rancher · 0xavi0 · Jul 3, 2026
@@ -0,0 +1,78 @@
+#!/bin/bash
+#
+# Verify that the pkg/apis and pkg/helmvalues modules are released in lockstep.
+#
+# pkg/helmvalues depends on pkg/apis and both are tagged with the same version
+# from the same commit. For a given version this checks that:
+#   1. Both pkg/apis/<version> and pkg/helmvalues/<version> tags exist.
+#   2. Both tags point at the same commit (so helmvalues is built against the
+#      exact pkg/apis it requires).
+#   3. pkg/helmvalues/go.mod (as of its tag) requires pkg/apis at that same version.
+#
+# Usage: check-module-tag-sync.sh [<version>]
+#   <version> looks like v0.16.0-beta.1. When omitted, the latest existing
+#   pkg/helmvalues/* tag is used (and it is a no-op if there are none yet).
+
+set -euo pipefail
+
+version="${1:-}"
+if [ -z "${version}" ]; then
+    # Newest tag by creation date. Note: `sort -V` is not semver-aware for
+    # pre-release suffixes (it orders v1.2.3 *before* v1.2.3-rc.1), so it can't
+    # be used to pick the latest release here.
+    version=$(git tag -l 'pkg/helmvalues/v*' --sort=-creatordate | sed 's#^pkg/helmvalues/##' | head -n1)
+    if [ -z "${version}" ]; then
+        echo "No pkg/helmvalues/* tags found; nothing to verify."
+        exit 0
+    fi
+    echo "No version given; verifying latest pkg/helmvalues tag: ${version}"
+fi
+
+apis_tag="pkg/apis/${version}"
+helmvalues_tag="pkg/helmvalues/${version}"
+
+# 1. Both tags must exist.
+for tag in "${helmvalues_tag}" "${apis_tag}"; do
+    if ! git rev-parse -q --verify "refs/tags/${tag}" >/dev/null; then
+        echo "ERROR: tag '${tag}' not found." >&2
+        echo "pkg/apis and pkg/helmvalues must be tagged with the same version." >&2
+        exit 1
+    fi
+done
+
+# 2. Both tags must point at the same commit.
+apis_commit=$(git rev-list -n1 "${apis_tag}")
+helmvalues_commit=$(git rev-list -n1 "${helmvalues_tag}")
+if [ "${apis_commit}" != "${helmvalues_commit}" ]; then
+    {
+        echo "ERROR: ${apis_tag} and ${helmvalues_tag} point at different commits:"
+        echo "  ${apis_tag} -> ${apis_commit}"
+        echo "  ${helmvalues_tag} -> ${helmvalues_commit}"
+        echo "They must be tagged on the same commit, so helmvalues is built against"
+        echo "the exact pkg/apis version it requires."
+    } >&2
+    exit 1
+fi
+
+# 3. helmvalues go.mod (as of its tag) must require pkg/apis at the same version.
+required=$(git show "${helmvalues_tag}:pkg/helmvalues/go.mod" \
+    | grep -oE 'github.com/rancher/fleet/pkg/apis[[:space:]]+v[0-9][^[:space:]]*' \
+    | awk '{print $NF}' | head -n1 || true)
+
+if [ -z "${required}" ]; then
+    echo "ERROR: pkg/helmvalues/go.mod at ${helmvalues_tag} has no 'require' for github.com/rancher/fleet/pkg/apis" >&2
+    exit 1
+fi
+
+if [ "${required}" != "${version}" ]; then
+    {
+        echo "ERROR: version mismatch between the tag and pkg/helmvalues/go.mod:"
+        echo "  tag version:           ${version}"
+        echo "  pkg/helmvalues/go.mod: requires pkg/apis ${required}"
+        echo "Bump the require to ${version} before tagging."
+    } >&2
+    exit 1
+fi
+
+echo "OK: ${apis_tag} and ${helmvalues_tag} are in sync (commit ${helmvalues_commit});"
+echo "    pkg/helmvalues/go.mod requires pkg/apis ${version}."
@@ -7,8 +7,9 @@ set -euo pipefail
 NEW_FLEET_VERSION="$1"    # e.g. 0.15.1
 NEW_CHART_VERSION="$2"    # e.g. 110.0.1
 
