@intentius/chant-lexicon-k8s 0.99.0 → 0.101.0

package/dist/composites/catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/composites/catalog.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,eAAO,MAAM,gBAAgB,EAAE,cAAc,EAw5H5C,CAAC"}
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/composites/catalog.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,eAAO,MAAM,gBAAgB,EAAE,cAAc,EA85H5C,CAAC"}

package/dist/composites/gke-otel-collector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gke-otel-collector.d.ts","sourceRoot":"","sources":["../../src/composites/gke-otel-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,OAAO,EAA2B,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAE/F,MAAM,WAAW,qBAAqB;IACpC,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAC9C,CAAC;CACH;AAED,MAAM,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAE7D;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,gBAAgB,gGAsEP,CAAC"}
+{"version":3,"file":"gke-otel-collector.d.ts","sourceRoot":"","sources":["../../src/composites/gke-otel-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAYH,OAAO,EAA2B,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAG/F,MAAM,WAAW,qBAAqB;IACpC,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAC9C,CAAC;CACH;AAED,MAAM,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAE7D;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,gBAAgB,gGA0EP,CAAC"}

package/dist/composites/otel-collector-agent.d.ts

@@ -2,7 +2,8 @@
  * The Kubernetes resources an OpenTelemetry Collector agent needs, shared by
  * `OtelCollector` and `GkeOtelCollector`: a DaemonSet running the collector
  * with its config mounted from a ConfigMap, and a ServiceAccount bound to a
- * ClusterRole that reads pods, nodes and workloads.
+ * ClusterRole with the rules the caller works out from its config (see
+ * `agentClusterRules` in `otel-collector-rbac.ts`).
  *
  * The caller renders the collector config (with the otel lexicon's
  * `collectorYaml`) and says which ports the container exposes. Everything
@@ -13,6 +14,7 @@
  * (`collectorContainer`, `collectorConfigMap`) in a Deployment.
  */
 import { DaemonSet, ServiceAccount, ClusterRole, ClusterRoleBinding, ConfigMap } from "../generated/index.js";
+import type { CollectorPolicyRule } from "./otel-collector-rbac.js";
 export interface CollectorAgentOptions {
     name: string;
     namespace: string;
@@ -29,6 +31,8 @@ export interface CollectorAgentOptions {
         containerPort: number;
         name: string;
     }>;
+    /** The ClusterRole's rules, from `agentClusterRules`. */
+    clusterRules: CollectorPolicyRule[];
     cpuRequest: string;
     memoryRequest: string;
     cpuLimit: string;

package/dist/composites/otel-collector-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"otel-collector-agent.d.ts","sourceRoot":"","sources":["../../src/composites/otel-collector-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAErG,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,2EAA2E;IAC3E,yBAAyB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,uGAAuG;IACvG,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,oCAAoC;IACpC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAC9C,CAAC;CACH;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,SAAS,EAAE,YAAY,CAAC,OAAO,SAAS,CAAC,CAAC;IAC1C,cAAc,EAAE,YAAY,CAAC,OAAO,cAAc,CAAC,CAAC;IACpD,WAAW,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;IAC9C,kBAAkB,EAAE,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAC5D,SAAS,EAAE,YAAY,CAAC,OAAO,SAAS,CAAC,CAAC;CAC3C,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,uBAAuB,CA8E5F;AAED,2EAA2E;AAC3E,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAC1C,qBAAqB,EACrB,MAAM,GAAG,OAAO,GAAG,WAAW,GAAG,OAAO,GAAG,YAAY,GAAG,eAAe,GAAG,UAAU,GAAG,aAAa,GAAG,gBAAgB,CAC1H,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqB3F;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,WAAW,GAAG,cAAc,GAAG,YAAY,CAAC,GAAG;IAC/E,QAAQ,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;KAAE,CAAC;CAC7D,EACD,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,YAAY,CAAC,OAAO,SAAS,CAAC,CAYhC"}
+{"version":3,"file":"otel-collector-agent.d.ts","sourceRoot":"","sources":["../../src/composites/otel-collector-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACrG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,yDAAyD;IACzD,YAAY,EAAE,mBAAmB,EAAE,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,2EAA2E;IAC3E,yBAAyB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,uGAAuG;IACvG,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,oCAAoC;IACpC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAC9C,CAAC;CACH;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,SAAS,EAAE,YAAY,CAAC,OAAO,SAAS,CAAC,CAAC;IAC1C,cAAc,EAAE,YAAY,CAAC,OAAO,cAAc,CAAC,CAAC;IACpD,WAAW,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;IAC9C,kBAAkB,EAAE,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAC5D,SAAS,EAAE,YAAY,CAAC,OAAO,SAAS,CAAC,CAAC;CAC3C,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,uBAAuB,CAuE5F;AAED,2EAA2E;AAC3E,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAC1C,qBAAqB,EACrB,MAAM,GAAG,OAAO,GAAG,WAAW,GAAG,OAAO,GAAG,YAAY,GAAG,eAAe,GAAG,UAAU,GAAG,aAAa,GAAG,gBAAgB,CAC1H,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqB3F;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,WAAW,GAAG,cAAc,GAAG,YAAY,CAAC,GAAG;IAC/E,QAAQ,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;KAAE,CAAC;CAC7D,EACD,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,YAAY,CAAC,OAAO,SAAS,CAAC,CAYhC"}

