Feat: add new providers and fix definitions (#6599)

* feat: add new providers and fix definitions

Signed-off-by: FogDong <fog@bentoml.com>

* fix: fix definitions and tests

Signed-off-by: FogDong <fog@bentoml.com>

* fix: fix lint and helm

Signed-off-by: FogDong <fog@bentoml.com>

* fix: fix definitions

Signed-off-by: FogDong <fog@bentoml.com>

* fix: add multicluster

Signed-off-by: FogDong <fog@bentoml.com>

* fix: fix e2e

Signed-off-by: FogDong <fog@bentoml.com>

* fix: fix dynamic client for cli

Signed-off-by: FogDong <fog@bentoml.com>

* fix: fix api gen

Signed-off-by: FogDong <fog@bentoml.com>

* fix: fix lint

Signed-off-by: FogDong <fog@bentoml.com>

---------

Signed-off-by: FogDong <fog@bentoml.com>

.github/CODEOWNERS

@@ -1,35 +1,35 @@
 # This file is a github code protect rule follow the codeowners https://docs.github.com/en/github/creating-cloning-and-archiving-repositories/creating-a-repository-on-github/about-code-owners#example-of-a-codeowners-file
 
-*                                  @barnettZQG @wonderflow @leejanee @Somefive @jefree-cat @FogDong @wangyikewxgm @chivalryq
-design/                            @barnettZQG @leejanee @wonderflow @Somefive @jefree-cat @FogDong
+*                                  @barnettZQG @wonderflow @leejanee @Somefive @jefree-cat @FogDong @wangyikewxgm @chivalryq @anoop2811 @dhiguero
+design/                            @barnettZQG @leejanee @wonderflow @Somefive @jefree-cat @FogDong @anoop2811 @dhiguero
 
 # Owner of Core Controllers
-pkg/controller/core.oam.dev       @Somefive @FogDong @barnettZQG @wonderflow @wangyikewxgm @chivalryq
+pkg/controller/core.oam.dev       @Somefive @FogDong @barnettZQG @wonderflow @wangyikewxgm @chivalryq @anoop2811 @dhiguero
 
 # Owner of Standard Controllers
-pkg/controller/standard.oam.dev   @wangyikewxgm @barnettZQG @wonderflow @Somefive
+pkg/controller/standard.oam.dev   @wangyikewxgm @barnettZQG @wonderflow @Somefive @anoop2811 @dhiguero @FogDong
 
 # Owner of CUE
-pkg/cue                            @leejanee @FogDong @Somefive
-pkg/stdlib                         @leejanee @FogDong @Somefive
+pkg/cue                            @leejanee @FogDong @Somefive @anoop2811 @dhiguero
+pkg/stdlib                         @leejanee @FogDong @Somefive @anoop2811 @dhiguero
 
 # Owner of Workflow
-pkg/workflow                       @leejanee @FogDong @Somefive @wangyikewxgm @chivalryq
+pkg/workflow                       @leejanee @FogDong @Somefive @wangyikewxgm @chivalryq @anoop2811 @dhiguero
 
 # Owner of vela templates
-vela-templates/                     @Somefive @barnettZQG @wonderflow @FogDong @wangyikewxgm @chivalryq
+vela-templates/                     @Somefive @barnettZQG @wonderflow @FogDong @wangyikewxgm @chivalryq @anoop2811 @dhiguero
 
 # Owner of vela CLI
-references/cli/                     @Somefive @zzxwill @StevenLeiZhang @charlie0129 @wangyikewxgm @chivalryq
+references/cli/                     @Somefive @StevenLeiZhang @charlie0129 @wangyikewxgm @chivalryq @anoop2811 @dhiguero @FogDong
 
 # Owner of vela addon framework
-pkg/addon/                         @wangyikewxgm @wonderflow @charlie0129
+pkg/addon/                         @wangyikewxgm @wonderflow @charlie0129 @anoop2811 @dhiguero @FogDong
 
 # Owner of resource keeper and tracker
-pkg/resourcekeeper                 @Somefive @FogDong @chivalryq
-pkg/resourcetracker                @Somefive @FogDong @chivalryq
+pkg/resourcekeeper                 @Somefive @FogDong @chivalryq @anoop2811 @dhiguero
+pkg/resourcetracker                @Somefive @FogDong @chivalryq @anoop2811 @dhiguero
 
-.github/                           @chivalryq @wonderflow @Somefive @FogDong @wangyikewxgm
-makefiles                          @chivalryq @wonderflow @Somefive @FogDong @wangyikewxgm
-go.*                               @chivalryq @wonderflow @Somefive @FogDong @wangyikewxgm
+.github/                           @chivalryq @wonderflow @Somefive @FogDong @wangyikewxgm @anoop2811 @dhiguero
+makefiles                          @chivalryq @wonderflow @Somefive @FogDong @wangyikewxgm @anoop2811 @dhiguero
+go.*                               @chivalryq @wonderflow @Somefive @FogDong @wangyikewxgm @anoop2811 @dhiguero
 

.github/workflows/chart.yml

@@ -28,7 +28,7 @@ jobs:
         with:
           version: v3.4.0
       - name: Setup node
-        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b
         with:
           node-version: '14'
       - name: Generate helm doc
@@ -47,7 +47,7 @@ jobs:
           chart_smever=${chart_version#"v"}
           sed -i "s/0.1.0/$chart_smever/g" $HELM_CHART/Chart.yaml
 
-      - uses: jnwng/github-app-installation-token-action@v2
+      - uses: jnwng/github-app-installation-token-action@c54add4c02866dc41e106745ac6dcf5cdd6339e5 # v2
         id: get_app_token
         with:
           appId: 340472

.github/workflows/commit-lint.yml

@@ -15,7 +15,7 @@ jobs:
   check:
     runs-on: ubuntu-22.04
     steps:
-      - uses: thehanimo/pr-title-checker@v1.4.1
+      - uses: thehanimo/pr-title-checker@5652588c80c479af803eabfbdb5a3895a77c1388 # v1.4.1
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           pass_on_octokit_error: true

.github/workflows/core-api-test.yml

@@ -16,10 +16,10 @@ jobs:
   core-api-test:
     runs-on: ubuntu-22.04
     steps:
-      - name: Set up Go 1.19
+      - name: Set up Go 1.22
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
         env:
-          GO_VERSION: '1.19'
+          GO_VERSION: '1.22'
         with:
           go-version: ${{ env.GO_VERSION }}
         id: go

.github/workflows/definition-lint.yml

@@ -16,7 +16,7 @@ permissions:
 
 env:
   # Common versions
-  GO_VERSION: '1.19'
+  GO_VERSION: '1.22'
 
 jobs:
   definition-doc:

.github/workflows/e2e-multicluster-test.yml

@@ -18,7 +18,7 @@ permissions:
 
 env:
   # Common versions
-  GO_VERSION: '1.19'
+  GO_VERSION: '1.22'
 
 jobs:
 

.github/workflows/e2e-test.yml

@@ -18,7 +18,7 @@ permissions:
 
 env:
   # Common versions
-  GO_VERSION: '1.19'
+  GO_VERSION: '1.22'
 
 jobs:
 
@@ -78,7 +78,6 @@ jobs:
       - name: Get Ginkgo
         run: |
           go install github.com/onsi/ginkgo/v2/ginkgo@v2.10.0
-          go get github.com/onsi/gomega/...
 
       - name: Load image
         run: |

.github/workflows/go.yml

@@ -16,8 +16,8 @@ permissions:  # added using https://github.com/step-security/secure-workflows
 
 env:
   # Common versions
-  GO_VERSION: '1.19'
-  GOLANGCI_VERSION: 'v1.49'
+  GO_VERSION: '1.22'
+  GOLANGCI_VERSION: 'v1.54.2'
 
 jobs:
 
@@ -104,7 +104,7 @@ jobs:
           go-version: ${{ env.GO_VERSION }}
 
       - name: Setup node
-        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b
         with:
           node-version: '14'
 
@@ -178,7 +178,7 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
       - name: Build Test for vela core
-        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+        uses: docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c # v6.3.0
         with:
           context: .
           file: Dockerfile
@@ -198,7 +198,7 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
       - name: Build Test for CLI
-        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+        uses: docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c # v6.3.0
         with:
           context: .
           file: Dockerfile.cli

.github/workflows/issue-commands.yml

@@ -23,7 +23,7 @@ jobs:
           path: ./actions
           ref: v0.4.2
       - name: Setup Node.js
-        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b
         with:
           node-version: '14'
           cache: 'npm'
@@ -48,14 +48,14 @@ jobs:
         id: command
         uses: xt0rted/slash-command-action@bf51f8f5f4ea3d58abc7eca58f77104182b23e88
         with:
-          repo-token: ${{ secrets.VELA_BOT_TOKEN }}
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
           command: backport
           reaction: "true"
           reaction-type: "eyes"
           allow-edits: "false"
           permission-level: read
       - name: Handle Command
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
         env:
           VERSION: ${{ steps.command.outputs.command-arguments }}
         with:
@@ -94,7 +94,7 @@ jobs:
       issues: write
     steps:
       - name: Retest the current pull request
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
         env:
           PULL_REQUEST_ID: ${{ github.event.issue.number }}
           COMMENT_ID: ${{ github.event.comment.id }}

.github/workflows/license.yml

@@ -19,7 +19,7 @@ jobs:
     steps:
       - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
       - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # v1.190.0
         with:
           ruby-version: 2.6
       - name: Install dependencies

.github/workflows/registry.yml

@@ -47,7 +47,7 @@ jobs:
         with:
           driver-opts: image=moby/buildkit:master
 
-      - uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+      - uses: docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c # v6.3.0
         name: Build & Pushing vela-core for Dockerhub, GHCR
         with:
           context: .
@@ -65,7 +65,7 @@ jobs:
             docker.io/oamdev/vela-core:${{ steps.get_version.outputs.VERSION }}
             ghcr.io/${{ github.repository_owner }}/oamdev/vela-core:${{ steps.get_version.outputs.VERSION }}
 
-      - uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+      - uses: docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c # v6.3.0
         name: Build & Pushing CLI for Dockerhub, GHCR
         with:
           context: .

.github/workflows/release.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
         with:
-          go-version: 1.19
+          go-version: 1.22
           cache: true
       - uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # v5.0.0
         with:

.github/workflows/sdk-test.yml

@@ -18,8 +18,8 @@ permissions:
 
 env:
   # Common versions
-  GO_VERSION: '1.19'
-  GOLANGCI_VERSION: 'v1.49'
+  GO_VERSION: '1.22'
+  GOLANGCI_VERSION: 'v1.54.2'
 
 jobs:
   sdk-tests:
@@ -38,6 +38,11 @@ jobs:
           make goimports
           make golangci
 
+      - name: Setup KinD
+        run: |
+          go install sigs.k8s.io/kind@v0.19.0
+          kind create cluster
+
       - name: Build CLI
         run: make vela-cli
 

.github/workflows/sync-api.yml

@@ -11,7 +11,7 @@ permissions:
   contents: read
 
 env:
-  GO_VERSION: '1.19'
+  GO_VERSION: '1.22'
 
 jobs:
   sync-core-api:

.github/workflows/sync-sdk.yaml

@@ -15,7 +15,7 @@ permissions:
   contents: read
 
 env:
-  GO_VERSION: '1.19'
+  GO_VERSION: '1.22'
 
 jobs:
   sync_sdk:

.github/workflows/trivy-scan.yml

@@ -20,14 +20,14 @@ jobs:
           docker build --build-arg GOPROXY=https://proxy.golang.org -t docker.io/oamdev/vela-core:${{ github.sha }} .
 
