pepr 1.2.2 → 1.3.0-nightly.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/dist/cli/init/templates.d.ts +1 -0
  2. package/dist/cli/init/templates.d.ts.map +1 -1
  3. package/dist/cli.js +49 -21
  4. package/dist/controller.js +15 -16
  5. package/dist/lib/assets/helm.d.ts.map +1 -1
  6. package/dist/lib/assets/k8sObjects.d.ts.map +1 -1
  7. package/dist/lib/assets/yaml/overridesFile.d.ts.map +1 -1
  8. package/package.json +16 -17
  9. package/src/cli/init/templates.ts +6 -2
  10. package/src/lib/assets/helm.ts +7 -3
  11. package/src/lib/assets/k8sObjects.ts +16 -0
  12. package/src/lib/assets/yaml/overridesFile.ts +8 -0
package/dist/cli/init/templates.d.ts CHANGED
@@ -117,6 +117,7 @@ export type peprPackageJSON = {
117
117
  undici: string;
118
118
  };
119
119
  devDependencies: {
120
+ "@types/node": string;
120
121
  typescript: string;
121
122
  };
122
123
  };
package/dist/cli/init/templates.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/cli/init/templates.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,YAAY,IAAI,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAIrE,eAAO,MAAQ,YAAY;;;;;;;;;;;;;;;;GAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;GAAE,gBAAgB;;;;;;;;GAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAAE,OAAO,QAAgB,CAAC;AAEjG,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1B,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,OAAO,CAAC;YACjB,cAAc,EAAE,MAAM,CAAC;YACvB,YAAY,EAAE,YAAY,CAAC;YAC3B,YAAY,EAAE;gBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;aAAE,CAAC;YACvC,SAAS,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YACtD,KAAK,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YAClD,aAAa,EAAE,MAAM,EAAE,CAAC;YACxB,GAAG,EAAE,MAAM,CAAC;YACZ,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,EAAE,QAAQ,CAAC;SACrB,CAAC;QACF,OAAO,EAAE;YAAE,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACjC,YAAY,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/C,eAAe,EAAE;YAAE,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;KACzC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,CA4D7D;AAED,eAAO,MAAM,cAAc;;;CAG1B,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,WAAW;;;CAGvB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;CAGnB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;CAGxB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAgBlB,CAAC"}
1
+ {"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/cli/init/templates.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,YAAY,IAAI,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAIrE,eAAO,MAAQ,YAAY;;;;;;;;;;;;;;;;GAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;GAAE,gBAAgB;;;;;;;;GAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAAE,OAAO,QAAgB,CAAC;AAEjG,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1B,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,OAAO,CAAC;YACjB,cAAc,EAAE,MAAM,CAAC;YACvB,YAAY,EAAE,YAAY,CAAC;YAC3B,YAAY,EAAE;gBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;aAAE,CAAC;YACvC,SAAS,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YACtD,KAAK,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YAClD,aAAa,EAAE,MAAM,EAAE,CAAC;YACxB,GAAG,EAAE,MAAM,CAAC;YACZ,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,EAAE,QAAQ,CAAC;SACrB,CAAC;QACF,OAAO,EAAE;YAAE,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACjC,YAAY,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/C,eAAe,EAAE;YACf,aAAa,EAAE,MAAM,CAAC;YACtB,UAAU,EAAE,MAAM,CAAC;SACpB,CAAC;KACH,CAAC;IACF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,CA6D7D;AAED,eAAO,MAAM,cAAc;;;CAG1B,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,WAAW;;;CAGvB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;CAGnB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;CAGxB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAgBlB,CAAC"}
