pepr 0.32.7 → 0.34.0

package/src/cli/uuid.ts

@@ -0,0 +1,44 @@
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-FileCopyrightText: 2023-Present The Pepr Authors
+
+import { KubernetesListObject } from "@kubernetes/client-node";
+import { K8s, kind } from "kubernetes-fluent-client";
+import { RootCmd } from "./root";
+
+export default function (program: RootCmd) {
+  program
+    .command("uuid [uuid]")
+    .description("Module UUID(s) currently deployed in the cluster")
+    .action(async uuid => {
+      const uuidTable: Record<string, string> = {};
+      let deployments: KubernetesListObject<kind.Deployment>;
+
+      if (!uuid) {
+        deployments = await K8s(kind.Deployment)
+          .InNamespace("pepr-system")
+          .WithLabel("pepr.dev/uuid")
+          .Get();
+      } else {
+        deployments = await K8s(kind.Deployment)
+          .InNamespace("pepr-system")
+          .WithLabel("pepr.dev/uuid", uuid)
+          .Get();
+      }
+
+      // Populate the uuidTable with the UUID and description
+      deployments.items.map(deploy => {
+        const uuid = deploy.metadata?.labels?.["pepr.dev/uuid"] || "";
+        const description = deploy.metadata?.annotations?.["pepr.dev/description"] || "";
+        if (uuid !== "") {
+          uuidTable[uuid] = description;
+        }
+      });
+
+      console.log("UUID\t\tDescription");
+      console.log("--------------------------------------------");
+
+      Object.entries(uuidTable).forEach(([uuid, description]) => {
+        console.log(`${uuid}\t${description}`);
+      });
+    });
+}