-bump_fleet_api() {
-    go get -u "github.com/rancher/fleet/pkg/apis@v${NEW_FLEET_VERSION}"
+bump_fleet_module() {
+    # $1: fleet submodule path, e.g. pkg/apis or pkg/helmvalues
+    go get -u "github.com/rancher/fleet/$1@v${NEW_FLEET_VERSION}"
     go mod tidy
 }
 
@@ -68,15 +69,22 @@ git add build.yaml pkg/buildconfig/constants.go
 
 # Bump the Fleet API when a pkg/apis tag for this exact version exists in the fleet repo.
 if git -C ../fleet tag -l "pkg/apis/v${NEW_FLEET_VERSION}" | grep -q .; then
-    bump_fleet_api
+    bump_fleet_module pkg/apis
 
     pushd pkg/apis > /dev/null
-    bump_fleet_api
+    bump_fleet_module pkg/apis
     popd > /dev/null
 
     git add go.mod go.sum pkg/apis/go.mod pkg/apis/go.sum
 fi
 
+# Bump the Fleet helmvalues module when a pkg/helmvalues tag for this exact version
+# exists in the fleet repo.
+if git -C ../fleet tag -l "pkg/helmvalues/v${NEW_FLEET_VERSION}" | grep -q .; then
+    bump_fleet_module pkg/helmvalues
+    git add go.mod go.sum
+fi
+
 git commit -m "Updating to Fleet v${NEW_FLEET_VERSION}"
 
 popd > /dev/null
@@ -0,0 +1,48 @@
+name: Check module tags
+
+# Verifies that the pkg/apis and pkg/helmvalues modules are released in lockstep:
+# the two tags share the same version and commit, and pkg/helmvalues/go.mod
+# requires pkg/apis at that same version.
+#
+# Runs when a pkg/helmvalues tag is pushed (the dependent module, tagged last),
+# and can be triggered manually for any version.
+
+on:
+  push:
+    tags:
+      - 'pkg/helmvalues/v*'
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Version to verify, e.g. v0.16.0-beta.1 (empty = latest pkg/helmvalues tag)"
+        required: false
+        default: ""
+
+permissions:
+  contents: read
+
+jobs:
+  check-module-tags:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Verify pkg/apis and pkg/helmvalues tags are in sync
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          REF_NAME: ${{ github.ref_name }}
+          INPUT_VERSION: ${{ inputs.version }}
+        run: |
+          set -euo pipefail
+          if [ -n "${INPUT_VERSION}" ]; then
+            version="${INPUT_VERSION}"
+          elif [ "${EVENT_NAME}" = "push" ]; then
+            # REF_NAME is e.g. pkg/helmvalues/v0.16.0-beta.1
+            version="${REF_NAME#pkg/helmvalues/}"
+          else
+            version=""
+          fi
+          ./.github/scripts/check-module-tag-sync.sh "${version}"
@@ -45,6 +45,10 @@ jobs:
       -
         name: unit-test
         run: go test -shuffle=on $(go list ./... | grep -v -e /e2e -e /integrationtests -e /benchmarks)
+      -
+        name: unit-test-helmvalues
+        working-directory: pkg/helmvalues
+        run: go test -shuffle=on ./...
 