       - name: Run Trivy vulnerability scanner for vela core
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@d9cd5b1c23aaf8cb31bb09141028215828364bbb # master
         with:
           image-ref: 'docker.io/oamdev/vela-core:${{ github.sha }}'
           format: 'sarif'
           output: 'trivy-results.sarif'
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@366883a76d75dcee5428da5c3ae7abf9386e35ac # v2.26.2
         if: always()
         with:
           sarif_file: 'trivy-results.sarif'

.github/workflows/unit-test.yml

@@ -16,7 +16,7 @@ permissions:
 
 env:
   # Common versions
-  GO_VERSION: '1.19'
+  GO_VERSION: '1.22'
 
 jobs:
 

.gitignore

@@ -41,6 +41,7 @@ _tmp/
 
 references/cmd/cli/fake/source.go
 references/cmd/cli/fake/chart_source.go
+references/vela-sdk-gen/*
 charts/vela-core/crds/_.yaml
 .test_vela
 tmp/

Dockerfile

@@ -1,6 +1,6 @@
 ARG BASE_IMAGE
 # Build the manager binary
-FROM golang:1.19-alpine3.18 as builder
+FROM golang:1.22-alpine3.18 as builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

Dockerfile.cli

@@ -1,6 +1,6 @@
 ARG BASE_IMAGE
 # Build the cli binary
-FROM --platform=${BUILDPLATFORM:-linux/amd64} golang:1.19-alpine@sha256:2381c1e5f8350a901597d633b2e517775eeac7a6682be39225a93b22cfd0f8bb as builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} golang:1.22-alpine@sha256:d1a601b64de09e2fa38c95e55838961811d5ca11062a8f4230a5c434b3ae2a34 as builder
 ARG GOPROXY
 ENV GOPROXY=${GOPROXY:-https://proxy.golang.org}
 WORKDIR /workspace

Dockerfile.e2e

@@ -1,6 +1,6 @@
 ARG BASE_IMAGE
 # Build the manager binary
-FROM --platform=${BUILDPLATFORM:-linux/amd64} golang:1.19-alpine@sha256:2381c1e5f8350a901597d633b2e517775eeac7a6682be39225a93b22cfd0f8bb as builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} golang:1.22-alpine@sha256:d1a601b64de09e2fa38c95e55838961811d5ca11062a8f4230a5c434b3ae2a34 as builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

Makefile

@@ -41,9 +41,8 @@ fmt: goimports installcue
 	$(CUE) fmt ./vela-templates/definitions/internal/*
 	$(CUE) fmt ./vela-templates/definitions/deprecated/*
 	$(CUE) fmt ./vela-templates/definitions/registry/*
-	$(CUE) fmt ./pkg/stdlib/pkgs/*
-	$(CUE) fmt ./pkg/stdlib/op.cue
-	$(CUE) fmt ./pkg/workflow/tasks/template/static/*
+	$(CUE) fmt ./pkg/workflow/template/static/*
+	$(CUE) fmt ./pkg/workflow/providers/...
 
 ## sdk_fmt: Run go fmt against code
 sdk_fmt:

apis/core.oam.dev/v1beta1/resourcetracker_types_test.go

@@ -203,7 +203,7 @@ func TestResourceTrackerCompression(t *testing.T) {
 		"../../../charts/vela-core/crds/core.oam.dev_componentdefinitions.yaml",
 		"../../../charts/vela-core/templates/kubevela-controller.yaml",
 		"../../../charts/vela-core/README.md",
-		"../../../pkg/velaql/providers/query/testdata/machinelearning.seldon.io_seldondeployments.yaml",
+		"../../../pkg/workflow/providers/legacy/query/testdata/machinelearning.seldon.io_seldondeployments.yaml",
 	}
 	for _, p := range paths {
 		b, err := os.ReadFile(p)

charts/vela-core/README.md

@@ -48,12 +48,14 @@ helm install --create-namespace -n vela-system kubevela kubevela/vela-core --wai
 
 ### KubeVela workflow parameters
 
-| Name                                   | Description                                            | Value   |
-| -------------------------------------- | ------------------------------------------------------ | ------- |
-| `workflow.enableSuspendOnFailure`      | Enable suspend on workflow failure                     | `false` |
-| `workflow.backoff.maxTime.waitState`   | The max backoff time of workflow in a wait condition   | `60`    |
-| `workflow.backoff.maxTime.failedState` | The max backoff time of workflow in a failed condition | `300`   |
-| `workflow.step.errorRetryTimes`        | The max retry times of a failed workflow step          | `10`    |
+| Name                                                    | Description                                             | Value   |
+| ------------------------------------------------------- | ------------------------------------------------------- | ------- |
+| `workflow.enableSuspendOnFailure`                       | Enable suspend on workflow failure                      | `false` |
+| `workflow.enableExternalPackageForDefaultCompiler`      | Enable external package for default cuex compiler       | `true`  |
+| `workflow.enableExternalPackageWatchForDefaultCompiler` | Enable external package watch for default cuex compiler | `false` |
+| `workflow.backoff.maxTime.waitState`                    | The max backoff time of workflow in a wait condition    | `60`    |
+| `workflow.backoff.maxTime.failedState`                  | The max backoff time of workflow in a failed condition  | `300`   |
+| `workflow.step.errorRetryTimes`                         | The max retry times of a failed workflow step           | `10`    |
 
 ### KubeVela controller parameters
 
@@ -96,6 +98,7 @@ helm install --create-namespace -n vela-system kubevela kubevela/vela-core --wai
 | `featureGates.informerCacheFilterUnnecessaryFields`          | filter unnecessary fields for informer cache                                                                                                                                                                                     | `true`  |
 | `featureGates.sharedDefinitionStorageForApplicationRevision` | use definition cache to reduce duplicated definition storage for application revision, must be used with InformerCacheFilterUnnecessaryFields                                                                                    | `true`  |
 | `featureGates.disableWorkflowContextConfigMapCache`          | disable the workflow context's configmap informer cache                                                                                                                                                                          | `true`  |
+| `featureGates.enableCueValidation`                           | enable the strict cue validation for cue required parameter fields                                                                                                                                                               | `false` |
 
 ### MultiCluster parameters
 

charts/vela-core/crds/cue.oam.dev_packages.yaml

@@ -0,0 +1,81 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.11.3
+  creationTimestamp: null
+  name: packages.cue.oam.dev
+spec:
+  group: cue.oam.dev
+  names:
+    kind: Package
+    listKind: PackageList
+    plural: packages
+    shortNames:
+    - pkg
+    - cpkg
+    - cuepkg
+    - cuepackage
+    singular: package
+  scope: Namespaced
+  versions:
+  - additionalPrinterColumns:
+    - jsonPath: .spec.path
+      name: PATH
+      type: string
+    - jsonPath: .spec.provider.protocol
+      name: PROTO
+      type: string
+    - jsonPath: .spec.provider.endpoint
+      name: ENDPOINT
+      type: string
+    name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: Package is an extension for cuex engine
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: PackageSpec the spec for Package
+            properties:
+              path:
+                type: string
+              provider:
+                description: Provider the external Provider in Package for cuex to
+                  run functions
+                properties:
+                  endpoint:
+                    type: string
+                  protocol:
+                    description: ProviderProtocol the protocol type for external Provider
+                    type: string
+                required:
+                - endpoint
+                - protocol
+                type: object
+              templates:
+                additionalProperties:
+                  type: string
+                type: object
+            required:
+            - path
+            - templates
+            type: object
+        required:
+        - spec
+        type: object
+    served: true
+    storage: true
+    subresources: {}

charts/vela-core/templates/defwithtemplate/affinity.yaml

@@ -31,6 +31,9 @@ spec:
         						if k.namespace != _|_ {
         							namespace: k.namespace
         						}
+        						if k.namespaces != _|_ {
+        							namespaces: k.namespaces
+        						}
         						topologyKey: k.topologyKey
         						if k.namespaceSelector != _|_ {
         							namespaceSelector: k.namespaceSelector
@@ -57,6 +60,9 @@ spec:
         						if k.namespace != _|_ {
         							namespace: k.namespace
         						}
+        						if k.namespaces != _|_ {
+        							namespaces: k.namespaces
+        						}
         						topologyKey: k.topologyKey
         						if k.namespaceSelector != _|_ {
         							namespaceSelector: k.namespaceSelector

charts/vela-core/templates/defwithtemplate/apply-deployment.yaml

@@ -16,36 +16,39 @@ spec:
         import (
         	"strconv"
         	"strings"
-        	"vela/op"
+        	"vela/kube"
+        	"vela/builtin"
         )
 
-        output: op.#Apply & {
-        	cluster: parameter.cluster
-        	value: {
-        		apiVersion: "apps/v1"
-        		kind:       "Deployment"
-        		metadata: {
-        			name:      context.stepName
-        			namespace: context.namespace
-        		}
-        		spec: {
-        			selector: matchLabels: "workflow.oam.dev/step-name": "\(context.name)-\(context.stepName)"
-        			replicas: parameter.replicas
-        			template: {
-        				metadata: labels: "workflow.oam.dev/step-name": "\(context.name)-\(context.stepName)"
-        				spec: containers: [{
-        					name:  context.stepName
-        					image: parameter.image
-        					if parameter["cmd"] != _|_ {
-        						command: parameter.cmd
-        					}
-        				}]
+        output: kube.#Apply & {
+        	$params: {
+        		cluster: parameter.cluster
+        		value: {
+        			apiVersion: "apps/v1"
+        			kind:       "Deployment"
+        			metadata: {
+        				name:      context.stepName
+        				namespace: context.namespace
+        			}
+        			spec: {
+        				selector: matchLabels: "workflow.oam.dev/step-name": "\(context.name)-\(context.stepName)"
+        				replicas: parameter.replicas
+        				template: {
+        					metadata: labels: "workflow.oam.dev/step-name": "\(context.name)-\(context.stepName)"
+        					spec: containers: [{
+        						name:  context.stepName
+        						image: parameter.image
+        						if parameter["cmd"] != _|_ {
+        							command: parameter.cmd
+        						}
+        					}]
+        				}
         			}
         		}
         	}
         }
-        wait: op.#ConditionalWait & {
-        	continue: output.value.status.readyReplicas == parameter.replicas
+        wait: builtin.#ConditionalWait & {
+        	$params: continue: output.$returns.value.status.readyReplicas == parameter.replicas
         }
         parameter: {
         	image:    string

charts/vela-core/templates/defwithtemplate/apply-object.yaml

@@ -13,13 +13,13 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/kube"
         )
 
-        apply: op.#Apply & {
-        	value:   parameter.value
-        	cluster: parameter.cluster
+        apply: kube.#Apply & {
+        	$params: parameter
         }
+
         parameter: {
         	// +usage=Specify Kubernetes native resource object to be applied
         	value: {...}

charts/vela-core/templates/defwithtemplate/apply-terraform-config.yaml

@@ -14,11 +14,12 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/kube"
+        	"vela/builtin"
         )
 
-        apply: op.#Apply & {
-        	value: {
+        apply: kube.#Apply & {
+        	$params: value: {
         		apiVersion: "terraform.core.oam.dev/v1beta2"
         		kind:       "Configuration"
         		metadata: {
@@ -53,8 +54,10 @@ spec:
         		}
         	}
         }
-        check: op.#ConditionalWait & {
-        	continue: apply.value.status != _|_ && apply.value.status.apply != _|_ && apply.value.status.apply.state == "Available"
+        check: builtin.#ConditionalWait & {
+        	if apply.$returns.value.status != _|_ if apply.$returns.value.status.apply != _|_ {
+        		$params: continue: apply.$returns.value.status.apply.state == "Available"
+        	}
         }
         parameter: {
         	// +usage=specify the source of the terraform configuration

charts/vela-core/templates/defwithtemplate/apply-terraform-provider.yaml

@@ -14,61 +14,65 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/config"
+        	"vela/kube"
+        	"vela/builtin"
         	"strings"
         )
 
