(data);
             if (!('kind' in claim && 'name' in claim)) {
                 throw 'Invalid claim file, has not kind and/or name';
             }
@@ -276163,6 +276189,66 @@ function resolveClaimFilesList(claimRefsList) {
     }
     return refList;
 }
+// This function receives an array of entries (dirs or files)
+// it returns a generator able to be used in a loop
+// under the form: for await (const claimRef of resolveClaimRefsGenerator){}
+// If dirs are passed, it resolves them recursively
+async function* resolveClaimEntries(claimRefsList) {
+    claimUtils_log(`Resolving ${claimRefsList.join(',')}`);
+    for (const claimEntry of claimRefsList) {
+        try {
+            const claimEntryStats = await (0,promises_namespaceObject.stat)(claimEntry);
+            if (claimEntryStats.isDirectory()) {
+                yield* resolveDirEntries(claimEntry);
+            }
+            else if (claimEntryStats.isFile()) {
+                claimUtils_log(`Sending entry ${resolveClaimFileRef(claimEntry)} (${claimEntry})`);
+                yield resolveClaimFileRef(claimEntry);
+            }
+        }
+        catch (err) {
+            throw new Error(`Error processing: ${claimEntry}: ${err}`);
+        }
+    }
+}
+// this function recursively searches for files
+// it returns a generator that yields claimRefs
+async function* resolveDirEntries(dir) {
+    let entries = [];
+    try {
+        entries = await (0,promises_namespaceObject.readdir)(dir, { withFileTypes: true });
+    }
+    catch (err) {
+        throw new Error(`Reading dir: ${dir}: ${err}`);
+    }
+    for (const entry of entries) {
+        const fullPath = external_path_default().join(dir, entry.name);
+        if (entry.isDirectory()) {
+            yield* resolveDirEntries(fullPath);
+        }
+        else if (entry.isFile() && entry.name.match(/\.yaml$|\.yml$/)) {
+            const claimRef = await resolveClaimFileRef(fullPath);
+            claimUtils_log(`Sending entry ${claimRef} (${fullPath})`);
+            yield claimRef;
+        }
+    }
+}
+async function resolveClaimFileRef(claimFile) {
+    try {
+        const data = await external_fs_default().promises.readFile(claimFile, 'utf-8');
+        const claim = catalog_common.io.fromYaml(data);
+        if (!('kind' in claim && 'name' in claim)) {
+            throw new Error('Invalid claim file has not kind and/or name');
+        }
+        else {
+            const claimRef = `${claim.kind}-${claim.name}`;
+            return claimRef;
+        }
+    }
+    catch (err) {
+        throw new Error(`Error: file ${claimFile}: ${err}`);
+    }
+}
 
