pepr 1.2.2 → 1.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/dist/cli/init/templates.d.ts +1 -0
  2. package/dist/cli/init/templates.d.ts.map +1 -1
  3. package/dist/cli.js +43 -19
  4. package/dist/controller.js +14 -15
  5. package/dist/lib/assets/helm.d.ts.map +1 -1
  6. package/dist/lib/assets/k8sObjects.d.ts.map +1 -1
  7. package/dist/lib/assets/yaml/overridesFile.d.ts.map +1 -1
  8. package/package.json +14 -15
  9. package/src/cli/init/templates.ts +6 -2
  10. package/src/lib/assets/helm.ts +7 -3
  11. package/src/lib/assets/k8sObjects.ts +16 -0
  12. package/src/lib/assets/yaml/overridesFile.ts +8 -0
package/dist/cli/init/templates.d.ts CHANGED
@@ -117,6 +117,7 @@ export type peprPackageJSON = {
117
117
  undici: string;
118
118
  };
119
119
  devDependencies: {
120
+ "@types/node": string;
120
121
  typescript: string;
121
122
  };
122
123
  };
package/dist/cli/init/templates.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/cli/init/templates.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,YAAY,IAAI,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAIrE,eAAO,MAAQ,YAAY;;;;;;;;;;;;;;;;GAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;GAAE,gBAAgB;;;;;;;;GAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAAE,OAAO,QAAgB,CAAC;AAEjG,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1B,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,OAAO,CAAC;YACjB,cAAc,EAAE,MAAM,CAAC;YACvB,YAAY,EAAE,YAAY,CAAC;YAC3B,YAAY,EAAE;gBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;aAAE,CAAC;YACvC,SAAS,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YACtD,KAAK,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YAClD,aAAa,EAAE,MAAM,EAAE,CAAC;YACxB,GAAG,EAAE,MAAM,CAAC;YACZ,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,EAAE,QAAQ,CAAC;SACrB,CAAC;QACF,OAAO,EAAE;YAAE,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACjC,YAAY,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/C,eAAe,EAAE;YAAE,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;KACzC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,CA4D7D;AAED,eAAO,MAAM,cAAc;;;CAG1B,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,WAAW;;;CAGvB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;CAGnB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;CAGxB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAgBlB,CAAC"}
1
+ {"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/cli/init/templates.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,YAAY,IAAI,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAIrE,eAAO,MAAQ,YAAY;;;;;;;;;;;;;;;;GAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;GAAE,gBAAgB;;;;;;;;GAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAAE,OAAO,QAAgB,CAAC;AAEjG,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1B,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,OAAO,CAAC;YACjB,cAAc,EAAE,MAAM,CAAC;YACvB,YAAY,EAAE,YAAY,CAAC;YAC3B,YAAY,EAAE;gBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;aAAE,CAAC;YACvC,SAAS,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YACtD,KAAK,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YAClD,aAAa,EAAE,MAAM,EAAE,CAAC;YACxB,GAAG,EAAE,MAAM,CAAC;YACZ,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,EAAE,QAAQ,CAAC;SACrB,CAAC;QACF,OAAO,EAAE;YAAE,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACjC,YAAY,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/C,eAAe,EAAE;YACf,aAAa,EAAE,MAAM,CAAC;YACtB,UAAU,EAAE,MAAM,CAAC;SACpB,CAAC;KACH,CAAC;IACF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,CA6D7D;AAED,eAAO,MAAM,cAAc;;;CAG1B,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,WAAW;;;CAGvB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;CAGnB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;CAGxB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAgBlB,CAAC"}
