pepr 0.46.1 → 0.46.2-nightly.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.github/workflows/pepr-excellent-examples-matrix.d.ts +2 -0
- package/dist/.github/workflows/pepr-excellent-examples-matrix.d.ts.map +1 -0
- package/dist/cli.js +2 -2
- package/dist/commitlint.config.d.ts +4 -0
- package/dist/commitlint.config.d.ts.map +1 -0
- package/dist/controller.js +1 -1
- package/dist/integration/helpers/cmd.d.ts +22 -0
- package/dist/integration/helpers/cmd.d.ts.map +1 -0
- package/dist/integration/helpers/pepr.d.ts +5 -0
- package/dist/integration/helpers/pepr.d.ts.map +1 -0
- package/dist/integration/helpers/resource.d.ts +18 -0
- package/dist/integration/helpers/resource.d.ts.map +1 -0
- package/dist/integration/helpers/time.d.ts +4 -0
- package/dist/integration/helpers/time.d.ts.map +1 -0
- package/dist/integration/helpers/workdir.d.ts +12 -0
- package/dist/integration/helpers/workdir.d.ts.map +1 -0
- package/dist/lib.js +27 -24
- package/dist/lib.js.map +4 -4
- package/dist/scripts/set-version.d.ts +2 -0
- package/dist/scripts/set-version.d.ts.map +1 -0
- package/dist/src/cli/banner.d.ts.map +1 -0
- package/dist/src/cli/build.d.ts.map +1 -0
- package/dist/src/cli/build.helpers.d.ts.map +1 -0
- package/dist/src/cli/deploy.d.ts.map +1 -0
- package/dist/src/cli/dev.d.ts.map +1 -0
- package/dist/src/cli/format.d.ts.map +1 -0
- package/dist/src/cli/format.helpers.d.ts.map +1 -0
- package/dist/src/cli/init/enums.d.ts.map +1 -0
- package/dist/src/cli/init/index.d.ts.map +1 -0
- package/dist/{cli → src/cli}/init/templates.d.ts +6 -2
- package/dist/src/cli/init/templates.d.ts.map +1 -0
- package/dist/src/cli/init/utils.d.ts.map +1 -0
- package/dist/src/cli/init/walkthrough.d.ts.map +1 -0
- package/dist/src/cli/kfc.d.ts.map +1 -0
- package/dist/src/cli/monitor.d.ts.map +1 -0
- package/dist/src/cli/root.d.ts.map +1 -0
- package/dist/src/cli/types.d.ts.map +1 -0
- package/dist/src/cli/update.d.ts.map +1 -0
- package/dist/src/cli/uuid.d.ts.map +1 -0
- package/dist/src/cli.d.ts.map +1 -0
- package/dist/{fixtures → src/fixtures}/loader.d.ts +1 -1
- package/dist/src/fixtures/loader.d.ts.map +1 -0
- package/dist/src/lib/assets/assets.d.ts.map +1 -0
- package/dist/src/lib/assets/defaultTestObjects.d.ts +29 -0
- package/dist/src/lib/assets/defaultTestObjects.d.ts.map +1 -0
- package/dist/src/lib/assets/deploy.d.ts.map +1 -0
- package/dist/src/lib/assets/destroy.d.ts.map +1 -0
- package/dist/src/lib/assets/helm.d.ts.map +1 -0
- package/dist/src/lib/assets/index.d.ts.map +1 -0
- package/dist/src/lib/assets/loader.d.ts.map +1 -0
- package/dist/src/lib/assets/networking.d.ts.map +1 -0
- package/dist/src/lib/assets/pods.d.ts.map +1 -0
- package/dist/src/lib/assets/rbac.d.ts.map +1 -0
- package/dist/src/lib/assets/store.d.ts.map +1 -0
- package/dist/src/lib/assets/webhooks.d.ts.map +1 -0
- package/dist/src/lib/assets/yaml/generateAllYaml.d.ts.map +1 -0
- package/dist/src/lib/assets/yaml/generateZarfYaml.d.ts.map +1 -0
- package/dist/{lib → src/lib}/assets/yaml/overridesFile.d.ts +1 -2
- package/dist/src/lib/assets/yaml/overridesFile.d.ts.map +1 -0
- package/dist/src/lib/common-types.d.ts +81 -0
- package/dist/src/lib/common-types.d.ts.map +1 -0
- package/dist/{lib → src/lib}/controller/index.d.ts +1 -1
- package/dist/src/lib/controller/index.d.ts.map +1 -0
- package/dist/{lib → src/lib}/controller/index.util.d.ts +2 -1
- package/dist/src/lib/controller/index.util.d.ts.map +1 -0
- package/dist/src/lib/controller/store.d.ts.map +1 -0
- package/dist/src/lib/controller/storeCache.d.ts.map +1 -0
- package/dist/src/lib/core/capability.d.ts.map +1 -0
- package/dist/src/lib/core/envChecks.d.ts.map +1 -0
- package/dist/src/lib/core/module.d.ts.map +1 -0
- package/dist/src/lib/core/queue.d.ts.map +1 -0
- package/dist/src/lib/core/schedule.d.ts.map +1 -0
- package/dist/src/lib/core/storage.d.ts.map +1 -0
- package/dist/src/lib/deploymentChecks.d.ts.map +1 -0
- package/dist/src/lib/enums.d.ts.map +1 -0
- package/dist/src/lib/errors.d.ts.map +1 -0
- package/dist/src/lib/filesystemService.d.ts.map +1 -0
- package/dist/{lib → src/lib}/filter/adjudicators/admissionRequest.d.ts +1 -1
- package/dist/src/lib/filter/adjudicators/admissionRequest.d.ts.map +1 -0
- package/dist/src/lib/filter/adjudicators/binding.d.ts.map +1 -0
- package/dist/{lib → src/lib}/filter/adjudicators/defaultTestObjects.d.ts +2 -1
- package/dist/src/lib/filter/adjudicators/defaultTestObjects.d.ts.map +1 -0
- package/dist/src/lib/filter/adjudicators/kubernetesObject.d.ts.map +1 -0
- package/dist/{lib → src/lib}/filter/adjudicators/mismatch.d.ts +2 -1
- package/dist/src/lib/filter/adjudicators/mismatch.d.ts.map +1 -0
- package/dist/src/lib/filter/adjudicators/postCollection.d.ts.map +1 -0
- package/dist/{lib → src/lib}/filter/filter.d.ts +2 -1
- package/dist/src/lib/filter/filter.d.ts.map +1 -0
- package/dist/src/lib/finalizer.d.ts.map +1 -0
- package/dist/src/lib/helpers.d.ts.map +1 -0
- package/dist/src/lib/included-files.d.ts.map +1 -0
- package/dist/src/lib/k8s.d.ts.map +1 -0
- package/dist/{lib → src/lib}/mutate-request.d.ts +2 -1
- package/dist/src/lib/mutate-request.d.ts.map +1 -0
- package/dist/src/lib/processors/decode-utils.d.ts +8 -0
- package/dist/src/lib/processors/decode-utils.d.ts.map +1 -0
- package/dist/{lib → src/lib}/processors/mutate-processor.d.ts +2 -6
- package/dist/src/lib/processors/mutate-processor.d.ts.map +1 -0
- package/dist/{lib → src/lib}/processors/validate-processor.d.ts +2 -1
