pepr 0.46.2-nightly.0 → 0.46.2-nightly.2

package/dist/lib.js

@@ -192,7 +192,9 @@ var Storage = class {
     return new Promise((resolve, reject) => {
       record.timeout = setTimeout(() => {
         record.unsubscribe();
-        return reject(`MAX_WAIT_TIME elapsed: Key ${key} still seen after ${MAX_WAIT_TIME / 1e3}s`);
+        return reject(
+          `MAX_WAIT_TIME elapsed: Key ${key} still seen after ${MAX_WAIT_TIME / 1e3}s`
+        );
       }, MAX_WAIT_TIME);
       record.unsubscribe = this.subscribe((data) => {
         if (!Object.hasOwn(data, `${v2UnescapedStoreKey(key)}`)) {
@@ -554,7 +556,16 @@ var Capability = class {
     };
     const bindings = this.#bindings;
     const prefix = `${this.#name}: ${model.name}`;
-    const commonChain = { WithLabel, WithAnnotation, WithDeletionTimestamp, Mutate, Validate, Watch, Reconcile, Alias };
+    const commonChain = {
+      WithLabel,
+      WithAnnotation,
+      WithDeletionTimestamp,
+      Mutate,
+      Validate,
+      Watch,
+      Reconcile,
+      Alias
+    };
     const isNotEmpty = (value) => Object.keys(value).length > 0;
     const log = (message, cbString) => {
       const filteredObj = (0, import_ramda2.pickBy)(isNotEmpty, binding.filters);
@@ -570,7 +581,9 @@ var Capability = class {
           ...binding,
           isValidate: true,
           validateCallback: async (req, logger = aliasLogger) => {
-            logger_default.info(`Executing validate action with alias: ${binding.alias || "no alias provided"}`);
+            logger_default.info(
+              `Executing validate action with alias: ${binding.alias || "no alias provided"}`
+            );
             return await validateCallback(req, logger);
           }
         });
@@ -585,7 +598,9 @@ var Capability = class {
           ...binding,
           isMutate: true,
           mutateCallback: async (req, logger = aliasLogger) => {
-            logger_default.info(`Executing mutation action with alias: ${binding.alias || "no alias provided"}`);
+            logger_default.info(
+              `Executing mutation action with alias: ${binding.alias || "no alias provided"}`
+            );
             await mutateCallback(req, logger);
           }
         });
@@ -595,7 +610,9 @@ var Capability = class {
     function Watch(watchCallback) {
       if (registerWatch) {
         log("Watch Action", watchCallback.toString());
-        const aliasLogger = logger_default.child({ alias: binding.alias || "no alias provided" });
+        const aliasLogger = logger_default.child({
+          alias: binding.alias || "no alias provided"
+        });
         bindings.push({
           ...binding,
           isWatch: true,
@@ -610,13 +627,17 @@ var Capability = class {
     function Reconcile(reconcileCallback) {
       if (registerWatch) {
         log("Reconcile Action", reconcileCallback.toString());
-        const aliasLogger = logger_default.child({ alias: binding.alias || "no alias provided" });
+        const aliasLogger = logger_default.child({
+          alias: binding.alias || "no alias provided"
+        });
         bindings.push({
           ...binding,
           isWatch: true,
           isQueue: true,
           watchCallback: async (update, phase, logger = aliasLogger) => {
-            logger_default.info(`Executing reconcile action with alias: ${binding.alias || "no alias provided"}`);
+            logger_default.info(
+              `Executing reconcile action with alias: ${binding.alias || "no alias provided"}`
+            );
             await reconcileCallback(update, phase, logger);
           }
