@kustodian/schema 1.3.0 → 1.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kustodian/schema",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "JSON Schema definitions for Kustodian YAML validation",
   "type": "module",
   "main": "./src/index.ts",

package/src/cluster.ts

@@ -41,6 +41,7 @@ export const kustomization_override_schema = z.object({
   preservation: z
     .object({
       mode: preservation_mode_schema,
+      keep_resources: z.array(z.string()).optional(),
     })
     .optional(),
 });

package/src/common.ts

@@ -260,6 +260,38 @@ export const namespace_config_schema = z.object({
 
 export type NamespaceConfigType = z.infer<typeof namespace_config_schema>;
 
+/**
+ * Base auth configuration for kustomizations.
+ * This schema defines common fields that all auth providers share.
+ * Plugins (e.g., authelia, authentik) extend validation for provider-specific fields.
+ */
+export const auth_config_schema = z.object({
+  /** Auth provider plugin name (e.g., 'authelia', 'authentik') */
+  provider: z.string().min(1),
+  /** Provider-specific auth type (e.g., 'oidc', 'proxy', 'oauth2', 'saml') */
+  type: z.string().min(1),
+  /** Application identifier (used for client_id, slug, etc.) */
+  app_name: z.string().min(1),
+  /** Display name for the application */
+  app_display_name: z.string().optional(),
+  /** Application description */
+  app_description: z.string().optional(),
+  /** Application icon URL */
+  app_icon: z.string().optional(),
+  /** Application group/category */
+  app_group: z.string().optional(),
+  /** Application launch URL */
+  app_launch_url: z.string().optional(),
+  /** External host for the application */
+  external_host: z.string().optional(),
+  /** Internal service host (for proxy auth) */
+  internal_host: z.string().optional(),
+  /** Provider-specific configuration (validated by auth plugins) */
+  config: z.record(z.string(), z.unknown()).optional(),
+});
+
+export type AuthConfigType = z.infer<typeof auth_config_schema>;
+
 /**
  * Key-value pairs for substitution values.
  */

package/src/template.ts

@@ -2,6 +2,7 @@ import { z } from 'zod';
 
 import {
   api_version_schema,
+  auth_config_schema,
   health_check_expr_schema,
   health_check_schema,
   metadata_schema,
@@ -73,6 +74,8 @@ export const kustomization_schema = z.object({
   retry_interval: z.string().optional(),
   enabled: z.boolean().optional().default(true),
   preservation: preservation_policy_schema.optional(),
+  /** Auth configuration for SSO integration (processed by auth plugins) */
+  auth: auth_config_schema.optional(),
 });
 
 export type KustomizationType = z.infer<typeof kustomization_schema>;