-        config: op.#CreateConfig & {
-        	name:      "\(context.name)-\(context.stepName)"
-        	namespace: context.namespace
-        	template:  "terraform-\(parameter.type)"
-        	config: {
-        		name: parameter.name
-        		if parameter.type == "alibaba" {
-        			ALICLOUD_ACCESS_KEY: parameter.accessKey
-        			ALICLOUD_SECRET_KEY: parameter.secretKey
-        			ALICLOUD_REGION:     parameter.region
-        		}
-        		if parameter.type == "aws" {
-        			AWS_ACCESS_KEY_ID:     parameter.accessKey
-        			AWS_SECRET_ACCESS_KEY: parameter.secretKey
-        			AWS_DEFAULT_REGION:    parameter.region
-        			AWS_SESSION_TOKEN:     parameter.token
-        		}
-        		if parameter.type == "azure" {
-        			ARM_CLIENT_ID:       parameter.clientID
-        			ARM_CLIENT_SECRET:   parameter.clientSecret
-        			ARM_SUBSCRIPTION_ID: parameter.subscriptionID
-        			ARM_TENANT_ID:       parameter.tenantID
-        		}
-        		if parameter.type == "baidu" {
-        			BAIDUCLOUD_ACCESS_KEY: parameter.accessKey
-        			BAIDUCLOUD_SECRET_KEY: parameter.secretKey
-        			BAIDUCLOUD_REGION:     parameter.region
-        		}
-        		if parameter.type == "ec" {
-        			EC_API_KEY: parameter.apiKey
-        		}
-        		if parameter.type == "gcp" {
-        			GOOGLE_CREDENTIALS: parameter.credentials
-        			GOOGLE_REGION:      parameter.region
-        			GOOGLE_PROJECT:     parameter.project
-        		}
-        		if parameter.type == "tencent" {
-        			TENCENTCLOUD_SECRET_ID:  parameter.secretID
-        			TENCENTCLOUD_SECRET_KEY: parameter.secretKey
-        			TENCENTCLOUD_REGION:     parameter.region
-        		}
-        		if parameter.type == "ucloud" {
-        			UCLOUD_PRIVATE_KEY: parameter.privateKey
-        			UCLOUD_PUBLIC_KEY:  parameter.publicKey
-        			UCLOUD_PROJECT_ID:  parameter.projectID
-        			UCLOUD_REGION:      parameter.region
+        cfg: config.#CreateConfig & {
+        	$params: {
+        		name:      "\(context.name)-\(context.stepName)"
+        		namespace: context.namespace
+        		template:  "terraform-\(parameter.type)"
+        		config: {
+        			name: parameter.name
+        			if parameter.type == "alibaba" {
+        				ALICLOUD_ACCESS_KEY: parameter.accessKey
+        				ALICLOUD_SECRET_KEY: parameter.secretKey
+        				ALICLOUD_REGION:     parameter.region
+        			}
+        			if parameter.type == "aws" {
+        				AWS_ACCESS_KEY_ID:     parameter.accessKey
+        				AWS_SECRET_ACCESS_KEY: parameter.secretKey
+        				AWS_DEFAULT_REGION:    parameter.region
+        				AWS_SESSION_TOKEN:     parameter.token
+        			}
+        			if parameter.type == "azure" {
+        				ARM_CLIENT_ID:       parameter.clientID
+        				ARM_CLIENT_SECRET:   parameter.clientSecret
+        				ARM_SUBSCRIPTION_ID: parameter.subscriptionID
+        				ARM_TENANT_ID:       parameter.tenantID
+        			}
+        			if parameter.type == "baidu" {
+        				BAIDUCLOUD_ACCESS_KEY: parameter.accessKey
+        				BAIDUCLOUD_SECRET_KEY: parameter.secretKey
+        				BAIDUCLOUD_REGION:     parameter.region
+        			}
+        			if parameter.type == "ec" {
+        				EC_API_KEY: parameter.apiKey
+        			}
+        			if parameter.type == "gcp" {
+        				GOOGLE_CREDENTIALS: parameter.credentials
+        				GOOGLE_REGION:      parameter.region
+        				GOOGLE_PROJECT:     parameter.project
+        			}
+        			if parameter.type == "tencent" {
+        				TENCENTCLOUD_SECRET_ID:  parameter.secretID
+        				TENCENTCLOUD_SECRET_KEY: parameter.secretKey
+        				TENCENTCLOUD_REGION:     parameter.region
+        			}
+        			if parameter.type == "ucloud" {
+        				UCLOUD_PRIVATE_KEY: parameter.privateKey
+        				UCLOUD_PUBLIC_KEY:  parameter.publicKey
+        				UCLOUD_PROJECT_ID:  parameter.projectID
+        				UCLOUD_REGION:      parameter.region
+        			}
         		}
         	}
         }
-        read: op.#Read & {
-        	value: {
+        read: kube.#Read & {
+        	$params: value: {
         		apiVersion: "terraform.core.oam.dev/v1beta1"
         		kind:       "Provider"
         		metadata: {
@@ -77,12 +81,9 @@ spec:
         		}
         	}
         }
-        check: op.#ConditionalWait & {
-        	if read.value.status != _|_ {
-        		continue: read.value.status.state == "ready"
-        	}
-        	if read.value.status == _|_ {
-        		continue: false
+        check: builtin.#ConditionalWait & {
+        	if read.$returns.value.status != _|_ {
+        		$params: continue: read.$returns.value.status.state == "ready"
         	}
         }
         providerBasic: {

charts/vela-core/templates/defwithtemplate/build-push-image.yaml

@@ -14,7 +14,9 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/builtin"
+        	"vela/kube"
+        	"vela/util"
         	"encoding/json"
         	"strings"
         )
@@ -28,8 +30,8 @@ spec:
         		value: parameter.context
         	}
         }
-        kaniko: op.#Apply & {
-        	value: {
+        kaniko: kube.#Apply & {
+        	$params: value: {
         		apiVersion: "v1"
         		kind:       "Pod"
         		metadata: {
@@ -95,14 +97,14 @@ spec:
         		}
         	}
         }
-        log: op.#Log & {
-        	source: resources: [{
+        log: util.#Log & {
+        	$params: source: resources: [{
         		name:      "\(context.name)-\(context.stepSessionID)-kaniko"
         		namespace: context.namespace
         	}]
         }
-        read: op.#Read & {
-        	value: {
+        read: kube.#Read & {
+        	$params: value: {
         		apiVersion: "v1"
         		kind:       "Pod"
         		metadata: {
@@ -111,8 +113,10 @@ spec:
         		}
         	}
         }
-        wait: op.#ConditionalWait & {
-        	continue: read.value.status != _|_ && read.value.status.phase == "Succeeded"
+        wait: builtin.#ConditionalWait & {
+        	if read.$returns.value.status != _|_ {
+        		$params: continue: read.$returns.value.status.phase == "Succeeded"
+        	}
         }
         #secret: {
         	name: string

charts/vela-core/templates/defwithtemplate/check-metrics.yaml

@@ -15,32 +15,35 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/metrics"
+        	"vela/builtin"
         )
 
-        check: op.#PromCheck & {
-        	query:          parameter.query
-        	metricEndpoint: parameter.metricEndpoint
-        	condition:      parameter.condition
-        	stepID:         context.stepSessionID
-        	duration:       parameter.duration
-        	failDuration:   parameter.failDuration
+        check: metrics.#PromCheck & {
+        	$params: {
+        		query:          parameter.query
+        		metricEndpoint: parameter.metricEndpoint
+        		condition:      parameter.condition
+        		stepID:         context.stepSessionID
+        		duration:       parameter.duration
+        		failDuration:   parameter.failDuration
+        	}
         }
 
-        fail: op.#Steps & {
-        	if check.failed != _|_ {
-        		if check.failed == true {
-        			breakWorkflow: op.#Fail & {
-        				message: check.message
+        fail: {
+        	if check.$returns.failed != _|_ {
+        		if check.$returns.failed == true {
+        			breakWorkflow: builtin.#Fail & {
+        				$params: message: check.$returns.message
         			}
         		}
         	}
         }
 
-        wait: op.#ConditionalWait & {
-        	continue: check.result
-        	if check.message != _|_ {
-        		message: check.message
+        wait: builtin.#ConditionalWait & {
+        	$params: continue: check.$returns.result
+        	if check.$returns.message != _|_ {
+        		$params: message: check.$returns.message
         	}
         }
 

charts/vela-core/templates/defwithtemplate/clean-jobs.yaml

@@ -13,7 +13,7 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/kube"
         )
 
         parameter: {
@@ -21,42 +21,46 @@ spec:
         	namespace: *context.namespace | string
         }
 
-        cleanJobs: op.#Delete & {
-        	value: {
-        		apiVersion: "batch/v1"
-        		kind:       "Job"
-        		metadata: {
-        			name:      context.name
+        cleanJobs: kube.#Delete & {
+        	$params: {
+        		value: {
+        			apiVersion: "batch/v1"
+        			kind:       "Job"
+        			metadata: {
+        				name:      context.name
+        				namespace: parameter.namespace
+        			}
+        		}
+        		filter: {
         			namespace: parameter.namespace
-        		}
-        	}
-        	filter: {
-        		namespace: parameter.namespace
-        		if parameter.labelselector != _|_ {
-        			matchingLabels: parameter.labelselector
-        		}
-        		if parameter.labelselector == _|_ {
-        			matchingLabels: "workflow.oam.dev/name": context.name
+        			if parameter.labelselector != _|_ {
+        				matchingLabels: parameter.labelselector
+        			}
+        			if parameter.labelselector == _|_ {
+        				matchingLabels: "workflow.oam.dev/name": context.name
+        			}
         		}
         	}
         }
 
-        cleanPods: op.#Delete & {
-        	value: {
-        		apiVersion: "v1"
-        		kind:       "pod"
-        		metadata: {
-        			name:      context.name
+        cleanPods: kube.#Delete & {
+        	$params: {
+        		value: {
+        			apiVersion: "v1"
+        			kind:       "pod"
+        			metadata: {
+        				name:      context.name
+        				namespace: parameter.namespace
+        			}
+        		}
+        		filter: {
         			namespace: parameter.namespace
-        		}
-        	}
-        	filter: {
-        		namespace: parameter.namespace
-        		if parameter.labelselector != _|_ {
-        			matchingLabels: parameter.labelselector
-        		}
-        		if parameter.labelselector == _|_ {
-        			matchingLabels: "workflow.oam.dev/name": context.name
+        			if parameter.labelselector != _|_ {
+        				matchingLabels: parameter.labelselector
+        			}
+        			if parameter.labelselector == _|_ {
+        				matchingLabels: "workflow.oam.dev/name": context.name
+        			}
         		}
         	}
         }

charts/vela-core/templates/defwithtemplate/collect-service-endpoints.yaml

@@ -13,36 +13,30 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
-        	"vela/ql"
+        	"vela/builtin"
+        	"vela/query"
         	"strconv"
         )
 
-        collect: ql.#CollectServiceEndpoints & {
-        	app: {
-        		name:      *context.name | string
-        		namespace: *context.namespace | string
-        		if parameter.name != _|_ {
-        			name: parameter.name
-        		}
-        		if parameter.namespace != _|_ {
-        			namespace: parameter.namespace
-        		}
+        collect: query.#CollectServiceEndpoints & {
+        	$params: app: {
+        		name:      parameter.name
+        		namespace: parameter.namespace
         		filter: {
         			if parameter.components != _|_ {
         				components: parameter.components
         			}
         		}
         	}
-        } @step(1)
+        }
 
         outputs: {
         	eps_port_name_filtered: *[] | [...]
         	if parameter.portName == _|_ {
-        		eps_port_name_filtered: collect.list
+        		eps_port_name_filtered: collect.$returns.list
         	}
         	if parameter.portName != _|_ {
-        		eps_port_name_filtered: [ for ep in collect.list if parameter.portName == ep.endpoint.portName {ep}]
+        		eps_port_name_filtered: [for ep in collect.$returns.list if parameter.portName == ep.endpoint.portName {ep}]
         	}
 
         	eps_port_filtered: *[] | [...]
@@ -50,12 +44,12 @@ spec:
         		eps_port_filtered: eps_port_name_filtered
         	}
         	if parameter.port != _|_ {
-        		eps_port_filtered: [ for ep in eps_port_name_filtered if parameter.port == ep.endpoint.port {ep}]
+        		eps_port_filtered: [for ep in eps_port_name_filtered if parameter.port == ep.endpoint.port {ep}]
         	}
-        	eps:       eps_port_filtered
+        	eps: eps_port_filtered
         	endpoints: *[] | [...]
         	if parameter.outer != _|_ {
-        		tmps: [ for ep in eps {
+        		tmps: [for ep in eps {
         			ep
         			if ep.endpoint.inner == _|_ {
         				outer: true
@@ -64,16 +58,16 @@ spec:
         				outer: !ep.endpoint.inner
         			}
         		}]
-        		endpoints: [ for ep in tmps if (!parameter.outer || ep.outer) {ep}]
+        		endpoints: [for ep in tmps if (!parameter.outer || ep.outer) {ep}]
         	}
         	if parameter.outer == _|_ {
         		endpoints: eps_port_filtered
         	}
         }
 
-        wait: op.#ConditionalWait & {
-        	continue: len(outputs.endpoints) > 0
-        } @step(2)
+        wait: builtin.#ConditionalWait & {
+        	$params: continue: len(outputs.endpoints) > 0
+        }
 
         value: {
         	if len(outputs.endpoints) > 0 {
@@ -85,9 +79,9 @@ spec:
 
         parameter: {
         	// +usage=Specify the name of the application
-        	name?: string
+        	name: *context.name | string
         	// +usage=Specify the namespace of the application
-        	namespace?: string
+        	namespace: *context.namespace | string
         	// +usage=Filter the component of the endpoints
         	components?: [...string]
         	// +usage=Filter the port of the endpoints

charts/vela-core/templates/defwithtemplate/command.yaml

@@ -32,7 +32,7 @@ spec:
         	_params:         #PatchParams
         	name:            _params.containerName
         	_baseContainers: context.output.spec.template.spec.containers
-        	_matchContainers_: [ for _container_ in _baseContainers if _container_.name == name {_container_}]
+        	_matchContainers_: [for _container_ in _baseContainers if _container_.name == name {_container_}]
         	_baseContainer: *_|_ | {...}
         	if len(_matchContainers_) == 0 {
         		err: "container \(name) not found"
@@ -73,7 +73,7 @@ spec:
         		}
 
         		// +patchStrategy=replace
-        		args: [ for a in _args if _delArgs[a] == _|_ {a}] + [ for a in _addArgs if _delArgs[a] == _|_ && _argsMap[a] == _|_ {a}]
+        		args: [for a in _args if _delArgs[a] == _|_ {a}] + [for a in _addArgs if _delArgs[a] == _|_ && _argsMap[a] == _|_ {a}]
         	}
         }
         // +patchStrategy=open
@@ -97,7 +97,7 @@ spec:
         	}
         	if parameter.containers != _|_ {
         		// +patchKey=name
-        		containers: [ for c in parameter.containers {
+        		containers: [for c in parameter.containers {
         			if c.containerName == "" {
         				err: "container name must be set for containers"
         			}
@@ -113,5 +113,5 @@ spec:
         	containers: [...#PatchParams]
         })
 