   integration-tests-group1:
     runs-on: ubuntu-latest

@@ -68,16 +68,18 @@ jobs:
             exit 0
           fi
 
-          # For a new final minor version, pkg/apis must be tagged in the fleet repo.
+          # For a new final minor version, pkg/apis and pkg/helmvalues must be tagged in the fleet repo.
           if [[ "${NEW_FLEET}" =~ \.0$ ]]; then
-            if ! git -C fleet tag -l "pkg/apis/v${NEW_FLEET}" | grep -q .; then
-              {
-                printf 'ERROR: pkg/apis/v%s tag not found in the fleet repo!\n' "${NEW_FLEET}"
-                printf 'For a new final minor version, pkg/apis must be bumped first.\n'
-                printf 'Please create the tag: git tag pkg/apis/v%s\n' "${NEW_FLEET}"
-              } >&2
-              exit 1
-            fi
+            for mod in pkg/apis pkg/helmvalues; do
+              if ! git -C fleet tag -l "${mod}/v${NEW_FLEET}" | grep -q .; then
+                {
+                  printf 'ERROR: %s/v%s tag not found in the fleet repo!\n' "${mod}" "${NEW_FLEET}"
+                  printf 'For a new final minor version, %s must be bumped first.\n' "${mod}"
+                  printf 'Please create the tag: git tag %s/v%s\n' "${mod}" "${NEW_FLEET}"
+                } >&2
+                exit 1
+              fi
+            done
           fi
 
           # For any final version, rancher/rancher must not reference a pre-release Fleet API
@@ -94,6 +96,21 @@ jobs:
             fi
           fi
 
+          # Same guard for the pkg/helmvalues module. Rancher may reference it from a different
+          # go.mod than pkg/apis, so scan all of rancher's module files for a require line.
+          # -o restricts the match to "<module> <version>" so a trailing " // indirect" is
+          # excluded; otherwise awk would read "indirect" as the version and drop the match.
+          if ! git -C fleet tag -l "pkg/helmvalues/v${NEW_FLEET}" | grep -q .; then
+            RANCHER_FLEET_HELMVALUES_VERSION=$(grep -rhsoE 'github.com/rancher/fleet/pkg/helmvalues[[:space:]]+v[0-9][^[:space:]]*' rancher --include=go.mod | awk '{print $NF}' | grep -- - | head -n1 || true)
+            if [[ "${RANCHER_FLEET_HELMVALUES_VERSION:-}" =~ - ]]; then
+              {
+                printf 'ERROR: rancher/rancher uses pre-release Fleet helmvalues %s, but pkg/helmvalues/v%s tag not found\n' "${RANCHER_FLEET_HELMVALUES_VERSION}" "${NEW_FLEET}"
+                printf 'Please create the tag: git tag pkg/helmvalues/v%s\n' "${NEW_FLEET}"
+              } >&2
+              exit 1
+            fi
+          fi
+
       - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: ./rancher/go.mod

@@ -7,6 +7,7 @@ toolchain go1.26.4
 replace (
 	github.com/imdario/mergo => github.com/imdario/mergo v1.0.2
 	github.com/rancher/fleet/pkg/apis => ./pkg/apis
+	github.com/rancher/fleet/pkg/helmvalues => ./pkg/helmvalues
 	gopkg.in/go-playground/webhooks.v6 => github.com/go-playground/webhooks/v6 v6.4.0
 	k8s.io/api => k8s.io/api v0.36.2
 	k8s.io/apiextensions-apiserver => k8s.io/apiextensions-apiserver v0.36.2
@@ -71,6 +72,7 @@ require (
 	github.com/prometheus/client_model v0.6.2
 	github.com/prometheus/common v0.69.0
 	github.com/rancher/fleet/pkg/apis v0.15.2
+	github.com/rancher/fleet/pkg/helmvalues v0.0.0-00010101000000-000000000000
 	github.com/rancher/lasso v0.2.9
 	github.com/rancher/wrangler/v3 v3.7.0
 	github.com/reugn/go-quartz v0.15.2