         });
@@ -643,7 +664,9 @@ var Capability = class {
           isFinalize: true,
           event: "UPDATE" /* UPDATE */,
           finalizeCallback: async (update, logger = aliasLogger) => {
-            logger_default.info(`Executing finalize action with alias: ${binding.alias || "no alias provided"}`);
+            logger_default.info(
+              `Executing finalize action with alias: ${binding.alias || "no alias provided"}`
+            );
             return await finalizeCallback(update, logger);
           }
         };
@@ -750,7 +773,9 @@ var MetricsCollector = class {
     this.addSummary(this.#metricNames.mutate, "Mutation operation summary");
     this.addSummary(this.#metricNames.validate, "Validation operation summary");
     this.addGauge(this.#metricNames.cacheMiss, "Number of cache misses per window", ["window"]);
-    this.addGauge(this.#metricNames.resyncFailureCount, "Number of failures per resync operation", ["count"]);
+    this.addGauge(this.#metricNames.resyncFailureCount, "Number of failures per resync operation", [
+      "count"
+    ]);
   }
   #getMetricName = (name2) => `${this.#prefix}_${name2}`;
   #addMetric = (collection, MetricType, { name: name2, help, labelNames }) => {
@@ -861,7 +886,10 @@ var MeasureWebhookTimeout = class {
   timeout = 0;
   constructor(webhookType) {
     this.#webhookType = webhookType;
-    metricsCollector.addCounter(`${webhookType}_timeouts`, `Number of ${webhookType} webhook timeouts`);
+    metricsCollector.addCounter(
+      `${webhookType}_timeouts`,
+      `Number of ${webhookType} webhook timeouts`
+    );
   }
   start(timeout = 10) {
     this.#startTime = getNow();
@@ -903,11 +931,20 @@ var definedNameRegex = (0, import_ramda3.pipe)(
 var definesNameRegex = (0, import_ramda3.pipe)(definedNameRegex, (0, import_ramda3.equals)(""), import_ramda3.not);
 var definedNamespaces = (0, import_ramda3.pipe)((binding) => binding?.filters?.namespaces, (0, import_ramda3.defaultTo)([]));
 var definesNamespaces = (0, import_ramda3.pipe)(definedNamespaces, (0, import_ramda3.equals)([]), import_ramda3.not);
-var definedNamespaceRegexes = (0, import_ramda3.pipe)((binding) => binding?.filters?.regexNamespaces, (0, import_ramda3.defaultTo)([]));
+var definedNamespaceRegexes = (0, import_ramda3.pipe)(
+  (binding) => binding?.filters?.regexNamespaces,
+  (0, import_ramda3.defaultTo)([])
+);
 var definesNamespaceRegexes = (0, import_ramda3.pipe)(definedNamespaceRegexes, (0, import_ramda3.equals)([]), import_ramda3.not);
-var definedAnnotations = (0, import_ramda3.pipe)((binding) => binding?.filters?.annotations, (0, import_ramda3.defaultTo)({}));
+var definedAnnotations = (0, import_ramda3.pipe)(
+  (binding) => binding?.filters?.annotations,
+  (0, import_ramda3.defaultTo)({})
+);
 var definesAnnotations = (0, import_ramda3.pipe)(definedAnnotations, (0, import_ramda3.equals)({}), import_ramda3.not);
-var definedLabels = (0, import_ramda3.pipe)((binding) => binding?.filters?.labels, (0, import_ramda3.defaultTo)({}));
+var definedLabels = (0, import_ramda3.pipe)(
+  (binding) => binding?.filters?.labels,
+  (0, import_ramda3.defaultTo)({})
+);
 var definesLabels = (0, import_ramda3.pipe)(definedLabels, (0, import_ramda3.equals)({}), import_ramda3.not);
 var definedEvent = (binding) => {
   return binding.event;
@@ -925,7 +962,11 @@ var definesKind = (0, import_ramda3.pipe)(definedKind, (0, import_ramda3.equals)
 var definedCallback = (binding) => {
   return binding.isFinalize ? binding.finalizeCallback : binding.isWatch ? binding.watchCallback : binding.isMutate ? binding.mutateCallback : binding.isValidate ? binding.validateCallback : null;