package/dist/cli.js CHANGED
@@ -7423,7 +7423,7 @@ function clusterRoleTemplate() {
7423
7423
  metadata:
7424
7424
  name: {{ .Values.uuid }}
7425
7425
  namespace: pepr-system
7426
- rules:
7426
+ rules:
7427
7427
  {{- if .Values.rbac }}
7428
7428
  {{- toYaml .Values.rbac | nindent 2 }}
7429
7429
  {{- end }}
@@ -7495,7 +7495,7 @@ function watcherDeployTemplate(buildTimestamp, type) {
7495
7495
  pepr.dev/controller: watcher
7496
7496
  template:
7497
7497
  metadata:
7498
- annotations:
7498
+ annotations:
7499
7499
  buildTimestamp: "${buildTimestamp}"
7500
7500
  {{- if .Values.watcher.podAnnotations }}
7501
7501
  {{- toYaml .Values.watcher.podAnnotations | nindent 8 }}
@@ -7530,6 +7530,8 @@ function watcherDeployTemplate(buildTimestamp, type) {
7530
7530
  args:
7531
7531
  - /app/node_modules/pepr/dist/controller.js
7532
7532
  - {{ .Values.hash }}
7533
+ startupProbe:
7534
+ {{- toYaml .Values.watcher.startupProbe | nindent 12 }}
7533
7535
  readinessProbe:
7534
7536
  {{- toYaml .Values.watcher.readinessProbe | nindent 12 }}
7535
7537
  livenessProbe:
@@ -7644,6 +7646,8 @@ function admissionDeployTemplate(buildTimestamp, type) {
7644
7646
  args:
7645
7647
  - /app/node_modules/pepr/dist/controller.js
7646
7648
  - {{ .Values.hash }}
7649
+ startupProbe:
7650
+ {{- toYaml .Values.admission.startupProbe | nindent 12 }}
7647
7651
  readinessProbe:
7648
7652
  {{- toYaml .Values.admission.readinessProbe | nindent 12 }}
7649
7653
  livenessProbe:
@@ -7686,7 +7690,7 @@ function admissionDeployTemplate(buildTimestamp, type) {
7686
7690
  secretName: {{ .Values.uuid }}-api-path
7687
7691
  - name: module
7688
7692
  secret:
7689
- secretName: {{ .Values.uuid }}-module
7693
+ secretName: {{ .Values.uuid }}-module
7690
7694
  {{- if .Values.admission.extraVolumes }}
7691
7695
  {{- toYaml .Values.admission.extraVolumes | nindent 8 }}
7692
7696
  {{- end }}
@@ -8223,6 +8227,10 @@ function runIdsForImage(image) {
8223
8227
  }
8224
8228
  function commonProbes() {
8225
8229
  return {
8230
+ startupProbe: {
8231
+ httpGet: { path: "/healthz", port: 3e3, scheme: "HTTPS" },
8232
+ initialDelaySeconds: 10
8233
+ },
8226
8234
  readinessProbe: {
8227
8235
  httpGet: { path: "/healthz", port: 3e3, scheme: "HTTPS" },
8228
8236
  initialDelaySeconds: 10
@@ -8743,6 +8751,14 @@ function getWatcher(assets, hash, buildTimestamp, imagePullSecret) {
8743
8751
  image,
8744
8752
  imagePullPolicy: "IfNotPresent",
8745
8753
  args: ["/app/node_modules/pepr/dist/controller.js", hash],
8754
+ startupProbe: {
8755
+ httpGet: {
8756
+ path: "/healthz",
8757
+ port: 3e3,
8758
+ scheme: "HTTPS"
8759
+ },
8760
+ initialDelaySeconds: 10
8761
+ },
8746
8762
  readinessProbe: {
8747
8763
  httpGet: {
8748
8764
  path: "/healthz",
@@ -8876,6 +8892,14 @@ function getDeployment(assets, hash, buildTimestamp, imagePullSecret) {
8876
8892
  image,
8877
8893
  imagePullPolicy: "IfNotPresent",
8878
8894
  args: ["/app/node_modules/pepr/dist/controller.js", hash],
8895
+ startupProbe: {
8896
+ httpGet: {
8897
+ path: "/healthz",