package/dist/composites/otel-collector-gateway.d.ts

@@ -15,15 +15,10 @@
  * another namespace moves the agents with it.
  */
 import type { Declarable } from "@intentius/chant/declarable";
-import { LoadBalancingExporter, OtlpExporter, type LoadBalancingRoutingKey, type OTelComponent, type Signal, type TLSClientSettings } from "@intentius/chant-lexicon-otel";
-import { Deployment, Service, ServiceAccount, ClusterRole, ClusterRoleBinding, ConfigMap, PodDisruptionBudget } from "../generated/index.js";
-/** One RBAC rule, as a ClusterRole lists it. */
-export interface CollectorPolicyRule {
-    apiGroups: string[];
-    resources: string[];
-    verbs: string[];
-    resourceNames?: string[];
-}
+import { LoadBalancingExporter, OtlpExporter, OtlpHttpExporter, type LoadBalancingRoutingKey, type OTelComponent, type Signal, type TLSClientSettings } from "@intentius/chant-lexicon-otel";
+import { Deployment, Service, ServiceAccount, ClusterRole, ClusterRoleBinding, ConfigMap, PodDisruptionBudget, Role, RoleBinding } from "../generated/index.js";
+import { type CollectorPolicyRule } from "./otel-collector-rbac.js";
+export type { CollectorPolicyRule };
 export interface OtelCollectorGatewayProps {
     /** Gateway name (default: "otel-gateway"). */
     name?: string;
@@ -70,6 +65,8 @@ export interface OtelCollectorGatewayProps {
         podDisruptionBudget?: Partial<Record<string, unknown>>;
         clusterRole?: Partial<Record<string, unknown>>;
         clusterRoleBinding?: Partial<Record<string, unknown>>;
+        leaseRole?: Partial<Record<string, unknown>>;
+        leaseRoleBinding?: Partial<Record<string, unknown>>;
     };
 }
 export type OtelCollectorGatewayResult = {
@@ -82,12 +79,22 @@ export type OtelCollectorGatewayResult = {
     podDisruptionBudget?: InstanceType<typeof PodDisruptionBudget>;
     clusterRole?: InstanceType<typeof ClusterRole>;
     clusterRoleBinding?: InstanceType<typeof ClusterRoleBinding>;
+    /**
+     * Access to Leases for the `k8s_leader_elector` extensions the config
+     * enables, in the first `lease_namespace`. Each further namespace gets
+     * `leaseRoleIn<Namespace>` and `leaseRoleBindingIn<Namespace>`.
+     */
+    leaseRole?: InstanceType<typeof Role>;
+    leaseRoleBinding?: InstanceType<typeof RoleBinding>;
+    [member: `leaseRoleIn${string}`]: InstanceType<typeof Role>;
+    [member: `leaseRoleBindingIn${string}`]: InstanceType<typeof RoleBinding>;
 };
 /**
  * Create an OtelCollectorGateway composite. Returns a Deployment, a ClusterIP
  * Service, a headless Service, a ServiceAccount and a ConfigMap, a
- * PodDisruptionBudget when there is more than one replica, and a ClusterRole
- * and binding when `clusterRules` is set.
+ * PodDisruptionBudget when there is more than one replica, a ClusterRole
+ * and binding when `clusterRules` is set, and a Role and binding for Leases
+ * when the config enables a `k8s_leader_elector` extension.
  *
  * @example
  * ```ts
@@ -97,46 +104,17 @@ export type OtelCollectorGatewayResult = {
  * export const agent = OtelCollector({ exporters: [gatewayExporter(gateway, { loadBalance: true })], signals: ["traces"] });
  * ```
  */
-export declare const OtelCollectorGateway: import("@intentius/chant").CompositeDefinition<OtelCollectorGatewayProps, {
-    clusterRole: Declarable & Record<string, string>;
-    clusterRoleBinding: Declarable & Record<string, string>;
-    podDisruptionBudget: Declarable & Record<string, string>;
-    deployment: Declarable & Record<string, string>;
-    service: Declarable & Record<string, string>;
-    headlessService: Declarable & Record<string, string>;
-    serviceAccount: Declarable & Record<string, string>;
-    configMap: Declarable & Record<string, string>;
-} | {
-    clusterRole?: undefined;
-    clusterRoleBinding?: undefined;
-    podDisruptionBudget: Declarable & Record<string, string>;
-    deployment: Declarable & Record<string, string>;
-    service: Declarable & Record<string, string>;
-    headlessService: Declarable & Record<string, string>;
-    serviceAccount: Declarable & Record<string, string>;
-    configMap: Declarable & Record<string, string>;
-} | {
-    clusterRole: Declarable & Record<string, string>;
-    clusterRoleBinding: Declarable & Record<string, string>;
-    podDisruptionBudget?: undefined;
-    deployment: Declarable & Record<string, string>;
-    service: Declarable & Record<string, string>;
-    headlessService: Declarable & Record<string, string>;
-    serviceAccount: Declarable & Record<string, string>;
-    configMap: Declarable & Record<string, string>;
-} | {
-    clusterRole?: undefined;
-    clusterRoleBinding?: undefined;
-    podDisruptionBudget?: undefined;
-    deployment: Declarable & Record<string, string>;
-    service: Declarable & Record<string, string>;
-    headlessService: Declarable & Record<string, string>;
-    serviceAccount: Declarable & Record<string, string>;
-    configMap: Declarable & Record<string, string>;
-}>;
+export declare const OtelCollectorGateway: import("@intentius/chant").CompositeDefinition<OtelCollectorGatewayProps, OtelCollectorGatewayResult>;
 export interface GatewayExporterOptions {
-    /** Exporter name, so the id is `otlp/<name>` or `loadbalancing/<name>` (default: "gateway"). */
+    /** Exporter name, so the id is `otlp/<name>`, `otlphttp/<name>` or `loadbalancing/<name>` (default: "gateway"). */
     name?: string;
+    /**
+     * OTLP over gRPC (an `otlp` exporter) or over HTTP (an `otlphttp`
+     * exporter). The `loadbalancing` exporter sends OTLP over gRPC only at the
+     * pinned collector version, so `http` cannot be combined with
+     * `loadBalance`. Default: "grpc".
+     */
+    protocol?: "grpc" | "http";
     /**
      * Send each trace to one gateway replica through the headless Service with
      * a `loadbalancing` exporter, instead of to the ClusterIP Service with an
@@ -152,9 +130,13 @@ export interface GatewayExporterOptions {
     resolver?: "k8s" | "dns";
     /** What the `loadbalancing` exporter hashes on (default: "traceID"). */
     routingKey?: LoadBalancingRoutingKey;
-    /** The gateway Service port to send to, by name (default: "otlp-grpc"). */
+    /** The gateway Service port to send to, by name (default: "otlp-grpc", or "otlp-http" with `protocol: "http"`). */
     port?: string;
-    /** TLS for the connection to the gateway (default: `{ insecure: true }`, plaintext inside the cluster). */
+    /**
+     * TLS for the connection to the gateway (default: `{ insecure: true }`,
+     * plaintext inside the cluster). Over HTTP, `insecure` picks the scheme
+     * (`http://`, or `https://` without it) and the other settings are passed on.
+     */
     tls?: TLSClientSettings;
 }
 /**
@@ -163,11 +145,14 @@ export interface GatewayExporterOptions {
  * config listens on.
  *
  * By default an `otlp` exporter at `<service>.<namespace>.svc:<port>`. With
+ * `protocol: "http"`, an `otlphttp` exporter at
+ * `http://<service>.<namespace>.svc:<port>` (`https://` when `tls` is not
+ * `insecure`), sending to the gateway's OTLP HTTP port. With
  * `loadBalance`, a `loadbalancing` exporter routing by trace id to the
  * headless Service, through the `k8s` resolver (`<headless>.<namespace>`) or
  * the `dns` resolver (`<headless>.<namespace>.svc`). Put it in the agent's
  * pipelines like any other exporter; `OtelCollector` records the link in its
  * annotations and adds the RBAC the `k8s` resolver needs.
  */
-export declare function gatewayExporter(gateway: OtelCollectorGatewayResult, options?: GatewayExporterOptions): InstanceType<typeof OtlpExporter> | InstanceType<typeof LoadBalancingExporter>;
+export declare function gatewayExporter(gateway: OtelCollectorGatewayResult, options?: GatewayExporterOptions): InstanceType<typeof OtlpExporter> | InstanceType<typeof OtlpHttpExporter> | InstanceType<typeof LoadBalancingExporter>;
 //# sourceMappingURL=otel-collector-gateway.d.ts.map