 ;// CONCATENATED MODULE: ../cdk8s_renderer/imports/firestartr.dev.ts
 // generated by cdk8s
@@ -279522,9 +279608,9 @@ async function renderClaims(catalogScope, firestartrScope, data) {
     for (const renderClaims of sortedKinds) {
         for (const claimKey of Object.keys(renderClaims)) {
             const claim = renderClaims[claimKey].claim;
-            const configuredProvider = getConfiguredProvider().toString();
+            const configuredProvider = config_getConfiguredProvider().toString();
             let providers = Object.keys(claim.providers);
-            if (configuredProvider !== AllowedProviders.all.toString()) {
+            if (configuredProvider !== config_AllowedProviders.all.toString()) {
                 providers = providers.filter((provider) => provider === configuredProvider);
             }
             const previousCR = getPreviousCRfromClaim(claim, crs);
@@ -279571,12 +279657,12 @@ async function renderClaim(catalogScope, firestartrScope, claim, patches, previo
     }
     const renderPatches = patches.filter((patch) => !patch.isPostPatch);
     const postPatches = patches.filter((patch) => patch.isPostPatch);
-    const provider = getConfiguredProvider();
-    const loadGithub = (provider === AllowedProviders.all ||
-        provider === AllowedProviders.catalog ||
-        provider === AllowedProviders.github) &&
+    const provider = config_getConfiguredProvider();
+    const loadGithub = (provider === config_AllowedProviders.all ||
+        provider === config_AllowedProviders.catalog ||
+        provider === config_AllowedProviders.github) &&
         'github' in claim.providers;
-    const loadCatalog = provider === AllowedProviders.all || provider === AllowedProviders.catalog;
+    const loadCatalog = provider === config_AllowedProviders.all || provider === config_AllowedProviders.catalog;
     switch (claim.kind) {
         case 'DomainClaim':
             if (loadCatalog) {
@@ -279614,8 +279700,8 @@ async function renderClaim(catalogScope, firestartrScope, claim, patches, previo
             break;
         case 'TFWorkspaceClaim':
             if (claim.providers.terraform &&
-                (provider === AllowedProviders.terraform ||
-                    provider === AllowedProviders.all)) {
+                (provider === config_AllowedProviders.terraform ||
+                    provider === config_AllowedProviders.all)) {
                 firestartrEntity = new charts.TFWorkspaceChart(firestartrScope, `terraform-${chartId}`, firestartrId, claim, renderPatches);
             }
             if (loadCatalog) {
@@ -279624,9 +279710,9 @@ async function renderClaim(catalogScope, firestartrScope, claim, patches, previo
             break;
         case 'SecretsClaim':
             if (claim.providers.external_secrets &&
-                (provider === AllowedProviders.externalSecrets ||
-                    provider === AllowedProviders.terraform ||
-                    provider === AllowedProviders.all)) {
+                (provider === config_AllowedProviders.externalSecrets ||
+                    provider === config_AllowedProviders.terraform ||
+                    provider === config_AllowedProviders.all)) {
                 firestartrEntity = new charts.SecretsChart(firestartrScope, chartId, firestartrId, claim, []);
             }
             if (loadCatalog) {
@@ -279635,8 +279721,8 @@ async function renderClaim(catalogScope, firestartrScope, claim, patches, previo
             break;
         case 'ArgoDeployClaim':
             if (claim.providers.argocd &&
-                (provider === AllowedProviders.argocd ||
-                    provider === AllowedProviders.all)) {
+                (provider === config_AllowedProviders.argocd ||
+                    provider === config_AllowedProviders.all)) {
                 firestartrEntity = new charts.ArgoDeployChart(firestartrScope, `argocd-${chartId}`, firestartrId, claim, renderPatches);
             }
             if (loadCatalog) {
@@ -279701,18 +279787,12 @@ async function renderClaim(catalogScope, firestartrScope, claim, patches, previo
  *   rendered firestartr-all group
  *
  */
-async function renderer_render(catalogScope, firestartrScope, activateReferentialIntegrityValidation = true, claimList = []) {
-    let data;
-    if (claimList.length > 0) {
-        data = await loadClaimsList(claimList);
-    }
-    else {
-        data = await loadAll();
-    }
+async function renderer_render(catalogScope, firestartrScope, activateReferentialIntegrityValidation = true, claimList) {
+    const data = await loadClaimsList(claimList);
     const result = await renderClaims(catalogScope, firestartrScope, data);
-    if (activateReferentialIntegrityValidation) {
-        validateReferentialIntegrity(result);
-    }
+    //if (activateReferentialIntegrityValidation) {
+    //  validateReferentialIntegrity(result);
+    //}
     validateTfStateKeyUniqueness(result);
     return result;
 }
@@ -279726,6 +279806,8 @@ async function renderer_render(catalogScope, firestartrScope, activateReferentia
 
 
 
