Start Hello Holos

This is a very, very minimal framework using the Tokyo docs as a guide.
This code is going to have to change when `v1alpha5` is published, so
I'm just dropping it in here as a placeholder.

Like the Tokyo docs, I was intening to setup the code and commands at the
start, and then have a "Breaking it down" section later explaining all
the moving parts.

.cspell.json

@@ -6,12 +6,10 @@
   ],
   "words": [
     "acmesolver",
-    "acraccesstoken",
     "acraccesstokens",
     "admissionregistration",
     "alertmanager",
     "alertmanagers",
-    "anchore",
     "anthos",
     "apiextensions",
     "apimachinery",
@@ -29,15 +27,12 @@
     "authpolicy",
     "authproxy",
     "authroutes",
-    "autoload",
     "automount",
     "automounting",
     "autoscaler",
     "balancereader",
     "blackbox",
     "buildplan",
-    "buildplans",
-    "Buildx",
     "builtinpluginloadingoptions",
     "cachedir",
     "cadvisor",
@@ -46,7 +41,6 @@
     "certificaterequest",
     "certificaterequests",
     "certificatesigningrequests",
-    "chartmuseum",
     "clientset",
     "clsx",
     "clusterexternalsecret",
@@ -61,8 +55,6 @@
     "Cmds",
     "CNCF",
     "CODEOWNERS",
-    "compinit",
-    "componentconfig",
     "configdir",
     "configmap",
     "configmapargs",
@@ -75,7 +67,6 @@
     "creds",
     "crossplane",
     "crunchydata",
-    "ctxt",
     "cuecontext",
     "cuelang",
     "customresourcedefinition",
@@ -83,12 +74,9 @@
     "deploymentruntimeconfig",
     "destinationrule",
     "destinationrules",
-    "devel",
     "devicecode",
-    "distroless",
     "dnsmasq",
     "dscacheutil",
-    "ecrauthorizationtoken",
     "ecrauthorizationtokens",
     "edns",
     "endpointslices",
@@ -104,11 +92,9 @@
     "fieldmaskpb",
     "fieldspec",
     "flushcache",
-    "fluxcd",
     "fullname",
     "gatewayclass",
     "gatewayclasses",
-    "gcraccesstoken",
     "gcraccesstokens",
     "gendoc",
     "generationbehavior",
@@ -117,7 +103,6 @@
     "genproto",
     "ggnpl",
     "ghaction",
-    "githubaccesstoken",
     "githubaccesstokens",
     "gitops",
     "GOBIN",
@@ -148,7 +133,6 @@
     "httproute",
     "httproutes",
     "iampolicygenerator",
-    "incpatch",
     "Infima",
     "intstr",
     "isatty",
@@ -158,7 +142,6 @@
     "jetstack",
     "jiralert",
     "Jsonnet",
-    "Kargo",
     "kfbh",
     "killall",
     "kubeadm",
@@ -166,7 +149,6 @@
     "kubelet",
     "kubelogin",
     "kubernetesobjects",
-    "kubeversion",
     "Kustomization",
     "Kustomizations",
     "kustomize",
@@ -183,7 +165,6 @@
     "loadbalancer",
     "loadrestrictions",
     "logfmt",
-    "lxnl",
     "mattn",
     "mccutchen",
     "metav",
@@ -196,7 +177,6 @@
     "mutatingwebhookconfigurations",
     "mvdan",
     "mxcl",
-    "mychart",
     "myhostname",
     "myRegistrKeySecretName",
     "mysecret",
@@ -210,7 +190,6 @@
     "oauthproxy",
     "objectmap",
     "objectmeta",
-    "omitempty",
     "organizationconnect",
     "orgid",
     "otelconnect",
@@ -270,7 +249,6 @@
     "rolebinding",
     "rootfs",
     "ropc",
-    "sboms",
     "seccomp",
     "secretargs",
     "SECRETKEY",
@@ -283,7 +261,6 @@
     "serviceentries",
     "serviceentry",
     "servicemonitor",
-    "sigstore",
     "somevalue",
     "SOMEVAR",
     "sortoptions",
@@ -314,17 +291,13 @@
     "tokencache",
     "Tokener",
     "tolerations",
-    "TOPLEVEL",
     "Traceid",
     "traefik",
     "transactionhistory",
     "tsdb",
-    "txtar",
     "typemeta",
     "udev",
     "uibutton",
-    "Unmarshal",
-    "unshallow",
     "unstage",
     "untar",
     "upbound",
@@ -336,7 +309,6 @@
     "userservice",
     "validatingwebhookconfiguration",
     "validatingwebhookconfigurations",
-    "vaultdynamicsecret",
     "vaultdynamicsecrets",
     "virtualservice",
     "virtualservices",

.github/ISSUE_TEMPLATE/bug-report.md

@@ -1,131 +0,0 @@
----
-name: Bug report
-about: Create a report to help us improve
-title: ''
-labels: NeedsInvestigation, Triage
-assignees: ''
----
-
-<!--
-Please answer these questions before submitting your issue. Thanks!
-To ask questions, see https://github.com/holos-run/holos/discussions
--->
-
-### What version of holos are you using (`holos --version`)?
-
-```
-0.0.0
-```
-
-### Does this issue reproduce with the latest release?
-
-<!--
-Get the latest release with:
-
-    brew install holos-run/tap/holos
-
-Or see https://holos.run/docs/v1alpha5/tutorial/setup/
--->
-
-### What did you do?
-
-<!--
-Please provide a testscript that should pass, but does not because of the bug.
-See the below example.
-
-You can create a txtar from a directory with:
-
-  holos txtar ./path/to/dir
-
-Refer to: https://github.com/rogpeppe/go-internal/tree/master/cmd/testscript
--->
-
-Steps to reproduce:
-
-```shell
-testscript -v -continue <<EOF
-```
-
-```txtar
-# Have: an error related to the imported Kustomize schemas.
-# Want: holos show buildplans to work.
-exec holos --version
-exec holos init platform v1alpha5 --force
-# remove the fix to trigger the bug
-rm cue.mod/pkg/sigs.k8s.io/kustomize/api/types/var.cue
-# want a BuildPlan shown
-exec holos show buildplans
-cmp stdout buildplan.yaml
-# want this error to go away
-! stderr 'cannot convert non-concrete value string'
--- buildplan.yaml --
-kind: BuildPlan
--- platform/example.cue --
-package holos
-
-Platform: Components: example: {
-	name: "example"
-	path: "components/example"
-}
--- components/example/example.cue --
-package holos
-
-import "encoding/yaml"
-
-holos: Component.BuildPlan
-
-Component: #Kustomize & {
-	KustomizeConfig: Kustomization: patches: [
-		{
-			target: kind: "CustomResourceDefinition"
-			patch: yaml.Marshal([{
-				op:    "add"
-				path:  "/metadata/annotations/example"
-				value: "example-value"
-			}])
-		},
-	]
-}
-```
-```shell
-EOF
-```
-
-### What did you expect to see?
-
-The testscript should pass.
-
-### What did you see instead?
-
-The testscript fails because of the bug.
-
-```txt
-# Have: an error related to the imported Kustomize schemas.
-# Want: holos show buildplans to work. (0.168s)
-> exec holos --version
-[stdout]
-0.100.1-2-g9b10e23-dirty
-> exec holos init platform v1alpha5 --force
-# remove the fix to trigger the bug (0.000s)
-> rm cue.mod/pkg/sigs.k8s.io/kustomize/api/types/var.cue
-# want a BuildPlan shown (0.091s)
-> exec holos show buildplans
-[stderr]
-could not run: holos.spec.artifacts.0.transformers.0.kustomize.kustomization.patches.0.target.name: cannot convert non-concrete value string at builder/v1alpha5/builder.go:218
-holos.spec.artifacts.0.transformers.0.kustomize.kustomization.patches.0.target.name: cannot convert non-concrete value string:
-    $WORK/cue.mod/gen/sigs.k8s.io/kustomize/api/types/var_go_gen.cue:33:2
-[exit status 1]
-FAIL: <stdin>:8: unexpected command failure
-> cmp stdout buildplan.yaml
-diff stdout buildplan.yaml
---- stdout
-+++ buildplan.yaml
-@@ -0,0 +1,1 @@
-+kind: BuildPlan
-
-FAIL: <stdin>:9: stdout and buildplan.yaml differ
-# want this error to go away (0.000s)
-> ! stderr 'cannot convert non-concrete value string'
-FAIL: <stdin>:11: unexpected match for `cannot convert non-concrete value string` found in stderr: cannot convert non-concrete value string
-failed run
-```

.github/workflows/container.yaml

@@ -1,143 +0,0 @@
-name: Container
-
-# Only allow actors with write permission to the repository to trigger this
-# workflow.
-permissions:
-  contents: write
-
-on:
-  push:
-    tags:
-      - 'v*'
-  workflow_dispatch:
-    inputs:
-      git_ref:
-        description: 'Git ref to build (e.g., refs/tags/v1.2.3, refs/heads/main)'
-        required: true
-        type: string
-
-jobs:
-  buildx:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-      attestations: write
-      id-token: write
-    steps:
-      - name: Set tag from trigger event
-        id: opts
-        run: |
-          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
-            echo "ref=${{ inputs.git_ref }}" >> $GITHUB_OUTPUT
-          else
-            echo "ref=${GITHUB_REF}" >> $GITHUB_OUTPUT
-          fi
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          ref: ${{ steps.opts.outputs.ref }}
-      - name: SHA
-        id: sha
-        run: echo "sha=$(/usr/bin/git log -1 --format='%H')" >> $GITHUB_OUTPUT
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-      - name: Fetch tags
-        run: git fetch --prune --unshallow --tags
-      - name: Set Tags
-        id: tags
-        run: |
-          echo "detail=$(/usr/bin/git describe --tags HEAD)" >> $GITHUB_OUTPUT
-          echo "suffix=$(test -n "$(git status --porcelain)" && echo '-dirty' || echo '')" >> $GITHUB_OUTPUT
-          echo "tag=$(/usr/bin/git describe --tags HEAD)$(test -n "$(git status --porcelain)" && echo '-dirty' || echo '')" >> $GITHUB_OUTPUT
-
-      - name: Login to ghcr.io
-        uses: docker/login-action@v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-      - name: Build and push container images
-        id: build-and-push
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          platforms: linux/amd64,linux/arm64
-          push: true
-          tags: |
-            ghcr.io/holos-run/holos:${{ steps.tags.outputs.tag }}
-            ghcr.io/holos-run/holos:${{ steps.sha.outputs.sha }}${{ steps.tags.outputs.suffix }}
-      - name: Setup Cosign to sign container images
-        uses: sigstore/cosign-installer@v3.7.0
-      - name: Sign with GitHub OIDC Token
-        env:
-          DIGEST: ${{ steps.build-and-push.outputs.digest }}
-        run: |
-          cosign sign --yes ghcr.io/holos-run/holos:${{ steps.tags.outputs.tag }}@${DIGEST}
-          cosign sign --yes ghcr.io/holos-run/holos:${{ steps.sha.outputs.sha }}${{ steps.tags.outputs.suffix }}@${DIGEST}
-
-      - uses: actions/create-github-app-token@v1
-        id: app-token
-        with:
-          owner: ${{ github.repository_owner }}
-          app-id: ${{ vars.GORELEASER_APP_ID }}
-          private-key: ${{ secrets.GORELEASER_APP_PRIVATE_KEY }}
-      - name: Get GitHub App User ID
-        id: get-user-id
-        run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
-        env:
-          GH_TOKEN: ${{ steps.app-token.outputs.token }}
-      - run: |
-          git config --global user.name '${{ steps.app-token.outputs.app-slug }}[bot]'
-          git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com'
-      - name: Update holos-run/holos-action
-        env:
-          IMAGE: ghcr.io/holos-run/holos:v0.102.1
-          VERSION: ${{ steps.tags.outputs.tag }}
-          USER_ID: ${{ steps.get-user-id.outputs.user-id }}
-          TOKEN: ${{ steps.app-token.outputs.token }}
-        run: |
-          set -euo pipefail
-          git clone "https://github.com/holos-run/holos-action"
-          cd holos-action
-          git remote set-url origin https://${USER_ID}:${TOKEN}@github.com/holos-run/holos-action
-          docker pull --quiet "${IMAGE}"
-          docker run -v $(pwd):/app --workdir /app --rm "${IMAGE}"  \
-            holos cue export --out yaml action.cue -t "version=${VERSION}" > action.yml
-          git add action.yml
-          git commit -m "ci: update holos to ${VERSION} - https://github.com/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}" || (echo "No changes to commit"; exit 0)
-          git push origin HEAD:main HEAD:v0 HEAD:v1
-
-      - name: Login to quay.io
-        uses: docker/login-action@v3
-        with:
-          registry: quay.io
-          username: ${{ secrets.QUAY_USER }}
-          password: ${{ secrets.QUAY_TOKEN }}
-      - name: Push to quay.io
-        env:
-          DIGEST: ${{ steps.build-and-push.outputs.digest }}
-        run: |
-          # docker push quay.io/holos-run/holos:${{ steps.tags.outputs.tag }}
-          docker pull --quiet ghcr.io/holos-run/holos:${{ steps.tags.outputs.tag }}@${DIGEST}
-          docker tag ghcr.io/holos-run/holos:${{ steps.tags.outputs.tag }}@${DIGEST} \
-                     quay.io/holos-run/holos:${{ steps.tags.outputs.tag }}
-          docker push quay.io/holos-run/holos:${{ steps.tags.outputs.tag }}
-
-          docker pull --quiet ghcr.io/holos-run/holos:${{ steps.sha.outputs.sha }}${{ steps.tags.outputs.suffix }}@${DIGEST}
-          docker tag ghcr.io/holos-run/holos:${{ steps.sha.outputs.sha }}${{ steps.tags.outputs.suffix }}@${DIGEST} \
-                     quay.io/holos-run/holos:${{ steps.sha.outputs.sha }}${{ steps.tags.outputs.suffix }}
-          docker push quay.io/holos-run/holos:${{ steps.sha.outputs.sha }}${{ steps.tags.outputs.suffix }}
-      - name: Sign quay.io image
-        env:
-          DIGEST: ${{ steps.build-and-push.outputs.digest }}
-        run: |
-          cosign sign --yes quay.io/holos-run/holos:${{ steps.tags.outputs.tag }}@${DIGEST}
-          cosign sign --yes quay.io/holos-run/holos:${{ steps.sha.outputs.sha }}${{ steps.tags.outputs.suffix }}@${DIGEST}
-
-    outputs:
-      tag: ${{ steps.tags.outputs.tag }}
-      detail: ${{ steps.tags.outputs.detail }}

.github/workflows/dev-deploy.yaml

@@ -2,7 +2,7 @@ name: Dev Deploy
 
 on:
   push:
-    branches: ['dev-deploy']
+    branches: ['main', 'dev-deploy']
 
 jobs:
   deploy:

.github/workflows/lint.yaml

@@ -1,5 +1,6 @@
 ---
-name: Spelling
+# https://github.com/golangci/golangci-lint-action?tab=readme-ov-file#how-to-use
+name: Lint
 "on":
   push:
     branches:
@@ -7,11 +8,35 @@ name: Spelling
       - test
   pull_request:
     types: [opened, synchronize]
+
 permissions:
   contents: read
+
 jobs:
-  cspell:
+  lint:
+    name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - run: ./hack/cspell
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: stable
+
+      ## Not needed on ubuntu-latest
+      # - name: Install Packages
+      #   run: sudo apt update && sudo apt -qq -y install git curl zip unzip tar bzip2 make
+
+      - name: Install Tools
+        run: make tools
+
+      - name: Lint
+        # golangci-lint runs in a separate workflow.
+        run: make lint -o golangci-lint

.github/workflows/release.yaml

@@ -35,9 +35,6 @@ jobs:
         with:
           go-version: stable
 
-      - name: Setup Syft
-        uses: anchore/sbom-action/download-syft@1ca97d9028b51809cf6d3c934c3e160716e1b605 # v0.17.5
-
       # Necessary to run these outside of goreleaser, otherwise
       # /home/runner/_work/holos/holos/internal/frontend/node_modules/.bin/protoc-gen-connect-query is not in PATH
       - name: Install Tools
@@ -57,19 +54,11 @@ jobs:
       - name: Git diff
         run: git diff
 
-      - uses: actions/create-github-app-token@v1
-        id: app-token
-        with:
-          owner: ${{ github.repository_owner }}
-          app-id: ${{ vars.GORELEASER_APP_ID }}
-          private-key: ${{ secrets.GORELEASER_APP_PRIVATE_KEY }}
-
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v5
         with:
           distribution: goreleaser
-          version: '~> v2'
+          version: latest
           args: release --clean
         env:
-          HOMEBREW_TAP_GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test.yaml

@@ -28,11 +28,19 @@ jobs:
         with:
           go-version: stable
 
+      - name: Install Packages
+        run: sudo apt update && sudo apt -qq -y install git curl zip unzip tar bzip2 make
+
       - name: Set up Helm
         uses: azure/setup-helm@v4
 
       - name: Set up Kubectl
         uses: azure/setup-kubectl@v4
 
+      - name: Install Tools
+        run: |
+          set -x
+          make tools
+
       - name: Test
         run: ./scripts/test

.goreleaser.yaml

@@ -6,7 +6,7 @@
 # yaml-language-server: $schema=https://goreleaser.com/static/schema.json
 # vim: set ts=2 sw=2 tw=0 fo=cnqoj
 
-version: 2
+version: 1
 
 before:
   hooks:
@@ -50,39 +50,3 @@ changelog:
     exclude:
       - "^docs:"
       - "^test:"
-
-source:
-  enabled: true
-  name_template: '{{ .ProjectName }}_{{ .Version }}_source_code'
-
-sboms:
-  - id: source
-    artifacts: source
-    documents:
-      - "{{ .ProjectName }}_{{ .Version }}_sbom.spdx.json"
-
-brews:
-  - name: holos
-    repository:
-      owner: holos-run
-      name: homebrew-tap
-      branch: main
-      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
-    directory: Formula
-    homepage: "https://holos.run"
-    description: "Holos CLI"
-    dependencies:
-      - name: helm
-        type: optional
-      - name: kubectl
-        type: optional
-    install: |
-      bin.install "holos"
-      bash_output = Utils.safe_popen_read(bin/"holos", "completion", "bash")
-      (bash_completion/"holos").write bash_output
-      zsh_output = Utils.safe_popen_read(bin/"holos", "completion", "zsh")
-      (zsh_completion/"_holos").write zsh_output
-      fish_output = Utils.safe_popen_read(bin/"holos", "completion", "fish")
-      (fish_completion/"holos.fish").write fish_output
-    test: |
-      system "#{bin}/holos --version"

Dockerfile

@@ -1,31 +1,8 @@
-FROM registry.k8s.io/kubectl:v1.31.0 AS kubectl
-# https://github.com/GoogleContainerTools/distroless
-FROM golang:1.23 AS build
-
-WORKDIR /go/src/app
-COPY . .
-
-RUN CGO_ENABLED=0 make install
-RUN CGO_ENABLED=0 go install sigs.k8s.io/kustomize/kustomize/v5
-
-# Install helm to /usr/local/bin/helm
-# https://helm.sh/docs/intro/install/#from-script
-# https://holos.run/docs/v1alpha5/tutorial/setup/#dependencies
-RUN curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 \
-  && chmod 700 get_helm.sh \
-  && DESIRED_VERSION=v3.16.2 ./get_helm.sh \
-  && rm -f get_helm.sh
-
-COPY --from=kubectl /bin/kubectl /usr/local/bin/
-
-# distroless
-FROM gcr.io/distroless/static-debian12 AS final
-COPY --from=build \
-     /go/bin/holos \
-     /go/bin/kustomize \
-     /usr/local/bin/kubectl \
-     /usr/local/bin/helm \
-     /bin/
-
-# Usage: docker run -v $(pwd):/app --workdir /app --rm -it quay.io/holos-run/holos holos render platform
-CMD ["/bin/holos"]
+FROM quay.io/holos-run/debian:bullseye AS final
+USER root
+WORKDIR /app
+ADD bin bin
+RUN chown -R app: /app
+# Kubernetes requires the user to be numeric
+USER 8192
+ENTRYPOINT bin/holos server

Makefile

@@ -154,10 +154,6 @@ website: ## Build website
 unity: ## https://cuelabs.dev/unity/
 	./scripts/unity
 
-.PHONY: update-docs
-update-docs: ## Update doc examples
-	HOLOS_UPDATE_SCRIPTS=1 go test -v ./doc/md/...
-
 .PHONY: help
 help:  ## Display this help menu.
 	@awk 'BEGIN {FS = ":.*##"; printf "\nUsage:\n  make \033[36m<target>\033[0m\n"} /^[a-zA-Z_0-9-]+:.*?##/ { printf "  \033[36m%-20s\033[0m %s\n", $$1, $$2 } /^##@/ { printf "\n\033[1m%s\033[0m\n", substr($$0, 5) } ' $(MAKEFILE_LIST)

README.md

@@ -1,130 +1,35 @@
-# Holos
+## Holos - A Holistic Development Platform
 
 <img width="50%"
 align="right"
 style="display: block; margin: 40px auto;"
 src="https://openinfrastructure.co/blog/2016/02/27/logo/logorectangle.png">
 
-[Holos] is a configuration management tool for Kubernetes implementing the
-[rendered manifests pattern]. It handles configurations ranging from single
-resources to multi-cluster platforms across regions.
+Building and maintaining a software development platform is a complex and time
+consuming endeavour.  Organizations often dedicate a team of 3-4 who need 6-12
+months to build the platform.
 
-Key components:
-- Platform schemas defining component integration
-- Building blocks unifying Helm, Kustomize and Kubernetes configs with CUE
-- BuildPlan pipeline for generating, transforming and validating manifests
+Holos is a tool and a reference platform to reduce the complexity and speed up
+the process of building a modern, cloud native software development platform.
 
-```mermaid
----
-title: Rendering Overview
----
-graph LR
-    Platform[<a href="https://holos.run/docs/v1alpha5/api/author/#Platform">Platform</a>]
-    Component[<a href="https://holos.run/docs/v1alpha5/api/author/#ComponentConfig">Components</a>]
+- **Accelerate new projects** - Reduce time to market and operational complexity by starting your new project on top of the Holos reference platform.
+- **Modernize existing projects** - Incrementally incorporate your existing platform services into Holos for simpler integration.
+- **Unified configuration model** - Increase safety and reduce the risk of config changes with CUE.
+- **First class Helm and Kustomize support** - Leverage and reuse your existing investment in existing configuration tools such as Helm and Kustomize.
+- **Modern Authentication and Authorization** - Holos seamlessly integrates platform identity and access management with zero-trust beyond corp style authorization policy.
 
-    Helm[<a href="https://holos.run/docs/v1alpha5/api/author/#Helm">Helm</a>]
-    Kustomize[<a href="https://holos.run/docs/v1alpha5/api/author/#Kustomize">Kustomize</a>]
-    Kubernetes[<a href="https://holos.run/docs/v1alpha5/api/author/#Kubernetes">Kubernetes</a>]
+## Quick Installation
 