- package/dist/src/lib/processors/validate-processor.d.ts.map +1 -0
- package/dist/src/lib/processors/watch-processor.d.ts.map +1 -0
- package/dist/src/lib/telemetry/logger.d.ts.map +1 -0
- package/dist/src/lib/telemetry/metrics.d.ts.map +1 -0
- package/dist/src/lib/telemetry/timeUtils.d.ts.map +1 -0
- package/dist/src/lib/telemetry/webhookTimeouts.d.ts.map +1 -0
- package/dist/src/lib/tls.d.ts.map +1 -0
- package/dist/{lib → src/lib}/types.d.ts +3 -79
- package/dist/src/lib/types.d.ts.map +1 -0
- package/dist/src/lib/utils.d.ts.map +1 -0
- package/dist/{lib → src/lib}/validate-request.d.ts +1 -2
- package/dist/src/lib/validate-request.d.ts.map +1 -0
- package/dist/src/lib.d.ts.map +1 -0
- package/dist/{runtime → src/runtime}/controller.d.ts.map +1 -1
- package/dist/src/sdk/heredoc.d.ts.map +1 -0
- package/dist/src/sdk/sdk.d.ts.map +1 -0
- package/package.json +14 -10
- package/src/cli/dev.ts +1 -1
- package/src/fixtures/loader.ts +1 -1
- package/src/lib/assets/defaultTestObjects.ts +137 -516
- package/src/lib/assets/yaml/overridesFile.ts +1 -1
- package/src/lib/common-types.ts +103 -0
- package/src/lib/controller/index.ts +1 -1
- package/src/lib/controller/index.util.ts +2 -1
- package/src/lib/core/module.ts +1 -1
- package/src/lib/filter/adjudicators/admissionRequest.ts +1 -1
- package/src/lib/filter/adjudicators/defaultTestObjects.ts +2 -1
- package/src/lib/filter/adjudicators/kubernetesObject.ts +5 -0
- package/src/lib/filter/adjudicators/mismatch.ts +6 -5
- package/src/lib/filter/filter.ts +2 -1
- package/src/lib/finalizer.ts +2 -1
- package/src/lib/mutate-request.ts +2 -1
- package/src/lib/processors/decode-utils.ts +31 -0
- package/src/lib/processors/mutate-processor.ts +44 -66
- package/src/lib/processors/validate-processor.ts +2 -1
- package/src/lib/telemetry/metrics.ts +0 -2
- package/src/lib/types.ts +3 -100
- package/src/lib/validate-request.ts +1 -2
- package/dist/cli/banner.d.ts.map +0 -1
- package/dist/cli/build.d.ts.map +0 -1
- package/dist/cli/build.helpers.d.ts.map +0 -1
- package/dist/cli/deploy.d.ts.map +0 -1
- package/dist/cli/dev.d.ts.map +0 -1
- package/dist/cli/format.d.ts.map +0 -1
- package/dist/cli/format.helpers.d.ts.map +0 -1
- package/dist/cli/init/enums.d.ts.map +0 -1
- package/dist/cli/init/index.d.ts.map +0 -1
- package/dist/cli/init/templates.d.ts.map +0 -1
- package/dist/cli/init/utils.d.ts.map +0 -1
- package/dist/cli/init/walkthrough.d.ts.map +0 -1
- package/dist/cli/kfc.d.ts.map +0 -1
- package/dist/cli/monitor.d.ts.map +0 -1
- package/dist/cli/root.d.ts.map +0 -1
- package/dist/cli/types.d.ts.map +0 -1
- package/dist/cli/update.d.ts.map +0 -1
- package/dist/cli/uuid.d.ts.map +0 -1
- package/dist/cli.d.ts.map +0 -1
- package/dist/fixtures/loader.d.ts.map +0 -1
- package/dist/lib/assets/assets.d.ts.map +0 -1
- package/dist/lib/assets/defaultTestObjects.d.ts +0 -3
- package/dist/lib/assets/defaultTestObjects.d.ts.map +0 -1
- package/dist/lib/assets/deploy.d.ts.map +0 -1
- package/dist/lib/assets/destroy.d.ts.map +0 -1
- package/dist/lib/assets/helm.d.ts.map +0 -1
- package/dist/lib/assets/index.d.ts.map +0 -1
- package/dist/lib/assets/loader.d.ts.map +0 -1
- package/dist/lib/assets/networking.d.ts.map +0 -1
- package/dist/lib/assets/pods.d.ts.map +0 -1
- package/dist/lib/assets/rbac.d.ts.map +0 -1
- package/dist/lib/assets/store.d.ts.map +0 -1
- package/dist/lib/assets/webhooks.d.ts.map +0 -1
- package/dist/lib/assets/yaml/generateAllYaml.d.ts.map +0 -1
- package/dist/lib/assets/yaml/generateZarfYaml.d.ts.map +0 -1
- package/dist/lib/assets/yaml/overridesFile.d.ts.map +0 -1
- package/dist/lib/controller/index.d.ts.map +0 -1
- package/dist/lib/controller/index.util.d.ts.map +0 -1
- package/dist/lib/controller/store.d.ts.map +0 -1
- package/dist/lib/controller/storeCache.d.ts.map +0 -1
- package/dist/lib/core/capability.d.ts.map +0 -1
- package/dist/lib/core/envChecks.d.ts.map +0 -1
- package/dist/lib/core/module.d.ts.map +0 -1
- package/dist/lib/core/queue.d.ts.map +0 -1
- package/dist/lib/core/schedule.d.ts.map +0 -1
- package/dist/lib/core/storage.d.ts.map +0 -1
- package/dist/lib/deploymentChecks.d.ts.map +0 -1
- package/dist/lib/enums.d.ts.map +0 -1
- package/dist/lib/errors.d.ts.map +0 -1
- package/dist/lib/filesystemService.d.ts.map +0 -1
- package/dist/lib/filter/adjudicators/admissionRequest.d.ts.map +0 -1
- package/dist/lib/filter/adjudicators/binding.d.ts.map +0 -1
- package/dist/lib/filter/adjudicators/defaultTestObjects.d.ts.map +0 -1
- package/dist/lib/filter/adjudicators/kubernetesObject.d.ts.map +0 -1
- package/dist/lib/filter/adjudicators/mismatch.d.ts.map +0 -1
- package/dist/lib/filter/adjudicators/postCollection.d.ts.map +0 -1
- package/dist/lib/filter/filter.d.ts.map +0 -1
- package/dist/lib/finalizer.d.ts.map +0 -1
- package/dist/lib/helpers.d.ts.map +0 -1
- package/dist/lib/included-files.d.ts.map +0 -1
- package/dist/lib/k8s.d.ts.map +0 -1
- package/dist/lib/mutate-request.d.ts.map +0 -1
- package/dist/lib/processors/mutate-processor.d.ts.map +0 -1
- package/dist/lib/processors/validate-processor.d.ts.map +0 -1
- package/dist/lib/processors/watch-processor.d.ts.map +0 -1
- package/dist/lib/telemetry/logger.d.ts.map +0 -1
- package/dist/lib/telemetry/metrics.d.ts.map +0 -1
- package/dist/lib/telemetry/timeUtils.d.ts.map +0 -1
- package/dist/lib/telemetry/webhookTimeouts.d.ts.map +0 -1
- package/dist/lib/tls.d.ts.map +0 -1
- package/dist/lib/types.d.ts.map +0 -1
- package/dist/lib/utils.d.ts.map +0 -1
- package/dist/lib/validate-request.d.ts.map +0 -1