+
+
 const MAIN_BRANCH_OUTPUT_DIR = '/tmp/resources_from_main_branch';
 const PR_BRANCH_OUTPUT_DIR = '/tmp/resources_from_pr_branch';
 /**
@@ -279774,9 +279856,10 @@ async function getAffectedRepositories(claimPathFromMain, claimPathFromPR, wetRe
         yamlOutputType: lib.YamlOutputType.FILE_PER_RESOURCE,
     });
     // Render the main branch
-    const renderFromMainBranch = await renderer_render(mainBranchCatalogApp, mainBranchFirestartrApp);
+    const renderFromMainBranch = await renderer_render(mainBranchCatalogApp, mainBranchFirestartrApp, true, await resolveClaimEntries([claimPathFromMain]));
     mainBranchFirestartrApp.synth();
     emptyRenderedClaims();
+    resetLazyLoader();
     // Change the claims path to the PR branch
     setPath('claims', claimPathFromPR);
     const app2 = new lib.App({
@@ -279785,7 +279868,7 @@ async function getAffectedRepositories(claimPathFromMain, claimPathFromPR, wetRe
         yamlOutputType: lib.YamlOutputType.FILE_PER_RESOURCE,
     });
     // Render the PR branch
-    const renderFromPRBranch = await renderer_render(new lib.App(), app2);
+    const renderFromPRBranch = await renderer_render(new lib.App(), app2, true, await resolveClaimEntries([claimPathFromPR]));
     app2.synth();
     // Iterate over the resources from the main branch
     for (const key of Object.keys(renderFromMainBranch)) {
@@ -279886,7 +279969,7 @@ async function runComparer(claimPathFromMain, claimPathFromPR, claimsDefaultsPat
 const renderer_log = src_default()('firestartr:operator:cmd:tfworkspaces-renderer');
 async function renderTfWorkspace(claim, firestartrId, resolveRef, namespace) {
     const app = new lib.App();
-    const initializers = [new UUIDInitializer(), new InitializerClaimRef()];
+    const initializers = [new uuid_UUIDInitializer(), new claimRef_InitializerClaimRef()];
     const previousCR = await resolveRef('TFWorkspace', claim.name, namespace);
     if (previousCR) {
         renderer_log(`💊 Previous CR found for ${claim.name} in ${namespace} with tfStateKey ${previousCR.spec.firestartr.tfStateKey}`);
@@ -279896,7 +279979,7 @@ async function renderTfWorkspace(claim, firestartrId, resolveRef, namespace) {
     }
     const refValuesNormalizer = new RefValuesNormalizer();
     refValuesNormalizer.rsClaimRef = (kind, name) => resolveRef(kind, name, namespace);
-    const normalizers = [refValuesNormalizer, new NameNormalizer()];
+    const normalizers = [refValuesNormalizer, new name_NameNormalizer()];
     let totalPatches = [];
     for (const normalizer of normalizers) {
         const patches = await normalizer.patches(claim, previousCR);
@@ -279995,7 +280078,7 @@ async function addLastStateAndLastClaimAnnotations(filePath, lastStatePRLink, la
     INITIALIZERS: INITIALIZERS,
     INITIALIZERS_BY_FILE_NAME: INITIALIZERS_BY_FILE_NAME,
     NORMALIZERS: NORMALIZERS,
-    AllowedProviders: AllowedProviders,
+    AllowedProviders: config_AllowedProviders,
     runComparer: runComparer,
     isCatalogEntity: isCatalogEntity,
     loadCRs: loadCRs,
@@ -280038,12 +280121,17 @@ async function runRenderer(globalsPath, initializersPath, claimsPath, crsPath, c
         outputFileExtension: '.yaml',
         yamlOutputType: lib.YamlOutputType.FILE_PER_RESOURCE,
     });
-    let claimRefsList = [];
+    let claimRefsList = null;
     if (claimRefs) {
-        claimRefsList = claimRefs.replace(/\s/g, '').split(',');
+        claimRefsList = await claimsRefListAsGenerator(claimRefs.replace(/\s/g, '').split(','));
     }
     else if (claimFilesList) {
-        claimRefsList = resolveClaimFilesList(claimFilesList);
+        claimRefsList = await resolveClaimEntries(claimFilesList.replace(/\s/g, '').split(','));
+    }
+    else {
+        // in case nothing is passed
+        // the system takes everything defined in the claims path
+        claimRefsList = await resolveClaimEntries([claimsPath]);
     }
     try {
         await renderer_render(catalogApp, firestartrApp, validateReferentialIntegrity === 'enabled' ? true : false, claimRefsList);
@@ -280124,10 +280212,10 @@ class Decanter {
         this.data = data;
     }
     async __adaptInitializerTfStateKey() {
-        return new UUIDInitializer();
+        return new uuid_UUIDInitializer();
     }
     async __adaptInitializerClaimRef() {
-        return new InitializerClaimRef();
+        return new claimRef_InitializerClaimRef();
     }
     async __adaptInitializerImport() {
         return new ImportInitializer();
@@ -280211,7 +280299,7 @@ class Decanter {
                 initializers,
                 globals: [],
                 overrides,
-                normalizers: [new NameNormalizer()],
+                normalizers: [new name_NameNormalizer()],
             },
         };
         return adapted;
@@ -280242,7 +280330,7 @@ class GithubDecanter extends decanter_base {
         this.org = org;
     }
     __adaptClaimRef() {
-        return new InitializerClaimRef();
+        return new claimRef_InitializerClaimRef();
     }
 }
 
