pepr 0.51.0 → 0.51.2

package/package.json

@@ -17,7 +17,7 @@
     "!dist/**/*.test.d.ts*",
     "!src/cli/docs/**"
   ],
-  "version": "0.51.0",
+  "version": "0.51.2",
   "main": "dist/lib.js",
   "types": "dist/lib.d.ts",
   "scripts": {
@@ -45,18 +45,19 @@
     "test:journey:unicorn": "npm run test:journey:k3d && npm run test:journey:image:unicorn && npm run test:journey:run",
     "test:journey:upgrade": "npm run test:journey:k3d && npm run test:journey:image && jest --detectOpenHandles journey/pepr-upgrade.test.ts",
     "test:unit": "npm run gen-data-json && jest src --coverage --detectOpenHandles --coverageDirectory=./coverage --testPathIgnorePatterns=\"build-artifact.test.ts|src/cli/docs/.*\\.test\\.ts\"",
-    "format:check": "eslint --ignore-pattern src/templates/eslint.config.mjs  src && prettier --config .prettierrc src --check",
-    "format:fix": "eslint --fix --ignore-pattern src/templates/eslint.config.mjs  src && prettier --config .prettierrc src --write",
+    "format:check": "eslint --ignore-pattern src/templates/eslint.config.mjs  src && prettier --config .prettierrc src --check && npx -y markdownlint-cli --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore pepr-upgrade-test --ignore node_modules \"**/*.md\"",
+    "format:fix": "eslint --fix --ignore-pattern src/templates/eslint.config.mjs  src && prettier --config .prettierrc src --write && npx -y markdownlint-cli --fix --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore pepr-upgrade-test --ignore node_modules \"**/*.md\"",
     "prepare": "if [ \"$NODE_ENV\" != 'production' ]; then husky; fi"
   },
   "dependencies": {
     "@types/ramda": "0.30.2",
+    "commander": "14.0.0",
     "express": "5.1.0",
     "fast-json-patch": "3.1.1",
     "heredoc": "^1.3.1",
     "http-status-codes": "^2.3.0",
     "json-pointer": "^0.6.2",
-    "kubernetes-fluent-client": "3.5.5",
+    "kubernetes-fluent-client": "3.5.6",
     "pino": "9.7.0",
     "pino-pretty": "13.0.0",
     "prom-client": "15.1.3",
@@ -91,7 +92,6 @@
     "@types/prompts": "2.4.9",
     "@typescript-eslint/eslint-plugin": "8.32.1",
     "@typescript-eslint/parser": "8.32.1",
-    "commander": "14.0.0",
     "esbuild": "0.25.0",
     "eslint": "^9.26.0",
     "node-forge": "1.3.1",

package/src/cli/build.ts

@@ -82,7 +82,7 @@ export default function (program: RootCmd): void {
     .addOption(
       new Option(
         "-r, --registry-info [<registry>/<username>]",
-        "Provide the image registry and username for building and pushing a custom WASM container. Requires authentication. Builds and pushes 'registry/username/custom-pepr-controller:<current-version>'.",
+        "Provide the image registry and username for building and pushing a custom WASM container. Requires authentication. Builds and pushes `'registry/username/custom-pepr-controller:<current-version>'`.",
       ).conflicts(["customImage", "registry"]),
     )
 

package/src/cli/dev.ts

@@ -29,7 +29,8 @@ export default function (program: RootCmd): void {
 
         // Exit if the user doesn't confirm
         if (!confirm.confirm) {
-          process.exit(0);
+          process.exitCode = 0;
+          return;
         }
       }
 
@@ -67,8 +68,10 @@ export default function (program: RootCmd): void {
           try {
             // wait for capabilities to be loaded and test names
             validateCapabilityNames(webhook.capabilities);
-          } catch (e) {
-            console.error(`Error validating capability names:`, e);
+          } catch (error) {
+            console.error(
+              `CapabilityValidation Error - Unable to valide capability name(s) in: '${webhook.capabilities.map(item => item.name)}'\n${error}`,
+            );
             process.exit(1);
           }
 

package/src/cli/init/templates.ts

@@ -68,7 +68,7 @@ export function genPkgJSON(opts: InitOptions, pgkVerOverride?: string): peprPack
     description: opts.description,
     keywords: ["pepr", "k8s", "policy-engine", "pepr-module", "security"],
     engines: {
-      node: ">=18.0.0",
+      node: ">=20.0.0",
     },
     pepr: {
       uuid: pgkVerOverride ? "static-test" : uuid,

package/src/cli/update/index.ts

@@ -56,7 +56,7 @@ export default function (program: RootCmd): void {
         console.log(`✅ Module updated successfully`);
       } catch (e) {
         console.error(`Error updating Pepr module:`, e);
-        process.exit(1);
+        process.exitCode = 1;
       }
     });
 