@@ -0,0 +1,31 @@
+module github.com/rancher/fleet/pkg/helmvalues
+
+go 1.26.0
+
+toolchain go1.26.4
+
+replace github.com/rancher/fleet/pkg/apis => ../apis
+
+require github.com/rancher/fleet/pkg/apis v0.15.2
+
+require (
+	github.com/fxamacker/cbor/v2 v2.9.0 // indirect
+	github.com/go-logr/logr v1.4.3 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
+	github.com/rancher/wrangler/v3 v3.7.0 // indirect
+	github.com/x448/float16 v0.8.4 // indirect
+	go.yaml.in/yaml/v2 v2.4.3 // indirect
+	golang.org/x/net v0.55.0 // indirect
+	golang.org/x/text v0.37.0 // indirect
+	gopkg.in/inf.v0 v0.9.1 // indirect
+	k8s.io/api v0.36.2 // indirect
+	k8s.io/apimachinery v0.36.2 // indirect
+	k8s.io/klog/v2 v2.140.0 // indirect
+	k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a // indirect
+	k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 // indirect
+	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
+	sigs.k8s.io/randfill v1.0.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v6 v6.3.2 // indirect
+)
@@ -0,0 +1,69 @@
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
+github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/fxamacker/cbor/v2 v2.9.0 h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM=
+github.com/fxamacker/cbor/v2 v2.9.0/go.mod h1:vM4b+DJCtHn+zz7h3FFp/hDAI9WNWCsZj23V5ytsSxQ=
+github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
+github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
+github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
+github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
+github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8=
+github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/rancher/wrangler/v3 v3.7.0 h1:rB6GJpnc4Kz8lWuAH3wZwQPgJqPGOu43Aih6147uZB8=
+github.com/rancher/wrangler/v3 v3.7.0/go.mod h1:kqldrBWdHR5zIipX/nr8yuZBFqFrL7GfVP1uwVJSWPQ=
+github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
+github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
+github.com/spf13/pflag v1.0.9 h1:9exaQaMOCwffKiiiYk6/BndUBv+iRViNW+4lEMi0PvY=
+github.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
+github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
+github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
+github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
+go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
+go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
+golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
+golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
+golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc=
+golang.org/x/text v0.37.0/go.mod h1:a5sjxXGs9hsn/AJVwuElvCAo9v8QYLzvavO5z2PiM38=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
+gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
+gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+k8s.io/api v0.36.2 h1:TF6YDLIzKfccK7cq9YpTcGX8TJmEkHVRv78DM51fRYY=
+k8s.io/api v0.36.2/go.mod h1:F4LbMO4brjZYh7yFkXWhynSvtB7YauxV4c+HHkNRGNg=
+k8s.io/apimachinery v0.36.2 h1:0PE/W/WNy1UX61NLbXY5TMbJ6UwLL6E6lAPkYrKFxbQ=
+k8s.io/apimachinery v0.36.2/go.mod h1:fvf/HOLXq9RId0rnDIbN1OEBvHXdQbLMM8nu0LcBUf4=
+k8s.io/klog/v2 v2.140.0 h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc=
+k8s.io/klog/v2 v2.140.0/go.mod h1:o+/RWfJ6PwpnFn7OyAG3QnO47BFsymfEfrz6XyYSSp0=
+k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a h1:xCeOEAOoGYl2jnJoHkC3hkbPJgdATINPMAxaynU2Ovg=
+k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a/go.mod h1:uGBT7iTA6c6MvqUvSXIaYZo9ukscABYi2btjhvgKGZ0=
+k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 h1:AZYQSJemyQB5eRxqcPky+/7EdBj0xi3g0ZcxxJ7vbWU=
+k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2/go.mod h1:xDxuJ0whA3d0I4mf/C4ppKHxXynQ+fxnkmQH0vTHnuk=
+sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
+sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
+sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=
+sigs.k8s.io/randfill v1.0.0/go.mod h1:XeLlZ/jmk4i1HRopwe7/aU3H5n1zNUcX6TM94b3QxOY=
+sigs.k8s.io/structured-merge-diff/v6 v6.3.2 h1:kwVWMx5yS1CrnFWA/2QHyRVJ8jM6dBA80uLmm0wJkk8=
+sigs.k8s.io/structured-merge-diff/v6 v6.3.2/go.mod h1:M3W8sfWvn2HhQDIbGWj3S099YozAsymCo/wrT5ohRUE=
+sigs.k8s.io/yaml v1.6.0 h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs=
+sigs.k8s.io/yaml v1.6.0/go.mod h1:796bPqUfzR/0jLAl6XjHl3Ck7MiyVv8dbTdyT3/pMf4=