@@ -280327,7 +280415,7 @@ class GroupGithubDecanter extends GithubDecanter {
                 },
             },
         };
-        return new InitializerDefault(adapterBase);
+        return new initializer_InitializerDefault(adapterBase);
     }
     __validateKind(cr) {
         return true;
@@ -280482,7 +280570,7 @@ class MemberGithubDecanter extends GithubDecanter {
                 },
             },
         };
-        return new InitializerDefault(adapterBase);
+        return new initializer_InitializerDefault(adapterBase);
     }
 }
 
@@ -280531,7 +280619,7 @@ class RepoGithubDecanter extends GithubDecanter {
             version: this.VERSION(),
             type: 'service',
             lifecycle: 'production',
-            system: `${this.org}-system`,
+            system: `system:${this.org}-system`,
             name: this.data.repoDetails.name,
         };
     }
@@ -280821,7 +280909,7 @@ class RepoGithubDecanter extends GithubDecanter {
                 },
             },
         };
-        return new InitializerDefault(adapterBase);
+        return new initializer_InitializerDefault(adapterBase);
     }
     async __adaptOverriderRepo(_claim) {
         return new GithubRepositoryOverrider();
@@ -281071,7 +281159,7 @@ function compileReg(value) {
 //    gh-group: 'FirestartrGithubGroup',
 //    gh-repo: 'FirestartrGithubRepository',
 //  }
-async function runImporter(force, generateDefaults, skipPlan, claimsPath, crsPath, configPath, claimsDefaultsPath, org, filters, provider = AllowedProviders.all) {
+async function runImporter(force, generateDefaults, skipPlan, claimsPath, crsPath, configPath, claimsDefaultsPath, org, filters, provider = config_AllowedProviders.all) {
     configureProvider(provider);
     let generatedFilters = [];
     //gh-repo,REGEXP=.*vite.*
@@ -281166,7 +281254,7 @@ function generateClaimsDefaults(org, defaultsPath) {
             version: '1.0',
             type: 'service',
             lifecycle: 'production',
-            system: 'firestartr-test-system',
+            system: 'system:firestartr-test-system',
             maintainedBy: [],
             platformOwner: `group:${org}-all`,
             providers: {
@@ -281813,7 +281901,6 @@ async function writePlanInGithubPR(prUrl, planText) {
 }
 async function addApplyCommitStatus(cr, state, targetURL = '', description = '', context = '') {
     try {
-        await addCommitStatusToHeadCommit(cr.metadata.annotations['firestartr.dev/last-claim-pr'], state, targetURL, description, context);
         await addCommitStatusToPrMergeCommit(cr.metadata.annotations['firestartr.dev/last-state-pr'], state, targetURL, description, context);
     }
     catch (e) {
@@ -281855,12 +281942,6 @@ async function addCommitStatusToPrMergeCommit(prAnnotationValue, state, targetUR
     fDebug(`Adding commit status to ${prAnnotationValue} for owner ${owner}, repo ${repo} and SHA ${branchSha}`);
     await github_0.repo.addCommitStatus(state, branchSha, repo, owner, targetURL, description, context);
 }
-async function addCommitStatusToHeadCommit(prAnnotationValue, state, targetURL, description, context) {
-    const { owner, repo, prNumber } = catalog_common.generic.getOwnerRepoPrNumberFromAnnotationValue(prAnnotationValue);
-    const branchSha = await github_0.pulls.getPrLastCommitSHA(prNumber, repo, owner);
-    fDebug(`Adding commit status to ${prAnnotationValue} for owner ${owner}, repo ${repo} and SHA ${branchSha}`);
-    await github_0.repo.addCommitStatus(state, branchSha, repo, owner, targetURL, description, context);
-}
 async function getLastStatePrInfo(cr) {
     try {
         const prInfo = cr.metadata.annotations['firestartr.dev/last-state-pr'];
@@ -285123,8 +285204,7 @@ async function* doApply(item, op, handler) {
         }
         const deps = await handler.resolveReferences();
         cdktf_log('Item %s has the following dependencies: %O', item.metadata.name, deps);
-        if ((item.metadata.annotations['firestartr.dev/last-claim-pr'] || false) &&
-            (item.metadata.annotations['firestartr.dev/last-state-pr'] || false)) {
+        if (item.metadata.annotations['firestartr.dev/last-state-pr'] || false) {
