hammerkit 1.27.0-next.1 → 1.27.0-next.2

package/dist/log.js

@@ -216,7 +216,7 @@ function writeWorkItemLogToConsole(env, log, maxNodeNameLength) {
 exports.writeWorkItemLogToConsole = writeWorkItemLogToConsole;
 function formatDate(date) {
     return colors_1.default.grey(`[${date.getFullYear()}-${(date.getMonth() + 1).toString().padStart(2, '0')}-${date
-        .getDay()
+        .getDate()
         .toString()
         .padStart(2, '0')} ${date.getHours().toString().padStart(2, '0')}:${date
         .getMinutes()

package/dist/program.js

@@ -780,7 +780,8 @@ tasks:
     program.option('--file', 'set build file', '.hammerkit.yaml');
     program.option('--set <NAME=value>', 'value for $NAME / ${NAME} references, ahead of the shell and .env (repeatable)');
     program.configureOutput({
-        writeOut: (str) => environment.console.info(str),
+        // --version and --help as they are, so `VERSION=$(hammerkit --version)` works
+        writeOut: (str) => environment.stdout.write(str),
         writeErr: (str) => {
             environment.console.error(str);
         },

package/dist/secrets/github-app-token-command.js

@@ -6,6 +6,8 @@ const github_app_token_1 = require("./github-app-token");
 // `hammerkit github-app-token <owner/repo>`: a secret provider command for the token a
 // server reads and pushes a repository with, so the released binary mints it without a
 // script or a runtime of its own. It prints the token and nothing else, without a newline.
+// A failure goes to stderr, which the server puts in its error: the CLI's console writes to
+// stdout, and the server drops what a failed provider printed there.
 function registerGithubAppTokenCommand(program, environment) {
     program
         .command('github-app-token <repo>')
@@ -15,7 +17,8 @@ function registerGithubAppTokenCommand(program, environment) {
             environment.stdout.write(await (0, github_app_token_1.githubAppToken)(repo, environment.processEnvs));
         }
         catch (e) {
-            program.error(`github-app-token: ${(0, log_1.getErrorMessage)(e)}`, { exitCode: 1 });
+            environment.stderr.write(`github-app-token: ${(0, log_1.getErrorMessage)(e)}\n`);
+            throw e;
         }
     });
 }

package/dist/server/kubernetes-backend.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.awaitRunObjectsGone = exports.removeRunObjects = exports.CallerNamespaces = exports.getVolumeScope = exports.KubernetesExecutor = exports.getRunRoleBinding = exports.getNamespacePolicies = exports.getClusterAccess = exports.getCallerNamespace = void 0;
+exports.awaitRunObjectsGone = exports.removeRunObjects = exports.CallerNamespaces = exports.getVolumeScope = exports.KubernetesExecutor = exports.getRunRoleBinding = exports.getNamespacePolicies = exports.getClusterAccess = exports.isCallerNamespace = exports.getCallerNamespace = void 0;
 const crypto_1 = require("crypto");
 const fs_1 = require("fs");
 const os_1 = require("os");
@@ -32,6 +32,12 @@ function getCallerNamespace(prefix, owner) {
     return `${prefix}${(0, crypto_1.createHash)('sha256').update(`${owner.iss}\0${owner.sub}`).digest('hex').slice(0, 16)}`;
 }
 exports.getCallerNamespace = getCallerNamespace;
+// Whether a namespace is one getCallerNamespace makes with this prefix: a server named `hk`
+// passes over the namespaces of a server named `hk-test` on the same cluster.
+function isCallerNamespace(prefix, name) {
+    return name.startsWith(prefix) && /^[0-9a-f]{16}$/.test(name.slice(prefix.length));
+}
+exports.isCallerNamespace = isCallerNamespace;
 // How the server and the processes of its runs reach the cluster: a kubeconfig and
 // context the operator names, else the server's default kubeconfig, else the cluster
 // the server runs in (its pod's ServiceAccount, found through the variables
@@ -335,7 +341,9 @@ class KubernetesExecutor {
             .then((namespaces) => {
             for (const namespace of namespaces.items) {
                 const name = namespace.metadata?.name;
-                if (name?.startsWith(this.config.backend.namespacePrefix) && !namespace.metadata?.deletionTimestamp) {
+                if (name &&
+                    isCallerNamespace(this.config.backend.namespacePrefix, name) &&
+                    !namespace.metadata?.deletionTimestamp) {
                     this.sweepLater(name, 0);
                 }
             }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "hammerkit",
   "description": "Containerized build tool with incremental caching that runs the same build file locally, in Docker and on Kubernetes.",
-  "version": "1.27.0-next.1",
+  "version": "1.27.0-next.2",
   "keywords": [
     "build",
     "build-tool",