-        errs: [ for c in patch.spec.template.spec.containers if c.err != _|_ {c.err}]
+        errs: [for c in patch.spec.template.spec.containers if c.err != _|_ {c.err}]
 

charts/vela-core/templates/defwithtemplate/container-image.yaml

@@ -29,7 +29,7 @@ spec:
         	_params:         #PatchParams
         	name:            _params.containerName
         	_baseContainers: context.output.spec.template.spec.containers
-        	_matchContainers_: [ for _container_ in _baseContainers if _container_.name == name {_container_}]
+        	_matchContainers_: [for _container_ in _baseContainers if _container_.name == name {_container_}]
         	_baseContainer: *_|_ | {...}
         	if len(_matchContainers_) == 0 {
         		err: "container \(name) not found"
@@ -62,7 +62,7 @@ spec:
         	}
         	if parameter.containers != _|_ {
         		// +patchKey=name
-        		containers: [ for c in parameter.containers {
+        		containers: [for c in parameter.containers {
         			if c.containerName == "" {
         				err: "containerName must be set for containers"
         			}
@@ -78,5 +78,5 @@ spec:
         	containers: [...#PatchParams]
         })
 
-        errs: [ for c in patch.spec.template.spec.containers if c.err != _|_ {c.err}]
+        errs: [for c in patch.spec.template.spec.containers if c.err != _|_ {c.err}]
 

charts/vela-core/templates/defwithtemplate/container-ports.yaml

@@ -42,7 +42,7 @@ spec:
         	_params:         #PatchParams
         	name:            _params.containerName
         	_baseContainers: context.output.spec.template.spec.containers
-        	_matchContainers_: [ for _container_ in _baseContainers if _container_.name == name {_container_}]
+        	_matchContainers_: [for _container_ in _baseContainers if _container_.name == name {_container_}]
         	_baseContainer: *_|_ | {...}
         	if len(_matchContainers_) == 0 {
         		err: "container \(name) not found"
@@ -52,7 +52,7 @@ spec:
         		_basePorts:     _baseContainer.ports
         		if _basePorts == _|_ {
         			// +patchStrategy=replace
-        			ports: [ for port in _params.ports {
+        			ports: [for port in _params.ports {
         				containerPort: port.containerPort
         				protocol:      port.protocol
         				if port.hostPort != _|_ {
@@ -67,7 +67,7 @@ spec:
         			_basePortsMap: {for _basePort in _basePorts {(strings.ToLower(_basePort.protocol) + strconv.FormatInt(_basePort.containerPort, 10)): _basePort}}
         			_portsMap: {for port in _params.ports {(strings.ToLower(port.protocol) + strconv.FormatInt(port.containerPort, 10)): port}}
         			// +patchStrategy=replace
-        			ports: [ for portVar in _basePorts {
+        			ports: [for portVar in _basePorts {
         				containerPort: portVar.containerPort
         				protocol:      portVar.protocol
         				name:          portVar.name
@@ -80,7 +80,7 @@ spec:
         						hostIP: _portsMap[_uniqueKey].hostIP
         					}
         				}
-        			}] + [ for port in _params.ports if _basePortsMap[strings.ToLower(port.protocol)+strconv.FormatInt(port.containerPort, 10)] == _|_ {
+        			}] + [for port in _params.ports if _basePortsMap[strings.ToLower(port.protocol)+strconv.FormatInt(port.containerPort, 10)] == _|_ {
         				if port.containerPort != _|_ {
         					containerPort: port.containerPort
         				}
@@ -115,7 +115,7 @@ spec:
         	}
         	if parameter.containers != _|_ {
         		// +patchKey=name
-        		containers: [ for c in parameter.containers {
+        		containers: [for c in parameter.containers {
         			if c.containerName == "" {
         				err: "container name must be set for containers"
         			}
@@ -131,5 +131,5 @@ spec:
         	containers: [...#PatchParams]
         })
 
-        errs: [ for c in patch.spec.template.spec.containers if c.err != _|_ {c.err}]
+        errs: [for c in patch.spec.template.spec.containers if c.err != _|_ {c.err}]
 

charts/vela-core/templates/defwithtemplate/create-config.yaml

@@ -13,28 +13,18 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/config"
         )
 
-        deploy: op.#CreateConfig & {
-        	name: parameter.name
-        	if parameter.namespace != _|_ {
-        		namespace: parameter.namespace
-        	}
-        	if parameter.namespace == _|_ {
-        		namespace: context.namespace
-        	}
-        	if parameter.template != _|_ {
-        		template: parameter.template
-        	}
-        	config: parameter.config
+        deploy: config.#CreateConfig & {
+        	$params: parameter
         }
         parameter: {
         	//+usage=Specify the name of the config.
         	name: string
 
         	//+usage=Specify the namespace of the config.
-        	namespace?: string
+        	namespace: *context.namespace | string
 
         	//+usage=Specify the template of the config.
         	template?: string

charts/vela-core/templates/defwithtemplate/cron-task.yaml

@@ -25,7 +25,7 @@ spec:
         	] | []
 
         	configMap: *[
-        			for v in parameter.volumeMounts.configMap {
+        		for v in parameter.volumeMounts.configMap {
         			{
         				mountPath: v.mountPath
         				if v.subPath != _|_ {
@@ -49,7 +49,7 @@ spec:
         	] | []
 
         	emptyDir: *[
-        			for v in parameter.volumeMounts.emptyDir {
+        		for v in parameter.volumeMounts.emptyDir {
         			{
         				mountPath: v.mountPath
         				if v.subPath != _|_ {
@@ -61,7 +61,7 @@ spec:
         	] | []
 
         	hostPath: *[
-        			for v in parameter.volumeMounts.hostPath {
+        		for v in parameter.volumeMounts.hostPath {
         			{
         				mountPath: v.mountPath
         				if v.subPath != _|_ {
@@ -83,7 +83,7 @@ spec:
         	] | []
 
         	configMap: *[
-        			for v in parameter.volumeMounts.configMap {
+        		for v in parameter.volumeMounts.configMap {
         			{
         				name: v.name
         				configMap: {
@@ -113,7 +113,7 @@ spec:
         	] | []
 
         	emptyDir: *[
-        			for v in parameter.volumeMounts.emptyDir {
+        		for v in parameter.volumeMounts.emptyDir {
         			{
         				name: v.name
         				emptyDir: medium: v.medium
@@ -122,7 +122,7 @@ spec:
         	] | []
 
         	hostPath: *[
-        			for v in parameter.volumeMounts.hostPath {
+        		for v in parameter.volumeMounts.hostPath {
         			{
         				name: v.name
         				hostPath: path: v.path
@@ -223,7 +223,7 @@ spec:
         								}
         							}
         							if parameter["volumes"] != _|_ if parameter["volumeMounts"] == _|_ {
-        								volumeMounts: [ for v in parameter.volumes {
+        								volumeMounts: [for v in parameter.volumes {
         									{
         										mountPath: v.mountPath
         										name:      v.name
@@ -234,7 +234,7 @@ spec:
         							}
         						}]
         						if parameter["volumes"] != _|_ if parameter["volumeMounts"] == _|_ {
-        							volumes: [ for v in parameter.volumes {
+        							volumes: [for v in parameter.volumes {
         								{
         									name: v.name
         									if v.type == "pvc" {
@@ -267,13 +267,13 @@ spec:
         							volumes: deDupVolumesArray
         						}
         						if parameter["imagePullSecrets"] != _|_ {
-        							imagePullSecrets: [ for v in parameter.imagePullSecrets {
+        							imagePullSecrets: [for v in parameter.imagePullSecrets {
         								name: v
         							},
         							]
         						}
         						if parameter.hostAliases != _|_ {
-        							hostAliases: [ for v in parameter.hostAliases {
+        							hostAliases: [for v in parameter.hostAliases {
         								ip:        v.ip
         								hostnames: v.hostnames
         							},

charts/vela-core/templates/defwithtemplate/daemon.yaml

@@ -162,7 +162,7 @@ spec:
         						}]
         					}
         					if parameter["ports"] != _|_ {
-        						ports: [ for v in parameter.ports {
+        						ports: [for v in parameter.ports {
         							{
         								containerPort: v.port
         								protocol:      v.protocol
@@ -206,7 +206,7 @@ spec:
         					}
 
         					if parameter["volumes"] != _|_ && parameter["volumeMounts"] == _|_ {
-        						volumeMounts: [ for v in parameter.volumes {
+        						volumeMounts: [for v in parameter.volumes {
         							{
         								mountPath: v.mountPath
         								name:      v.name
@@ -233,14 +233,14 @@ spec:
         				}
 
         				if parameter["imagePullSecrets"] != _|_ {
-        					imagePullSecrets: [ for v in parameter.imagePullSecrets {
+        					imagePullSecrets: [for v in parameter.imagePullSecrets {
         						name: v
         					},
         					]
         				}
 
         				if parameter["volumes"] != _|_ && parameter["volumeMounts"] == _|_ {
-        					volumes: [ for v in parameter.volumes {
+        					volumes: [for v in parameter.volumes {
         						{
         							name: v.name
         							if v.type == "pvc" {

charts/vela-core/templates/defwithtemplate/delete-config.yaml

@@ -13,23 +13,17 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/config"
         )
 
-        deploy: op.#DeleteConfig & {
-        	name: parameter.name
-        	if parameter.namespace != _|_ {
-        		namespace: parameter.namespace
-        	}
-        	if parameter.namespace == _|_ {
-        		namespace: context.namespace
-        	}
+        deploy: config.#DeleteConfig & {
+        	$params: parameter
         }
         parameter: {
         	//+usage=Specify the name of the config.
         	name: string
 
         	//+usage=Specify the namespace of the config.
-        	namespace?: string
+        	namespace: *context.namespace | string
         }
 

charts/vela-core/templates/defwithtemplate/depends-on-app.yaml

@@ -13,12 +13,13 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/kube"
+        	"vela/builtin"
         	"encoding/yaml"
         )
 
-        dependsOn: op.#Read & {
-        	value: {
+        dependsOn: kube.#Read & {
+        	$params: value: {
         		apiVersion: "core.oam.dev/v1beta1"
         		kind:       "Application"
         		metadata: {
@@ -27,10 +28,10 @@ spec:
         		}
         	}
         }
-        load: op.#Steps & {
-        	if dependsOn.err != _|_ {
-        		configMap: op.#Read & {
-        			value: {
+        load: {
+        	if dependsOn.$returns.err != _|_ {
+        		configMap: kube.#Read & {
+        			$params: value: {
         				apiVersion: "v1"
         				kind:       "ConfigMap"
         				metadata: {
@@ -38,19 +39,19 @@ spec:
         					namespace: parameter.namespace
         				}
         			}
-        		}         @step(1)
-        		template: configMap.value.data["application"]
-        		apply:    op.#Apply & {
-        			value: yaml.Unmarshal(template)
-        		}     @step(2)
-        		wait: op.#ConditionalWait & {
-        			continue: apply.value.status.status == "running"
-        		} @step(3)
+        		}
+        		template: configMap.$returns.value.data["application"]
+        		apply: kube.#Apply & {
+        			$params: value: yaml.Unmarshal(template)
+        		}
+        		wait: builtin.#ConditionalWait & {
+        			$params: continue: apply.$returns.value.status.status == "running"
+        		}
         	}
 
-        	if dependsOn.err == _|_ {
-        		wait: op.#ConditionalWait & {
-        			continue: dependsOn.value.status.status == "running"
+        	if dependsOn.$returns.err == _|_ {
+        		wait: builtin.#ConditionalWait & {
+        			$params: continue: dependsOn.$returns.value.status.status == "running"
         		}
         	}
         }

charts/vela-core/templates/defwithtemplate/deploy.yaml

@@ -15,16 +15,19 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/multicluster"
+        	"vela/builtin"
         )
 
         if parameter.auto == false {
-        	suspend: op.#Suspend & {message: "Waiting approval to the deploy step \"\(context.stepName)\""}
+        	suspend: builtin.#Suspend & {$params: message: "Waiting approval to the deploy step \"\(context.stepName)\""}
         }
-        deploy: op.#Deploy & {
-        	policies:                 parameter.policies
-        	parallelism:              parameter.parallelism
-        	ignoreTerraformComponent: parameter.ignoreTerraformComponent
+        deploy: multicluster.#Deploy & {
+        	$params: {
+        		policies:                 parameter.policies
+        		parallelism:              parameter.parallelism
+        		ignoreTerraformComponent: parameter.ignoreTerraformComponent
+        	}
         }
         parameter: {
         	//+usage=If set to false, the workflow will suspend automatically before this step, default to be true.