             await addApplyCommitStatus(item, 'pending', catalog_common.generic.getPrLinkFromAnnotationValue(item.metadata.annotations['firestartr.dev/last-state-pr']), 'Performing apply operation...', `Terraform Apply ${item.metadata.name}`);
         }
         const applyOutput = await provisioner.runProvisioner({
@@ -285160,8 +285240,7 @@ async function* doApply(item, op, handler) {
             message: 'doApply',
         };
         await handler.writeTerraformOutputInTfResult(item, output);
-        if ((item.metadata.annotations['firestartr.dev/last-claim-pr'] || false) &&
-            (item.metadata.annotations['firestartr.dev/last-state-pr'] || false)) {
+        if (item.metadata.annotations['firestartr.dev/last-state-pr'] || false) {
             await addApplyCommitStatus(item, 'success', catalog_common.generic.getPrLinkFromAnnotationValue(item.metadata.annotations['firestartr.dev/last-state-pr']), 'Apply operation completed', `Terraform Apply ${item.metadata.name}`);
         }
         handler.success();
@@ -285197,8 +285276,7 @@ async function* doApply(item, op, handler) {
             status: 'False',
             message: error.toString(),
         };
-        if ((item.metadata.annotations['firestartr.dev/last-claim-pr'] || false) &&
-            (item.metadata.annotations['firestartr.dev/last-state-pr'] || false)) {
+        if (item.metadata.annotations['firestartr.dev/last-state-pr'] || false) {
             await addApplyCommitStatus(item, 'failure', catalog_common.generic.getPrLinkFromAnnotationValue(item.metadata.annotations['firestartr.dev/last-state-pr']), 'Apply operation failed', `Terraform Apply ${item.metadata.name}`);
         }
         handler.error();
@@ -286534,8 +286612,7 @@ async function* process_operation_doApply(item, op, handler) {
         const deps = await handler.resolveReferences();
         process_operation_log('Item %s has the following dependencies: %O', item.metadata.name, deps);
         const context = buildProvisionerContext(item, deps);
-        if ((item.metadata.annotations['firestartr.dev/last-claim-pr'] || false) &&
-            (item.metadata.annotations['firestartr.dev/last-state-pr'] || false)) {
+        if (item.metadata.annotations['firestartr.dev/last-state-pr'] || false) {
             await addApplyCommitStatus(item, 'pending', catalog_common.generic.getPrLinkFromAnnotationValue(item.metadata.annotations['firestartr.dev/last-state-pr']), 'Performing apply operation...', `Terraform Apply ${item.metadata.name}`);
         }
         const applyOutput = await runTerraformProvisioner(context, 'apply');
@@ -286570,8 +286647,7 @@ async function* process_operation_doApply(item, op, handler) {
             message: 'doApply',
         };
         await handler.writeTerraformOutputInTfResult(item, output);
-        if ((item.metadata.annotations['firestartr.dev/last-claim-pr'] || false) &&
-            (item.metadata.annotations['firestartr.dev/last-state-pr'] || false)) {
+        if (item.metadata.annotations['firestartr.dev/last-state-pr'] || false) {
             await addApplyCommitStatus(item, 'success', catalog_common.generic.getPrLinkFromAnnotationValue(item.metadata.annotations['firestartr.dev/last-state-pr']), 'Apply operation completed', `Terraform Apply ${item.metadata.name}`);
         }
         handler.success();
@@ -286601,8 +286677,7 @@ async function* process_operation_doApply(item, op, handler) {
             status: 'False',
             message: JSON.stringify(e),
         };
-        if ((item.metadata.annotations['firestartr.dev/last-claim-pr'] || false) &&
-            (item.metadata.annotations['firestartr.dev/last-state-pr'] || false)) {
+        if (item.metadata.annotations['firestartr.dev/last-state-pr'] || false) {
             await addApplyCommitStatus(item, 'failure', catalog_common.generic.getPrLinkFromAnnotationValue(item.metadata.annotations['firestartr.dev/last-state-pr']), 'Apply operation failed', `Terraform Apply ${item.metadata.name}`);
         }
         handler.error();
@@ -286845,27 +286920,27 @@ function getErrorOutputMessage(cr, key, ref) {
         return `
 