package/src/fixtures/data/create-pod.json

@@ -0,0 +1,271 @@
+{
+  "uid": "af5c3d45-72b8-11eb-a3a3-0242ac130003",
+  "kind": {
+    "group": "",
+    "version": "v1",
+    "kind": "Pod"
+  },
+  "resource": {
+    "group": "",
+    "version": "v1",
+    "resource": "pods"
+  },
+  "subResource": "",
+  "name": "podinfo",
+  "namespace": "default",
+  "operation": "Create",
+  "userInfo": {
+    "username": "system:serviceaccount:kube-system:replicaset-controller",
+    "uid": "95c8f0ca-d31a-4d3f-9f27-9a2a2661ab3c",
+    "groups": [
+      "system:serviceaccounts",
+      "system:serviceaccounts:kube-system",
+      "system:authenticated"
+    ]
+  },
+  "oldObject": {},
+  "dryRun": false,
+  "options": null,
+  "object": {
+    "apiVersion": "v1",
+    "kind": "Pod",
+    "metadata": {
+      "annotations": {
+        "prometheus.io/port": "9898",
+        "prometheus.io/scrape": "true"
+      },
+      "creationTimestamp": "2023-03-07T07:48:13Z",
+      "generateName": "cool-name-podinfo-66bbff7cf4-",
+      "labels": {
+        "app.kubernetes.io/name": "cool-name-podinfo",
+        "pod-template-hash": "66bbff7cf4",
+        "zarf-agent": "patched"
+      },
+      "name": "cool-name-podinfo-66bbff7cf4-fwhl2",
+      "namespace": "helm-releasename",
+      "ownerReferences": [
+        {
+          "apiVersion": "apps/v1",
+          "blockOwnerDeletion": true,
+          "controller": true,
+          "kind": "ReplicaSet",
+          "name": "cool-name-podinfo-66bbff7cf4",
+          "uid": "41d30484-6ccd-462b-b96a-e166095e3681"
+        }
+      ],
+      "resourceVersion": "46512",
+      "uid": "883303bc-e4b7-4fa8-a576-575cc4407201"
+    },
+    "spec": {
+      "containers": [
+        {
+          "command": [
+            "./podinfo",
+            "--port=9898",
+            "--cert-path=/data/cert",
+            "--port-metrics=9797",
+            "--grpc-port=9999",
+            "--grpc-service-name=podinfo",
+            "--level=info",
+            "--random-delay=false",
+            "--random-error=false"
+          ],
+          "env": [
+            {
+              "name": "PODINFO_UI_COLOR",
+              "value": "#34577c"
+            }
+          ],
+          "image": "127.0.0.1:31999/stefanprodan/podinfo-2985051089:6.1.6",
+          "imagePullPolicy": "IfNotPresent",
+          "livenessProbe": {
+            "exec": {
+              "command": ["podcli", "check", "http", "localhost:9898/healthz"]
+            },
+            "failureThreshold": 3,
+            "initialDelaySeconds": 1,
+            "periodSeconds": 10,
+            "successThreshold": 1,
+            "timeoutSeconds": 5
+          },
+          "name": "podinfo",
+          "ports": [
+            {
+              "containerPort": 9898,
+              "name": "http",
+              "protocol": "TCP"
+            },
+            {
+              "containerPort": 9797,
+              "name": "http-metrics",
+              "protocol": "TCP"
+            },
+            {
+              "containerPort": 9999,
+              "name": "grpc",
+              "protocol": "TCP"
+            }
+          ],
+          "readinessProbe": {
+            "exec": {
+              "command": ["podcli", "check", "http", "localhost:9898/readyz"]
+            },
+            "failureThreshold": 3,
+            "initialDelaySeconds": 1,
+            "periodSeconds": 10,
+            "successThreshold": 1,
+            "timeoutSeconds": 5
+          },
+          "resources": {
+            "requests": {
+              "cpu": "1m",
+              "memory": "16Mi"
+            }
+          },
+          "terminationMessagePath": "/dev/termination-log",
+          "terminationMessagePolicy": "File",
+          "volumeMounts": [
+            {
+              "mountPath": "/data",
+              "name": "data"
+            },
+            {
+              "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount",
+              "name": "kube-api-access-vn9dc",
+              "readOnly": true
+            }
+          ]
+        }
+      ],
+      "dnsPolicy": "ClusterFirst",
+      "enableServiceLinks": true,
+      "imagePullSecrets": [
+        {
+          "name": "private-registry"
+        }
+      ],
+      "nodeName": "k3d-k3s-default-server-0",
+      "preemptionPolicy": "PreemptLowerPriority",
+      "priority": 0,
+      "restartPolicy": "Always",
+      "schedulerName": "default-scheduler",
+      "securityContext": {},
+      "serviceAccount": "default",
+      "serviceAccountName": "default",
+      "terminationGracePeriodSeconds": 30,
+      "tolerations": [
+        {
+          "effect": "NoExecute",
+          "key": "node.kubernetes.io/not-ready",
+          "operator": "Exists",
+          "tolerationSeconds": 300
+        },
+        {
+          "effect": "NoExecute",
+          "key": "node.kubernetes.io/unreachable",
+          "operator": "Exists",
+          "tolerationSeconds": 300
+        }
+      ],
+      "volumes": [
+        {
+          "emptyDir": {},
+          "name": "data"
+        },
+        {
+          "name": "kube-api-access-vn9dc",
+          "projected": {
+            "defaultMode": 420,
+            "sources": [
+              {
+                "serviceAccountToken": {
+                  "expirationSeconds": 3607,
+                  "path": "token"
+                }
+              },
+              {
+                "configMap": {
+                  "items": [
+                    {
+                      "key": "ca.crt",
+                      "path": "ca.crt"
+                    }
+                  ],
+                  "name": "kube-root-ca.crt"
+                }
+              },
+              {
+                "downwardAPI": {
+                  "items": [
+                    {
+                      "fieldRef": {
+                        "apiVersion": "v1",
+                        "fieldPath": "metadata.namespace"
+                      },
+                      "path": "namespace"
+                    }
+                  ]
+                }
+              }
+            ]
+          }
+        }
+      ]
+    },
+    "status": {
+      "conditions": [
+        {
+          "lastProbeTime": null,
+          "lastTransitionTime": "2023-03-07T07:48:13Z",
+          "status": "True",
+          "type": "Initialized"
+        },
+        {
+          "lastProbeTime": null,
+          "lastTransitionTime": "2023-03-07T07:48:16Z",
+          "status": "True",
+          "type": "Ready"
+        },
+        {
+          "lastProbeTime": null,
+          "lastTransitionTime": "2023-03-07T07:48:16Z",
+          "status": "True",
+          "type": "ContainersReady"
+        },
+        {
+          "lastProbeTime": null,
+          "lastTransitionTime": "2023-03-07T07:48:13Z",
+          "status": "True",
+          "type": "PodScheduled"
+        }
+      ],
+      "containerStatuses": [
+        {
+          "containerID": "containerd://81b20dafbf2498a52c8ab46fa1e95ce25c06271684e590a377ee4ac9fd2a85ee",
+          "image": "127.0.0.1:31999/stefanprodan/podinfo-2985051089:6.1.6",
+          "imageID": "127.0.0.1:31999/stefanprodan/podinfo-2985051089@sha256:1f1fb2d1bfadac8a487106ea62b2b582bedc83fe17b3332dffe9151dfc820742",
+          "lastState": {},
+          "name": "podinfo",
+          "ready": true,
+          "restartCount": 0,
+          "started": true,
+          "state": {
+            "running": {
+              "startedAt": "2023-03-07T07:48:14Z"
+            }
+          }
+        }
+      ],
+      "hostIP": "172.19.0.3",
+      "phase": "Running",
+      "podIP": "10.42.0.26",
+      "podIPs": [
+        {
+          "ip": "10.42.0.26"
+        }
+      ],
+      "qosClass": "Burstable",
+      "startTime": "2023-03-07T07:48:13Z"
+    }
+  }
+}