package/dist/composites/otel-collector-gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"otel-collector-gateway.d.ts","sourceRoot":"","sources":["../../src/composites/otel-collector-gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAEL,qBAAqB,EACrB,YAAY,EAEZ,KAAK,uBAAuB,EAC5B,KAAK,aAAa,EAClB,KAAK,MAAM,EACX,KAAK,iBAAiB,EACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AASpI,gDAAgD;AAChD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mGAAmG;IACnG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9B,wEAAwE;IACxE,SAAS,CAAC,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;IACrD,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACrC,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3C,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACnD,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACvD,CAAC;CACH;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;IAC5C,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,eAAe,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IAC9C,cAAc,EAAE,YAAY,CAAC,OAAO,cAAc,CAAC,CAAC;IACpD,SAAS,EAAE,YAAY,CAAC,OAAO,SAAS,CAAC,CAAC;IAC1C,+FAA+F;IAC/F,mBAAmB,CAAC,EAAE,YAAY,CAAC,OAAO,mBAAmB,CAAC,CAAC;IAC/D,WAAW,CAAC,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;IAC/C,kBAAkB,CAAC,EAAE,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;CAC9D,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyHP,CAAC;AAI3B,MAAM,WAAW,sBAAsB;IACrC,gGAAgG;IAChG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACzB,wEAAwE;IACxE,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2GAA2G;IAC3G,GAAG,CAAC,EAAE,iBAAiB,CAAC;CACzB;AAaD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,0BAA0B,EACnC,OAAO,GAAE,sBAA2B,GACnC,YAAY,CAAC,OAAO,YAAY,CAAC,GAAG,YAAY,CAAC,OAAO,qBAAqB,CAAC,CA4BhF"}
+{"version":3,"file":"otel-collector-gateway.d.ts","sourceRoot":"","sources":["../../src/composites/otel-collector-gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAEL,qBAAqB,EACrB,YAAY,EACZ,gBAAgB,EAEhB,KAAK,uBAAuB,EAC5B,KAAK,aAAa,EAClB,KAAK,MAAM,EACX,KAAK,iBAAiB,EACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,UAAU,EACV,OAAO,EACP,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,SAAS,EACT,mBAAmB,EACnB,IAAI,EACJ,WAAW,EACZ,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAmB,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AASlF,YAAY,EAAE,mBAAmB,EAAE,CAAC;AAEpC,MAAM,WAAW,yBAAyB;IACxC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mGAAmG;IACnG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9B,wEAAwE;IACxE,SAAS,CAAC,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;IACrD,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACrC,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3C,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACnD,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,gBAAgB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACrD,CAAC;CACH;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;IAC5C,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,eAAe,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IAC9C,cAAc,EAAE,YAAY,CAAC,OAAO,cAAc,CAAC,CAAC;IACpD,SAAS,EAAE,YAAY,CAAC,OAAO,SAAS,CAAC,CAAC;IAC1C,+FAA+F;IAC/F,mBAAmB,CAAC,EAAE,YAAY,CAAC,OAAO,mBAAmB,CAAC,CAAC;IAC/D,WAAW,CAAC,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;IAC/C,kBAAkB,CAAC,EAAE,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAC7D;;;;OAIG;IACH,SAAS,CAAC,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IACtC,gBAAgB,CAAC,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;IACpD,CAAC,MAAM,EAAE,cAAc,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IAC5D,CAAC,MAAM,EAAE,qBAAqB,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;CAC3E,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,uGA8IP,CAAC;AAI3B,MAAM,WAAW,sBAAsB;IACrC,mHAAmH;IACnH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACzB,wEAAwE;IACxE,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,mHAAmH;IACnH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,GAAG,CAAC,EAAE,iBAAiB,CAAC;CACzB;AAaD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,0BAA0B,EACnC,OAAO,GAAE,sBAA2B,GACnC,YAAY,CAAC,OAAO,YAAY,CAAC,GAAG,YAAY,CAAC,OAAO,gBAAgB,CAAC,GAAG,YAAY,CAAC,OAAO,qBAAqB,CAAC,CAqCxH"}