     ❌ No output ${key} found in secret '${ref.secret.metadata.name}' .
-    
+
     ❗❕ Your terraform project has not the output '${key}' .
-    
+
     Maybe you forgot to add it or your reference is wrong.
-    
+
     🔗 Terraform project: ${cr.spec.module}
-   
+
     🖹 Output example:
-   
+
     ... your terraform code ...
-   
+
     # missing output
     output '${key}' {
       value = <your_value>
     }
-    
+
     `;
     }
     else if (cr.spec.source === 'Inline') {
         return `❗❕ Could not find output '${key}' in inline module:
-    
+
       ${cr.spec.module}
     `;
     }

package/build/packages/cdk8s_renderer/src/claims/base/schemas/component.schema.d.ts

@@ -10,6 +10,7 @@ declare const _default: {
                 $ref: string;
                 type?: undefined;
                 properties?: undefined;
+                required?: undefined;
                 additionalProperties?: undefined;
             } | {
                 type: string;
@@ -18,6 +19,10 @@ declare const _default: {
                         type: string;
                         pattern: string;
                     };
+                    owner: {
+                        type: string;
+                        pattern: string;
+                    };
                     providers: {
                         type: string;
                         properties: {
@@ -27,6 +32,7 @@ declare const _default: {
                         };
                     };
                 };
+                required: string[];
                 additionalProperties: boolean;
                 $ref?: undefined;
             })[];

package/build/packages/cdk8s_renderer/src/claims/base/schemas/index.d.ts

@@ -142,6 +142,7 @@ declare const schemas: {
                     $ref: string;
                     type?: undefined;
                     properties?: undefined;
+                    required?: undefined;
                     additionalProperties?: undefined;
                 } | {
                     type: string;
@@ -150,6 +151,10 @@ declare const schemas: {
                             type: string;
                             pattern: string;
                         };
+                        owner: {
+                            type: string;
+                            pattern: string;
+                        };
                         providers: {
                             type: string;
                             properties: {
@@ -159,6 +164,7 @@ declare const schemas: {
                             };
                         };
                     };
+                    required: string[];
                     additionalProperties: boolean;
                     $ref?: undefined;
                 })[];
@@ -237,6 +243,7 @@ declare const schemas: {
                     $ref: string;
                     type?: undefined;
                     properties?: undefined;
+                    required?: undefined;
                     additionalProperties?: undefined;
                 } | {
                     type: string;
@@ -248,6 +255,10 @@ declare const schemas: {
                             type: string;
                             pattern: string;
                         };
+                        owner: {
+                            type: string;
+                            pattern: string;
+                        };
                         providers: {
                             type: string;
                             properties: {
@@ -258,6 +269,7 @@ declare const schemas: {
                             required: string[];
                         };
                     };
+                    required: string[];
                     additionalProperties: boolean;
                     $ref?: undefined;
                 })[];

