@intentius/chant-lexicon-k8s 0.45.0 → 0.49.0

package/dist/types/index.d.ts

@@ -140,6 +140,57 @@ export declare class AppProject {
   readonly uid: string;
 }
 
+export declare class AWSClusterControllerIdentity {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** Spec for this AWSClusterControllerIdentity. */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
+export declare class AWSManagedCluster {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** AWSManagedClusterSpec defines the desired state of AWSManagedCluster */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
+export declare class AWSManagedControlPlane {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** AWSManagedControlPlaneSpec defines the desired state of an Amazon EKS Cluster. */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
+export declare class AWSManagedMachinePool {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** AWSManagedMachinePoolSpec defines the desired state of AWSManagedMachinePool. */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class Backup {
   constructor(props: {
     /** Specification of the desired behavior of the backup.
@@ -178,13 +229,12 @@ export declare class Binding {
   readonly uid: string;
 }
 
-export declare class Bucket {
+export declare class CAPICluster {
   constructor(props: {
+    /** spec is the desired state of Cluster. */
+    spec: Record<string, unknown>;
     /** Standard object's metadata. */
     metadata?: ObjectMeta;
-    /** BucketSpec specifies the required configuration to produce an Artifact for
-an object storage bucket. */
-    spec?: Record<string, unknown>;
   });
   readonly name: string;
   readonly namespace: string;
@@ -254,10 +304,9 @@ export declare class Challenge {
   readonly uid: string;
 }
 
-export declare class Cluster {
+export declare class ClusterIssuer {
   constructor(props: {
-    /** Specification of the desired behavior of the cluster.
-More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
+    /** Desired state of the ClusterIssuer resource. */
     spec: Record<string, unknown>;
     /** Standard object's metadata. */
     metadata?: ObjectMeta;
@@ -268,9 +317,9 @@ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-
   readonly uid: string;
 }
 
-export declare class ClusterIssuer {
+export declare class ClusterResourceSet {
   constructor(props: {
-    /** Desired state of the ClusterIssuer resource. */
+    /** spec is the desired state of ClusterResourceSet. */
     spec: Record<string, unknown>;
     /** Standard object's metadata. */
     metadata?: ObjectMeta;
@@ -333,6 +382,18 @@ export declare class ClusterRoleList {
   readonly uid: string;
 }
 
+export declare class ClusterServingRuntime {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class ClusterTrustBundle {
   constructor(props: {
     /** spec contains the signer (if any) and trust anchors. */
@@ -373,6 +434,20 @@ export declare class CM {
   readonly uid: string;
 }
 
+export declare class CnpgCluster {
+  constructor(props: {
+    /** Specification of the desired behavior of the cluster.
+More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class ComponentStatus {
   constructor(props: {
     /** List of component conditions observed */
@@ -634,6 +709,26 @@ export declare class DaemonSetList {
   readonly uid: string;
 }
 
+export declare class DBInstance {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** DBInstanceSpec defines the desired state of DBInstance.
+
+Contains the details of an Amazon RDS DB instance.
+
+This data type is used as a response element in the operations CreateDBInstance,
+CreateDBInstanceReadReplica, DeleteDBInstance, DescribeDBInstances, ModifyDBInstance,
+PromoteReadReplica, RebootDBInstance, RestoreDBInstanceFromDBSnapshot, RestoreDBInstanceFromS3,
+RestoreDBInstanceToPointInTime, StartDBInstance, and StopDBInstance. */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class DeleteOptions {
   constructor(props: {
     /** When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed */
@@ -932,6 +1027,20 @@ export declare class FlowSchemaList {
   readonly uid: string;
 }
 
+export declare class FluxBucket {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** BucketSpec specifies the required configuration to produce an Artifact for
+an object storage bucket. */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class FluxHelmChart {
   constructor(props: {
     /** Standard object's metadata. */
@@ -1037,6 +1146,19 @@ These fields are merged with or override the corresponding fields on the related
   readonly uid: string;
 }
 
+export declare class HelmChartProxy {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** HelmChartProxySpec defines the desired state of HelmChartProxy. */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class HelmRelease {
   constructor(props: {
     /** Standard object's metadata. */
@@ -1113,6 +1235,22 @@ export declare class HTTPRoute {
   readonly uid: string;
 }
 
