feat: kstatus for Pepr (#1288)

## Description

This Pull Request introduces
[kstatus](https://github.com/kubernetes-sigs/cli-utils/blob/master/pkg/kstatus/README.md)
to the Pepr Operator. At the moment it supports setting only one
condition:

```yaml
 status:
   phase: Ready
   conditions:
    - lastTransitionTime: "2025-02-17T09:33:00.748Z"
      message: The package is ready for use.
      reason: ReconciliationComplete
      status: "True"
      type: Ready
```

## Related Issue

Fixes #991

## Type of change

- [ ] Bug fix (non-breaking change which fixes an issue)
- [x] New feature (non-breaking change which adds functionality)
- [ ] Other (security config, docs update, etc)

## Steps to Validate

Run UDS Core with this patch on and observe `kubectl get packages -o
yaml --all-namespaces`.

## Checklist before merging

- [ ] Test, docs, adr added or updated as needed
- [ ] [Contributor
Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)
followed

Author: slaskawi

schemas/package-v1alpha1.schema.json

@@ -10,7 +10,7 @@
           "$ref": "#/definitions/Spec"
         },
         "status": {
-          "$ref": "#/definitions/Status"
+          "$ref": "#/definitions/StatusObject"
         }
       },
       "required": [],
@@ -954,7 +954,7 @@
       ],
       "title": "ProtocolMapper"
     },
-    "Status": {
+    "StatusObject": {
       "type": "object",
       "additionalProperties": false,
       "properties": {
@@ -964,6 +964,13 @@
             "type": "string"
           }
         },
+        "conditions": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/Condition"
+          },
+          "description": "Status conditions following Kubernetes-style conventions"
+        },
         "endpoints": {
           "type": "array",
           "items": {
@@ -996,7 +1003,46 @@
         }
       },
       "required": [],
-      "title": "Status"
+      "title": "StatusObject"
+    },
+    "Condition": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "lastTransitionTime": {
+          "type": "string",
+          "format": "date-time",
+          "description": "The last time the condition transitioned from one status to another"
+        },
+        "message": {
+          "type": "string",
+          "description": "A human-readable message indicating details about the transition"
+        },
+        "observedGeneration": {
+          "type": "integer",
+          "description": "Represents the .metadata.generation that the condition was set based upon"
+        },
+        "reason": {
+          "type": "string",
+          "description": "A programmatic identifier indicating the reason for the condition's last transition"
+        },
+        "status": {
+          "$ref": "#/definitions/StatusEnum",
+          "description": "Status of the condition, one of True, False, Unknown"
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of condition in CamelCase or in foo.example.com/CamelCase format"
+        }
+      },
+      "required": [
+        "lastTransitionTime",
+        "message",
+        "reason",
+        "status",
+        "type"
+      ],
+      "title": "Condition"
     },
     "FallbackScrapeProtocol": {
       "type": "string",
@@ -1077,6 +1123,16 @@
       "title": "Protocol",
       "description": "Specifies the protocol of the client, either 'openid-connect' or 'saml'\nProtocol of the mapper"
     },
+    "StatusEnum": {
+      "type": "string",
+      "enum": [
+        "True",
+        "False",
+        "Unknown"
+      ],
+      "title": "StatusEnum",
+      "description": "Status of the condition, one of True, False, Unknown"
+    },
     "Phase": {
       "type": "string",
       "enum": [

src/authservice/common/zarf.yaml

@@ -15,14 +15,3 @@ components:
         localPath: ../chart
         version: 1.0.1
         namespace: authservice
-    actions:
-      onDeploy:
-        after:
-          - description: Validate Authservice Package
-            maxTotalSeconds: 300
-            wait:
-              cluster:
-                kind: packages.uds.dev
-                name: authservice
-                namespace: authservice
-                condition: "'{.status.phase}'=Ready"

src/grafana/common/zarf.yaml

@@ -23,14 +23,3 @@ components:
         namespace: grafana
         valuesFiles:
           - ../values/values.yaml
-    actions:
-      onDeploy:
-        after:
-          - description: Validate Grafana Package
-            maxTotalSeconds: 300
-            wait:
-              cluster:
-                kind: packages.uds.dev
-                name: grafana
-                namespace: grafana
-                condition: "'{.status.phase}'=Ready"

src/keycloak/common/zarf.yaml

@@ -58,11 +58,3 @@ components:
                 name: app.kubernetes.io/name=keycloak
                 condition: Ready
                 namespace: keycloak
-          - description: Validate Keycloak Package
-            maxTotalSeconds: 300
-            wait:
-              cluster:
-                kind: packages.uds.dev
-                name: keycloak
-                namespace: keycloak
-                condition: "'{.status.phase}'=Ready"