charts/vela-core/templates/defwithtemplate/env.yaml

@@ -31,7 +31,7 @@ spec:
         	name:    _params.containerName
         	_delKeys: {for k in _params.unset {(k): ""}}
         	_baseContainers: context.output.spec.template.spec.containers
-        	_matchContainers_: [ for _container_ in _baseContainers if _container_.name == name {_container_}]
+        	_matchContainers_: [for _container_ in _baseContainers if _container_.name == name {_container_}]
         	_baseContainer: *_|_ | {...}
         	if len(_matchContainers_) == 0 {
         		err: "container \(name) not found"
@@ -41,7 +41,7 @@ spec:
         		_baseEnv:       _baseContainer.env
         		if _baseEnv == _|_ {
         			// +patchStrategy=replace
-        			env: [ for k, v in _params.env if _delKeys[k] == _|_ {
+        			env: [for k, v in _params.env if _delKeys[k] == _|_ {
         				name:  k
         				value: v
         			}]
@@ -49,7 +49,7 @@ spec:
         		if _baseEnv != _|_ {
         			_baseEnvMap: {for envVar in _baseEnv {(envVar.name): envVar}}
         			// +patchStrategy=replace
-        			env: [ for envVar in _baseEnv if _delKeys[envVar.name] == _|_ && !_params.replace {
+        			env: [for envVar in _baseEnv if _delKeys[envVar.name] == _|_ && !_params.replace {
         				name: envVar.name
         				if _params.env[envVar.name] != _|_ {
         					value: _params.env[envVar.name]
@@ -62,7 +62,7 @@ spec:
         						valueFrom: envVar.valueFrom
         					}
         				}
-        			}] + [ for k, v in _params.env if _delKeys[k] == _|_ && (_params.replace || _baseEnvMap[k] == _|_) {
+        			}] + [for k, v in _params.env if _delKeys[k] == _|_ && (_params.replace || _baseEnvMap[k] == _|_) {
         				name:  k
         				value: v
         			}]
@@ -88,7 +88,7 @@ spec:
         	}
         	if parameter.containers != _|_ {
         		// +patchKey=name
-        		containers: [ for c in parameter.containers {
+        		containers: [for c in parameter.containers {
         			if c.containerName == "" {
         				err: "containerName must be set for containers"
         			}
@@ -104,5 +104,5 @@ spec:
         	containers: [...#PatchParams]
         })
 
-        errs: [ for c in patch.spec.template.spec.containers if c.err != _|_ {c.err}]
+        errs: [for c in patch.spec.template.spec.containers if c.err != _|_ {c.err}]
 

charts/vela-core/templates/defwithtemplate/export-data.yaml

@@ -16,6 +16,7 @@ spec:
       template: |
         import (
         	"vela/op"
+        	"vela/kube"
         )
 
         object: {
@@ -37,23 +38,25 @@ spec:
         	if parameter.kind == "Secret" {
         		stringData: parameter.data
         	}
-        } @step(1)
+        }
 
         getPlacements: op.#GetPlacementsFromTopologyPolicies & {
         	policies: *[] | [...string]
         	if parameter.topology != _|_ {
         		policies: [parameter.topology]
         	}
-        } @step(2)
+        }
 
-        apply: op.#Steps & {
+        apply: {
         	for p in getPlacements.placements {
-        		(p.cluster): op.#Apply & {
-        			value:   object
-        			cluster: p.cluster
+        		(p.cluster): kube.#Apply & {
+        			$params: {
+        				value:   object
+        				cluster: p.cluster
+        			}
         		}
         	}
-        } @step(3)
+        }
 
         parameter: {
         	// +usage=Specify the name of the export destination

charts/vela-core/templates/defwithtemplate/export-service.yaml

@@ -16,6 +16,7 @@ spec:
       template: |
         import (
         	"vela/op"
+        	"vela/kube"
         )
 
         meta: {
@@ -48,25 +49,27 @@ spec:
         		addresses: [{ip: parameter.ip}]
         		ports: [{port: parameter.targetPort}]
         	}]
-        }] @step(1)
+        }]
 
         getPlacements: op.#GetPlacementsFromTopologyPolicies & {
         	policies: *[] | [...string]
         	if parameter.topology != _|_ {
         		policies: [parameter.topology]
         	}
-        } @step(2)
+        }
 
-        apply: op.#Steps & {
+        apply: {
         	for p in getPlacements.placements {
         		for o in objects {
-        			"\(p.cluster)-\(o.kind)": op.#Apply & {
-        				value:   o
-        				cluster: p.cluster
+        			"\(p.cluster)-\(o.kind)": kube.#Apply & {
+        				$params: {
+        					value:   o
+        					cluster: p.cluster
+        				}
         			}
         		}
         	}
-        } @step(3)
+        }
 
         parameter: {
         	// +usage=Specify the name of the export destination

charts/vela-core/templates/defwithtemplate/export2config.yaml

@@ -13,25 +13,27 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/kube"
         )
 
-        apply: op.#Apply & {
-        	value: {
-        		apiVersion: "v1"
-        		kind:       "ConfigMap"
-        		metadata: {
-        			name: parameter.configName
-        			if parameter.namespace != _|_ {
-        				namespace: parameter.namespace
-        			}
-        			if parameter.namespace == _|_ {
-        				namespace: context.namespace
+        apply: kube.#Apply & {
+        	$params: {
+        		value: {
+        			apiVersion: "v1"
+        			kind:       "ConfigMap"
+        			metadata: {
+        				name: parameter.configName
+        				if parameter.namespace != _|_ {
+        					namespace: parameter.namespace
+        				}
+        				if parameter.namespace == _|_ {
+        					namespace: context.namespace
+        				}
         			}
+        			data: parameter.data
         		}
-        		data: parameter.data
+        		cluster: parameter.cluster
         	}
-        	cluster: parameter.cluster
         }
         parameter: {
         	// +usage=Specify the name of the config map

charts/vela-core/templates/defwithtemplate/export2secret.yaml

@@ -13,12 +13,12 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/kube"
         	"encoding/base64"
         	"encoding/json"
         )
 
-        secret: op.#Steps & {
+        secret: {
         	data: *parameter.data | {}
         	if parameter.kind == "docker-registry" && parameter.dockerRegistry != _|_ {
         		registryData: auths: "\(parameter.dockerRegistry.server)": {
@@ -28,28 +28,30 @@ spec:
         		}
         		data: ".dockerconfigjson": json.Marshal(registryData)
         	}
-        	apply: op.#Apply & {
-        		value: {
-        			apiVersion: "v1"
-        			kind:       "Secret"
-        			if parameter.type == _|_ && parameter.kind == "docker-registry" {
-        				type: "kubernetes.io/dockerconfigjson"
-        			}
-        			if parameter.type != _|_ {
-        				type: parameter.type
-        			}
-        			metadata: {
-        				name: parameter.secretName
-        				if parameter.namespace != _|_ {
-        					namespace: parameter.namespace
+        	apply: kube.#Apply & {
+        		$params: {
+        			value: {
+        				apiVersion: "v1"
+        				kind:       "Secret"
+        				if parameter.type == _|_ && parameter.kind == "docker-registry" {
+        					type: "kubernetes.io/dockerconfigjson"
         				}
-        				if parameter.namespace == _|_ {
-        					namespace: context.namespace
+        				if parameter.type != _|_ {
+        					type: parameter.type
         				}
+        				metadata: {
+        					name: parameter.secretName
+        					if parameter.namespace != _|_ {
+        						namespace: parameter.namespace
+        					}
+        					if parameter.namespace == _|_ {
+        						namespace: context.namespace
+        					}
+        				}
+        				stringData: data
         			}
-        			stringData: data
+        			cluster: parameter.cluster
         		}
-        		cluster: parameter.cluster
         	}
         }
         parameter: {

charts/vela-core/templates/defwithtemplate/expose.yaml

@@ -44,7 +44,7 @@ spec:
         			]
         		}
         		if parameter["ports"] != _|_ {
-        			ports: [ for v in parameter.ports {
+        			ports: [for v in parameter.ports {
         				port:       v.port
         				targetPort: v.port
         				if v.name != _|_ {

charts/vela-core/templates/defwithtemplate/gateway.yaml

@@ -161,11 +161,11 @@ spec:
       }
       let ingressMetaName = context.name + nameSuffix
       let ig  = [for i in context.outputs if (i.kind == "Ingress") && (i.metadata.name == ingressMetaName) {i}][0]
-      igs: *null | string
+      igs: *{} | {}
       if ig != _|_ if ig.status != _|_ if ig.status.loadbalancer != _|_ {
         igs: ig.status.loadbalancer.ingress[0]
       }
-      igr: *null | string
+      igr: *{} | {}
       if ig != _|_ if ig.spec != _|_  {
         igr: ig.spec.rules[0]
       }
@@ -185,7 +185,7 @@ spec:
           if igr.host != _|_ {
             message: "Visiting URL: " + igr.host + "\n"
           }
-          if igs.host == _|_ {
+          if igr.host == _|_ {
             message: "Host not specified, visit the cluster or load balancer in front of the cluster\n"
           }
         }

charts/vela-core/templates/defwithtemplate/generate-jdbc-connection.yaml

@@ -13,12 +13,13 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/kube"
+        	"vela/util"
         	"encoding/base64"
         )
 
-        output: op.#Read & {
-        	value: {
+        output: kube.#Read & {
+        	$params: value: {
         		apiVersion: "v1"
         		kind:       "Secret"
         		metadata: {
@@ -29,16 +30,16 @@ spec:
         		}
         	}
         }
-        dbHost:   op.#ConvertString & {bt: base64.Decode(null, output.value.data["DB_HOST"])}
-        dbPort:   op.#ConvertString & {bt: base64.Decode(null, output.value.data["DB_PORT"])}
-        dbName:   op.#ConvertString & {bt: base64.Decode(null, output.value.data["DB_NAME"])}
-        username: op.#ConvertString & {bt: base64.Decode(null, output.value.data["DB_USER"])}
-        password: op.#ConvertString & {bt: base64.Decode(null, output.value.data["DB_PASSWORD"])}
+        dbHost: util.#ConvertString & {$params: bt: base64.Decode(null, output.$returns.value.data["DB_HOST"])}
+        dbPort: util.#ConvertString & {$params: bt: base64.Decode(null, output.$returns.value.data["DB_PORT"])}
+        dbName: util.#ConvertString & {$params: bt: base64.Decode(null, output.$returns.value.data["DB_NAME"])}
+        username: util.#ConvertString & {$params: bt: base64.Decode(null, output.$returns.value.data["DB_USER"])}
+        password: util.#ConvertString & {$params: bt: base64.Decode(null, output.$returns.value.data["DB_PASSWORD"])}
 
         env: [
-        	{name: "url", value:      "jdbc://" + dbHost.str + ":" + dbPort.str + "/" + dbName.str + "?characterEncoding=utf8&useSSL=false"},
-        	{name: "username", value: username.str},
-        	{name: "password", value: password.str},
+        	{name: "url", value: "jdbc://" + dbHost.$returns.str + ":" + dbPort.$returns.str + "/" + dbName.$returns.str + "?characterEncoding=utf8&useSSL=false"},
+        	{name: "username", value: username.$returns.str},
+        	{name: "password", value: password.$returns.str},
         ]
 
         parameter: {

charts/vela-core/templates/defwithtemplate/list-config.yaml

@@ -13,22 +13,16 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/config"
         )
 
-        output: op.#ListConfig & {
-        	if parameter.namespace != _|_ {
-        		namespace: parameter.namespace
-        	}
-        	if parameter.namespace == _|_ {
-        		namespace: context.namespace
-        	}
-        	template: parameter.template
+        output: config.#ListConfig & {
+        	$params: parameter
         }
         parameter: {
         	//+usage=Specify the template of the config.
         	template: string
         	//+usage=Specify the namespace of the config.
-        	namespace?: string
+        	namespace: *context.namespace | string
         }
 

charts/vela-core/templates/defwithtemplate/nocalhost.yaml

@@ -42,7 +42,7 @@ spec:
         patch: metadata: annotations: {
         	"dev.nocalhost/application-name":      context.appName
         	"dev.nocalhost/application-namespace": context.namespace
-        	"dev.nocalhost":                       json.Marshal({
+        	"dev.nocalhost": json.Marshal({
         		name:        context.name
         		serviceType: parameter.serviceType
         		containers: [
@@ -126,14 +126,14 @@ spec:
         	workDir:       *"/home/nocalhost-dev" | string
         	storageClass?: string
         	command: {
-        		run:   *["sh", "run.sh"] | [...string]
+        		run: *["sh", "run.sh"] | [...string]
         		debug: *["sh", "debug.sh"] | [...string]
         	}
         	debug?: remoteDebugPort?: int
         	hotReload: *true | bool
         	sync: {
-        		type:              *"send" | string
-        		filePattern:       *["./"] | [...string]
+        		type: *"send" | string
+        		filePattern: *["./"] | [...string]
         		ignoreFilePattern: *[".git", ".vscode", ".idea", ".gradle", "build"] | [...string]
         	}
         	env?: [...{

charts/vela-core/templates/defwithtemplate/notification.yaml

@@ -13,8 +13,12 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/http"
+        	"vela/email"
+        	"vela/kube"
+        	"vela/util"
         	"encoding/base64"
+        	"encoding/json"
         )
 
         parameter: {
@@ -69,7 +73,7 @@ spec:
         				picUrl?:     string
         			}
 