package/dist/composites/otel-collector-rbac.d.ts

@@ -0,0 +1,74 @@
+/**
+ * The RBAC the collector composites grant, worked out from the collector
+ * config they deploy.
+ *
+ * `agentClusterRules` is the ClusterRole `OtelCollector` and
+ * `GkeOtelCollector` share: what the `k8sattributes` processor needs, plus
+ * what the config's Kubernetes receivers need. Each rule cites the
+ * component's RBAC requirements at collector-contrib v0.130.0, the version the
+ * otel lexicon pins.
+ *
+ * `namespacedRoles` builds one Role and RoleBinding per namespace, for access
+ * a collector needs in namespaces other than its own: Endpoints for a
+ * `loadbalancing` exporter's `k8s` resolver, Leases for a
+ * `k8s_leader_elector` extension.
+ */
+import type { CollectorConfig } from "@intentius/chant-lexicon-otel";
+import { Role, RoleBinding } from "../generated/index.js";
+/** One RBAC rule, as a Role or ClusterRole lists it. */
+export interface CollectorPolicyRule {
+    apiGroups: string[];
+    resources: string[];
+    verbs: string[];
+    resourceNames?: string[];
+}
+/**
+ * The agent ClusterRole's rules for a collector config.
+ *
+ * Always, for `k8sattributes` (processor/k8sattributesprocessor README,
+ * "Cluster-scoped RBAC"): `get`, `list` and `watch` on pods, namespaces and
+ * nodes, and on `apps` replicasets for `k8s.deployment.name`, which is
+ * extracted by default. The processor lists ReplicaSets through `apps/v1`
+ * only, so the README's `extensions` group is left out. When a
+ * `k8sattributes` processor extracts labels or annotations `from: deployment`,
+ * `apps` deployments are added.
+ *
+ * For each `kubeletstats` receiver (receiver/kubeletstatsreceiver README,
+ * "Role-based access control"): `get` on `nodes/stats`; `get` on
+ * `nodes/proxy` when it sets `extra_metadata_labels` or enables a
+ * `*_request_utilization` or `*_limit_utilization` metric; and, when it sets
+ * `k8s_api_config`, `get` on persistentvolumeclaims and persistentvolumes,
+ * which it reads for volume metadata (scraper.go).
+ *
+ * Other components that read the Kubernetes API, such as `k8s_cluster`
+ * (which belongs on a gateway, see WK8603), add their rules through
+ * `defaults.clusterRole.rules`, which are appended.
+ */
+export declare function agentClusterRules(config: CollectorConfig): CollectorPolicyRule[];
+export interface NamespacedRolesOptions {
+    /** Prefix of the member names: `<key>Role` and `<key>RoleBinding`. */
+    key: string;
+    /** Name of each Role and RoleBinding. They live in different namespaces, so one name serves all. */
+    name: string;
+    /** Namespaces to grant in, in declaration order. */
+    namespaces: string[];
+    rules: CollectorPolicyRule[];
+    labels: Record<string, string>;
+    /** The ServiceAccount every RoleBinding binds. */
+    serviceAccount: {
+        name: string;
+        namespace: string;
+    };
+    /** Defaults laid over each Role and each RoleBinding. */
+    roleDefaults?: Partial<Record<string, unknown>>;
+    roleBindingDefaults?: Partial<Record<string, unknown>>;
+}
+/**
+ * One Role and RoleBinding per namespace, as composite members. The first
+ * namespace's are `<key>Role` and `<key>RoleBinding`, so a single-namespace
+ * config keeps the member names it had before; each further namespace's are
+ * `<key>RoleIn<Namespace>` and `<key>RoleBindingIn<Namespace>`, with the
+ * namespace in PascalCase (`team-a` gives `endpointsRoleInTeamA`).
+ */
+export declare function namespacedRoles(opts: NamespacedRolesOptions): Record<string, InstanceType<typeof Role> | InstanceType<typeof RoleBinding>>;
+//# sourceMappingURL=otel-collector-rbac.d.ts.map

