@intentius/chant-lexicon-k8s 0.1.22 → 0.1.23

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "16d4681e5dc5c5b1b4c97da0554cdfa383fc127613db3602fe96c00cbfe33167",
+    "manifest.json": "a40500a319710239828776b5e04b46374aeb39f60313b0cb3f9770d9bc844d8c",
     "meta.json": "8e9c0279eb8666c8b181897a55f614c7e803fed6fc6cb549249d8f998aa764d2",
     "types/index.d.ts": "7eb3017762f49faa57dae1d71f3e77a08e52ac8fc7eeab192cba4e981b7efed6",
     "rules/argo-appset-single-project.ts": "afa9f310753aa2d475f35012b13135b2dfaebed2a35d44edbe185ebc07673674",
@@ -50,5 +50,5 @@
     "skills/chant-k8s-aks.md": "e18f0e2b055f72cd7a37deaf258d7027c2d4d3e286e8fd4975b27a1f981a3ad9",
     "skills/chant-k8s-argo.md": "b1a0b826559d8c5033a479c5781efaf650320f0aee4419d8841170bd3393cea5"
   },
-  "composite": "6fb4af451233a121e600d329d10cc6ed97b225116964956ccc0baa7493978f78"
+  "composite": "2aaafe56e3fec2c11f54aacbc10457a680b4b06216f9da5ec80b9e1376fbaf32"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "k8s",
-  "version": "0.1.22",
+  "version": "0.1.23",
   "chantVersion": ">=0.1.0",
   "namespace": "K8s",
   "intrinsics": [],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-k8s",
-  "version": "0.1.22",
+  "version": "0.1.23",
   "description": "Kubernetes lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",

package/src/composites/composites.test.ts

@@ -1486,6 +1486,8 @@ describe("SecureIngress", () => {
   test("creates certificate when clusterIssuer set", () => {
     const result = SecureIngress({ ...minProps, clusterIssuer: "letsencrypt-prod" });
     expect(result.certificate).toBeDefined();
+    // A real cert-manager Certificate, not the former Ingress-proxy placeholder.
+    expect(result.certificate!.constructor.name).toBe("Certificate");
     const certSpec = p(result.certificate!).spec as any;
     expect(certSpec.issuerRef.name).toBe("letsencrypt-prod");
     expect(certSpec.dnsNames).toEqual(["app.example.com"]);

package/src/composites/secure-ingress.ts

@@ -6,7 +6,7 @@
  */
 
 import { Composite, mergeDefaults } from "@intentius/chant";
-import { Ingress } from "../generated";
+import { Ingress, Certificate } from "../generated";
 
 export interface SecureIngressHost {
   /** Hostname (e.g., "api.example.com"). */
@@ -44,7 +44,7 @@ export interface SecureIngressProps {
 
 export interface SecureIngressResult {
   ingress: InstanceType<typeof Ingress>;
-  certificate?: InstanceType<typeof Ingress>; // CRD — use Ingress as proxy Declarable
+  certificate?: InstanceType<typeof Certificate>; // cert-manager.io/v1 Certificate
 }
 
 /**
@@ -135,8 +135,10 @@ export const SecureIngress = Composite<SecureIngressProps>((props) => {
   const result: Record<string, any> = { ingress };
 
   if (clusterIssuer) {
-    // Certificate is a CRD — use Ingress constructor as a generic Declarable wrapper
-    result.certificate = new Ingress(mergeDefaults({
+    // A real cert-manager Certificate (the ingress-shim annotation on the Ingress
+    // above is also set, so either path issues the cert; the explicit resource
+    // makes the cert lifecycle declarable).
+    result.certificate = new Certificate(mergeDefaults({
       metadata: {
         name: secretName,
         ...(namespace && { namespace }),