-        			link?:     #link
+        			link?: #link
         			markdown?: close({
         				text:  string
         				title: string
@@ -209,17 +213,23 @@ spec:
         }
 
         // send webhook notification
-        ding: op.#Steps & {
+        ding: {
         	if parameter.dingding != _|_ {
         		if parameter.dingding.url.value != _|_ {
-        			ding1: op.#DingTalk & {
-        				message: parameter.dingding.message
-        				dingUrl: parameter.dingding.url.value
+        			ding1: http.#Do & {
+        				$params: {
+        					method: "POST"
+        					url:    parameter.dingding.url.value
+        					request: {
+        						body: json.Marshal(parameter.dingding.message)
+        						header: "Content-Type": "application/json"
+        					}
+        				}
         			}
         		}
         		if parameter.dingding.url.secretRef != _|_ && parameter.dingding.url.value == _|_ {
-        			read: op.#Read & {
-        				value: {
+        			read: kube.#Read & {
+        				$params: value: {
         					apiVersion: "v1"
         					kind:       "Secret"
         					metadata: {
@@ -229,26 +239,38 @@ spec:
         				}
         			}
 
-        			stringValue: op.#ConvertString & {bt: base64.Decode(null, read.value.data[parameter.dingding.url.secretRef.key])}
-        			ding2:       op.#DingTalk & {
-        				message: parameter.dingding.message
-        				dingUrl: stringValue.str
+        			stringValue: util.#ConvertString & {$params: bt: base64.Decode(null, read.$returns.value.data[parameter.dingding.url.secretRef.key])}
+        			ding2: http.#Do & {
+        				$params: {
+        					method: "POST"
+        					url:    stringValue.$returns.str
+        					request: {
+        						body: json.Marshal(parameter.dingding.message)
+        						header: "Content-Type": "application/json"
+        					}
+        				}
         			}
         		}
         	}
         }
 
-        lark: op.#Steps & {
+        lark: {
         	if parameter.lark != _|_ {
         		if parameter.lark.url.value != _|_ {
-        			lark1: op.#Lark & {
-        				message: parameter.lark.message
-        				larkUrl: parameter.lark.url.value
+        			lark1: http.#Do & {
+        				$params: {
+        					method: "POST"
+        					url:    parameter.lark.message
+        					request: {
+        						body: json.Marshal(parameter.lark.message)
+        						header: "Content-Type": "application/json"
+        					}
+        				}
         			}
         		}
         		if parameter.lark.url.secretRef != _|_ && parameter.lark.url.value == _|_ {
-        			read: op.#Read & {
-        				value: {
+        			read: kube.#Read & {
+        				$params: value: {
         					apiVersion: "v1"
         					kind:       "Secret"
         					metadata: {
@@ -258,26 +280,39 @@ spec:
         				}
         			}
 
-        			stringValue: op.#ConvertString & {bt: base64.Decode(null, read.value.data[parameter.lark.url.secretRef.key])}
-        			lark2:       op.#Lark & {
-        				message: parameter.lark.message
-        				larkUrl: stringValue.str
+        			stringValue: util.#ConvertString & {$params: bt: base64.Decode(null, read.$returns.value.data[parameter.lark.url.secretRef.key])}
+        			lark2: http.#Do & {
+        				$params: {
+        					method: "POST"
+        					url:    stringValue.$returns.str
+        					request: {
+        						body: json.Marshal(parameter.lark.message)
+        						header: "Content-Type": "application/json"
+        					}
+        				}
         			}
+
         		}
         	}
         }
 
-        slack: op.#Steps & {
+        slack: {
         	if parameter.slack != _|_ {
         		if parameter.slack.url.value != _|_ {
-        			slack1: op.#Slack & {
-        				message:  parameter.slack.message
-        				slackUrl: parameter.slack.url.value
+        			slack1: http.#Do & {
+        				$params: {
+        					method: "POST"
+        					url:    parameter.slack.url.value
+        					request: {
+        						body: json.Marshal(parameter.slack.message)
+        						header: "Content-Type": "application/json"
+        					}
+        				}
         			}
         		}
         		if parameter.slack.url.secretRef != _|_ && parameter.slack.url.value == _|_ {
-        			read: op.#Read & {
-        				value: {
+        			read: kube.#Read & {
+        				$params: value: {
         					kind:       "Secret"
         					apiVersion: "v1"
         					metadata: {
@@ -287,36 +322,44 @@ spec:
         				}
         			}
 
-        			stringValue: op.#ConvertString & {bt: base64.Decode(null, read.value.data[parameter.slack.url.secretRef.key])}
-        			slack2:      op.#Slack & {
-        				message:  parameter.slack.message
-        				slackUrl: stringValue.str
+        			stringValue: util.#ConvertString & {$params: bt: base64.Decode(null, read.$returns.value.data[parameter.slack.url.secretRef.key])}
+        			slack2: http.#Do & {
+        				$params: {
+        					method: "POST"
+        					url:    stringValue.$returns.str
+        					request: {
+        						body: json.Marshal(parameter.slack.message)
+        						header: "Content-Type": "application/json"
+        					}
+        				}
         			}
         		}
         	}
         }
 
-        email: op.#Steps & {
+        email0: {
         	if parameter.email != _|_ {
         		if parameter.email.from.password.value != _|_ {
-        			email1: op.#SendEmail & {
-        				from: {
-        					address: parameter.email.from.address
-        					if parameter.email.from.alias != _|_ {
-        						alias: parameter.email.from.alias
+        			email1: email.#SendEmail & {
+        				$params: {
+        					from: {
+        						address: parameter.email.from.address
+        						if parameter.email.from.alias != _|_ {
+        							alias: parameter.email.from.alias
+        						}
+        						password: parameter.email.from.password.value
+        						host:     parameter.email.from.host
+        						port:     parameter.email.from.port
         					}
-        					password: parameter.email.from.password.value
-        					host:     parameter.email.from.host
-        					port:     parameter.email.from.port
+        					to:      parameter.email.to
+        					content: parameter.email.content
         				}
-        				to:      parameter.email.to
-        				content: parameter.email.content
         			}
         		}
 
         		if parameter.email.from.password.secretRef != _|_ && parameter.email.from.password.value == _|_ {
-        			read: op.#Read & {
-        				value: {
+        			read: kube.#Read & {
+        				$params: value: {
         					kind:       "Secret"
         					apiVersion: "v1"
         					metadata: {
@@ -326,19 +369,21 @@ spec:
         				}
         			}
 
-        			stringValue: op.#ConvertString & {bt: base64.Decode(null, read.value.data[parameter.email.from.password.secretRef.key])}
-        			email2:      op.#SendEmail & {
-        				from: {
-        					address: parameter.email.from.address
-        					if parameter.email.from.alias != _|_ {
-        						alias: parameter.email.from.alias
+        			stringValue: util.#ConvertString & {$params: bt: base64.Decode(null, read.$returns.value.data[parameter.email.from.password.secretRef.key])}
+        			email2: email.#SendEmail & {
+        				$params: {
+        					from: {
+        						address: parameter.email.from.address
+        						if parameter.email.from.alias != _|_ {
+        							alias: parameter.email.from.alias
+        						}
+        						password: stringValue.str
+        						host:     parameter.email.from.host
+        						port:     parameter.email.from.port
         					}
-        					password: stringValue.str
-        					host:     parameter.email.from.host
-        					port:     parameter.email.from.port
+        					to:      parameter.email.to
+        					content: parameter.email.content
         				}
-        				to:      parameter.email.to
-        				content: parameter.email.content
         			}
         		}
         	}

charts/vela-core/templates/defwithtemplate/print-message-in-status.yaml

@@ -13,12 +13,12 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/builtin"
         )
 
         parameter: message: string
 
-        msg: op.#Message & {
-        	message: parameter.message
+        msg: builtin.#Message & {
+        	$params: parameter
         }
 

charts/vela-core/templates/defwithtemplate/read-config.yaml

@@ -13,23 +13,17 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/config"
         )
 
-        output: op.#ReadConfig & {
-        	name: parameter.name
-        	if parameter.namespace != _|_ {
-        		namespace: parameter.namespace
-        	}
-        	if parameter.namespace == _|_ {
-        		namespace: context.namespace
-        	}
+        output: config.#ReadConfig & {
+        	$params: parameter
         }
         parameter: {
         	//+usage=Specify the name of the config.
         	name: string
 
         	//+usage=Specify the namespace of the config.
-        	namespace?: string
+        	namespace: *context.namespace | string
         }
 

charts/vela-core/templates/defwithtemplate/read-object.yaml

@@ -13,50 +13,31 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/kube"
         )
 
-        output: {
-        	if parameter.apiVersion == _|_ && parameter.kind == _|_ {
-        		op.#Read & {
-        			value: {
-        				apiVersion: "core.oam.dev/v1beta1"
-        				kind:       "Application"
-        				metadata: {
-        					name: parameter.name
-        					if parameter.namespace != _|_ {
-        						namespace: parameter.namespace
-        					}
-        				}
+        output: kube.#Read & {
+        	$params: {
+        		cluster: parameter.cluster
+        		value: {
+        			apiVersion: parameter.apiVersion
+        			kind:       parameter.kind
+        			metadata: {
+        				name:      parameter.name
+        				namespace: parameter.namespace
         			}
-        			cluster: parameter.cluster
-        		}
-        	}
-        	if parameter.apiVersion != _|_ || parameter.kind != _|_ {
-        		op.#Read & {
-        			value: {
-        				apiVersion: parameter.apiVersion
-        				kind:       parameter.kind
-        				metadata: {
-        					name: parameter.name
-        					if parameter.namespace != _|_ {
-        						namespace: parameter.namespace
-        					}
-        				}
-        			}
-        			cluster: parameter.cluster
         		}
         	}
         }
         parameter: {
         	// +usage=Specify the apiVersion of the object, defaults to 'core.oam.dev/v1beta1'
-        	apiVersion?: string
+        	apiVersion: *"core.oam.dev/v1beta1" | string
         	// +usage=Specify the kind of the object, defaults to Application
-        	kind?: string
+        	kind: *"Application" | string
         	// +usage=Specify the name of the object
         	name: string
         	// +usage=The namespace of the resource you want to read
-        	namespace?: *"default" | string
+        	namespace: *"default" | string
         	// +usage=The cluster you want to apply the resource to, default is the current control plane cluster
         	cluster: *"" | string
         }

charts/vela-core/templates/defwithtemplate/request.yaml

@@ -14,30 +14,33 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/http"
+        	"vela/builtin"
         	"encoding/json"
         )
 
-        http: op.#HTTPDo & {
-        	method: parameter.method
-        	url:    parameter.url
-        	request: {
-        		if parameter.body != _|_ {
-        			body: json.Marshal(parameter.body)
-        		}
-        		if parameter.header != _|_ {
-        			header: parameter.header
+        req: http.#HTTPDo & {
+        	$params: {
+        		method: parameter.method
+        		url:    parameter.url
+        		request: {
+        			if parameter.body != _|_ {
+        				body: json.Marshal(parameter.body)
+        			}
+        			if parameter.header != _|_ {
+        				header: parameter.header
+        			}
         		}
         	}
         }
-        fail: op.#Steps & {
-        	if http.response.statusCode > 400 {
-        		requestFail: op.#Fail & {
-        			message: "request of \(parameter.url) is fail: \(http.response.statusCode)"
+        fail: {
+        	if http.$returns.response.statusCode > 400 {
+        		requestFail: builtin.#Fail & {
+        			$params: message: "request of \(parameter.url) is fail: \(http.response.statusCode)"
         		}
         	}
         }
-        response: json.Unmarshal(http.response.body)
+        response: json.Unmarshal(http.$returns.response.body)
         parameter: {
         	url:    string
         	method: *"GET" | "POST" | "PUT" | "DELETE"

charts/vela-core/templates/defwithtemplate/service-account.yaml

@@ -42,8 +42,8 @@ spec:
         // +patchStrategy=retainKeys
         patch: spec: template: spec: serviceAccountName: parameter.name
 