package/dist/composites/otel-collector-rbac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel-collector-rbac.d.ts","sourceRoot":"","sources":["../../src/composites/otel-collector-rbac.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEjD,wDAAwD;AACxD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAUD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,mBAAmB,EAAE,CA+BhF;AAUD,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,GAAG,EAAE,MAAM,CAAC;IACZ,oGAAoG;IACpG,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,kDAAkD;IAClD,cAAc,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,yDAAyD;IACzD,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACxD;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC,CAqB1I"}

package/dist/composites/otel-collector-shape.d.ts

@@ -70,4 +70,11 @@ export declare function collectorRuntime(entities: Declarable[]): CollectorRunti
  * collector's own namespace, `name.namespace` in that one.
  */
 export declare function k8sResolverNamespaces(built: BuiltCollector, ownNamespace: string): string[];
+/**
+ * The namespaces of the Leases a config's `k8s_leader_elector` extensions
+ * take, for those `service.extensions` enables (the collector starts no
+ * other). An elector without `lease_namespace` fails the otel lexicon's
+ * OTEL107 and is skipped here.
+ */
+export declare function leaderElectorLeaseNamespaces(built: BuiltCollector): string[];
 //# sourceMappingURL=otel-collector-shape.d.ts.map

package/dist/composites/otel-collector-shape.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"otel-collector-shape.d.ts","sourceRoot":"","sources":["../../src/composites/otel-collector-shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,+BAA+B,CAAC;AAEvC;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B;;;;;CAK7B,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;AAEhD,sGAAsG;AACtG,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,eAAe,CAAC;AAEzD,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACzB;AAID,6DAA6D;AAC7D,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAEjF;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,GAAG,aAAa,EAAE,CAOvE;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,CAEnE;AAED,gHAAgH;AAChH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,KAAK,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,kFAAkF;IAClF,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,gFAAgF;IAChF,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAkCzE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAW3F"}
+{"version":3,"file":"otel-collector-shape.d.ts","sourceRoot":"","sources":["../../src/composites/otel-collector-shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,+BAA+B,CAAC;AAEvC;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B;;;;;CAK7B,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;AAEhD,sGAAsG;AACtG,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,eAAe,CAAC;AAEzD,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACzB;AAID,6DAA6D;AAC7D,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAEjF;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,GAAG,aAAa,EAAE,CAOvE;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,CAEnE;AAED,gHAAgH;AAChH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,KAAK,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,kFAAkF;IAClF,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,gFAAgF;IAChF,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAkCzE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAW3F;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,EAAE,CAW5E"}