- package/dist/lib.d.ts.map +0 -1
- package/dist/sdk/cosign.d.ts +0 -18
- package/dist/sdk/cosign.d.ts.map +0 -1
- package/dist/sdk/heredoc.d.ts.map +0 -1
- package/dist/sdk/sdk.d.ts.map +0 -1
- package/src/sdk/cosign.ts +0 -327
- /package/dist/{cli → src/cli}/banner.d.ts +0 -0
- /package/dist/{cli → src/cli}/build.d.ts +0 -0
- /package/dist/{cli → src/cli}/build.helpers.d.ts +0 -0
- /package/dist/{cli → src/cli}/deploy.d.ts +0 -0
- /package/dist/{cli → src/cli}/dev.d.ts +0 -0
- /package/dist/{cli → src/cli}/format.d.ts +0 -0
- /package/dist/{cli → src/cli}/format.helpers.d.ts +0 -0
- /package/dist/{cli → src/cli}/init/enums.d.ts +0 -0
- /package/dist/{cli → src/cli}/init/index.d.ts +0 -0
- /package/dist/{cli → src/cli}/init/utils.d.ts +0 -0
- /package/dist/{cli → src/cli}/init/walkthrough.d.ts +0 -0
- /package/dist/{cli → src/cli}/kfc.d.ts +0 -0
- /package/dist/{cli → src/cli}/monitor.d.ts +0 -0
- /package/dist/{cli → src/cli}/root.d.ts +0 -0
- /package/dist/{cli → src/cli}/types.d.ts +0 -0
- /package/dist/{cli → src/cli}/update.d.ts +0 -0
- /package/dist/{cli → src/cli}/uuid.d.ts +0 -0
- /package/dist/{cli.d.ts → src/cli.d.ts} +0 -0
- /package/dist/{lib → src/lib}/assets/assets.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/deploy.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/destroy.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/helm.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/index.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/loader.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/networking.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/pods.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/rbac.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/store.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/webhooks.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/yaml/generateAllYaml.d.ts +0 -0
- /package/dist/{lib → src/lib}/assets/yaml/generateZarfYaml.d.ts +0 -0
- /package/dist/{lib → src/lib}/controller/store.d.ts +0 -0
- /package/dist/{lib → src/lib}/controller/storeCache.d.ts +0 -0
- /package/dist/{lib → src/lib}/core/capability.d.ts +0 -0
- /package/dist/{lib → src/lib}/core/envChecks.d.ts +0 -0
- /package/dist/{lib → src/lib}/core/module.d.ts +0 -0
- /package/dist/{lib → src/lib}/core/queue.d.ts +0 -0
- /package/dist/{lib → src/lib}/core/schedule.d.ts +0 -0
- /package/dist/{lib → src/lib}/core/storage.d.ts +0 -0
- /package/dist/{lib → src/lib}/deploymentChecks.d.ts +0 -0
- /package/dist/{lib → src/lib}/enums.d.ts +0 -0
- /package/dist/{lib → src/lib}/errors.d.ts +0 -0
- /package/dist/{lib → src/lib}/filesystemService.d.ts +0 -0
- /package/dist/{lib → src/lib}/filter/adjudicators/binding.d.ts +0 -0
- /package/dist/{lib → src/lib}/filter/adjudicators/kubernetesObject.d.ts +0 -0
- /package/dist/{lib → src/lib}/filter/adjudicators/postCollection.d.ts +0 -0
- /package/dist/{lib → src/lib}/finalizer.d.ts +0 -0
- /package/dist/{lib → src/lib}/helpers.d.ts +0 -0
- /package/dist/{lib → src/lib}/included-files.d.ts +0 -0
- /package/dist/{lib → src/lib}/k8s.d.ts +0 -0
- /package/dist/{lib → src/lib}/processors/watch-processor.d.ts +0 -0
- /package/dist/{lib → src/lib}/telemetry/logger.d.ts +0 -0
- /package/dist/{lib → src/lib}/telemetry/metrics.d.ts +0 -0
- /package/dist/{lib → src/lib}/telemetry/timeUtils.d.ts +0 -0
- /package/dist/{lib → src/lib}/telemetry/webhookTimeouts.d.ts +0 -0
- /package/dist/{lib → src/lib}/tls.d.ts +0 -0
- /package/dist/{lib → src/lib}/utils.d.ts +0 -0
- /package/dist/{lib.d.ts → src/lib.d.ts} +0 -0
- /package/dist/{runtime → src/runtime}/controller.d.ts +0 -0
- /package/dist/{sdk → src/sdk}/heredoc.d.ts +0 -0
- /package/dist/{sdk → src/sdk}/sdk.d.ts +0 -0
|
@@ -0,0 +1,103 @@
|
|
|
1
|
+
import { GroupVersionKind, KubernetesObject } from "kubernetes-fluent-client";
|
|
2
|
+
import { Operation } from "./enums";
|
|
3
|
+
|
|
4
|
+
/**
|
|
5
|
+
* A Kubernetes admission request to be processed by a capability.
|
|
6
|
+
*/
|
|
7
|
+
export interface AdmissionRequest<T = KubernetesObject> {
|
|
8
|
+
/** UID is an identifier for the individual request/response. */
|
|
9
|
+
readonly uid: string;
|
|
10
|
+
|
|
11
|
+
/** Kind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale) */
|
|
12
|
+
readonly kind: GroupVersionKind;
|
|
13
|
+
|
|
14
|
+
/** Resource is the fully-qualified resource being requested (for example, v1.pods) */
|
|
15
|
+
readonly resource: GroupVersionResource;
|
|
16
|
+
|
|
17
|
+
/** SubResource is the sub-resource being requested, if any (for example, "status" or "scale") */
|
|
18
|
+
readonly subResource?: string;
|
|
19
|
+
|
|
20
|
+
/** RequestKind is the fully-qualified type of the original API request (for example, v1.Pod or autoscaling.v1.Scale). */
|
|
21
|
+
readonly requestKind?: GroupVersionKind;
|
|
22
|
+
|
|
23
|
+
/** RequestResource is the fully-qualified resource of the original API request (for example, v1.pods). */
|
|
24
|
+
readonly requestResource?: GroupVersionResource;
|
|
25
|
+
|
|
26
|
+
/** RequestSubResource is the sub-resource of the original API request, if any (for example, "status" or "scale"). */
|
|
27
|
+
readonly requestSubResource?: string;
|
|
28
|
+
|
|
29
|
+
/**
|
|
30
|
+
* Name is the name of the object as presented in the request. On a CREATE operation, the client may omit name and
|
|
31
|
+
* rely on the server to generate the name. If that is the case, this method will return the empty string.
