@intentius/chant-lexicon-k8s 0.41.20 → 0.44.1

package/dist/okf/types/SelfSubjectAccessReview.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: SelfSubjectAccessReview
+description: k8s resource type K8s::Authorization::SelfSubjectAccessReview
+name: SelfSubjectAccessReview
+lexicon: k8s
+resource_type: K8s::Authorization::SelfSubjectAccessReview
+---
+`K8s::Authorization::SelfSubjectAccessReview`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): spec holds information about the request being evaluated. user and groups must be empty
+- `metadata` (`ObjectMeta`, optional): metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/SelfSubjectReview.md

@@ -0,0 +1,13 @@
+---
+type: resource-type
+title: SelfSubjectReview
+description: k8s resource type K8s::Authentication::SelfSubjectReview
+name: SelfSubjectReview
+lexicon: k8s
+resource_type: K8s::Authentication::SelfSubjectReview
+---
+`K8s::Authentication::SelfSubjectReview`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): metadata is standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/SelfSubjectRulesReview.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: SelfSubjectRulesReview
+description: k8s resource type K8s::Authorization::SelfSubjectRulesReview
+name: SelfSubjectRulesReview
+lexicon: k8s
+resource_type: K8s::Authorization::SelfSubjectRulesReview
+---
+`K8s::Authorization::SelfSubjectRulesReview`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): spec holds information about the request being evaluated.
+- `metadata` (`ObjectMeta`, optional): metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/ServersTransport.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServersTransport
+description: k8s resource type K8s::Traefik::ServersTransport
+name: ServersTransport
+lexicon: k8s
+resource_type: K8s::Traefik::ServersTransport
+---
+`K8s::Traefik::ServersTransport`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): ServersTransportSpec defines the desired state of a ServersTransport.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata.

package/dist/okf/types/ServersTransportTCP.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServersTransportTCP
+description: k8s resource type K8s::Traefik::ServersTransportTCP
+name: ServersTransportTCP
+lexicon: k8s
+resource_type: K8s::Traefik::ServersTransportTCP
+---
+`K8s::Traefik::ServersTransportTCP`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): ServersTransportTCPSpec defines the desired state of a ServersTransportTCP.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata.

package/dist/okf/types/Service.md

@@ -0,0 +1,20 @@
+---
+type: resource-type
+title: Service
+description: k8s resource type K8s::Core::Service
+name: Service
+lexicon: k8s
+resource_type: K8s::Core::Service
+---
+`K8s::Core::Service`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `spec` (`Record<string, unknown>`, optional): Spec defines the behavior of a service. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
+
+## Governed by
+
+- [WK8104](/rules/WK8104.md): Ports should be named — named ports improve Service and NetworkPolicy configuration
+- [WK8301](/rules/WK8301.md): Probes required — containers should have livenessProbe and readinessProbe
+- [WK8305](/rules/WK8305.md): Ingress port not matching Service — backend port must match a declared Service port

package/dist/okf/types/ServiceAccountList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServiceAccountList
+description: k8s resource type K8s::Core::ServiceAccountList
+name: ServiceAccountList
+lexicon: k8s
+resource_type: K8s::Core::ServiceAccountList
+---
+`K8s::Core::ServiceAccountList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): List of ServiceAccounts. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

package/dist/okf/types/ServiceCIDR.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServiceCIDR
+description: k8s resource type K8s::Networking::ServiceCIDR
+name: ServiceCIDR
+lexicon: k8s
+resource_type: K8s::Networking::ServiceCIDR
+---
+`K8s::Networking::ServiceCIDR`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `spec` (`Record<string, unknown>`, optional): spec is the desired state of the ServiceCIDR. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status

package/dist/okf/types/ServiceCIDRList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServiceCIDRList
+description: k8s resource type K8s::Networking::ServiceCIDRList
+name: ServiceCIDRList
+lexicon: k8s
+resource_type: K8s::Networking::ServiceCIDRList
+---
+`K8s::Networking::ServiceCIDRList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): items is the list of ServiceCIDRs.
+- `metadata` (`Record<string, unknown>`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/ServiceList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServiceList
+description: k8s resource type K8s::Core::ServiceList
+name: ServiceList
+lexicon: k8s
+resource_type: K8s::Core::ServiceList
+---
+`K8s::Core::ServiceList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): List of services
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

package/dist/okf/types/ServiceMonitor.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ServiceMonitor
+description: k8s resource type K8s::Monitoring::ServiceMonitor
+name: ServiceMonitor
+lexicon: k8s
+resource_type: K8s::Monitoring::ServiceMonitor
+---
+`K8s::Monitoring::ServiceMonitor`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): Specification of desired Service selection for target discovery by Prometheus.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata.

package/dist/okf/types/StatefulSet.md

@@ -0,0 +1,19 @@
+---
+type: resource-type
+title: StatefulSet
+description: k8s resource type K8s::Apps::StatefulSet
+name: StatefulSet
+lexicon: k8s
+resource_type: K8s::Apps::StatefulSet
+---
+`K8s::Apps::StatefulSet`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `spec` (`Record<string, unknown>`, optional): Spec defines the desired identities of pods in this set.
+
+## Governed by
+
+- [WK8002](/rules/WK8002.md): Latest Image Tag
+- [WK8003](/rules/WK8003.md): Missing Resource Limits

package/dist/okf/types/StatefulSetList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: StatefulSetList
+description: k8s resource type K8s::Apps::StatefulSetList
+name: StatefulSetList
+lexicon: k8s
+resource_type: K8s::Apps::StatefulSetList
+---
+`K8s::Apps::StatefulSetList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): Items is the list of stateful sets.
+- `metadata` (`Record<string, unknown>`, optional): Standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/Status.md

@@ -0,0 +1,17 @@
+---
+type: resource-type
+title: Status
+description: k8s resource type K8s::Core::Status
+name: Status
+lexicon: k8s
+resource_type: K8s::Core::Status
+---
+`K8s::Core::Status`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `code` (`number`, optional): Suggested HTTP return code for this status, 0 if not set.
+- `details` (`Record<string, unknown>`, optional): Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.
+- `message` (`string`, optional): A human-readable description of the status of this operation.
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+- `reason` (`string`, optional): A machine-readable description of why this operation is in the "Failure" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.

package/dist/okf/types/StorageClass.md

@@ -0,0 +1,20 @@
+---
+type: resource-type
+title: StorageClass
+description: k8s resource type K8s::Storage::StorageClass
+name: StorageClass
+lexicon: k8s
+resource_type: K8s::Storage::StorageClass
+---
+`K8s::Storage::StorageClass`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `provisioner` (`string`, required): provisioner indicates the type of the provisioner.
+- `allowedTopologies` (`Record<string, unknown>[]`, optional): allowedTopologies restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.
+- `allowVolumeExpansion` (`boolean`, optional): allowVolumeExpansion shows whether the storage class allow volume expand.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `mountOptions` (`string[]`, optional): mountOptions controls the mountOptions for dynamically provisioned PersistentVolumes of this storage class. e.g. ["ro", "soft"]. Not validated - mount of the PVs will simply fail if one is invalid.
+- `parameters` (`Record<string, string>`, optional): parameters holds the parameters for the provisioner that should create volumes of this storage class.
+- `reclaimPolicy` (`string`, optional): reclaimPolicy controls the reclaimPolicy for dynamically provisioned PersistentVolumes of this storage class. Defaults to Delete.
+- `volumeBindingMode` (`string`, optional): volumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound. When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.

package/dist/okf/types/StorageClassList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: StorageClassList
+description: k8s resource type K8s::Storage::StorageClassList
+name: StorageClassList
+lexicon: k8s
+resource_type: K8s::Storage::StorageClassList
+---
+`K8s::Storage::StorageClassList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): items is the list of StorageClasses
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/StorageVersionMigration.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: StorageVersionMigration
+description: k8s resource type K8s::Storagemigration::StorageVersionMigration
+name: StorageVersionMigration
+lexicon: k8s
+resource_type: K8s::Storagemigration::StorageVersionMigration
+---
+`K8s::Storagemigration::StorageVersionMigration`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `spec` (`Record<string, unknown>`, optional): Specification of the migration.

package/dist/okf/types/StorageVersionMigrationList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: StorageVersionMigrationList
+description: k8s resource type K8s::Storagemigration::StorageVersionMigrationList
+name: StorageVersionMigrationList
+lexicon: k8s
+resource_type: K8s::Storagemigration::StorageVersionMigrationList
+---
+`K8s::Storagemigration::StorageVersionMigrationList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): Items is the list of StorageVersionMigration
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/SubjectAccessReview.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: SubjectAccessReview
+description: k8s resource type K8s::Authorization::SubjectAccessReview
+name: SubjectAccessReview
+lexicon: k8s
+resource_type: K8s::Authorization::SubjectAccessReview
+---
+`K8s::Authorization::SubjectAccessReview`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): spec holds information about the request being evaluated
+- `metadata` (`ObjectMeta`, optional): metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/TLSOption.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: TLSOption
+description: k8s resource type K8s::Traefik::TLSOption
+name: TLSOption
+lexicon: k8s
+resource_type: K8s::Traefik::TLSOption
+---
+`K8s::Traefik::TLSOption`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): TLSOptionSpec defines the desired state of a TLSOption.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata.

package/dist/okf/types/TLSStore.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: TLSStore
+description: k8s resource type K8s::Traefik::TLSStore
+name: TLSStore
+lexicon: k8s
+resource_type: K8s::Traefik::TLSStore
+---
+`K8s::Traefik::TLSStore`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): TLSStoreSpec defines the desired state of a TLSStore.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata.

package/dist/okf/types/TokenRequest.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: TokenRequest
+description: k8s resource type K8s::Authentication::TokenRequest
+name: TokenRequest
+lexicon: k8s
+resource_type: K8s::Authentication::TokenRequest
+---
+`K8s::Authentication::TokenRequest`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `spec` (`Record<string, unknown>`, optional): spec holds information about the request being evaluated

package/dist/okf/types/TokenReview.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: TokenReview
+description: k8s resource type K8s::Authentication::TokenReview
+name: TokenReview
+lexicon: k8s
+resource_type: K8s::Authentication::TokenReview
+---
+`K8s::Authentication::TokenReview`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): spec holds information about the request being evaluated
+- `metadata` (`ObjectMeta`, optional): metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/TraefikService.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: TraefikService
+description: k8s resource type K8s::Traefik::TraefikService
+name: TraefikService
+lexicon: k8s
+resource_type: K8s::Traefik::TraefikService
+---
+`K8s::Traefik::TraefikService`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): TraefikServiceSpec defines the desired state of a TraefikService.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata.

package/dist/okf/types/ValidatingAdmissionPolicy.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingAdmissionPolicy
+description: k8s resource type K8s::Admissionregistration::ValidatingAdmissionPolicy
+name: ValidatingAdmissionPolicy
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingAdmissionPolicy
+---
+`K8s::Admissionregistration::ValidatingAdmissionPolicy`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.
+- `spec` (`Record<string, unknown>`, optional): spec defines the desired behavior of the ValidatingAdmissionPolicy.

package/dist/okf/types/ValidatingAdmissionPolicyBinding.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingAdmissionPolicyBinding
+description: k8s resource type K8s::Admissionregistration::ValidatingAdmissionPolicyBinding
+name: ValidatingAdmissionPolicyBinding
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingAdmissionPolicyBinding
+---
+`K8s::Admissionregistration::ValidatingAdmissionPolicyBinding`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): spec defines the desired behavior of the ValidatingAdmissionPolicyBinding.
+- `metadata` (`ObjectMeta`, optional): metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.

package/dist/okf/types/ValidatingAdmissionPolicyBindingList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingAdmissionPolicyBindingList
+description: k8s resource type K8s::Admissionregistration::ValidatingAdmissionPolicyBindingList
+name: ValidatingAdmissionPolicyBindingList
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingAdmissionPolicyBindingList
+---
+`K8s::Admissionregistration::ValidatingAdmissionPolicyBindingList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): List of PolicyBinding.
+- `metadata` (`Record<string, unknown>`, optional): metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

package/dist/okf/types/ValidatingAdmissionPolicyList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingAdmissionPolicyList
+description: k8s resource type K8s::Admissionregistration::ValidatingAdmissionPolicyList
+name: ValidatingAdmissionPolicyList
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingAdmissionPolicyList
+---
+`K8s::Admissionregistration::ValidatingAdmissionPolicyList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): List of ValidatingAdmissionPolicy.
+- `metadata` (`Record<string, unknown>`, optional): metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

package/dist/okf/types/ValidatingWebhookConfiguration.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingWebhookConfiguration
+description: k8s resource type K8s::Admissionregistration::ValidatingWebhookConfiguration
+name: ValidatingWebhookConfiguration
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingWebhookConfiguration
+---
+`K8s::Admissionregistration::ValidatingWebhookConfiguration`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `metadata` (`ObjectMeta`, optional): metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.
+- `webhooks` (`Record<string, unknown>[]`, optional): webhooks is a list of webhooks and the affected resources and operations.

package/dist/okf/types/ValidatingWebhookConfigurationList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: ValidatingWebhookConfigurationList
+description: k8s resource type K8s::Admissionregistration::ValidatingWebhookConfigurationList
+name: ValidatingWebhookConfigurationList
+lexicon: k8s
+resource_type: K8s::Admissionregistration::ValidatingWebhookConfigurationList
+---
+`K8s::Admissionregistration::ValidatingWebhookConfigurationList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): List of ValidatingWebhookConfiguration.
+- `metadata` (`Record<string, unknown>`, optional): metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

package/dist/okf/types/VolumeAttachment.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: VolumeAttachment
+description: k8s resource type K8s::Storage::VolumeAttachment
+name: VolumeAttachment
+lexicon: k8s
+resource_type: K8s::Storage::VolumeAttachment
+---
+`K8s::Storage::VolumeAttachment`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `spec` (`Record<string, unknown>`, required): spec represents specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.
+- `metadata` (`ObjectMeta`, optional): Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/VolumeAttachmentList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: VolumeAttachmentList
+description: k8s resource type K8s::Storage::VolumeAttachmentList
+name: VolumeAttachmentList
+lexicon: k8s
+resource_type: K8s::Storage::VolumeAttachmentList
+---
+`K8s::Storage::VolumeAttachmentList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): items is the list of VolumeAttachments
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/VolumeAttributesClass.md

@@ -0,0 +1,15 @@
+---
+type: resource-type
+title: VolumeAttributesClass
+description: k8s resource type K8s::Storage::VolumeAttributesClass
+name: VolumeAttributesClass
+lexicon: k8s
+resource_type: K8s::Storage::VolumeAttributesClass
+---
+`K8s::Storage::VolumeAttributesClass`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `driverName` (`string`, required): Name of the CSI driver This field is immutable.
+- `metadata` (`ObjectMeta`, optional): Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+- `parameters` (`Record<string, string>`, optional): parameters hold volume attributes defined by the CSI driver. These values are opaque to the Kubernetes and are passed directly to the CSI driver. The underlying storage provider supports changing these attributes on an existing volume, however the parameters field itself is immutable. To invoke a volume update, a new VolumeAttributesClass should be created with new parameters, and the PersistentVolumeClaim should be updated to reference the new VolumeAttributesClass. This field is required and must contain at least one key/value pair. The keys cannot be empty, and the maximum number of parameters is 512, with a cumulative max size of 256K. If the CSI driver rejects invalid parameters, the target PersistentVolumeClaim will be set to an "Infeasible" state in the modifyVolumeStatus field.

package/dist/okf/types/VolumeAttributesClassList.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: VolumeAttributesClassList
+description: k8s resource type K8s::Storage::VolumeAttributesClassList
+name: VolumeAttributesClassList
+lexicon: k8s
+resource_type: K8s::Storage::VolumeAttributesClassList
+---
+`K8s::Storage::VolumeAttributesClassList`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `items` (`Record<string, unknown>[]`, required): items is the list of VolumeAttributesClass objects.
+- `metadata` (`Record<string, unknown>`, optional): Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

package/dist/okf/types/WatchEvent.md

@@ -0,0 +1,14 @@
+---
+type: resource-type
+title: WatchEvent
+description: k8s resource type K8s::Core::WatchEvent
+name: WatchEvent
+lexicon: k8s
+resource_type: K8s::Core::WatchEvent
+---
+`K8s::Core::WatchEvent`, a resource type of the k8s lexicon.
+
+## Properties
+
+- `object` (`Record<string, unknown>`, required): Object is: If Type is Added or Modified: the new state of the object. If Type is Deleted: the state of the object immediately before deletion. If Type is Error: *Status is recommended; other types may make sense depending on context.
+- `type` (`string`, required)

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAqC,MAAM,0BAA0B,CAAC;AAwBjG,eAAO,MAAM,SAAS,EAAE,aAynBvB,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAqC,MAAM,0BAA0B,CAAC;AA2BjG,eAAO,MAAM,SAAS,EAAE,aAqqBvB,CAAC"}

package/dist/rules/argo-helpers.ts

@@ -1,5 +1,7 @@
 /**
  * Shared helpers for the Argo post-synth checks (ARGO002, ARGO003, ARGO005).
+ * The generic manifest collectors (`allManifests`, `manifestsOfKind`) are
+ * shared by the Flux checks (FLUX002, FLUX003) too.
  *
  * Excluded from check auto-discovery by the "helper" filename filter.
  */

package/dist/rules/flux-source-ref-pin.ts

@@ -0,0 +1,52 @@
+import type { LintRule, LintDiagnostic, LintContext } from "@intentius/chant/lint/rule";
+import { findResourceLiterals, getNestedObject, getNestedString, getProp, lineCol } from "./argo-ast";
+import * as ts from "typescript";
+
+/**
+ * FLUX001: GitRepository must pin spec.ref
+ *
+ * A Flux `GitRepository` with no `spec.ref` falls back to the `master` branch,
+ * which on most repos no longer exists — the source stalls with a checkout
+ * error, and every Kustomization downstream of it stalls too. Real estates pin
+ * a branch (or tag) on every source; `FluxGitSource` always emits one. Flag
+ * hand-written `GitRepository` literals whose spec carries a `url` but no
+ * `ref`.
+ *
+ * Bad:  new GitRepository({ spec: { url: "https://github.com/acme/infra" } })
+ * Good: new GitRepository({ spec: { url: "https://github.com/acme/infra", ref: { branch: "main" } } })
+ */
+
+export const fluxSourceRefPinRule: LintRule = {
+  id: "FLUX001",
+  severity: "warning",
+  category: "correctness",
+  description:
+    "Flux GitRepository must pin spec.ref (branch, tag, semver, or commit) — the unset default is the master branch",
+
+  check(context: LintContext): LintDiagnostic[] {
+    const { sourceFile } = context;
+    const diagnostics: LintDiagnostic[] = [];
+
+    for (const { literal } of findResourceLiterals(sourceFile, new Set(["GitRepository"]))) {
+      const spec = getNestedObject(literal, ["spec"]);
+      // No spec object literal to inspect — leave it to other tooling.
+      if (!spec) continue;
+      if (getProp(spec, "ref") !== undefined) continue;
+
+      const anchor: ts.Node = spec;
+      const { line, column } = lineCol(sourceFile, anchor);
+      const name = getNestedString(literal, ["metadata", "name"]) ?? "(unnamed)";
+
+      diagnostics.push({
+        file: sourceFile.fileName,
+        line,
+        column,
+        ruleId: "FLUX001",
+        severity: "warning",
+        message: `GitRepository "${name}" has no spec.ref — Flux falls back to the master branch. Pin a branch, tag, semver range, or commit.`,
+      });
+    }
+
+    return diagnostics;
+  },
+};