validate

func ComponentScopedPolicyType ¶ added in v0.19.1245

func ComponentScopedPolicyType(policyType config.AppPolicyType) bool

ComponentScopedPolicyType reports whether a policy type is evaluated per component. Sandbox and kubernetes_cluster policies are not component-scoped and ignore components.

func Validate ¶

func Validate(ctx context.Context, v *validator.Validate, a *config.AppConfig) error

func ValidateActionWorkflowTriggers ¶

func ValidateActionWorkflowTriggers(cfg *config.AppConfig) error

func ValidateAzureRunnerIdentities ¶ added in v0.19.1074

func ValidateAzureRunnerIdentities(a *config.AppConfig) error

ValidateAzureRunnerIdentities guards the one combination that otherwise fails with an opaque IMDS "Identity not found" at runtime: an azure-bicep app that defines per-operation identities (any azure permission role) AND pins a custom runner_nested_template_url whose template does not accept a "userAssignedIdentities" parameter. Only the built-in runner (empty URL) or a template that declares that parameter can attach the identities to the VMSS.

func ValidateCustomNestedStackOutputs ¶ added in v0.19.777

func ValidateCustomNestedStackOutputs(a *config.AppConfig) error

func ValidateDefaultLabels ¶ added in v0.19.1123

func ValidateDefaultLabels(a *config.AppConfig) error

ValidateDefaultLabels enforces the same label rules as install labels, and rejects per-install label keys that collide with a default — the app-level block is the only place a default key may be set.

func ValidateDependencies ¶

func ValidateDependencies(cfg *config.AppConfig) error

func ValidateDuplicateComponentNames ¶

func ValidateDuplicateComponentNames(cfg *config.AppConfig) error

func ValidateJSONSchema ¶

func ValidateJSONSchema(ctx context.Context, c *config.AppConfig) error

func ValidateOPAPolicy ¶ added in v0.19.1145

func ValidateOPAPolicy(contents string) error

func ValidatePolicies ¶

func ValidatePolicies(a *config.AppConfig) error

func ValidatePoliciesWithLogger ¶

func ValidatePoliciesWithLogger(a *config.AppConfig, l *zap.Logger) error

func ValidatePolicyApplyOnTeardown ¶ added in v0.19.1245

func ValidatePolicyApplyOnTeardown(policyName string, policyType config.AppPolicyType, applyOnTeardown *bool) error

ValidatePolicyApplyOnTeardown validates apply_on_teardown for a single policy. It is shared by config validation (nuon CLI sync) and the ctl-api create endpoint so both enforce the same rules.

func ValidatePolicyComponents ¶ added in v0.19.997

func ValidatePolicyComponents(policyName string, policyType config.AppPolicyType, components []string) error

ValidatePolicyComponents validates the components list for a single policy. It is shared by config validation (nuon CLI sync) and the ctl-api create endpoint so both enforce the same rules.

func ValidatePolicyNames ¶ added in v0.19.1244

func ValidatePolicyNames(a *config.AppConfig) error

func ValidateTemplateRefs ¶ added in v0.19.1158

func ValidateTemplateRefs(a *config.AppConfig) error

ValidateTemplateRefs checks that component and action template references resolve to declared names, and that stack/sandbox templates only use refs available in those render contexts. All findings are returned as one error.

func ValidateTriggers ¶ added in v0.19.1096

func ValidateTriggers(cfg *config.AppConfig) error

func ValidateUniquePolicyNames ¶ added in v0.19.1244

func ValidateUniquePolicyNames(policies []config.AppPolicy) error

func ValidateVars ¶

func ValidateVars(ctx context.Context, cfg *config.AppConfig) error

func ValidateVersion ¶

func ValidateVersion(a *config.AppConfig) error