-    BuildPlan[<a href="https://holos.run/docs/v1alpha5/api/core/#BuildPlan">BuildPlan</a>]
-
-    ResourcesArtifact[<a href="https://holos.run/docs/v1alpha5/api/core/#Artifact">Resources<br/>Artifact</a>]
-    GitOpsArtifact[<a href="https://holos.run/docs/v1alpha5/api/core/#Artifact">GitOps<br/>Artifact</a>]
-
-    Generators[<a href="https://holos.run/docs/v1alpha5/api/core/#Generator">Generators</a>]
-    Transformers[<a href="https://holos.run/docs/v1alpha5/api/core/#Transformer">Transformers</a>]
-    Validators[<a href="https://holos.run/docs/v1alpha5/api/core/#Validator">Validators</a>]
-    Files[Manifest<br/>Files]
-
-    Platform --> Component
-    Component --> Helm --> BuildPlan
-    Component --> Kubernetes --> BuildPlan
-    Component --> Kustomize --> BuildPlan
-
-    BuildPlan --> ResourcesArtifact --> Generators
-    BuildPlan --> GitOpsArtifact --> Generators
-
-    Generators --> Transformers --> Validators --> Files
+```console
+go install github.com/holos-run/holos/cmd/holos@latest
 ```
 
-## Setup
+## Docs and Support
 
-```shell
-brew install holos-run/tap/holos
-```
+The documentation for developing and using Holos is available at: https://holos.run
 
-Refer to [setup] for other installation methods and dependencies.
-
-## Example
-
-See our [tutorial] for a complete hello world example.
-
-```cue showLineNumbers
-package holos
-
-holos: Component.BuildPlan
-
-Component: #Helm & {
-	Name: "podinfo"
-	Chart: {
-		version: "6.6.2"
-		repository: {
-			name: "podinfo"
-			url:  "https://stefanprodan.github.io/podinfo"
-		}
-	}
-	Values: ui: {
-		message: string | *"Hello World" @tag(message, type=string)
-	}
-}
-```
-
-## Organizational Role
-
-Platform engineers use Holos to generate Kubernetes manifests, both locally and
-in CI pipelines. The manifests are committed to version control and deployed via
-GitOps tools like ArgoCD or Flux.
-
-Holos integrates seamlessly with existing Helm charts, Kustomize bases, and
-other version-controlled configurations.
-
-## Advantages of Holos
-
-### Safe
-
-Holos leverages [CUE] for strong typing and validation of configuration data,
-ensuring consistent output from Helm and other tools.
-
-### Consistent
-
-A unified pipeline processes all configurations - whether from CUE, Helm, or
-Kustomize - through the same well-defined stages.
-
-### Flexible
-
-Composable building blocks for generation, transformation, validation and
-integration let teams assemble workflows that match their needs.
-
-The core is intentionally unopinionated about platform configuration patterns.
-Common needs like environments and clusters are provided as customizable
-[topics] recipes rather than enforced structures.
-
-## Getting Help
-
-Get support through our [Discord] channel or [GitHub discussions]. Configuration
-challenges arise at all experience levels - we welcome your questions and are
-here to help.
+For discussion and support, [open a discussion](https://github.com/orgs/holos-run/discussions/new/choose).
 
 ## License
 
 Holos is licensed under Apache 2.0 as found in the [LICENSE file](LICENSE).
-
-[Holos]: https://holos.run/docs/overview/
-[rendered manifests pattern]: https://akuity.io/blog/the-rendered-manifests-pattern
-[CUE]: https://cuelang.org/
-[Discord]: https://discord.gg/JgDVbNpye7
-[GitHub discussions]: https://github.com/holos-run/holos/discussions
-[Why CUE for Configuration]: https://holos.run/blog/why-cue-for-configuration/
-[tutorial]: https://holos.run/docs/overview/
-[setup]: https://holos.run/docs/setup/
-[topics]: https://holos.run/docs/topics/

api/author/v1alpha5/definitions.go

@@ -1,155 +0,0 @@
-// Package author contains a standard set of schemas for component authors to
-// generate common [core] BuildPlans.
-//
-// Holos values stability, flexibility, and composition.  This package
-// intentionally defines only the minimal necessary set of structures.
-// Component authors are encouraged to define their own structures building on
-// our example [topics].
-//
-// The Holos Maintainers may add definitions to this package if the community
-// identifies nearly all users must define the exact same structure.  Otherwise,
-// definitions should be added as a customizable example in [topics].
-//
-// For example, structures representing a cluster and environment almost always
-// need to be defined.  Their definition varies from one organization to the
-// next.  Therefore, customizable definitions for a cluster and environment are
-// best maintained in [topics], not standardized in this package.
-//
-// [core]: https://holos.run/docs/api/core/
-// [topics]: https://holos.run/docs/topics/
-package author
-
-import core "github.com/holos-run/holos/api/core/v1alpha5"
-
-//go:generate ../../../hack/gendoc
-
-// Platform assembles a core Platform in the Resource field for the holos render
-// platform command.  Use the Components field to register components with the
-// platform.
-type Platform struct {
-	Name       string
-	Components map[NameLabel]core.Component
-	Resource   core.Platform
-}
-
-// ComponentConfig represents the configuration common to all kinds of
-// components for use with the holos render component command.  All component
-// kinds may be transformed with [kustomize] configured with the
-// [KustomizeConfig] field.
-//
-//   - [Helm] charts.
-//   - [Kubernetes] resources generated from CUE.
-//   - [Kustomize] bases.
-//
-// [kustomize]: https://kubectl.docs.kubernetes.io/references/kustomize/kustomization/
-type ComponentConfig struct {
-	// Name represents the BuildPlan metadata.name field.  Used to construct the
-	// fully rendered manifest file path.
-	Name string
-	// Labels represent the BuildPlan metadata.labels field.
-	Labels map[string]string
-	// Annotations represent the BuildPlan metadata.annotations field.
-	Annotations map[string]string
-
-	// Path represents the path to the component producing the BuildPlan.
-	Path string
-	// Parameters are useful to reuse a component with various parameters.
-	// Injected as CUE @tag variables.  Parameters with a "holos_" prefix are
-	// reserved for use by the Holos Authors.
-	Parameters map[string]string
-	// OutputBaseDir represents the output base directory used when assembling
-	// artifacts.  Useful to organize components by clusters or other parameters.
-	// For example, holos writes resource manifests to
-	// {WriteTo}/{OutputBaseDir}/components/{Name}/{Name}.gen.yaml
-	OutputBaseDir string `cue:"string | *\"\""`
-
-	// Resources represents kubernetes resources mixed into the rendered manifest.
-	Resources core.Resources
-	// KustomizeConfig represents the kustomize configuration.
-	KustomizeConfig KustomizeConfig
-	// Validators represent checks that must pass for output to be written.
-	Validators map[NameLabel]core.Validator
-	// Artifacts represents additional artifacts to mix in.  Useful for adding
-	// GitOps resources.  Each Artifact is unified without modification into the
-	// BuildPlan.
-	Artifacts map[NameLabel]core.Artifact
-}
-
-// Helm assembles a BuildPlan rendering a helm chart.  Useful to mix in
-// additional resources from CUE and transform the helm output with kustomize.
-type Helm struct {
-	ComponentConfig `json:",inline"`
-
-	// Chart represents a Helm chart.
-	Chart core.Chart
-	// Values represents data to marshal into a values.yaml for helm.
-	Values core.Values
-	// ValueFiles represents value files for migration from helm value
-	// hierarchies.  Use Values instead.
-	ValueFiles []core.ValueFile `json:",omitempty"`
-	// EnableHooks enables helm hooks when executing the `helm template` command.
-	EnableHooks bool `cue:"true | *false"`
-	// Namespace sets the helm chart namespace flag if provided.
-	Namespace string `json:",omitempty"`
-	// APIVersions represents the helm template --api-versions flag
-	APIVersions []string `json:",omitempty"`
-	// KubeVersion represents the helm template --kube-version flag
-	KubeVersion string `json:",omitempty"`
-
-	// BuildPlan represents the derived BuildPlan produced for the holos render
-	// component command.
-	BuildPlan core.BuildPlan
-}
-
-// Kubernetes assembles a BuildPlan containing inline resources exported from
-// CUE.
-type Kubernetes struct {
-	ComponentConfig `json:",inline"`
-
-	// BuildPlan represents the derived BuildPlan produced for the holos render
-	// component command.
-	BuildPlan core.BuildPlan
-}
-
-// Kustomize assembles a BuildPlan rendering manifests from a [kustomize]
-// kustomization.
-//
-// [kustomize]: https://kubectl.docs.kubernetes.io/references/kustomize/kustomization/
-type Kustomize struct {
-	ComponentConfig `json:",inline"`
-
-	// BuildPlan represents the derived BuildPlan produced for the holos render
-	// component command.
-	BuildPlan core.BuildPlan
-}
-
-// KustomizeConfig represents the configuration for [kustomize] post processing.
-// Use the Files field to mix in plain manifest files located in the component
-// directory.  Use the Resources field to mix in manifests from network urls.
-//
-// [kustomize]: https://kubectl.docs.kubernetes.io/references/kustomize/kustomization/
-type KustomizeConfig struct {
-	// Kustomization represents the kustomization used to transform resources.
-	// Note the resources field is internally managed from the Files and Resources fields.
-	Kustomization map[string]any `json:",omitempty"`
-	// Files represents files to copy from the component directory for kustomization.
-	Files map[string]struct{ Source string } `cue:"{[NAME=_]: Source: NAME}"`
-	// Resources represents additional entries to included in the resources list.
-	Resources map[string]struct{ Source string } `cue:"{[NAME=_]: Source: NAME}"`
-	// CommonLabels represents common labels added without including selectors.
-	CommonLabels map[string]string
-}
-
-// NameLabel represents the common use case of converting a struct to a list
-// where the name field of each value unifies with the field name of the outer
-// struct.
-//
-// For example:
-//
-//	S: [NameLabel=string]: name: NameLabel
-//	S: jeff: _
-//	S: gary: _
-//	S: nate: _
-//	L: [for x in S {x}]
-//	// L is [{name: "jeff"}, {name: "gary"}, {name: "nate"}]
-type NameLabel string

api/author/v1alpha5/header.yaml

@@ -1,5 +0,0 @@
----
-title: Author Schemas
-description: Standardized schemas for component authors.
-sidebar_position: 200
----

api/core/v1alpha5/header.yaml

@@ -1,5 +0,0 @@
----
-title: Core Schemas
-description: BuildPlan defines the holos rendering pipeline.
-sidebar_position: 100
----

api/core/v1alpha5/types.go

@@ -1,364 +0,0 @@
-// Package core contains schemas for a [Platform] and [BuildPlan].  Holos takes
-// a [Platform] as input, then iterates over each [Component] to produce a
-// [BuildPlan].  Holos processes the [BuildPlan] to produce fully rendered
-// manifests, each an [Artifact].
-package core
-
-//go:generate ../../../hack/gendoc
-
-// BuildPlan represents an implementation of the [rendered manifest pattern].
-// Holos processes a BuildPlan to produce one or more [Artifact] output files.
-// BuildPlan artifact files usually contain Kubernetes manifests, but they may
-// have any content.
-//
-// A BuildPlan usually produces two artifacts.  One artifact contains a manifest
-// of resources.  A second artifact contains a GitOps resource to manage the
-// first, usually an ArgoCD Application resource.
-//
-// Holos uses CUE to construct a BuildPlan.  A future enhancement will support
-// user defined executables providing a BuildPlan to Holos in the style of an
-// [external credential provider].
-//
-// [rendered manifest pattern]: https://akuity.io/blog/the-rendered-manifests-pattern
-// [external credential provider]: https://github.com/kubernetes/enhancements/blob/313ad8b59c80819659e1fbf0f165230f633f2b22/keps/sig-auth/541-external-credential-providers/README.md
-type BuildPlan struct {
-	// Kind represents the type of the resource.
-	Kind string `json:"kind" yaml:"kind" cue:"\"BuildPlan\""`
-	// APIVersion represents the versioned schema of the resource.
-	APIVersion string `json:"apiVersion" yaml:"apiVersion" cue:"string | *\"v1alpha5\""`
-	// Metadata represents data about the resource such as the Name.
-	Metadata Metadata `json:"metadata" yaml:"metadata"`
-	// Spec specifies the desired state of the resource.
-	Spec BuildPlanSpec `json:"spec" yaml:"spec"`
-}
-
-// BuildPlanSpec represents the specification of the [BuildPlan].
-type BuildPlanSpec struct {
-	// Artifacts represents the artifacts for holos to build.
-	Artifacts []Artifact `json:"artifacts" yaml:"artifacts"`
-	// Disabled causes the holos cli to disregard the build plan.
-	Disabled bool `json:"disabled,omitempty" yaml:"disabled,omitempty"`
-}
-
-// Artifact represents one fully rendered manifest produced by a [Transformer]
-// sequence, which transforms a [Generator] collection.  A [BuildPlan] produces
-// an [Artifact] collection.
-//
-// Each Artifact produces one manifest file artifact.  Generator Output values
-// are used as Transformer Inputs.  The Output field of the final [Transformer]
-// should have the same value as the Artifact field.
-//
-// When there is more than one [Generator] there must be at least one
-// [Transformer] to combine outputs into one Artifact.  If there is a single
-// Generator, it may directly produce the Artifact output.
-//
-// An Artifact is processed concurrently with other artifacts in the same
-// [BuildPlan].  An Artifact should not use an output from another Artifact as
-// an input.  Each [Generator] may also run concurrently.  Each [Transformer] is
-// executed sequentially starting after all generators have completed.
-//
-// Output fields are write-once.  It is an error for multiple Generators or
-// Transformers to produce the same Output value within the context of a
-// [BuildPlan].
-type Artifact struct {
-	Artifact     FilePath      `json:"artifact,omitempty" yaml:"artifact,omitempty"`
-	Generators   []Generator   `json:"generators,omitempty" yaml:"generators,omitempty"`
-	Transformers []Transformer `json:"transformers,omitempty" yaml:"transformers,omitempty"`
-	Validators   []Validator   `json:"validators,omitempty" yaml:"validators,omitempty"`
-	Skip         bool          `json:"skip,omitempty" yaml:"skip,omitempty"`
-}
-
-// Generator generates Kubernetes resources.  [Helm] and [Resources] are the
-// most commonly used, often paired together to mix-in resources to an
-// unmodified Helm chart.  A simple [File] generator is also available for use
-// with the [Kustomize] transformer.
-//
-// Each Generator in an [Artifact] must have a distinct Output value for a
-// [Transformer] to reference.
-//
-//  1. [Resources] - Generates resources from CUE code.
-//  2. [Helm] - Generates rendered yaml from a [Chart].
-//  3. [File] - Generates data by reading a file from the component directory.
-type Generator struct {
-	// Kind represents the kind of generator.  Must be Resources, Helm, or File.
-	Kind string `json:"kind" yaml:"kind" cue:"\"Resources\" | \"Helm\" | \"File\""`
-	// Output represents a file for a Transformer or Artifact to consume.
-	Output FilePath `json:"output" yaml:"output"`
-	// Resources generator. Ignored unless kind is Resources.  Resources are
-	// stored as a two level struct.  The top level key is the Kind of resource,
-	// e.g. Namespace or Deployment.  The second level key is an arbitrary
-	// InternalLabel.  The third level is a map[string]any representing the
-	// Resource.
-	Resources Resources `json:"resources,omitempty" yaml:"resources,omitempty"`
-	// Helm generator. Ignored unless kind is Helm.
-	Helm Helm `json:"helm,omitempty" yaml:"helm,omitempty"`
-	// File generator. Ignored unless kind is File.
-	File File `json:"file,omitempty" yaml:"file,omitempty"`
-}
-
-// Resource represents one kubernetes api object.
-type Resource map[string]any
-
-// Resources represents Kubernetes resources.  Most commonly used to mix
-// resources into the [BuildPlan] generated from CUE, but may be generated from
-// elsewhere.
-type Resources map[Kind]map[InternalLabel]Resource
-
-// File represents a simple single file copy [Generator].  Useful with a
-// [Kustomize] [Transformer] to process plain manifest files stored in the
-// component directory.  Multiple File generators may be used to transform
-// multiple resources.
-type File struct {
-	// Source represents a file sub-path relative to the component path.
-	Source FilePath `json:"source" yaml:"source"`
-}
-
-// Helm represents a [Chart] manifest [Generator].
-type Helm struct {
-	// Chart represents a helm chart to manage.
-	Chart Chart `json:"chart" yaml:"chart"`
-	// Values represents values for holos to marshal into values.yaml when
-	// rendering the chart.  Values follow ValueFiles when both are provided.
-	Values Values `json:"values" yaml:"values"`
-	// ValueFiles represents hierarchial value files passed in order to the helm
-	// template -f flag.  Useful for migration from an ApplicationSet.  Use Values
-	// instead.  ValueFiles precede Values when both are provided.
-	ValueFiles []ValueFile `json:"valueFiles,omitempty" yaml:"valueFiles,omitempty"`
-	// EnableHooks enables helm hooks when executing the `helm template` command.
-	EnableHooks bool `json:"enableHooks,omitempty" yaml:"enableHooks,omitempty"`
-	// Namespace represents the helm namespace flag
-	Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"`
-	// APIVersions represents the helm template --api-versions flag
-	APIVersions []string `json:"apiVersions,omitempty" yaml:"apiVersions,omitempty"`
-	// KubeVersion represents the helm template --kube-version flag
-	KubeVersion string `json:"kubeVersion,omitempty" yaml:"kubeVersion,omitempty"`
-}
-
-// ValueFile represents one Helm value file produced from CUE.
-type ValueFile struct {
-	// Name represents the file name, e.g. "region-values.yaml"
-	Name string `json:"name" yaml:"name"`
-	// Kind is a discriminator.
-	Kind string `json:"kind" yaml:"kind" cue:"\"Values\""`
-	// Values represents values for holos to marshal into the file name specified
-	// by Name when rendering the chart.
-	Values Values `json:"values,omitempty" yaml:"values,omitempty"`
-}
-
-// Values represents [Helm] Chart values generated from CUE.
-type Values map[string]any
-
-// Chart represents a [Helm] Chart.
-type Chart struct {
-	// Name represents the chart name.
-	Name string `json:"name" yaml:"name"`
-	// Version represents the chart version.
-	Version string `json:"version" yaml:"version"`
-	// Release represents the chart release when executing helm template.
-	Release string `json:"release" yaml:"release"`
-	// Repository represents the repository to fetch the chart from.
-	Repository Repository `json:"repository,omitempty" yaml:"repository,omitempty"`
-}
-
-// Repository represents a [Helm] [Chart] repository.
-//
-// The Auth field is useful to configure http basic authentication to the Helm
-// repository.  Holos gets the username and password from the environment
-// variables represented by the Auth field.
-type Repository struct {
-	Name string `json:"name" yaml:"name"`
-	URL  string `json:"url" yaml:"url"`
-	Auth Auth   `json:"auth,omitempty" yaml:"auth,omitempty"`
-}
-
-// Auth represents environment variable names containing auth credentials.
-type Auth struct {
-	Username AuthSource `json:"username" yaml:"username"`
-	Password AuthSource `json:"password" yaml:"password"`
-}
-
-// AuthSource represents a source for the value of an [Auth] field.
-type AuthSource struct {
-	Value   string `json:"value,omitempty" yaml:"value,omitempty"`
-	FromEnv string `json:"fromEnv,omitempty" yaml:"fromEnv,omitempty"`
-}
-
-// Transformer combines multiple inputs from prior [Generator] or [Transformer]
-// outputs into one output.  [Kustomize] is the most commonly used transformer.
-// A simple [Join] is also supported for use with plain manifest files.
-//
-//  1. [Kustomize] - Patch and transform the output from prior generators or
-//     transformers.  See [Introduction to Kustomize].
-//  2. [Join] - Concatenate multiple prior outputs into one output.
-//
-// [Introduction to Kustomize]: https://kubectl.docs.kubernetes.io/guides/config_management/introduction/
-type Transformer struct {
-	// Kind represents the kind of transformer. Must be Kustomize, or Join.
-	Kind string `json:"kind" yaml:"kind" cue:"\"Kustomize\" | \"Join\""`
-	// Inputs represents the files to transform. The Output of prior Generators
-	// and Transformers.
-	Inputs []FilePath `json:"inputs" yaml:"inputs"`
-	// Output represents a file for a subsequent Transformer or Artifact to
-	// consume.
-	Output FilePath `json:"output" yaml:"output"`
-	// Kustomize transformer. Ignored unless kind is Kustomize.
-	Kustomize Kustomize `json:"kustomize,omitempty" yaml:"kustomize,omitempty"`
-	// Join transformer. Ignored unless kind is Join.
-	Join Join `json:"join,omitempty" yaml:"join,omitempty"`
-}
-
-// Join represents a [Transformer] using [bytes.Join] to concatenate multiple
-// inputs into one output with a separator.  Useful for combining output from
-// [Helm] and [Resources] together into one [Artifact] when [Kustomize] is
-// otherwise unnecessary.
-//
-// [bytes.Join]: https://pkg.go.dev/bytes#Join
-type Join struct {
-	Separator string `json:"separator,omitempty" yaml:"separator,omitempty"`
-}
-
-// Kustomize represents a kustomization [Transformer].
-type Kustomize struct {
-	// Kustomization represents the decoded kustomization.yaml file
-	Kustomization Kustomization `json:"kustomization" yaml:"kustomization"`
-	// Files holds file contents for kustomize, e.g. patch files.
-	Files FileContentMap `json:"files,omitempty" yaml:"files,omitempty"`
-}
-
-// Kustomization represents a kustomization.yaml file for use with the
-// [Kustomize] [Transformer].  Untyped to avoid tightly coupling holos to
-// kubectl versions which was a problem for the Flux maintainers.  Type checking
-// is expected to happen in CUE against the kubectl version the user prefers.
-type Kustomization map[string]any
-
-// FileContentMap represents a mapping of file paths to file contents.
-type FileContentMap map[FilePath]FileContent
-
-// FilePath represents a file path.
-type FilePath string
-
-// FileContent represents file contents.
-type FileContent string
-
-// Validator validates files.  Useful to validate an [Artifact] prior to writing
-// it out to the final destination.  Holos may execute validators concurrently.
-// See the [validators] tutorial for an end to end example.
-//
-// [validators]: https://holos.run/docs/v1alpha5/tutorial/validators/
-type Validator struct {
-	// Kind represents the kind of transformer. Must be Kustomize, or Join.
-	Kind string `json:"kind" yaml:"kind" cue:"\"Command\""`
-	// Inputs represents the files to validate.  Usually the final Artifact.
-	Inputs []FilePath `json:"inputs" yaml:"inputs"`
-	// Command represents a validation command.  Ignored unless kind is Command.
-	Command Command `json:"command,omitempty" yaml:"command,omitempty"`
-}
-
-// Command represents a command vetting one or more artifacts.  Holos appends
-// fully qualified input file paths to the end of the args list, then executes
-// the command.  Inputs are written into a temporary directory prior to
-// executing the command and removed afterwards.
-type Command struct {
-	Args []string `json:"args,omitempty" yaml:"args,omitempty"`
-}
-
-// InternalLabel is an arbitrary unique identifier internal to holos itself.
-// The holos cli is expected to never write a InternalLabel value to rendered
-// output files, therefore use a InternalLabel when the identifier must be
-// unique and internal.  Defined as a type for clarity and type checking.
-type InternalLabel string
-
-// Kind is a discriminator. Defined as a type for clarity and type checking.
-type Kind string
-
-// Metadata represents data about the resource such as the Name.
-type Metadata struct {
-	// Name represents the resource name.
-	Name string `json:"name" yaml:"name"`
-	// Labels represents a resource selector.
-	Labels map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"`
-	// Annotations represents arbitrary non-identifying metadata.  For example
-	// holos uses the `app.holos.run/description` annotation to log resources in a
-	// user customized way.
-	Annotations map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"`
-}
-
-// Platform represents a platform to manage.  A Platform specifies a [Component]
-// collection and integrates the components together into a holistic platform.
-// Holos iterates over the [Component] collection producing a [BuildPlan] for
-// each, which holos then executes to render manifests.
-//
-// Inspect a Platform resource holos would process by executing:
-//
-//	cue export --out yaml ./platform
-type Platform struct {
-	// Kind is a string value representing the resource.
-	Kind string `json:"kind" yaml:"kind" cue:"\"Platform\""`
-	// APIVersion represents the versioned schema of this resource.
-	APIVersion string `json:"apiVersion" yaml:"apiVersion" cue:"string | *\"v1alpha5\""`
-	// Metadata represents data about the resource such as the Name.
-	Metadata Metadata `json:"metadata" yaml:"metadata"`
-
-	// Spec represents the platform specification.
-	Spec PlatformSpec `json:"spec" yaml:"spec"`
-}
-
-// PlatformSpec represents the platform specification.
-type PlatformSpec struct {
-	// Components represents a collection of holos components to manage.
-	Components []Component `json:"components" yaml:"components"`
-}
-
-// Component represents the complete context necessary to produce a [BuildPlan]
-// from a path containing parameterized CUE configuration.
-type Component struct {
-	// Name represents the name of the component. Injected as the tag variable
-	// "holos_component_name".
-	Name string `json:"name" yaml:"name"`
-	// Path represents the path of the component relative to the platform root.
-	// Injected as the tag variable "holos_component_path".
-	Path string `json:"path" yaml:"path"`
-	// Instances represents additional cue instance paths to unify with Path.
-	// Useful to unify data files into a component BuildPlan.  Added in holos
-	// 0.101.7.
-	Instances []Instance `json:"instances,omitempty" yaml:"instances,omitempty"`
-	// WriteTo represents the holos render component --write-to flag.  If empty,
-	// the default value for the --write-to flag is used.
-	WriteTo string `json:"writeTo,omitempty" yaml:"writeTo,omitempty"`
-	// Parameters represent user defined input variables to produce various
-	// [BuildPlan] resources from one component path.  Injected as CUE @tag
-	// variables.  Parameters with a "holos_" prefix are reserved for use by the
-	// Holos Authors.  Multiple environments are a prime example of an input
-	// parameter that should always be user defined, never defined by Holos.
-	Parameters map[string]string `json:"parameters,omitempty" yaml:"parameters,omitempty"`
-	// Labels represent selector labels for the component.  Copied to the
-	// resulting BuildPlan.
-	Labels map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"`
-	// Annotations represents arbitrary non-identifying metadata.  Use the
-	// `app.holos.run/description` to customize the log message of each BuildPlan.
-	Annotations map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"`
-}
-
-// Instance represents a data instance to unify with the configuration.
-//
-// Useful to unify json and yaml files with cue configuration files for
-// integration with other tools.  For example, executing holos render platform
-// from a pull request workflow after [Kargo] executes the [yaml update] and
-// [git wait for pr] promotion steps.
-//
-// [Kargo]: https://docs.kargo.io/
-// [yaml update]: https://docs.kargo.io/references/promotion-steps#yaml-update
-// [git wait for pr]: https://docs.kargo.io/references/promotion-steps#git-wait-for-pr
-type Instance struct {
-	// Kind is a discriminator.
-	Kind string `json:"kind" yaml:"kind" cue:"\"ExtractYAML\""`
-	// Ignored unless kind is ExtractYAML.
-	ExtractYAML ExtractYAML `json:"extractYAML,omitempty" yaml:"extractYAML,omitempty"`
-}
-
-// ExtractYAML represents a cue data instance encoded as yaml or json. If Path
-// refers to a directory all files in the directory are extracted
-// non-recursively.  Otherwise, path must refer to a file.
-type ExtractYAML struct {
-	Path string `json:"path" yaml:"path"`
-}

api/v1alpha1/buildplan.go

