kube-cel 0.5.3

Kubernetes CEL extension functions for the cel crate
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91

//! Demonstrates schema default injection and root-level variable binding.
//!
//! Run with: `cargo run --example defaults_and_context --features validation`

use kube_cel::{
    defaults::apply_defaults,
    validation::{RootContext, Validator},
};
use serde_json::json;

fn main() {
    let schema = json!({
        "type": "object",
        "properties": {
            "replicas": {
                "type": "integer",
                "default": 1,
                "x-kubernetes-validations": [
                    {"rule": "self >= 0", "message": "replicas must be non-negative"}
                ]
            },
            "strategy": {
                "type": "string",
                "default": "RollingUpdate"
            }
        },
        "x-kubernetes-validations": [
            {"rule": "apiGroup == 'apps'", "message": "only apps group allowed"},
            {"rule": "kind == 'Deployment'", "message": "must be a Deployment"}
        ]
    });

    // Object with missing fields (would have defaults in K8s)
    let object = json!({"replicas": 3});

    // 1. Apply defaults
    let defaulted = apply_defaults(&schema, &object);
    println!("=== Default Injection ===");
    println!("Before: {object}");
    println!("After:  {defaulted}\n");

    // 2. Validate with root context
    let root_ctx = RootContext {
        api_version: "apps/v1".into(),
        api_group: "apps".into(),
        kind: "Deployment".into(),
    };

    let validator = Validator::new();
    let errors = validator.validate_with_context(&schema, &defaulted, None, Some(&root_ctx));

    println!("=== Validation Results ===");
    if errors.is_empty() {
        println!("All rules passed!");
    } else {
        for e in &errors {
            println!("[FAIL] {}: {}", e.field_path, e.message);
        }
    }

    // 3. Demonstrate validate_with_defaults convenience method
    // Uses a simpler schema without root-context variables (apiGroup/kind),
    // since validate_with_defaults does not accept a RootContext.
    println!("\n=== validate_with_defaults ===");
    let simple_schema = json!({
        "type": "object",
        "properties": {
            "replicas": {
                "type": "integer",
                "default": 1,
                "x-kubernetes-validations": [
                    {"rule": "self >= 0", "message": "replicas must be non-negative"}
                ]
            },
            "strategy": {
                "type": "string",
                "default": "RollingUpdate"
            }
        }
    });
    let sparse_object = json!({}); // no fields at all
    let errors = validator.validate_with_defaults(&simple_schema, &sparse_object, None);
    println!("Validating empty object with defaults applied:");
    if errors.is_empty() {
        println!("All rules passed (replicas defaulted to 1, strategy to RollingUpdate)");
    } else {
        for e in &errors {
            println!("[FAIL] {}", e.message);
        }
    }
}