@intentius/chant-lexicon-k8s 0.37.3 → 0.39.0

package/src/describe-resources.ts

@@ -80,6 +80,22 @@ function pruneUndefined<T extends Record<string, unknown>>(obj: T): Record<strin
  */
 export function statusFromObject(obj: K8sObject): string {
   const status = obj.status;
+
+  // The most specific FAILING signal wins over the outermost one (#1397).
+  //
+  // A Pod's phase is `Running` from the moment the kubelet admits it and one
+  // container starts — so a crashlooping Pod reported `Running`, which every
+  // consumer classifying that word read as healthy. The failure lives one level
+  // down, in `containerStatuses[].state.waiting.reason`, and never reached the
+  // wire, so nothing downstream could recover it.
+  const waiting = failingContainerReason(status);
+  if (waiting) return waiting;
+
+  // Scheduling failure is a condition, not a phase: an unschedulable Pod is
+  // `Pending`, which is true and useless next to `Unschedulable`.
+  const blocked = failingConditionReason(status);
+  if (blocked) return blocked;
+
   const phase = status?.phase;
   if (typeof phase === "string") return phase;
   if (status && typeof status.readyReplicas === "number" && typeof status.replicas === "number") {
@@ -90,6 +106,85 @@ export function statusFromObject(obj: K8sObject): string {
   return "PRESENT";
 }
 
+/**
+ * The reason a container is stuck, if one is — `CrashLoopBackOff`,
+ * `ImagePullBackOff`, `CreateContainerConfigError`.
+ *
+ * Only a WAITING container counts. A terminated one may have exited cleanly as
+ * part of a Job, and a running one is not stuck; neither should outrank the
+ * phase.
+ */
+function failingContainerReason(status: K8sObject["status"]): string | undefined {
+  const containers = (status as { containerStatuses?: unknown } | undefined)?.containerStatuses;
+  if (!Array.isArray(containers)) return undefined;
+  for (const c of containers) {
+    const reason = (c as { state?: { waiting?: { reason?: unknown } } })?.state?.waiting?.reason;
+    // `ContainerCreating` and `PodInitializing` are ordinary startup, not
+    // failure — they already classify as progressing, and promoting them over
+    // the phase would just be noisier.
+    if (typeof reason === "string" && reason.length > 0 && reason !== "ContainerCreating" && reason !== "PodInitializing") {
+      return reason;
+    }
+  }
+  return undefined;
+}
+
+/**
+ * The reason a blocking condition is False — `Unschedulable` and the like.
+ *
+ * Only conditions whose truth means "this object is usable"; a False `Ready` on
+ * its own is already visible through the phase and the container states above.
+ */
+function failingConditionReason(status: K8sObject["status"]): string | undefined {
+  const conditions = (status as { conditions?: unknown } | undefined)?.conditions;
+  if (!Array.isArray(conditions)) return undefined;
+  for (const c of conditions) {
+    const cond = c as { type?: unknown; status?: unknown; reason?: unknown };
+    if (cond.type !== "PodScheduled") continue;
+    if (cond.status !== "False") continue;
+    if (typeof cond.reason === "string" && cond.reason.length > 0) return cond.reason;
+  }
+  return undefined;
+}
+
+
+/**
+ * The unhappy conditions on a live object, as `Type=Reason: message` (#1401).
+ *
+ * #1397 made the status WORD honest — a crashlooping Pod reports
+ * `CrashLoopBackOff` rather than `Running`. This carries the part that says
+ * what to do about it: `Unschedulable` is the reason, and
+ * `0/3 nodes are available: 1 node(s) had untolerated taint` is the answer, and
+ * only the first reached the wire.
+ *
+ * Only conditions that are NOT in their happy state are reported. A `Ready=True`
+ * says nothing an operator needs and would bury the one line that does — and a
+ * condition's happy polarity is per type: `Ready`/`Available`/`PodScheduled`
+ * are good when True, while `Unschedulable`-style and the standard
+ * `*Pressure`/`NetworkUnavailable` node conditions are good when False.
+ *
+ * Absent when everything is happy, so a consumer can treat presence as "this
+ * object has something to say".
+ */
+const CONDITIONS_GOOD_WHEN_FALSE = /pressure$|^networkunavailable$|^unschedulable$|failed/i;
+
+export function unhappyConditions(obj: K8sObject): string[] | undefined {
+  const conditions = (obj.status as { conditions?: unknown } | undefined)?.conditions;
+  if (!Array.isArray(conditions)) return undefined;
+  const out: string[] = [];
+  for (const c of conditions) {
+    const cond = c as { type?: unknown; status?: unknown; reason?: unknown; message?: unknown };
+    if (typeof cond.type !== "string" || typeof cond.status !== "string") continue;
+    const goodWhenFalse = CONDITIONS_GOOD_WHEN_FALSE.test(cond.type);
+    const happy = goodWhenFalse ? cond.status === "False" : cond.status === "True";
+    if (happy) continue;
+    const reason = typeof cond.reason === "string" && cond.reason ? `=${cond.reason}` : "";
+    const message = typeof cond.message === "string" && cond.message ? `: ${cond.message}` : "";
+    out.push(`${cond.type}${reason}${message}`);
+  }
+  return out.length > 0 ? out : undefined;
+}
+
 interface Declared {
   entityName: string;
   entityType: string;
@@ -211,6 +306,8 @@ export async function describeResources(
           namespace: obj.metadata?.namespace,
           labels: obj.metadata?.labels,
           resourceVersion: obj.metadata?.resourceVersion,
+          // What the object's own controller says is wrong with it (#1401).
+          conditions: unhappyConditions(obj),
         }),
       };
     } catch (err) {
@@ -289,6 +386,7 @@ async function addRuntimeChildren(
           namespace,
           labels: pod.metadata?.labels,
           resourceVersion: pod.metadata?.resourceVersion,
+          conditions: unhappyConditions(pod),
         }),
       };
     });

package/src/generated/index.d.ts

@@ -128,6 +128,20 @@ export declare class AppProject {
   readonly uid: string;
 }
 