@@ -0,0 +1,56 @@
+package v1alpha1
+
+import (
+	"errors"
+	"fmt"
+	"strings"
+)
+
+// BuildPlan is the primary interface between CUE and the Holos cli.
+type BuildPlan struct {
+	TypeMeta `json:",inline" yaml:",inline"`
+	// Metadata represents the holos component name
+	Metadata ObjectMeta    `json:"metadata,omitempty" yaml:"metadata,omitempty"`
+	Spec     BuildPlanSpec `json:"spec,omitempty" yaml:"spec,omitempty"`
+}
+
+type BuildPlanSpec struct {
+	Disabled   bool                `json:"disabled,omitempty" yaml:"disabled,omitempty"`
+	Components BuildPlanComponents `json:"components,omitempty" yaml:"components,omitempty"`
+	// DeployFiles keys represent file paths relative to the cluster deploy
+	// directory.  Map values represent the string encoded file contents.  Used to
+	// write the argocd Application, but may be used to render any file from CUE.
+	DeployFiles FileContentMap `json:"deployFiles,omitempty" yaml:"deployFiles,omitempty"`
+}
+
+type BuildPlanComponents struct {
+	HelmChartList         []HelmChart                  `json:"helmChartList,omitempty" yaml:"helmChartList,omitempty"`
+	KubernetesObjectsList []KubernetesObjects          `json:"kubernetesObjectsList,omitempty" yaml:"kubernetesObjectsList,omitempty"`
+	KustomizeBuildList    []KustomizeBuild             `json:"kustomizeBuildList,omitempty" yaml:"kustomizeBuildList,omitempty"`
+	Resources             map[string]KubernetesObjects `json:"resources,omitempty" yaml:"resources,omitempty"`
+}
+
+func (bp *BuildPlan) Validate() error {
+	errs := make([]string, 0, 2)
+	if bp.Kind != BuildPlanKind {
+		errs = append(errs, fmt.Sprintf("kind invalid: want: %s have: %s", BuildPlanKind, bp.Kind))
+	}
+	if bp.APIVersion != APIVersion {
+		errs = append(errs, fmt.Sprintf("apiVersion invalid: want: %s have: %s", APIVersion, bp.APIVersion))
+	}
+	if len(errs) > 0 {
+		return errors.New("invalid BuildPlan: " + strings.Join(errs, ", "))
+	}
+	return nil
+}
+
+func (bp *BuildPlan) ResultCapacity() (count int) {
+	if bp == nil {
+		return 0
+	}
+	count = len(bp.Spec.Components.HelmChartList) +
+		len(bp.Spec.Components.KubernetesObjectsList) +
+		len(bp.Spec.Components.KustomizeBuildList) +
+		len(bp.Spec.Components.Resources)
+	return count
+}

api/v1alpha1/component.go

@@ -0,0 +1,30 @@
+package v1alpha1
+
+// HolosComponent defines the fields common to all holos component kinds including the Render Result.
+type HolosComponent struct {
+	TypeMeta `json:",inline" yaml:",inline"`
+	// Metadata represents the holos component name
+	Metadata ObjectMeta `json:"metadata,omitempty" yaml:"metadata,omitempty"`
+	// APIObjectMap holds the marshalled representation of api objects. Think of
+	// these as resources overlaid at the back of the render pipeline.
+	APIObjectMap APIObjectMap `json:"apiObjectMap,omitempty" yaml:"apiObjectMap,omitempty"`
+	// Kustomization holds the marshalled representation of the flux kustomization
+	// which reconciles resources in git with the api server.
+	Kustomization `json:",inline" yaml:",inline"`
+	// Kustomize represents a kubectl kustomize build post-processing step.
+	Kustomize `json:",inline" yaml:",inline"`
+	// Skip causes holos to take no action regarding the component.
+	Skip bool
+}
+
+func (hc *HolosComponent) NewResult() *Result {
+	return &Result{HolosComponent: *hc}
+}
+
+func (hc *HolosComponent) GetAPIVersion() string {
+	return hc.APIVersion
+}
+
+func (hc *HolosComponent) GetKind() string {
+	return hc.Kind
+}

api/v1alpha1/constants.go

@@ -0,0 +1,11 @@
+package v1alpha1
+
+const (
+	APIVersion    = "holos.run/v1alpha1"
+	BuildPlanKind = "BuildPlan"
+	HelmChartKind = "HelmChart"
+	// ChartDir is the directory name created in the holos component directory to cache a chart.
+	ChartDir = "vendor"
+	// ResourcesFile is the file name used to store component output when post-processing with kustomize.
+	ResourcesFile = "resources.yaml"
+)

api/v1alpha1/doc.go

@@ -0,0 +1,2 @@
+// Package v1alpha1 defines the api boundary between CUE and Holos.
+package v1alpha1

api/v1alpha1/form.go

@@ -0,0 +1,13 @@
+package v1alpha1
+
+import object "github.com/holos-run/holos/service/gen/holos/object/v1alpha1"
+
+// Form represents a collection of Formly json powered form.
+type Form struct {
+	TypeMeta `json:",inline" yaml:",inline"`
+	Spec     FormSpec `json:"spec" yaml:"spec"`
+}
+
+type FormSpec struct {
+	Form object.Form `json:"form" yaml:"form"`
+}

api/v1alpha1/helm.go

@@ -0,0 +1,184 @@
+package v1alpha1
+
+import (
+	"context"
+	"fmt"
+	"os"
+	"path/filepath"
+	"strings"
+	"syscall"
+
+	"github.com/holos-run/holos"
+	"github.com/holos-run/holos/internal/errors"
+	"github.com/holos-run/holos/internal/logger"
+	"github.com/holos-run/holos/internal/util"
+)
+
+// A HelmChart represents a helm command to provide chart values in order to render kubernetes api objects.
+type HelmChart struct {
+	HolosComponent `json:",inline" yaml:",inline"`
+	// Namespace is the namespace to install into.  TODO: Use metadata.namespace instead.
+	Namespace     string `json:"namespace"`
+	Chart         Chart  `json:"chart"`
+	ValuesContent string `json:"valuesContent"`
+	EnableHooks   bool   `json:"enableHooks"`
+}
+
+type Chart struct {
+	Name       string     `json:"name"`
+	Version    string     `json:"version"`
+	Release    string     `json:"release"`
+	Repository Repository `json:"repository,omitempty"`
+}
+
+type Repository struct {
+	Name string `json:"name"`
+	URL  string `json:"url"`
+}
+
+func (hc *HelmChart) Render(ctx context.Context, path holos.InstancePath) (*Result, error) {
+	result := Result{HolosComponent: hc.HolosComponent}
+	if err := hc.helm(ctx, &result, path); err != nil {
+		return nil, err
+	}
+	result.addObjectMap(ctx, hc.APIObjectMap)
+	if err := result.kustomize(ctx); err != nil {
+		return nil, errors.Wrap(fmt.Errorf("could not kustomize: %w", err))
+	}
+	return &result, nil
+}
+
+// runHelm provides the values produced by CUE to helm template and returns
+// the rendered kubernetes api objects in the result.
+func (hc *HelmChart) helm(ctx context.Context, r *Result, path holos.InstancePath) error {
+	log := logger.FromContext(ctx).With("chart", hc.Chart.Name)
+	if hc.Chart.Name == "" {
+		log.WarnContext(ctx, "skipping helm: no chart name specified, use a different component type")
+		return nil
+	}
+
+	cachedChartPath := filepath.Join(string(path), ChartDir, filepath.Base(hc.Chart.Name))
+	if isNotExist(cachedChartPath) {
+		// Add repositories
+		repo := hc.Chart.Repository
+		if repo.URL != "" {
+			out, err := util.RunCmd(ctx, "helm", "repo", "add", repo.Name, repo.URL)
+			if err != nil {
+				log.ErrorContext(ctx, "could not run helm", "stderr", out.Stderr.String(), "stdout", out.Stdout.String())
+				return errors.Wrap(fmt.Errorf("could not run helm repo add: %w", err))
+			}
+			// Update repository
+			out, err = util.RunCmd(ctx, "helm", "repo", "update", repo.Name)
+			if err != nil {
+				log.ErrorContext(ctx, "could not run helm", "stderr", out.Stderr.String(), "stdout", out.Stdout.String())
+				return errors.Wrap(fmt.Errorf("could not run helm repo update: %w", err))
+			}
+		} else {
+			log.DebugContext(ctx, "no chart repository url proceeding assuming oci chart")
+		}
+
+		// Cache the chart
+		if err := cacheChart(ctx, path, ChartDir, hc.Chart); err != nil {
+			return fmt.Errorf("could not cache chart: %w", err)
+		}
+	}
+
+	// Write values file
+	tempDir, err := os.MkdirTemp("", "holos")
+	if err != nil {
+		return errors.Wrap(fmt.Errorf("could not make temp dir: %w", err))
+	}
+	defer util.Remove(ctx, tempDir)
+
+	valuesPath := filepath.Join(tempDir, "values.yaml")
+	if err := os.WriteFile(valuesPath, []byte(hc.ValuesContent), 0644); err != nil {
+		return errors.Wrap(fmt.Errorf("could not write values: %w", err))
+	}
+	log.DebugContext(ctx, "helm: wrote values", "path", valuesPath, "bytes", len(hc.ValuesContent))
+
+	// Run charts
+	chart := hc.Chart
+	args := []string{"template"}
+	if !hc.EnableHooks {
+		args = append(args, "--no-hooks")
+	}
+	namespace := hc.Namespace
+	args = append(args, "--include-crds", "--values", valuesPath, "--namespace", namespace, "--kubeconfig", "/dev/null", "--version", chart.Version, chart.Release, cachedChartPath)
+	helmOut, err := util.RunCmd(ctx, "helm", args...)
+	if err != nil {
+		stderr := helmOut.Stderr.String()
+		lines := strings.Split(stderr, "\n")
+		for _, line := range lines {
+			if strings.HasPrefix(line, "Error:") {
+				err = fmt.Errorf("%s: %w", line, err)
+			}
+		}
+		return errors.Wrap(fmt.Errorf("could not run helm template: %w", err))
+	}
+
+	r.accumulatedOutput = helmOut.Stdout.String()
+
+	return nil
+}
+
+// cacheChart stores a cached copy of Chart in the chart subdirectory of path.
+//
+// It is assumed that the only method responsible for writing to chartDir is
+// cacheChart itself.
+//
+// This relies on the atomicity of moving temporary directories into place on
+// the same filesystem via os.Rename. If a syscall.EEXIST error occurs during
+// renaming, it indicates that the cached chart already exists, which is an
+// expected scenario when this function is called concurrently.
+func cacheChart(ctx context.Context, path holos.InstancePath, chartDir string, chart Chart) error {
+	log := logger.FromContext(ctx)
+
+	cacheTemp, err := os.MkdirTemp(string(path), chartDir)
+	if err != nil {
+		return errors.Wrap(fmt.Errorf("could not make temp dir: %w", err))
+	}
+	defer util.Remove(ctx, cacheTemp)
+
+	chartName := chart.Name
+	if chart.Repository.Name != "" {
+		chartName = fmt.Sprintf("%s/%s", chart.Repository.Name, chart.Name)
+	}
+	helmOut, err := util.RunCmd(ctx, "helm", "pull", "--destination", cacheTemp, "--untar=true", "--version", chart.Version, chartName)
+	if err != nil {
+		return errors.Wrap(fmt.Errorf("could not run helm pull: %w", err))
+	}
+	log.Debug("helm pull", "stdout", helmOut.Stdout, "stderr", helmOut.Stderr)
+
+	cachePath := filepath.Join(string(path), chartDir)
+
+	if err := os.MkdirAll(cachePath, 0777); err != nil {
+		return errors.Wrap(fmt.Errorf("could not mkdir: %w", err))
+	}
+
+	items, err := os.ReadDir(cacheTemp)
+	if err != nil {
+		return errors.Wrap(fmt.Errorf("could not read directory: %w", err))
+	}
+
+	for _, item := range items {
+		src := filepath.Join(cacheTemp, item.Name())
+		dst := filepath.Join(cachePath, item.Name())
+		log.DebugContext(ctx, "rename", "src", src, "dst", dst)
+		if err := os.Rename(src, dst); err != nil {
+			var linkErr *os.LinkError
+			if errors.As(err, &linkErr) && errors.Is(linkErr.Err, syscall.EEXIST) {
+				log.DebugContext(ctx, "cache already exists", "chart", chart.Name, "chart_version", chart.Version, "path", cachePath)
+			} else {
+				return errors.Wrap(fmt.Errorf("could not rename: %w", err))
+			}
+		}
+	}
+
+	log.InfoContext(ctx, "cached", "chart", chart.Name, "chart_version", chart.Version, "path", cachePath)
+
+	return nil
+}
+func isNotExist(path string) bool {
+	_, err := os.Stat(path)
+	return os.IsNotExist(err)
+}

api/v1alpha1/kubernetesobjects.go

@@ -0,0 +1,21 @@
+package v1alpha1
+
+import (
+	"context"
+
+	"github.com/holos-run/holos"
+)
+
+const KubernetesObjectsKind = "KubernetesObjects"
+
+// KubernetesObjects represents CUE output which directly provides Kubernetes api objects to holos.
+type KubernetesObjects struct {
+	HolosComponent `json:",inline" yaml:",inline"`
+}
+
+// Render produces kubernetes api objects from the APIObjectMap
+func (o *KubernetesObjects) Render(ctx context.Context, path holos.InstancePath) (*Result, error) {
+	result := Result{HolosComponent: o.HolosComponent}
+	result.addObjectMap(ctx, o.APIObjectMap)
+	return &result, nil
+}

api/v1alpha1/kustomization.go

@@ -0,0 +1,7 @@
+package v1alpha1
+
+// Kustomization holds the rendered flux kustomization api object content for git ops.
+type Kustomization struct {
+	// KsContent is the yaml representation of the flux kustomization for gitops.
+	KsContent string `json:"ksContent,omitempty" yaml:"ksContent,omitempty"`
+}

api/v1alpha1/kustomize.go

@@ -0,0 +1,47 @@
+package v1alpha1
+
+import (
+	"context"
+
+	"github.com/holos-run/holos"
+	"github.com/holos-run/holos/internal/errors"
+	"github.com/holos-run/holos/internal/logger"
+	"github.com/holos-run/holos/internal/util"
+)
+
+const KustomizeBuildKind = "KustomizeBuild"
+
+// Kustomize represents resources necessary to execute a kustomize build.
+// Intended for at least two use cases:
+//
+//  1. Process raw yaml file resources in a holos component directory.
+//  2. Post process a HelmChart to inject istio, add custom labels, etc...
+type Kustomize struct {
+	// KustomizeFiles holds file contents for kustomize, e.g. patch files.
+	KustomizeFiles FileContentMap `json:"kustomizeFiles,omitempty" yaml:"kustomizeFiles,omitempty"`
+	// ResourcesFile is the file name used for api objects in kustomization.yaml
+	ResourcesFile string `json:"resourcesFile,omitempty" yaml:"resourcesFile,omitempty"`
+}
+
+// KustomizeBuild renders plain yaml files in the holos component directory using kubectl kustomize build.
+type KustomizeBuild struct {
+	HolosComponent `json:",inline" yaml:",inline"`
+}
+
+// Render produces a Result by executing kubectl kustomize on the holos
+// component path. Useful for processing raw yaml files.
+func (kb *KustomizeBuild) Render(ctx context.Context, path holos.InstancePath) (*Result, error) {
+	log := logger.FromContext(ctx)
+	result := Result{HolosComponent: kb.HolosComponent}
+	// Run kustomize.
+	kOut, err := util.RunCmd(ctx, "kubectl", "kustomize", string(path))
+	if err != nil {
+		log.ErrorContext(ctx, kOut.Stderr.String())
+		return nil, errors.Wrap(err)
+	}
+	// Replace the accumulated output
+	result.accumulatedOutput = kOut.Stdout.String()
+	// Add CUE based api objects.
+	result.addObjectMap(ctx, kb.APIObjectMap)
+	return &result, nil
+}

api/v1alpha1/objectmap.go

@@ -0,0 +1,14 @@
+package v1alpha1
+
+// Label is an arbitrary unique identifier.  Defined as a type for clarity and type checking.
+type Label string
+
+// Kind is a kubernetes api object kind. Defined as a type for clarity and type checking.
+type Kind string
+
+// APIObjectMap is the shape of marshalled api objects returned from cue to the
+// holos cli. A map is used to improve the clarity of error messages from cue.
+type APIObjectMap map[Kind]map[Label]string
+
+// FileContentMap is a map of file names to file contents.
+type FileContentMap map[string]string

api/v1alpha1/objectmeta.go

@@ -0,0 +1,15 @@
+package v1alpha1
+
+// ObjectMeta represents metadata of a holos component object. The fields are a
+// copy of upstream kubernetes api machinery but are by holos objects distinct
+// from kubernetes api objects.
+type ObjectMeta struct {
+	// Name uniquely identifies the holos component instance and must be suitable as a file name.
+	Name string `json:"name,omitempty" yaml:"name,omitempty"`
+	// Namespace confines a holos component to a single namespace via kustomize if set.
+	Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"`
+	// Labels are not used but are copied from api machinery ObjectMeta for completeness.
+	Labels map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"`
+	// Annotations are not used but are copied from api machinery ObjectMeta for completeness.
+	Annotations map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"`
+}

api/v1alpha1/platform.go

@@ -0,0 +1,32 @@
+package v1alpha1
+
+import "google.golang.org/protobuf/types/known/structpb"
+
+// Platform represents a platform to manage.  A Platform resource informs holos
+// which components to build.  The platform resource also acts as a container
+// for the platform model form values provided by the PlatformService.  The
+// primary use case is to collect the cluster names, cluster types, platform
+// model, and holos components to build into one resource.
+type Platform struct {
+	TypeMeta `json:",inline" yaml:",inline"`
+	Metadata ObjectMeta   `json:"metadata" yaml:"metadata"`
+	Spec     PlatformSpec `json:"spec" yaml:"spec"`
+}
+
+// PlatformSpec represents the platform build plan specification.
+type PlatformSpec struct {
+	// Model represents the platform model holos gets from from the
+	// holos.platform.v1alpha1.PlatformService.GetPlatform method and provides to
+	// CUE using a tag.
+	Model      structpb.Struct         `json:"model" yaml:"model"`
+	Components []PlatformSpecComponent `json:"components" yaml:"components"`
+}
+
+// PlatformSpecComponent represents a component to build or render with flags to
+// pass, for example the cluster name.
+type PlatformSpecComponent struct {
+	// Path is the path of the component relative to the platform root.
+	Path string `json:"path" yaml:"path"`
+	// Cluster is the cluster name to use when building the component.
+	Cluster string `json:"cluster" yaml:"cluster"`
+}

api/v1alpha1/render.go

@@ -0,0 +1,22 @@
+package v1alpha1
+
+import (
+	"context"
+
+	"github.com/holos-run/holos"
+)
+
+type Renderer interface {
+	GetKind() string
+	Render(ctx context.Context, path holos.InstancePath) (*Result, error)
+}
+
+// Render produces a Result representing the kubernetes api objects to
+// configure. Each of the various holos component types, e.g. Helm, Kustomize,
+// et al, should implement the Renderer interface. This process is best
+// conceptualized as a data pipeline, for example a component may render a
+// result by first calling helm template, then passing the result through
+// kustomize, then mixing in overlay api objects.
+func Render(ctx context.Context, r Renderer, path holos.InstancePath) (*Result, error) {
+	return r.Render(ctx, path)
+}

api/v1alpha1/result.go

@@ -0,0 +1,165 @@
+package v1alpha1
+
+import (
+	"context"
+	"fmt"
+	"os"
+	"path/filepath"
+	"slices"
+
+	"github.com/holos-run/holos/internal/errors"
+	"github.com/holos-run/holos/internal/logger"
+	"github.com/holos-run/holos/internal/util"
+)
+
+// Result is the build result for display or writing.  Holos components Render the Result as a data pipeline.
+type Result struct {
+	HolosComponent
+	// accumulatedOutput accumulates rendered api objects.
+	accumulatedOutput string
+	// DeployFiles keys represent file paths relative to the cluster deploy
+	// directory.  Map values represent the string encoded file contents.  Used to
+	// write the argocd Application, but may be used to render any file from CUE.
+	DeployFiles FileContentMap `json:"deployFiles,omitempty" yaml:"deployFiles,omitempty"`
+}
+
+// Continue returns true if Skip is true indicating the result is to be skipped over.
+func (r *Result) Continue() bool {
+	if r == nil {
+		return false
+	}
+	return r.Skip
+}
+
+func (r *Result) Name() string {
+	return r.Metadata.Name
+}
+
+func (r *Result) Filename(writeTo string, cluster string) string {
+	name := r.Metadata.Name
+	return filepath.Join(writeTo, "clusters", cluster, "components", name, name+".gen.yaml")
+}
+
+func (r *Result) KustomizationFilename(writeTo string, cluster string) string {
+	return filepath.Join(writeTo, "clusters", cluster, "holos", "components", r.Metadata.Name+"-kustomization.gen.yaml")
+}
+
+// AccumulatedOutput returns the accumulated rendered output.
+func (r *Result) AccumulatedOutput() string {
+	return r.accumulatedOutput
+}
+
+// addObjectMap renders the provided APIObjectMap into the accumulated output.
+func (r *Result) addObjectMap(ctx context.Context, objectMap APIObjectMap) {
+	log := logger.FromContext(ctx)
+	b := []byte(r.AccumulatedOutput())
+	kinds := make([]Kind, 0, len(objectMap))
+	// Sort the keys
+	for kind := range objectMap {
+		kinds = append(kinds, kind)
+	}
+	slices.Sort(kinds)
+
+	for _, kind := range kinds {
+		v := objectMap[kind]
+		// Sort the keys
+		names := make([]Label, 0, len(v))
+		for name := range v {
+			names = append(names, name)
+		}
+		slices.Sort(names)
+
+		for _, name := range names {
+			yamlString := v[name]
+			log.Debug(fmt.Sprintf("%s/%s", kind, name), "kind", kind, "name", name)
+			b = util.EnsureNewline(b)
+			header := fmt.Sprintf("---\n# Source: CUE apiObjects.%s.%s\n", kind, name)
+			b = append(b, []byte(header+yamlString)...)
+			b = util.EnsureNewline(b)
+		}
+	}
+	r.accumulatedOutput = string(b)
+}
+
+// kustomize replaces the accumulated output with the output of kustomize build
+func (r *Result) kustomize(ctx context.Context) error {
+	log := logger.FromContext(ctx)
+	if r.ResourcesFile == "" {
+		log.DebugContext(ctx, "skipping kustomize: no resourcesFile")
+		return nil
+	}
+	if len(r.KustomizeFiles) < 1 {
+		log.DebugContext(ctx, "skipping kustomize: no kustomizeFiles")
+		return nil
+	}
+	tempDir, err := os.MkdirTemp("", "holos.kustomize")
+	if err != nil {
+		return errors.Wrap(err)
+	}
+	defer util.Remove(ctx, tempDir)
+
+	// Write the main api object resources file for kustomize.
+	target := filepath.Join(tempDir, r.ResourcesFile)
+	b := []byte(r.AccumulatedOutput())
+	b = util.EnsureNewline(b)
+	if err := os.WriteFile(target, b, 0644); err != nil {
+		return errors.Wrap(fmt.Errorf("could not write resources: %w", err))
+	}
+	log.DebugContext(ctx, "wrote: "+target, "op", "write", "path", target, "bytes", len(b))
+
+	// Write the kustomization tree, kustomization.yaml must be in this map for kustomize to work.
+	for file, content := range r.KustomizeFiles {
+		target := filepath.Join(tempDir, file)
+		if err := os.MkdirAll(filepath.Dir(target), 0755); err != nil {
+			return errors.Wrap(err)
+		}
+		b := []byte(content)
+		b = util.EnsureNewline(b)
+		if err := os.WriteFile(target, b, 0644); err != nil {
+			return errors.Wrap(fmt.Errorf("could not write: %w", err))
+		}
+		log.DebugContext(ctx, "wrote: "+target, "op", "write", "path", target, "bytes", len(b))
+	}
+
+	// Run kustomize.
+	kOut, err := util.RunCmd(ctx, "kubectl", "kustomize", tempDir)
+	if err != nil {
+		log.ErrorContext(ctx, kOut.Stderr.String())
+		return errors.Wrap(err)
+	}
+	// Replace the accumulated output
+	r.accumulatedOutput = kOut.Stdout.String()
+	return nil
+}
+
+func (r *Result) WriteDeployFiles(ctx context.Context, path string) error {
+	log := logger.FromContext(ctx)
+	if len(r.DeployFiles) == 0 {
+		return nil
+	}
+	for k, content := range r.DeployFiles {
+		path := filepath.Join(path, k)
+		if err := r.Save(ctx, path, content); err != nil {
+			return errors.Wrap(err)
+		}
+		log.InfoContext(ctx, "wrote deploy file", "path", path, "bytes", len(content))
+	}
+	return nil
+}
+
+// Save writes the content to the filesystem for git ops.
+func (r *Result) Save(ctx context.Context, path string, content string) error {
+	log := logger.FromContext(ctx)
+	dir := filepath.Dir(path)
+	if err := os.MkdirAll(dir, os.FileMode(0775)); err != nil {
+		log.WarnContext(ctx, "could not mkdir", "path", dir, "err", err)
+		return errors.Wrap(err)
+	}
+	// Write the file content
+	if err := os.WriteFile(path, []byte(content), os.FileMode(0644)); err != nil {
+		log.WarnContext(ctx, "could not write", "path", path, "err", err)
+		return errors.Wrap(err)
+	}
+	log.DebugContext(ctx, "out: wrote "+path, "action", "write", "path", path, "status", "ok")
+	return nil
+}

api/v1alpha1/typemeta.go

@@ -0,0 +1,20 @@
+package v1alpha1
+
+type TypeMeta struct {
+	Kind       string `json:"kind,omitempty" yaml:"kind,omitempty"`
+	APIVersion string `json:"apiVersion,omitempty" yaml:"apiVersion,omitempty"`
+}
+
+func (tm *TypeMeta) GetKind() string {
+	return tm.Kind
+}
+
+func (tm *TypeMeta) GetAPIVersion() string {
+	return tm.APIVersion
+}
+
+// Discriminator is an interface to discriminate the kind api object.
+type Discriminator interface {
+	GetKind() string
+	GetAPIVersion() string
+}

cmd/cmd.go

@@ -1,63 +0,0 @@
-package cmd
-
-import (
-	"context"
-	"fmt"
-	"log/slog"
-	"os"
-	"runtime/pprof"
-	"runtime/trace"
-
-	"github.com/holos-run/holos/internal/cli"
-	"github.com/holos-run/holos/internal/holos"
-)
-
-// MakeMain makes a main function for the cli or tests.
-func MakeMain(options ...holos.Option) func() int {
-	return func() (exitCode int) {
-		cfg := holos.New(options...)
-		slog.SetDefault(cfg.Logger())
-		ctx := context.Background()
-
-		if format := os.Getenv("HOLOS_CPU_PROFILE"); format != "" {
-			f, _ := os.Create(fmt.Sprintf(format, os.Getppid(), os.Getpid()))
-			err := pprof.StartCPUProfile(f)
-			defer func() {
-				pprof.StopCPUProfile()
-				f.Close()
-			}()
-			if err != nil {
-				return cli.HandleError(ctx, err, cfg)
-			}
-		}
-		defer memProfile(ctx, cfg)
-
-		if format := os.Getenv("HOLOS_TRACE"); format != "" {
-			f, _ := os.Create(fmt.Sprintf(format, os.Getppid(), os.Getpid()))
-			err := trace.Start(f)
-			defer func() {
-				trace.Stop()
-				f.Close()
-			}()
-			if err != nil {
-				return cli.HandleError(ctx, err, cfg)
-			}
-		}
-
-		feature := &holos.EnvFlagger{}
-		if err := cli.New(cfg, feature).ExecuteContext(ctx); err != nil {
-			return cli.HandleError(ctx, err, cfg)
-		}
-		return 0
-	}
-}
-
-func memProfile(ctx context.Context, cfg *holos.Config) {
-	if format := os.Getenv("HOLOS_MEM_PROFILE"); format != "" {
-		f, _ := os.Create(fmt.Sprintf(format, os.Getppid(), os.Getpid()))
-		defer f.Close()
-		if err := pprof.WriteHeapProfile(f); err != nil {
-			_ = cli.HandleError(ctx, err, cfg)
-		}
-	}
-}

cmd/holos/main.go

@@ -3,9 +3,9 @@ package main
 import (
 	"os"
 
-	"github.com/holos-run/holos/cmd"
+	"github.com/holos-run/holos/internal/cli"
 )
 
 func main() {
-	os.Exit(cmd.MakeMain()())
+	os.Exit(cli.MakeMain()())
 }

cmd/holos/main_test.go

@@ -6,27 +6,19 @@ import (
 	"testing"
 
 	cue "cuelang.org/go/cmd/cue/cmd"
-	"github.com/holos-run/holos/cmd"
+	"github.com/holos-run/holos/internal/cli"
 	"github.com/rogpeppe/go-internal/testscript"
 )
 
 func TestMain(m *testing.M) {
 	os.Exit(testscript.RunMain(m, map[string]func() int{
-		"holos": cmd.MakeMain(),
+		"holos": cli.MakeMain(),
 		"cue":   cue.Main,
 	}))
 }
 
-func TestGuides_v1alpha5(t *testing.T) {
-	testscript.Run(t, params(filepath.Join("v1alpha5", "guides")))
-}
-
-func TestSchemas_v1alpha5(t *testing.T) {
-	testscript.Run(t, params(filepath.Join("v1alpha5", "schemas")))
-}
-
-func TestIssues_v1alpha5(t *testing.T) {
-	testscript.Run(t, params(filepath.Join("v1alpha5", "issues")))
+func TestGuides(t *testing.T) {
+	testscript.Run(t, params(filepath.Join("v1alpha4", "guides")))
 }
 
 func TestCLI(t *testing.T) {
@@ -37,9 +29,7 @@ func params(dir string) testscript.Params {
 	return testscript.Params{
 		Dir:                 filepath.Join("tests", dir),
 		RequireExplicitExec: true,
-		RequireUniqueNames:  os.Getenv("HOLOS_WORKDIR_ROOT") == "",
-		WorkdirRoot:         os.Getenv("HOLOS_WORKDIR_ROOT"),
-		UpdateScripts:       os.Getenv("HOLOS_UPDATE_SCRIPTS") != "",
+		RequireUniqueNames:  true,
 		Setup: func(env *testscript.Env) error {
 			// Just like cmd/cue/cmd.TestScript, set up separate cache and config dirs per test.
 			env.Setenv("CUE_CACHE_DIR", filepath.Join(env.WorkDir, "tmp/cachedir"))

cmd/holos/tests/cli/cue-vet.txt

@@ -1,12 +0,0 @@
-# https://github.com/holos-run/holos/issues/358
-# holos cue vet should fail verifications with exit code 1
-! exec holos cue vet ./policy --path strings.ToLower(kind) ./data/secret.yaml
-# holos cue vet should report validation errors to stderr
-stderr 'Forbidden. Use an ExternalSecret instead.'
-
--- data/secret.yaml --
-kind: Secret
--- policy/validators.cue --
-package policy
-
-secret: kind: "Forbidden. Use an ExternalSecret instead."

cmd/holos/tests/cli/first-impression.txt

@@ -1,2 +0,0 @@
-# https://github.com/holos-run/holos/issues/334
-exec holos

cmd/holos/tests/v1alpha4/guides/helm.txt

@@ -4,14 +4,14 @@
 cd $WORK
 
 # Generate the directory structure we're going to work in.
-exec holos generate platform v1alpha5 --force
+exec holos generate platform v1alpha4
 
 # Platforms are empty by default.
-exec holos render platform
+exec holos render platform ./platform
 stderr -count=1 '^rendered platform'
 
 # Holos uses CUE to build a platform specification.
-exec holos show platform
+exec cue export --out=yaml ./platform
 cmp stdout want/1.platform_spec.yaml
 
 # Define the host and port in projects/blackbox.schema.cue
@@ -22,10 +22,10 @@ mv projects/platform/components/prometheus/prometheus.cue.disabled projects/plat
 mv platform/prometheus.cue.disabled platform/prometheus.cue
 
 # Render the platform to render the prometheus chart.
-exec holos render platform
-stderr -count=1 '^rendered prometheus'
+exec holos render platform ./platform