+export declare class IamRole {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** RoleSpec defines the desired state of Role.
+
+Contains information about an IAM role. This structure is returned as a response
+element in several API operations that interact with roles. */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class ImagePolicy {
   constructor(props: {
     /** Standard object's metadata. */
@@ -1154,6 +1292,18 @@ export declare class ImageUpdateAutomation {
   readonly uid: string;
 }
 
+export declare class InferenceService {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class InfisicalDynamicSecret {
   constructor(props: {
     /** Standard object's metadata. */
@@ -1461,6 +1611,19 @@ export declare class LocalSubjectAccessReview {
   readonly uid: string;
 }
 
+export declare class MachinePool {
+  constructor(props: {
+    /** spec is the desired state of MachinePool. */
+    spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class MicroVM {
   constructor(props: {
     /** Standard object's metadata. */
@@ -1871,6 +2034,23 @@ export declare class PodDisruptionBudgetList {
   readonly uid: string;
 }
 
+export declare class PodIdentityAssociation {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** PodIdentityAssociationSpec defines the desired state of PodIdentityAssociation.
+
+Amazon EKS Pod Identity associations provide the ability to manage credentials
+for your applications, similar to the way that Amazon EC2 instance profiles
+provide credentials to Amazon EC2 instances. */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class PodList {
   constructor(props: {
     /** List of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md */
@@ -1907,6 +2087,28 @@ export declare class PodTemplateList {
   readonly uid: string;
 }
 
+export declare class Policy {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** PolicySpec defines the desired state of Policy.
+
+Contains information about a managed policy.
+
+This data type is used as a response element in the CreatePolicy, GetPolicy,
+and ListPolicies operations.
+
+For more information about managed policies, refer to Managed policies and
+inline policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html)
+in the IAM User Guide. */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class Pooler {
   constructor(props: {
     /** Specification of the desired behavior of the Pooler.
@@ -2337,6 +2539,21 @@ export declare class RuntimeClassList {
   readonly uid: string;
 }
 
+export declare class S3Bucket {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** BucketSpec defines the desired state of Bucket.
+
+In terms of implementation, a Bucket is a resource. */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class SA {
   constructor(props: {
     /** AutomountServiceAccountToken indicates whether pods running as this service account should have an API token automatically mounted. Can be overridden at the pod level. */
@@ -2574,6 +2791,18 @@ Prometheus. */
   readonly uid: string;
 }
 
+export declare class ServingRuntime {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class StatefulSet {
   constructor(props: {
     /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
@@ -2760,6 +2989,29 @@ export declare class TraefikService {
   readonly uid: string;
 }
 
+export declare class User {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    /** UserSpec defines the desired state of User.
+
+Contains information about an IAM user entity.
+
+This data type is used as a response element in the following operations:
+
+   * CreateUser
+
+   * GetUser
+
+   * ListUsers */
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class ValidatingAdmissionPolicy {
   constructor(props: {
     /** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-k8s",
-  "version": "0.45.0",
+  "version": "0.49.0",
   "description": "Kubernetes lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -72,11 +72,11 @@
     "build": "tsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json && find dist -type f \\( -name \"*.js\" -o -name \"*.js.map\" \\) -delete"
   },
   "dependencies": {
-    "js-yaml": "^4.1.1",
+    "js-yaml": "^4.3.1",
     "@types/js-yaml": "^4.0.9"
   },
   "optionalDependencies": {
-    "@intentius/chant-k8s-client": "^0.45.0"
+    "@intentius/chant-k8s-client": "^0.49.0"
   },
   "devDependencies": {
     "@intentius/chant": "*",
@@ -84,7 +84,7 @@
   },
   "peerDependencies": {
     "zod": "^4.3.6",
-    "@intentius/chant": "^0.45.0",
+    "@intentius/chant": "^0.49.0",
     "typescript": "^5.9.3"
   }
 }

package/src/components/kubectl-apply.ts

@@ -42,6 +42,11 @@ export interface KubectlApplyOutcome {
   applied: AppliedRef[];
   /** Objects deleted because they carried chant's marker and are no longer declared. */
   pruned: AppliedRef[];
+  /**
+   * Owned, undeclared, deliberately KEPT (#1830): generated-once Secrets never
+   * enter the prunable set. Present whenever the prune ran.
+   */
+  retained?: AppliedRef[];
 }
 
 interface ApplierArgs {