src/loki/common/zarf.yaml

@@ -20,14 +20,3 @@ components:
         namespace: loki
         valuesFiles:
           - ../values/values.yaml
-    actions:
-      onDeploy:
-        after:
-          - description: Validate Loki Package
-            maxTotalSeconds: 300
-            wait:
-              cluster:
-                kind: packages.uds.dev
-                name: loki
-                namespace: loki
-                condition: "'{.status.phase}'=Ready"

src/metrics-server/common/zarf.yaml

@@ -21,14 +21,3 @@ components:
         version: 3.12.2
         valuesFiles:
           - "../values/values.yaml"
-    actions:
-      onDeploy:
-        after:
-          - description: Validate Metrics-Server Package
-            maxTotalSeconds: 300
-            wait:
-              cluster:
-                kind: packages.uds.dev
-                name: metrics-server
-                namespace: metrics-server
-                condition: "'{.status.phase}'=Ready"

src/neuvector/common/zarf.yaml

@@ -40,14 +40,6 @@ components:
     actions:
       onDeploy:
         after:
-          - description: Validate Neuvector Package
-            maxTotalSeconds: 300
-            wait:
-              cluster:
-                kind: packages.uds.dev
-                name: neuvector
-                namespace: neuvector
-                condition: "'{.status.phase}'=Ready"
           - description: Annotate Controller deployment for Neuvector SSO secret
             cmd: |
               SSO_CHECKSUM=$(./zarf tools kubectl get secret neuvector-secret -o json -n neuvector | sha256sum | cut -d' ' -f1)

src/pepr/operator/crd/generated/package-v1alpha1.ts

@@ -7,7 +7,7 @@
 import { GenericKind, RegisterKind } from "kubernetes-fluent-client";
 export class Package extends GenericKind {
   spec?: Spec;
-  status?: Status;
+  status?: StatusObject;
 }
 
 export interface Spec {
@@ -721,8 +721,12 @@ export interface ProtocolMapper {
   protocolMapper: string;
 }
 
-export interface Status {
+export interface StatusObject {
   authserviceClients?: string[];
+  /**
+   * Status conditions following Kubernetes-style conventions
+   */
+  conditions?: Condition[];
   endpoints?: string[];
   monitors?: string[];
   networkPolicyCount?: number;
@@ -732,6 +736,42 @@ export interface Status {
   ssoClients?: string[];
 }
 
+export interface Condition {
+  /**
+   * The last time the condition transitioned from one status to another
+   */
+  lastTransitionTime: Date;
+  /**
+   * A human-readable message indicating details about the transition
+   */
+  message: string;
+  /**
+   * Represents the .metadata.generation that the condition was set based upon
+   */
+  observedGeneration?: number;
+  /**
+   * A programmatic identifier indicating the reason for the condition's last transition
+   */
+  reason: string;
+  /**
+   * Status of the condition, one of True, False, Unknown
+   */
+  status: StatusEnum;
+  /**
+   * Type of condition in CamelCase or in foo.example.com/CamelCase format
+   */
+  type: string;
+}
+
+/**
+ * Status of the condition, one of True, False, Unknown
+ */
+export enum StatusEnum {
+  False = "False",
+  True = "True",
+  Unknown = "Unknown",
+}
+
 export enum Phase {
   Failed = "Failed",
   Pending = "Pending",

src/pepr/operator/crd/index.ts

@@ -10,7 +10,7 @@ export {
   Gateway,
   Monitor,
   Phase,
-  Status as PkgStatus,
+  StatusObject as PkgStatus,
   Protocol,
   RemoteGenerated,
   Sso,

src/pepr/operator/crd/sources/package/v1alpha1.ts

@@ -499,6 +499,46 @@ export const v1alpha1: V1CustomResourceDefinitionVersion = {
             observedGeneration: {
               type: "integer",
             },
+            conditions: {
+              description: "Status conditions following Kubernetes-style conventions",
+              type: "array",
+              items: {
+                type: "object",
+                required: ["type", "status", "lastTransitionTime", "reason", "message"],
+                properties: {
+                  type: {
+                    description:
+                      "Type of condition in CamelCase or in foo.example.com/CamelCase format",
+                    type: "string",
+                  },
+                  status: {
+                    description: "Status of the condition, one of True, False, Unknown",
+                    type: "string",
+                    enum: ["True", "False", "Unknown"],
+                  },
+                  observedGeneration: {
+                    description:
+                      "Represents the .metadata.generation that the condition was set based upon",
+                    type: "integer",
+                  },
+                  lastTransitionTime: {
+                    description:
+                      "The last time the condition transitioned from one status to another",
+                    type: "string",
+                    format: "date-time",
+                  },
+                  reason: {
+                    description:
+                      "A programmatic identifier indicating the reason for the condition's last transition",
+                    type: "string",
+                  },
+                  message: {
+                    description: "A human-readable message indicating details about the transition",
+                    type: "string",
+                  },
+                },
+              },
+            },
             phase: {
               enum: ["Pending", "Ready", "Failed", "Retrying", "Removing"],
               type: "string",