package/dist/cli.js CHANGED
@@ -6,7 +6,11 @@ var __getOwnPropNames = Object.getOwnPropertyNames;
6
6
  var __getProtoOf = Object.getPrototypeOf;
7
7
  var __hasOwnProp = Object.prototype.hasOwnProperty;
8
8
  var __commonJS = (cb, mod) => function __require() {
9
- return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
9
+ try {
10
+ return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
11
+ } catch (e) {
12
+ throw mod = 0, e;
13
+ }
10
14
  };
11
15
  var __copyProps = (to, from, except, desc) => {
12
16
  if (from && typeof from === "object" || typeof from === "function") {
@@ -7423,7 +7427,7 @@ function clusterRoleTemplate() {
7423
7427
  metadata:
7424
7428
  name: {{ .Values.uuid }}
7425
7429
  namespace: pepr-system
7426
- rules:
7430
+ rules:
7427
7431
  {{- if .Values.rbac }}
7428
7432
  {{- toYaml .Values.rbac | nindent 2 }}
7429
7433
  {{- end }}
@@ -7495,7 +7499,7 @@ function watcherDeployTemplate(buildTimestamp, type) {
7495
7499
  pepr.dev/controller: watcher
7496
7500
  template:
7497
7501
  metadata:
7498
- annotations:
7502
+ annotations:
7499
7503
  buildTimestamp: "${buildTimestamp}"
7500
7504
  {{- if .Values.watcher.podAnnotations }}
7501
7505
  {{- toYaml .Values.watcher.podAnnotations | nindent 8 }}
@@ -7530,6 +7534,8 @@ function watcherDeployTemplate(buildTimestamp, type) {
7530
7534
  args:
7531
7535
  - /app/node_modules/pepr/dist/controller.js
7532
7536
  - {{ .Values.hash }}
7537
+ startupProbe:
7538
+ {{- toYaml .Values.watcher.startupProbe | nindent 12 }}
7533
7539
  readinessProbe:
7534
7540
  {{- toYaml .Values.watcher.readinessProbe | nindent 12 }}
7535
7541
  livenessProbe:
@@ -7644,6 +7650,8 @@ function admissionDeployTemplate(buildTimestamp, type) {
7644
7650
  args:
7645
7651
  - /app/node_modules/pepr/dist/controller.js
7646
7652
  - {{ .Values.hash }}
7653
+ startupProbe:
7654
+ {{- toYaml .Values.admission.startupProbe | nindent 12 }}
7647
7655
  readinessProbe:
7648
7656
  {{- toYaml .Values.admission.readinessProbe | nindent 12 }}
7649
7657
  livenessProbe:
@@ -7686,7 +7694,7 @@ function admissionDeployTemplate(buildTimestamp, type) {
7686
7694
  secretName: {{ .Values.uuid }}-api-path
7687
7695
  - name: module
7688
7696
  secret:
7689
- secretName: {{ .Values.uuid }}-module
7697
+ secretName: {{ .Values.uuid }}-module
7690
7698
  {{- if .Values.admission.extraVolumes }}
7691
7699
  {{- toYaml .Values.admission.extraVolumes | nindent 8 }}
7692
7700
  {{- end }}
@@ -8223,6 +8231,10 @@ function runIdsForImage(image) {
8223
8231
  }
8224
8232
  function commonProbes() {
8225
8233
  return {
8234
+ startupProbe: {
8235
+ httpGet: { path: "/healthz", port: 3e3, scheme: "HTTPS" },
8236
+ initialDelaySeconds: 10
8237
+ },
8226
8238
  readinessProbe: {
8227
8239
  httpGet: { path: "/healthz", port: 3e3, scheme: "HTTPS" },
8228
8240
  initialDelaySeconds: 10
@@ -8743,6 +8755,14 @@ function getWatcher(assets, hash, buildTimestamp, imagePullSecret) {
8743
8755
  image,
8744
8756
  imagePullPolicy: "IfNotPresent",
8745
8757
  args: ["/app/node_modules/pepr/dist/controller.js", hash],
8758
+ startupProbe: {
8759
+ httpGet: {
8760
+ path: "/healthz",
8761
+ port: 3e3,
8762
+ scheme: "HTTPS"
8763
+ },
8764
+ initialDelaySeconds: 10
8765
+ },
8746