 };
-var definedCallbackName = (0, import_ramda3.pipe)(definedCallback, (0, import_ramda3.defaultTo)({ name: "" }), (callback) => callback.name);
+var definedCallbackName = (0, import_ramda3.pipe)(
+  definedCallback,
+  (0, import_ramda3.defaultTo)({ name: "" }),
+  (callback) => callback.name
+);
 
 // src/lib/filter/adjudicators/kubernetesObject.ts
 var import_ramda4 = require("ramda");
@@ -996,7 +1037,10 @@ var carriesIgnoredNamespace = (0, import_ramda4.allPass)([
 
 // src/lib/filter/adjudicators/postCollection.ts
 var bindsToKind = (0, import_ramda5.curry)(
-  (0, import_ramda5.allPass)([(0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), definedKind, (0, import_ramda5.equals)(""), import_ramda5.not), (0, import_ramda5.pipe)((binding, kind3) => definedKind(binding) === kind3)])
+  (0, import_ramda5.allPass)([
+    (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), definedKind, (0, import_ramda5.equals)(""), import_ramda5.not),
+    (0, import_ramda5.pipe)((binding, kind3) => definedKind(binding) === kind3)
+  ])
 );
 var bindsToNamespace = (0, import_ramda5.curry)((0, import_ramda5.pipe)(bindsToKind(import_ramda5.__, "Namespace")));
 var misboundNamespace = (0, import_ramda5.allPass)([bindsToNamespace, definesNamespaces]);
@@ -1040,7 +1084,10 @@ var unbindableNamespaces = (0, import_ramda5.allPass)([
     import_ramda5.not
   )
 ]);
-var misboundDeleteWithDeletionTimestamp = (0, import_ramda5.allPass)([definesDelete, definesDeletionTimestamp]);
+var misboundDeleteWithDeletionTimestamp = (0, import_ramda5.allPass)([
+  definesDelete,
+  definesDeletionTimestamp
+]);
 
 // src/lib/filter/adjudicators/admissionRequest.ts
 var import_ramda6 = require("ramda");
@@ -1060,7 +1107,10 @@ var declaredKind = (0, import_ramda6.pipe)(
   (request) => request?.kind?.kind,
   (0, import_ramda6.defaultTo)("")
 );
-var declaredUid = (0, import_ramda6.pipe)((request) => request?.uid, (0, import_ramda6.defaultTo)(""));
+var declaredUid = (0, import_ramda6.pipe)(
+  (request) => request?.uid,
+  (0, import_ramda6.defaultTo)("")
+);
 
 // src/lib/filter/adjudicators/mismatch.ts
 var import_ramda7 = require("ramda");
@@ -1074,11 +1124,17 @@ var mismatchedName = (0, import_ramda7.allPass)([
 ]);
 var mismatchedNameRegex = (0, import_ramda7.allPass)([
   (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesNameRegex),
-  (0, import_ramda7.pipe)((binding, kubernetesObject) => new RegExp(definedNameRegex(binding)).test(carriedName(kubernetesObject)), import_ramda7.not)
+  (0, import_ramda7.pipe)(
+    (binding, kubernetesObject) => new RegExp(definedNameRegex(binding)).test(carriedName(kubernetesObject)),
+    import_ramda7.not
+  )
 ]);
 var mismatchedNamespace = (0, import_ramda7.allPass)([
   (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesNamespaces),
-  (0, import_ramda7.pipe)((binding, kubernetesObject) => definedNamespaces(binding).includes(carriedNamespace(kubernetesObject)), import_ramda7.not)
+  (0, import_ramda7.pipe)(
+    (binding, kubernetesObject) => definedNamespaces(binding).includes(carriedNamespace(kubernetesObject)),
+    import_ramda7.not
+  )
 ]);
 var mismatchedNamespaceRegex = (0, import_ramda7.allPass)([
   (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesNamespaceRegexes),
@@ -1105,11 +1161,15 @@ var metasMismatch = (0, import_ramda7.pipe)(
 );
 var mismatchedAnnotations = (0, import_ramda7.allPass)([
   (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesAnnotations),
-  (0, import_ramda7.pipe)((binding, kubernetesObject) => metasMismatch(definedAnnotations(binding), carriedAnnotations(kubernetesObject)))