package/build/packages/cdk8s_renderer/src/claims/base/schemas/tfworkspace.schema.d.ts

@@ -10,6 +10,7 @@ declare const _default: {
                 $ref: string;
                 type?: undefined;
                 properties?: undefined;
+                required?: undefined;
                 additionalProperties?: undefined;
             } | {
                 type: string;
@@ -21,6 +22,10 @@ declare const _default: {
                         type: string;
                         pattern: string;
                     };
+                    owner: {
+                        type: string;
+                        pattern: string;
+                    };
                     providers: {
                         type: string;
                         properties: {
@@ -31,6 +36,7 @@ declare const _default: {
                         required: string[];
                     };
                 };
+                required: string[];
                 additionalProperties: boolean;
                 $ref?: undefined;
             })[];

package/build/packages/cdk8s_renderer/src/loader/lazy_loader.d.ts

@@ -3,3 +3,4 @@ import { GlobalSection } from '../globals/base';
 import { OverriderPatches } from '../overriders/base';
 import { Normalizer } from '../normalizers/base';
 export declare function loadClaim(claimRef: string, org: string, defaults: any, patchClaim: (claim: any, defaults: any) => any, loadInitializers: (claim: any) => Promise<InitializerPatches[]>, loadGlobals: (claim: any) => Promise<GlobalSection[]>, loadOverrides: (claim: any) => OverriderPatches[], loadNormalizers: (claim: any, path: string) => Promise<Normalizer[]>, cwd?: string, existingRefs?: any): Promise<any>;
+export declare function resetLazyLoader(): void;

package/build/packages/cdk8s_renderer/src/loader/loader.d.ts

@@ -39,7 +39,7 @@ export declare function loadAll(): Promise<{
     crs: any;
     renames?: IRenameResult[];
 }>;
-export declare function loadClaimsList(claimRefList: string[], claimsPath?: string): Promise<{
+export declare function loadClaimsList(claimRefList: AsyncGenerator<string, void, unknown>, claimsPath?: string): Promise<{
     renderClaims: RenderClaims;
     crs: any;
     renames?: IRenameResult[];

package/build/packages/cdk8s_renderer/src/renderer/renderer.d.ts

@@ -1,3 +1,3 @@
 import { Construct } from 'constructs';
 import { RenderedCrMap } from './types';
-export declare function render(catalogScope: Construct, firestartrScope: Construct, activateReferentialIntegrityValidation?: boolean, claimList?: string[]): Promise<RenderedCrMap>;
+export declare function render(catalogScope: Construct, firestartrScope: Construct, activateReferentialIntegrityValidation: boolean, claimList: AsyncGenerator<string, void, unknown>): Promise<RenderedCrMap>;

package/build/packages/cdk8s_renderer/src/utils/claimUtils.d.ts

@@ -1,2 +1,5 @@
 export declare function resolveStringReference(reference: string): any;
+export declare function claimsRefListAsGenerator(refs: string[]): AsyncGenerator<string, void, unknown>;
 export declare function resolveClaimFilesList(claimRefsList: string): string[];
+export declare function resolveClaimEntries(claimRefsList: string[]): AsyncGenerator<string, void, unknown>;
+export declare function resolveClaimFileRef(claimFile: string): Promise<string>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@firestartr/cli",
-  "version": "1.45.0-snapshot-17",
+  "version": "1.45.0",
   "private": false,
   "description": "Commandline tool",
   "main": "build/main.js",