akua-dev/akuapkg

Show exactly what a change does to a Package's rendered Kubernetes output and gate it in CI - dependency upgrades, Kubernetes version switches, CRD updates, input changes. Use when reviewing a Renovate or Dependabot bump of a chart or CRD, adding a CI check that surfaces manifest changes, or answering "what does this upgrade change?"

Audit an akuapkg Package or a Helm chart before using it - its input schema, dependencies and their digests, signatures, and what it renders with sample inputs. Use when evaluating a third-party Package, reviewing a dependency upgrade, checking whether a dependency is signed, or looking at what a chart from Artifact Hub, GHCR or another registry would deploy.

Convert an existing helmfile.yaml into a typed akuapkg Package written in KCL. Use when migrating from Helmfile, consolidating several Helm releases into one Package, replacing Helmfile's templated values with a typed input schema, or moving a platform repository from helmfile apply to rendering in CI.

Scaffold a new akuapkg Package in KCL, typed against a Kubernetes version and any CRDs it uses, optionally wrapping Helm charts. Use when the user wants to start a new Kubernetes package, package an application, replace a hand-written Helm chart or YAML with typed KCL, or add typed Custom Resources such as cert-manager Certificates or Prometheus ServiceMonitors.

Publish an akuapkg Package to an OCI registry with a cosign signature and a SLSA v1 provenance attestation, and configure consumers to verify it. Use when releasing a Package version, setting up signed publishing in CI, signing for an air-gapped transfer, or requiring signatures on dependencies.

Set up and run akuapkg's checks for a Package - check, lint, fmt, assertion tests, golden snapshot tests, lockfile and signature verification - locally and in CI. Use when bootstrapping CI for a Package repository, adding tests to an untested Package, configuring a pre-commit hook, or when asked to "add tests" or "set up CI gates".