8766
  readinessProbe: {
8747
8767
  httpGet: {
8748
8768
  path: "/healthz",
@@ -8876,6 +8896,14 @@ function getDeployment(assets, hash, buildTimestamp, imagePullSecret) {
8876
8896
  image,
8877
8897
  imagePullPolicy: "IfNotPresent",
8878
8898
  args: ["/app/node_modules/pepr/dist/controller.js", hash],
8899
+ startupProbe: {
8900
+ httpGet: {
8901
+ path: "/healthz",
8902
+ port: 3e3,
8903
+ scheme: "HTTPS"
8904
+ },
8905
+ initialDelaySeconds: 10
8906
+ },
8879
8907
  readinessProbe: {
8880
8908
  httpGet: {
8881
8909
  path: "/healthz",
@@ -9636,7 +9664,7 @@ var packageJSON = {
9636
9664
  bin: "dist/cli.js",
9637
9665
  repository: "defenseunicorns/pepr",
9638
9666
  engines: {
9639
- node: ">=20.0.0"
9667
+ node: ">=22.19.0"
9640
9668
  },
9641
9669
  files: [
9642
9670
  "/dist",
@@ -9645,7 +9673,7 @@ var packageJSON = {
9645
9673
  "!src/fixtures/**",
9646
9674
  "!dist/**/*.test.d.ts*"
9647
9675
  ],
9648
- version: "1.2.2",
9676
+ version: "1.3.0-nightly.1",
9649
9677
  main: "dist/lib.js",
9650
9678
  types: "dist/lib.d.ts",
9651
9679
  scripts: {
@@ -9659,7 +9687,7 @@ var packageJSON = {
9659
9687
  "format:check": "npm run format:src && npm run format:tests && npm run format:markdown && npm run format:integration && npm run format:prettier -- --check",
9660
9688
  "format:fix": "npm run format:src -- --fix && npm run format:markdown -- --fix && npm run format:integration -- --fix && npm run format:prettier -- --write",
9661
9689
  "format:integration": "eslint --config config/eslint.integration.config.mjs integration/cli integration/helpers",
9662
- "format:markdown": 'npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --rules config/markdownlint-step-format-rule.js "**/*.md"',
9690
+ "format:markdown": 'npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --ignore CHANGELOG.md --rules config/markdownlint-step-format-rule.js "**/*.md"',
9663
9691
  "format:prettier": "prettier --config config/.prettierrc src integration/cli/**/*.ts integration/helpers/**/*.ts",
9664
9692
  "format:src": "eslint --config config/eslint.root.config.mjs 'src/**/*.ts' '.github/workflows/scripts/**/*.ts' --ignore-pattern '**/*.test.ts' --ignore-pattern 'src/templates/**'",
9665
9693
  "format:tests": "eslint --config config/eslint.test.config.mjs 'src/**/*.test.ts'",
@@ -9678,16 +9706,16 @@ var packageJSON = {
9678
9706
  "test:upgrade:upstream": "npm run cluster:k3d && npm run cluster:k3d:import-upstream && vitest run integration/cluster/upgrade.test.ts"
9679
9707
  },
9680
9708
  dependencies: {
9681
- "@types/ramda": "0.31.1",
9682
- "@typescript-eslint/eslint-plugin": "8.59.4",
9683
- "@typescript-eslint/parser": "8.59.4",
9709
+ "@types/ramda": "0.32.0",
9710
+ "@typescript-eslint/eslint-plugin": "8.64.0",
9711
+ "@typescript-eslint/parser": "8.64.0",
9684
9712
  commander: "14.0.3",
9685
- eslint: "9.39.4",
9713
+ eslint: "9.39.5",
9686
9714
  express: "5.2.1",
9687
9715
  "fast-json-patch": "3.1.1",
9688
9716
  "http-status-codes": "^2.3.0",
9689
9717
  "json-pointer": "^0.6.2",
9690
- "kubernetes-fluent-client": "3.11.7",
9718
+ "kubernetes-fluent-client": "3.11.10",
9691
9719
  pino: "10.3.1",
9692
9720
  "pino-pretty": "13.1.3",
9693
9721
  "prom-client": "15.1.3",
@@ -9695,13 +9723,13 @@ var packageJSON = {
9695
9723
  ramda: "0.32.0"
9696
9724
  },
9697
9725
  devDependencies: {
9698
- "@commitlint/cli": "21.0.1",
9699
- "@commitlint/config-conventional": "21.0.1",
9726
+ "@commitlint/cli": "21.2.1",
9727
+ "@commitlint/config-conventional": "21.2.0",
9700
9728