+export declare class Backup {
+  constructor(props: {
+    /** Specification of the desired behavior of the backup.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class BatchJob {
   constructor(props: {
     /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
@@ -228,6 +242,20 @@ export declare class Challenge {
   readonly uid: string;
 }
 
+export declare class Cluster {
+  constructor(props: {
+    /** Specification of the desired behavior of the cluster.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class ClusterIssuer {
   constructor(props: {
     /** Desired state of the ClusterIssuer resource. */
@@ -1101,6 +1129,45 @@ export declare class ImageUpdateAutomation {
   readonly uid: string;
 }
 
+export declare class InfisicalDynamicSecret {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** InfisicalDynamicSecretSpec defines the desired state of InfisicalDynamicSecret. */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
+export declare class InfisicalPushSecret {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** InfisicalPushSecretSpec defines the desired state of InfisicalPushSecret */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
+export declare class InfisicalSecret {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** InfisicalSecretSpec defines the desired state of InfisicalSecret */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class Ing {
   constructor(props: {
     /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
@@ -1161,6 +1228,42 @@ export declare class IngressList {
   readonly uid: string;
 }
 
+export declare class IngressRoute {
+  constructor(props: {
+    /** IngressRouteSpec defines the desired state of IngressRoute. */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
+export declare class IngressRouteTCP {
+  constructor(props: {
+    /** IngressRouteTCPSpec defines the desired state of IngressRouteTCP. */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
+export declare class IngressRouteUDP {
+  constructor(props: {
+    /** IngressRouteUDPSpec defines the desired state of a IngressRouteUDP. */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
 export declare class IPAddress {
   constructor(props: {
     /** spec is the desired state of the IPAddress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
@@ -1379,6 +1482,30 @@ export declare class MicroVMReplicaSet {
   readonly uid: string;
 }
 
+export declare class Middleware {
+  constructor(props: {
+    /** MiddlewareSpec defines the desired state of a Middleware. */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
+export declare class MiddlewareTCP {
+  constructor(props: {
+    /** MiddlewareTCPSpec defines the desired state of a MiddlewareTCP. */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
 export declare class MutatingAdmissionPolicy {
   constructor(props: {
     /** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
@@ -1547,6 +1674,20 @@ export declare class NS {
   readonly uid: string;
 }
 
+export declare class ObjectStore {
+  constructor(props: {
+    /** Specification of the desired behavior of the ObjectStore.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class OCIRepository {
   constructor(props: {
     /** Standard object's metadata. */
@@ -1728,6 +1869,20 @@ export declare class PodTemplateList {
   readonly uid: string;
 }
 
+export declare class Pooler {
+  constructor(props: {
+    /** Specification of the desired behavior of the Pooler.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class PriorityClass {
   constructor(props: {
     /** description is an arbitrary string that usually provides guidelines on when this priority class should be used. */
@@ -2172,6 +2327,20 @@ export declare class Scale {
   readonly uid: string;
 }
 
+export declare class ScheduledBackup {
+  constructor(props: {
+    /** Specification of the desired behavior of the ScheduledBackup.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class Sec {
   constructor(props: {
     /** Data contains the secret data. Each key must consist of alphanumeric characters, '-', '_' or '.'. The serialized form of the secret data is a base64 encoded string, representing the arbitrary (possibly non-string) data value here. Described in https://tools.ietf.org/html/rfc4648#section-4 */
@@ -2254,6 +2423,30 @@ export declare class SelfSubjectRulesReview {
   readonly uid: string;
 }
 
+export declare class ServersTransport {
+  constructor(props: {
+    /** ServersTransportSpec defines the desired state of a ServersTransport. */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
+export declare class ServersTransportTCP {
+  constructor(props: {
+    /** ServersTransportTCPSpec defines the desired state of a ServersTransportTCP. */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
 export declare class Service {
   constructor(props: {
     /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
@@ -2469,6 +2662,30 @@ export declare class SubjectAccessReview {
   readonly uid: string;
 }
 
+export declare class TLSOption {
+  constructor(props: {
+    /** TLSOptionSpec defines the desired state of a TLSOption. */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
+export declare class TLSStore {
+  constructor(props: {
+    /** TLSStoreSpec defines the desired state of a TLSStore. */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
 export declare class TokenRequest {
   constructor(props: {
     /** metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
@@ -2493,6 +2710,18 @@ export declare class TokenReview {
   readonly uid: string;
 }
 
+export declare class TraefikService {
+  constructor(props: {
+    /** TraefikServiceSpec defines the desired state of a TraefikService. */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
 export declare class ValidatingAdmissionPolicy {
   constructor(props: {
     /** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */