@intentius/chant-lexicon-k8s 0.41.19 → 0.42.1

package/dist/okf/types/Service.md

@@ -0,0 +1,20 @@
+---
+type: resource-type
+title: Service
+description: k8s resource type K8s::Core::Service
+name: Service
+lexicon: k8s
+resource_type: K8s::Core::Service
+---
+`K8s::Core::Service`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `spec` (`Record<string, unknown>`, optional): Spec defines the behavior of a service. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
+
+## Governed by
+
+- [WK8104](/rules/WK8104.md): Ports should be named — named ports improve Service and NetworkPolicy configuration
+- [WK8301](/rules/WK8301.md): Probes required — containers should have livenessProbe and readinessProbe
+- [WK8305](/rules/WK8305.md): Ingress port not matching Service — backend port must match a declared Service port

package/dist/okf/types/ServiceAccountList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServiceAccountList
+description: k8s resource type K8s::Core::ServiceAccountList
+name: ServiceAccountList
+lexicon: k8s
+resource_type: K8s::Core::ServiceAccountList
+---
+`K8s::Core::ServiceAccountList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): List of ServiceAccounts. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

package/dist/okf/types/ServiceCIDR.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServiceCIDR
+description: k8s resource type K8s::Networking::ServiceCIDR
+name: ServiceCIDR
+lexicon: k8s
+resource_type: K8s::Networking::ServiceCIDR
+---
+`K8s::Networking::ServiceCIDR`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `spec` (`Record<string, unknown>`, optional): spec is the desired state of the ServiceCIDR. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status

package/dist/okf/types/ServiceCIDRList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServiceCIDRList
+description: k8s resource type K8s::Networking::ServiceCIDRList
+name: ServiceCIDRList
+lexicon: k8s
+resource_type: K8s::Networking::ServiceCIDRList
+---
+`K8s::Networking::ServiceCIDRList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): items is the list of ServiceCIDRs.
+- `metadata` (`Record<string, unknown>`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/ServiceList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServiceList
+description: k8s resource type K8s::Core::ServiceList
+name: ServiceList
+lexicon: k8s
+resource_type: K8s::Core::ServiceList
+---
+`K8s::Core::ServiceList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): List of services
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

package/dist/okf/types/ServiceMonitor.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServiceMonitor
+description: k8s resource type K8s::Monitoring::ServiceMonitor
+name: ServiceMonitor
+lexicon: k8s
+resource_type: K8s::Monitoring::ServiceMonitor
+---
+`K8s::Monitoring::ServiceMonitor`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): Specification of desired Service selection for target discovery by Prometheus.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata.

package/dist/okf/types/StatefulSet.md

@@ -0,0 +1,19 @@
+---
+type: resource-type
+title: StatefulSet
+description: k8s resource type K8s::Apps::StatefulSet
+name: StatefulSet
+lexicon: k8s
+resource_type: K8s::Apps::StatefulSet
+---
+`K8s::Apps::StatefulSet`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `spec` (`Record<string, unknown>`, optional): Spec defines the desired identities of pods in this set.
+
+## Governed by
+
+- [WK8002](/rules/WK8002.md): Latest Image Tag
+- [WK8003](/rules/WK8003.md): Missing Resource Limits

package/dist/okf/types/StatefulSetList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: StatefulSetList
+description: k8s resource type K8s::Apps::StatefulSetList
+name: StatefulSetList
+lexicon: k8s
+resource_type: K8s::Apps::StatefulSetList
+---
+`K8s::Apps::StatefulSetList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): Items is the list of stateful sets.
+- `metadata` (`Record<string, unknown>`, optional): Standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/Status.md

@@ -0,0 +1,17 @@
+---
+type: resource-type
+title: Status
+description: k8s resource type K8s::Core::Status
+name: Status
+lexicon: k8s
+resource_type: K8s::Core::Status
+---
+`K8s::Core::Status`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `code` (`number`, optional): Suggested HTTP return code for this status, 0 if not set.
+- `details` (`Record<string, unknown>`, optional): Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.
+- `message` (`string`, optional): A human-readable description of the status of this operation.
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+- `reason` (`string`, optional): A machine-readable description of why this operation is in the "Failure" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.

package/dist/okf/types/StorageClass.md

@@ -0,0 +1,20 @@
+---
+type: resource-type
+title: StorageClass
+description: k8s resource type K8s::Storage::StorageClass
+name: StorageClass
+lexicon: k8s
+resource_type: K8s::Storage::StorageClass
+---
+`K8s::Storage::StorageClass`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `provisioner` (`string`, required): provisioner indicates the type of the provisioner.
+- `allowedTopologies` (`Record<string, unknown>[]`, optional): allowedTopologies restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.
+- `allowVolumeExpansion` (`boolean`, optional): allowVolumeExpansion shows whether the storage class allow volume expand.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `mountOptions` (`string[]`, optional): mountOptions controls the mountOptions for dynamically provisioned PersistentVolumes of this storage class. e.g. ["ro", "soft"]. Not validated - mount of the PVs will simply fail if one is invalid.
+- `parameters` (`Record<string, string>`, optional): parameters holds the parameters for the provisioner that should create volumes of this storage class.
+- `reclaimPolicy` (`string`, optional): reclaimPolicy controls the reclaimPolicy for dynamically provisioned PersistentVolumes of this storage class. Defaults to Delete.
+- `volumeBindingMode` (`string`, optional): volumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound. When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.

package/dist/okf/types/StorageClassList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: StorageClassList
+description: k8s resource type K8s::Storage::StorageClassList
+name: StorageClassList
+lexicon: k8s
+resource_type: K8s::Storage::StorageClassList
+---
+`K8s::Storage::StorageClassList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): items is the list of StorageClasses
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/StorageVersionMigration.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: StorageVersionMigration
+description: k8s resource type K8s::Storagemigration::StorageVersionMigration
+name: StorageVersionMigration
+lexicon: k8s
+resource_type: K8s::Storagemigration::StorageVersionMigration
+---
+`K8s::Storagemigration::StorageVersionMigration`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `spec` (`Record<string, unknown>`, optional): Specification of the migration.

package/dist/okf/types/StorageVersionMigrationList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: StorageVersionMigrationList
+description: k8s resource type K8s::Storagemigration::StorageVersionMigrationList
+name: StorageVersionMigrationList
+lexicon: k8s
+resource_type: K8s::Storagemigration::StorageVersionMigrationList
+---
+`K8s::Storagemigration::StorageVersionMigrationList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): Items is the list of StorageVersionMigration
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/SubjectAccessReview.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: SubjectAccessReview
+description: k8s resource type K8s::Authorization::SubjectAccessReview
+name: SubjectAccessReview
+lexicon: k8s
+resource_type: K8s::Authorization::SubjectAccessReview
+---
+`K8s::Authorization::SubjectAccessReview`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): spec holds information about the request being evaluated
+- `metadata` (`ObjectMeta`, optional): metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/TLSOption.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: TLSOption
+description: k8s resource type K8s::Traefik::TLSOption
+name: TLSOption
+lexicon: k8s
+resource_type: K8s::Traefik::TLSOption
+---
+`K8s::Traefik::TLSOption`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): TLSOptionSpec defines the desired state of a TLSOption.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata.

package/dist/okf/types/TLSStore.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: TLSStore
+description: k8s resource type K8s::Traefik::TLSStore
+name: TLSStore
+lexicon: k8s
+resource_type: K8s::Traefik::TLSStore
+---
+`K8s::Traefik::TLSStore`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): TLSStoreSpec defines the desired state of a TLSStore.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata.

package/dist/okf/types/TokenRequest.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: TokenRequest
+description: k8s resource type K8s::Authentication::TokenRequest
+name: TokenRequest
+lexicon: k8s
+resource_type: K8s::Authentication::TokenRequest
+---
+`K8s::Authentication::TokenRequest`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `spec` (`Record<string, unknown>`, optional): spec holds information about the request being evaluated

package/dist/okf/types/TokenReview.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: TokenReview
+description: k8s resource type K8s::Authentication::TokenReview
+name: TokenReview
+lexicon: k8s
+resource_type: K8s::Authentication::TokenReview
+---
+`K8s::Authentication::TokenReview`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): spec holds information about the request being evaluated
+- `metadata` (`ObjectMeta`, optional): metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/TraefikService.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: TraefikService
+description: k8s resource type K8s::Traefik::TraefikService
+name: TraefikService
+lexicon: k8s
+resource_type: K8s::Traefik::TraefikService
+---
+`K8s::Traefik::TraefikService`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): TraefikServiceSpec defines the desired state of a TraefikService.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata.

package/dist/okf/types/ValidatingAdmissionPolicy.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingAdmissionPolicy
+description: k8s resource type K8s::Admissionregistration::ValidatingAdmissionPolicy
+name: ValidatingAdmissionPolicy
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingAdmissionPolicy
+---
+`K8s::Admissionregistration::ValidatingAdmissionPolicy`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.
+- `spec` (`Record<string, unknown>`, optional): spec defines the desired behavior of the ValidatingAdmissionPolicy.

package/dist/okf/types/ValidatingAdmissionPolicyBinding.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingAdmissionPolicyBinding
+description: k8s resource type K8s::Admissionregistration::ValidatingAdmissionPolicyBinding
+name: ValidatingAdmissionPolicyBinding
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingAdmissionPolicyBinding
+---
+`K8s::Admissionregistration::ValidatingAdmissionPolicyBinding`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): spec defines the desired behavior of the ValidatingAdmissionPolicyBinding.
+- `metadata` (`ObjectMeta`, optional): metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.

package/dist/okf/types/ValidatingAdmissionPolicyBindingList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingAdmissionPolicyBindingList
+description: k8s resource type K8s::Admissionregistration::ValidatingAdmissionPolicyBindingList
+name: ValidatingAdmissionPolicyBindingList
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingAdmissionPolicyBindingList
+---
+`K8s::Admissionregistration::ValidatingAdmissionPolicyBindingList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): List of PolicyBinding.
+- `metadata` (`Record<string, unknown>`, optional): metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

package/dist/okf/types/ValidatingAdmissionPolicyList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingAdmissionPolicyList
+description: k8s resource type K8s::Admissionregistration::ValidatingAdmissionPolicyList
+name: ValidatingAdmissionPolicyList
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingAdmissionPolicyList
+---
+`K8s::Admissionregistration::ValidatingAdmissionPolicyList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): List of ValidatingAdmissionPolicy.
+- `metadata` (`Record<string, unknown>`, optional): metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

package/dist/okf/types/ValidatingWebhookConfiguration.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingWebhookConfiguration
+description: k8s resource type K8s::Admissionregistration::ValidatingWebhookConfiguration
+name: ValidatingWebhookConfiguration
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingWebhookConfiguration
+---
+`K8s::Admissionregistration::ValidatingWebhookConfiguration`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.
+- `webhooks` (`Record<string, unknown>[]`, optional): webhooks is a list of webhooks and the affected resources and operations.

package/dist/okf/types/ValidatingWebhookConfigurationList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingWebhookConfigurationList
+description: k8s resource type K8s::Admissionregistration::ValidatingWebhookConfigurationList
+name: ValidatingWebhookConfigurationList
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingWebhookConfigurationList
+---
+`K8s::Admissionregistration::ValidatingWebhookConfigurationList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): List of ValidatingWebhookConfiguration.
+- `metadata` (`Record<string, unknown>`, optional): metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

package/dist/okf/types/VolumeAttachment.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: VolumeAttachment
+description: k8s resource type K8s::Storage::VolumeAttachment
+name: VolumeAttachment
+lexicon: k8s
+resource_type: K8s::Storage::VolumeAttachment
+---
+`K8s::Storage::VolumeAttachment`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): spec represents specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.
+- `metadata` (`ObjectMeta`, optional): Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/VolumeAttachmentList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: VolumeAttachmentList
+description: k8s resource type K8s::Storage::VolumeAttachmentList
+name: VolumeAttachmentList
+lexicon: k8s
+resource_type: K8s::Storage::VolumeAttachmentList
+---
+`K8s::Storage::VolumeAttachmentList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): items is the list of VolumeAttachments
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/VolumeAttributesClass.md

@@ -0,0 +1,15 @@
+---
+type: resource-type
+title: VolumeAttributesClass
+description: k8s resource type K8s::Storage::VolumeAttributesClass
+name: VolumeAttributesClass
+lexicon: k8s
+resource_type: K8s::Storage::VolumeAttributesClass
+---
+`K8s::Storage::VolumeAttributesClass`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `driverName` (`string`, required): Name of the CSI driver This field is immutable.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `parameters` (`Record<string, string>`, optional): parameters hold volume attributes defined by the CSI driver. These values are opaque to the Kubernetes and are passed directly to the CSI driver. The underlying storage provider supports changing these attributes on an existing volume, however the parameters field itself is immutable. To invoke a volume update, a new VolumeAttributesClass should be created with new parameters, and the PersistentVolumeClaim should be updated to reference the new VolumeAttributesClass. This field is required and must contain at least one key/value pair. The keys cannot be empty, and the maximum number of parameters is 512, with a cumulative max size of 256K. If the CSI driver rejects invalid parameters, the target PersistentVolumeClaim will be set to an "Infeasible" state in the modifyVolumeStatus field.

package/dist/okf/types/VolumeAttributesClassList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: VolumeAttributesClassList
+description: k8s resource type K8s::Storage::VolumeAttributesClassList
+name: VolumeAttributesClassList
+lexicon: k8s
+resource_type: K8s::Storage::VolumeAttributesClassList
+---
+`K8s::Storage::VolumeAttributesClassList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): items is the list of VolumeAttributesClass objects.
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/WatchEvent.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: WatchEvent
+description: k8s resource type K8s::Core::WatchEvent
+name: WatchEvent
+lexicon: k8s
+resource_type: K8s::Core::WatchEvent
+---
+`K8s::Core::WatchEvent`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `object` (`Record<string, unknown>`, required): Object is: If Type is Added or Modified: the new state of the object. If Type is Deleted: the state of the object immediately before deletion. If Type is Error: *Status is recommended; other types may make sense depending on context.
+- `type` (`string`, required)

package/dist/op/activities/kubectl.d.ts

@@ -30,6 +30,7 @@
  * - **Documents apply in file order**, as `kubectl apply -f` does, and a
  *   directory's files are read in sorted order.
  */
+import type { K8sObject } from "@intentius/chant-k8s-client";
 import { type K8sConnector } from "../../api/connect.js";
 /**
  * How the apply treats chant-owned objects that are no longer declared. The
@@ -39,8 +40,21 @@ import { type K8sConnector } from "../../api/connect.js";
  */
 export type ApplyDeleteMode = "never" | "owned-only" | "gated";
 export interface KubectlApplyArgs {
-    /** Path to a manifest file, or a directory of them. */
+    /**
+     * Path to a manifest file, or a directory of them. With `documents` given,
+     * this becomes only the human-facing label the heartbeats and logs carry
+     * (e.g. `kustomize:<dir>`), and nothing is read from disk.
+     */
     manifest: string;
+    /**
+     * Already-parsed documents to apply INSTEAD of reading `manifest` (#1548):
+     * a renderer that produced the objects in memory — kustomize-apply's
+     * `kustomize build` — hands them straight in rather than round-tripping
+     * through a temp file. Everything downstream (ownership stamping, the
+     * marker-scoped prune, the self-conflict retake) is document-driven and
+     * behaves identically.
+     */
+    documents?: K8sObject[];
     /**
      * kubectl context name. Uses the ambient context if omitted. To target the
      * same cluster the read path (`describeResources`) resolved for an