  "@types/command-line-args": "^5.2.3",
9701
9729
  "@types/express": "5.0.6",
9702
9730
  "@types/json-pointer": "^1.0.34",
9703
9731
  "@types/json-schema": "^7.0.15",
9704
- "@types/node": "25.x.x",
9732
+ "@types/node": "^24.13.3",
9705
9733
  "@types/node-forge": "1.3.14",
9706
9734
  "@types/readable-stream": "^4.0.21",
9707
9735
  "@types/urijs": "^1.19.25",
@@ -9714,15 +9742,14 @@ var packageJSON = {
9714
9742
  selfsigned: "^5.5.0",
9715
9743
  shellcheck: "^4.1.0",
9716
9744
  tsx: "^4.20.3",
9717
- undici: "7.24.2",
9745
+ undici: "8.7.0",
9718
9746
  vitest: "^4.0.4"
9719
9747
  },
9720
9748
  overrides: {
9721
- glob: "^9.0.0",
9722
- rollup: "4.59.0",
9723
- "brace-expansion": "^5.0.6",
9749
+ "brace-expansion": "^5.0.7",
9724
9750
  "ip-address": "^10.1.1",
9725
- tar: "^7.5.16"
9751
+ tar: "^7.5.16",
9752
+ "fast-uri": "^3.1.4"
9726
9753
  },
9727
9754
  peerDependencies: {
9728
9755
  "@types/prompts": "^2.4.9",
@@ -9778,7 +9805,7 @@ function genPkgJSON(opts) {
9778
9805
  description: opts.description,
9779
9806
  keywords: ["pepr", "k8s", "policy-engine", "pepr-module", "security"],
9780
9807
  engines: {
9781
- node: ">=20.0.0"
9808
+ node: ">=22.19.0"
9782
9809
  },
9783
9810
  pepr: {
9784
9811
  uuid,
@@ -9813,6 +9840,7 @@ function genPkgJSON(opts) {
9813
9840
  undici: "^7.0.1"
9814
9841
  },
9815
9842
  devDependencies: {
9843
+ "@types/node": devDependencies["@types/node"],
9816
9844
  typescript
9817
9845
  },
9818
9846
  overrides: {
package/dist/controller.js CHANGED
@@ -69,7 +69,7 @@ var packageJSON = {
69
69
  bin: "dist/cli.js",
70
70
  repository: "defenseunicorns/pepr",
71
71
  engines: {
72
- node: ">=20.0.0"
72
+ node: ">=22.19.0"
73
73
  },
74
74
  files: [
75
75
  "/dist",
@@ -78,7 +78,7 @@ var packageJSON = {
78
78
  "!src/fixtures/**",
79
79
  "!dist/**/*.test.d.ts*"
80
80
  ],
81
- version: "1.2.2",
81
+ version: "1.3.0-nightly.1",
82
82
  main: "dist/lib.js",
83
83
  types: "dist/lib.d.ts",
84
84
  scripts: {
@@ -92,7 +92,7 @@ var packageJSON = {
92
92
  "format:check": "npm run format:src && npm run format:tests && npm run format:markdown && npm run format:integration && npm run format:prettier -- --check",
93
93
  "format:fix": "npm run format:src -- --fix && npm run format:markdown -- --fix && npm run format:integration -- --fix && npm run format:prettier -- --write",
94
94
  "format:integration": "eslint --config config/eslint.integration.config.mjs integration/cli integration/helpers",
95
- "format:markdown": 'npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --rules config/markdownlint-step-format-rule.js "**/*.md"',
95
+ "format:markdown": 'npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --ignore CHANGELOG.md --rules config/markdownlint-step-format-rule.js "**/*.md"',
96
96
  "format:prettier": "prettier --config config/.prettierrc src integration/cli/**/*.ts integration/helpers/**/*.ts",
97
97
  "format:src": "eslint --config config/eslint.root.config.mjs 'src/**/*.ts' '.github/workflows/scripts/**/*.ts' --ignore-pattern '**/*.test.ts' --ignore-pattern 'src/templates/**'",
98
98
  "format:tests": "eslint --config config/eslint.test.config.mjs 'src/**/*.test.ts'",
@@ -111,16 +111,16 @@ var packageJSON = {
111
111
  "test:upgrade:upstream": "npm run cluster:k3d && npm run cluster:k3d:import-upstream && vitest run integration/cluster/upgrade.test.ts"
112
112
  },
113
113
  dependencies: {
114
- "@types/ramda": "0.31.1",
115
- "@typescript-eslint/eslint-plugin": "8.59.4",
116
- "@typescript-eslint/parser": "8.59.4",
114
+ "@types/ramda": "0.32.0",