-        _clusterPrivileges: [ if parameter.privileges != _|_ for p in parameter.privileges if p.scope == "cluster" {p}]
-        _namespacePrivileges: [ if parameter.privileges != _|_ for p in parameter.privileges if p.scope == "namespace" {p}]
+        _clusterPrivileges: [if parameter.privileges != _|_ for p in parameter.privileges if p.scope == "cluster" {p}]
+        _namespacePrivileges: [if parameter.privileges != _|_ for p in parameter.privileges if p.scope == "namespace" {p}]
         outputs: {
         	if parameter.create {
         		"service-account": {
@@ -58,7 +58,7 @@ spec:
         				apiVersion: "rbac.authorization.k8s.io/v1"
         				kind:       "ClusterRole"
         				metadata: name: "\(context.namespace):\(parameter.name)"
-        				rules: [ for p in _clusterPrivileges {
+        				rules: [for p in _clusterPrivileges {
         					verbs: p.verbs
         					if p.apiGroups != _|_ {
         						apiGroups: p.apiGroups
@@ -95,7 +95,7 @@ spec:
         				apiVersion: "rbac.authorization.k8s.io/v1"
         				kind:       "Role"
         				metadata: name: parameter.name
-        				rules: [ for p in _namespacePrivileges {
+        				rules: [for p in _namespacePrivileges {
         					verbs: p.verbs
         					if p.apiGroups != _|_ {
         						apiGroups: p.apiGroups

charts/vela-core/templates/defwithtemplate/sidecar.yaml

@@ -32,7 +32,7 @@ spec:
         			env: parameter.env
         		}
         		if parameter["volumes"] != _|_ {
-        			volumeMounts: [ for v in parameter.volumes {
+        			volumeMounts: [for v in parameter.volumes {
         				{
         					mountPath: v.path
         					name:      v.name

charts/vela-core/templates/defwithtemplate/startup-probe.yaml

@@ -74,7 +74,7 @@ spec:
         	_params:         #StartupProbeParams
         	name:            _params.containerName
         	_baseContainers: context.output.spec.template.spec.containers
-        	_matchContainers_: [ for _container_ in _baseContainers if _container_.name == name {_container_}]
+        	_matchContainers_: [for _container_ in _baseContainers if _container_.name == name {_container_}]
         	if len(_matchContainers_) == 0 {
         		err: "container \(name) not found"
         	}
@@ -151,7 +151,7 @@ spec:
         	}
         	if parameter.probes != _|_ {
         		// +patchKey=name
-        		containers: [ for c in parameter.probes {
+        		containers: [for c in parameter.probes {
         			if c.name == "" {
         				err: "containerName must be set when specifying startup probe for multiple containers"
         			}
@@ -167,5 +167,5 @@ spec:
         	probes: [...#StartupProbeParams]
         })
 
-        errs: [ for c in patch.spec.template.spec.containers if c.err != _|_ {c.err}]
+        errs: [for c in patch.spec.template.spec.containers if c.err != _|_ {c.err}]
 

charts/vela-core/templates/defwithtemplate/storage.yaml

@@ -149,7 +149,7 @@ spec:
         ]
 
         volumeDevicesList: *[
-        			for v in parameter.pvc if v.volumeMode == "Block" {
+        	for v in parameter.pvc if v.volumeMode == "Block" {
         		{
         			name:       "pvc-" + v.name
         			devicePath: v.mountPath
@@ -262,13 +262,13 @@ spec:
         parameter: {
         	// +usage=Declare pvc type storage
         	pvc?: [...{
-        		name:              string
-        		mountOnly:         *false | bool
-        		mountPath:         string
-        		subPath?:          string
-        		volumeMode:        *"Filesystem" | string
-        		volumeName?:       string
-        		accessModes:       *["ReadWriteOnce"] | [...string]
+        		name:        string
+        		mountOnly:   *false | bool
+        		mountPath:   string
+        		subPath?:    string
+        		volumeMode:  *"Filesystem" | string
+        		volumeName?: string
+        		accessModes: *["ReadWriteOnce"] | [...string]
         		storageClassName?: string
         		resources?: {
         			requests: storage: =~"^([1-9][0-9]{0,63})(E|P|T|G|M|K|Ei|Pi|Ti|Gi|Mi|Ki)$"

charts/vela-core/templates/defwithtemplate/suspend.yaml

@@ -13,16 +13,11 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/builtin"
         )
 
-        suspend: op.#Suspend & {
-        	if parameter.duration != _|_ {
-        		duration: parameter.duration
-        	}
-        	if parameter.message != _|_ {
-        		message: parameter.message
-        	}
+        suspend: builtin.#Suspend & {
+        	$params: parameter
         }
 
         parameter: {

charts/vela-core/templates/defwithtemplate/task.yaml

@@ -63,7 +63,7 @@ spec:
         					}
 
         					if parameter["volumes"] != _|_ {
-        						volumeMounts: [ for v in parameter.volumes {
+        						volumeMounts: [for v in parameter.volumes {
         							{
         								mountPath: v.mountPath
         								name:      v.name
@@ -72,7 +72,7 @@ spec:
         				}]
 
         				if parameter["volumes"] != _|_ {
-        					volumes: [ for v in parameter.volumes {
+        					volumes: [for v in parameter.volumes {
         						{
         							name: v.name
         							if v.type == "pvc" {
@@ -103,7 +103,7 @@ spec:
         				}
 
         				if parameter["imagePullSecrets"] != _|_ {
-        					imagePullSecrets: [ for v in parameter.imagePullSecrets {
+        					imagePullSecrets: [for v in parameter.imagePullSecrets {
         						name: v
         					},
         					]

charts/vela-core/templates/defwithtemplate/vela-cli.yaml

@@ -13,7 +13,9 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/kube"
+        	"vela/builtin"
+        	"vela/util"
         )
 
         mountsArray: [
@@ -68,8 +70,8 @@ spec:
         	},
         ]
 
-        job: op.#Apply & {
-        	value: {
+        job: kube.#Apply & {
+        	$params: value: {
         		apiVersion: "batch/v1"
         		kind:       "Job"
         		metadata: {
@@ -103,22 +105,24 @@ spec:
         	}
         }
 
-        log: op.#Log & {
-        	source: resources: [{labelSelector: "workflow.oam.dev/step-name": "\(context.name)-\(context.stepName)"}]
+        log: util.#Log & {
+        	$params: source: resources: [{labelSelector: "workflow.oam.dev/step-name": "\(context.name)-\(context.stepName)"}]
         }
 
-        fail: op.#Steps & {
-        	if job.value.status.failed != _|_ {
-        		if job.value.status.failed > 2 {
-        			breakWorkflow: op.#Fail & {
-        				message: "failed to execute vela command"
+        fail: {
+        	if job.$returns.value.status != _|_ if job.$returns.value.status.failed != _|_ {
+        		if job.$returns.value.status.failed > 2 {
+        			breakWorkflow: builtin.#Fail & {
+        				$params: message: "failed to execute vela command"
         			}
         		}
         	}
         }
 
-        wait: op.#ConditionalWait & {
-        	continue: job.value.status.succeeded != _|_ && job.value.status.succeeded > 0
+        wait: builtin.#ConditionalWait & {
+        	if job.$returns.value.status != _|_ if job.$returns.value.status.succeeded != _|_ {
+        		$params: continue: job.$returns.value.status.succeeded > 0
+        	}
         }
 
         parameter: {

charts/vela-core/templates/defwithtemplate/webhook.yaml

@@ -13,15 +13,17 @@ spec:
     cue:
       template: |
         import (
-        	"vela/op"
+        	"vela/http"
+        	"vela/kube"
+        	"vela/util"
         	"encoding/json"
         	"encoding/base64"
         )
 
-        data: op.#Steps & {
+        data: {
         	if parameter.data == _|_ {
-        		read: op.#Read & {
-        			value: {
+        		read: kube.#Read & {
+        			$params: value: {
         				apiVersion: "core.oam.dev/v1beta1"
         				kind:       "Application"
         				metadata: {
@@ -29,26 +31,28 @@ spec:
         					namespace: context.namespace
         				}
         			}
-        		}      @step(1)
-        		value: json.Marshal(read.value) @step(2)
+        		}
+        		value: json.Marshal(read.$returns.value)
         	}
         	if parameter.data != _|_ {
-        		value: json.Marshal(parameter.data) @step(3)
+        		value: json.Marshal(parameter.data)
         	}
         }
-        webhook: op.#Steps & {
+        webhook: {
         	if parameter.url.value != _|_ {
-        		http: op.#HTTPPost & {
-        			url: parameter.url.value
-        			request: {
-        				body: data.value
-        				header: "Content-Type": "application/json"
+        		req: http.#HTTPPost & {
+        			$params: {
+        				url: parameter.url.value
+        				request: {
+        					body: data.value
+        					header: "Content-Type": "application/json"
+        				}
         			}
-        		} @step(4)
+        		}
         	}
         	if parameter.url.secretRef != _|_ && parameter.url.value == _|_ {
-        		read: op.#Read & {
-        			value: {
+        		read: kube.#Read & {
+        			$params: value: {
         				apiVersion: "v1"
         				kind:       "Secret"
         				metadata: {
@@ -56,16 +60,18 @@ spec:
         					namespace: context.namespace
         				}
         			}
-        		} @step(5)
+        		}
 
-        		stringValue: op.#ConvertString & {bt: base64.Decode(null, read.value.data[parameter.url.secretRef.key])} @step(6)
-        		http:        op.#HTTPPost & {
-        			url: stringValue.str
-        			request: {
-        				body: data.value
-        				header: "Content-Type": "application/json"
+        		stringValue: util.#ConvertString & {$params: bt: base64.Decode(null, read.$returns.value.data[parameter.url.secretRef.key])}
+        		req: http.#HTTPPost & {
+        			$params: {
+        				url: stringValue.$returns.str
+        				request: {
+        					body: data.value
+        					header: "Content-Type": "application/json"
+        				}
         			}
-        		} @step(7)
+        		}
         	}
         }
 

charts/vela-core/templates/defwithtemplate/webservice.yaml

@@ -163,7 +163,7 @@ spec:
         						}]
         					}
         					if parameter["ports"] != _|_ {
-        						ports: [ for v in parameter.ports {
+        						ports: [for v in parameter.ports {
         							{
         								containerPort: {
         									if v.containerPort != _|_ {v.containerPort}
@@ -221,7 +221,7 @@ spec:
         					}
 
         					if parameter["volumes"] != _|_ && parameter["volumeMounts"] == _|_ {
-        						volumeMounts: [ for v in parameter.volumes {
+        						volumeMounts: [for v in parameter.volumes {
         							{
         								mountPath: v.mountPath
         								name:      v.name
@@ -248,14 +248,14 @@ spec:
         				}
 
         				if parameter["imagePullSecrets"] != _|_ {
-        					imagePullSecrets: [ for v in parameter.imagePullSecrets {
+        					imagePullSecrets: [for v in parameter.imagePullSecrets {
         						name: v
         					},
         					]
         				}
 
         				if parameter["volumes"] != _|_ && parameter["volumeMounts"] == _|_ {
-        					volumes: [ for v in parameter.volumes {
+        					volumes: [for v in parameter.volumes {
         						{
         							name: v.name
         							if v.type == "pvc" {

charts/vela-core/templates/defwithtemplate/worker.yaml

@@ -171,7 +171,7 @@ spec:
         					}
 
         					if parameter["volumes"] != _|_ && parameter["volumeMounts"] == _|_ {
-        						volumeMounts: [ for v in parameter.volumes {
+        						volumeMounts: [for v in parameter.volumes {
         							{
         								mountPath: v.mountPath
         								name:      v.name
@@ -193,14 +193,14 @@ spec:
         				}]
 
         				if parameter["imagePullSecrets"] != _|_ {
-        					imagePullSecrets: [ for v in parameter.imagePullSecrets {
+        					imagePullSecrets: [for v in parameter.imagePullSecrets {
         						name: v
         					},
         					]
         				}
 
         				if parameter["volumes"] != _|_ && parameter["volumeMounts"] == _|_ {
-        					volumes: [ for v in parameter.volumes {
+        					volumes: [for v in parameter.volumes {
         						{
         							name: v.name
         							if v.type == "pvc" {

charts/vela-core/templates/kubevela-controller.yaml

@@ -296,6 +296,8 @@ spec:
             - "--max-workflow-wait-backoff-time={{ .Values.workflow.backoff.maxTime.waitState }}"
             - "--max-workflow-failed-backoff-time={{ .Values.workflow.backoff.maxTime.failedState }}"
             - "--max-workflow-step-error-retry-times={{ .Values.workflow.step.errorRetryTimes }}"
+            - "--enable-external-package-for-default-compiler={{ .Values.workflow.enableExternalPackageForDefaultCompiler }}"
+            - "--enable-external-package-watch-for-default-compiler={{ .Values.workflow.enableExternalPackageWatchForDefaultCompiler }}"
             - "--feature-gates=EnableSuspendOnFailure={{- .Values.workflow.enableSuspendOnFailure | toString -}}"
             - "--feature-gates=AuthenticateApplication={{- .Values.authentication.enabled | toString -}}"
             - "--feature-gates=GzipResourceTracker={{- .Values.featureGates.gzipResourceTracker | toString -}}"
@@ -309,6 +311,7 @@ spec:
             - "--feature-gates=InformerCacheFilterUnnecessaryFields={{- .Values.featureGates.informerCacheFilterUnnecessaryFields | toString -}}"
             - "--feature-gates=SharedDefinitionStorageForApplicationRevision={{- .Values.featureGates.sharedDefinitionStorageForApplicationRevision | toString -}}"
             - "--feature-gates=DisableWorkflowContextConfigMapCache={{- .Values.featureGates.disableWorkflowContextConfigMapCache | toString -}}"
+            - "--feature-gates=EnableCueValidation={{- .Values.featureGates.enableCueValidation | toString -}}"
             {{ if .Values.authentication.enabled }}
             {{ if .Values.authentication.withUser }}
             - "--authentication-with-user"

charts/vela-core/values.yaml

@@ -24,11 +24,15 @@ controllerArgs:
 ## @section KubeVela workflow parameters
 
 ## @param workflow.enableSuspendOnFailure Enable suspend on workflow failure
+## @param workflow.enableExternalPackageForDefaultCompiler Enable external package for default cuex compiler
+## @param workflow.enableExternalPackageWatchForDefaultCompiler Enable external package watch for default cuex compiler
 ## @param workflow.backoff.maxTime.waitState The max backoff time of workflow in a wait condition
 ## @param workflow.backoff.maxTime.failedState The max backoff time of workflow in a failed condition
 ## @param workflow.step.errorRetryTimes The max retry times of a failed workflow step
 workflow:
   enableSuspendOnFailure: false
+  enableExternalPackageForDefaultCompiler: true
+  enableExternalPackageWatchForDefaultCompiler: false
   backoff:
     maxTime:
       waitState: 60
@@ -119,6 +123,7 @@ optimize:
 ##@param featureGates.informerCacheFilterUnnecessaryFields filter unnecessary fields for informer cache
 ##@param featureGates.sharedDefinitionStorageForApplicationRevision use definition cache to reduce duplicated definition storage for application revision, must be used with InformerCacheFilterUnnecessaryFields
 ##@param featureGates.disableWorkflowContextConfigMapCache disable the workflow context's configmap informer cache
+##@param featureGates.enableCueValidation enable the strict cue validation for cue required parameter fields
 ##@param
 featureGates:
   gzipResourceTracker: false
@@ -134,6 +139,7 @@ featureGates:
   informerCacheFilterUnnecessaryFields: true
   sharedDefinitionStorageForApplicationRevision: true
   disableWorkflowContextConfigMapCache: true
+  enableCueValidation: false
 