|
|
32
|
+
*/
|
|
33
|
+
readonly name: string;
|
|
34
|
+
|
|
35
|
+
/** Namespace is the namespace associated with the request (if any). */
|
|
36
|
+
readonly namespace?: string;
|
|
37
|
+
|
|
38
|
+
/**
|
|
39
|
+
* Operation is the operation being performed. This may be different than the operation
|
|
40
|
+
* requested. e.g. a patch can result in either a CREATE or UPDATE Operation.
|
|
41
|
+
*/
|
|
42
|
+
readonly operation: Operation;
|
|
43
|
+
|
|
44
|
+
/** UserInfo is information about the requesting user */
|
|
45
|
+
readonly userInfo: {
|
|
46
|
+
/** The name that uniquely identifies this user among all active users. */
|
|
47
|
+
username?: string;
|
|
48
|
+
|
|
49
|
+
/**
|
|
50
|
+
* A unique value that identifies this user across time. If this user is deleted
|
|
51
|
+
* and another user by the same name is added, they will have different UIDs.
|
|
52
|
+
*/
|
|
53
|
+
uid?: string;
|
|
54
|
+
|
|
55
|
+
/** The names of groups this user is a part of. */
|
|
56
|
+
groups?: string[];
|
|
57
|
+
|
|
58
|
+
/** Any additional information provided by the authenticator. */
|
|
59
|
+
extra?: {
|
|
60
|
+
[key: string]: string[];
|
|
61
|
+
};
|
|
62
|
+
};
|
|
63
|
+
|
|
64
|
+
/** Object is the object from the incoming request prior to default values being applied */
|
|
65
|
+
readonly object: T;
|
|
66
|
+
|
|
67
|
+
/** OldObject is the existing object. Only populated for UPDATE or DELETE requests. */
|
|
68
|
+
readonly oldObject?: T;
|
|
69
|
+
|
|
70
|
+
/** DryRun indicates that modifications will definitely not be persisted for this request. Defaults to false. */
|
|
71
|
+
readonly dryRun?: boolean;
|
|
72
|
+
|
|
73
|
+
/**
|
|
74
|
+
* Options contains the options for the operation being performed.
|
|
75
|
+
* e.g. `meta.k8s.io/v1.DeleteOptions` or `meta.k8s.io/v1.CreateOptions`. This may be
|
|
76
|
+
* different than the options the caller provided. e.g. for a patch request the performed
|
|
77
|
+
* Operation might be a CREATE, in which case the Options will a
|
|
78
|
+
* `meta.k8s.io/v1.CreateOptions` even though the caller provided `meta.k8s.io/v1.PatchOptions`.
|
|
79
|
+
*/
|
|
80
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
81
|
+
readonly options?: any;
|
|
82
|
+
}
|
|
83
|
+
|
|
84
|
+
/**
|
|
85
|
+
* GroupVersionResource unambiguously identifies a resource. It doesn't anonymously include GroupVersion
|
|
86
|
+
* to avoid automatic coercion. It doesn't use a GroupVersion to avoid custom marshalling
|
|
87
|
+
*/
|
|
88
|
+
export interface GroupVersionResource {
|
|
89
|
+
readonly group: string;
|
|
90
|
+
readonly version: string;
|
|
91
|
+
readonly resource: string;
|
|
92
|
+
}
|
|
93
|
+
|
|
94
|
+
export type ValidateActionResponse = {
|
|
95
|
+
allowed: boolean;
|
|
96
|
+
statusCode?: number;
|
|
97
|
+
statusMessage?: string;
|
|
98
|
+
};
|
|
99
|
+
|
|
100
|
+
// DeepPartial utility type for deep optional properties
|
|
101
|
+
export type DeepPartial<T> = {
|
|
102
|
+
[P in keyof T]?: T[P] extends object ? DeepPartial<T[P]> : T[P];
|
|
103
|
+
};
|
|
@@ -14,8 +14,8 @@ import { ModuleConfig } from "../types";
|
|
|
14
14
|
import { mutateProcessor } from "../processors/mutate-processor";
|
|
15
15
|
import { validateProcessor } from "../processors/validate-processor";
|
|
16
16
|
import { StoreController } from "./store";
|
|
17
|
-
import { AdmissionRequest } from "../types";
|
|
18
17
|
import { karForMutate, karForValidate, KubeAdmissionReview } from "./index.util";
|
|
18
|
+
import { AdmissionRequest } from "../common-types";
|
|
19
19
|
|
|
20
20
|
export interface ControllerHooks {
|
|
21
21
|
beforeHook?: (req: AdmissionRequest) => void;
|
|
@@ -1,8 +1,9 @@
|
|
|
1
1
|
// SPDX-License-Identifier: Apache-2.0
|
|
2
2
|
// SPDX-FileCopyrightText: 2023-Present The Pepr Authors
|
|
3
3
|
|
|
4
|
+
import { AdmissionRequest } from "../common-types";
|
|
4
5
|
import { MutateResponse, ValidateResponse } from "../k8s";
|
|
5
|
-
import { ResponseItem
|
|
6
|
+
import { ResponseItem } from "../types";
|
|
6
7
|
|
|
7
8
|
export interface KubeAdmissionReview {
|
|
8
9
|
apiVersion: string;
|
package/src/lib/core/module.ts
CHANGED
|
@@ -6,7 +6,7 @@ import { Controller, ControllerHooks } from "../controller";
|
|
|
6
6
|
import { ValidateError } from "../errors";
|
|
7
7
|
import { CapabilityExport } from "../types";
|
|
8
8
|
import { setupWatch } from "../processors/watch-processor";
|
|
9
|
-
import
|
|
9
|
+
import Log from "../../lib/telemetry/logger";
|
|
10
10
|
import { resolveIgnoreNamespaces } from "../assets/webhooks";
|
|
11
11
|
import { isBuildMode, isDevMode, isWatchMode } from "./envChecks";
|
|
12
12
|
import { PackageJSON, PeprModuleOptions, ModuleConfig } from "../types";
|
|
@@ -2,9 +2,9 @@
|
|
|
2
2
|
// SPDX-FileCopyrightText: 2023-Present The Pepr Authors
|
|
3
3
|
|
|
4
4
|
import { Operation } from "../../enums";
|
|
5
|
-
import { AdmissionRequest } from "../../types";
|
|
6
5
|
import { defaultTo, pipe } from "ramda";
|
|
7
6
|
import { KubernetesObject } from "kubernetes-fluent-client";
|
|
7
|
+
import { AdmissionRequest } from "../../common-types";
|
|
8
8
|
|
|
9
9
|
export const declaredOperation = pipe(
|
|
10
10
|
(request: AdmissionRequest<KubernetesObject>): Operation => request?.operation,
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import { GroupVersionKind, kind, KubernetesObject } from "kubernetes-fluent-client";
|
|
2
2
|
import { Event, Operation } from "../../enums";
|
|
3
|
-
import {
|
|
3
|
+
import { Binding, Filters } from "../../types";
|
|
4
|
+
import { AdmissionRequest } from "../../common-types";
|
|
4
5
|
|
|
5
6
|
export const defaultFilters: Filters = {
|
|
6
7
|
annotations: {},
|
|
@@ -62,6 +62,11 @@ export const uncarryableNamespace = allPass([
|
|
|
62
62
|
}, not),
|
|
63
63
|
]);
|
|
64
64
|
|
|
65
|
+
/*
|
|
66
|
+
* Returns true if the object is missing a carriable namespace.