115
+ "@typescript-eslint/eslint-plugin": "8.64.0",
116
+ "@typescript-eslint/parser": "8.64.0",
117
117
  commander: "14.0.3",
118
- eslint: "9.39.4",
118
+ eslint: "9.39.5",
119
119
  express: "5.2.1",
120
120
  "fast-json-patch": "3.1.1",
121
121
  "http-status-codes": "^2.3.0",
122
122
  "json-pointer": "^0.6.2",
123
- "kubernetes-fluent-client": "3.11.7",
123
+ "kubernetes-fluent-client": "3.11.10",
124
124
  pino: "10.3.1",
125
125
  "pino-pretty": "13.1.3",
126
126
  "prom-client": "15.1.3",
@@ -128,13 +128,13 @@ var packageJSON = {
128
128
  ramda: "0.32.0"
129
129
  },
130
130
  devDependencies: {
131
- "@commitlint/cli": "21.0.1",
132
- "@commitlint/config-conventional": "21.0.1",
131
+ "@commitlint/cli": "21.2.1",
132
+ "@commitlint/config-conventional": "21.2.0",
133
133
  "@types/command-line-args": "^5.2.3",
134
134
  "@types/express": "5.0.6",
135
135
  "@types/json-pointer": "^1.0.34",
136
136
  "@types/json-schema": "^7.0.15",
137
- "@types/node": "25.x.x",
137
+ "@types/node": "^24.13.3",
138
138
  "@types/node-forge": "1.3.14",
139
139
  "@types/readable-stream": "^4.0.21",
140
140
  "@types/urijs": "^1.19.25",
@@ -147,15 +147,14 @@ var packageJSON = {
147
147
  selfsigned: "^5.5.0",
148
148
  shellcheck: "^4.1.0",
149
149
  tsx: "^4.20.3",
150
- undici: "7.24.2",
150
+ undici: "8.7.0",
151
151
  vitest: "^4.0.4"
152
152
  },
153
153
  overrides: {
154
- glob: "^9.0.0",
155
- rollup: "4.59.0",
156
- "brace-expansion": "^5.0.6",
154
+ "brace-expansion": "^5.0.7",
157
155
  "ip-address": "^10.1.1",
158
- tar: "^7.5.16"
156
+ tar: "^7.5.16",
157
+ "fast-uri": "^3.1.4"
159
158
  },
160
159
  peerDependencies: {
161
160
  "@types/prompts": "^2.4.9",
package/dist/lib/assets/helm.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../../src/lib/assets/helm.ts"],"names":[],"mappings":"AAGA,KAAK,cAAc,GAAG,WAAW,GAAG,SAAS,CAAC;AAE9C,wBAAgB,mBAAmB,IAAI,MAAM,CAY5C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAe1C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CA2BpE;AAED,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAmG1F;AAED,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAuH5F;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CA0BjF;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAoB1E"}
1
+ {"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../../src/lib/assets/helm.ts"],"names":[],"mappings":"AAGA,KAAK,cAAc,GAAG,WAAW,GAAG,SAAS,CAAC;AAE9C,wBAAgB,mBAAmB,IAAI,MAAM,CAY5C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAe1C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CA2BpE;AAED,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAqG1F;AAED,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAyH5F;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CA0BjF;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAoB1E"}
package/dist/lib/assets/k8sObjects.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"k8sObjects.d.ts","sourceRoot":"","sources":["../../../src/lib/assets/k8sObjects.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAGhD,OAAO,EAAE,MAAM,EAA+C,MAAM,UAAU,CAAC;AAG/E,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB,CAmBvF;AAED,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CA2IxB;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CAmJxB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAsBrF;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CA2BzE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CA2BhF"}
1