+stderr -count=1 '^rendered prometheus for cluster local'
 stderr -count=1 '^rendered platform'
-cmp deploy/components/prometheus/prometheus.gen.yaml want/1.prometheus.gen.yaml
+cmp deploy/clusters/local/components/prometheus/prometheus.gen.yaml want/1.prometheus.gen.yaml
 
 # Add the CUE configuration to manage the blackbox Helm Chart component.
 mv projects/platform/components/blackbox/blackbox.cue.disabled projects/platform/components/blackbox/blackbox.cue
@@ -34,14 +34,14 @@ mv platform/blackbox.cue.disabled platform/blackbox.cue
 
 # Render the platform to render both the prometheus and blackbox charts.
 exec holos render platform ./platform
-stderr -count=1 '^rendered prometheus'
-stderr -count=1 '^rendered blackbox'
+stderr -count=1 '^rendered prometheus for cluster local'
+stderr -count=1 '^rendered blackbox for cluster local'
 stderr -count=1 '^rendered platform'
-cmp deploy/components/blackbox/blackbox.gen.yaml want/1.blackbox.gen.yaml
+cmp deploy/clusters/local/components/blackbox/blackbox.gen.yaml want/1.blackbox.gen.yaml
 
 # Import helm values
-exec cue import --package holos --path 'Helm: Values:' --outfile projects/platform/components/prometheus/values.cue projects/platform/components/prometheus/vendor/25.27.0/prometheus/values.yaml
-exec cue import --package holos --path 'Helm: Values:' --outfile projects/platform/components/blackbox/values.cue projects/platform/components/blackbox/vendor/9.0.1/prometheus-blackbox-exporter/values.yaml
+exec cue import --package holos --path '_Helm: Values:' --outfile projects/platform/components/prometheus/values.cue projects/platform/components/prometheus/vendor/25.27.0/prometheus/values.yaml
+exec cue import --package holos --path '_Helm: Values:' --outfile projects/platform/components/blackbox/values.cue projects/platform/components/blackbox/vendor/9.0.1/prometheus-blackbox-exporter/values.yaml
 # Patch imported values
 stdin values.patch
 exec patch -p1
@@ -54,27 +54,12 @@ mv platform/httpbin.cue.disabled platform/httpbin.cue
 
 # Render the platform with httpbin
 exec holos render platform ./platform
-stderr -count=1 '^rendered httpbin'
-cmp deploy/components/httpbin/httpbin.gen.yaml want/1.httpbin.gen.yaml
+stderr -count=1 '^rendered httpbin for cluster'
+cmp deploy/clusters/local/components/httpbin/httpbin.gen.yaml want/1.httpbin.gen.yaml
 
-# Verify the labels are correct
-grep 'replacement: blackbox:9115' deploy/components/prometheus/prometheus.gen.yaml
-# Check the blackbox fullnameOverride
-grep -count=4 '^  name: blackbox$' deploy/components/blackbox/blackbox.gen.yaml
-# Check the blackbox Service port
-grep -count=1 '^    port: 9115$' deploy/components/blackbox/blackbox.gen.yaml
-
--- projects/output.cue --
-package holos
-
-import "github.com/holos-run/holos/api/core/v1alpha5:core"
-
-core.#BuildPlan & {
-	metadata: name: _Tags.component.name
-}
 -- want/1.platform_spec.yaml --
-apiVersion: v1alpha5
 kind: Platform
+apiVersion: v1alpha4
 metadata:
   name: default
 spec:
@@ -89,7 +74,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: alertmanager
     app.kubernetes.io/version: v0.27.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: alertmanager-1.12.0
+    holos.run/component.name: prometheus
   name: prometheus-alertmanager
   namespace: default
 ---
@@ -104,7 +91,9 @@ metadata:
     app.kubernetes.io/name: kube-state-metrics
     app.kubernetes.io/part-of: kube-state-metrics
     app.kubernetes.io/version: 2.13.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: kube-state-metrics-5.25.1
+    holos.run/component.name: prometheus
   name: prometheus-kube-state-metrics
   namespace: default
 ---
@@ -119,7 +108,9 @@ metadata:
     app.kubernetes.io/name: prometheus-node-exporter
     app.kubernetes.io/part-of: prometheus-node-exporter
     app.kubernetes.io/version: 1.8.2
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-node-exporter-4.39.0
+    holos.run/component.name: prometheus
   name: prometheus-prometheus-node-exporter
   namespace: default
 ---
@@ -132,7 +123,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: prometheus-pushgateway
     app.kubernetes.io/version: v1.9.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-pushgateway-2.14.0
+    holos.run/component.name: prometheus
   name: prometheus-prometheus-pushgateway
   namespace: default
 ---
@@ -146,7 +139,9 @@ metadata:
     app.kubernetes.io/name: prometheus
     app.kubernetes.io/part-of: prometheus
     app.kubernetes.io/version: v2.54.1
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-25.27.0
+    holos.run/component.name: prometheus
   name: prometheus-server
   namespace: default
 ---
@@ -160,7 +155,9 @@ metadata:
     app.kubernetes.io/name: kube-state-metrics
     app.kubernetes.io/part-of: kube-state-metrics
     app.kubernetes.io/version: 2.13.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: kube-state-metrics-5.25.1
+    holos.run/component.name: prometheus
   name: prometheus-kube-state-metrics
 rules:
 - apiGroups:
@@ -374,7 +371,9 @@ metadata:
     app.kubernetes.io/name: prometheus
     app.kubernetes.io/part-of: prometheus
     app.kubernetes.io/version: v2.54.1
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-25.27.0
+    holos.run/component.name: prometheus
   name: prometheus-server
 rules:
 - apiGroups:
@@ -425,7 +424,9 @@ metadata:
     app.kubernetes.io/name: kube-state-metrics
     app.kubernetes.io/part-of: kube-state-metrics
     app.kubernetes.io/version: 2.13.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: kube-state-metrics-5.25.1
+    holos.run/component.name: prometheus
   name: prometheus-kube-state-metrics
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -446,7 +447,9 @@ metadata:
     app.kubernetes.io/name: prometheus
     app.kubernetes.io/part-of: prometheus
     app.kubernetes.io/version: v2.54.1
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-25.27.0
+    holos.run/component.name: prometheus
   name: prometheus-server
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -477,7 +480,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: alertmanager
     app.kubernetes.io/version: v0.27.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: alertmanager-1.12.0
+    holos.run/component.name: prometheus
   name: prometheus-alertmanager
   namespace: default
 ---
@@ -831,7 +836,9 @@ metadata:
     app.kubernetes.io/name: prometheus
     app.kubernetes.io/part-of: prometheus
     app.kubernetes.io/version: v2.54.1
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-25.27.0
+    holos.run/component.name: prometheus
   name: prometheus-server
   namespace: default
 ---
@@ -843,7 +850,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: alertmanager
     app.kubernetes.io/version: v0.27.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: alertmanager-1.12.0
+    holos.run/component.name: prometheus
   name: prometheus-alertmanager
   namespace: default
 spec:
@@ -855,6 +864,8 @@ spec:
   selector:
     app.kubernetes.io/instance: prometheus
     app.kubernetes.io/name: alertmanager
+    argocd.argoproj.io/instance: prometheus
+    holos.run/component.name: prometheus
   type: ClusterIP
 ---
 apiVersion: v1
@@ -865,7 +876,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: alertmanager
     app.kubernetes.io/version: v0.27.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: alertmanager-1.12.0
+    holos.run/component.name: prometheus
   name: prometheus-alertmanager-headless
   namespace: default
 spec:
@@ -878,6 +891,8 @@ spec:
   selector:
     app.kubernetes.io/instance: prometheus
     app.kubernetes.io/name: alertmanager
+    argocd.argoproj.io/instance: prometheus
+    holos.run/component.name: prometheus
 ---
 apiVersion: v1
 kind: Service
@@ -891,7 +906,9 @@ metadata:
     app.kubernetes.io/name: kube-state-metrics
     app.kubernetes.io/part-of: kube-state-metrics
     app.kubernetes.io/version: 2.13.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: kube-state-metrics-5.25.1
+    holos.run/component.name: prometheus
   name: prometheus-kube-state-metrics
   namespace: default
 spec:
@@ -903,6 +920,8 @@ spec:
   selector:
     app.kubernetes.io/instance: prometheus
     app.kubernetes.io/name: kube-state-metrics
+    argocd.argoproj.io/instance: prometheus
+    holos.run/component.name: prometheus
   type: ClusterIP
 ---
 apiVersion: v1
@@ -917,7 +936,9 @@ metadata:
     app.kubernetes.io/name: prometheus-node-exporter
     app.kubernetes.io/part-of: prometheus-node-exporter
     app.kubernetes.io/version: 1.8.2
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-node-exporter-4.39.0
+    holos.run/component.name: prometheus
   name: prometheus-prometheus-node-exporter
   namespace: default
 spec:
@@ -929,6 +950,8 @@ spec:
   selector:
     app.kubernetes.io/instance: prometheus
     app.kubernetes.io/name: prometheus-node-exporter
+    argocd.argoproj.io/instance: prometheus
+    holos.run/component.name: prometheus
   type: ClusterIP
 ---
 apiVersion: v1
@@ -941,7 +964,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: prometheus-pushgateway
     app.kubernetes.io/version: v1.9.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-pushgateway-2.14.0
+    holos.run/component.name: prometheus
   name: prometheus-prometheus-pushgateway
   namespace: default
 spec:
@@ -953,6 +978,8 @@ spec:
   selector:
     app.kubernetes.io/instance: prometheus
     app.kubernetes.io/name: prometheus-pushgateway
+    argocd.argoproj.io/instance: prometheus
+    holos.run/component.name: prometheus
   type: ClusterIP
 ---
 apiVersion: v1
@@ -965,7 +992,9 @@ metadata:
     app.kubernetes.io/name: prometheus
     app.kubernetes.io/part-of: prometheus
     app.kubernetes.io/version: v2.54.1
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-25.27.0
+    holos.run/component.name: prometheus
   name: prometheus-server
   namespace: default
 spec:
@@ -978,6 +1007,8 @@ spec:
     app.kubernetes.io/component: server
     app.kubernetes.io/instance: prometheus
     app.kubernetes.io/name: prometheus
+    argocd.argoproj.io/instance: prometheus
+    holos.run/component.name: prometheus
   sessionAffinity: None
   type: ClusterIP
 ---
@@ -991,7 +1022,9 @@ metadata:
     app.kubernetes.io/name: prometheus
     app.kubernetes.io/part-of: prometheus
     app.kubernetes.io/version: v2.54.1
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-25.27.0
+    holos.run/component.name: prometheus
   name: prometheus-server
   namespace: default
 spec:
@@ -1011,7 +1044,9 @@ metadata:
     app.kubernetes.io/name: kube-state-metrics
     app.kubernetes.io/part-of: kube-state-metrics
     app.kubernetes.io/version: 2.13.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: kube-state-metrics-5.25.1
+    holos.run/component.name: prometheus
   name: prometheus-kube-state-metrics
   namespace: default
 spec:
@@ -1021,6 +1056,8 @@ spec:
     matchLabels:
       app.kubernetes.io/instance: prometheus
       app.kubernetes.io/name: kube-state-metrics
+      argocd.argoproj.io/instance: prometheus
+      holos.run/component.name: prometheus
   strategy:
     type: RollingUpdate
   template:
@@ -1032,7 +1069,9 @@ spec:
         app.kubernetes.io/name: kube-state-metrics
         app.kubernetes.io/part-of: kube-state-metrics
         app.kubernetes.io/version: 2.13.0
+        argocd.argoproj.io/instance: prometheus
         helm.sh/chart: kube-state-metrics-5.25.1
+        holos.run/component.name: prometheus
     spec:
       automountServiceAccountToken: true
       containers:
@@ -1092,7 +1131,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: prometheus-pushgateway
     app.kubernetes.io/version: v1.9.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-pushgateway-2.14.0
+    holos.run/component.name: prometheus
   name: prometheus-prometheus-pushgateway
   namespace: default
 spec:
@@ -1101,6 +1142,8 @@ spec:
     matchLabels:
       app.kubernetes.io/instance: prometheus
       app.kubernetes.io/name: prometheus-pushgateway
+      argocd.argoproj.io/instance: prometheus
+      holos.run/component.name: prometheus
   strategy:
     type: Recreate
   template:
@@ -1110,7 +1153,9 @@ spec:
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: prometheus-pushgateway
         app.kubernetes.io/version: v1.9.0
+        argocd.argoproj.io/instance: prometheus
         helm.sh/chart: prometheus-pushgateway-2.14.0
+        holos.run/component.name: prometheus
     spec:
       automountServiceAccountToken: true
       containers:
@@ -1156,7 +1201,9 @@ metadata:
     app.kubernetes.io/name: prometheus
     app.kubernetes.io/part-of: prometheus
     app.kubernetes.io/version: v2.54.1
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-25.27.0
+    holos.run/component.name: prometheus
   name: prometheus-server
   namespace: default
 spec:
@@ -1167,6 +1214,8 @@ spec:
       app.kubernetes.io/component: server
       app.kubernetes.io/instance: prometheus
       app.kubernetes.io/name: prometheus
+      argocd.argoproj.io/instance: prometheus
+      holos.run/component.name: prometheus
   strategy:
     rollingUpdate: null
     type: Recreate
@@ -1179,7 +1228,9 @@ spec:
         app.kubernetes.io/name: prometheus
         app.kubernetes.io/part-of: prometheus
         app.kubernetes.io/version: v2.54.1
+        argocd.argoproj.io/instance: prometheus
         helm.sh/chart: prometheus-25.27.0
+        holos.run/component.name: prometheus
     spec:
       containers:
       - args:
@@ -1272,7 +1323,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: alertmanager
     app.kubernetes.io/version: v0.27.0
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: alertmanager-1.12.0
+    holos.run/component.name: prometheus
   name: prometheus-alertmanager
   namespace: default
 spec:
@@ -1283,6 +1336,8 @@ spec:
     matchLabels:
       app.kubernetes.io/instance: prometheus
       app.kubernetes.io/name: alertmanager
+      argocd.argoproj.io/instance: prometheus
+      holos.run/component.name: prometheus
   serviceName: prometheus-alertmanager-headless
   template:
     metadata:
@@ -1291,6 +1346,8 @@ spec:
       labels:
         app.kubernetes.io/instance: prometheus
         app.kubernetes.io/name: alertmanager
+        argocd.argoproj.io/instance: prometheus
+        holos.run/component.name: prometheus
     spec:
       automountServiceAccountToken: true
       containers:
@@ -1340,6 +1397,9 @@ spec:
         name: config
   volumeClaimTemplates:
   - metadata:
+      labels:
+        argocd.argoproj.io/instance: prometheus
+        holos.run/component.name: prometheus
       name: storage
     spec:
       accessModes:
@@ -1358,7 +1418,9 @@ metadata:
     app.kubernetes.io/name: prometheus-node-exporter
     app.kubernetes.io/part-of: prometheus-node-exporter
     app.kubernetes.io/version: 1.8.2
+    argocd.argoproj.io/instance: prometheus
     helm.sh/chart: prometheus-node-exporter-4.39.0
+    holos.run/component.name: prometheus
   name: prometheus-prometheus-node-exporter
   namespace: default
 spec:
@@ -1367,6 +1429,8 @@ spec:
     matchLabels:
       app.kubernetes.io/instance: prometheus
       app.kubernetes.io/name: prometheus-node-exporter
+      argocd.argoproj.io/instance: prometheus
+      holos.run/component.name: prometheus
   template:
     metadata:
       annotations:
@@ -1378,7 +1442,9 @@ spec:
         app.kubernetes.io/name: prometheus-node-exporter
         app.kubernetes.io/part-of: prometheus-node-exporter
         app.kubernetes.io/version: 1.8.2
+        argocd.argoproj.io/instance: prometheus
         helm.sh/chart: prometheus-node-exporter-4.39.0
+        holos.run/component.name: prometheus
     spec:
       automountServiceAccountToken: false
       containers:
@@ -1470,6 +1536,8 @@ metadata:
     prometheus.io/probe: "true"
   labels:
     app.kubernetes.io/name: httpbin
+    argocd.argoproj.io/instance: httpbin
+    holos.run/component.name: httpbin
   name: httpbin
 spec:
   ports:
@@ -1480,21 +1548,29 @@ spec:
     targetPort: http
   selector:
     app.kubernetes.io/name: httpbin
+    argocd.argoproj.io/instance: httpbin
+    holos.run/component.name: httpbin
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   labels:
     app.kubernetes.io/name: httpbin
+    argocd.argoproj.io/instance: httpbin
+    holos.run/component.name: httpbin
   name: httpbin
 spec:
   selector:
     matchLabels:
       app.kubernetes.io/name: httpbin
+      argocd.argoproj.io/instance: httpbin
+      holos.run/component.name: httpbin
   template:
     metadata:
       labels:
         app.kubernetes.io/name: httpbin
+        argocd.argoproj.io/instance: httpbin
+        holos.run/component.name: httpbin
     spec:
       containers:
       - image: mccutchen/go-httpbin
@@ -1521,7 +1597,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: prometheus-blackbox-exporter
     app.kubernetes.io/version: v0.25.0
+    argocd.argoproj.io/instance: blackbox
     helm.sh/chart: prometheus-blackbox-exporter-9.0.1
+    holos.run/component.name: blackbox
   name: prometheus-blackbox-exporter
   namespace: default
 ---
@@ -1545,7 +1623,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: prometheus-blackbox-exporter
     app.kubernetes.io/version: v0.25.0
+    argocd.argoproj.io/instance: blackbox
     helm.sh/chart: prometheus-blackbox-exporter-9.0.1
+    holos.run/component.name: blackbox
   name: prometheus-blackbox-exporter
   namespace: default
 ---
@@ -1557,7 +1637,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: prometheus-blackbox-exporter
     app.kubernetes.io/version: v0.25.0
+    argocd.argoproj.io/instance: blackbox
     helm.sh/chart: prometheus-blackbox-exporter-9.0.1
+    holos.run/component.name: blackbox
   name: prometheus-blackbox-exporter
   namespace: default
 spec:
@@ -1569,6 +1651,8 @@ spec:
   selector:
     app.kubernetes.io/instance: prometheus-blackbox-exporter
     app.kubernetes.io/name: prometheus-blackbox-exporter
+    argocd.argoproj.io/instance: blackbox
+    holos.run/component.name: blackbox
   type: ClusterIP
 ---
 apiVersion: apps/v1
@@ -1579,7 +1663,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: prometheus-blackbox-exporter
     app.kubernetes.io/version: v0.25.0
+    argocd.argoproj.io/instance: blackbox
     helm.sh/chart: prometheus-blackbox-exporter-9.0.1
+    holos.run/component.name: blackbox
   name: prometheus-blackbox-exporter
   namespace: default
 spec:
@@ -1588,6 +1674,8 @@ spec:
     matchLabels:
       app.kubernetes.io/instance: prometheus-blackbox-exporter
       app.kubernetes.io/name: prometheus-blackbox-exporter
+      argocd.argoproj.io/instance: blackbox
+      holos.run/component.name: blackbox
   strategy:
     rollingUpdate:
       maxSurge: 1
@@ -1600,6 +1688,8 @@ spec:
       labels:
         app.kubernetes.io/instance: prometheus-blackbox-exporter
         app.kubernetes.io/name: prometheus-blackbox-exporter
+        argocd.argoproj.io/instance: blackbox
+        holos.run/component.name: blackbox
     spec:
       automountServiceAccountToken: false
       containers:
@@ -1640,60 +1730,61 @@ spec:
           name: prometheus-blackbox-exporter
         name: config
 -- values.patch --
-diff --git a/projects/platform/components/blackbox/values.cue b/projects/platform/components/blackbox/values.cue
-index 6e29043..e3fa9ce 100644
 --- a/projects/platform/components/blackbox/values.cue
 +++ b/projects/platform/components/blackbox/values.cue
-@@ -1,6 +1,8 @@
- package holos
+@@ -2,6 +2,9 @@ package holos
  
- Helm: Values: {
-+	fullnameOverride: _blackbox.host
+ _Helm: {
+ 	Values: {
++		// the upstream chart authors forgot to add the fullnameOverride value used in the service template.
++		fullnameOverride: _blackbox.host
 +
- 	global: {
- 		//# Global image registry to use if it needs to be overriden for some specific use cases (e.g local registries, custom images, ...)
- 		//#
-@@ -192,7 +194,7 @@ Helm: Values: {
- 		annotations: {}
- 		labels: {}
- 		type: "ClusterIP"
--		port: 9115
-+		port: _blackbox.port
- 		ipDualStack: {
- 			enabled: false
- 			ipFamilies: ["IPv6", "IPv4"]
-diff --git a/projects/platform/components/prometheus/values.cue b/projects/platform/components/prometheus/values.cue
-index 869b11d..119c608 100644
+ 		global: {
+ 			//# Global image registry to use if it needs to be overriden for some specific use cases (e.g local registries, custom images, ...)
+ 			//#
+@@ -193,7 +196,7 @@ _Helm: {
+ 			annotations: {}
+ 			labels: {}
+ 			type: "ClusterIP"
+-			port: 9115
++			port: _blackbox.port
+ 			ipDualStack: {
+ 				enabled: false
+ 				ipFamilies: ["IPv6", "IPv4"]
 --- a/projects/platform/components/prometheus/values.cue
 +++ b/projects/platform/components/prometheus/values.cue
-@@ -1083,7 +1083,7 @@ Helm: Values: {
- 					target_label: "__param_target"
- 				}, {
- 					target_label: "__address__"
--					replacement:  "blackbox"
-+					replacement:  "\(_blackbox.host):\(_blackbox.port)"
- 				}, {
- 					source_labels: ["__param_target"]
- 					target_label: "instance"
-
+@@ -1084,7 +1084,7 @@ _Helm: {
+ 						target_label: "__param_target"
+ 					}, {
+ 						target_label: "__address__"
+-						replacement:  "blackbox"
++						replacement:  "\(_blackbox.host):\(_blackbox.port)"
+ 					}, {
+ 						source_labels: ["__param_target"]
+ 						target_label: "instance"
 -- platform/httpbin.cue.disabled --
 package holos
 
-Platform: Components: httpbin: {
-	name: "httpbin"
-	path: "projects/platform/components/httpbin"
+_Platform: Components: httpbin: {
+	name:      "httpbin"
+	component: "projects/platform/components/httpbin"
+	cluster:   "local"
 }
 -- platform/blackbox.cue.disabled --
 package holos
 
-Platform: Components: blackbox: {
-	name: "blackbox"
-	path: "projects/platform/components/blackbox"
+_Platform: Components: blackbox: {
+	name:      "blackbox"
+	component: "projects/platform/components/blackbox"
+	cluster:   "local"
 }
 -- projects/platform/components/blackbox/blackbox.cue.disabled --
 package holos
 
-Helm: #Helm & {
+// Produce a helm chart build plan.
+_Helm.BuildPlan
+
+_Helm: #Helm & {
 	Chart: {
 		name:    "prometheus-blackbox-exporter"
 		version: "9.0.1"
@@ -1703,9 +1794,6 @@ Helm: #Helm & {
 		}
 	}
 }
-
-// Produce a helm chart build plan.
-holos: Helm.BuildPlan
 -- projects/blackbox.schema.cue.disabled --
 package holos
 
@@ -1725,7 +1813,10 @@ _blackbox: #blackbox & {
 -- projects/platform/components/prometheus/prometheus.cue.disabled --
 package holos
 
-Helm: #Helm & {
+// Produce a helm chart build plan.
+_Helm.BuildPlan
+
+_Helm: #Helm & {
 	Chart: {
 		name:    "prometheus"
 		version: "25.27.0"
@@ -1735,15 +1826,13 @@ Helm: #Helm & {
 		}
 	}
 }
-
-// Produce a helm chart build plan.
-holos: Helm.BuildPlan
 -- platform/prometheus.cue.disabled --
 package holos
 
-Platform: Components: prometheus: {
-	name: "prometheus"
-	path: "projects/platform/components/prometheus"
+_Platform: Components: prometheus: {
+	name:      "prometheus"
+	component: "projects/platform/components/prometheus"
+	cluster:   "local"
 }
 -- projects/platform/components/prometheus/vendor/25.27.0/prometheus/.helmignore --
 # Patterns to ignore when building packages.
@@ -14894,8 +14983,11 @@ package holos
 
 import "encoding/yaml"
 
+// Produce a Kustomize BuildPlan for Holos
+_Kustomize.BuildPlan
+
 // https://github.com/mccutchen/go-httpbin/blob/v2.15.0/kustomize/README.md
-Kustomize: #Kustomize & {
+_Kustomize: #Kustomize & {
 	KustomizeConfig: Files: "resources.yaml": _
 	KustomizeConfig: Kustomization: {
 		commonLabels: "app.kubernetes.io/name": "httpbin"
@@ -14912,9 +15004,6 @@ Kustomize: #Kustomize & {
 		patches: [for x in _patches {x}]
 	}
 }
-
-// Produce a Kustomize BuildPlan for Holos
-holos: Kustomize.BuildPlan
 -- projects/platform/components/httpbin/resources.yaml --
 apiVersion: apps/v1
 kind: Deployment

cmd/holos/tests/v1alpha5/issues/holos-show.txt

@@ -1,422 +0,0 @@
-# https://github.com/holos-run/holos/issues/331
-# ensure holos show components --labels selects correctly.
-# ensure BuildPlan includes labels and annotations from the platform component.
-# ensure holos render platform injects the holos_component_labels and
-# holos_component_annotations tags.
-env HOME=$WORK
-
-exec holos init platform v1alpha5 --force
-exec holos show platform
-cmp stdout want/platform.yaml
-
-# all buildplans are selected by default
-exec holos show buildplans
-cmp stdout want/all-buildplans.yaml
-
-# one = works in the selector
-exec holos show buildplans --selector app.holos.run/name=empty1-label
-cmp stdout want/buildplans.1.yaml
-
-# double == works in the selector
-exec holos show buildplans --selector app.holos.run/name==empty2-label
-cmp stdout want/buildplans.2.yaml
-
-# not equal != negates the selection
-exec holos show buildplans --selector app.holos.run/name!=empty3-label
-cmp stdout want/buildplans.3.yaml
-exec holos show buildplans --selector app.holos.run/name!=something-else
-cmp stdout want/buildplans.4.yaml
-
--- platform/empty.cue --
-package holos
-
-Platform: Components: {
-  empty1: _
-  empty2: _
-  empty3: _
-  empty4: _
-}
--- platform/metadata.cue --
-package holos
-
-Platform: Components: [NAME=string]: {
-  name: NAME
-  path: "components/empty"
-  labels: "app.holos.run/name": "\(name)-label"
-  annotations: "app.holos.run/description": "\(name)-annotation empty test case"
-}
--- components/empty/empty.cue --
-package holos
-
-Component: #Kubernetes & {}
-holos: Component.BuildPlan
--- want/platform.yaml --
-apiVersion: v1alpha5
-kind: Platform
-metadata:
-  name: default
-spec:
-  components:
-    - annotations:
-        app.holos.run/description: empty1-annotation empty test case
-      labels:
-        app.holos.run/name: empty1-label
-      name: empty1
-      path: components/empty
-    - annotations:
-        app.holos.run/description: empty2-annotation empty test case
-      labels:
-        app.holos.run/name: empty2-label
-      name: empty2
-      path: components/empty
-    - annotations:
-        app.holos.run/description: empty3-annotation empty test case
-      labels:
-        app.holos.run/name: empty3-label
-      name: empty3
-      path: components/empty
-    - annotations:
-        app.holos.run/description: empty4-annotation empty test case
-      labels:
-        app.holos.run/name: empty4-label
-      name: empty4
-      path: components/empty
--- want/empty.yaml --
--- want/all-buildplans.yaml --
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty1
-  labels:
-    app.holos.run/name: empty1-label
-  annotations:
-    app.holos.run/description: empty1-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty1/empty1.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty1/empty1.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
----
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty2
-  labels:
-    app.holos.run/name: empty2-label
-  annotations:
-    app.holos.run/description: empty2-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty2/empty2.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty2/empty2.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
----
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty3
-  labels:
-    app.holos.run/name: empty3-label
-  annotations:
-    app.holos.run/description: empty3-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty3/empty3.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty3/empty3.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
----
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty4
-  labels:
-    app.holos.run/name: empty4-label
-  annotations:
-    app.holos.run/description: empty4-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty4/empty4.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty4/empty4.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
--- want/buildplans.1.yaml --
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty1
-  labels:
-    app.holos.run/name: empty1-label
-  annotations:
-    app.holos.run/description: empty1-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty1/empty1.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty1/empty1.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
--- want/buildplans.2.yaml --
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty2
-  labels:
-    app.holos.run/name: empty2-label
-  annotations:
-    app.holos.run/description: empty2-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty2/empty2.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty2/empty2.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