package/src/fixtures/data/delete-pod.json

@@ -0,0 +1,271 @@
+{
+  "uid": "af5c3d45-72b8-11eb-a3a3-0242ac130003",
+  "kind": {
+    "group": "",
+    "version": "v1",
+    "kind": "Pod"
+  },
+  "resource": {
+    "group": "",
+    "version": "v1",
+    "resource": "pods"
+  },
+  "subResource": "",
+  "name": "podinfo",
+  "namespace": "default",
+  "operation": "Delete",
+  "userInfo": {
+    "username": "system:serviceaccount:kube-system:replicaset-controller",
+    "uid": "95c8f0ca-d31a-4d3f-9f27-9a2a2661ab3c",
+    "groups": [
+      "system:serviceaccounts",
+      "system:serviceaccounts:kube-system",
+      "system:authenticated"
+    ]
+  },
+  "oldObject": {
+    "apiVersion": "v1",
+    "kind": "Pod",
+    "metadata": {
+      "annotations": {
+        "prometheus.io/port": "9898",
+        "prometheus.io/scrape": "true"
+      },
+      "creationTimestamp": "2023-03-07T07:48:13Z",
+      "generateName": "cool-name-podinfo-66bbff7cf4-",
+      "labels": {
+        "app.kubernetes.io/name": "cool-name-podinfo",
+        "pod-template-hash": "66bbff7cf4",
+        "zarf-agent": "patched"
+      },
+      "name": "cool-name-podinfo-66bbff7cf4-fwhl2",
+      "namespace": "helm-releasename",
+      "ownerReferences": [
+        {
+          "apiVersion": "apps/v1",
+          "blockOwnerDeletion": true,
+          "controller": true,
+          "kind": "ReplicaSet",
+          "name": "cool-name-podinfo-66bbff7cf4",
+          "uid": "41d30484-6ccd-462b-b96a-e166095e3681"
+        }
+      ],
+      "resourceVersion": "46512",
+      "uid": "883303bc-e4b7-4fa8-a576-575cc4407201"
+    },
+    "spec": {
+      "containers": [
+        {
+          "command": [
+            "./podinfo",
+            "--port=9898",
+            "--cert-path=/data/cert",
+            "--port-metrics=9797",
+            "--grpc-port=9999",
+            "--grpc-service-name=podinfo",
+            "--level=info",
+            "--random-delay=false",
+            "--random-error=false"
+          ],
+          "env": [
+            {
+              "name": "PODINFO_UI_COLOR",
+              "value": "#34577c"
+            }
+          ],
+          "image": "127.0.0.1:31999/stefanprodan/podinfo-2985051089:6.1.6",
+          "imagePullPolicy": "IfNotPresent",
+          "livenessProbe": {
+            "exec": {
+              "command": ["podcli", "check", "http", "localhost:9898/healthz"]
+            },
+            "failureThreshold": 3,
+            "initialDelaySeconds": 1,
+            "periodSeconds": 10,
+            "successThreshold": 1,
+            "timeoutSeconds": 5
+          },
+          "name": "podinfo",
+          "ports": [
+            {
+              "containerPort": 9898,
+              "name": "http",
+              "protocol": "TCP"
+            },
+            {
+              "containerPort": 9797,
+              "name": "http-metrics",
+              "protocol": "TCP"
+            },
+            {
+              "containerPort": 9999,
+              "name": "grpc",
+              "protocol": "TCP"
+            }
+          ],
+          "readinessProbe": {
+            "exec": {
+              "command": ["podcli", "check", "http", "localhost:9898/readyz"]
+            },
+            "failureThreshold": 3,
+            "initialDelaySeconds": 1,
+            "periodSeconds": 10,
+            "successThreshold": 1,
+            "timeoutSeconds": 5
+          },
+          "resources": {
+            "requests": {
+              "cpu": "1m",
+              "memory": "16Mi"
+            }
+          },
+          "terminationMessagePath": "/dev/termination-log",
+          "terminationMessagePolicy": "File",
+          "volumeMounts": [
+            {
+              "mountPath": "/data",
+              "name": "data"
+            },
+            {
+              "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount",