+ {"version":3,"file":"k8sObjects.d.ts","sourceRoot":"","sources":["../../../src/lib/assets/k8sObjects.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAGhD,OAAO,EAAE,MAAM,EAA+C,MAAM,UAAU,CAAC;AAG/E,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB,CAmBvF;AAED,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CAmJxB;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,GACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CA2JxB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAsBrF;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CA2BzE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CA2BhF"}
package/dist/lib/assets/yaml/overridesFile.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"overridesFile.d.ts","sourceRoot":"","sources":["../../../../src/lib/assets/yaml/overridesFile.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ7D,UAAU,cAAc;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,gBAAiB,SAAQ,cAAc;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AA8BF,wBAAsB,aAAa,CACjC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,cAAc,EACpE,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,EAAE,EAC1B,cAAc,GAAE;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAuC,GAC5F,OAAO,CAAC,IAAI,CAAC,CAqEf;AAED,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAS7F;AAED,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAM/F;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAM3E;AAED,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAK5F;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAO1E"}
1
+ {"version":3,"file":"overridesFile.d.ts","sourceRoot":"","sources":["../../../../src/lib/assets/yaml/overridesFile.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ7D,UAAU,cAAc;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,gBAAiB,SAAQ,cAAc;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAkCF,wBAAsB,aAAa,CACjC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,cAAc,EACpE,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,EAAE,EAC1B,cAAc,GAAE;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAuC,GAC5F,OAAO,CAAC,IAAI,CAAC,CAqEf;AAED,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAS7F;AAED,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAM/F;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAM3E;AAED,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAK5F;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAO1E"}
package/package.json CHANGED
@@ -7,7 +7,7 @@
7
7
  "bin": "dist/cli.js",
8
8
  "repository": "defenseunicorns/pepr",
9
9
  "engines": {
10
- "node": ">=20.0.0"
10
+ "node": ">=22.19.0"
11
11
  },
12
12
  "files": [
13
13
  "/dist",
@@ -16,7 +16,7 @@
16
16
  "!src/fixtures/**",
17
17
  "!dist/**/*.test.d.ts*"
18
18
  ],
19
- "version": "1.2.2",
19
+ "version": "1.3.0-nightly.1",
20
20
  "main": "dist/lib.js",
21
21
  "types": "dist/lib.d.ts",
22
22
  "scripts": {
@@ -30,7 +30,7 @@
30
30
  "format:check": "npm run format:src && npm run format:tests && npm run format:markdown && npm run format:integration && npm run format:prettier -- --check",
31
31
  "format:fix": "npm run format:src -- --fix && npm run format:markdown -- --fix && npm run format:integration -- --fix && npm run format:prettier -- --write",
32
32
  "format:integration": "eslint --config config/eslint.integration.config.mjs integration/cli integration/helpers",
33
- "format:markdown": "npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --rules config/markdownlint-step-format-rule.js \"**/*.md\"",
33
+ "format:markdown": "npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --ignore CHANGELOG.md --rules config/markdownlint-step-format-rule.js \"**/*.md\"",