|
|
67
|
+
* - If the object is a Namespace, it returns true if its name is not in the namespaceSelector.
|
|
68
|
+
* - Otherwise, it returns true if the object does not carry a namespace.
|
|
69
|
+
*/
|
|
65
70
|
export const missingCarriableNamespace = allPass([
|
|
66
71
|
pipe(nthArg(0), length, gt(__, 0)),
|
|
67
72
|
pipe((namespaceSelector: string[], kubernetesObject: KubernetesObject): boolean =>
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
// SPDX-License-Identifier: Apache-2.0
|
|
2
2
|
// SPDX-FileCopyrightText: 2023-Present The Pepr Authors
|
|
3
3
|
|
|
4
|
-
import {
|
|
4
|
+
import { Binding } from "../../types";
|
|
5
5
|
import { allPass, any, anyPass, equals, not, nthArg, pipe } from "ramda";
|
|
6
6
|
import {
|
|
7
7
|
definedAnnotations,
|
|
@@ -34,6 +34,7 @@ import {
|
|
|
34
34
|
} from "./kubernetesObject";
|
|
35
35
|
import { declaredOperation, declaredGroup, declaredVersion, declaredKind } from "./admissionRequest";
|
|
36
36
|
import { Event, Operation } from "../../enums";
|
|
37
|
+
import { AdmissionRequest } from "../../common-types";
|
|
37
38
|
|
|
38
39
|
export const mismatchedDeletionTimestamp = allPass([
|
|
39
40
|
pipe(nthArg(0), definesDeletionTimestamp),
|
|
@@ -79,10 +80,10 @@ export const metasMismatch = pipe(
|
|
|
79
80
|
// prettier-ignore
|
|
80
81
|
return (
|
|
81
82
|
keyMissing ? { [key]: value } :
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
83
|
+
noValue ? {} :
|
|
84
|
+
valMissing ? { [key]: value } :
|
|
85
|
+
valDiffers ? { [key]: value } :
|
|
86
|
+
{}
|
|
86
87
|
)
|
|
87
88
|
})
|
|
88
89
|
.reduce((acc, cur) => ({ ...acc, ...cur }), {});
|
package/src/lib/filter/filter.ts
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
// SPDX-License-Identifier: Apache-2.0
|
|
2
2
|
// SPDX-FileCopyrightText: 2023-Present The Pepr Authors
|
|
3
3
|
|
|
4
|
-
import {
|
|
4
|
+
import { Binding } from "../types";
|
|
5
5
|
import { Operation } from "../enums";
|
|
6
6
|
import { KubernetesObject } from "kubernetes-fluent-client";
|
|
7
7
|
import {
|
|
@@ -39,6 +39,7 @@ import {
|
|
|
39
39
|
mismatchedNamespaceRegex,
|
|
40
40
|
mismatchedNameRegex,
|
|
41
41
|
} from "./adjudicators/mismatch";
|
|
42
|
+
import { AdmissionRequest } from "../common-types";
|
|
42
43
|
|
|
43
44
|
type AdjudicationResult = string | null;
|
|
44
45
|
type Adjudicator = () => AdjudicationResult;
|
package/src/lib/finalizer.ts
CHANGED
|
@@ -3,9 +3,10 @@
|
|
|
3
3
|
|
|
4
4
|
import { K8s, KubernetesObject, RegisterKind } from "kubernetes-fluent-client";
|
|
5
5
|
import Log from "./telemetry/logger";
|
|
6
|
-
import { Binding
|
|
6
|
+
import { Binding } from "./types";
|
|
7
7
|
import { Operation } from "./enums";
|
|
8
8
|
import { PeprMutateRequest } from "./mutate-request";
|
|
9
|
+
import { DeepPartial } from "./common-types";
|
|
9
10
|
|
|
10
11
|
export function addFinalizer<K extends KubernetesObject>(request: PeprMutateRequest<K>): void {
|
|
11
12
|
// if a DELETE is being processed, don't add a finalizer
|
|
@@ -1,10 +1,11 @@
|
|
|
1
1
|
// SPDX-License-Identifier: Apache-2.0
|
|
2
2
|
// SPDX-FileCopyrightText: 2023-Present The Pepr Authors
|
|
3
3
|
|
|
4
|
-
import { AdmissionRequest, DeepPartial } from "./types";
|
|
5
4
|
import { Operation } from "./enums";
|
|
6
5
|
import { KubernetesObject } from "kubernetes-fluent-client";
|
|
7
6
|
import { clone, mergeDeepRight } from "ramda";
|
|
7
|
+
import { AdmissionRequest } from "./common-types";
|
|
8
|
+
import { DeepPartial } from "./common-types";
|
|
8
9
|
|
|
9
10
|
// PeprMutateRequest class for mutation request handling
|
|
10
11
|
export class PeprMutateRequest<T extends KubernetesObject> {
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
import { convertFromBase64Map, convertToBase64Map } from "../utils";
|
|
2
|
+
import { kind, KubernetesObject } from "kubernetes-fluent-client";
|
|
3
|
+
import { PeprMutateRequest } from "../mutate-request";
|
|
4
|
+
import { clone } from "ramda";
|
|
5
|
+
|
|
6
|
+
export function decodeData(wrapped: PeprMutateRequest<KubernetesObject>): {
|
|
7
|
+
skipped: string[];
|
|
8
|
+
wrapped: PeprMutateRequest<KubernetesObject>;
|
|
9
|
+
} {
|
|
10
|
+
let skipped: string[] = [];
|
|
11
|
+
|
|
12
|
+
const isSecret = wrapped.Request.kind.version === "v1" && wrapped.Request.kind.kind === "Secret";
|
|
13
|
+
if (isSecret) {
|
|
14
|
+
// convertFromBase64Map modifies it's arg rather than returing a mod'ed copy (ye olde side-effect special, blerg)
|
|
15
|
+
skipped = convertFromBase64Map(wrapped.Raw as unknown as kind.Secret);
|
|
16
|
+
}
|
|
17
|
+
|
|
18
|
+
return { skipped, wrapped };
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
export function reencodeData(wrapped: PeprMutateRequest<KubernetesObject>, skipped: string[]): KubernetesObject {
|
|
22
|
+
const transformed = clone(wrapped.Raw);
|
|
23
|
+
|
|
24
|
+
const isSecret = wrapped.Request.kind.version === "v1" && wrapped.Request.kind.kind === "Secret";
|
|
25
|
+
if (isSecret) {
|
|
26
|
+
// convertToBase64Map modifies it's arg rather than returing a mod'ed copy (ye olde side-effect special, blerg)
|
|
27
|
+
convertToBase64Map(transformed as unknown as kind.Secret, skipped);
|
|
28
|
+
}
|
|
29
|
+
|
|
30
|
+
return transformed;
|
|
31
|
+
}
|
|
@@ -2,21 +2,25 @@