package/dist/composites/otel-collector.d.ts

@@ -58,9 +58,15 @@ export interface OtelCollectorProps {
 }
 export type OtelCollectorResult = CollectorAgentResources & {
     service: InstanceType<typeof Service>;
-    /** Read access to Endpoints for a `loadbalancing` exporter's `k8s` resolver, in the resolved Service's namespace. */
+    /**
+     * Read access to Endpoints for a `loadbalancing` exporter's `k8s` resolver,
+     * in the first namespace the resolvers point at. Each further namespace
+     * gets `endpointsRoleIn<Namespace>` and `endpointsRoleBindingIn<Namespace>`.
+     */
     endpointsRole?: InstanceType<typeof Role>;
     endpointsRoleBinding?: InstanceType<typeof RoleBinding>;
+    [member: `endpointsRoleIn${string}`]: InstanceType<typeof Role>;
+    [member: `endpointsRoleBindingIn${string}`]: InstanceType<typeof RoleBinding>;
 };
 /**
  * Create an OtelCollector composite. Returns a DaemonSet, Service,
@@ -76,23 +82,5 @@ export type OtelCollectorResult = CollectorAgentResources & {
  * });
  * ```
  */
-export declare const OtelCollector: import("@intentius/chant").CompositeDefinition<OtelCollectorProps, {
-    endpointsRole: Declarable & Record<string, string>;
-    endpointsRoleBinding: Declarable & Record<string, string>;
-    service: Declarable & Record<string, string>;
-    daemonSet: InstanceType<typeof import("../index.js").DaemonSet>;
-    serviceAccount: InstanceType<typeof import("../index.js").ServiceAccount>;
-    clusterRole: InstanceType<typeof import("../index.js").ClusterRole>;
-    clusterRoleBinding: InstanceType<typeof import("../index.js").ClusterRoleBinding>;
-    configMap: InstanceType<typeof import("../index.js").ConfigMap>;
-} | {
-    endpointsRole?: undefined;
-    endpointsRoleBinding?: undefined;
-    service: Declarable & Record<string, string>;
-    daemonSet: InstanceType<typeof import("../index.js").DaemonSet>;
-    serviceAccount: InstanceType<typeof import("../index.js").ServiceAccount>;
-    clusterRole: InstanceType<typeof import("../index.js").ClusterRole>;
-    clusterRoleBinding: InstanceType<typeof import("../index.js").ClusterRoleBinding>;
-    configMap: InstanceType<typeof import("../index.js").ConfigMap>;
-}>;
+export declare const OtelCollector: import("@intentius/chant").CompositeDefinition<OtelCollectorProps, OtelCollectorResult>;
 //# sourceMappingURL=otel-collector.d.ts.map

package/dist/composites/otel-collector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"otel-collector.d.ts","sourceRoot":"","sources":["../../src/composites/otel-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,MAAM,EACZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAA2B,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAS/F,MAAM,WAAW,kBAAkB;IACjC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mGAAmG;IACnG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9B,wEAAwE;IACxE,SAAS,CAAC,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;IACrD,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3C,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACjD,oBAAoB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACzD,CAAC;CACH;AAED,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,GAAG;IAC1D,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,qHAAqH;IACrH,aAAa,CAAC,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IAC1C,oBAAoB,CAAC,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;CACzD,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;EA2GP,CAAC"}
+{"version":3,"file":"otel-collector.d.ts","sourceRoot":"","sources":["../../src/composites/otel-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,MAAM,EACZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAA2B,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAU/F,MAAM,WAAW,kBAAkB;IACjC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mGAAmG;IACnG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9B,wEAAwE;IACxE,SAAS,CAAC,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;IACrD,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3C,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACjD,oBAAoB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACzD,CAAC;CACH;AAED,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,GAAG;IAC1D,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC;;;;OAIG;IACH,aAAa,CAAC,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IAC1C,oBAAoB,CAAC,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;IACxD,CAAC,MAAM,EAAE,kBAAkB,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IAChE,CAAC,MAAM,EAAE,yBAAyB,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;CAC/E,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,aAAa,yFA2FP,CAAC"}

package/dist/import/live-export.d.ts

@@ -9,6 +9,11 @@ export declare function stripServerFields(obj: Record<string, unknown>): Record<
  * `items` of a `kubectl get -o json` List). Reuses the import K8sParser by
  * feeding it the cleaned objects as JSON documents — JSON is valid YAML, so no
  * separate serializer is needed. Pure: all I/O stays in the caller.
+ *
+ * The result's `reparse(context)` parses the same objects again with a
+ * `ParseContext`, so `chant import --from` hands embedded content (a
+ * collector config in a ConfigMap, a PrometheusRule's groups) to the lexicon
+ * that owns it, as file import does (#2995).
  */
 export declare function buildExportFromObjects(objects: unknown[], opts?: {
     verbatim?: boolean;

package/dist/import/live-export.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-export.d.ts","sourceRoot":"","sources":["../../src/import/live-export.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AA8BnF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAavF;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAAE,EAClB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9E,gBAAgB,CA8BlB"}
+{"version":3,"file":"live-export.d.ts","sourceRoot":"","sources":["../../src/import/live-export.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AA+BnF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAavF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAAE,EAClB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9E,gBAAgB,CAgBlB"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "1a8204a45d432f44bf6760aff2619dba20707d1e4c2f5fcb1aea1d5aa53daf96",
+    "manifest.json": "ed73bb8ccc1cddd4feafe27ddd89fdbfd0a5864d67e392ed8ddb85632d4be34a",
     "meta.json": "8b999bc142f448b0b627ecdc9e2388bbe672c8a1f7aae5303135624cf2fe65e3",