34
34
  "format:prettier": "prettier --config config/.prettierrc src integration/cli/**/*.ts integration/helpers/**/*.ts",
35
35
  "format:src": "eslint --config config/eslint.root.config.mjs 'src/**/*.ts' '.github/workflows/scripts/**/*.ts' --ignore-pattern '**/*.test.ts' --ignore-pattern 'src/templates/**'",
36
36
  "format:tests": "eslint --config config/eslint.test.config.mjs 'src/**/*.test.ts'",
@@ -49,16 +49,16 @@
49
49
  "test:upgrade:upstream": "npm run cluster:k3d && npm run cluster:k3d:import-upstream && vitest run integration/cluster/upgrade.test.ts"
50
50
  },
51
51
  "dependencies": {
52
- "@types/ramda": "0.31.1",
53
- "@typescript-eslint/eslint-plugin": "8.59.4",
54
- "@typescript-eslint/parser": "8.59.4",
52
+ "@types/ramda": "0.32.0",
53
+ "@typescript-eslint/eslint-plugin": "8.64.0",
54
+ "@typescript-eslint/parser": "8.64.0",
55
55
  "commander": "14.0.3",
56
- "eslint": "9.39.4",
56
+ "eslint": "9.39.5",
57
57
  "express": "5.2.1",
58
58
  "fast-json-patch": "3.1.1",
59
59
  "http-status-codes": "^2.3.0",
60
60
  "json-pointer": "^0.6.2",
61
- "kubernetes-fluent-client": "3.11.7",
61
+ "kubernetes-fluent-client": "3.11.10",
62
62
  "pino": "10.3.1",
63
63
  "pino-pretty": "13.1.3",
64
64
  "prom-client": "15.1.3",
@@ -66,13 +66,13 @@
66
66
  "ramda": "0.32.0"
67
67
  },
68
68
  "devDependencies": {
69
- "@commitlint/cli": "21.0.1",
70
- "@commitlint/config-conventional": "21.0.1",
69
+ "@commitlint/cli": "21.2.1",
70
+ "@commitlint/config-conventional": "21.2.0",
71
71
  "@types/command-line-args": "^5.2.3",
72
72
  "@types/express": "5.0.6",
73
73
  "@types/json-pointer": "^1.0.34",
74
74
  "@types/json-schema": "^7.0.15",
75
- "@types/node": "25.x.x",
75
+ "@types/node": "^24.13.3",
76
76
  "@types/node-forge": "1.3.14",
77
77
  "@types/readable-stream": "^4.0.21",
78
78
  "@types/urijs": "^1.19.25",
@@ -85,15 +85,14 @@
85
85
  "selfsigned": "^5.5.0",
86
86
  "shellcheck": "^4.1.0",
87
87
  "tsx": "^4.20.3",
88
- "undici": "7.24.2",
88
+ "undici": "8.7.0",
89
89
  "vitest": "^4.0.4"
90
90
  },
91
91
  "overrides": {
92
- "glob": "^9.0.0",
93
- "rollup": "4.59.0",
94
- "brace-expansion": "^5.0.6",
92
+ "brace-expansion": "^5.0.7",
95
93
  "ip-address": "^10.1.1",
96
- "tar": "^7.5.16"
94
+ "tar": "^7.5.16",
95
+ "fast-uri": "^3.1.4"
97
96
  },
98
97
  "peerDependencies": {
99
98
  "@types/prompts": "^2.4.9",
@@ -104,4 +103,4 @@
104
103
  "typescript": "^5.8.3",
105
104
  "uuid": "^13.0.0"
106
105
  }
107
- }
106
+ }
package/src/cli/init/templates.ts CHANGED
@@ -42,7 +42,10 @@ export type peprPackageJSON = {
42
42
  };
43
43
  scripts: { "k3d-setup": string };
44
44
  dependencies: { pepr: string; undici: string };
45
- devDependencies: { typescript: string };
45
+ devDependencies: {
46
+ "@types/node": string;
47
+ typescript: string;
48
+ };
46
49
  };
47
50
  path: string;
48
51
  print: string;
@@ -61,7 +64,7 @@ export function genPkgJSON(opts: InitOptions): peprPackageJSON {
61
64
  description: opts.description,
62
65
  keywords: ["pepr", "k8s", "policy-engine", "pepr-module", "security"],
63
66
  engines: {
64
- node: ">=20.0.0",
67
+ node: ">=22.19.0",
65
68
  },
66
69
  pepr: {
67
70
  uuid: uuid,
@@ -96,6 +99,7 @@ export function genPkgJSON(opts: InitOptions): peprPackageJSON {
96
99
  undici: "^7.0.1",
97
100
  },
98
101
  devDependencies: {
102
+ "@types/node": devDependencies["@types/node"],
99
103
  typescript,
100
104
  },
101
105
  overrides: {
package/src/lib/assets/helm.ts CHANGED