+  (0, import_ramda7.pipe)(
+    (binding, kubernetesObject) => metasMismatch(definedAnnotations(binding), carriedAnnotations(kubernetesObject))
+  )
 ]);
 var mismatchedLabels = (0, import_ramda7.allPass)([
   (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesLabels),
-  (0, import_ramda7.pipe)((binding, kubernetesObject) => metasMismatch(definedLabels(binding), carriedLabels(kubernetesObject)))
+  (0, import_ramda7.pipe)(
+    (binding, kubernetesObject) => metasMismatch(definedLabels(binding), carriedLabels(kubernetesObject))
+  )
 ]);
 var mismatchedEvent = (0, import_ramda7.pipe)(
   (binding, request) => operationMatchesEvent(declaredOperation(request), definedEvent(binding)),
@@ -1130,7 +1190,9 @@ var mismatchedKind = (0, import_ramda7.allPass)([
 var operationMatchesEvent = (0, import_ramda7.anyPass)([
   (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(1), (0, import_ramda7.equals)("*" /* ANY */)),
   (0, import_ramda7.pipe)((operation, event) => operation.valueOf() === event.valueOf()),
-  (0, import_ramda7.pipe)((operation, event) => operation ? event.includes(operation) : false)
+  (0, import_ramda7.pipe)(
+    (operation, event) => operation ? event.includes(operation) : false
+  )
 ]);
 
 // src/lib/filter/filter.ts
@@ -1598,7 +1660,10 @@ async function processRequest2(binding, actionMetadata, peprValidateRequest) {
         message: callbackResp.statusMessage || `Validation failed for ${name}`
       };
     }
-    logger_default.info(actionMetadata, `Validation action complete (${label}): ${callbackResp.allowed ? "allowed" : "denied"}`);
+    logger_default.info(
+      actionMetadata,
+      `Validation action complete (${label}): ${callbackResp.allowed ? "allowed" : "denied"}`
+    );
     return valResp;
   } catch (e) {
     logger_default.error(actionMetadata, `Action failed: ${JSON.stringify(e)}`);
@@ -1909,7 +1974,9 @@ var Controller = class _Controller {
   /** Start the webhook server */
   startServer = (port) => {
     if (this.#running) {
-      throw new Error("Cannot start Pepr module: Pepr module was not instantiated with deferStart=true");
+      throw new Error(
+        "Cannot start Pepr module: Pepr module was not instantiated with deferStart=true"
+      );
     }
     const options = {
       key: import_fs.default.readFileSync(process.env.SSL_KEY_PATH || "/etc/certs/tls.key"),
@@ -2007,7 +2074,10 @@ var Controller = class _Controller {
           gvk: request?.kind || { group: "", version: "", kind: "" }
         };
         const reqMetadata = { uid: request.uid, namespace: namespace2, name: name2 };
-        logger_default.info({ ...reqMetadata, gvk, operation: request.operation, admissionKind }, "Incoming request");
+        logger_default.info(
+          { ...reqMetadata, gvk, operation: request.operation, admissionKind },
+          "Incoming request"
+        );
         logger_default.debug({ ...reqMetadata, request }, "Incoming request body");
         if (typeof this.#beforeHook === "function") {
           this.#beforeHook(request || {});
@@ -2212,7 +2282,9 @@ var eventToPhaseMap = {
 };
 function setupWatch(capabilities, ignoredNamespaces) {
   capabilities.map(
-    (capability) => capability.bindings.filter((binding) => binding.isWatch).forEach((bindingElement) => runBinding(bindingElement, capability.namespaces, ignoredNamespaces))
+    (capability) => capability.bindings.filter((binding) => binding.isWatch).forEach(
+      (bindingElement) => runBinding(bindingElement, capability.namespaces, ignoredNamespaces)
+    )
   );
 }