     "types/index.d.ts": "5f67de738adb455805e72600948940af9c664283785fb68c9fd8f5ea90d42cc3",
     "rules/argo-appset-single-project.ts": "afa9f310753aa2d475f35012b13135b2dfaebed2a35d44edbe185ebc07673674",
@@ -19,7 +19,7 @@
     "rules/flux002.ts": "4269ce13121bc5b28c02aad06765dc85085a1c9ebcc936ae958663b85de07bc6",
     "rules/flux003.ts": "a174af9941bd2491a9bbf72039ab2fc4d4f4de388b2884ddf7123f05594d9d4e",
     "rules/k8s-helpers.ts": "868cac99b4505a8e060384a716047646da1583568ef6da471a186dc760961212",
-    "rules/otel-placement-helpers.ts": "dcf50dadb77bf676f4690b865938b71cfacdca506b93371bbf9db81ac1d6a0f5",
+    "rules/otel-placement-helpers.ts": "bb24ab6b8fe92cb38f94720d6f5351ddc63144d1741745b4d8b4b2dd9f927255",
     "rules/sops-helpers.ts": "c2b8e08e7d292e770fd4761ad2a55e165c7cd375768b709491165cbf4fa1ba51",
     "rules/wk8005.ts": "c80c4962e2015ce15266dd2080014fcabf1412ca35e8475ae41aa895c5684b78",
     "rules/wk8006.ts": "3992f695985fd8473f6bc1f85027f13b0824f7c0bd1c1305a0a29a3c0757f45a",
@@ -59,6 +59,7 @@
     "rules/wk8601.ts": "0fd5eb0fc7c0e645d93be4b265a8f2be996765db849809fdd2b4d7e3866353be",
     "rules/wk8602.ts": "aad3b84dd8744afb0e0e7926973d9a07123ab29125eb85823cbfdde4b03d4177",
     "rules/wk8603.ts": "cffee84ddda68798e023c0d1a0eebb3b51546467b53779ffea84e1595bd2f8ad",
+    "rules/wk8604.ts": "2086d9909b5f529388ac6ad1a5ce28659d26559e7ff6e505c9f03869630b5ddd",
     "skills/chant-k8s.md": "324d222bd4c48ae1f562bedf982c6be793e74179daf659ca2df70f6a3702b4ff",
     "skills/chant-k8s-patterns.md": "683148e9f0f9da6879bd65d97c82cc29dbff897e31bc11b3c1de654cd6baeea3",
     "skills/chant-k8s-deployment-strategies.md": "c4cc93cba064230567baa755b5a3493dc69bfc6e74a62e1990d12039ffaaf5f8",
@@ -69,5 +70,5 @@
     "skills/chant-k8s-argo.md": "24c9a85b78a2fc5c6657424baac9cc6d6caff6f47605b8146b2c0082133181cf",
     "skills/chant-k8s-flux.md": "9670efc2e9854bd14686b5adeb707396b9030a4dcaee6529b30abf56efe2c50c"
   },
-  "composite": "5680cfa0b7d42111693a68a763446b0351130e6050a629ddcbf9387075214303"
+  "composite": "dd56b1357b2397437f6a446ff77194db3c9582f45a96e391c7d86652c916211f"
 }

package/dist/lint/audit-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-catalog.d.ts","sourceRoot":"","sources":["../../src/lint/audit-catalog.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAqD,KAAK,QAAQ,EAAgB,MAAM,gCAAgC,CAAC;AAGhI,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CA4CpD,CAAC"}
+{"version":3,"file":"audit-catalog.d.ts","sourceRoot":"","sources":["../../src/lint/audit-catalog.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAqD,KAAK,QAAQ,EAAgB,MAAM,gCAAgC,CAAC;AAGhI,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CA6CpD,CAAC"}

package/dist/lint/post-synth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AA6CvE,eAAO,MAAM,eAAe,EAAE,cAAc,EA4C3C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AA8CvE,eAAO,MAAM,eAAe,EAAE,cAAc,EA6C3C,CAAC"}

package/dist/lint/post-synth/otel-placement-helpers.d.ts

@@ -62,7 +62,11 @@ export interface CollectorPlacement {
     key: string;
     config: CollectorConfigShape;
 }
-/** Parse a ConfigMap value as a collector config, or undefined when it isn't one. */
+/**
+ * Parse a ConfigMap value as a collector config, or undefined when it isn't
+ * one. The otel lexicon's parser, shared with its config checks (OTEL101 and
+ * the rest) and WK8604 so every check agrees on what counts as a config.
+ */
 export declare function parseCollectorConfig(text: unknown): CollectorConfigShape | undefined;
 /** The `type` of a component id: `tail_sampling/errors` is `tail_sampling`. */
 export declare function componentType(id: string): string;

package/dist/lint/post-synth/otel-placement-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"otel-placement-helpers.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/otel-placement-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EAAqC,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAEpF,eAAO,MAAM,qBAAqB;;;;;CAKxB,CAAC;AAEX,gEAAgE;AAChE,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,EAAE;QACP,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,SAAS,CAAC,EAAE,OAAO,CAAC;YAAC,UAAU,CAAC,EAAE,OAAO,CAAC;YAAC,SAAS,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KAC/F,CAAC;CACH;AAED,0DAA0D;AAC1D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,WAAW,CAAC;IACtB,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,aAAa,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAkBD,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,oBAAoB,GAAG,SAAS,CAUpF;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAGhD;AAMD,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC,CAO7J;AAED,2CAA2C;AAC3C,wBAAgB,YAAY,CAAC,MAAM,EAAE,oBAAoB,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC,CAE9I;AAED,2DAA2D;AAC3D,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAM5F;AAkDD,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,kBAAkB,EAAE,CA6ClF;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAE/D;AAID,gDAAgD;AAChD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,WAAW,GAAG,gBAAgB,EAAE,CAYrG;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOvF;AAED,sGAAsG;AACtG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAOpE"}
+{"version":3,"file":"otel-placement-helpers.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/otel-placement-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EAAqC,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAEpF,eAAO,MAAM,qBAAqB;;;;;CAKxB,CAAC;AAEX,gEAAgE;AAChE,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,EAAE;QACP,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,SAAS,CAAC,EAAE,OAAO,CAAC;YAAC,UAAU,CAAC,EAAE,OAAO,CAAC;YAAC,SAAS,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KAC/F,CAAC;CACH;AAED,0DAA0D;AAC1D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,WAAW,CAAC;IACtB,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,aAAa,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAkBD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,oBAAoB,GAAG,SAAS,CAEpF;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAGhD;AAMD,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC,CAO7J;AAED,2CAA2C;AAC3C,wBAAgB,YAAY,CAAC,MAAM,EAAE,oBAAoB,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC,CAE9I;AAED,2DAA2D;AAC3D,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAM5F;AAkDD,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,kBAAkB,EAAE,CA6ClF;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAE/D;AAID,gDAAgD;AAChD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,WAAW,GAAG,gBAAgB,EAAE,CAYrG;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOvF;AAED,sGAAsG;AACtG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAOpE"}