--- want/buildplans.3.yaml --
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty1
-  labels:
-    app.holos.run/name: empty1-label
-  annotations:
-    app.holos.run/description: empty1-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty1/empty1.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty1/empty1.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
----
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty2
-  labels:
-    app.holos.run/name: empty2-label
-  annotations:
-    app.holos.run/description: empty2-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty2/empty2.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty2/empty2.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
----
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty4
-  labels:
-    app.holos.run/name: empty4-label
-  annotations:
-    app.holos.run/description: empty4-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty4/empty4.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty4/empty4.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
--- want/buildplans.4.yaml --
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty1
-  labels:
-    app.holos.run/name: empty1-label
-  annotations:
-    app.holos.run/description: empty1-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty1/empty1.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty1/empty1.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
----
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty2
-  labels:
-    app.holos.run/name: empty2-label
-  annotations:
-    app.holos.run/description: empty2-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty2/empty2.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty2/empty2.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
----
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty3
-  labels:
-    app.holos.run/name: empty3-label
-  annotations:
-    app.holos.run/description: empty3-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty3/empty3.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty3/empty3.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml
----
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: empty4
-  labels:
-    app.holos.run/name: empty4-label
-  annotations:
-    app.holos.run/description: empty4-annotation empty test case
-spec:
-  artifacts:
-    - artifact: components/empty4/empty4.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/empty4/empty4.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              resources:
-                - resources.gen.yaml

cmd/holos/tests/v1alpha5/issues/issue348-kustomize-patch-name.txt

@@ -1,64 +0,0 @@
-# https://github.com/holos-run/holos/issues/348
-# when the optional kustomize patch name field is omitted
-exec holos init platform v1alpha5 --force
-# want a buildplan shown
-exec holos show buildplans
-cmp stdout buildplan.yaml
-# want this error to go away
-! stderr 'cannot convert non-concrete value string'
--- platform/example.cue --
-package holos
-
-Platform: Components: example: {
-	name: "example"
-	path: "components/example"
-}
--- components/example/example.cue --
-package holos
-
-import "encoding/yaml"
-
-holos: Component.BuildPlan
-
-Component: #Kustomize & {
-	KustomizeConfig: Kustomization: patches: [
-		{
-			target: kind: "CustomResourceDefinition"
-			patch: yaml.Marshal([{
-				op:    "add"
-				path:  "/metadata/annotations/example"
-				value: "example-value"
-			}])
-		},
-	]
-}
--- buildplan.yaml --
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: example
-spec:
-  artifacts:
-    - artifact: components/example/example.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/example/example.gen.yaml
-          kustomize:
-            kustomization:
-              apiVersion: kustomize.config.k8s.io/v1beta1
-              kind: Kustomization
-              patches:
-                - patch: |
-                    - op: add
-                      path: /metadata/annotations/example
-                      value: example-value
-                  target:
-                    kind: CustomResourceDefinition
-                    name: ""
-              resources:
-                - resources.gen.yaml

cmd/holos/tests/v1alpha5/issues/issue366-cue-build-tags.txt

@@ -1,50 +0,0 @@
-# https://github.com/holos-run/holos/issues/366
-# Build tags conditionally include CUE files.
-env HOME=$WORK
-
-exec holos init platform v1alpha5 --force
-exec holos show platform
-cmp stdout want/empty.yaml
-
-exec holos show platform -t foo
-cmp stdout want/foo.yaml
-
--- platform/empty.cue --
-@if(foo)
-package holos
-
-Platform: Components: foo: _
--- platform/metadata.cue --
-package holos
-
-Platform: Components: [NAME=string]: {
-  name: NAME
-  path: "components/empty"
-  labels: "app.holos.run/name": NAME
-  annotations: "app.holos.run/description": "\(NAME) empty test case"
-}
--- components/empty/empty.cue --
-package holos
-
-Component: #Kubernetes & {}
-holos: Component.BuildPlan
--- want/empty.yaml --
-apiVersion: v1alpha5
-kind: Platform
-metadata:
-  name: default
-spec:
-  components: []
--- want/foo.yaml --
-apiVersion: v1alpha5
-kind: Platform
-metadata:
-  name: default
-spec:
-  components:
-    - annotations:
-        app.holos.run/description: foo empty test case
-      labels:
-        app.holos.run/name: foo
-      name: foo
-      path: components/empty

cmd/holos/tests/v1alpha5/schemas/capabilities.txt

@@ -1,144 +0,0 @@
-# https://github.com/holos-run/holos/issues/330
-exec holos init platform v1alpha5 --force
-exec helm template ./components/capabilities/vendor/0.1.0/capabilities
-cmp stdout want/helm-template.yaml
-exec holos render platform ./platform
-# When no capabilities are specified
-cmp deploy/components/capabilities/capabilities.gen.yaml want/when-no-capabilities-specified.yaml
-# With APIVersions specified
-cmp deploy/components/specified/specified.gen.yaml want/with-capabilities-specified.yaml
-# With KubeVersion specified
-cmp deploy/components/kubeversion1/kubeversion1.gen.yaml want/with-kubeversion-specified.yaml
-# With both APIVersions and KubeVersion specified
-cmp deploy/components/kubeversion2/kubeversion2.gen.yaml want/with-both-specified.yaml
--- want/with-both-specified.yaml --
-apiVersion: v1
-kind: Service
-metadata:
-  annotations:
-    kubeVersion: v1.20.0
-  name: has-foo-v1
-spec:
-  ports:
-  - name: http
-    port: 80
-    protocol: TCP
-    targetPort: http
--- want/with-kubeversion-specified.yaml --
-apiVersion: v1
-kind: Service
-metadata:
-  annotations:
-    kubeVersion: v1.20.0
-  name: has-foo-v1beta1
-spec:
-  ports:
-  - name: http
-    port: 80
-    protocol: TCP
-    targetPort: http
--- want/when-no-capabilities-specified.yaml --
-apiVersion: v1
-kind: Service
-metadata:
-  annotations:
-    kubeVersion: v1.31.0
-  name: has-foo-v1beta1
-spec:
-  ports:
-  - name: http
-    port: 80
-    protocol: TCP
-    targetPort: http
--- want/with-capabilities-specified.yaml --
-apiVersion: v1
-kind: Service
-metadata:
-  annotations:
-    kubeVersion: v1.31.0
-  name: has-foo-v1
-spec:
-  ports:
-  - name: http
-    port: 80
-    protocol: TCP
-    targetPort: http
--- platform/capabilities.cue --
-package holos
-
-import "encoding/json"
-
-Platform: Components: capabilities: {
-        name: "capabilities"
-        path: "components/capabilities"
-}
-Platform: Components: specified: {
-        name: "specified"
-        path: "components/capabilities"
-        parameters: apiVersions: json.Marshal(["foo/v1","bar/v1"])
-}
-Platform: Components: kubeversion1: {
-        name: "kubeversion1"
-        path: "components/capabilities"
-        parameters: kubeVersion: "v1.20.0"
-}
-Platform: Components: kubeversion2: {
-        name: "kubeversion2"
-        path: "components/capabilities"
-        parameters: kubeVersion: "v1.20.0"
-        parameters: apiVersions: json.Marshal(["foo/v1","bar/v1"])
-}
--- components/capabilities/capabilities.cue --
-package holos
-
-import "encoding/json"
-
-holos: Component.BuildPlan
-
-Component: #Helm & {
-        Name: string @tag(holos_component_name, type=string)
-        Chart: name: "capabilities"
-        Chart: version: "0.1.0"
-        _APIVersions: string | *"[]" @tag(apiVersions, type=string)
-        APIVersions: json.Unmarshal(_APIVersions)
-        KubeVersion: string | *"v1.31.0" @tag(kubeVersion, type=string)
-}
--- components/capabilities/vendor/0.1.0/capabilities/Chart.yaml --
-apiVersion: v2
-name: capabilities
-description: A Helm chart for Kubernetes
-type: application
-version: 0.1.0
-appVersion: "1.16.0"
--- components/capabilities/vendor/0.1.0/capabilities/templates/service.yaml --
-apiVersion: v1
-kind: Service
-metadata:
-{{- if .Capabilities.APIVersions.Has "foo/v1" }}
-  name: has-foo-v1
-{{- else }}
-  name: has-foo-v1beta1
-{{- end }}
-  annotations:
-    kubeVersion: {{ .Capabilities.KubeVersion }}
-spec:
-  ports:
-    - port: 80
-      targetPort: http
-      protocol: TCP
-      name: http
--- want/helm-template.yaml --
----
-# Source: capabilities/templates/service.yaml
-apiVersion: v1
-kind: Service
-metadata:
-  name: has-foo-v1beta1
-  annotations:
-    kubeVersion: v1.31.0
-spec:
-  ports:
-    - port: 80
-      targetPort: http
-      protocol: TCP
-      name: http

cmd/holos/tests/v1alpha5/schemas/kubernetes.txt

@@ -1,45 +0,0 @@
-# author.#Kubernetes
-
-# Start in an empty directory.
-cd $WORK
-
-# Generate the directory structure we're going to work in.
-exec holos init platform v1alpha5 --force
-
-# Platforms are empty by default.
-exec holos render platform
-stderr -count=1 '^rendered platform'
-
-# When author.#Kubernetes is empty
-exec holos cue export --expression holos --out=yaml ./components/empty
-cmp stdout want.txt
-
--- components/empty/empty.cue --
-package holos
-
-Kubernetes: #Kubernetes & {}
-holos: Kubernetes.BuildPlan
--- want.txt --
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: no-name
-spec:
-  artifacts:
-    - artifact: components/no-name/no-name.gen.yaml
-      generators:
-        - kind: Resources
-          output: resources.gen.yaml
-          resources: {}
-      validators: []
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - resources.gen.yaml
-          output: components/no-name/no-name.gen.yaml
-          kustomize:
-            kustomization:
-              resources:
-                - resources.gen.yaml
-              kind: Kustomization
-              apiVersion: kustomize.config.k8s.io/v1beta1

cmd/holos/tests/v1alpha5/schemas/validators.txt

@@ -1,37 +0,0 @@
-# https://github.com/holos-run/holos/issues/357
-exec holos init platform v1alpha5 --force
-! exec holos render platform
-stderr 'secret.kind: conflicting values "Forbidden. Use an ExternalSecret instead." and "Secret"'
-
--- validators.cue --
-package holos
-
-import "github.com/holos-run/holos/api/author/v1alpha5:author"
-
-#ComponentConfig: author.#ComponentConfig & {
-	Validators: cue: {
-		kind: "Command"
-		command: args: ["holos", "cue", "vet", "./policy", "--path", "strings.ToLower(kind)"]
-	}
-}
--- policy/validations.cue --
-package validations
-
-secret: kind: "Forbidden. Use an ExternalSecret instead."
--- platform/example.cue --
-package holos
-
-Platform: Components: example: {
-	name: "example"
-	path: "components/example"
-}
--- components/example/secret.cue --
-package holos
-
-holos: Component.BuildPlan
-
-Component: #Kubernetes & {
-	Resources: Secret: test: {
-		metadata: name: "test"
-	}
-}

doc/md.archive/guides-v1alpha4/local-cluster.mdx

@@ -1,7 +1,7 @@
 ---
-description: Build a local cluster for use with Holos.
-slug: local-cluster
-sidebar_position: 50
+description: Build a local Cluster to use with these guides.
+slug: /guides/local-cluster
+sidebar_position: 999
 ---
 
 import Tabs from '@theme/Tabs';
@@ -16,7 +16,8 @@ have a standard Kubernetes API server with proper DNS and TLS certificates.
 You'll be able to easily reset the cluster to a known good state to iterate on
 your own Platform.
 
-The [Glossary] page defines capitalized terms such as Platform and Component.
+The [Concepts](/docs/concepts) page defines capitalized terms such as Platform
+and Component.
 
 ## Reset the Cluster
 
@@ -104,7 +105,7 @@ You're back to the same state as the first time you completed this guide.
 
 You'll need the following tools installed to complete this guide.
 
-1. [holos](../tutorial/setup.mdx) - to build the platform.
+1. [holos](/docs/install) - to build the platform.
 2. [helm](https://helm.sh/docs/intro/install/) - to render Holos components that wrap upstream Helm charts.
 3. [k3d](https://k3d.io/#installation) - to provide a k8s api server.
 4. [OrbStack](https://docs.orbstack.dev/install) or [Docker](https://docs.docker.com/get-docker/) - to use k3d.
@@ -273,7 +274,4 @@ k3d cluster delete workload
 ## Next Steps
 
 Now that you have a real cluster, apply and explore the manifests Holos renders
-in the [Tutorial].
-
-[Glossary]: ../glossary.mdx
-[Tutorial]: ../tutorial.mdx
+in the [Quickstart](/docs/quickstart) guide.

doc/md.archive/start/support.md

@@ -1,17 +1,14 @@
 ---
 description: Get Support for Holos
-slug: support
-sidebar_position: 2000
+slug: /support
+sidebar_position: 900
 ---
 
 # Support
 
 ## Community Support
 
-You can ask questions in our community forums in [GitHub
-Discussions](https://github.com/holos-run/holos/discussions),
-[Discord](https://discord.gg/JgDVbNpye7), or [Google
-Groups](https://groups.google.com/g/holos-discuss).
+You can ask questions in our community forums in [GitHub Discussions](https://github.com/holos-run/holos/discussions), [Discord](https://discord.gg/JgDVbNpye7), or [Google Groups](https://groups.google.com/g/holos-discuss).
 
 ## Commercial Support and Services
 

doc/md.archive/technical-overview.mdx

@@ -23,7 +23,7 @@ improves cross team collaboration through well defined, typed structures at the
 integration layer.  These definitions provide golden paths for other teams to
 easily integrate their own services into the platform.
 
-{/* truncate */}
+<!-- truncate -->
 
 ## The Problem
 

doc/md/api.md

@@ -0,0 +1,5 @@
+import DocCardList from '@theme/DocCardList';
+
+# API Reference
+
+<DocCardList />

doc/md/api.mdx

@@ -1,10 +0,0 @@
----
-slug: api
-description: Schema Reference
----
-
-import DocCardList from '@theme/DocCardList';
-
-# Schema Reference
-
-<DocCardList />

doc/md/api/author.md

@@ -1,189 +1,3 @@
----
-title: Author Schemas
-description: Standardized schemas for component authors.
-sidebar_position: 200
----
-<!-- Code generated by gomarkdoc. DO NOT EDIT -->
+# Author Schema
 
-
-```go
-import "github.com/holos-run/holos/api/author/v1alpha5"
-```
-
-Package author contains a standard set of schemas for component authors to generate common [core](<https://holos.run/docs/api/core/>) BuildPlans.
-
-Holos values stability, flexibility, and composition. This package intentionally defines only the minimal necessary set of structures. Component authors are encouraged to define their own structures building on our example [topics](<https://holos.run/docs/topics/>).
-
-The Holos Maintainers may add definitions to this package if the community identifies nearly all users must define the exact same structure. Otherwise, definitions should be added as a customizable example in [topics](<https://holos.run/docs/topics/>).
-
-For example, structures representing a cluster and environment almost always need to be defined. Their definition varies from one organization to the next. Therefore, customizable definitions for a cluster and environment are best maintained in [topics](<https://holos.run/docs/topics/>), not standardized in this package.
-
-## Index
-
-- [type ComponentConfig](<#ComponentConfig>)
-- [type Helm](<#Helm>)
-- [type Kubernetes](<#Kubernetes>)
-- [type Kustomize](<#Kustomize>)
-- [type KustomizeConfig](<#KustomizeConfig>)
-- [type NameLabel](<#NameLabel>)
-- [type Platform](<#Platform>)
-
-
-<a name="ComponentConfig"></a>
-## type ComponentConfig {#ComponentConfig}
-
-ComponentConfig represents the configuration common to all kinds of components for use with the holos render component command. All component kinds may be transformed with [kustomize](<https://kubectl.docs.kubernetes.io/references/kustomize/kustomization/>) configured with the [KustomizeConfig](<#KustomizeConfig>) field.
-
-- [Helm](<#Helm>) charts.
-- [Kubernetes](<#Kubernetes>) resources generated from CUE.
-- [Kustomize](<#Kustomize>) bases.
-
-```go
-type ComponentConfig struct {
-    // Name represents the BuildPlan metadata.name field.  Used to construct the
-    // fully rendered manifest file path.
-    Name string
-    // Labels represent the BuildPlan metadata.labels field.
-    Labels map[string]string
-    // Annotations represent the BuildPlan metadata.annotations field.
-    Annotations map[string]string
-
-    // Path represents the path to the component producing the BuildPlan.
-    Path string
-    // Parameters are useful to reuse a component with various parameters.
-    // Injected as CUE @tag variables.  Parameters with a "holos_" prefix are
-    // reserved for use by the Holos Authors.
-    Parameters map[string]string
-    // OutputBaseDir represents the output base directory used when assembling
-    // artifacts.  Useful to organize components by clusters or other parameters.
-    // For example, holos writes resource manifests to
-    // {WriteTo}/{OutputBaseDir}/components/{Name}/{Name}.gen.yaml
-    OutputBaseDir string `cue:"string | *\"\""`
-
-    // Resources represents kubernetes resources mixed into the rendered manifest.
-    Resources core.Resources
-    // KustomizeConfig represents the kustomize configuration.
-    KustomizeConfig KustomizeConfig
-    // Validators represent checks that must pass for output to be written.
-    Validators map[NameLabel]core.Validator
-    // Artifacts represents additional artifacts to mix in.  Useful for adding
-    // GitOps resources.  Each Artifact is unified without modification into the
-    // BuildPlan.
-    Artifacts map[NameLabel]core.Artifact
-}
-```
-
-<a name="Helm"></a>
-## type Helm {#Helm}
-
-Helm assembles a BuildPlan rendering a helm chart. Useful to mix in additional resources from CUE and transform the helm output with kustomize.
-
-```go
-type Helm struct {
-    ComponentConfig `json:",inline"`
-
-    // Chart represents a Helm chart.
-    Chart core.Chart
-    // Values represents data to marshal into a values.yaml for helm.
-    Values core.Values
-    // ValueFiles represents value files for migration from helm value
-    // hierarchies.  Use Values instead.
-    ValueFiles []core.ValueFile `json:",omitempty"`
-    // EnableHooks enables helm hooks when executing the `helm template` command.
-    EnableHooks bool `cue:"true | *false"`
-    // Namespace sets the helm chart namespace flag if provided.
-    Namespace string `json:",omitempty"`
-    // APIVersions represents the helm template --api-versions flag
-    APIVersions []string `json:",omitempty"`
-    // KubeVersion represents the helm template --kube-version flag
-    KubeVersion string `json:",omitempty"`
-
-    // BuildPlan represents the derived BuildPlan produced for the holos render
-    // component command.
-    BuildPlan core.BuildPlan
-}
-```
-
-<a name="Kubernetes"></a>
-## type Kubernetes {#Kubernetes}
-
-Kubernetes assembles a BuildPlan containing inline resources exported from CUE.
-
-```go
-type Kubernetes struct {
-    ComponentConfig `json:",inline"`
-
-    // BuildPlan represents the derived BuildPlan produced for the holos render
-    // component command.
-    BuildPlan core.BuildPlan
-}
-```
-
-<a name="Kustomize"></a>
-## type Kustomize {#Kustomize}
-
-Kustomize assembles a BuildPlan rendering manifests from a [kustomize](<https://kubectl.docs.kubernetes.io/references/kustomize/kustomization/>) kustomization.
-
-```go
-type Kustomize struct {
-    ComponentConfig `json:",inline"`
-
-    // BuildPlan represents the derived BuildPlan produced for the holos render
-    // component command.
-    BuildPlan core.BuildPlan
-}
-```
-
-<a name="KustomizeConfig"></a>
-## type KustomizeConfig {#KustomizeConfig}
-
-KustomizeConfig represents the configuration for [kustomize](<https://kubectl.docs.kubernetes.io/references/kustomize/kustomization/>) post processing. Use the Files field to mix in plain manifest files located in the component directory. Use the Resources field to mix in manifests from network urls.
-
-```go
-type KustomizeConfig struct {
-    // Kustomization represents the kustomization used to transform resources.
-    // Note the resources field is internally managed from the Files and Resources fields.
-    Kustomization map[string]any `json:",omitempty"`
-    // Files represents files to copy from the component directory for kustomization.
-    Files map[string]struct{ Source string } `cue:"{[NAME=_]: Source: NAME}"`
-    // Resources represents additional entries to included in the resources list.
-    Resources map[string]struct{ Source string } `cue:"{[NAME=_]: Source: NAME}"`
-    // CommonLabels represents common labels added without including selectors.
-    CommonLabels map[string]string
-}
-```
-
-<a name="NameLabel"></a>
-## type NameLabel {#NameLabel}
-
-NameLabel represents the common use case of converting a struct to a list where the name field of each value unifies with the field name of the outer struct.
-
-For example:
-
-```
-S: [NameLabel=string]: name: NameLabel
-S: jeff: _
-S: gary: _
-S: nate: _
-L: [for x in S {x}]
-// L is [{name: "jeff"}, {name: "gary"}, {name: "nate"}]
-```
-
-```go
-type NameLabel string
-```
-
-<a name="Platform"></a>
-## type Platform {#Platform}
-
-Platform assembles a core Platform in the Resource field for the holos render platform command. Use the Components field to register components with the platform.
-
-```go
-type Platform struct {
-    Name       string
-    Components map[NameLabel]core.Component
-    Resource   core.Platform
-}
-```
-
-Generated by [gomarkdoc](<https://github.com/princjef/gomarkdoc>)
+v1alpha5

doc/md/api/core.md

@@ -1,527 +1,3 @@
----
-title: Core Schemas
-description: BuildPlan defines the holos rendering pipeline.
-sidebar_position: 100
----
-<!-- Code generated by gomarkdoc. DO NOT EDIT -->
+# Core Schema
 
-
-```go
-import "github.com/holos-run/holos/api/core/v1alpha5"
-```
-
-Package core contains schemas for a [Platform](<#Platform>) and [BuildPlan](<#BuildPlan>). Holos takes a [Platform](<#Platform>) as input, then iterates over each [Component](<#Component>) to produce a [BuildPlan](<#BuildPlan>). Holos processes the [BuildPlan](<#BuildPlan>) to produce fully rendered manifests, each an [Artifact](<#Artifact>).
-
-## Index
-
-- [type Artifact](<#Artifact>)
-- [type Auth](<#Auth>)
-- [type AuthSource](<#AuthSource>)
-- [type BuildPlan](<#BuildPlan>)
-- [type BuildPlanSpec](<#BuildPlanSpec>)
-- [type Chart](<#Chart>)
-- [type Command](<#Command>)
-- [type Component](<#Component>)
-- [type ExtractYAML](<#ExtractYAML>)
-- [type File](<#File>)
-- [type FileContent](<#FileContent>)
-- [type FileContentMap](<#FileContentMap>)
-- [type FilePath](<#FilePath>)
-- [type Generator](<#Generator>)
-- [type Helm](<#Helm>)
-- [type Instance](<#Instance>)
-- [type InternalLabel](<#InternalLabel>)
-- [type Join](<#Join>)
-- [type Kind](<#Kind>)
-- [type Kustomization](<#Kustomization>)
-- [type Kustomize](<#Kustomize>)
-- [type Metadata](<#Metadata>)
-- [type Platform](<#Platform>)
-- [type PlatformSpec](<#PlatformSpec>)
-- [type Repository](<#Repository>)
-- [type Resource](<#Resource>)
-- [type Resources](<#Resources>)
-- [type Transformer](<#Transformer>)
-- [type Validator](<#Validator>)
-- [type ValueFile](<#ValueFile>)
-- [type Values](<#Values>)
-
-
-<a name="Artifact"></a>
-## type Artifact {#Artifact}
-
-Artifact represents one fully rendered manifest produced by a [Transformer](<#Transformer>) sequence, which transforms a [Generator](<#Generator>) collection. A [BuildPlan](<#BuildPlan>) produces an [Artifact](<#Artifact>) collection.
-
-Each Artifact produces one manifest file artifact. Generator Output values are used as Transformer Inputs. The Output field of the final [Transformer](<#Transformer>) should have the same value as the Artifact field.
-
-When there is more than one [Generator](<#Generator>) there must be at least one [Transformer](<#Transformer>) to combine outputs into one Artifact. If there is a single Generator, it may directly produce the Artifact output.
-
-An Artifact is processed concurrently with other artifacts in the same [BuildPlan](<#BuildPlan>). An Artifact should not use an output from another Artifact as an input. Each [Generator](<#Generator>) may also run concurrently. Each [Transformer](<#Transformer>) is executed sequentially starting after all generators have completed.
-
-Output fields are write\-once. It is an error for multiple Generators or Transformers to produce the same Output value within the context of a [BuildPlan](<#BuildPlan>).
-
-```go
-type Artifact struct {
-    Artifact     FilePath      `json:"artifact,omitempty" yaml:"artifact,omitempty"`
-    Generators   []Generator   `json:"generators,omitempty" yaml:"generators,omitempty"`
-    Transformers []Transformer `json:"transformers,omitempty" yaml:"transformers,omitempty"`
-    Validators   []Validator   `json:"validators,omitempty" yaml:"validators,omitempty"`
-    Skip         bool          `json:"skip,omitempty" yaml:"skip,omitempty"`
-}
-```
-
-<a name="Auth"></a>
-## type Auth {#Auth}
-
-Auth represents environment variable names containing auth credentials.
-
-```go
-type Auth struct {
-    Username AuthSource `json:"username" yaml:"username"`
-    Password AuthSource `json:"password" yaml:"password"`
-}
-```
-
-<a name="AuthSource"></a>
-## type AuthSource {#AuthSource}
-
-AuthSource represents a source for the value of an [Auth](<#Auth>) field.
-
-```go
-type AuthSource struct {
-    Value   string `json:"value,omitempty" yaml:"value,omitempty"`
-    FromEnv string `json:"fromEnv,omitempty" yaml:"fromEnv,omitempty"`
-}
-```
-
-<a name="BuildPlan"></a>
-## type BuildPlan {#BuildPlan}
-
-BuildPlan represents an implementation of the [rendered manifest pattern](<https://akuity.io/blog/the-rendered-manifests-pattern>). Holos processes a BuildPlan to produce one or more [Artifact](<#Artifact>) output files. BuildPlan artifact files usually contain Kubernetes manifests, but they may have any content.
-
-A BuildPlan usually produces two artifacts. One artifact contains a manifest of resources. A second artifact contains a GitOps resource to manage the first, usually an ArgoCD Application resource.
-
-Holos uses CUE to construct a BuildPlan. A future enhancement will support user defined executables providing a BuildPlan to Holos in the style of an [external credential provider](<https://github.com/kubernetes/enhancements/blob/313ad8b59c80819659e1fbf0f165230f633f2b22/keps/sig-auth/541-external-credential-providers/README.md>).
-
-```go
-type BuildPlan struct {
-    // Kind represents the type of the resource.
-    Kind string `json:"kind" yaml:"kind" cue:"\"BuildPlan\""`
-    // APIVersion represents the versioned schema of the resource.
-    APIVersion string `json:"apiVersion" yaml:"apiVersion" cue:"string | *\"v1alpha5\""`
-    // Metadata represents data about the resource such as the Name.
-    Metadata Metadata `json:"metadata" yaml:"metadata"`
-    // Spec specifies the desired state of the resource.
-    Spec BuildPlanSpec `json:"spec" yaml:"spec"`
-}
-```
-
-<a name="BuildPlanSpec"></a>
-## type BuildPlanSpec {#BuildPlanSpec}
-
-BuildPlanSpec represents the specification of the [BuildPlan](<#BuildPlan>).
-
-```go
-type BuildPlanSpec struct {
-    // Artifacts represents the artifacts for holos to build.
-    Artifacts []Artifact `json:"artifacts" yaml:"artifacts"`
-    // Disabled causes the holos cli to disregard the build plan.
-    Disabled bool `json:"disabled,omitempty" yaml:"disabled,omitempty"`
-}
-```
-
-<a name="Chart"></a>
-## type Chart {#Chart}
-
-Chart represents a [Helm](<#Helm>) Chart.
-
-```go
-type Chart struct {
-    // Name represents the chart name.
-    Name string `json:"name" yaml:"name"`
-    // Version represents the chart version.
-    Version string `json:"version" yaml:"version"`