8898
+ port: 3e3,
8899
+ scheme: "HTTPS"
8900
+ },
8901
+ initialDelaySeconds: 10
8902
+ },
8879
8903
  readinessProbe: {
8880
8904
  httpGet: {
8881
8905
  path: "/healthz",
@@ -9636,7 +9660,7 @@ var packageJSON = {
9636
9660
  bin: "dist/cli.js",
9637
9661
  repository: "defenseunicorns/pepr",
9638
9662
  engines: {
9639
- node: ">=20.0.0"
9663
+ node: ">=22.19.0"
9640
9664
  },
9641
9665
  files: [
9642
9666
  "/dist",
@@ -9645,7 +9669,7 @@ var packageJSON = {
9645
9669
  "!src/fixtures/**",
9646
9670
  "!dist/**/*.test.d.ts*"
9647
9671
  ],
9648
- version: "1.2.2",
9672
+ version: "1.3.0",
9649
9673
  main: "dist/lib.js",
9650
9674
  types: "dist/lib.d.ts",
9651
9675
  scripts: {
@@ -9659,7 +9683,7 @@ var packageJSON = {
9659
9683
  "format:check": "npm run format:src && npm run format:tests && npm run format:markdown && npm run format:integration && npm run format:prettier -- --check",
9660
9684
  "format:fix": "npm run format:src -- --fix && npm run format:markdown -- --fix && npm run format:integration -- --fix && npm run format:prettier -- --write",
9661
9685
  "format:integration": "eslint --config config/eslint.integration.config.mjs integration/cli integration/helpers",
9662
- "format:markdown": 'npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --rules config/markdownlint-step-format-rule.js "**/*.md"',
9686
+ "format:markdown": 'npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --ignore CHANGELOG.md --rules config/markdownlint-step-format-rule.js "**/*.md"',
9663
9687
  "format:prettier": "prettier --config config/.prettierrc src integration/cli/**/*.ts integration/helpers/**/*.ts",
9664
9688
  "format:src": "eslint --config config/eslint.root.config.mjs 'src/**/*.ts' '.github/workflows/scripts/**/*.ts' --ignore-pattern '**/*.test.ts' --ignore-pattern 'src/templates/**'",
9665
9689
  "format:tests": "eslint --config config/eslint.test.config.mjs 'src/**/*.test.ts'",
@@ -9678,16 +9702,16 @@ var packageJSON = {
9678
9702
  "test:upgrade:upstream": "npm run cluster:k3d && npm run cluster:k3d:import-upstream && vitest run integration/cluster/upgrade.test.ts"
9679
9703
  },
9680
9704
  dependencies: {
9681
- "@types/ramda": "0.31.1",
9682
- "@typescript-eslint/eslint-plugin": "8.59.4",
9683
- "@typescript-eslint/parser": "8.59.4",
9705
+ "@types/ramda": "0.32.0",
9706
+ "@typescript-eslint/eslint-plugin": "8.63.0",
9707
+ "@typescript-eslint/parser": "8.63.0",
9684
9708
  commander: "14.0.3",
9685
9709
  eslint: "9.39.4",
9686
9710
  express: "5.2.1",
9687
9711
  "fast-json-patch": "3.1.1",
9688
9712
  "http-status-codes": "^2.3.0",
9689
9713
  "json-pointer": "^0.6.2",
9690
- "kubernetes-fluent-client": "3.11.7",
9714
+ "kubernetes-fluent-client": "3.11.10",
9691
9715
  pino: "10.3.1",
9692
9716
  "pino-pretty": "13.1.3",
9693
9717
  "prom-client": "15.1.3",
@@ -9695,13 +9719,13 @@ var packageJSON = {
9695
9719
  ramda: "0.32.0"
9696
9720
  },
9697
9721
  devDependencies: {
9698
- "@commitlint/cli": "21.0.1",
9699
- "@commitlint/config-conventional": "21.0.1",
9722
+ "@commitlint/cli": "21.2.1",
9723
+ "@commitlint/config-conventional": "21.2.0",
9700
9724
  "@types/command-line-args": "^5.2.3",
9701
9725
  "@types/express": "5.0.6",
9702
9726
  "@types/json-pointer": "^1.0.34",
9703
9727
  "@types/json-schema": "^7.0.15",
9704
- "@types/node": "25.x.x",
9728
+ "@types/node": "^24.13.3",
9705
9729
  "@types/node-forge": "1.3.14",
9706
9730
  "@types/readable-stream": "^4.0.21",
