Operator

• Admission webhook

  The opt-in validating webhook for JsonnetSnippet, what it rejects, the failure-policy trade-off, and the two TLS provisioning modes.

• Alerting

  The opt-in PrometheusRule alert catalog with tunable thresholds and runbook links, plus Kubernetes Events routed through Flux's notification-controller.

• Creating source artifacts

  Step-by-step recipes to prepare GitRepository, OCIRepository, and Bucket sources for a JsonnetSnippet — including the single-layer rule for OCI.

• ExternalArtifact output contract

  The shape JaaS writes to the Flux ExternalArtifact CR and the contract downstream consumers depend on.

• Jsonnet libraries

  Reusable .libsonnet files for snippets via the JsonnetLibrary CRD and OCI-mounted shared libraries, and how imports resolve.

• JsonnetLibrary

  Field-by-field reference for the JsonnetLibrary custom resource at apiVersion jaas.metio.wtf/v1.

• JsonnetSnippet

  Field-by-field reference for the JsonnetSnippet custom resource at apiVersion jaas.metio.wtf/v1.

• Kubernetes

  Install JaaS on Kubernetes with the Helm chart in either of its two modes — OCI volume mounting or Flux CR-based.

• Logging

  JaaS logs through log/slog with configurable level and format; in operator mode controller-runtime's own logs share the same handler. Reading JSON logs with kubectl and jq, and the Helm chart keys that drive it.

• Metrics

  The controller-runtime Prometheus endpoint, the custom jaas_ metric family, scraping with a ServiceMonitor or a plain scrape config, querying with PromQL, and the Helm chart keys that drive it.

• Observability

  How to watch JaaS in production — structured logs, OTLP traces, Prometheus metrics, and the shipped alert catalog with Kubernetes Events and Flux notification routing.

• Operator mode

  Boot JaaS as a Kubernetes operator that evaluates JsonnetSnippet CRs and publishes the results as Flux ExternalArtifacts.

• Quickstart

  Install the JaaS operator and publish your first ExternalArtifact from an inline-files JsonnetSnippet.

• Snippet sources

  Where a JsonnetSnippet's Jsonnet comes from — inline files, a Flux source, a multi-snippet tree, and chained snippet output.

• Storage and high availability

  The local and S3 artifact backends, leader election, multi-replica HA, revision retention, and the orphan-tmp sweep.

• Tenancy and RBAC

  Per-snippet ServiceAccount impersonation, the minimal operator ClusterRole, the tenant Role callers must grant, and the watch-scope flags.

• Tracing

  The JaaS operator exports OpenTelemetry traces over OTLP gRPC. Pointing it at a collector, sampling, viewing spans, and the Helm chart keys that drive it.