better handle multiple manifests in same file

.gitea/workflows/kubeconform.yml

@@ -53,6 +53,7 @@ jobs:
             ["IPAddressPool"]="metallb.io/ipaddresspool_v1beta1.json"
             ["SealedSecret"]="bitnami.com/sealedsecret_v1alpha1.json"
             ["ClusterPolicy"]="nvidia.com/clusterpolicy_v1.json"
+            ["Plan"]="upgrade.cattle.io/plan_v1.json"
           )
 
           EXIT_CODE=0
@@ -62,29 +63,33 @@ jobs:
           while IFS= read -r file; do
             [ -z "$file" ] && continue
             echo "=== Validating: $file ==="
-            KIND=$(yq -r '.kind // ""' "$file" 2>/dev/null || echo "")
+            MANIFESTS=$(yq e '.[]' "$file" | jq -c 'select(.kind != null)')
 
-            if [[ -n "$KIND" && -n "${SCHEMA_MAP[$KIND]}" ]]; then
+            for manifest in "${MANIFESTS[@]}"; do
-              echo "Found $KIND - using custom schema"
+              KIND=$(echo $manifest | yq -r '.kind // ""')
-              SCHEMA_URL="https://raw.githubusercontent.com/datreeio/CRDs-catalog/refs/heads/main/${SCHEMA_MAP[$KIND]}"
 
-              if ! /kubeconform \
+              if [[ -n "$KIND" && -n "${SCHEMA_MAP[$KIND]}" ]]; then
-                -schema-location "$SCHEMA_URL" \
+                echo "Found $KIND - using custom schema"
-                -cache "$KUBECONFORM_CACHE_DIR" \
+                SCHEMA_URL="https://raw.githubusercontent.com/datreeio/CRDs-catalog/refs/heads/main/${SCHEMA_MAP[$KIND]}"
-                -output json \
+
-                "$file"; then
+                if ! /kubeconform \
-                EXIT_CODE=1
+                    -schema-location "$SCHEMA_URL" \
+                    -cache "$KUBECONFORM_CACHE_DIR" \
+                    -output json \
+                    "$manifest"; then
+                  EXIT_CODE=1
+                fi
+              else
+                echo "Validating with default schemas"
+                if ! /kubeconform \
+                    -schema-location default \
+                    -cache "$KUBECONFORM_CACHE_DIR" \
+                    -output json \
+                    "$manifest"; then
+                  EXIT_CODE=1
+                fi
               fi
-            else
+            done
-              echo "Validating with default schemas"
-              if ! /kubeconform \
-                -schema-location default \
-                -cache "$KUBECONFORM_CACHE_DIR" \
-                -output json \
-                "$file"; then
-                EXIT_CODE=1
-              fi
-            fi
 
             echo ""
           done <<< "${ALL_CHANGED_FILES}"