9707
9731
  "@types/urijs": "^1.19.25",
@@ -9714,15 +9738,14 @@ var packageJSON = {
9714
9738
  selfsigned: "^5.5.0",
9715
9739
  shellcheck: "^4.1.0",
9716
9740
  tsx: "^4.20.3",
9717
- undici: "7.24.2",
9741
+ undici: "8.7.0",
9718
9742
  vitest: "^4.0.4"
9719
9743
  },
9720
9744
  overrides: {
9721
- glob: "^9.0.0",
9722
- rollup: "4.59.0",
9723
- "brace-expansion": "^5.0.6",
9745
+ "brace-expansion": "^5.0.7",
9724
9746
  "ip-address": "^10.1.1",
9725
- tar: "^7.5.16"
9747
+ tar: "^7.5.16",
9748
+ "fast-uri": "^3.1.4"
9726
9749
  },
9727
9750
  peerDependencies: {
9728
9751
  "@types/prompts": "^2.4.9",
@@ -9778,7 +9801,7 @@ function genPkgJSON(opts) {
9778
9801
  description: opts.description,
9779
9802
  keywords: ["pepr", "k8s", "policy-engine", "pepr-module", "security"],
9780
9803
  engines: {
9781
- node: ">=20.0.0"
9804
+ node: ">=22.19.0"
9782
9805
  },
9783
9806
  pepr: {
9784
9807
  uuid,
@@ -9813,6 +9836,7 @@ function genPkgJSON(opts) {
9813
9836
  undici: "^7.0.1"
9814
9837
  },
9815
9838
  devDependencies: {
9839
+ "@types/node": devDependencies["@types/node"],
9816
9840
  typescript
9817
9841
  },
9818
9842
  overrides: {
package/dist/controller.js CHANGED
@@ -69,7 +69,7 @@ var packageJSON = {
69
69
  bin: "dist/cli.js",
70
70
  repository: "defenseunicorns/pepr",
71
71
  engines: {
72
- node: ">=20.0.0"
72
+ node: ">=22.19.0"
73
73
  },
74
74
  files: [
75
75
  "/dist",
@@ -78,7 +78,7 @@ var packageJSON = {
78
78
  "!src/fixtures/**",
79
79
  "!dist/**/*.test.d.ts*"
80
80
  ],
81
- version: "1.2.2",
81
+ version: "1.3.0",
82
82
  main: "dist/lib.js",
83
83
  types: "dist/lib.d.ts",
84
84
  scripts: {
@@ -92,7 +92,7 @@ var packageJSON = {
92
92
  "format:check": "npm run format:src && npm run format:tests && npm run format:markdown && npm run format:integration && npm run format:prettier -- --check",
93
93
  "format:fix": "npm run format:src -- --fix && npm run format:markdown -- --fix && npm run format:integration -- --fix && npm run format:prettier -- --write",
94
94
  "format:integration": "eslint --config config/eslint.integration.config.mjs integration/cli integration/helpers",
95
- "format:markdown": 'npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --rules config/markdownlint-step-format-rule.js "**/*.md"',
95
+ "format:markdown": 'npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --ignore CHANGELOG.md --rules config/markdownlint-step-format-rule.js "**/*.md"',
96
96
  "format:prettier": "prettier --config config/.prettierrc src integration/cli/**/*.ts integration/helpers/**/*.ts",
97
97
  "format:src": "eslint --config config/eslint.root.config.mjs 'src/**/*.ts' '.github/workflows/scripts/**/*.ts' --ignore-pattern '**/*.test.ts' --ignore-pattern 'src/templates/**'",
98
98
  "format:tests": "eslint --config config/eslint.test.config.mjs 'src/**/*.test.ts'",
@@ -111,16 +111,16 @@ var packageJSON = {
111
111
  "test:upgrade:upstream": "npm run cluster:k3d && npm run cluster:k3d:import-upstream && vitest run integration/cluster/upgrade.test.ts"
112
112
  },
113
113
  dependencies: {
114
- "@types/ramda": "0.31.1",
115
- "@typescript-eslint/eslint-plugin": "8.59.4",
116
- "@typescript-eslint/parser": "8.59.4",
114
+ "@types/ramda": "0.32.0",
115
+ "@typescript-eslint/eslint-plugin": "8.63.0",
116
+ "@typescript-eslint/parser": "8.63.0",
117
117
  commander: "14.0.3",
118
118
  eslint: "9.39.4",
119
119
  express: "5.2.1",
120
120