+              "name": "kube-api-access-vn9dc",
+              "readOnly": true
+            }
+          ]
+        }
+      ],
+      "dnsPolicy": "ClusterFirst",
+      "enableServiceLinks": true,
+      "imagePullSecrets": [
+        {
+          "name": "private-registry"
+        }
+      ],
+      "nodeName": "k3d-k3s-default-server-0",
+      "preemptionPolicy": "PreemptLowerPriority",
+      "priority": 0,
+      "restartPolicy": "Always",
+      "schedulerName": "default-scheduler",
+      "securityContext": {},
+      "serviceAccount": "default",
+      "serviceAccountName": "default",
+      "terminationGracePeriodSeconds": 30,
+      "tolerations": [
+        {
+          "effect": "NoExecute",
+          "key": "node.kubernetes.io/not-ready",
+          "operator": "Exists",
+          "tolerationSeconds": 300
+        },
+        {
+          "effect": "NoExecute",
+          "key": "node.kubernetes.io/unreachable",
+          "operator": "Exists",
+          "tolerationSeconds": 300
+        }
+      ],
+      "volumes": [
+        {
+          "emptyDir": {},
+          "name": "data"
+        },
+        {
+          "name": "kube-api-access-vn9dc",
+          "projected": {
+            "defaultMode": 420,
+            "sources": [
+              {
+                "serviceAccountToken": {
+                  "expirationSeconds": 3607,
+                  "path": "token"
+                }
+              },
+              {
+                "configMap": {
+                  "items": [
+                    {
+                      "key": "ca.crt",
+                      "path": "ca.crt"
+                    }
+                  ],
+                  "name": "kube-root-ca.crt"
+                }
+              },
+              {
+                "downwardAPI": {
+                  "items": [
+                    {
+                      "fieldRef": {
+                        "apiVersion": "v1",
+                        "fieldPath": "metadata.namespace"
+                      },
+                      "path": "namespace"
+                    }
+                  ]
+                }
+              }
+            ]
+          }
+        }
+      ]
+    },
+    "status": {
+      "conditions": [
+        {
+          "lastProbeTime": null,
+          "lastTransitionTime": "2023-03-07T07:48:13Z",
+          "status": "True",
+          "type": "Initialized"
+        },
+        {
+          "lastProbeTime": null,
+          "lastTransitionTime": "2023-03-07T07:48:16Z",
+          "status": "True",
+          "type": "Ready"
+        },
+        {
+          "lastProbeTime": null,
+          "lastTransitionTime": "2023-03-07T07:48:16Z",
+          "status": "True",
+          "type": "ContainersReady"
+        },
+        {
+          "lastProbeTime": null,
+          "lastTransitionTime": "2023-03-07T07:48:13Z",
+          "status": "True",
+          "type": "PodScheduled"
+        }
+      ],
+      "containerStatuses": [
+        {
+          "containerID": "containerd://81b20dafbf2498a52c8ab46fa1e95ce25c06271684e590a377ee4ac9fd2a85ee",
+          "image": "127.0.0.1:31999/stefanprodan/podinfo-2985051089:6.1.6",
+          "imageID": "127.0.0.1:31999/stefanprodan/podinfo-2985051089@sha256:1f1fb2d1bfadac8a487106ea62b2b582bedc83fe17b3332dffe9151dfc820742",
+          "lastState": {},
+          "name": "podinfo",
+          "ready": true,
+          "restartCount": 0,
+          "started": true,
+          "state": {
+            "running": {
+              "startedAt": "2023-03-07T07:48:14Z"
+            }
+          }
+        }
+      ],
+      "hostIP": "172.19.0.3",
+      "phase": "Running",
+      "podIP": "10.42.0.26",
+      "podIPs": [
+        {
+          "ip": "10.42.0.26"
+        }
+      ],
+      "qosClass": "Burstable",
+      "startTime": "2023-03-07T07:48:13Z"
+    }
+  },
+  "dryRun": false,
+  "options": null,
+  "object": null
+}

