@intentius/chant-lexicon-k8s 0.0.24 → 0.1.0

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "xxhash64",
   "artifacts": {
-    "manifest.json": "65da11d30f270ee5",
+    "manifest.json": "aff81f16893ceb64",
     "meta.json": "1ce194f36f9b5f90",
     "types/index.d.ts": "beec4cc869064186",
     "rules/missing-resource-limits.ts": "a6f776d2ff477948",
@@ -36,8 +36,8 @@
     "skills/chant-k8s-deployment-strategies.md": "74f179e7cdb15ed5",
     "skills/chant-k8s-security.md": "f377edc5fe0a3587",
     "skills/chant-k8s-eks.md": "f79f31f058c7f2ed",
-    "skills/chant-k8s-gke.md": "196b839fc8a6849c",
+    "skills/chant-k8s-gke.md": "2f65ca45aef40c22",
     "skills/chant-k8s-aks.md": "764fa4b1408b618d"
   },
-  "composite": "91eed8e99d4982de"
+  "composite": "583e41307c91a103"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "k8s",
-  "version": "0.0.24",
+  "version": "0.1.0",
   "chantVersion": ">=0.1.0",
   "namespace": "K8s",
   "intrinsics": [],

package/dist/skills/chant-k8s-gke.md

@@ -206,7 +206,7 @@ import { ConfigConnectorContext } from "@intentius/chant-lexicon-k8s";
 const { context } = ConfigConnectorContext({
   googleServiceAccountEmail: "cc-sa@my-project.iam.gserviceaccount.com",
   namespace: "config-connector",
-  stateIntoSpec: "absent",
+  stateIntoSpec: "Absent",
 });
 ```
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-k8s",
-  "version": "0.0.24",
+  "version": "0.1.0",
   "description": "Kubernetes lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -42,10 +42,11 @@
     "docs": "bun run src/codegen/docs-cli.ts",
     "prepack": "bun run generate && bun run bundle && bun run validate"
   },
-  "dependencies": {
-    "@intentius/chant": "0.0.22"
-  },
   "devDependencies": {
+    "@intentius/chant": "0.1.0",
     "typescript": "^5.9.3"
+  },
+  "peerDependencies": {
+    "@intentius/chant": "^0.1.0"
   }
 }

package/src/composites/cockroachdb-cluster.ts

@@ -66,6 +66,16 @@ export interface CockroachDbClusterProps {
    * E.g. pod "cockroachdb-0" in east advertises "cockroachdb-0.east.crdb.internal".
    */
   advertiseHostDomain?: string;
+  /**
+   * Mount the client certs secret (`${name}-client-certs`) into pods at
+   * `/cockroach/cockroach-client-certs` (default: false).
+   *
+   * Enable for multi-region deployments where `cockroach init`, `cockroach sql`,
+   * and backup schedule setup run inside a pod via `kubectl exec`. The client cert
+   * is separate from the node cert and is NOT included in the node certs secret.
+   * Without this flag you must inject client certs manually (e.g. via /tmp).
+   */
+  mountClientCerts?: boolean;
   /** Additional labels to apply to all resources. */
   labels?: Record<string, string>;
   /** Per-member defaults for fine-grained overrides. */
@@ -142,12 +152,14 @@ export const CockroachDbCluster = Composite<CockroachDbClusterProps>((props) =>
     skipCertGen = false,
     extraCertNodeAddresses = [],
     advertiseHostDomain,
+    mountClientCerts = false,
     labels: extraLabels = {},
     defaults: defs,
   } = props;
 
   const saName = name;
   const certsDir = "/cockroach/cockroach-certs";
+  const clientCertsDir = "/cockroach/cockroach-client-certs";
   const dataDir = "/cockroach/cockroach-data";
 
   const commonLabels: Record<string, string> = {
@@ -302,6 +314,10 @@ export const CockroachDbCluster = Composite<CockroachDbClusterProps>((props) =>
   if (secure) {
     volumes.push({ name: "certs", secret: { secretName: `${name}-node-certs`, defaultMode: 0o400 } });
     volumeMounts.push({ name: "certs", mountPath: certsDir });
+    if (mountClientCerts) {
+      volumes.push({ name: "client-certs", secret: { secretName: `${name}-client-certs`, defaultMode: 0o400 } });
+      volumeMounts.push({ name: "client-certs", mountPath: clientCertsDir });
+    }
   }
 
   const container: Record<string, unknown> = {

package/src/composites/composites.test.ts

@@ -2752,14 +2752,14 @@ describe("ConfigConnectorContext", () => {
     expect(spec.googleServiceAccount).toBe("cnrm@my-project.iam.gserviceaccount.com");
   });
 
-  test("default stateIntoSpec is absent", () => {
+  test("default stateIntoSpec is Absent", () => {
     const result = ConfigConnectorContext(minProps);
-    expect((p(result.context) as any).spec.stateIntoSpec).toBe("absent");
+    expect((p(result.context) as any).spec.stateIntoSpec).toBe("Absent");
   });
 
   test("custom stateIntoSpec", () => {
-    const result = ConfigConnectorContext({ ...minProps, stateIntoSpec: "merge" });
-    expect((p(result.context) as any).spec.stateIntoSpec).toBe("merge");
+    const result = ConfigConnectorContext({ ...minProps, stateIntoSpec: "Merge" });
+    expect((p(result.context) as any).spec.stateIntoSpec).toBe("Merge");
   });
 
   test("default namespace is default", () => {

package/src/composites/config-connector-context.ts

@@ -15,8 +15,8 @@ export interface ConfigConnectorContextProps {
   googleServiceAccountEmail: string;
   /** Namespace for the context (default: "default"). */
   namespace?: string;
-  /** Whether to sync status into spec (default: "absent"). */
-  stateIntoSpec?: "absent" | "merge";
+  /** Whether to sync status into spec (default: "Absent"). */
+  stateIntoSpec?: "Absent" | "Merge";
   /** Per-member defaults for fine-grained overrides. */
   defaults?: {
     context?: Partial<Record<string, unknown>>;
@@ -47,7 +47,7 @@ export const ConfigConnectorContext = Composite<ConfigConnectorContextProps>((pr
     name = "configconnectorcontext.core.cnrm.cloud.google.com",
     googleServiceAccountEmail,
     namespace = "default",
-    stateIntoSpec = "absent",
+    stateIntoSpec = "Absent",
     defaults: defs,
   } = props;
 

package/src/serializer.ts

@@ -91,6 +91,10 @@ const API_GROUP_VERSIONS: Record<string, string> = {
   GKE: "cloud.google.com/v1",
   NetworkingGKE: "networking.gke.io/v1",
   NetworkingGKEBeta: "networking.gke.io/v1beta1",
+  // Common Kubernetes operator CRDs
+  CertManager: "cert-manager.io/v1",
+  ExternalSecrets: "external-secrets.io/v1",
+  Monitoring: "monitoring.coreos.com/v1",
 };
 
 function deriveGVKFromType(entityType: string): { apiVersion: string; kind: string } | null {

package/src/skills/chant-k8s-gke.md

@@ -206,7 +206,7 @@ import { ConfigConnectorContext } from "@intentius/chant-lexicon-k8s";
 const { context } = ConfigConnectorContext({
   googleServiceAccountEmail: "cc-sa@my-project.iam.gserviceaccount.com",
   namespace: "config-connector",
-  stateIntoSpec: "absent",
+  stateIntoSpec: "Absent",
 });
 ```