rules_gitops 1.0

.bazelignore

@@ -1 +1,2 @@
-examples
+examples/
+.git/

.bazelrc

@@ -1,4 +1,39 @@
-build --nolegacy_external_runfiles
-build --verbose_failures
-test --test_output=errors
+########################
+# Import bazelrc presets
+import %workspace%/tools/preset.bazelrc
 
+# Don’t want to push a rules author to update their deps if not needed.
+# https://bazel.build/reference/command-line-reference#flag--check_direct_dependencies
+# https://bazelbuild.slack.com/archives/C014RARENH0/p1691158021917459?thread_ts=1691156601.420349&cid=C014RARENH0
+common --config=ruleset
+
+# Bazel settings that apply to this repository.
+# Take care to document any settings that you expect users to apply.
+# Settings that apply only to CI are in .github/workflows/ci.bazelrc
+
+# Required until this is the default; expected in Bazel 7
+common --enable_bzlmod
+
+# Ensure that the MODULE.bazel.lock file is complete and committed.
+# This is an important security measure: it ensures that developers on the
+# same rule set download dependencies at the same versions with the same bits.
+# This setting does not affect modules that depend on this module.
+#
+# When updating dependencies, use --lockfile_mode=refresh, for example:
+#     bazel mod tidy --lockfile_mode=refresh
+#
+# When testing different versions of Bazel, use --lockfile_mode=update or
+# --lockfile_mode=off. The lock file format changes over time, and different
+# versions of Bazel may expect different syntax. Bazel also implicitly requires
+# some modules, and different versions have different dependencies, which
+# also affects the contents of the lock file.
+common --lockfile_mode=off
+
+# Load any settings specific to the current user.
+# .bazelrc.user should appear in .gitignore so that settings are not shared with team members
+# This needs to be last statement in this
+# config, as the user configuration should be able to overwrite flags from this file.
+# See https://docs.bazel.build/versions/master/best-practices.html#bazelrc
+# (Note that we use .bazelrc.user so the file appears next to .bazelrc in directory listing,
+# rather than user.bazelrc as suggested in the Bazel docs)
+try-import %workspace%/.bazelrc.user

.bazelversion

@@ -1 +1 @@
-6.5.0
+7.6.0

.gitattributes

@@ -0,0 +1,8 @@
+#################################
+# Configuration for 'git archive'
+# See https://git-scm.com/docs/git-archive#ATTRIBUTES
+
+# Don't include examples in the distribution artifact, to reduce size.
+# You may want to add additional exclusions for folders or files that users don't need.
+examples export-ignore
+tests export-ignore

.github/workflows/ci.bazelrc

@@ -0,0 +1,11 @@
+# This file contains Bazel settings to apply on CI only.
+# It is referenced with a --bazelrc option in the call to bazel in ci.yaml
+
+common --config=ci
+# This directory is configured in GitHub actions to be persisted between runs.
+# We do not enable the repository cache to cache downloaded external artifacts
+# as these are generally faster to download again than to fetch them from the
+# GitHub actions cache.
+common --disk_cache=~/.cache/bazel
+# Allows tests to run bazelisk-in-bazel, since this is the cache folder used
+test --test_env=XDG_CACHE_HOME

.github/workflows/ci.yaml

@@ -14,8 +14,7 @@ jobs:
     strategy:
       matrix:
         bazel-version:
-          - 6.5.0
-          - 5.4.1
+          - 7.6.0
     env:
       USE_BAZEL_VERSION: ${{ matrix.bazel-version }}
     steps:
@@ -35,49 +34,15 @@ jobs:
           mkdir -p "${TOOLS_DIR}/bin/"
           curl -Ls -o "${TOOLS_DIR}/bin/bazel" "https://github.com/bazelbuild/bazelisk/releases/download/v1.14.0/bazelisk-linux-amd64"
           chmod +x "${TOOLS_DIR}/bin/bazel"
-          curl -Ls -o "${TOOLS_DIR}/bin/buildifier" "https://github.com/bazelbuild/buildtools/releases/download/0.29.0/buildifier"
-          chmod +x "${TOOLS_DIR}/bin/buildifier"
-          curl -Ls -o "${TOOLS_DIR}/bin/kind" "https://github.com/kubernetes-sigs/kind/releases/download/v0.29.0/kind-linux-amd64"
-          chmod +x "${TOOLS_DIR}/bin/kind"
           echo "${TOOLS_DIR}/bin" >> $GITHUB_PATH
-      - name: Setup kind cluster
-        run: |
-          ./create_kind_cluster.sh
-      - name: Build
-        run: |
-          bazel build //...
-      - name: Check
-        # run downloaded version of buildifier to reduce uncached build times
-        # see: bazel run //:buildifier-check
-        run: |
-          find . -type f \(\
-            -name '*.bzl' \
-            -o -name '*.sky' \
-            -o -name BUILD \
-            -o -name BUILD.bazel \
-            -o -name WORKSPACE \
-            -o -name WORKSPACE.bazel \
-          \) | xargs buildifier \
-            -mode=check \
-            -lint=warn \
-            --warnings=-module-docstring,-function-docstring,-function-docstring-header,-function-docstring-args,-function-docstring-return,-print \
-          || {
-            buildifier_exit_code=$?
-            echo "Error: failed buildifier checks. Please run \"bazel run //:buildifier-fix\" and commit the changes."
-            exit $buildifier_exit_code
-          }
       - name: Test
         run: |
           bazel test //...
       - name: Build examples
         run: |
-          cd examples
+          cd examples/helloworld
           bazel build //...
       - name: Test examples
         run: |
-          cd examples
-          bazel test //...
-      - name: E2E
-        run: |
-          cd examples
-          ./e2e-test.sh
+          cd ../legacy_docker
+          bazel build //...