package/dist/op/activities/kubectl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kubectl.d.ts","sourceRoot":"","sources":["../../../src/op/activities/kubectl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAaH,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAI3E;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,YAAY,GAAG,OAAO,CAAC;AAE/D,MAAM,WAAW,gBAAgB;IAC/B,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sFAAsF;IACtF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,oCAAoC;AACpC,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,sCAAsC;AACtC,MAAM,WAAW,mBAAmB;IAClC,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,sFAAsF;IACtF,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAiB7E;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAEjF;AAqHD;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,gBAAgB,EACtB,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE,YAAkC,GAC1C,OAAO,CAAC,mBAAmB,CAAC,CAkE9B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,gBAAgB,EACtB,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE,YAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAEf"}
+{"version":3,"file":"kubectl.d.ts","sourceRoot":"","sources":["../../../src/op/activities/kubectl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAYH,OAAO,KAAK,EAAa,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAI3E;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,YAAY,GAAG,OAAO,CAAC;AAE/D,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACxB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sFAAsF;IACtF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,oCAAoC;AACpC,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,sCAAsC;AACtC,MAAM,WAAW,mBAAmB;IAClC,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,sFAAsF;IACtF,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAiB7E;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAEjF;AAqHD;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,gBAAgB,EACtB,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE,YAAkC,GAC1C,OAAO,CAAC,mBAAmB,CAAC,CAkE9B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,gBAAgB,EACtB,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE,YAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/op/activities/wait-for-ready.d.ts

@@ -32,7 +32,22 @@ export interface PathMatch {
     /** Holds when the value is one of these. */
     oneOf?: Array<string | number>;
 }
-export type ReadinessMatch = ConditionMatch | PathMatch;
+/**
+ * Match a `status.conditions[]` entry by `type` AND its `reason` (#1549).
+ * The dot-path walk can't index into a conditions array, and the Flux
+ * toolkit's failure signal is exactly `conditions[type=Ready].reason` — a
+ * wedge like `BuildFailed` keeps `Ready=False` forever while the generic
+ * poll waits out its whole timeout. `status` defaults to "False": a reason
+ * on a True condition is progress vocabulary, not a wedge.
+ */
+export interface ConditionReasonMatch {
+    conditionType: string;
+    /** Required `status` of the condition (default "False"). */
+    status?: string;
+    /** Holds when the condition's `reason` is one of these. */
+    reasonOneOf: string[];
+}
+export type ReadinessMatch = ConditionMatch | PathMatch | ConditionReasonMatch;
 export interface ReadinessSpec {
     /** All must hold for the resource to be ready. */
     ready: ReadinessMatch[];
@@ -50,11 +65,6 @@ export interface ReadinessSpec {
  * and the CockroachDB operator.
  */
 export declare const DEFAULT_READINESS: ReadinessSpec;
-/**
- * Per-resource overrides keyed by `"<group>/<kind>"`. Argo's `Application`
- * reports `health`/`sync`, not a `Ready` condition — the case that proves the
- * override is necessary (#365).
- */
 export declare const READINESS_OVERRIDES: Record<string, ReadinessSpec>;
 /** Resolve the readiness spec for a resource: registry override, else default. */
 export declare function readinessFor(group: string | undefined, kind: string): ReadinessSpec;