-    // Release represents the chart release when executing helm template.
-    Release string `json:"release" yaml:"release"`
-    // Repository represents the repository to fetch the chart from.
-    Repository Repository `json:"repository,omitempty" yaml:"repository,omitempty"`
-}
-```
-
-<a name="Command"></a>
-## type Command {#Command}
-
-Command represents a command vetting one or more artifacts. Holos appends fully qualified input file paths to the end of the args list, then executes the command. Inputs are written into a temporary directory prior to executing the command and removed afterwards.
-
-```go
-type Command struct {
-    Args []string `json:"args,omitempty" yaml:"args,omitempty"`
-}
-```
-
-<a name="Component"></a>
-## type Component {#Component}
-
-Component represents the complete context necessary to produce a [BuildPlan](<#BuildPlan>) from a path containing parameterized CUE configuration.
-
-```go
-type Component struct {
-    // Name represents the name of the component. Injected as the tag variable
-    // "holos_component_name".
-    Name string `json:"name" yaml:"name"`
-    // Path represents the path of the component relative to the platform root.
-    // Injected as the tag variable "holos_component_path".
-    Path string `json:"path" yaml:"path"`
-    // Instances represents additional cue instance paths to unify with Path.
-    // Useful to unify data files into a component BuildPlan.  Added in holos
-    // 0.101.7.
-    Instances []Instance `json:"instances,omitempty" yaml:"instances,omitempty"`
-    // WriteTo represents the holos render component --write-to flag.  If empty,
-    // the default value for the --write-to flag is used.
-    WriteTo string `json:"writeTo,omitempty" yaml:"writeTo,omitempty"`
-    // Parameters represent user defined input variables to produce various
-    // [BuildPlan] resources from one component path.  Injected as CUE @tag
-    // variables.  Parameters with a "holos_" prefix are reserved for use by the
-    // Holos Authors.  Multiple environments are a prime example of an input
-    // parameter that should always be user defined, never defined by Holos.
-    Parameters map[string]string `json:"parameters,omitempty" yaml:"parameters,omitempty"`
-    // Labels represent selector labels for the component.  Copied to the
-    // resulting BuildPlan.
-    Labels map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"`
-    // Annotations represents arbitrary non-identifying metadata.  Use the
-    // `app.holos.run/description` to customize the log message of each BuildPlan.
-    Annotations map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"`
-}
-```
-
-<a name="ExtractYAML"></a>
-## type ExtractYAML {#ExtractYAML}
-
-ExtractYAML represents a cue data instance encoded as yaml or json. If Path refers to a directory all files in the directory are extracted non\-recursively. Otherwise, path must refer to a file.
-
-```go
-type ExtractYAML struct {
-    Path string `json:"path" yaml:"path"`
-}
-```
-
-<a name="File"></a>
-## type File {#File}
-
-File represents a simple single file copy [Generator](<#Generator>). Useful with a [Kustomize](<#Kustomize>) [Transformer](<#Transformer>) to process plain manifest files stored in the component directory. Multiple File generators may be used to transform multiple resources.
-
-```go
-type File struct {
-    // Source represents a file sub-path relative to the component path.
-    Source FilePath `json:"source" yaml:"source"`
-}
-```
-
-<a name="FileContent"></a>
-## type FileContent {#FileContent}
-
-FileContent represents file contents.
-
-```go
-type FileContent string
-```
-
-<a name="FileContentMap"></a>
-## type FileContentMap {#FileContentMap}
-
-FileContentMap represents a mapping of file paths to file contents.
-
-```go
-type FileContentMap map[FilePath]FileContent
-```
-
-<a name="FilePath"></a>
-## type FilePath {#FilePath}
-
-FilePath represents a file path.
-
-```go
-type FilePath string
-```
-
-<a name="Generator"></a>
-## type Generator {#Generator}
-
-Generator generates Kubernetes resources. [Helm](<#Helm>) and [Resources](<#Resources>) are the most commonly used, often paired together to mix\-in resources to an unmodified Helm chart. A simple [File](<#File>) generator is also available for use with the [Kustomize](<#Kustomize>) transformer.
-
-Each Generator in an [Artifact](<#Artifact>) must have a distinct Output value for a [Transformer](<#Transformer>) to reference.
-
-1. [Resources](<#Resources>) \- Generates resources from CUE code.
-2. [Helm](<#Helm>) \- Generates rendered yaml from a [Chart](<#Chart>).
-3. [File](<#File>) \- Generates data by reading a file from the component directory.
-
-```go
-type Generator struct {
-    // Kind represents the kind of generator.  Must be Resources, Helm, or File.
-    Kind string `json:"kind" yaml:"kind" cue:"\"Resources\" | \"Helm\" | \"File\""`
-    // Output represents a file for a Transformer or Artifact to consume.
-    Output FilePath `json:"output" yaml:"output"`
-    // Resources generator. Ignored unless kind is Resources.  Resources are
-    // stored as a two level struct.  The top level key is the Kind of resource,
-    // e.g. Namespace or Deployment.  The second level key is an arbitrary
-    // InternalLabel.  The third level is a map[string]any representing the
-    // Resource.
-    Resources Resources `json:"resources,omitempty" yaml:"resources,omitempty"`
-    // Helm generator. Ignored unless kind is Helm.
-    Helm Helm `json:"helm,omitempty" yaml:"helm,omitempty"`
-    // File generator. Ignored unless kind is File.
-    File File `json:"file,omitempty" yaml:"file,omitempty"`
-}
-```
-
-<a name="Helm"></a>
-## type Helm {#Helm}
-
-Helm represents a [Chart](<#Chart>) manifest [Generator](<#Generator>).
-
-```go
-type Helm struct {
-    // Chart represents a helm chart to manage.
-    Chart Chart `json:"chart" yaml:"chart"`
-    // Values represents values for holos to marshal into values.yaml when
-    // rendering the chart.  Values follow ValueFiles when both are provided.
-    Values Values `json:"values" yaml:"values"`
-    // ValueFiles represents hierarchial value files passed in order to the helm
-    // template -f flag.  Useful for migration from an ApplicationSet.  Use Values
-    // instead.  ValueFiles precede Values when both are provided.
-    ValueFiles []ValueFile `json:"valueFiles,omitempty" yaml:"valueFiles,omitempty"`
-    // EnableHooks enables helm hooks when executing the `helm template` command.
-    EnableHooks bool `json:"enableHooks,omitempty" yaml:"enableHooks,omitempty"`
-    // Namespace represents the helm namespace flag
-    Namespace string `json:"namespace,omitempty" yaml:"namespace,omitempty"`
-    // APIVersions represents the helm template --api-versions flag
-    APIVersions []string `json:"apiVersions,omitempty" yaml:"apiVersions,omitempty"`
-    // KubeVersion represents the helm template --kube-version flag
-    KubeVersion string `json:"kubeVersion,omitempty" yaml:"kubeVersion,omitempty"`
-}
-```
-
-<a name="Instance"></a>
-## type Instance {#Instance}
-
-Instance represents a data instance to unify with the configuration.
-
-Useful to unify json and yaml files with cue configuration files for integration with other tools. For example, executing holos render platform from a pull request workflow after [Kargo](<https://docs.kargo.io/>) executes the [yaml update](<https://docs.kargo.io/references/promotion-steps#yaml-update>) and [git wait for pr](<https://docs.kargo.io/references/promotion-steps#git-wait-for-pr>) promotion steps.
-
-```go
-type Instance struct {
-    // Kind is a discriminator.
-    Kind string `json:"kind" yaml:"kind" cue:"\"ExtractYAML\""`
-    // Ignored unless kind is ExtractYAML.
-    ExtractYAML ExtractYAML `json:"extractYAML,omitempty" yaml:"extractYAML,omitempty"`
-}
-```
-
-<a name="InternalLabel"></a>
-## type InternalLabel {#InternalLabel}
-
-InternalLabel is an arbitrary unique identifier internal to holos itself. The holos cli is expected to never write a InternalLabel value to rendered output files, therefore use a InternalLabel when the identifier must be unique and internal. Defined as a type for clarity and type checking.
-
-```go
-type InternalLabel string
-```
-
-<a name="Join"></a>
-## type Join {#Join}
-
-Join represents a [Transformer](<#Transformer>) using [bytes.Join](<https://pkg.go.dev/bytes#Join>) to concatenate multiple inputs into one output with a separator. Useful for combining output from [Helm](<#Helm>) and [Resources](<#Resources>) together into one [Artifact](<#Artifact>) when [Kustomize](<#Kustomize>) is otherwise unnecessary.
-
-```go
-type Join struct {
-    Separator string `json:"separator,omitempty" yaml:"separator,omitempty"`
-}
-```
-
-<a name="Kind"></a>
-## type Kind {#Kind}
-
-Kind is a discriminator. Defined as a type for clarity and type checking.
-
-```go
-type Kind string
-```
-
-<a name="Kustomization"></a>
-## type Kustomization {#Kustomization}
-
-Kustomization represents a kustomization.yaml file for use with the [Kustomize](<#Kustomize>) [Transformer](<#Transformer>). Untyped to avoid tightly coupling holos to kubectl versions which was a problem for the Flux maintainers. Type checking is expected to happen in CUE against the kubectl version the user prefers.
-
-```go
-type Kustomization map[string]any
-```
-
-<a name="Kustomize"></a>
-## type Kustomize {#Kustomize}
-
-Kustomize represents a kustomization [Transformer](<#Transformer>).
-
-```go
-type Kustomize struct {
-    // Kustomization represents the decoded kustomization.yaml file
-    Kustomization Kustomization `json:"kustomization" yaml:"kustomization"`
-    // Files holds file contents for kustomize, e.g. patch files.
-    Files FileContentMap `json:"files,omitempty" yaml:"files,omitempty"`
-}
-```
-
-<a name="Metadata"></a>
-## type Metadata {#Metadata}
-
-Metadata represents data about the resource such as the Name.
-
-```go
-type Metadata struct {
-    // Name represents the resource name.
-    Name string `json:"name" yaml:"name"`
-    // Labels represents a resource selector.
-    Labels map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"`
-    // Annotations represents arbitrary non-identifying metadata.  For example
-    // holos uses the `app.holos.run/description` annotation to log resources in a
-    // user customized way.
-    Annotations map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"`
-}
-```
-
-<a name="Platform"></a>
-## type Platform {#Platform}
-
-Platform represents a platform to manage. A Platform specifies a [Component](<#Component>) collection and integrates the components together into a holistic platform. Holos iterates over the [Component](<#Component>) collection producing a [BuildPlan](<#BuildPlan>) for each, which holos then executes to render manifests.
-
-Inspect a Platform resource holos would process by executing:
-
-```
-cue export --out yaml ./platform
-```
-
-```go
-type Platform struct {
-    // Kind is a string value representing the resource.
-    Kind string `json:"kind" yaml:"kind" cue:"\"Platform\""`
-    // APIVersion represents the versioned schema of this resource.
-    APIVersion string `json:"apiVersion" yaml:"apiVersion" cue:"string | *\"v1alpha5\""`
-    // Metadata represents data about the resource such as the Name.
-    Metadata Metadata `json:"metadata" yaml:"metadata"`
-
-    // Spec represents the platform specification.
-    Spec PlatformSpec `json:"spec" yaml:"spec"`
-}
-```
-
-<a name="PlatformSpec"></a>
-## type PlatformSpec {#PlatformSpec}
-
-PlatformSpec represents the platform specification.
-
-```go
-type PlatformSpec struct {
-    // Components represents a collection of holos components to manage.
-    Components []Component `json:"components" yaml:"components"`
-}
-```
-
-<a name="Repository"></a>
-## type Repository {#Repository}
-
-Repository represents a [Helm](<#Helm>) [Chart](<#Chart>) repository.
-
-The Auth field is useful to configure http basic authentication to the Helm repository. Holos gets the username and password from the environment variables represented by the Auth field.
-
-```go
-type Repository struct {
-    Name string `json:"name" yaml:"name"`
-    URL  string `json:"url" yaml:"url"`
-    Auth Auth   `json:"auth,omitempty" yaml:"auth,omitempty"`
-}
-```
-
-<a name="Resource"></a>
-## type Resource {#Resource}
-
-Resource represents one kubernetes api object.
-
-```go
-type Resource map[string]any
-```
-
-<a name="Resources"></a>
-## type Resources {#Resources}
-
-Resources represents Kubernetes resources. Most commonly used to mix resources into the [BuildPlan](<#BuildPlan>) generated from CUE, but may be generated from elsewhere.
-
-```go
-type Resources map[Kind]map[InternalLabel]Resource
-```
-
-<a name="Transformer"></a>
-## type Transformer {#Transformer}
-
-Transformer combines multiple inputs from prior [Generator](<#Generator>) or [Transformer](<#Transformer>) outputs into one output. [Kustomize](<#Kustomize>) is the most commonly used transformer. A simple [Join](<#Join>) is also supported for use with plain manifest files.
-
-1. [Kustomize](<#Kustomize>) \- Patch and transform the output from prior generators or transformers. See [Introduction to Kustomize](<https://kubectl.docs.kubernetes.io/guides/config_management/introduction/>).
-2. [Join](<#Join>) \- Concatenate multiple prior outputs into one output.
-
-```go
-type Transformer struct {
-    // Kind represents the kind of transformer. Must be Kustomize, or Join.
-    Kind string `json:"kind" yaml:"kind" cue:"\"Kustomize\" | \"Join\""`
-    // Inputs represents the files to transform. The Output of prior Generators
-    // and Transformers.
-    Inputs []FilePath `json:"inputs" yaml:"inputs"`
-    // Output represents a file for a subsequent Transformer or Artifact to
-    // consume.
-    Output FilePath `json:"output" yaml:"output"`
-    // Kustomize transformer. Ignored unless kind is Kustomize.
-    Kustomize Kustomize `json:"kustomize,omitempty" yaml:"kustomize,omitempty"`
-    // Join transformer. Ignored unless kind is Join.
-    Join Join `json:"join,omitempty" yaml:"join,omitempty"`
-}
-```
-
-<a name="Validator"></a>
-## type Validator {#Validator}
-
-Validator validates files. Useful to validate an [Artifact](<#Artifact>) prior to writing it out to the final destination. Holos may execute validators concurrently. See the [validators](<https://holos.run/docs/v1alpha5/tutorial/validators/>) tutorial for an end to end example.
-
-```go
-type Validator struct {
-    // Kind represents the kind of transformer. Must be Kustomize, or Join.
-    Kind string `json:"kind" yaml:"kind" cue:"\"Command\""`
-    // Inputs represents the files to validate.  Usually the final Artifact.
-    Inputs []FilePath `json:"inputs" yaml:"inputs"`
-    // Command represents a validation command.  Ignored unless kind is Command.
-    Command Command `json:"command,omitempty" yaml:"command,omitempty"`
-}
-```
-
-<a name="ValueFile"></a>
-## type ValueFile {#ValueFile}
-
-ValueFile represents one Helm value file produced from CUE.
-
-```go
-type ValueFile struct {
-    // Name represents the file name, e.g. "region-values.yaml"
-    Name string `json:"name" yaml:"name"`
-    // Kind is a discriminator.
-    Kind string `json:"kind" yaml:"kind" cue:"\"Values\""`
-    // Values represents values for holos to marshal into the file name specified
-    // by Name when rendering the chart.
-    Values Values `json:"values,omitempty" yaml:"values,omitempty"`
-}
-```
-
-<a name="Values"></a>
-## type Values {#Values}
-
-Values represents [Helm](<#Helm>) Chart values generated from CUE.
-
-```go
-type Values map[string]any
-```
-
-Generated by [gomarkdoc](<https://github.com/princjef/gomarkdoc>)
+v1alpha5

doc/md/common/example-component-integrate.mdx

@@ -1,16 +0,0 @@
-Integrate the `podinfo` component into the platform.
-
-```bash
-cat <<EOF >platform/podinfo.cue
-```
-```cue showLineNumbers
-package holos
-
-Platform: Components: podinfo: {
-	name: "podinfo"
-	path: "components/podinfo"
-}
-```
-```bash
-EOF
-```

doc/md/common/example-component.mdx

@@ -1,34 +0,0 @@
-Create a directory for the example `podinfo` component we'll use to render
-platform manifests.
-
-```bash
-mkdir -p components/podinfo
-```
-
-Create the CUE configuration for the example `podinfo` component.
-
-```bash
-cat <<EOF >components/podinfo/podinfo.cue
-```
-```cue showLineNumbers
-package holos
-
-holos: Component.BuildPlan
-
-Component: #Helm & {
-	Name: "podinfo"
-	Chart: {
-		version: "6.6.2"
-		repository: {
-			name: "podinfo"
-			url:  "https://stefanprodan.github.io/podinfo"
-		}
-	}
-	Values: ui: {
-		message: string | *"Hello World" @tag(message, type=string)
-	}
-}
-```
-```bash
-EOF
-```

doc/md/topics/1-multiple-clusters.mdx

@@ -0,0 +1 @@
+# Multi Cluster

doc/md/topics/4-local-cluster.mdx

@@ -0,0 +1,272 @@
+---
+description: Build a local Cluster to use with these guides.
+---
+
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+import Admonition from '@theme/Admonition';
+
+# Local Cluster
+
+In this guide we'll set up a local k3d cluster to apply and explore the
+configuration described in our other guides.  After completing this guide you'll
+have a standard Kubernetes API server with proper DNS and TLS certificates.
+You'll be able to easily reset the cluster to a known good state to iterate on
+your own Platform.
+
+## Reset the Cluster
+
+If you've already followed this guide, reset the cluster by running the
+following commands.  Skip this section if you're creating a cluster for the
+first time.
+
+First, delete the cluster.
+
+<Tabs groupId="k3d-cluster-delete">
+  <TabItem value="command" label="Command">
+```bash
+k3d cluster delete workload
+```
+  </TabItem>
+  <TabItem value="output" label="Output">
+```txt showLineNumbers
+INFO[0000] Deleting cluster 'workload'
+INFO[0000] Deleting cluster network 'k3d-workload'
+INFO[0000] Deleting 1 attached volumes...
+INFO[0000] Removing cluster details from default kubeconfig...
+INFO[0000] Removing standalone kubeconfig file (if there is one)...
+INFO[0000] Successfully deleted cluster workload!
+```
+  </TabItem>
+</Tabs>
+
+Then create the cluster again.
+
+<Tabs groupId="k3d-cluster-create">
+  <TabItem value="command" label="Command">
+```bash
+k3d cluster create workload \
+  --registry-use k3d-registry.holos.localhost:5100 \
+  --port "443:443@loadbalancer" \
+  --k3s-arg "--disable=traefik@server:0"
+```
+  </TabItem>
+  <TabItem value="output" label="Output">
+```txt showLineNumbers
+INFO[0000] portmapping '443:443' targets the loadbalancer: defaulting to [servers:*:proxy agents:*:proxy]
+INFO[0000] Prep: Network
+INFO[0000] Created network 'k3d-workload'
+INFO[0000] Created image volume k3d-workload-images
+INFO[0000] Starting new tools node...
+INFO[0000] Starting node 'k3d-workload-tools'
+INFO[0001] Creating node 'k3d-workload-server-0'
+INFO[0001] Creating LoadBalancer 'k3d-workload-serverlb'
+INFO[0001] Using the k3d-tools node to gather environment information
+INFO[0001] HostIP: using network gateway 172.17.0.1 address
+INFO[0001] Starting cluster 'workload'
+INFO[0001] Starting servers...
+INFO[0001] Starting node 'k3d-workload-server-0'
+INFO[0003] All agents already running.
+INFO[0003] Starting helpers...
+INFO[0003] Starting node 'k3d-workload-serverlb'
+INFO[0009] Injecting records for hostAliases (incl. host.k3d.internal) and for 3 network members into CoreDNS configmap...
+INFO[0012] Cluster 'workload' created successfully!
+INFO[0012] You can now use it like this:
+kubectl cluster-info
+```
+  </TabItem>
+</Tabs>
+
+Finally, add your trusted certificate authority.
+
+<Tabs groupId="apply-local-ca">
+  <TabItem value="command" label="Command">
+```bash
+kubectl apply --server-side=true -f "$(mkcert -CAROOT)/namespace.yaml"
+kubectl apply --server-side=true -n cert-manager -f "$(mkcert -CAROOT)/local-ca.yaml"
+```
+  </TabItem>
+  <TabItem value="output" label="Output">
+```txt showLineNumbers
+namespace/cert-manager serverside-applied
+secret/local-ca serverside-applied
+```
+  </TabItem>
+</Tabs>
+
+You're back to the same state as the first time you completed this guide.
+
+## What you'll need {#requirements}
+
+You'll need the following tools installed to complete this guide.
+
+1. [holos](/docs/install) - to build the platform.
+2. [helm](https://helm.sh/docs/intro/install/) - to render Holos components that wrap upstream Helm charts.
+3. [k3d](https://k3d.io/#installation) - to provide a k8s api server.
+4. [OrbStack](https://docs.orbstack.dev/install) or [Docker](https://docs.docker.com/get-docker/) - to use k3d.
+5. [kubectl](https://kubernetes.io/docs/tasks/tools/) - to interact with the k8s api server.
+6. [mkcert](https://github.com/FiloSottile/mkcert?tab=readme-ov-file#installation) - to make trusted TLS certificates.
+7. [jq](https://jqlang.github.io/jq/download/) - to fiddle with JSON output.
+
+## Configure DNS {#configure-dns}
+
+Configure your machine to resolve `*.holos.localhost` to your loopback
+interface.  This is necessary for requests to reach the workload cluster.  Save
+this script to a file and execute it.
+
+```bash showLineNumbers
+#! /bin/bash
+#
+
+set -euo pipefail
+
+tmpdir="$(mktemp -d)"
+finish() {
+  [[ -d "$tmpdir" ]] && rm -rf "$tmpdir"
+}
+trap finish EXIT
+cd "$tmpdir"
+
+brew install dnsmasq
+
+cat <<EOF >"$(brew --prefix)/etc/dnsmasq.d/holos.localhost.conf"
+# Refer to https://holos.run/docs/tutorial/local/k3d/
+address=/holos.localhost/127.0.0.1
+EOF
+
+if [[ -r /Library/LaunchDaemons/homebrew.mxcl.dnsmasq.plist ]]; then
+  echo "dnsmasq already configured"
+else
+  sudo cp "$(brew list dnsmasq | grep 'dnsmasq.plist$')" \
+    /Library/LaunchDaemons/homebrew.mxcl.dnsmasq.plist
+  sudo launchctl unload /Library/LaunchDaemons/homebrew.mxcl.dnsmasq.plist
+  sudo launchctl load /Library/LaunchDaemons/homebrew.mxcl.dnsmasq.plist
+  dscacheutil -flushcache
+  echo "dnsmasq configured"
+fi
+
+sudo mkdir -p /etc/resolver
+sudo tee /etc/resolver/holos.localhost <<EOF
+domain holos.localhost
+nameserver 127.0.0.1
+EOF
+sudo killall -HUP mDNSResponder
+
+echo "all done."
+```
+
+## Create the Cluster {#create-the-cluster}
+
+The Workload Cluster is where your applications and services will be deployed.
+In production this is usually an EKS, GKE, or AKS cluster.
+
+:::tip
+
+Holos supports all compliant Kubernetes clusters. Holos was developed and tested
+on GKE, EKS, Talos, k3s, and Kubeadm clusters.
+
+:::
+
+Create a local registry to speed up image builds and pulls.
+
+```bash
+k3d registry create registry.holos.localhost --port 5100
+```
+
+Create the workload cluster configured to use the local registry.
+
+```bash
+k3d cluster create workload \
+  --registry-use k3d-registry.holos.localhost:5100 \
+  --port "443:443@loadbalancer" \
+  --k3s-arg "--disable=traefik@server:0"
+```
+
+Traefik is disabled because Istio provides the same functionality.
+
+## Setup Root CA {#setup-root-ca}
+
+Platforms most often use cert-manager to issue tls certificates.  The browser
+and tools we're using need to trust these certificates to work together.
+Generate a local, trusted root certificate authority with the following script.
+
+Admin access is necessary for `mkcert` to manage the certificate into your trust
+stores.
+
+```bash
+sudo -v
+```
+
+Manage the local CA and copy the CA key to the workload cluster so that cert
+manager can manage trusted certificates.
+
+Save this script to a file and execute it to configure a trusted certificate
+authority.
+
+```bash showLineNumbers
+#! /bin/bash
+#
+
+set -euo pipefail
+
+mkcert --install
+
+tmpdir="$(mktemp -d)"
+finish() {
+  [[ -d "$tmpdir" ]] && rm -rf "$tmpdir"
+}
+trap finish EXIT
+cd "$tmpdir"
+
+# Create the local CA Secret with ca.crt, tls.crt, tls.key
+
+mkdir local-ca
+cd local-ca
+CAROOT="$(mkcert -CAROOT)"
+cp -p "${CAROOT}/rootCA.pem" ca.crt
+cp -p "${CAROOT}/rootCA.pem" tls.crt
+cp -p "${CAROOT}/rootCA-key.pem" tls.key
+kubectl create secret generic --from-file=.  --dry-run=client -o yaml local-ca > ../local-ca.yaml
+echo 'type: kubernetes.io/tls' >> ../local-ca.yaml
+
+cd ..
+
+cat <<EOF > namespace.yaml
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    kubernetes.io/metadata.name: cert-manager
+  name: cert-manager
+spec:
+  finalizers:
+  - kubernetes
+EOF
+kubectl apply --server-side=true -f namespace.yaml
+kubectl apply -n cert-manager --server-side=true -f local-ca.yaml
+
+# Save the Secret to easily reset the cluster later.
+install -m 0644 namespace.yaml "${CAROOT}/namespace.yaml"
+install -m 0600 local-ca.yaml "${CAROOT}/local-ca.yaml"
+```
+
+:::warning
+
+Take care to run the local-ca script each time you create the workload cluster
+so that Certificates are issued correctly.
+
+:::
+
+## Clean Up {#clean-up}
+
+If you'd like to clean up the resources you created in this guide, remove them
+with:
+
+```bash
+k3d cluster delete workload
+```
+
+## Next Steps
+
+Now that you have a real cluster, continue your Holos journey by following the
+[Tutorial](../tutorial/1-overview.mdx) and setting up your own Platform.

doc/md/topics/architecture.mdx

@@ -1,18 +0,0 @@
----
-description: Architecture diagrams.
-slug: architecture
-sidebar_position: 100
----
-
-import RenderPlatformDiagram from '@site/src/diagrams/render-platform-sequence.mdx';
-import RenderComponentDiagram from '@site/src/diagrams/render-component-sequence.mdx';
-
-# Architecture
-
-## Platform Rendering Sequence
-
-<RenderPlatformDiagram />
-
-## Component Rendering Sequence
-
-<RenderComponentDiagram />

doc/md/topics/comparison.mdx

@@ -1,57 +0,0 @@
----
-description: Holos compared to other tools
-sidebar_label: Comparison
-slug: comparison
-sidebar_position: 40
----
-
-{/* cspell:ignore Prodan, rollouts */}
-
-# Holos compared to other tools
-
-## Timoni
-
-Holos and Timoni both aim to solve similar problems but approach them at
-different levels of the stack.
-
-Timoni focuses on managing applications by evaluating [CUE] stored in OCI
-containers. Its creator, Stephan Prodan, envisions a controller that applies the
-resulting manifests. In this process, Timoni defers to [Flux] for managing Helm
-charts within the cluster.
-
-In contrast, Holos implements the [Rendered Manifests Pattern] and takes a
-different approach, particularly in how it handles [Helm] charts. Like
-[ArgoCD], Holos renders Helm charts into manifests using the `helm template`
-command in its rendering pipeline. Holos differs from Timoni in several important
-ways:
-
-1. **Separation of Responsibilities:**  Holos stops short of applying
-rendered manifests to a cluster, leaving that task to existing tools like
-[ArgoCD], [Flux], or even basic `kubectl apply` commands.
-
-2. **Ecosystem Integration:**  By focusing solely on rendering Kubernetes
-manifests, Holos creates space for other tools to handle deployment and
-management. For instance, Holos integrates seamlessly with [Kargo] for
-progressive rollouts, as [Kargo] operates between Holos and the Kubernetes API.
-This approach ensures that you're not locked into any specific tool and can
-choose the best solution for each task.
-
-3. **Platform Integration:** Holos focuses on integrating multiple Components
-into a larger Platform. In Holos terminology, a Component refers to a wrapper
-for [Helm] charts, [Kustomize] bases, or raw YAML files, integrated into the
-rendering pipeline through [CUE].  A Platform represents the full combination of
-these components.
-
-4. **Explicit Rendering Pipeline:** Holos emphasizes flexibility in its
-rendering pipeline. The system allows any tool that generates Kubernetes
-manifests to be wrapped in a Generator, which can then feed into existing
-transformers like [Kustomize]. This explicit separation makes Holos highly
-adaptable for different workflows.
-
-[Kargo]: https://kargo.io/
-[Flux]: https://fluxcd.io
-[Helm]: https://helm.sh
-[ArgoCD]: https://argoproj.github.io/cd/
-[Kustomize]: https://kustomize.io/
-[CUE]: https://cuelang.org/
-[Rendered Manifests Pattern]: https://akuity.io/blog/the-rendered-manifests-pattern

doc/md/topics/gitops/argocd-application.mdx

@@ -1,223 +0,0 @@
----
-slug: argocd-application
-title: ArgoCD Application
-description: Configuring an Application for each Component.
-sidebar_position: 110
----
-
-import Tabs from '@theme/Tabs';