|
|
|
2
2
|
// SPDX-FileCopyrightText: 2023-Present The Pepr Authors
|
|
3
3
|
|
|
4
4
|
import jsonPatch from "fast-json-patch";
|
|
5
|
-
import {
|
|
6
|
-
import { clone } from "ramda";
|
|
5
|
+
import { KubernetesObject } from "kubernetes-fluent-client";
|
|
7
6
|
import { MeasureWebhookTimeout } from "../telemetry/webhookTimeouts";
|
|
8
7
|
import { Capability } from "../core/capability";
|
|
9
8
|
import { shouldSkipRequest } from "../filter/filter";
|
|
10
9
|
import { MutateResponse } from "../k8s";
|
|
11
|
-
import {
|
|
10
|
+
import { Binding } from "../types";
|
|
12
11
|
import Log from "../telemetry/logger";
|
|
13
12
|
import { ModuleConfig } from "../types";
|
|
14
13
|
import { PeprMutateRequest } from "../mutate-request";
|
|
15
|
-
import { base64Encode
|
|
14
|
+
import { base64Encode } from "../utils";
|
|
16
15
|
import { OnError } from "../../cli/init/enums";
|
|
17
16
|
import { resolveIgnoreNamespaces } from "../assets/webhooks";
|
|
18
17
|
import { Operation } from "fast-json-patch";
|
|
19
18
|
import { WebhookType } from "../enums";
|
|
19
|
+
|
|
20
|
+
import { AdmissionRequest } from "../common-types";
|
|
21
|
+
|
|
22
|
+
import { decodeData, reencodeData } from "./decode-utils";
|
|
23
|
+
|
|
20
24
|
export interface Bindable {
|
|
21
25
|
req: AdmissionRequest;
|
|
22
26
|
config: ModuleConfig;
|
|
@@ -60,33 +64,6 @@ export function logMutateErrorMessage(e: Error): string {
|
|
|
60
64
|
}
|
|
61
65
|
}
|
|
62
66
|
|
|
63
|
-
export function decodeData(wrapped: PeprMutateRequest<KubernetesObject>): {
|
|
64
|
-
skipped: string[];
|
|
65
|
-
wrapped: PeprMutateRequest<KubernetesObject>;
|
|
66
|
-
} {
|
|
67
|
-
let skipped: string[] = [];
|
|
68
|
-
|
|
69
|
-
const isSecret = wrapped.Request.kind.version === "v1" && wrapped.Request.kind.kind === "Secret";
|
|
70
|
-
if (isSecret) {
|
|
71
|
-
// convertFromBase64Map modifies it's arg rather than returing a mod'ed copy (ye olde side-effect special, blerg)
|
|
72
|
-
skipped = convertFromBase64Map(wrapped.Raw as unknown as kind.Secret);
|
|
73
|
-
}
|
|
74
|
-
|
|
75
|
-
return { skipped, wrapped };
|
|
76
|
-
}
|
|
77
|
-
|
|
78
|
-
export function reencodeData(wrapped: PeprMutateRequest<KubernetesObject>, skipped: string[]): KubernetesObject {
|
|
79
|
-
const transformed = clone(wrapped.Raw);
|
|
80
|
-
|
|
81
|
-
const isSecret = wrapped.Request.kind.version === "v1" && wrapped.Request.kind.kind === "Secret";
|
|
82
|
-
if (isSecret) {
|
|
83
|
-
// convertToBase64Map modifies it's arg rather than returing a mod'ed copy (ye olde side-effect special, blerg)
|
|
84
|
-
convertToBase64Map(transformed as unknown as kind.Secret, skipped);
|
|
85
|
-
}
|
|
86
|
-
|
|
87
|
-
return transformed;
|
|
88
|
-
}
|
|
89
|
-
|
|
90
67
|
export async function processRequest(
|
|
91
68
|
bindable: Bindable,
|
|
92
69
|
wrapped: PeprMutateRequest<KubernetesObject>,
|
|
@@ -152,56 +129,57 @@ export async function mutateProcessor(
|
|
|
152
129
|
let wrapped = decoded.wrapped;
|
|
153
130
|
|
|
154
131
|
Log.info(reqMetadata, `Processing request`);
|
|
155
|
-
|
|
156
|
-
|
|
157
|
-
|
|
158
|
-
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
|
|
182
|
-
|
|
183
|
-
|
|
184
|
-
});
|
|
132
|
+
const bindables: Bindable[] = capabilities
|
|
133
|
+
.flatMap(capa =>
|
|
134
|
+
capa.bindings.map(bind => ({
|
|
135
|
+
req,
|
|
136
|
+
config,
|
|
137
|
+
name: capa.name,
|
|
138
|
+
namespaces: capa.namespaces,
|
|
139
|
+
binding: bind,
|
|
140
|
+
actMeta: { ...reqMetadata, name: capa.name },
|
|
141
|
+
})),
|
|
142
|
+
)
|
|
143
|
+
.filter(bind => {
|
|
144
|
+
if (!bind.binding.mutateCallback) {
|
|
145
|
+
return false;
|
|
146
|
+
}
|
|
147
|
+
|
|
148
|
+
const shouldSkip = shouldSkipRequest(
|
|
149
|
+
bind.binding,
|
|
150
|
+
bind.req,
|
|
151
|
+
bind.namespaces,
|
|
152
|
+
resolveIgnoreNamespaces(bind.config?.alwaysIgnore?.namespaces),
|
|
153
|
+
);
|
|
154
|
+
if (shouldSkip !== "") {
|
|
155
|
+
Log.debug(shouldSkip);
|
|
156
|
+
return false;
|
|
157
|
+
}
|
|
158
|
+
|
|
159
|
+
return true;
|
|
160
|
+
});
|
|
185
161
|
|
|
186
162
|
for (const bindable of bindables) {
|
|
187
163
|
({ wrapped, response } = await processRequest(bindable, wrapped, response));
|
|
188
164
|
if (config.onError === OnError.REJECT && response?.warnings!.length > 0) {
|
|
165
|
+
webhookTimer.stop();
|
|
189
166
|
return response;
|
|
190
167
|
}
|
|
191
168
|
}
|
|
192
169
|
|
|
193
|
-
//
|
|
194
|
-
response.allowed = true;
|
|
170
|
+
// The request is allowed
|
|
195
171
|
|
|
196
172
|
// If no capability matched the request, exit early
|
|
197
173
|
if (bindables.length === 0) {
|
|
198
174
|
Log.info(reqMetadata, `No matching actions found`);
|
|
199
|
-
|
|
175
|
+
webhookTimer.stop();
|
|
176
|
+
return { ...response, allowed: true };
|
|
200
177
|
}
|
|
201
178
|
|
|
202
179
|
// delete operations can't be mutate, just return before the transformation
|
|
203
180
|
if (req.operation === "DELETE") {
|
|
204
|
-
|
|
181
|
+
webhookTimer.stop();
|
|
182
|
+
return { ...response, allowed: true };
|
|
205
183
|
}
|
|
206
184
|
|
|
207
185
|
// unskip base64-encoded data fields that were skipDecode'd
|
|
@@ -214,7 +192,7 @@ export async function mutateProcessor(
|
|
|
214
192
|
|
|
215
193
|
