Add JSON schema generation for kubeconform CRD validation

- ci/generate-schemas.sh extracts schemas from live cluster CRDs via kubectl - Generated schemas committed to schemas/ for CI use - Run `make schemas` to regenerate after CRD or K8s version changes - validate-apps.sh and validate-clusters.sh check local schemas first - Remove all kubeconform skip lists — all resource types now have schemas
2026-06-28 16:53:11 +10:00
parent cfca1e5278
commit 423287ff3f
264 changed files with 142908 additions and 3 deletions
@@ -0,0 +1,145 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "properties": {
+    "administrative": {
+      "type": "boolean"
+    },
+    "apiVersion": {
+      "type": "string"
+    },
+    "builtin": {
+      "type": "boolean"
+    },
+    "clusterCreatorDefault": {
+      "type": "boolean"
+    },
+    "context": {
+      "enum": [
+        "project",
+        "cluster",
+        ""
+      ],
+      "type": "string"
+    },
+    "displayName": {
+      "type": "string"
+    },
+    "external": {
+      "type": "boolean"
+    },
+    "externalRules": {
+      "items": {
+        "properties": {
+          "apiGroups": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "x-kubernetes-list-type": "atomic"
+          },
+          "nonResourceURLs": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "x-kubernetes-list-type": "atomic"
+          },
+          "resourceNames": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "x-kubernetes-list-type": "atomic"
+          },
+          "resources": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "x-kubernetes-list-type": "atomic"
+          },
+          "verbs": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "x-kubernetes-list-type": "atomic"
+          }
+        },
+        "required": [
+          "verbs"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "hidden": {
+      "type": "boolean"
+    },
+    "kind": {
+      "type": "string"
+    },
+    "locked": {
+      "type": "boolean"
+    },
+    "metadata": {
+      "type": "object"
+    },
+    "projectCreatorDefault": {
+      "type": "boolean"
+    },
+    "roleTemplateNames": {
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "rules": {
+      "items": {
+        "properties": {
+          "apiGroups": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "x-kubernetes-list-type": "atomic"
+          },
+          "nonResourceURLs": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "x-kubernetes-list-type": "atomic"
+          },
+          "resourceNames": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "x-kubernetes-list-type": "atomic"
+          },
+          "resources": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "x-kubernetes-list-type": "atomic"
+          },
+          "verbs": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "x-kubernetes-list-type": "atomic"
+          }
+        },
+        "required": [
+          "verbs"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    }
+  },
+  "type": "object"
+}