Add JSON schema generation for kubeconform CRD validation

- ci/generate-schemas.sh extracts schemas from live cluster CRDs via kubectl - Generated schemas committed to schemas/ for CI use - Run `make schemas` to regenerate after CRD or K8s version changes - validate-apps.sh and validate-clusters.sh check local schemas first - Remove all kubeconform skip lists — all resource types now have schemas
2026-06-28 16:53:11 +10:00
parent cfca1e5278
commit 041016fc80
264 changed files with 142907 additions and 2 deletions
@@ -0,0 +1,162 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "properties": {
+    "apiVersion": {
+      "type": "string"
+    },
+    "kind": {
+      "type": "string"
+    },
+    "metadata": {
+      "type": "object"
+    },
+    "spec": {
+      "properties": {
+        "deletionPolicy": {
+          "enum": [
+            "Delete",
+            "Retain"
+          ],
+          "type": "string"
+        },
+        "driver": {
+          "type": "string"
+        },
+        "source": {
+          "properties": {
+            "snapshotHandle": {
+              "type": "string",
+              "x-kubernetes-validations": [
+                {
+                  "message": "snapshotHandle is immutable",
+                  "rule": "self == oldSelf"
+                }
+              ]
+            },
+            "volumeHandle": {
+              "type": "string",
+              "x-kubernetes-validations": [
+                {
+                  "message": "volumeHandle is immutable",
+                  "rule": "self == oldSelf"
+                }
+              ]
+            }
+          },
+          "type": "object",
+          "x-kubernetes-validations": [
+            {
+              "message": "volumeHandle is required once set",
+              "rule": "!has(oldSelf.volumeHandle) || has(self.volumeHandle)"
+            },
+            {
+              "message": "snapshotHandle is required once set",
+              "rule": "!has(oldSelf.snapshotHandle) || has(self.snapshotHandle)"
+            },
+            {
+              "message": "exactly one of volumeHandle and snapshotHandle must be set",
+              "rule": "(has(self.volumeHandle) && !has(self.snapshotHandle)) || (!has(self.volumeHandle) && has(self.snapshotHandle))"
+            }
+          ]
+        },
+        "sourceVolumeMode": {
+          "type": "string",
+          "x-kubernetes-validations": [
+            {
+              "message": "sourceVolumeMode is immutable",
+              "rule": "self == oldSelf"
+            }
+          ]
+        },
+        "volumeSnapshotClassName": {
+          "type": "string"
+        },
+        "volumeSnapshotRef": {
+          "properties": {
+            "apiVersion": {
+              "type": "string"
+            },
+            "fieldPath": {
+              "type": "string"
+            },
+            "kind": {
+              "type": "string"
+            },
+            "name": {
+              "type": "string"
+            },
+            "namespace": {
+              "type": "string"
+            },
+            "resourceVersion": {
+              "type": "string"
+            },
+            "uid": {
+              "type": "string"
+            }
+          },
+          "type": "object",
+          "x-kubernetes-map-type": "atomic",
+          "x-kubernetes-validations": [
+            {
+              "message": "both spec.volumeSnapshotRef.name and spec.volumeSnapshotRef.namespace must be set",
+              "rule": "has(self.name) && has(self.__namespace__)"
+            }
+          ]
+        }
+      },
+      "required": [
+        "deletionPolicy",
+        "driver",
+        "source",
+        "volumeSnapshotRef"
+      ],
+      "type": "object",
+      "x-kubernetes-validations": [
+        {
+          "message": "sourceVolumeMode is required once set",
+          "rule": "!has(oldSelf.sourceVolumeMode) || has(self.sourceVolumeMode)"
+        }
+      ]
+    },
+    "status": {
+      "properties": {
+        "creationTime": {
+          "format": "int64",
+          "type": "integer"
+        },
+        "error": {
+          "properties": {
+            "message": {
+              "type": "string"
+            },
+            "time": {
+              "format": "date-time",
+              "type": "string"
+            }
+          },
+          "type": "object"
+        },
+        "readyToUse": {
+          "type": "boolean"
+        },
+        "restoreSize": {
+          "format": "int64",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "snapshotHandle": {
+          "type": "string"
+        },
+        "volumeGroupSnapshotHandle": {
+          "type": "string"
+        }
+      },
+      "type": "object"
+    }
+  },
+  "required": [
+    "spec"
+  ],
+  "type": "object"
+}