@intentius/behold 0.4.1 → 0.6.0

package/example-flux-estate/control-plane/chant.config.ts

@@ -0,0 +1,19 @@
+import type { ChantConfig } from "@intentius/chant";
+import type { K8sChantConfig } from "@intentius/chant-lexicon-k8s";
+
+// The estate's control plane: it declares the Flux machinery (GitRepository +
+// one Kustomization per app), and the reconcilers deploy the app projects —
+// this project never applies a workload itself. Bound to the demo's own
+// cluster (scripts/estate-up.sh creates it) so a live read can never observe
+// whatever kubectl context happens to be ambient (chant#1100).
+export default {
+  lexicons: ["k8s"],
+  sourceDir: "src",
+  environments: ["local"],
+  ownership: { stack: "flux-control-plane", env: "local" },
+  k8s: {
+    profiles: {
+      local: { context: "k3d-behold-flux-demo" },
+    },
+  } satisfies K8sChantConfig,
+} satisfies ChantConfig;

package/example-flux-estate/control-plane/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "behold-example-flux-control-plane",
+  "private": true,
+  "type": "module",
+  "description": "The estate's control plane: the Flux CRs (GitRepository + Kustomizations) that deploy the app projects.",
+  "scripts": {
+    "build": "chant build src -o dist/control-plane.yaml --format yaml"
+  },
+  "dependencies": {
+    "@intentius/chant": "^0.41.20",
+    "@intentius/chant-lexicon-k8s": "^0.41.20"
+  }
+}

package/example-flux-estate/control-plane/src/flux.ts

@@ -0,0 +1,51 @@
+// The control plane, GitOps-style: Flux reconcilers deploy the app projects
+// FROM THIS REPO. The GitRepository points at behold's own public repo; each
+// Kustomization applies one app project's committed manifests into that app's
+// namespace via targetNamespace — which is why app-b's objects declare no
+// metadata.namespace (see ../../app-b/src/app.ts): Flux stamps it at apply
+// time. That is the normal Flux estate shape, and exactly the shape behold's
+// namespace-mismatch note (behold#192) exists to explain.
+//
+// scripts/estate-up.sh applies the BUILT form of this project (chant build →
+// dist/control-plane.yaml) once, after installing Flux; from then on the
+// reconcilers own the apps.
+import { Namespace, GitRepository, Kustomization } from "@intentius/chant-lexicon-k8s";
+
+// The app namespaces are control-plane concerns: a Kustomization's
+// targetNamespace must already exist — Flux does not create it.
+export const nsAppA = new Namespace({ metadata: { name: "app-a" } });
+export const nsAppB = new Namespace({ metadata: { name: "app-b" } });
+
+export const source = new GitRepository({
+  metadata: { name: "behold", namespace: "flux-system" },
+  spec: {
+    interval: "1m",
+    url: "https://github.com/INTENTIUS/behold",
+    // main is where the committed manifests live once merged. Verifying a
+    // not-yet-merged branch: estate-up.sh patches the LIVE object's ref when
+    // BEHOLD_FLUX_REF is set — the declared source stays main.
+    ref: { branch: "main" },
+  },
+});
+
+export const appA = new Kustomization({
+  metadata: { name: "app-a", namespace: "flux-system" },
+  spec: {
+    interval: "1m",
+    prune: true,
+    targetNamespace: "app-a",
+    sourceRef: { kind: "GitRepository", name: "behold" },
+    path: "./example-flux-estate/app-a/manifests",
+  },
+});
+
+export const appB = new Kustomization({
+  metadata: { name: "app-b", namespace: "flux-system" },
+  spec: {
+    interval: "1m",
+    prune: true,
+    targetNamespace: "app-b",
+    sourceRef: { kind: "GitRepository", name: "behold" },
+    path: "./example-flux-estate/app-b/manifests",
+  },
+});

package/example-flux-estate/control-plane/tsconfig.json

@@ -0,0 +1 @@
+{ "compilerOptions": { "target": "ES2022", "module": "ESNext", "moduleResolution": "Bundler", "strict": true, "skipLibCheck": true, "noEmit": true }, "include": ["src/**/*", "ops/**/*", "chant.config.ts"] }