 async function runBinding(binding, capabilityNamespaces, ignoredNamespaces) {
@@ -2221,7 +2293,12 @@ async function runBinding(binding, capabilityNamespaces, ignoredNamespaces) {
   const watchCallback = async (kubernetesObject, phase) => {
     if (phaseMatch.includes(phase)) {
       try {
-        const filterMatch = filterNoMatchReason(binding, kubernetesObject, capabilityNamespaces, ignoredNamespaces);
+        const filterMatch = filterNoMatchReason(
+          binding,
+          kubernetesObject,
+          capabilityNamespaces,
+          ignoredNamespaces
+        );
         if (filterMatch !== "") {
           logger_default.debug(filterMatch);
           return;
@@ -2248,21 +2325,27 @@ async function runBinding(binding, capabilityNamespaces, ignoredNamespaces) {
       const meta = kubernetesObject.metadata;
       const resource = `${meta.namespace || "ClusterScoped"}/${meta.name}`;
       if (shouldRemoveFinalizer === false) {
-        logger_default.debug({ obj: kubernetesObject }, `Skipping removal of finalizer '${peprFinal}' from '${resource}'`);
+        logger_default.debug(
+          { obj: kubernetesObject },
+          `Skipping removal of finalizer '${peprFinal}' from '${resource}'`
+        );
       } else {
         await removeFinalizer(binding, kubernetesObject);
       }
     }
   };
-  const watcher = (0, import_kubernetes_fluent_client6.K8s)(binding.model, { ...binding.filters, kindOverride: binding.kind }).Watch(async (obj, phase) => {
-    logger_default.debug(obj, `Watch event ${phase} received`);
-    if (binding.isQueue) {
-      const queue = getOrCreateQueue(obj);
-      await queue.enqueue(obj, phase, watchCallback);
-    } else {
-      await watchCallback(obj, phase);
-    }
-  }, watchCfg);
+  const watcher = (0, import_kubernetes_fluent_client6.K8s)(binding.model, { ...binding.filters, kindOverride: binding.kind }).Watch(
+    async (obj, phase) => {
+      logger_default.debug(obj, `Watch event ${phase} received`);
+      if (binding.isQueue) {
+        const queue = getOrCreateQueue(obj);
+        await queue.enqueue(obj, phase, watchCallback);
+      } else {
+        await watchCallback(obj, phase);
+      }
+    },
+    watchCfg
+  );
   registerWatchEventHandlers(watcher, logEvent, metricsCollector);
   try {
     await watcher.start();
@@ -2288,7 +2371,10 @@ function registerWatchEventHandlers(watcher, logEvent2, metricsCollector2) {
     },
     [import_kubernetes_fluent_client6.WatchEvent.CONNECT]: (url) => logEvent2(import_kubernetes_fluent_client6.WatchEvent.CONNECT, url),
     [import_kubernetes_fluent_client6.WatchEvent.DATA_ERROR]: (err) => logEvent2(import_kubernetes_fluent_client6.WatchEvent.DATA_ERROR, err.message),
-    [import_kubernetes_fluent_client6.WatchEvent.RECONNECT]: (retryCount) => logEvent2(import_kubernetes_fluent_client6.WatchEvent.RECONNECT, `Reconnecting after ${retryCount} attempt${retryCount === 1 ? "" : "s"}`),
+    [import_kubernetes_fluent_client6.WatchEvent.RECONNECT]: (retryCount) => logEvent2(
+      import_kubernetes_fluent_client6.WatchEvent.RECONNECT,
+      `Reconnecting after ${retryCount} attempt${retryCount === 1 ? "" : "s"}`
+    ),
     [import_kubernetes_fluent_client6.WatchEvent.RECONNECT_PENDING]: () => logEvent2(import_kubernetes_fluent_client6.WatchEvent.RECONNECT_PENDING),
     [import_kubernetes_fluent_client6.WatchEvent.ABORT]: (err) => logEvent2(import_kubernetes_fluent_client6.WatchEvent.ABORT, err.message),
     [import_kubernetes_fluent_client6.WatchEvent.OLD_RESOURCE_VERSION]: (errMessage) => logEvent2(import_kubernetes_fluent_client6.WatchEvent.OLD_RESOURCE_VERSION, errMessage),