  "fast-json-patch": "3.1.1",
121
121
  "http-status-codes": "^2.3.0",
122
122
  "json-pointer": "^0.6.2",
123
- "kubernetes-fluent-client": "3.11.7",
123
+ "kubernetes-fluent-client": "3.11.10",
124
124
  pino: "10.3.1",
125
125
  "pino-pretty": "13.1.3",
126
126
  "prom-client": "15.1.3",
@@ -128,13 +128,13 @@ var packageJSON = {
128
128
  ramda: "0.32.0"
129
129
  },
130
130
  devDependencies: {
131
- "@commitlint/cli": "21.0.1",
132
- "@commitlint/config-conventional": "21.0.1",
131
+ "@commitlint/cli": "21.2.1",
132
+ "@commitlint/config-conventional": "21.2.0",
133
133
  "@types/command-line-args": "^5.2.3",
134
134
  "@types/express": "5.0.6",
135
135
  "@types/json-pointer": "^1.0.34",
136
136
  "@types/json-schema": "^7.0.15",
137
- "@types/node": "25.x.x",
137
+ "@types/node": "^24.13.3",
138
138
  "@types/node-forge": "1.3.14",
139
139
  "@types/readable-stream": "^4.0.21",
140
140
  "@types/urijs": "^1.19.25",
@@ -147,15 +147,14 @@ var packageJSON = {
147
147
  selfsigned: "^5.5.0",
148
148
  shellcheck: "^4.1.0",
149
149
  tsx: "^4.20.3",
150
- undici: "7.24.2",
150
+ undici: "8.7.0",
151
151
  vitest: "^4.0.4"
152
152
  },
153
153
  overrides: {
154
- glob: "^9.0.0",
155
- rollup: "4.59.0",
156
- "brace-expansion": "^5.0.6",
154
+ "brace-expansion": "^5.0.7",
157
155
  "ip-address": "^10.1.1",
158
- tar: "^7.5.16"
156
+ tar: "^7.5.16",
157
+ "fast-uri": "^3.1.4"
159
158
  },
160
159
  peerDependencies: {
161
160
  "@types/prompts": "^2.4.9",
package/dist/lib/assets/helm.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../../src/lib/assets/helm.ts"],"names":[],"mappings":"AAGA,KAAK,cAAc,GAAG,WAAW,GAAG,SAAS,CAAC;AAE9C,wBAAgB,mBAAmB,IAAI,MAAM,CAY5C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAe1C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CA2BpE;AAED,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAmG1F;AAED,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAuH5F;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CA0BjF;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAoB1E"}
1
+ {"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../../src/lib/assets/helm.ts"],"names":[],"mappings":"AAGA,KAAK,cAAc,GAAG,WAAW,GAAG,SAAS,CAAC;AAE9C,wBAAgB,mBAAmB,IAAI,MAAM,CAY5C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAe1C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CA2BpE;AAED,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAqG1F;AAED,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAyH5F;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CA0BjF;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAoB1E"}
package/dist/lib/assets/k8sObjects.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"k8sObjects.d.ts","sourceRoot":"","sources":["../../../src/lib/assets/k8sObjects.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAGhD,OAAO,EAAE,MAAM,EAA+C,MAAM,UAAU,CAAC;AAG/E,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB,CAmBvF;AAED,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CA2IxB;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CAmJxB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAsBrF;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CA2BzE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CA2BhF"}
1