package/src/fixtures/loader.ts

@@ -0,0 +1,18 @@
+import { kind } from "kubernetes-fluent-client";
+
+import { AdmissionRequest } from "../lib/k8s";
+import createPod from "./data/create-pod.json";
+import deletePod from "./data/delete-pod.json";
+
+export function CreatePod() {
+  return cloneObject<kind.Pod>(createPod);
+}
+
+export function DeletePod() {
+  return cloneObject<kind.Pod>(deletePod);
+}
+
+function cloneObject<T>(obj: unknown): AdmissionRequest<T> {
+  // JSON to avoid funky typescript silliness on jsonmodules
+  return JSON.parse(JSON.stringify(obj)) as AdmissionRequest<T>;
+}

package/src/lib/.prettierrc

@@ -0,0 +1,14 @@
+{
+  "arrowParens": "avoid",
+  "bracketSameLine": false,
+  "bracketSpacing": true,
+  "embeddedLanguageFormatting": "auto",
+  "insertPragma": false,
+  "printWidth": 120,
+  "quoteProps": "as-needed",
+  "requirePragma": false,
+  "semi": true,
+  "useTabs": false,
+  "vueIndentScriptAndStyle": false,
+  "tabWidth": 2
+}

package/src/lib/assets/helm.test.ts

@@ -0,0 +1,64 @@
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-FileCopyrightText: 2023-Present The Pepr Authors
+
+import { nsTemplate, chartYaml, watcherDeployTemplate, admissionDeployTemplate, serviceMonitorTemplate } from "./helm";
+import { expect, describe, test } from "@jest/globals";
+describe("Kubernetes Template Generators", () => {
+  describe("nsTemplate", () => {
+    test("should generate a Namespace template correctly", () => {
+      const result = nsTemplate();
+      expect(result).toContain("apiVersion: v1");
+      expect(result).toContain("kind: Namespace");
+      expect(result).toContain("name: pepr-system");
+    });
+  });
+
+  describe("chartYaml", () => {
+    test("should generate a Chart.yaml content correctly", () => {
+      const name = "test-app";
+      const description = "A test application";
+      const result = chartYaml(name, description);
+      expect(result).toContain("apiVersion: v2");
+      expect(result).toContain(`name: ${name}`);
+      expect(result).toContain(`description: ${description}`);
+    });
+  });
+
+  describe("watcherDeployTemplate", () => {
+    test("should generate a Deployment template for the watcher correctly", () => {
+      const result = watcherDeployTemplate(`${Date.now()}`);
+      expect(result).toContain("apiVersion: apps/v1");
+      expect(result).toContain("kind: Deployment");
+      expect(result).toContain("name: {{ .Values.uuid }}-watcher");
+    });
+  });
+
+  describe("admissionDeployTemplate", () => {
+    test("should generate a Deployment template for the admission controller correctly", () => {
+      const result = admissionDeployTemplate(`${Date.now()}`);
+      expect(result).toContain("apiVersion: apps/v1");
+      expect(result).toContain("kind: Deployment");
+      expect(result).toContain("name: {{ .Values.uuid }}");
+    });
+  });
+
+  describe("admissionServiceMonitor", () => {
+    test("should generate a Service Monitor template for the admission controller correctly", () => {
+      const result = serviceMonitorTemplate("admission");
+      expect(result).toContain("apiVersion: monitoring.coreos.com/v1");
+      expect(result).toContain("kind: ServiceMonitor");
+      expect(result).toContain("name: admission");
+      expect(result).toContain("pepr.dev/controller: admission");
+    });
+  });
+
+  describe("watcherServiceMonitor", () => {
+    test("should generate a Service Monitor template for the watcher controller correctly", () => {
+      const result = serviceMonitorTemplate("watcher");
+      expect(result).toContain("apiVersion: monitoring.coreos.com/v1");
+      expect(result).toContain("kind: ServiceMonitor");
+      expect(result).toContain("name: watcher");
+      expect(result).toContain("pepr.dev/controller: watcher");
+    });
+  });
+});