.gitea/workflows/kubeconform.yml

@@ -53,6 +53,7 @@ jobs:
             ["IPAddressPool"]="metallb.io/ipaddresspool_v1beta1.json"
             ["SealedSecret"]="bitnami.com/sealedsecret_v1alpha1.json"
             ["ClusterPolicy"]="nvidia.com/clusterpolicy_v1.json"
+            ["Plan"]="upgrade.cattle.io/plan_v1.json"
           )
 
           EXIT_CODE=0
@@ -62,7 +63,10 @@ jobs:
           while IFS= read -r file; do
             [ -z "$file" ] && continue
             echo "=== Validating: $file ==="
-            KIND=$(yq -r '.kind // ""' "$file" 2>/dev/null || echo "")
+            MANIFESTS=$(yq e '.[]' "$file" | jq -c 'select(.kind != null)')
+
+            for manifest in "${MANIFESTS[@]}"; do
+              KIND=$(echo $manifest | yq -r '.kind // ""')
 
               if [[ -n "$KIND" && -n "${SCHEMA_MAP[$KIND]}" ]]; then
                 echo "Found $KIND - using custom schema"
@@ -72,7 +76,7 @@ jobs:
                     -schema-location "$SCHEMA_URL" \
                     -cache "$KUBECONFORM_CACHE_DIR" \
                     -output json \
-                "$file"; then
+                    "$manifest"; then
                   EXIT_CODE=1
                 fi
               else
@@ -81,10 +85,11 @@ jobs:
                     -schema-location default \
                     -cache "$KUBECONFORM_CACHE_DIR" \
                     -output json \
-                "$file"; then
+                    "$manifest"; then
                   EXIT_CODE=1
                 fi
               fi
+            done
 
             echo ""
           done <<< "${ALL_CHANGED_FILES}"