+ {"version":3,"file":"k8sObjects.d.ts","sourceRoot":"","sources":["../../../src/lib/assets/k8sObjects.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAGhD,OAAO,EAAE,MAAM,EAA+C,MAAM,UAAU,CAAC;AAG/E,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB,CAmBvF;AAED,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CAmJxB;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CA2JxB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAsBrF;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CA2BzE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CA2BhF"}
package/dist/lib/assets/yaml/overridesFile.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"overridesFile.d.ts","sourceRoot":"","sources":["../../../../src/lib/assets/yaml/overridesFile.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ7D,UAAU,cAAc;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,gBAAiB,SAAQ,cAAc;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AA8BF,wBAAsB,aAAa,CACjC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,cAAc,EACpE,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,EAAE,EAC1B,cAAc,GAAE;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAuC,GAC5F,OAAO,CAAC,IAAI,CAAC,CAqEf;AAED,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAS7F;AAED,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAM/F;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAM3E;AAED,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAK5F;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAO1E"}
1
+ {"version":3,"file":"overridesFile.d.ts","sourceRoot":"","sources":["../../../../src/lib/assets/yaml/overridesFile.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ7D,UAAU,cAAc;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,gBAAiB,SAAQ,cAAc;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAkCF,wBAAsB,aAAa,CACjC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,cAAc,EACpE,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,EAAE,EAC1B,cAAc,GAAE;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAuC,GAC5F,OAAO,CAAC,IAAI,CAAC,CAqEf;AAED,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAS7F;AAED,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAM/F;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAM3E;AAED,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAK5F;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAO1E"}
package/package.json CHANGED
@@ -7,7 +7,7 @@
7
7
  "bin": "dist/cli.js",
8
8
  "repository": "defenseunicorns/pepr",
9
9
  "engines": {
10
- "node": ">=20.0.0"
10
+ "node": ">=22.19.0"
11
11
  },
12
12
  "files": [
13
13
  "/dist",
@@ -16,7 +16,7 @@
16
16
  "!src/fixtures/**",
17
17
  "!dist/**/*.test.d.ts*"
18
18
  ],
19
- "version": "1.2.2",
19
+ "version": "1.3.0",
20
20
  "main": "dist/lib.js",
21
21
  "types": "dist/lib.d.ts",
22
22
  "scripts": {
@@ -30,7 +30,7 @@
30
30
  "format:check": "npm run format:src && npm run format:tests && npm run format:markdown && npm run format:integration && npm run format:prettier -- --check",
31
31
  "format:fix": "npm run format:src -- --fix && npm run format:markdown -- --fix && npm run format:integration -- --fix && npm run format:prettier -- --write",
32
32
  "format:integration": "eslint --config config/eslint.integration.config.mjs integration/cli integration/helpers",
33
- "format:markdown": "npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --rules config/markdownlint-step-format-rule.js \"**/*.md\"",
33
+ "format:markdown": "npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --ignore CHANGELOG.md --rules config/markdownlint-step-format-rule.js \"**/*.md\"",
34
34