Log.debug({ ...reqMetadata, patches }, `Patches generated`);
|
|
216
194
|
webhookTimer.stop();
|
|
217
|
-
return response;
|
|
195
|
+
return { ...response, allowed: true };
|
|
218
196
|
}
|
|
219
197
|
|
|
220
198
|
export function updateResponsePatchAndWarnings(patches: Operation[], response: MutateResponse): void {
|
|
@@ -5,7 +5,7 @@ import { kind, KubernetesObject } from "kubernetes-fluent-client";
|
|
|
5
5
|
import { Capability } from "../core/capability";
|
|
6
6
|
import { shouldSkipRequest } from "../filter/filter";
|
|
7
7
|
import { ValidateResponse } from "../k8s";
|
|
8
|
-
import {
|
|
8
|
+
import { Binding } from "../types";
|
|
9
9
|
import Log from "../telemetry/logger";
|
|
10
10
|
import { convertFromBase64Map } from "../utils";
|
|
11
11
|
import { PeprValidateRequest } from "../validate-request";
|
|
@@ -13,6 +13,7 @@ import { ModuleConfig } from "../types";
|
|
|
13
13
|
import { resolveIgnoreNamespaces } from "../assets/webhooks";
|
|
14
14
|
import { MeasureWebhookTimeout } from "../telemetry/webhookTimeouts";
|
|
15
15
|
import { WebhookType } from "../enums";
|
|
16
|
+
import { AdmissionRequest } from "../common-types";
|
|
16
17
|
|
|
17
18
|
export async function processRequest(
|
|
18
19
|
binding: Binding,
|
|
@@ -1,8 +1,6 @@
|
|
|
1
1
|
// SPDX-License-Identifier: Apache-2.0
|
|
2
2
|
// SPDX-FileCopyrightText: 2023-Present The Pepr Authors
|
|
3
3
|
|
|
4
|
-
/* eslint-disable class-methods-use-this */
|
|
5
|
-
|
|
6
4
|
import { performance } from "perf_hooks";
|
|
7
5
|
import promClient, { Counter, Registry, Gauge, Summary } from "prom-client";
|
|
8
6
|
import Log from "./logger";
|
package/src/lib/types.ts
CHANGED
|
@@ -2,13 +2,14 @@
|
|
|
2
2
|
// SPDX-FileCopyrightText: 2023-Present The Pepr Authors
|
|
3
3
|
|
|
4
4
|
import { GenericClass, GroupVersionKind, KubernetesObject } from "kubernetes-fluent-client";
|
|
5
|
-
import { Event
|
|
5
|
+
import { Event } from "./enums";
|
|
6
6
|
import { WatchPhase } from "kubernetes-fluent-client/dist/fluent/types";
|
|
7
7
|
import { Logger } from "pino";
|
|
8
8
|
import { PeprMutateRequest } from "./mutate-request";
|
|
9
9
|
import { PeprValidateRequest } from "./validate-request";
|
|
10
10
|
import { V1PolicyRule as PolicyRule } from "@kubernetes/client-node";
|
|
11
11
|
import { WebhookIgnore, MutateResponse, ValidateResponse } from "./k8s";
|
|
12
|
+
import { AdmissionRequest, ValidateActionResponse } from "./common-types";
|
|
12
13
|
|
|
13
14
|
/**
|
|
14
15
|
* Specifically for deploying images with a private registry
|
|
@@ -239,12 +240,6 @@ export type WatchLogAction<T extends GenericClass, K extends KubernetesObject =
|
|
|
239
240
|
logger?: Logger,
|
|
240
241
|
) => Promise<void> | void;
|
|
241
242
|
|
|
242
|
-
export type ValidateActionResponse = {
|
|
243
|
-
allowed: boolean;
|
|
244
|
-
statusCode?: number;
|
|
245
|
-
statusMessage?: string;
|
|
246
|
-
};
|
|
247
|
-
|
|
248
243
|
export type FinalizeAction<T extends GenericClass, K extends KubernetesObject = InstanceType<T>> = (
|
|
249
244
|
update: K,
|
|
250
245
|
logger?: Logger,
|
|
@@ -265,99 +260,7 @@ export type FinalizeActionChain<T extends GenericClass> = {
|
|
|
265
260
|
Finalize: (action: FinalizeAction<T, InstanceType<T>>) => void;
|
|
266
261
|
};
|
|
267
262
|
|
|
268
|
-
/**
|
|
269
|
-
* A Kubernetes admission request to be processed by a capability.
|
|
270
|
-
*/
|
|
271
|
-
export interface AdmissionRequest<T = KubernetesObject> {
|
|
272
|
-
/** UID is an identifier for the individual request/response. */
|
|
273
|
-
readonly uid: string;
|
|
274
|
-
|
|
275
|
-
/** Kind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale) */
|
|
276
|
-
readonly kind: GroupVersionKind;
|
|
277
|
-
|
|
278
|
-
/** Resource is the fully-qualified resource being requested (for example, v1.pods) */
|
|
279
|
-
readonly resource: GroupVersionResource;
|
|
280
|
-
|
|
281
|
-
/** SubResource is the sub-resource being requested, if any (for example, "status" or "scale") */
|
|
282
|
-
readonly subResource?: string;
|
|
283
|
-
|
|
284
|
-
/** RequestKind is the fully-qualified type of the original API request (for example, v1.Pod or autoscaling.v1.Scale). */
|
|
285
|
-
readonly requestKind?: GroupVersionKind;
|
|
286
|
-
|
|
287
|
-
/** RequestResource is the fully-qualified resource of the original API request (for example, v1.pods). */
|
|
288
|
-
readonly requestResource?: GroupVersionResource;
|
|
289
|
-
|
|
290
|
-
/** RequestSubResource is the sub-resource of the original API request, if any (for example, "status" or "scale"). */
|
|
291
|
-
readonly requestSubResource?: string;
|
|
292
|
-
|
|
293
|
-
/**
|
|
294
|
-
* Name is the name of the object as presented in the request. On a CREATE operation, the client may omit name and
|
|
295
|
-
* rely on the server to generate the name. If that is the case, this method will return the empty string.
|
|
296
|
-
*/
|
|
297
|
-
readonly name: string;
|
|
298
|
-
|
|
299
|
-
/** Namespace is the namespace associated with the request (if any). */
|
|
300
|
-
readonly namespace?: string;
|
|
301
|
-
|
|
302
|
-
/**
|
|
303
|
-
* Operation is the operation being performed. This may be different than the operation
|
|
304
|
-
* requested. e.g. a patch can result in either a CREATE or UPDATE Operation.