-import TabItem from '@theme/TabItem';
-import CommonComponent from '../../common/example-component.mdx';
-import CommonComponentIntegrate from '../../common/example-component-integrate.mdx';
-
-# ArgoCD Application
-
-## Overview
-
-This topic covers how to mix in an ArgoCD Application to all components.  We'll
-use the `Artifacts` field of [ComponentConfig] defined by the author schema.
-
-## The Code
-
-### Generating the structure
-
-Use `holos` to generate a minimal platform directory structure.  Start by
-creating a blank directory to hold the platform configuration.
-
-```shell
-mkdir holos-argocd-application && cd holos-argocd-application
-```
-
-```shell
-holos init platform v1alpha5
-```
-
-### Creating an example Component
-
-<CommonComponent />
-<CommonComponentIntegrate />
-
-## Adding ArgoCD Application
-
-Configure Holos to render an [Application] by defining an [Artifact] for it in
-every BuildPlan holos produces.  We're unifying our custom configuration with
-the existing `#ComponentConfig` defined in `schema.cue`.
-
-```bash
-cat <<EOF >argocd-application.cue
-```
-```cue showLineNumbers
-package holos
-
-import (
-	"path"
-	app "argoproj.io/application/v1alpha1"
-)
-
-#ComponentConfig: {
-	Name:          _
-	OutputBaseDir: _
-
-	let ArtifactPath = path.Join([OutputBaseDir, "gitops", "\(Name).application.gen.yaml"], path.Unix)
-	let ResourcesPath = path.Join(["deploy", OutputBaseDir, "components", Name], path.Unix)
-
-	Artifacts: "\(Name)-application": {
-		artifact: ArtifactPath
-		generators: [{
-			kind:   "Resources"
-			output: artifact
-			resources: Application: (Name): app.#Application & {
-				metadata: name:      Name
-				metadata: namespace: "argocd"
-				spec: {
-					destination: server: "https://kubernetes.default.svc"
-					project: "default"
-					source: {
-						path:           ResourcesPath
-						repoURL:        "https://example.com/example.git"
-						targetRevision: "main"
-					}
-				}
-			}
-		}]
-	}
-}
-```
-```bash
-EOF
-```
-
-## Inspecting the BuildPlan
-
-Our customized `#ComponentConfig` results in the following `BuildPlan`.
-
-:::note
-The second artifact around line 40 contains the configured `Application`
-resource.
-:::
-
-<Tabs groupId="55075C71-02E8-4222-88C0-2D52C82D18FC">
-  <TabItem value="command" label="Command">
-```bash
-holos cue export --expression holos --out=yaml ./components/podinfo
-```
-  </TabItem>
-  <TabItem value="output" label="Output">
-```yaml showLineNumbers
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: podinfo
-spec:
-  artifacts:
-    - artifact: components/podinfo/podinfo.gen.yaml
-      generators:
-        - kind: Helm
-          output: helm.gen.yaml
-          helm:
-            chart:
-              name: podinfo
-              version: 6.6.2
-              release: podinfo
-              repository:
-                name: podinfo
-                url: https://stefanprodan.github.io/podinfo
-            values: {}
-            enableHooks: false
-        - kind: Resources
-          output: resources.gen.yaml
-          resources: {}
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - helm.gen.yaml
-            - resources.gen.yaml
-          output: components/podinfo/podinfo.gen.yaml
-          kustomize:
-            kustomization:
-              labels:
-                - includeSelectors: false
-                  pairs: {}
-              resources:
-                - helm.gen.yaml
-                - resources.gen.yaml
-              kind: Kustomization
-              apiVersion: kustomize.config.k8s.io/v1beta1
-    - artifact: gitops/podinfo.application.gen.yaml
-      generators:
-        - kind: Resources
-          output: gitops/podinfo.application.gen.yaml
-          resources:
-            Application:
-              podinfo:
-                apiVersion: argoproj.io/v1alpha1
-                kind: Application
-                metadata:
-                  name: podinfo
-                  namespace: argocd
-                spec:
-                  destination:
-                    server: https://kubernetes.default.svc
-                  project: default
-                  source:
-                    path: deploy/components/podinfo
-                    repoURL: https://example.com/example.git
-                    targetRevision: main
-source:
-  component:
-    name: podinfo
-    path: no-path
-    parameters: {}
-```
-  </TabItem>
-</Tabs>
-
-## Rendering manifests
-
-<Tabs groupId="E150C802-7162-4FBF-82A7-77D9ADAEE847">
-  <TabItem value="command" label="Command">
-```bash
-holos render platform
-```
-  </TabItem>
-  <TabItem value="output" label="Output">
-```
-cached podinfo 6.6.2
-rendered podinfo in 1.938665041s
-rendered platform in 1.938759417s
-```
-  </TabItem>
-</Tabs>
-
-## Reviewing the Application
-
-The Artifact we added to `#ComponentConfig` will produce an ArgoCD Application
-resource for every component in the platform.  The output in this example is
-located at:
-
-```txt
-deploy/gitops/podinfo.application.gen.yaml
-```
-```yaml showLineNumbers
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-    name: podinfo
-    namespace: argocd
-spec:
-    destination:
-        server: https://kubernetes.default.svc
-    project: default
-    source:
-        path: deploy/components/podinfo
-        repoURL: https://example.com/example.git
-        targetRevision: main
-```
-
-[podinfo]: https://github.com/stefanprodan/podinfo
-[CUE Module]: https://cuelang.org/docs/reference/modules/
-[CUE Tags]: https://cuelang.org/docs/howto/inject-value-into-evaluation-using-tag-attribute/
-[Application]: https://argo-cd.readthedocs.io/en/stable/user-guide/application-specification/
-[Platform]: ../../api/author.md#Platform
-[ComponentConfig]: ../../api/author.md#ComponentConfig
-[Artifact]: ../../api/core.md#Artifact

doc/md/topics/gitops/flux-kustomization.mdx

@@ -1,218 +0,0 @@
----
-slug: flux-kustomization
-title: Flux Kustomization
-description: Configuring a Kustomization for each Component.
-sidebar_position: 120
----
-
-import Tabs from '@theme/Tabs';
-import TabItem from '@theme/TabItem';
-import CommonComponent from '../../common/example-component.mdx';
-import CommonComponentIntegrate from '../../common/example-component-integrate.mdx';
-
-# Flux Kustomization
-
-## Overview
-
-This topic covers how to mix in a Flux Kustomization to all components.  We'll
-use the `Artifacts` field of [ComponentConfig] defined by the author schema.
-
-## The Code
-
-### Generating the structure
-
-Use `holos` to generate a minimal platform directory structure.  Start by
-creating a blank directory to hold the platform configuration.
-
-```shell
-mkdir holos-flux-kustomization && cd holos-flux-kustomization
-```
-
-```shell
-holos init platform v1alpha5
-```
-
-### Creating an example Component
-
-<CommonComponent />
-<CommonComponentIntegrate />
-
-## Adding Flux Kustomizations
-
-Configure Holos to render a [Kustomization] by defining an [Artifact] for it in
-every BuildPlan holos produces.  We're unifying our custom configuration with
-the existing `#ComponentConfig` defined in `schema.cue`.
-
-```bash
-cat <<EOF >flux-kustomization.cue
-```
-```cue showLineNumbers
-package holos
-
-import (
-	"path"
-	flux "kustomize.toolkit.fluxcd.io/kustomization/v1"
-)
-
-#ComponentConfig: {
-	Name:          _
-	OutputBaseDir: _
-
-	let ArtifactPath = path.Join([OutputBaseDir, "gitops", "\(Name).kustomization.gen.yaml"], path.Unix)
-	let ResourcesPath = path.Join(["deploy", OutputBaseDir, "components", Name], path.Unix)
-
-	Artifacts: "\(Name)-kustomization": {
-		artifact: ArtifactPath
-		generators: [{
-			kind:   "Resources"
-			output: artifact
-			resources: Kustomization: (Name): flux.#Kustomization & {
-				metadata: name:      Name
-				metadata: namespace: "default"
-				spec: {
-					interval: "5m"
-					timeout:  "1m"
-					prune:    true
-					path:     ResourcesPath
-					sourceRef: {
-						kind: "GitRepository"
-						name: "webapp"
-					}
-				}
-			}
-		}]
-	}
-}
-```
-```bash
-EOF
-```
-
-## Inspecting the BuildPlan
-
-Our customized `#ComponentConfig` results in the following `BuildPlan`.
-
-:::note
-The second artifact around line 40 contains the configured `Kustomization`
-resource.
-:::
-
-<Tabs groupId="55075C71-02E8-4222-88C0-2D52C82D18FC">
-  <TabItem value="command" label="Command">
-```bash
-holos cue export --expression holos --out=yaml ./components/podinfo
-```
-  </TabItem>
-  <TabItem value="output" label="Output">
-```yaml showLineNumbers
-kind: BuildPlan
-apiVersion: v1alpha5
-metadata:
-  name: podinfo
-spec:
-  artifacts:
-    - artifact: components/podinfo/podinfo.gen.yaml
-      generators:
-        - kind: Helm
-          output: helm.gen.yaml
-          helm:
-            chart:
-              name: podinfo
-              version: 6.6.2
-              release: podinfo
-              repository:
-                name: podinfo
-                url: https://stefanprodan.github.io/podinfo
-            values:
-              ui:
-                message: Hello World
-            enableHooks: false
-        - kind: Resources
-          output: resources.gen.yaml
-          resources: {}
-      validators: []
-      transformers:
-        - kind: Kustomize
-          inputs:
-            - helm.gen.yaml
-            - resources.gen.yaml
-          output: components/podinfo/podinfo.gen.yaml
-          kustomize:
-            kustomization:
-              resources:
-                - helm.gen.yaml
-                - resources.gen.yaml
-              kind: Kustomization
-              apiVersion: kustomize.config.k8s.io/v1beta1
-    - artifact: gitops/podinfo.kustomization.gen.yaml
-      generators:
-        - kind: Resources
-          output: gitops/podinfo.kustomization.gen.yaml
-          resources:
-            Kustomization:
-              podinfo:
-                apiVersion: kustomize.toolkit.fluxcd.io/v1
-                kind: Kustomization
-                metadata:
-                  name: podinfo
-                  namespace: default
-                spec:
-                  interval: 5m
-                  path: deploy/components/podinfo
-                  prune: true
-                  sourceRef:
-                    kind: GitRepository
-                    name: webapp
-                  timeout: 1m
-```
-  </TabItem>
-</Tabs>
-
-## Rendering manifests
-
-<Tabs groupId="E150C802-7162-4FBF-82A7-77D9ADAEE847">
-  <TabItem value="command" label="Command">
-```bash
-holos render platform
-```
-  </TabItem>
-  <TabItem value="output" label="Output">
-```
-rendered podinfo in 140.341417ms
-rendered platform in 140.441333ms
-```
-  </TabItem>
-</Tabs>
-
-## Reviewing the Kustomization
-
-The Artifact we added to `#ComponentConfig` will produce a Flux Kustomization
-resource for every component in the platform.  The output in this example is
-located at:
-
-```txt
-deploy/gitops/podinfo.kustomization.gen.yaml
-```
-```yaml showLineNumbers
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-    name: podinfo
-    namespace: default
-spec:
-    interval: 5m
-    path: deploy/components/podinfo
-    prune: true
-    sourceRef:
-        kind: GitRepository
-        name: webapp
-    timeout: 1m
-```
-
-[podinfo]: https://github.com/stefanprodan/podinfo
-[CUE Module]: https://cuelang.org/docs/reference/modules/
-[CUE Tags]: https://cuelang.org/docs/howto/inject-value-into-evaluation-using-tag-attribute/
-[Kustomization]: https://fluxcd.io/flux/components/kustomize/kustomizations/
-[Platform]: ../../api/author.md#Platform
-[ComponentConfig]: ../../api/author.md#ComponentConfig
-[Artifact]: ../../api/core.md#Artifact

doc/md/topics/gitops/index.mdx

@@ -1,19 +0,0 @@
----
-slug: .
-title: GitOps
-description: Managing resources with GitOps.
-sidebar_position: 120
----
-import DocCardList from '@theme/DocCardList';
-
-# GitOps
-
-This section has self contained articles covering how to manage resources using
-GitOps tooling like [ArgoCD] and [Flux].
-
----
-
-<DocCardList />
-
-[ArgoCD]: https://argo-cd.readthedocs.io/en/stable/
-[Flux]: https://fluxcd.io/

doc/md/topics/oci-helm-charts.mdx

@@ -1,65 +0,0 @@
----
-description: OCI Helm Charts
-slug: oci-helm-charts
-sidebar_position: 710
----
-
-# OCI Helm Charts
-
-Holos supports OCI Helm charts.  Use the following example to get started.
-
-```bash
-mkdir -p oci-helm && cd oci-helm
-holos init platform v1alpha5
-```
-
-```bash
-mkdir -p components/podinfo-oci
-cat <<EOF > components/podinfo-oci/podinfo-oci.cue
-```
-```cue showLineNumbers
-package holos
-
-holos: Component.BuildPlan
-
-Component: #Helm & {
-	Chart: {
-		name:    "oci://ghcr.io/stefanprodan/charts/podinfo"
-		release: "podinfo"
-		version: "6.6.2"
-	}
-}
-```
-```bash
-EOF
-```
-
-Register the component with the platform.
-
-```bash
-cat <<EOF >platform/podinfo-oci.cue
-```
-```cue showLineNumbers
-package holos
-
-Platform: Components: podinfo: {
-	name: "podinfo-oci"
-	path: "components/podinfo-oci"
-}
-```
-```bash
-EOF
-```
-
-The OCI chart is cached in the vendor directory and rendered.
-
-```bash
-holos render platform
-```
-
-```txt
-Pulled: ghcr.io/stefanprodan/charts/podinfo:6.6.2
-Digest: sha256:83295d47de6d6ca634ed4b952a7572fc176bcc38854d0c11ca0fa197bc5f1154
-rendered podinfo-oci in 7.21581325s
-rendered platform in 7.216199167s
-```

doc/md/topics/private-helm.mdx

@@ -1,183 +0,0 @@
----
-description: Private Helm Repositories
-slug: private-helm
-sidebar_position: 700
----
-
-# Private Helm
-
-Holos supports private Helm repositories accessed with http basic authentication
-since `v0.101.4`.  Use the following command to update your author and core
-schemas to support this configuration.
-
-```bash
-holos init platform v1alpha5 --force
-```
-
-## Configuration
-
-Holos uses the Helm SDK and defers to it for authentication to private
-repositories.  Each Helm Generator supports providing http basic authentication
-credentials from environment variables.
-
-For example, the following BuildPlan causes `holos` to get the admin username
-password from the `HOLOS_TEST_PASS` environment variable.
-
-```bash
-mkdir -p projects/holos/components/private-chart
-cat <<EOF > projects/holos/components/private-chart/private-chart.cue
-```
-```cue showLineNumbers
-package holos
-
-holos: Component.BuildPlan
-
-// Test holos can access a private repository with basic auth.
-// https://github.com/holos-run/holos/issues/370
-Component: #Helm & {
-	Chart: {
-		name:    "mychart"
-		version: "0.1.0"
-		repository: {
-			name: "holos-test"
-			url:  "https://charts.holos.localhost"
-			// auth: username: fromEnv:   "HOLOS_TEST_USER"
-			auth: username: value:   "admin"
-			auth: password: fromEnv: "HOLOS_TEST_PASS"
-		}
-	}
-}
-```
-```bash
-EOF
-```
-
-## Verification
-
-Verify `holos` can access a private Helm repository by setting [ChartMuseum] up
-on a [Local Cluster].  We'll use https with basic auth to authenticate to the
-chart repository.
-
-Using the [bank of holos] repository, deploy chart museum:
-
-```bash
-holos render platform -t ChartMuseum
-```
-
-Apply the manifests:
-
-```bash
-kubectl apply --server-side=true -f deploy/clusters/workload/projects/holos/components/chart-museum
-kubectl apply --server-side=true -f deploy/clusters/workload/projects/network/components/httproutes
-```
-
-Get the admin password:
-
-```bash
-kubectl get secret -n holos chartmuseum-auth -o json \
-  | jq --exit-status -r '.data.password | @base64d'
-```
-
-Add a local repo:
-
-```bash
-helm repo add holos-test https://charts.holos.localhost --username admin
-```
-```txt
-Password:
-"holos-test" has been added to your repositories
-```
-
-:::note
-Helm by default stores this password in `~/Library/Preferences/helm/repositories.yaml`
-:::
-
-Create a chart:
-
-```bash
-helm create mychart
-```
-```txt
-Creating mychart
-```
-
-Package it up.
-
-```bash
-helm package mychart
-```
-```txt
-Successfully packaged chart and saved it to: mychart-0.1.0.tgz
-```
-
-Publish it.
-
-```bash
-curl --user "admin:$(pbpaste)" --data-binary "@mychart-0.1.0.tgz" https://charts.holos.localhost/api/charts
-```
-```json
-{"saved":true}
-```
-
-Remove all cached charts:
-
-```bash
-find . -name vendor | xargs rm -rf
-```
-
-Render the chart:
-
-```bash
-cat <<EOF > test-private-repo.cue
-```
-```cue showLineNumbers
-@if(TestPrivateRepo)
-package holos
-
-// Test holos can access a private repository with basic auth.
-// https://github.com/holos-run/holos/issues/370
-Projects: holos: #ProjectBuilder & {
-        team: "holos-authors"
-
-        namespaces: holos:            _
-        _components: "private-chart": _
-}
-```
-```bash
-EOF
-```
-
-```
-time holos render platform -t TestPrivateRepo
-```
-
-Check the chart was pulled and cached:
-
-```shell
-tree ./projects/holos/components/private-chart/vendor
-```
-```txt
-./projects/holos/components/private-chart/vendor
-└── 0.1.0
-    ├── mychart
-    │   ├── Chart.yaml
-    │   ├── mychart-0.1.0.tgz
-    │   ├── templates
-    │   │   ├── NOTES.txt
-    │   │   ├── _helpers.tpl
-    │   │   ├── deployment.yaml
-    │   │   ├── hpa.yaml
-    │   │   ├── ingress.yaml
-    │   │   ├── service.yaml
-    │   │   ├── serviceaccount.yaml
-    │   │   └── tests
-    │   │       └── test-connection.yaml
-    │   └── values.yaml
-    └── mychart-0.1.0.tgz
-
-6 directories, 11 files
-```
-
-[Local Cluster]: ./local-cluster.mdx
-[ChartMuseum]: https://chartmuseum.com/docs/
-[bank of holos]: https://github.com/holos-run/bank-of-holos

doc/md/topics/progressive-delivery/.gitignore

@@ -1,2 +0,0 @@
-kargo-demo/
-.tmp/

doc/md/topics/progressive-delivery/_platform-components/examples/01-clone.txtar

@@ -1,17 +0,0 @@
-env GH_USER=holos-run
-# Remove the directory if it already exists
-exec rm -rf kargo-demo
-# Clone your fork of the kargo-demo repository
-exec bash -c 'bash -euo pipefail command.sh 2>&1'
-cmp stdout output.txt
-
-# Get the git commit
-cd kargo-demo
-exec git rev-parse --verify origin/HEAD
-cp stdout $WORK/git.commit
-
--- command.sh --
-git clone https://github.com/${GH_USER}/kargo-demo.git
-cd kargo-demo
--- output.txt --
-Cloning into 'kargo-demo'...

doc/md/topics/progressive-delivery/_platform-components/examples/10-cert-manager.txtar

@@ -1,37 +0,0 @@
-env GH_USER=jeffmccune
-cd ../script-01-clone/kargo-demo
-
-## Walk the reader from entrypoint to the deployment pipeline
-# holos render platform entrypoint
-exec bash -c 'cat $(<$WORK/entrypoint.path)'
-cp stdout $WORK/entrypoint.txt
-exec bash -c 'basename $(<$WORK/entrypoint.path)'
-cp stdout $WORK/entrypoint.basename
-
-# platform.stacks location
-exec bash -c 'cat $(<$WORK/stacks.path)'
-cp stdout $WORK/stacks.txt
-exec bash -c 'basename $(<$WORK/stacks.path)'
-cp stdout $WORK/stacks.basename
-
-# certmanager.config location
-exec bash -c 'cat $(<$WORK/config.path)'
-cp stdout $WORK/config.txt
-exec bash -c 'basename $(<$WORK/config.path)'
-cp stdout $WORK/config.basename
-
-# Cert Manager Component.
-exec bash -c 'cat $(<$WORK/component.path)'
-cp stdout $WORK/component.txt
-# Get the path basename for the docs.
-exec bash -c 'basename $(<$WORK/component.path)'
-cp stdout $WORK/component.basename
-
--- config.path --
-config/certmanager/certmanager.cue
--- stacks.path --
-config/platform/security.cue
--- entrypoint.path --
-platform/stacks.cue
--- component.path --
-stacks/security/components/cert-manager/cert-manager.cue

doc/md/topics/progressive-delivery/_platform-components/examples/20-holos-version.txtar

@@ -1,8 +0,0 @@
-cd ../script-01-clone/kargo-demo
-exec bash -c 'bash -euo pipefail $WORK/command.sh 2>&1'
-cmp stdout $WORK/output.txt
-
--- command.sh --
-holos --version
--- output.txt --
-0.102.3

doc/md/topics/progressive-delivery/_platform-components/examples/30-git-url.txtar

@@ -1,56 +0,0 @@
-env GH_USER=jeffmccune
-env HOME=$WORK/.tmp
-cd ../script-01-clone/kargo-demo
-chmod 0755 $WORK/update.sh
-
-# Combine the steps separated in the doc.
-exec cat $WORK/header.sh $WORK/body.txt $WORK/trailer.sh
-stdin stdout
-exec bash -xeuo pipefail
-cmp config/platform/organization_$GH_USER.cue $WORK/code.want.cue
-
-# Render the platform
-exec bash -c 'bash -euo pipefail $WORK/command.sh 2>&1'
-stdin stdout
-exec $WORK/update.sh $WORK/output.txt
-
-# Get the diff
-exec bash -c 'bash -euo pipefail $WORK/diff.sh 2>&1'
-stdin stdout
-exec $WORK/update.sh $WORK/diff.patch
-
-# Set the author
-exec git config --global user.name 'Holos Docs'
-exec git config --global user.email 'hello@holos.run'
-
-# Make the commit
-exec bash -c 'bash -euo pipefail $WORK/commit.sh 2>&1'
-stdin stdout
-exec $WORK/update.sh $WORK/commit.txt
-
--- update.sh --
-#! /bin/bash
-set -euo pipefail
-[[ -s "$1" ]] && [[ -z "${HOLOS_UPDATE_SCRIPTS:-}" ]] && exit 0
-cat > "$1"
--- header.sh --
-cat <<EOF > config/platform/organization_${GH_USER}.cue
--- body.txt --
-@if(${GH_USER})
-package platform
-
-organization: repoURL: "https://github.com/${GH_USER}/kargo-demo.git"
--- trailer.sh --
-EOF
--- code.want.cue --
-@if(jeffmccune)
-package platform
-
-organization: repoURL: "https://github.com/jeffmccune/kargo-demo.git"
--- command.sh --
-holos render platform -t ${GH_USER}
--- commit.sh --
-git add .
-git commit -m "Switch to $GH_USER fork"
--- diff.sh --
-git diff

doc/md/topics/progressive-delivery/_platform-components/script-01-clone/command.sh

@@ -1,2 +0,0 @@
-git clone https://github.com/${GH_USER}/kargo-demo.git
-cd kargo-demo

doc/md/topics/progressive-delivery/_platform-components/script-01-clone/git.commit

@@ -1 +0,0 @@
-238fe0403c99eeea4f4fb764a88b780554048414

doc/md/topics/progressive-delivery/_platform-components/script-01-clone/output.txt

@@ -1 +0,0 @@
-Cloning into 'kargo-demo'...

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/component.basename

@@ -1 +0,0 @@
-cert-manager.cue

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/component.path

@@ -1 +0,0 @@
-stacks/security/components/cert-manager/cert-manager.cue

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/component.txt

@@ -1,21 +0,0 @@
-package holos
-
-import "holos.example/config/certmanager"
-
-// Produce a helm chart build plan.
-holos: Component.BuildPlan
-
-Component: #Helm & {
-	Name:      "cert-manager"
-	Namespace: certmanager.config.namespace
-	Chart:     certmanager.config.chart
-
-	EnableHooks: true
-
-	Values: #Values & {
-		crds: enabled:            true
-		startupapicheck: enabled: false
-		// https://github.com/cert-manager/cert-manager/issues/6716
-		global: leaderElection: namespace: Namespace
-	}
-}

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/config.basename

@@ -1 +0,0 @@
-certmanager.cue

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/config.path

@@ -1 +0,0 @@
-config/certmanager/certmanager.cue

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/config.txt

@@ -1,30 +0,0 @@
-@extern(embed)
-package certmanager
-
-import "github.com/holos-run/holos/api/core/v1alpha5:core"
-
-// Unify data from yaml for Kargo integration.
-_data: _ @embed(file=cert-manager.yaml)
-
-config: #Config & {
-	namespace: "cert-manager"
-	// datafile value must align to the embed file directive above for proper
-	// configuration of Kargo promotion stages.
-	datafile: "./config/certmanager/cert-manager.yaml"
-	chart: {
-		name:    "cert-manager"
-		version: _data.chart.version
-		repository: {
-			name: "jetstack"
-			url:  "https://charts.jetstack.io"
-		}
-	}
-}
-
-#Config: {
-	namespace: string
-	datafile:  string
-	chart: core.#Chart & {
-		version: =~"^v{0,1}[0-9]+\\.[0-9]+\\.[0-9]+$"
-	}
-}

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/entrypoint.basename

@@ -1 +0,0 @@
-stacks.cue

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/entrypoint.path

@@ -1 +0,0 @@
-platform/stacks.cue

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/entrypoint.txt

@@ -1,8 +0,0 @@
-package main
-
-import "holos.example/config/platform"
-
-// Register all stack components with the platform spec.
-for STACK in platform.stacks {
-	Platform: Components: STACK.components
-}

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/stacks.basename

@@ -1 +0,0 @@
-security.cue

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/stacks.path

@@ -1 +0,0 @@
-config/platform/security.cue

doc/md/topics/progressive-delivery/_platform-components/script-10-cert-manager/stacks.txt

@@ -1,46 +0,0 @@
-package platform
-
-import "holos.example/config/certmanager"
-
-stacks: security: (#StackBuilder & {
-	(#PromoterBuilder & {parameters: {
-		name: "cert-manager"
-		config: {
-			datafile: certmanager.config.datafile
-			chart:    certmanager.config.chart
-		}
-	}}).promoter
-
-	// Manage the external-secrets namespace.
-	stack: namespaces: "external-secrets": _
-
-	parameters: {
-		name: "security"
-		components: {
-			namespaces: {
-				path: "stacks/security/components/namespaces"
-				annotations: description: "configures namespaces for all stacks"
-			}
-			"external-secrets-crds": {
-				path: "stacks/security/components/external-secrets-crds"
-				annotations: description: "external secrets custom resource definitions"
-			}
-			"external-secrets": {
-				path: "stacks/security/components/external-secrets"
-				annotations: description: "external secrets custom resource definitions"
-			}
-			"cert-manager": {
-				path: "stacks/security/components/cert-manager"
-				annotations: description: "cert-manager operator and custom resource definitions"
-				parameters: {
-					kargoProject: "cert-manager"
-					kargoStage:   "main"
-				}
-			}
-			"local-ca": {
-				path: "stacks/security/components/local-ca"
-				annotations: description: "localhost mkcert certificate authority"
-			}
-		}
-	}
-}).stack

doc/md/topics/progressive-delivery/_platform-components/script-20-holos-version/command.sh

@@ -1 +0,0 @@
-holos --version

doc/md/topics/progressive-delivery/_platform-components/script-20-holos-version/output.txt

@@ -1 +0,0 @@
-0.102.3

doc/md/topics/progressive-delivery/_platform-components/script-30-git-url/body.txt

@@ -1,4 +0,0 @@
-@if(${GH_USER})
-package platform
-
-organization: repoURL: "https://github.com/${GH_USER}/kargo-demo.git"

doc/md/topics/progressive-delivery/_platform-components/script-30-git-url/code.want.cue

@@ -1,4 +0,0 @@
-@if(jeffmccune)
-package platform
-
-organization: repoURL: "https://github.com/jeffmccune/kargo-demo.git"

doc/md/topics/progressive-delivery/_platform-components/script-30-git-url/command.sh

@@ -1 +0,0 @@
-holos render platform -t ${GH_USER}

doc/md/topics/progressive-delivery/_platform-components/script-30-git-url/commit.sh

@@ -1,2 +0,0 @@
-git add .
-git commit -m "Switch to $GH_USER fork"

doc/md/topics/progressive-delivery/_platform-components/script-30-git-url/commit.txt

@@ -1,3 +0,0 @@
-[main b883807] Switch to jeffmccune fork
- 43 files changed, 70 insertions(+), 66 deletions(-)
- create mode 100644 config/platform/organization_jeffmccune.cue

doc/md/topics/progressive-delivery/_platform-components/script-30-git-url/diff.patch

@@ -1,686 +0,0 @@
-diff --git a/deploy/components/cert-manager-promoter/cert-manager-promoter.gen.yaml b/deploy/components/cert-manager-promoter/cert-manager-promoter.gen.yaml
-index 55a6a49..ab483d5 100644
---- a/deploy/components/cert-manager-promoter/cert-manager-promoter.gen.yaml
-+++ b/deploy/components/cert-manager-promoter/cert-manager-promoter.gen.yaml
-@@ -28,7 +28,7 @@ spec:
-           checkout:
-           - branch: main
-             path: ./src
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - as: update
-         config:
-@@ -51,7 +51,7 @@ spec:
-         uses: git-push
-       - as: pull
-         config:
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-           sourceBranch: ${{ outputs.push.branch }}
-           targetBranch: main
-         uses: git-open-pr
-diff --git a/deploy/components/kargo-promoter/kargo-promoter.gen.yaml b/deploy/components/kargo-promoter/kargo-promoter.gen.yaml
-index 87e4bfd..a2eb91d 100644
---- a/deploy/components/kargo-promoter/kargo-promoter.gen.yaml
-+++ b/deploy/components/kargo-promoter/kargo-promoter.gen.yaml
-@@ -28,7 +28,7 @@ spec:
-           checkout:
-           - branch: main
-             path: ./src
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - as: update
-         config:
-@@ -51,7 +51,7 @@ spec:
-         uses: git-push
-       - as: pull
-         config:
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-           sourceBranch: ${{ outputs.push.branch }}
-           targetBranch: main
-         uses: git-open-pr
-diff --git a/deploy/gitops/app-projects.application.gen.yaml b/deploy/gitops/app-projects.application.gen.yaml
-index a98a52e..a58f7fb 100644
---- a/deploy/gitops/app-projects.application.gen.yaml
-+++ b/deploy/gitops/app-projects.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: argocd
-     source:
-         path: deploy/components/app-projects
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/argocd-crds.application.gen.yaml b/deploy/gitops/argocd-crds.application.gen.yaml
-index 6aba002..4ce8835 100644
---- a/deploy/gitops/argocd-crds.application.gen.yaml
-+++ b/deploy/gitops/argocd-crds.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: argocd
-     source:
-         path: deploy/components/argocd-crds
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/argocd-secrets.application.gen.yaml b/deploy/gitops/argocd-secrets.application.gen.yaml
-index 245fb00..0a5b79d 100644
---- a/deploy/gitops/argocd-secrets.application.gen.yaml
-+++ b/deploy/gitops/argocd-secrets.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: argocd
-     source:
-         path: deploy/components/argocd-secrets
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/argocd.application.gen.yaml b/deploy/gitops/argocd.application.gen.yaml
-index 764a55f..6c4cfad 100644
---- a/deploy/gitops/argocd.application.gen.yaml
-+++ b/deploy/gitops/argocd.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: argocd
-     source:
-         path: deploy/components/argocd
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/cert-manager-promoter.application.gen.yaml b/deploy/gitops/cert-manager-promoter.application.gen.yaml
-index c28bb66..a98c0ef 100644
---- a/deploy/gitops/cert-manager-promoter.application.gen.yaml
-+++ b/deploy/gitops/cert-manager-promoter.application.gen.yaml
-@@ -16,5 +16,5 @@ spec:
-     project: security
-     source:
-         path: deploy/components/cert-manager-promoter
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/cert-manager.application.gen.yaml b/deploy/gitops/cert-manager.application.gen.yaml
-index 14e15f0..d6a24d3 100644
---- a/deploy/gitops/cert-manager.application.gen.yaml
-+++ b/deploy/gitops/cert-manager.application.gen.yaml
-@@ -12,5 +12,5 @@ spec:
-     project: security
-     source:
-         path: deploy/components/cert-manager
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/external-secrets-crds.application.gen.yaml b/deploy/gitops/external-secrets-crds.application.gen.yaml
-index 5515a52..c86bbf8 100644
---- a/deploy/gitops/external-secrets-crds.application.gen.yaml
-+++ b/deploy/gitops/external-secrets-crds.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: security
-     source:
-         path: deploy/components/external-secrets-crds
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/external-secrets.application.gen.yaml b/deploy/gitops/external-secrets.application.gen.yaml
-index b1b2434..a1a90d2 100644
---- a/deploy/gitops/external-secrets.application.gen.yaml
-+++ b/deploy/gitops/external-secrets.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: security
-     source:
-         path: deploy/components/external-secrets
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/gateway-api.application.gen.yaml b/deploy/gitops/gateway-api.application.gen.yaml
-index a567685..1209068 100644
---- a/deploy/gitops/gateway-api.application.gen.yaml
-+++ b/deploy/gitops/gateway-api.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: network
-     source:
-         path: deploy/components/gateway-api
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/httproutes.application.gen.yaml b/deploy/gitops/httproutes.application.gen.yaml
-index 01e7eea..ba17725 100644
---- a/deploy/gitops/httproutes.application.gen.yaml
-+++ b/deploy/gitops/httproutes.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: network
-     source:
-         path: deploy/components/httproutes
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/istio-base.application.gen.yaml b/deploy/gitops/istio-base.application.gen.yaml
-index 344bba2..32d4f4b 100644
---- a/deploy/gitops/istio-base.application.gen.yaml
-+++ b/deploy/gitops/istio-base.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: network
-     source:
-         path: deploy/components/istio-base
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/istio-cni.application.gen.yaml b/deploy/gitops/istio-cni.application.gen.yaml
-index 478e7c4..5fdf222 100644
---- a/deploy/gitops/istio-cni.application.gen.yaml
-+++ b/deploy/gitops/istio-cni.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: network
-     source:
-         path: deploy/components/istio-cni
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/istio-gateway.application.gen.yaml b/deploy/gitops/istio-gateway.application.gen.yaml
-index 9561e06..0267f9b 100644
---- a/deploy/gitops/istio-gateway.application.gen.yaml
-+++ b/deploy/gitops/istio-gateway.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: network
-     source:
-         path: deploy/components/istio-gateway
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/istio-ztunnel.application.gen.yaml b/deploy/gitops/istio-ztunnel.application.gen.yaml
-index a6da24e..ac21566 100644
---- a/deploy/gitops/istio-ztunnel.application.gen.yaml
-+++ b/deploy/gitops/istio-ztunnel.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: network
-     source:
-         path: deploy/components/istio-ztunnel
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/istiod.application.gen.yaml b/deploy/gitops/istiod.application.gen.yaml
-index 57d3fdc..a09c8b9 100644
---- a/deploy/gitops/istiod.application.gen.yaml
-+++ b/deploy/gitops/istiod.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: network
-     source:
-         path: deploy/components/istiod
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/kargo-promoter.application.gen.yaml b/deploy/gitops/kargo-promoter.application.gen.yaml
-index 079ee37..f6db555 100644
---- a/deploy/gitops/kargo-promoter.application.gen.yaml
-+++ b/deploy/gitops/kargo-promoter.application.gen.yaml
-@@ -16,5 +16,5 @@ spec:
-     project: argocd
-     source:
-         path: deploy/components/kargo-promoter
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/kargo-secrets.application.gen.yaml b/deploy/gitops/kargo-secrets.application.gen.yaml
-index c1d048b..308560d 100644
---- a/deploy/gitops/kargo-secrets.application.gen.yaml
-+++ b/deploy/gitops/kargo-secrets.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: argocd
-     source:
-         path: deploy/components/kargo-secrets
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/kargo.application.gen.yaml b/deploy/gitops/kargo.application.gen.yaml
-index 22408e1..04f92fc 100644
---- a/deploy/gitops/kargo.application.gen.yaml
-+++ b/deploy/gitops/kargo.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: argocd
-     source:
-         path: deploy/components/kargo
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/local-ca.application.gen.yaml b/deploy/gitops/local-ca.application.gen.yaml
-index 38901f2..16caa18 100644
---- a/deploy/gitops/local-ca.application.gen.yaml
-+++ b/deploy/gitops/local-ca.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: security
-     source:
-         path: deploy/components/local-ca
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/namespaces.application.gen.yaml b/deploy/gitops/namespaces.application.gen.yaml
-index e35f41c..2fd01a8 100644
---- a/deploy/gitops/namespaces.application.gen.yaml
-+++ b/deploy/gitops/namespaces.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: security
-     source:
-         path: deploy/components/namespaces
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/rollouts-crds.application.gen.yaml b/deploy/gitops/rollouts-crds.application.gen.yaml
-index 221cb50..761a823 100644
---- a/deploy/gitops/rollouts-crds.application.gen.yaml
-+++ b/deploy/gitops/rollouts-crds.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: argocd
-     source:
-         path: deploy/components/rollouts-crds
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/gitops/rollouts.application.gen.yaml b/deploy/gitops/rollouts.application.gen.yaml
-index f96f85c..d1fc696 100644
---- a/deploy/gitops/rollouts.application.gen.yaml
-+++ b/deploy/gitops/rollouts.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: argocd
-     source:
-         path: deploy/components/rollouts
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml b/deploy/projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
-index 815f6a3..bbf1f89 100644
---- a/deploy/projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
-+++ b/deploy/projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
-@@ -16,7 +16,7 @@ spec:
-           - branch: project/httpbin/component/dev-httpbin
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -46,7 +46,7 @@ spec:
-           - name: httpbin-dev-httpbin
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-@@ -73,7 +73,7 @@ spec:
-           - branch: project/httpbin/component/prod-us-central-httpbin
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -103,7 +103,7 @@ spec:
-           - name: httpbin-prod-us-central-httpbin
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-@@ -131,7 +131,7 @@ spec:
-           - branch: project/httpbin/component/prod-us-east-httpbin
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -161,7 +161,7 @@ spec:
-           - name: httpbin-prod-us-east-httpbin
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-@@ -189,7 +189,7 @@ spec:
-           - branch: project/httpbin/component/prod-us-west-httpbin
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -219,7 +219,7 @@ spec:
-           - name: httpbin-prod-us-west-httpbin
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-@@ -247,7 +247,7 @@ spec:
-           - branch: project/httpbin/component/test-httpbin
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -277,7 +277,7 @@ spec:
-           - name: httpbin-test-httpbin
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-@@ -305,7 +305,7 @@ spec:
-           - branch: project/httpbin/component/uat-httpbin
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -335,7 +335,7 @@ spec:
-           - name: httpbin-uat-httpbin
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-diff --git a/deploy/projects/httpbin/gitops/dev-httpbin.application.gen.yaml b/deploy/projects/httpbin/gitops/dev-httpbin.application.gen.yaml
-index 03136e0..8b207ff 100644
---- a/deploy/projects/httpbin/gitops/dev-httpbin.application.gen.yaml
-+++ b/deploy/projects/httpbin/gitops/dev-httpbin.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: httpbin
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/httpbin/component/dev-httpbin
-diff --git a/deploy/projects/httpbin/gitops/kargo-project.application.gen.yaml b/deploy/projects/httpbin/gitops/kargo-project.application.gen.yaml
-index 9e666a7..07ebce2 100644
---- a/deploy/projects/httpbin/gitops/kargo-project.application.gen.yaml
-+++ b/deploy/projects/httpbin/gitops/kargo-project.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: httpbin
-     source:
-         path: deploy/projects/httpbin/components/kargo-project
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/projects/httpbin/gitops/kargo-stages.application.gen.yaml b/deploy/projects/httpbin/gitops/kargo-stages.application.gen.yaml
-index df82b81..157a1e0 100644
---- a/deploy/projects/httpbin/gitops/kargo-stages.application.gen.yaml
-+++ b/deploy/projects/httpbin/gitops/kargo-stages.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: httpbin
-     source:
-         path: deploy/projects/httpbin/components/kargo-stages
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/projects/httpbin/gitops/prod-us-central-httpbin.application.gen.yaml b/deploy/projects/httpbin/gitops/prod-us-central-httpbin.application.gen.yaml
-index d3eb9ee..3e5e8b3 100644
---- a/deploy/projects/httpbin/gitops/prod-us-central-httpbin.application.gen.yaml
-+++ b/deploy/projects/httpbin/gitops/prod-us-central-httpbin.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: httpbin
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/httpbin/component/prod-us-central-httpbin
-diff --git a/deploy/projects/httpbin/gitops/prod-us-east-httpbin.application.gen.yaml b/deploy/projects/httpbin/gitops/prod-us-east-httpbin.application.gen.yaml
-index 2d768f4..e43d1f6 100644
---- a/deploy/projects/httpbin/gitops/prod-us-east-httpbin.application.gen.yaml
-+++ b/deploy/projects/httpbin/gitops/prod-us-east-httpbin.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: httpbin
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/httpbin/component/prod-us-east-httpbin
-diff --git a/deploy/projects/httpbin/gitops/prod-us-west-httpbin.application.gen.yaml b/deploy/projects/httpbin/gitops/prod-us-west-httpbin.application.gen.yaml
-index 8903303..a7012b0 100644
---- a/deploy/projects/httpbin/gitops/prod-us-west-httpbin.application.gen.yaml
-+++ b/deploy/projects/httpbin/gitops/prod-us-west-httpbin.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: httpbin
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/httpbin/component/prod-us-west-httpbin
-diff --git a/deploy/projects/httpbin/gitops/test-httpbin.application.gen.yaml b/deploy/projects/httpbin/gitops/test-httpbin.application.gen.yaml
-index 5426c31..296e3ed 100644
---- a/deploy/projects/httpbin/gitops/test-httpbin.application.gen.yaml
-+++ b/deploy/projects/httpbin/gitops/test-httpbin.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: httpbin
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/httpbin/component/test-httpbin
-diff --git a/deploy/projects/httpbin/gitops/uat-httpbin.application.gen.yaml b/deploy/projects/httpbin/gitops/uat-httpbin.application.gen.yaml
-index 717e608..264d1c4 100644
---- a/deploy/projects/httpbin/gitops/uat-httpbin.application.gen.yaml
-+++ b/deploy/projects/httpbin/gitops/uat-httpbin.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: httpbin
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/httpbin/component/uat-httpbin
-diff --git a/deploy/projects/podinfo/components/kargo-stages/kargo-stages.gen.yaml b/deploy/projects/podinfo/components/kargo-stages/kargo-stages.gen.yaml
-index 1107e34..2ebbbd1 100644
---- a/deploy/projects/podinfo/components/kargo-stages/kargo-stages.gen.yaml
-+++ b/deploy/projects/podinfo/components/kargo-stages/kargo-stages.gen.yaml
-@@ -16,7 +16,7 @@ spec:
-           - branch: project/podinfo/component/dev-podinfo
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -46,7 +46,7 @@ spec:
-           - name: podinfo-dev-podinfo
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-@@ -73,7 +73,7 @@ spec:
-           - branch: project/podinfo/component/prod-us-central-podinfo
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -103,7 +103,7 @@ spec:
-           - name: podinfo-prod-us-central-podinfo
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-@@ -131,7 +131,7 @@ spec:
-           - branch: project/podinfo/component/prod-us-east-podinfo
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -161,7 +161,7 @@ spec:
-           - name: podinfo-prod-us-east-podinfo
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-@@ -189,7 +189,7 @@ spec:
-           - branch: project/podinfo/component/prod-us-west-podinfo
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -219,7 +219,7 @@ spec:
-           - name: podinfo-prod-us-west-podinfo
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-@@ -247,7 +247,7 @@ spec:
-           - branch: project/podinfo/component/test-podinfo
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -277,7 +277,7 @@ spec:
-           - name: podinfo-test-podinfo
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-@@ -305,7 +305,7 @@ spec:
-           - branch: project/podinfo/component/uat-podinfo
-             create: true
-             path: ./out
--          repoURL: https://github.com/holos-run/kargo-demo.git
-+          repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: git-clone
-       - config:
-           path: ./out
-@@ -335,7 +335,7 @@ spec:
-           - name: podinfo-uat-podinfo
-             sources:
-             - desiredCommitFromStep: commit
--              repoURL: https://github.com/holos-run/kargo-demo.git
-+              repoURL: https://github.com/jeffmccune/kargo-demo.git
-         uses: argocd-update
-   requestedFreight:
-   - origin:
-diff --git a/deploy/projects/podinfo/gitops/dev-podinfo.application.gen.yaml b/deploy/projects/podinfo/gitops/dev-podinfo.application.gen.yaml
-index 9b3108e..9ac4849 100644
---- a/deploy/projects/podinfo/gitops/dev-podinfo.application.gen.yaml
-+++ b/deploy/projects/podinfo/gitops/dev-podinfo.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: podinfo
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/podinfo/component/dev-podinfo
-diff --git a/deploy/projects/podinfo/gitops/kargo-project.application.gen.yaml b/deploy/projects/podinfo/gitops/kargo-project.application.gen.yaml
-index 3878efa..ab934d5 100644
---- a/deploy/projects/podinfo/gitops/kargo-project.application.gen.yaml
-+++ b/deploy/projects/podinfo/gitops/kargo-project.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: podinfo
-     source:
-         path: deploy/projects/podinfo/components/kargo-project
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/projects/podinfo/gitops/kargo-stages.application.gen.yaml b/deploy/projects/podinfo/gitops/kargo-stages.application.gen.yaml
-index 0d4ade7..1b5eb9f 100644
---- a/deploy/projects/podinfo/gitops/kargo-stages.application.gen.yaml
-+++ b/deploy/projects/podinfo/gitops/kargo-stages.application.gen.yaml
-@@ -10,5 +10,5 @@ spec:
-     project: podinfo
-     source:
-         path: deploy/projects/podinfo/components/kargo-stages
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: main
-diff --git a/deploy/projects/podinfo/gitops/prod-us-central-podinfo.application.gen.yaml b/deploy/projects/podinfo/gitops/prod-us-central-podinfo.application.gen.yaml
-index 59b3f98..182a3c9 100644
---- a/deploy/projects/podinfo/gitops/prod-us-central-podinfo.application.gen.yaml
-+++ b/deploy/projects/podinfo/gitops/prod-us-central-podinfo.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: podinfo
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/podinfo/component/prod-us-central-podinfo
-diff --git a/deploy/projects/podinfo/gitops/prod-us-east-podinfo.application.gen.yaml b/deploy/projects/podinfo/gitops/prod-us-east-podinfo.application.gen.yaml
-index 0165d40..6101a9b 100644
---- a/deploy/projects/podinfo/gitops/prod-us-east-podinfo.application.gen.yaml
-+++ b/deploy/projects/podinfo/gitops/prod-us-east-podinfo.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: podinfo
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/podinfo/component/prod-us-east-podinfo
-diff --git a/deploy/projects/podinfo/gitops/prod-us-west-podinfo.application.gen.yaml b/deploy/projects/podinfo/gitops/prod-us-west-podinfo.application.gen.yaml
-index 3422981..88b7409 100644
---- a/deploy/projects/podinfo/gitops/prod-us-west-podinfo.application.gen.yaml
-+++ b/deploy/projects/podinfo/gitops/prod-us-west-podinfo.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: podinfo
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/podinfo/component/prod-us-west-podinfo
-diff --git a/deploy/projects/podinfo/gitops/test-podinfo.application.gen.yaml b/deploy/projects/podinfo/gitops/test-podinfo.application.gen.yaml
-index 7ca895f..c3c32a1 100644
---- a/deploy/projects/podinfo/gitops/test-podinfo.application.gen.yaml
-+++ b/deploy/projects/podinfo/gitops/test-podinfo.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: podinfo
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/podinfo/component/test-podinfo
-diff --git a/deploy/projects/podinfo/gitops/uat-podinfo.application.gen.yaml b/deploy/projects/podinfo/gitops/uat-podinfo.application.gen.yaml
-index cb28add..63cf194 100644
---- a/deploy/projects/podinfo/gitops/uat-podinfo.application.gen.yaml
-+++ b/deploy/projects/podinfo/gitops/uat-podinfo.application.gen.yaml
-@@ -14,5 +14,5 @@ spec:
-     project: podinfo
-     source:
-         path: ./
--        repoURL: https://github.com/holos-run/kargo-demo.git
-+        repoURL: https://github.com/jeffmccune/kargo-demo.git
-         targetRevision: project/podinfo/component/uat-podinfo

doc/md/topics/progressive-delivery/_platform-components/script-30-git-url/diff.sh

@@ -1 +0,0 @@
-git diff

doc/md/topics/progressive-delivery/_platform-components/script-30-git-url/header.sh

@@ -1 +0,0 @@
-cat <<EOF > config/platform/organization_${GH_USER}.cue

doc/md/topics/progressive-delivery/_platform-components/script-30-git-url/output.txt

@@ -1,47 +0,0 @@
-rendered kargo-project for project podinfo in 438.04325ms
-rendered kargo-promoter for stack argocd in 440.84075ms
-rendered kargo-secrets for stack argocd in 441.76175ms
-rendered rollouts for stack argocd in 441.989625ms
-rendered kargo-project for project httpbin in 444.166291ms
-rendered kargo-stages for project httpbin in 446.7485ms
-rendered kargo-stages for project podinfo in 446.739792ms
-rendered argocd-secrets for stack argocd in 448.0085ms
-rendered app-projects for stack argocd in 449.610209ms
-rendered gateway-api for stack network in 597.720375ms
-rendered istio-gateway for stack network in 248.44325ms
-rendered rollouts-crds for stack argocd in 885.346417ms
-rendered namespaces for stack security in 478.418ms
-rendered local-ca for stack security in 244.84025ms
-rendered argocd-crds for stack argocd in 991.27875ms
-rendered external-secrets-crds for stack security in 686.799417ms
-rendered istio-cni for stack network in 748.069458ms
-rendered istio-ztunnel for stack network in 762.896542ms
-rendered test-httpbin for project httpbin in 318.5385ms
-rendered cert-manager-promoter for stack security in 481.661833ms
-rendered dev-httpbin for project httpbin in 465.202083ms
-Pulled: ghcr.io/akuity/kargo-charts/kargo:1.1.1
-Digest: sha256:4055c72418db85b85979da2fe12136c0e275709efc2e36a505b158e8234ad443
-rendered kargo for stack argocd in 1.396269208s
-rendered istiod for stack network in 997.264208ms
-rendered external-secrets for stack security in 996.459042ms
-rendered uat-httpbin for project httpbin in 517.124875ms
-rendered prod-us-central-httpbin for project httpbin in 344.330875ms
-rendered prod-us-east-httpbin for project httpbin in 449.991417ms
-rendered prod-us-west-httpbin for project httpbin in 411.234333ms
-rendered argocd for stack argocd in 1.631300708s
-rendered istio-base for stack network in 1.203177s
-rendered cert-manager for stack security in 1.127040208s
-rendered httproutes for stack network in 1.556993875s
-Pulled: ghcr.io/stefanprodan/charts/podinfo:6.7.0
-Digest: sha256:104d101017e501c63b3aa71b20d5edd2ca6d5d58cbc57ff8163770110f92b9db
-rendered dev-podinfo for project podinfo in 1.010673334s
-rendered test-podinfo for project podinfo in 945.39075ms
-rendered prod-us-west-podinfo for project podinfo in 897.117125ms
-rendered uat-podinfo for project podinfo in 1.022036209s
-Pulled: ghcr.io/stefanprodan/charts/podinfo:6.6.2
-Digest: sha256:83295d47de6d6ca634ed4b952a7572fc176bcc38854d0c11ca0fa197bc5f1154
-rendered prod-us-central-podinfo for project podinfo in 977.250667ms
-Pulled: ghcr.io/stefanprodan/charts/podinfo:6.6.1
-Digest: sha256:0cc9a8446c95009ef382f5eade883a67c257f77d50f84e78ecef2aac9428d1e5
-rendered prod-us-east-podinfo for project podinfo in 1.071360916s
-rendered platform in 2.467827834s

doc/md/topics/progressive-delivery/_platform-components/script-30-git-url/trailer.sh

@@ -1 +0,0 @@
-EOF

doc/md/topics/progressive-delivery/_platform-components/script-30-git-url/update.sh

@@ -1,4 +0,0 @@
-#! /bin/bash
-set -euo pipefail
-[[ -s "$1" ]] && [[ -z "${HOLOS_UPDATE_SCRIPTS:-}" ]] && exit 0
-cat > "$1"

doc/md/topics/progressive-delivery/_platform-components/tour/tour.txtar

@@ -1,8 +0,0 @@
-cd ../script-setup/kargo-demo
-# Execute the example capture stdout and stderr to one file.
-exec bash -c 'bash -euo pipefail $WORK/tree.sh 2>&1'
-# Copy standard output to a file to embed in the docs.
-cp stdout $WORK/tree.txt
-
--- tree.sh --
-tree -L3 -d platform stacks config

doc/md/topics/progressive-delivery/docs_test.go

@@ -1,87 +0,0 @@
-package kargo
-
-import (
-	"os"
-	"path/filepath"
-	"runtime"
-	"slices"
-	"strings"
-	"testing"
-
-	"github.com/holos-run/holos/cmd"
-	"github.com/rogpeppe/go-internal/testscript"
-
-	cue "cuelang.org/go/cmd/cue/cmd"
-)
-
-func TestMain(m *testing.M) {
-	os.Exit(testscript.RunMain(m, map[string]func() int{
-		"holos": cmd.MakeMain(),
-		"cue":   cue.Main,
-	}))
-}
-
-// Run these with go test -v to see the verbose names
-func TestKargo(t *testing.T) {
-	t.Run("AddOnPromoter", func(t *testing.T) {
-		// Get an ordered list of test script files.
-		dir := "_platform-components"
-		for _, file := range sortedTestScripts(t, filepath.Join(dir, "examples")) {
-			t.Run("examples", func(t *testing.T) {
-				runOneScript(t, dir, file)
-			})
-		}
-	})
-}
-
-func runOneScript(t *testing.T, dir string, file string) {
-	params := testscript.Params{
-		Dir:                 "",
-		Files:               []string{file},
-		RequireExplicitExec: true,
-		RequireUniqueNames:  false,
-		WorkdirRoot:         filepath.Join(testDir(t), dir),
-		UpdateScripts:       os.Getenv("HOLOS_UPDATE_SCRIPTS") != "",
-		Setup: func(env *testscript.Env) error {
-			// Needed for update.sh to determine if we need to update output files.
-			env.Setenv("HOLOS_UPDATE_SCRIPTS", os.Getenv("HOLOS_UPDATE_SCRIPTS"))
-			// Just like cmd/cue/cmd.TestScript, set up separate cache and config dirs per test.
-			env.Setenv("CUE_CACHE_DIR", filepath.Join(env.WorkDir, "tmp/cachedir"))
-			configDir := filepath.Join(env.WorkDir, "tmp/configdir")
-			env.Setenv("CUE_CONFIG_DIR", configDir)
-			return nil
-		},
-	}
-
-	testscript.Run(t, params)
-}
-
-// testDir returns the path of the directory containing the go source file of
-// the caller.
-func testDir(t *testing.T) string {
-	_, file, _, ok := runtime.Caller(0)
-	if !ok {
-		t.Fatal("could not get runtime caller")
-	}
-	return filepath.Dir(file)
-}
-
-func sortedTestScripts(t *testing.T, dir string) (files []string) {
-	entries, err := os.ReadDir(dir)
-	if os.IsNotExist(err) {
-		// Continue to helpful error on len(files) == 0 below.
-	} else if err != nil {
-		t.Fatal(err)
-	}
-	for _, entry := range entries {
-		name := entry.Name()
-		if strings.HasSuffix(name, ".txtar") || strings.HasSuffix(name, ".txt") {
-			files = append(files, filepath.Join(dir, name))
-		}
-	}
-	if len(files) == 0 {
-		t.Fatalf("no txtar nor txt scripts found in dir %s", dir)
-	}
-	slices.Sort(files)
-	return files
-}

doc/md/topics/progressive-delivery/index.mdx

@@ -1,40 +0,0 @@
----
-title: Progressive Delivery
-description: Learn how to manage progressive delivery pipelines with Holos.
-sidebar_position: 110
----
-import DocCardList from '@theme/DocCardList';
-
-# Progressive Delivery
-
-Holos pairs nicely with [Kargo], offering a holistic way to manage the
-configuration of reusable progressive rollout deployment pipelines for Holos
-components.
-
-> Kargo is a next-generation continuous delivery and application lifecycle
-> orchestration platform for Kubernetes. It builds upon GitOps principles and
-> integrates with existing technologies, like Argo CD, to streamline and automate
-> the progressive rollout of changes across the many stages of an application's
-> lifecycle. ([ref](https://github.com/akuity/kargo#:~:text=Kargo%20is%20a%20next%2Dgeneration,stages%20of%20an%20application's%20lifecycle.))
-
-Two main use cases are addressed within this topic.
-
-1. **Platform Components**:  Platform operators want pull requests automatically
-opened when new versions of cluster add-ons are available so they can see
-upcoming changes clearly.
-2. **Workloads**: Product development teams want a well defined deployment
-pipeline to automatically and safely promote new features and bug fixes.  For
-example, from dev to test to staging, then across multiple production regions
-globally.
-
-:::tip
-Holos pairs well with Kargo to progressively deploy changes across multiple
-clusters.  Contact us for personalized [support] for your use case.
-:::
-
----
-
-<DocCardList />
-
-[Kargo]: https://kargo.io/
-[support]: ../support.mdx