  "format:prettier": "prettier --config config/.prettierrc src integration/cli/**/*.ts integration/helpers/**/*.ts",
35
35
  "format:src": "eslint --config config/eslint.root.config.mjs 'src/**/*.ts' '.github/workflows/scripts/**/*.ts' --ignore-pattern '**/*.test.ts' --ignore-pattern 'src/templates/**'",
36
36
  "format:tests": "eslint --config config/eslint.test.config.mjs 'src/**/*.test.ts'",
@@ -49,16 +49,16 @@
49
49
  "test:upgrade:upstream": "npm run cluster:k3d && npm run cluster:k3d:import-upstream && vitest run integration/cluster/upgrade.test.ts"
50
50
  },
51
51
  "dependencies": {
52
- "@types/ramda": "0.31.1",
53
- "@typescript-eslint/eslint-plugin": "8.59.4",
54
- "@typescript-eslint/parser": "8.59.4",
52
+ "@types/ramda": "0.32.0",
53
+ "@typescript-eslint/eslint-plugin": "8.63.0",
54
+ "@typescript-eslint/parser": "8.63.0",
55
55
  "commander": "14.0.3",
56
56
  "eslint": "9.39.4",
57
57
  "express": "5.2.1",
58
58
  "fast-json-patch": "3.1.1",
59
59
  "http-status-codes": "^2.3.0",
60
60
  "json-pointer": "^0.6.2",
61
- "kubernetes-fluent-client": "3.11.7",
61
+ "kubernetes-fluent-client": "3.11.10",
62
62
  "pino": "10.3.1",
63
63
  "pino-pretty": "13.1.3",
64
64
  "prom-client": "15.1.3",
@@ -66,13 +66,13 @@
66
66
  "ramda": "0.32.0"
67
67
  },
68
68
  "devDependencies": {
69
- "@commitlint/cli": "21.0.1",
70
- "@commitlint/config-conventional": "21.0.1",
69
+ "@commitlint/cli": "21.2.1",
70
+ "@commitlint/config-conventional": "21.2.0",
71
71
  "@types/command-line-args": "^5.2.3",
72
72
  "@types/express": "5.0.6",
73
73
  "@types/json-pointer": "^1.0.34",
74
74
  "@types/json-schema": "^7.0.15",
75
- "@types/node": "25.x.x",
75
+ "@types/node": "^24.13.3",
76
76
  "@types/node-forge": "1.3.14",
77
77
  "@types/readable-stream": "^4.0.21",
78
78
  "@types/urijs": "^1.19.25",
@@ -85,15 +85,14 @@
85
85
  "selfsigned": "^5.5.0",
86
86
  "shellcheck": "^4.1.0",
87
87
  "tsx": "^4.20.3",
88
- "undici": "7.24.2",
88
+ "undici": "8.7.0",
89
89
  "vitest": "^4.0.4"
90
90
  },
91
91
  "overrides": {
92
- "glob": "^9.0.0",
93
- "rollup": "4.59.0",
94
- "brace-expansion": "^5.0.6",
92
+ "brace-expansion": "^5.0.7",
95
93
  "ip-address": "^10.1.1",
96
- "tar": "^7.5.16"
94
+ "tar": "^7.5.16",
95
+ "fast-uri": "^3.1.4"
97
96
  },
98
97
  "peerDependencies": {
99
98
  "@types/prompts": "^2.4.9",
package/src/cli/init/templates.ts CHANGED
@@ -42,7 +42,10 @@ export type peprPackageJSON = {
42
42
  };
43
43
  scripts: { "k3d-setup": string };
44
44
  dependencies: { pepr: string; undici: string };
45
- devDependencies: { typescript: string };
45
+ devDependencies: {
46
+ "@types/node": string;
47
+ typescript: string;
48
+ };
46
49
  };
47
50
  path: string;
48
51
  print: string;
@@ -61,7 +64,7 @@ export function genPkgJSON(opts: InitOptions): peprPackageJSON {
61
64
  description: opts.description,
62
65
  keywords: ["pepr", "k8s", "policy-engine", "pepr-module", "security"],
63
66
  engines: {
64
- node: ">=20.0.0",
67
+ node: ">=22.19.0",
65
68
  },
66
69
  pepr: {
67
70
  uuid: uuid,
@@ -96,6 +99,7 @@ export function genPkgJSON(opts: InitOptions): peprPackageJSON {
96
99
  undici: "^7.0.1",
97
100
  },
98
101
  devDependencies: {
102
+ "@types/node": devDependencies["@types/node"],
99
103
  typescript,
100
104
  },
101
105
  overrides: {
package/src/lib/assets/helm.ts CHANGED
@@ -10,7 +10,7 @@ export function clusterRoleTemplate(): string {
10
10
  metadata:
11
11
  name: {{ .Values.uuid }}
12
12