package/dist/op/activities/wait-for-ready.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wait-for-ready.d.ts","sourceRoot":"","sources":["../../../src/op/activities/wait-for-ready.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAE3E;;;;;;;;;;;;;;;;;GAiBG;AAIH,sEAAsE;AACtE,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,2DAA2D;AAC3D,MAAM,WAAW,SAAS;IACxB,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACnC,4CAA4C;IAC5C,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;CAEhC;AAED,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,SAAS,CAAC;AAExD,MAAM,WAAW,aAAa;IAC5B,kDAAkD;IAClD,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC;IAC5B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,aAG/B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAS7D,CAAC;AAEF,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAEnF;AAwCD,qFAAqF;AACrF,wBAAgB,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAGlE;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,cAAc,GAAG,SAAS,CAE3F;AAID,6EAA6E;AAC7E,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,gGAAgG;IAChG,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mEAAmE;AACnE,MAAM,MAAM,eAAe,GAAG,CAC5B,IAAI,EAAE,gBAAgB,EACtB,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtC;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,YAAkC,GAAG,eAAe,CAmC/F;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,eAAsE,CAAC;AAE5G;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,gBAAgB,EACtB,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE,eAAsC,GAC9C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAuBlC"}
+{"version":3,"file":"wait-for-ready.d.ts","sourceRoot":"","sources":["../../../src/op/activities/wait-for-ready.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAE3E;;;;;;;;;;;;;;;;;GAiBG;AAIH,sEAAsE;AACtE,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,2DAA2D;AAC3D,MAAM,WAAW,SAAS;IACxB,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACnC,4CAA4C;IAC5C,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;CAEhC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,SAAS,GAAG,oBAAoB,CAAC;AAE/E,MAAM,WAAW,aAAa;IAC5B,kDAAkD;IAClD,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC;IAC5B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,aAG/B,CAAC;AAoBF,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAyC7D,CAAC;AAEF,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAEnF;AAyDD,qFAAqF;AACrF,wBAAgB,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAGlE;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,cAAc,GAAG,SAAS,CAE3F;AAID,6EAA6E;AAC7E,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,gGAAgG;IAChG,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mEAAmE;AACnE,MAAM,MAAM,eAAe,GAAG,CAC5B,IAAI,EAAE,gBAAgB,EACtB,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtC;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,YAAkC,GAAG,eAAe,CAmC/F;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,eAAsE,CAAC;AAE5G;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,gBAAgB,EACtB,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE,eAAsC,GAC9C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAuBlC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-k8s",
-  "version": "0.41.19",
+  "version": "0.42.1",
   "description": "Kubernetes lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -84,7 +84,7 @@
   },
   "peerDependencies": {
     "zod": "^4.3.6",
-    "@intentius/chant": "^0.41.19",
+    "@intentius/chant": "^0.42.1",
     "typescript": "^5.9.3"
   }
 }

package/src/components/builders.ts

@@ -13,5 +13,10 @@
 
 import { step } from "@intentius/chant/components";
 import type { KubectlApplyInput } from "./kubectl-apply";
+import type { KustomizeApplyInput } from "./kustomize-apply";
 
 export const kubectlApply = step<KubectlApplyInput & { noRollback?: string }>("kubectl-apply");
+
+// Same needs-opt-out posture, same sugar (#1548): a kustomize render in front
+// of the identical server-side apply.
+export const kustomizeApply = step<KustomizeApplyInput & { noRollback?: string }>("kustomize-apply");

package/src/components/capability-plugin.ts

@@ -11,9 +11,10 @@
 import type { Capability } from "@intentius/chant/components/capability";
 import { ownPackageVersion, type CapabilityPlugin } from "@intentius/chant/components/capability-plugin";
 import { kubectlApplyCapability } from "./kubectl-apply";
+import { kustomizeApplyCapability } from "./kustomize-apply";
 
 export const K8S_VERB_FAMILIES = {
-  apply: ["kubectl-apply"],
+  apply: ["kubectl-apply", "kustomize-apply"],
 } as const;
 
 export const k8sCapabilityPlugin: CapabilityPlugin = {
@@ -22,7 +23,7 @@ export const k8sCapabilityPlugin: CapabilityPlugin = {
   // a literal here was stale one release after it was written.
   version: ownPackageVersion(import.meta.url),
   capabilities(): Array<Capability<never, unknown>> {
-    return [kubectlApplyCapability as Capability<never, unknown>];
+    return [kubectlApplyCapability as Capability<never, unknown>, kustomizeApplyCapability as Capability<never, unknown>];
   },
   families(): Record<string, readonly string[]> {
     return K8S_VERB_FAMILIES;