package/dist/lint/post-synth/wk8604.d.ts

@@ -0,0 +1,19 @@
+/**
+ * WK8604: the otel config checks over collector configs in ConfigMaps
+ *
+ * `OtelCollector`, `OtelCollectorGateway`, `GkeOtelCollector` and hand-written
+ * manifests carry the collector config as a string under a ConfigMap data key.
+ * `chant build` gives each lexicon's checks only that lexicon's output, so the
+ * otel lexicon's config checks never see a config that lives in the k8s output
+ * (chant #2930). This check runs them there: every ConfigMap data value that
+ * parses as a collector config (a `service.pipelines` map) goes through the
+ * otel lexicon's `validateCollectorConfig`.
+ *
+ * Findings keep the otel rule ids (OTEL101-OTEL106, OTEL112-OTEL117, and any config
+ * check the otel lexicon adds later), so `lint.rules` and suppressions name
+ * one id wherever the config lives. Each message names the ConfigMap's
+ * namespace, name and key. Needs only the k8s lexicon in the project.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const wk8604: PostSynthCheck;
+//# sourceMappingURL=wk8604.d.ts.map

package/dist/lint/post-synth/wk8604.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wk8604.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/wk8604.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,MAAM,EAAE,cAQpB,CAAC"}

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "k8s",
-  "version": "0.99.0",
+  "version": "0.101.0",
   "chantVersion": ">=0.1.0",
   "namespace": "K8s",
   "intrinsics": [],

package/dist/okf/index.md

@@ -283,3 +283,4 @@ okf_version: '0.2'
 * [WK8601](/rules/WK8601.md) - OpenTelemetry Collector runs tail_sampling as a per-node DaemonSet; each agent sees only its node's spans, so decisions are made on partial traces. Sees one...
 * [WK8602](/rules/WK8602.md) - OpenTelemetry Collector gateway runs tail_sampling on more than one replica, but collectors send it traces without a loadbalancing exporter routed by traceID...
 * [WK8603](/rules/WK8603.md) - OpenTelemetry Collector runs the k8s_cluster receiver in a DaemonSet or multi-replica workload without a k8s_leader_elector; every copy reports every cluster...
+* [WK8604](/rules/WK8604.md) - OpenTelemetry Collector config in a ConfigMap fails the otel lexicon's config checks; findings are reported under their OTEL1xx ids, naming the ConfigMap and...

package/dist/okf/rules/WK8604.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: WK8604
+description: OpenTelemetry Collector config in a ConfigMap fails the otel lexicon's config checks; findings are reported under their OTEL1xx ids, naming the ConfigMap and key.
+id: WK8604
+severity: error
+category: post-synth
+lexicon: k8s
+docs: https://intentius.io/chant/lexicons/k8s/rules/
+---
+OpenTelemetry Collector config in a ConfigMap fails the otel lexicon's config checks; findings are reported under their OTEL1xx ids, naming the ConfigMap and key.

package/dist/rules/otel-placement-helpers.ts

@@ -25,7 +25,7 @@
  * `OTEL_COLLECTOR_ANNOTATIONS`.
  */
 
-import { load } from "js-yaml";
+import { parseCollectorConfig as parseOtelCollectorConfig } from "@intentius/chant-lexicon-otel/configmap";
 import { extractContainers, extractPodSpec, type K8sManifest } from "./k8s-helpers";
 
 export const PLACEMENT_ANNOTATIONS = {
@@ -80,17 +80,13 @@ function isRecord(v: unknown): v is Record<string, unknown> {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 
-/** Parse a ConfigMap value as a collector config, or undefined when it isn't one. */
+/**
+ * Parse a ConfigMap value as a collector config, or undefined when it isn't
+ * one. The otel lexicon's parser, shared with its config checks (OTEL101 and
+ * the rest) and WK8604 so every check agrees on what counts as a config.
+ */
 export function parseCollectorConfig(text: unknown): CollectorConfigShape | undefined {
-  if (typeof text !== "string") return undefined;
-  let value: unknown;
-  try {
-    value = load(text);
-  } catch {
-    return undefined;
-  }
-  if (!isRecord(value) || !isRecord(value.service) || !isRecord(value.service.pipelines)) return undefined;
-  return value as unknown as CollectorConfigShape;
+  return parseOtelCollectorConfig(text) as CollectorConfigShape | undefined;
 }
 
 /** The `type` of a component id: `tail_sampling/errors` is `tail_sampling`. */

package/dist/rules/wk8604.ts

@@ -0,0 +1,29 @@
+/**
+ * WK8604: the otel config checks over collector configs in ConfigMaps
+ *
+ * `OtelCollector`, `OtelCollectorGateway`, `GkeOtelCollector` and hand-written
+ * manifests carry the collector config as a string under a ConfigMap data key.
+ * `chant build` gives each lexicon's checks only that lexicon's output, so the
+ * otel lexicon's config checks never see a config that lives in the k8s output
+ * (chant #2930). This check runs them there: every ConfigMap data value that
+ * parses as a collector config (a `service.pipelines` map) goes through the
+ * otel lexicon's `validateCollectorConfig`.
+ *
+ * Findings keep the otel rule ids (OTEL101-OTEL106, OTEL112-OTEL117, and any config
+ * check the otel lexicon adds later), so `lint.rules` and suppressions name
+ * one id wherever the config lives. Each message names the ConfigMap's
+ * namespace, name and key. Needs only the k8s lexicon in the project.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { collectorConfigDiagnostics } from "@intentius/chant-lexicon-otel/lint/post-synth/otel-helpers";
+
+export const wk8604: PostSynthCheck = {
+  id: "WK8604",
+  description:
+    "OpenTelemetry Collector config in a ConfigMap fails the otel lexicon's config checks; findings are reported under their OTEL1xx ids, naming the ConfigMap and key.",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    return collectorConfigDiagnostics(ctx, { configMapsOnly: true });
+  },
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-k8s",
-  "version": "0.99.0",
+  "version": "0.101.0",
   "description": "Kubernetes lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -78,7 +78,7 @@
     "@types/js-yaml": "^4.0.9"
   },
   "optionalDependencies": {
-    "@intentius/chant-k8s-client": "^0.99.0"
+    "@intentius/chant-k8s-client": "^0.101.0"
   },
   "devDependencies": {
     "@intentius/chant": "*",
@@ -86,7 +86,7 @@
   },
   "peerDependencies": {
     "zod": "^4.3.6",
-    "@intentius/chant": "^0.99.0",
+    "@intentius/chant": "^0.101.0",
     "typescript": "^5.9.3"
   }
 }