  namespace: pepr-system
13
- rules:
13
+ rules:
14
14
  {{- if .Values.rbac }}
15
15
  {{- toYaml .Values.rbac | nindent 2 }}
16
16
  {{- end }}
@@ -85,7 +85,7 @@ export function watcherDeployTemplate(buildTimestamp: string, type: ControllerTy
85
85
  pepr.dev/controller: watcher
86
86
  template:
87
87
  metadata:
88
- annotations:
88
+ annotations:
89
89
  buildTimestamp: "${buildTimestamp}"
90
90
  {{- if .Values.watcher.podAnnotations }}
91
91
  {{- toYaml .Values.watcher.podAnnotations | nindent 8 }}
@@ -120,6 +120,8 @@ export function watcherDeployTemplate(buildTimestamp: string, type: ControllerTy
120
120
  args:
121
121
  - /app/node_modules/pepr/dist/controller.js
122
122
  - {{ .Values.hash }}
123
+ startupProbe:
124
+ {{- toYaml .Values.watcher.startupProbe | nindent 12 }}
123
125
  readinessProbe:
124
126
  {{- toYaml .Values.watcher.readinessProbe | nindent 12 }}
125
127
  livenessProbe:
@@ -235,6 +237,8 @@ export function admissionDeployTemplate(buildTimestamp: string, type: Controller
235
237
  args:
236
238
  - /app/node_modules/pepr/dist/controller.js
237
239
  - {{ .Values.hash }}
240
+ startupProbe:
241
+ {{- toYaml .Values.admission.startupProbe | nindent 12 }}
238
242
  readinessProbe:
239
243
  {{- toYaml .Values.admission.readinessProbe | nindent 12 }}
240
244
  livenessProbe:
@@ -277,7 +281,7 @@ export function admissionDeployTemplate(buildTimestamp: string, type: Controller
277
281
  secretName: {{ .Values.uuid }}-api-path
278
282
  - name: module
279
283
  secret:
280
- secretName: {{ .Values.uuid }}-module
284
+ secretName: {{ .Values.uuid }}-module
281
285
  {{- if .Values.admission.extraVolumes }}
282
286
  {{- toYaml .Values.admission.extraVolumes | nindent 8 }}
283
287
  {{- end }}
package/src/lib/assets/k8sObjects.ts CHANGED
@@ -95,6 +95,14 @@ export function getWatcher(
95
95
  image,
96
96
  imagePullPolicy: "IfNotPresent",
97
97
  args: ["/app/node_modules/pepr/dist/controller.js", hash],
98
+ startupProbe: {
99
+ httpGet: {
100
+ path: "/healthz",
101
+ port: 3000,
102
+ scheme: "HTTPS",
103
+ },
104
+ initialDelaySeconds: 10,
105
+ },
98
106
  readinessProbe: {
99
107
  httpGet: {
100
108
  path: "/healthz",
@@ -238,6 +246,14 @@ export function getDeployment(
238
246
  image,
239
247
  imagePullPolicy: "IfNotPresent",
240
248
  args: ["/app/node_modules/pepr/dist/controller.js", hash],
249
+ startupProbe: {
250
+ httpGet: {
251
+ path: "/healthz",
252
+ port: 3000,
253
+ scheme: "HTTPS",
254
+ },
255
+ initialDelaySeconds: 10,
256
+ },
241
257
  readinessProbe: {
242
258
  httpGet: {
243
259
  path: "/healthz",
package/src/lib/assets/yaml/overridesFile.ts CHANGED
@@ -28,6 +28,10 @@ export type ChartOverrides = {
28
28
  image: string;
29
29
  };
30
30
  type Probes = {
31
+ startupProbe: {
32
+ httpGet: { path: string; port: number; scheme: "HTTPS" };
33
+ initialDelaySeconds: number;
34
+ };
31
35
  readinessProbe: {
32
36
  httpGet: { path: string; port: number; scheme: "HTTPS" };
33
37
  initialDelaySeconds: number;
@@ -203,6 +207,10 @@ function runIdsForImage(image: string): { uid: number; gid: number; fsGroup: num
203
207
 
204
208
  function commonProbes(): Probes {
205
209
  return {
210
+ startupProbe: {
211
+ httpGet: { path: "/healthz", port: 3000, scheme: "HTTPS" },
212
+ initialDelaySeconds: 10,
213
+ },
206
214
  readinessProbe: {
207
215
  httpGet: { path: "/healthz", port: 3000, scheme: "HTTPS" },
208
216
  initialDelaySeconds: 10,