|
|
305
|
-
*/
|
|
306
|
-
readonly operation: Operation;
|
|
307
|
-
|
|
308
|
-
/** UserInfo is information about the requesting user */
|
|
309
|
-
readonly userInfo: {
|
|
310
|
-
/** The name that uniquely identifies this user among all active users. */
|
|
311
|
-
username?: string;
|
|
312
|
-
|
|
313
|
-
/**
|
|
314
|
-
* A unique value that identifies this user across time. If this user is deleted
|
|
315
|
-
* and another user by the same name is added, they will have different UIDs.
|
|
316
|
-
*/
|
|
317
|
-
uid?: string;
|
|
318
|
-
|
|
319
|
-
/** The names of groups this user is a part of. */
|
|
320
|
-
groups?: string[];
|
|
321
|
-
|
|
322
|
-
/** Any additional information provided by the authenticator. */
|
|
323
|
-
extra?: {
|
|
324
|
-
[key: string]: string[];
|
|
325
|
-
};
|
|
326
|
-
};
|
|
327
|
-
|
|
328
|
-
/** Object is the object from the incoming request prior to default values being applied */
|
|
329
|
-
readonly object: T;
|
|
330
|
-
|
|
331
|
-
/** OldObject is the existing object. Only populated for UPDATE or DELETE requests. */
|
|
332
|
-
readonly oldObject?: T;
|
|
333
|
-
|
|
334
|
-
/** DryRun indicates that modifications will definitely not be persisted for this request. Defaults to false. */
|
|
335
|
-
readonly dryRun?: boolean;
|
|
336
|
-
|
|
337
|
-
/**
|
|
338
|
-
* Options contains the options for the operation being performed.
|
|
339
|
-
* e.g. `meta.k8s.io/v1.DeleteOptions` or `meta.k8s.io/v1.CreateOptions`. This may be
|
|
340
|
-
* different than the options the caller provided. e.g. for a patch request the performed
|
|
341
|
-
* Operation might be a CREATE, in which case the Options will a
|
|
342
|
-
* `meta.k8s.io/v1.CreateOptions` even though the caller provided `meta.k8s.io/v1.PatchOptions`.
|
|
343
|
-
*/
|
|
344
|
-
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
345
|
-
readonly options?: any;
|
|
346
|
-
}
|
|
347
|
-
|
|
348
|
-
/**
|
|
349
|
-
* GroupVersionResource unambiguously identifies a resource. It doesn't anonymously include GroupVersion
|
|
350
|
-
* to avoid automatic coercion. It doesn't use a GroupVersion to avoid custom marshalling
|
|
351
|
-
*/
|
|
352
|
-
export interface GroupVersionResource {
|
|
353
|
-
readonly group: string;
|
|
354
|
-
readonly version: string;
|
|
355
|
-
readonly resource: string;
|
|
356
|
-
}
|
|
357
|
-
// DeepPartial utility type for deep optional properties
|
|
358
|
-
export type DeepPartial<T> = {
|
|
359
|
-
[P in keyof T]?: T[P] extends object ? DeepPartial<T[P]> : T[P];
|
|
360
|
-
}; /** Custom Labels Type for package.json */
|
|
263
|
+
/** Custom Labels Type for package.json */
|
|
361
264
|
|
|
362
265
|
export type CustomLabels = { namespace: Record<string, string> } | Record<string, never>;
|
|
363
266
|
/** Configuration that MAY be set a Pepr module's package.json. */
|
|
@@ -6,9 +6,8 @@
|
|
|
6
6
|
import { KubernetesObject } from "kubernetes-fluent-client";
|
|
7
7
|
|
|
8
8
|
import { clone } from "ramda";
|
|
9
|
-
import { AdmissionRequest } from "./types";
|
|
10
|
-
import { ValidateActionResponse } from "./types";
|
|
11
9
|
import { Operation } from "./enums";
|
|
10
|
+
import { AdmissionRequest, ValidateActionResponse } from "./common-types";
|
|
12
11
|
|
|
13
12
|
/**
|
|
14
13
|
* The RequestWrapper class provides methods to modify Kubernetes objects in the context
|
package/dist/cli/banner.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"banner.d.ts","sourceRoot":"","sources":["../../src/cli/banner.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,MAAM,iv0HA2DlB,CAAC"}
|
package/dist/cli/build.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/cli/build.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAmB,MAAM,SAAS,CAAC;AAKnF,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAIjC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAc5C,MAAM,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACjF,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,YAAY,EACV,MAAM,GACN,SAAS,GACT,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,KAAK,GACL,MAAM,GACN,UAAU,CACb,GAAG;IACF,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,gBAAgB,CAAC,GAAG;IACpE,IAAI,EAAE,gBAAgB,GAAG;QACvB,aAAa,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,GAAG,EAAE,UAAU,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,GAAG,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,CAAC,OAAO,WAAW,OAAO,EAAE,OAAO,GAAG,IAAI,CA6H/C;AAWD,wBAAsB,UAAU,CAAC,UAAU,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuC/E;AAED,wBAAsB,WAAW,CAC/B,QAAQ,CAAC,EAAE,QAAQ,EACnB,UAAU,SAAS,EACnB,KAAK,UAAO,GACX,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAwEnC;AA6CD,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CASjD"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"build.helpers.d.ts","sourceRoot":"","sources":["../../src/cli/build.helpers.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAW,YAAY,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAO9C,UAAU,YAAY;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AACD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,CAe9D;AAED,MAAM,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACjF;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3B,GAAG,EAAE;IAAE,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACnC,MAAM,CAaR;AAED;;;;GAIG;AAEH,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAY9E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAI/F;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAStE;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,MAAM,EAAE,EACvB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAQjF;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAC7B,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAarC;AAED,wBAAsB,0BAA0B,CAAC,GAAG,EAAE;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBhB"}
|
package/dist/cli/deploy.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/cli/deploy.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAOjC,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,sBAAsB,GAAG;IAC/E,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAmCA;AAED,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAC;AAkB/E,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAatF;AA+BD,MAAM,CAAC,OAAO,WAAW,OAAO,EAAE,OAAO,GAAG,IAAI,CA8B/C"}
|
package/dist/cli/dev.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../src/cli/dev.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAOjC,MAAM,CAAC,OAAO,WAAW,OAAO,EAAE,OAAO,GAAG,IAAI,CA0G/C"}
|
package/dist/cli/format.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/cli/format.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEjC,MAAM,CAAC,OAAO,WAAW,OAAO,EAAE,OAAO,GAAG,IAAI,CAc/C;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAoCxE"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"format.helpers.d.ts","sourceRoot":"","sources":["../../src/cli/format.helpers.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIhC,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,EAC5B,YAAY,EAAE,OAAO,GACpB,OAAO,CAAC,OAAO,CAAC,CAgBlB"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../../../src/cli/init/enums.ts"],"names":[],"mappings":"AAAA,oBAAY,QAAQ;IAClB,MAAM,WAAW;IACjB,KAAK,UAAU;CAChB;AACD,oBAAY,OAAO;IACjB,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/init/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAoBlC,MAAM,CAAC,OAAO,WAAW,OAAO,EAAE,OAAO,GAAG,IAAI,CAkD/C"}
|