.github/workflows/release.yml

@@ -30,52 +30,18 @@ jobs:
           mkdir -p "${TOOLS_DIR}/bin/"
           curl -Ls -o "${TOOLS_DIR}/bin/bazel" "https://github.com/bazelbuild/bazelisk/releases/download/v1.14.0/bazelisk-linux-amd64"
           chmod +x "${TOOLS_DIR}/bin/bazel"
-          curl -Ls -o "${TOOLS_DIR}/bin/buildifier" "https://github.com/bazelbuild/buildtools/releases/download/0.29.0/buildifier"
-          chmod +x "${TOOLS_DIR}/bin/buildifier"
-          curl -Ls -o "${TOOLS_DIR}/bin/kind" "https://github.com/kubernetes-sigs/kind/releases/download/v0.29.0/kind-linux-amd64"
-          chmod +x "${TOOLS_DIR}/bin/kind"
           echo "${TOOLS_DIR}/bin" >> $GITHUB_PATH
-      - name: Setup kind cluster
-        run: |
-          ./create_kind_cluster.sh
-      - name: Build
-        run: |
-          bazel build //...
-      - name: Check
-        # run downloaded version of buildifier to reduce uncached build times
-        # see: bazel run //:buildifier-check
-        run: |
-          find . -type f \(\
-            -name '*.bzl' \
-            -o -name '*.sky' \
-            -o -name BUILD \
-            -o -name BUILD.bazel \
-            -o -name WORKSPACE \
-            -o -name WORKSPACE.bazel \
-          \) | xargs buildifier \
-            -mode=check \
-            -lint=warn \
-            --warnings=-module-docstring,-function-docstring,-function-docstring-header,-function-docstring-args,-function-docstring-return,-print \
-          || {
-            buildifier_exit_code=$?
-            echo "Error: failed buildifier checks. Please run \"bazel run //:buildifier-fix\" and commit the changes."
-            exit $buildifier_exit_code
-          }
       - name: Test
         run: |
           bazel test //...
-      - name: Build examples
+      - name: Build helloworld
         run: |
-          cd examples
+          cd examples/helloworld
           bazel build //...
-      - name: Test examples
+      - name: Build legacy_docker
         run: |
-          cd examples
-          bazel test //...
-      - name: E2E
-        run: |
-          cd examples
-          ./e2e-test.sh
+          cd ../legacy_docker
+          bazel build //...
       - name: Prepare workspace snippet
         run: .github/workflows/workspace_snippet.sh ${{ env.GITHUB_REF_NAME }} > release_notes.txt
       - name: Release

.github/workflows/workspace_snippet.sh

@@ -8,18 +8,14 @@ SHA=$(git archive --format=tar --prefix=${PREFIX}/ ${TAG} | gzip | shasum -a 256
 
 cat << EOF
 
-WORKSPACE snippet:
+MODULE.bazel snippet:
 
 \`\`\`starlark
 
-load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
+bazel_dep(name = "rules_gitops", version = "${TAG}", dev_dependency = True)
+
+\`\`\`
 
-http_archive(
-    name = "com_adobe_rules_gitops",
-    sha256 = "${SHA}",
-    strip_prefix = "${PREFIX}",
-    urls = ["https://github.com/adobe/rules_gitops/archive/refs/tags/${TAG}.tar.gz"],
-)
 EOF
 
 awk '/---SNIP---/{f=1;next}/---END_SNIP---/{f=0}f' examples/WORKSPACE

.gitignore

@@ -4,3 +4,4 @@
 .DS_Store
 Thumbs.db
 bazel-*
+.bazelrc.user

BUILD.bazel

@@ -0,0 +1,66 @@
+# Copyright 2026 Adobe. All rights reserved.
+# This file is licensed to you under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License. You may obtain a copy
+# of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+# Unless required by applicable law or agreed to in writing, software distributed under
+# the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+# OF ANY KIND, either express or implied. See the License for the specific language
+# governing permissions and limitations under the License.
+
+# gazelle:exclude examples
+# gazelle:map_kind bzl_library bzl_library @bazel_lib//:bzl_library.bzl
+
+load("@buildifier_prebuilt//:rules.bzl", "buildifier", "buildifier_test")
+load("@gazelle//:def.bzl", "DEFAULT_LANGUAGES", "gazelle", "gazelle_binary")
+load("@package_metadata//licenses/rules:license.bzl", "license")
+load("@package_metadata//purl:purl.bzl", "purl")
+load("@package_metadata//rules:package_metadata.bzl", "package_metadata")
+load("//kustomize:defs.bzl", "kustomize_binary")
+
+buildifier(
+    name = "buildifier.fix",
+    exclude_patterns = ["./.git/*"],
+    lint_mode = "fix",
+    mode = "fix",
+)
+
+buildifier_test(
+    name = "buildifier_test",
+    exclude_patterns = ["./.git/*"],
+    lint_mode = "warn",
+    mode = "check",
+    no_sandbox = True,
+    workspace = ":WORKSPACE.bazel",
+)
+
+package_metadata(
+    name = "package_metadata",
+    purl = purl.bazel(
+        module_name(),
+        module_version(),
+    ),
+    visibility = ["//visibility:public"],
+)
+
+license(
+    name = "license",
+    kind = "@package_metadata//licenses/spdx:Apache-2.0",
+    text = "LICENSE",
+)
+
+gazelle_binary(
+    name = "gazelle_bin",
+    languages = DEFAULT_LANGUAGES + [
+        "@bazel_skylib_gazelle_plugin//bzl",
+    ],
+)
+
+gazelle(
+    name = "gazelle",
+    gazelle = "gazelle_bin",
+)
+
+kustomize_binary(
+    name = "kustomize_bin",
+)