@intentius/chant-lexicon-k8s 0.37.2 → 0.38.0

package/src/generated/operations.json

@@ -625,6 +625,86 @@
     "scope": "Namespaced",
     "verbs": []
   },
+  "K8s::Cnpg::Backup": {
+    "entityType": "K8s::Cnpg::Backup",
+    "apiVersion": "postgresql.cnpg.io/v1",
+    "kind": "Backup",
+    "plural": "backups",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Cnpg::Cluster": {
+    "entityType": "K8s::Cnpg::Cluster",
+    "apiVersion": "postgresql.cnpg.io/v1",
+    "kind": "Cluster",
+    "plural": "clusters",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Cnpg::ObjectStore": {
+    "entityType": "K8s::Cnpg::ObjectStore",
+    "apiVersion": "barmancloud.cnpg.io/v1",
+    "kind": "ObjectStore",
+    "plural": "objectstores",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Cnpg::Pooler": {
+    "entityType": "K8s::Cnpg::Pooler",
+    "apiVersion": "postgresql.cnpg.io/v1",
+    "kind": "Pooler",
+    "plural": "poolers",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Cnpg::ScheduledBackup": {
+    "entityType": "K8s::Cnpg::ScheduledBackup",
+    "apiVersion": "postgresql.cnpg.io/v1",
+    "kind": "ScheduledBackup",
+    "plural": "scheduledbackups",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
   "K8s::Coordination::Lease": {
     "entityType": "K8s::Coordination::Lease",
     "apiVersion": "coordination.k8s.io/v1",
@@ -1537,6 +1617,54 @@
       "watch"
     ]
   },
+  "K8s::Infisical::InfisicalDynamicSecret": {
+    "entityType": "K8s::Infisical::InfisicalDynamicSecret",
+    "apiVersion": "secrets.infisical.com/v1alpha1",
+    "kind": "InfisicalDynamicSecret",
+    "plural": "infisicaldynamicsecrets",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Infisical::InfisicalPushSecret": {
+    "entityType": "K8s::Infisical::InfisicalPushSecret",
+    "apiVersion": "secrets.infisical.com/v1alpha1",
+    "kind": "InfisicalPushSecret",
+    "plural": "infisicalpushsecrets",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Infisical::InfisicalSecret": {
+    "entityType": "K8s::Infisical::InfisicalSecret",
+    "apiVersion": "secrets.infisical.com/v1alpha1",
+    "kind": "InfisicalSecret",
+    "plural": "infisicalsecrets",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
   "K8s::KubeMicroVM::MicroVM": {
     "entityType": "K8s::KubeMicroVM::MicroVM",
     "apiVersion": "lambda.aws.amazon.com/v1alpha1",
@@ -2232,5 +2360,165 @@
     "plural": "storageversionmigrationlists",
     "scope": "Namespaced",
     "verbs": []
+  },
+  "K8s::Traefik::IngressRoute": {
+    "entityType": "K8s::Traefik::IngressRoute",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "IngressRoute",
+    "plural": "ingressroutes",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Traefik::IngressRouteTCP": {
+    "entityType": "K8s::Traefik::IngressRouteTCP",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "IngressRouteTCP",
+    "plural": "ingressroutetcps",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Traefik::IngressRouteUDP": {
+    "entityType": "K8s::Traefik::IngressRouteUDP",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "IngressRouteUDP",
+    "plural": "ingressrouteudps",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Traefik::Middleware": {
+    "entityType": "K8s::Traefik::Middleware",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "Middleware",
+    "plural": "middlewares",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Traefik::MiddlewareTCP": {
+    "entityType": "K8s::Traefik::MiddlewareTCP",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "MiddlewareTCP",
+    "plural": "middlewaretcps",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Traefik::ServersTransport": {
+    "entityType": "K8s::Traefik::ServersTransport",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "ServersTransport",
+    "plural": "serverstransports",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Traefik::ServersTransportTCP": {
+    "entityType": "K8s::Traefik::ServersTransportTCP",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "ServersTransportTCP",
+    "plural": "serverstransporttcps",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Traefik::TLSOption": {
+    "entityType": "K8s::Traefik::TLSOption",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "TLSOption",
+    "plural": "tlsoptions",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Traefik::TLSStore": {
+    "entityType": "K8s::Traefik::TLSStore",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "TLSStore",
+    "plural": "tlsstores",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
+  },
+  "K8s::Traefik::TraefikService": {
+    "entityType": "K8s::Traefik::TraefikService",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "TraefikService",
+    "plural": "traefikservices",
+    "scope": "Namespaced",
+    "verbs": [
+      "delete",
+      "get",
+      "list",
+      "patch",
+      "post",
+      "put",
+      "watch"
+    ]
   }
 }

package/src/lifecycle-integration.test.ts

@@ -211,6 +211,7 @@ describe("k8s lifecycle integration (#163)", () => {
 // The shared conformance suite (#1089) — every observing lexicon runs it.
 describeObservationConformance({
   lexicon: "k8s",
+  ownershipChannel: k8sPlugin.ownershipChannel,
   scenarios: [
     {
       name: "an RBAC-denied read alongside a confirmed absence",

package/src/plugin.ts

@@ -26,9 +26,11 @@ import { k8sHover } from "./lsp/hover";
 import { K8sParser } from "./import/parser";
 import { K8sGenerator } from "./import/generator";
 import { k8sDeepNormalizationHooks } from "./deep-observe-hooks";
+import { LABEL_OWNERSHIP_KEYS } from "@intentius/chant/ownership";
 
 export const k8sPlugin: LexiconPlugin = {
   name: "k8s",
+  ownershipChannel: { keys: LABEL_OWNERSHIP_KEYS, reads: ["describeResources", "observeResourcesDeep", "exportResources"] },
   auditCatalog: () => k8sAuditCatalog,
   serializer: k8sSerializer,
   // Self-upgrade: where the pinned Kubernetes schema version lives + its upstream (#685).

package/src/serializer.ts

@@ -153,6 +153,10 @@ function toYAMLValue(value: unknown, entityNames: Map<Declarable, string>): unkn
 export const k8sSerializer: Serializer = {
   name: "k8s",
   rulePrefix: "WK8",
+  // The Argo CD checks are a distinct product surface this lexicon covers, and
+  // their ids are published — renaming them would break every `chant-disable
+  // ARGO001` already written (#1349).
+  extraRulePrefixes: ["ARGO"],
 
   serialize(entities: Map<string, Declarable>, _outputs?: LexiconOutput[], context?: SerializeContext): string {
     // Build reverse map: entity → name