@@ -10,7 +10,7 @@ export function clusterRoleTemplate(): string {
10
10
  metadata:
11
11
  name: {{ .Values.uuid }}
12
12
  namespace: pepr-system
13
- rules:
13
+ rules:
14
14
  {{- if .Values.rbac }}
15
15
  {{- toYaml .Values.rbac | nindent 2 }}
16
16
  {{- end }}
@@ -85,7 +85,7 @@ export function watcherDeployTemplate(buildTimestamp: string, type: ControllerTy
85
85
  pepr.dev/controller: watcher
86
86
  template:
87
87
  metadata:
88
- annotations:
88
+ annotations:
89
89
  buildTimestamp: "${buildTimestamp}"
90
90
  {{- if .Values.watcher.podAnnotations }}
91
91
  {{- toYaml .Values.watcher.podAnnotations | nindent 8 }}
@@ -120,6 +120,8 @@ export function watcherDeployTemplate(buildTimestamp: string, type: ControllerTy
120
120
  args:
121
121
  - /app/node_modules/pepr/dist/controller.js
122
122
  - {{ .Values.hash }}
123
+ startupProbe:
124
+ {{- toYaml .Values.watcher.startupProbe | nindent 12 }}
123
125
  readinessProbe:
124
126
  {{- toYaml .Values.watcher.readinessProbe | nindent 12 }}
125
127
  livenessProbe:
@@ -235,6 +237,8 @@ export function admissionDeployTemplate(buildTimestamp: string, type: Controller
235
237
  args:
236
238
  - /app/node_modules/pepr/dist/controller.js
237
239
  - {{ .Values.hash }}
240
+ startupProbe:
241
+ {{- toYaml .Values.admission.startupProbe | nindent 12 }}
238
242
  readinessProbe:
239
243
  {{- toYaml .Values.admission.readinessProbe | nindent 12 }}
240
244
  livenessProbe:
@@ -277,7 +281,7 @@ export function admissionDeployTemplate(buildTimestamp: string, type: Controller
277
281
  secretName: {{ .Values.uuid }}-api-path
278
282
  - name: module
279
283
  secret:
280
- secretName: {{ .Values.uuid }}-module
284
+ secretName: {{ .Values.uuid }}-module
281
285
  {{- if .Values.admission.extraVolumes }}
282
286
  {{- toYaml .Values.admission.extraVolumes | nindent 8 }}
283
287
  {{- end }}
package/src/lib/assets/k8sObjects.ts CHANGED
@@ -95,6 +95,14 @@ export function getWatcher(
95
95
  image,
96
96
  imagePullPolicy: "IfNotPresent",
97
97
  args: ["/app/node_modules/pepr/dist/controller.js", hash],
98
+ startupProbe: {
99
+ httpGet: {
100
+ path: "/healthz",
101
+ port: 3000,
102
+ scheme: "HTTPS",
103
+ },
104
+ initialDelaySeconds: 10,
105
+ },
98
106
  readinessProbe: {
99
107
  httpGet: {
100
108
  path: "/healthz",
@@ -238,6 +246,14 @@ export function getDeployment(
238
246
  image,
239
247
  imagePullPolicy: "IfNotPresent",
240
248
  args: ["/app/node_modules/pepr/dist/controller.js", hash],
249
+ startupProbe: {
250
+ httpGet: {
251
+ path: "/healthz",
252
+ port: 3000,
253
+ scheme: "HTTPS",
254
+ },
255
+ initialDelaySeconds: 10,
256
+ },
241
257
  readinessProbe: {
242
258
  httpGet: {
243
259
  path: "/healthz",
package/src/lib/assets/yaml/overridesFile.ts CHANGED
@@ -28,6 +28,10 @@ export type ChartOverrides = {
28
28
  image: string;
29
29
  };
30
30
  type Probes = {
31
+ startupProbe: {
32
+ httpGet: { path: string; port: number; scheme: "HTTPS" };
33
+ initialDelaySeconds: number;
34
+ };
31
35
  readinessProbe: {
32
36
  httpGet: { path: string; port: number; scheme: "HTTPS" };
33
37
  initialDelaySeconds: number;
@@ -203,6 +207,10 @@ function runIdsForImage(image: string): { uid: number; gid: number; fsGroup: num
203
207
 
204
208
  function commonProbes(): Probes {
205
209
  return {
210
+ startupProbe: {
211
+ httpGet: { path: "/healthz", port: 3000, scheme: "HTTPS" },
212
+ initialDelaySeconds: 10,
213
+ },
206
214
  readinessProbe: {
207
215
  httpGet: { path: "/healthz", port: 3000, scheme: "HTTPS" },
208
216
  initialDelaySeconds: 10,