@@ -87,9 +87,10 @@ export default function (program: RootCmd): void {
             await write(tsPath, helloPepr.data);
           }
         }
+        throw new Error("another error, for testing");
       } catch (e) {
         console.error(`Error updating template files:`, e);
-        process.exit(1);
+        process.exitCode = 1;
       }
     });
 }

package/src/lib/assets/pods.ts

@@ -99,7 +99,7 @@ export function getWatcher(
           terminationGracePeriodSeconds: 5,
           serviceAccountName: name,
           securityContext: {
-            runAsUser: 65532,
+            runAsUser: image.includes("private") ? 1000 : 65532,
             runAsGroup: 65532,
             runAsNonRoot: true,
             fsGroup: 65532,
@@ -142,7 +142,7 @@ export function getWatcher(
                 },
               },
               securityContext: {
-                runAsUser: 65532,
+                runAsUser: image.includes("private") ? 1000 : 65532,
                 runAsGroup: 65532,
                 runAsNonRoot: true,
                 allowPrivilegeEscalation: false,
@@ -238,7 +238,7 @@ export function getDeployment(
           priorityClassName: "system-node-critical",
           serviceAccountName: name,
           securityContext: {
-            runAsUser: 65532,
+            runAsUser: image.includes("private") ? 1000 : 65532,
             runAsGroup: 65532,
             runAsNonRoot: true,
             fsGroup: 65532,
@@ -282,7 +282,7 @@ export function getDeployment(
               },
               env: genEnv(config),
               securityContext: {
-                runAsUser: 65532,
+                runAsUser: image.includes("private") ? 1000 : 65532,
                 runAsGroup: 65532,
                 runAsNonRoot: true,
                 allowPrivilegeEscalation: false,

package/src/lib/assets/yaml/overridesFile.ts

@@ -57,7 +57,7 @@ export async function overridesFile(
         "pepr.dev/uuid": config.uuid,
       },
       securityContext: {
-        runAsUser: 65532,
+        runAsUser: image.includes("private") ? 1000 : 65532,
         runAsGroup: 65532,
         runAsNonRoot: true,
         fsGroup: 65532,
@@ -89,7 +89,7 @@ export async function overridesFile(
         },
       },
       containerSecurityContext: {
-        runAsUser: 65532,
+        runAsUser: image.includes("private") ? 1000 : 65532,
         runAsGroup: 65532,
         runAsNonRoot: true,
         allowPrivilegeEscalation: false,
@@ -123,7 +123,7 @@ export async function overridesFile(
         "pepr.dev/uuid": config.uuid,
       },
       securityContext: {
-        runAsUser: 65532,
+        runAsUser: image.includes("private") ? 1000 : 65532,
         runAsGroup: 65532,
         runAsNonRoot: true,
         fsGroup: 65532,
@@ -155,7 +155,7 @@ export async function overridesFile(
         },
       },
       containerSecurityContext: {
-        runAsUser: 65532,
+        runAsUser: image.includes("private") ? 1000 : 65532,
         runAsGroup: 65532,
         runAsNonRoot: true,
         allowPrivilegeEscalation: false,

package/src/lib/core/capability.ts

@@ -249,9 +249,9 @@ export class Capability implements CapabilityExport {
           ...binding,
           isValidate: true,
           validateCallback: async (req, logger = aliasLogger) => {
-            Log.info(
-              `Executing validate action with alias: ${binding.alias || "no alias provided"}`,
-            );
+            if (binding.alias) {
+              Log.info(`Executing validate action with alias: ${binding.alias}`);
+            }
             return await validateCallback(req, logger);
           },
         });
@@ -273,9 +273,9 @@ export class Capability implements CapabilityExport {
           ...binding,
           isMutate: true,
           mutateCallback: async (req, logger = aliasLogger) => {
-            Log.info(
-              `Executing mutation action with alias: ${binding.alias || "no alias provided"}`,
-            );
+            if (binding.alias) {
+              Log.info(`Executing mutation action with alias: ${binding.alias}`);
+            }
             await mutateCallback(req, logger);
           },
         });
@@ -300,7 +300,9 @@ export class Capability implements CapabilityExport {
           ...binding,
           isWatch: true,
           watchCallback: async (update, phase, logger = aliasLogger) => {
-            Log.info(`Executing watch action with alias: ${binding.alias || "no alias provided"}`);
+            if (binding.alias) {
+              Log.info(`Executing watch action with alias: ${binding.alias}`);
+            }
             await watchCallback(update, phase, logger);
           },
         });
@@ -324,9 +326,9 @@ export class Capability implements CapabilityExport {
           isWatch: true,
           isQueue: true,
           watchCallback: async (update, phase, logger = aliasLogger) => {
-            Log.info(
-              `Executing reconcile action with alias: ${binding.alias || "no alias provided"}`,
-            );
+            if (binding.alias) {
+              Log.info(`Executing reconcile action with alias: ${binding.alias}`);
+            }
             await reconcileCallback(update, phase, logger);
           },
         });
@@ -363,9 +365,9 @@ export class Capability implements CapabilityExport {
             update: InstanceType<T>,
             logger = aliasLogger,
           ): Promise<boolean | void> => {
-            Log.info(
-              `Executing finalize action with alias: ${binding.alias || "no alias provided"}`,
-            );
+            if (binding.alias) {
+              Log.info(`Executing finalize action with alias: ${binding.alias}`);
+            }
             return await finalizeCallback(update, logger);
           },
         };

package/src/templates/README.md

@@ -10,7 +10,7 @@ per-capability or common logic in shared files or folders.
 
 Example Structure:
 
-```
+```text
 Module Root
 ├── package.json
 ├── pepr.ts