 ## @section MultiCluster parameters
 

cmd/core/app/options/options.go

@@ -35,6 +35,7 @@ import (
 	oamcontroller "github.com/oam-dev/kubevela/pkg/controller/core.oam.dev"
 	"github.com/oam-dev/kubevela/pkg/oam"
 	"github.com/oam-dev/kubevela/pkg/resourcekeeper"
+	"github.com/oam-dev/kubevela/pkg/workflow/providers"
 )
 
 // CoreOptions contains everything necessary to create and run vela-core
@@ -131,6 +132,8 @@ func (s *CoreOptions) Flags() cliflag.NamedFlagSets {
 	gfs.BoolVar(&s.EnableClusterGateway, "enable-cluster-gateway", s.EnableClusterGateway, "Enable cluster-gateway to use multicluster, disabled by default.")
 	gfs.BoolVar(&s.EnableClusterMetrics, "enable-cluster-metrics", s.EnableClusterMetrics, "Enable cluster-metrics-management to collect metrics from clusters with cluster-gateway, disabled by default. When this param is enabled, enable-cluster-gateway should be enabled")
 	gfs.DurationVar(&s.ClusterMetricsInterval, "cluster-metrics-interval", s.ClusterMetricsInterval, "The interval that ClusterMetricsMgr will collect metrics from clusters, default value is 15 seconds.")
+	gfs.BoolVar(&providers.EnableExternalPackageForDefaultCompiler, "enable-external-package-for-default-compiler", providers.EnableExternalPackageForDefaultCompiler, "Enable external package for default compiler")
+	gfs.BoolVar(&providers.EnableExternalPackageWatchForDefaultCompiler, "enable-external-package-watch-for-default-compiler", providers.EnableExternalPackageWatchForDefaultCompiler, "Enable external package watch for default compiler")
 
 	s.ControllerArgs.AddFlags(fss.FlagSet("controllerArgs"), s.ControllerArgs)
 

cmd/core/app/server.go

@@ -29,7 +29,6 @@ import (
 	"github.com/kubevela/pkg/controller/sharding"
 	"github.com/kubevela/pkg/meta"
 	"github.com/kubevela/pkg/util/profiling"
-	"github.com/kubevela/workflow/pkg/cue/packages"
 	"github.com/pkg/errors"
 	"github.com/spf13/cobra"
 	utilfeature "k8s.io/apiserver/pkg/util/feature"
@@ -165,15 +164,6 @@ func run(ctx context.Context, s *options.CoreOptions) error {
 		return err
 	}
 
-	pd, err := packages.NewPackageDiscover(mgr.GetConfig())
-	if err != nil {
-		klog.Error(err, "Failed to create CRD discovery for CUE package client")
-		if !packages.IsCUEParseErr(err) {
-			return err
-		}
-	}
-	s.ControllerArgs.PackageDiscover = pd
-
 	if !sharding.EnableSharding {
 		if err = prepareRun(ctx, mgr, s); err != nil {
 			return err
@@ -258,10 +248,7 @@ func registerHealthChecks(mgr ctrl.Manager) error {
 		return err
 	}
 	// TODO: change the health check to be different from readiness check
-	if err := mgr.AddHealthzCheck("ping", healthz.Ping); err != nil {
-		return err
-	}
-	return nil
+	return mgr.AddHealthzCheck("ping", healthz.Ping)
 }
 
 // waitWebhookSecretVolume waits for webhook secret ready to avoid mgr running crash

cmd/plugin/main.go

@@ -17,16 +17,12 @@
 package main
 
 import (
-	"math/rand"
 	"os"
-	"time"
 
 	"github.com/oam-dev/kubevela/references/cli"
 )
 
 func main() {
-	rand.Seed(time.Now().UnixNano())
-
 	command := cli.NewCommand()
 
 	if err := command.Execute(); err != nil {

docs/examples/kube-module/kube-worker-cd.yaml

@@ -9,26 +9,40 @@ spec:
       apiVersion: apps/v1
       kind: Deployment
   schematic:
-    kube: 
-      template:
-        apiVersion: apps/v1
-        kind: Deployment
-        spec:
-          selector:
-            matchLabels:
-              app: nginx
-          template:
-            metadata:
-              labels:
-                app: nginx
-            spec:
-              containers:
-              - name: nginx
-                ports:
-                - containerPort: 80 
-      parameters: 
-      - name: image
-        required: true
-        type: string
-        fieldPaths: 
-        - "spec.template.spec.containers[0].image"
+    cue:
+      template: |
+        output: {
+          apiVersion: "apps/v1"
+          kind:       "Deployment"
+          spec: {
+            selector: {
+              matchLabels: {
+                app: "nginx"
+              }
+            }
+            template: {
+              metadata: {
+                labels: {
+                  app: "nginx"
+                }
+              }
+              spec: {
+                containers: [
+                  {
+                    name: "nginx"
+                    image: parameter.image
+                    ports: [
+                      {
+                        containerPort: 80
+                      }
+                    ]
+                  }
+                ]
+              }
+            }
+          }
+        }
+        outputs: {}
+        parameter: {
+          "image": string
+        }

docs/examples/workflow/Li-Auto-Inc/common-definitions.yaml

@@ -1,285 +1,244 @@
 apiVersion: core.oam.dev/v1beta1
 kind: ComponentDefinition
 metadata:
+  annotations:
+    definition.oam.dev/description: ""
+  labels: {}
   name: base-service
 spec:
+  schematic:
+    cue:
+      template: |
+        output: {
+          apiVersion: "apps/v1"
+          kind:       "Deployment"
+          metadata: {
+            labels: {
+              appId:   "BASE-SERVICE"
+              appName: "base-service"
+              version: "0.0.1"
+            }
+            name: "base-service"
+          }
+          spec: {
+            replicas:             2
+            revisionHistoryLimit: 5
+            selector: matchLabels: app: "base-service"
+            template: {
+              metadata: labels: {
+                antiAffinity: "none"
+                app:          "base-service"
+                appId:        "BASE-SERVICE"
+                version:      "0.0.1"
+                cluster:      parameter.cluster
+              }
+              spec: {
+                affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: [
+                  {
+                    podAffinityTerm: {
+                      labelSelector: matchExpressions: [
+                        {
+                          key:      "app"
+                          operator: "In"
+                          values: ["base-service"]
+                        },
+                        {
+                          key:      "antiAffinity"
+                          operator: "In"
+                          values: ["none"]
+                        },
+                      ]
+                      topologyKey: "kubernetes.io/hostname"
+                    }
+                    weight: 100
+                  },
+                ]
+                containers: [
+                  {
+                    env: [
+                      {name: "NODE_IP", valueFrom: fieldRef: fieldPath:       "status.hostIP"},
+                      {name: "POD_IP", valueFrom: fieldRef: fieldPath:        "status.podIP"},
+                      {name: "POD_NAME", valueFrom: fieldRef: fieldPath:      "metadata.name"},
+                      {name: "POD_NAMESPACE", valueFrom: fieldRef: fieldPath: "metadata.namespace"},
+                      {name: "APP_NAME", value:                               "base-service"},
+                      {name: "LOG_BASE", value:                               "/data/log"},
+                      {name: "RUNTIME_CLUSTER", value:                        parameter.cluster},
+                    ]
+                    image:           parameter.image
+                    imagePullPolicy: "Always"
+                    name:            "base-service"
+                    ports: [
+                      {containerPort: 11223, protocol: "TCP"},
+                      {containerPort: 11224, protocol: "TCP"},
+                    ]
+                    volumeMounts: [
+                      {mountPath: "/tmp/data/log/base-service", name: "log-volume"},
+                      {mountPath: "/data", name:                      "sidecar-sre"},
+                      {mountPath: "/app/skywalking", name:            "skywalking"},
+                    ]
+                  },
+                ]
+                initContainers: [
+                  {
+                    args: ["echo \"do something\""]
+                    command: ["/bin/sh", "-c"]
+                    env: [
+                      {name: "NODE_IP", valueFrom: fieldRef: fieldPath: "status.hostIP"},
+                      {name: "POD_IP", valueFrom: fieldRef: fieldPath:  "status.podIP"},
+                      {name: "APP_NAME", value:                         "base-service"},
+                    ]
+                    image:           "busybox"
+                    imagePullPolicy: "Always"
+                    name:            "sidecar-sre"
+                    resources: limits: {
+                      cpu:    "100m"
+                      memory: "100Mi"
+                    }
+                    volumeMounts: [
+                      {mountPath: "/tmp/data/log/base-service", name: "log-volume"},
+                      {mountPath: "/scratch", name:                   "sidecar-sre"},
+                    ]
+                  },
+                ]
+                terminationGracePeriodSeconds: 120
+                volumes: [
+                  {hostPath: {path:    "/logs/dev/base-service", type: "DirectoryOrCreate"}, name: "log-volume"},
+                  {emptyDir: {}, name: "sidecar-sre"},
+                  {emptyDir: {}, name: "skywalking"},
+                ]
+              }
+            }
+          }
+        }
+        parameter: {
+          image:   string
+          cluster: string
+        }
   workload:
     definition:
       apiVersion: apps/v1
       kind: Deployment
-  schematic:
-    kube:
-      template:
-        apiVersion: apps/v1
-        kind: Deployment
-        metadata:
-          labels:
-            appId: BASE-SERVICE
-            appName: base-service
-            version: 0.0.1
-          name: base-service
-        spec:
-          replicas: 2
-          revisionHistoryLimit: 5
-          selector:
-            matchLabels:
-              app: base-service
-          template:
-            metadata:
-              labels:
-                antiAffinity: none
-                app: base-service
-                appId: BASE-SERVICE
-                version: 0.0.1
-            spec:
-              affinity:
-                podAntiAffinity:
-                  preferredDuringSchedulingIgnoredDuringExecution:
-                    - podAffinityTerm:
-                        labelSelector:
-                          matchExpressions:
-                            - key: app
-                              operator: In
-                              values:
-                                - base-service
-                            - key: antiAffinity
-                              operator: In
-                              values:
-                                - none
-                        topologyKey: kubernetes.io/hostname
-                      weight: 100
-              containers:
-                - env:
-                    - name: NODE_IP
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: status.hostIP
-                    - name: POD_IP
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: status.podIP
-                    - name: POD_NAME
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: metadata.name
-                    - name: POD_NAMESPACE
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: metadata.namespace
-                    - name: APP_NAME
-                      value: base-service
-                    - name: LOG_BASE
-                      value: /data/log
-                    - name: RUNTIME_CLUSTER
-                      value: default
-                  image: base-service
-                  imagePullPolicy: Always
-                  name: base-service
-                  ports:
-                    - containerPort: 11223
-                      protocol: TCP
-                    - containerPort: 11224
-                      protocol: TCP
-                  volumeMounts:
-                    - mountPath: /tmp/data/log/base-service
-                      name: log-volume
-                    - mountPath: /data
-                      name: sidecar-sre
-                    - mountPath: /app/skywalking
-                      name: skywalking
-              initContainers:
-                - args:
-                    - 'echo "do something" '
-                  command:
-                    - /bin/sh
-                    - -c
-                  env:
-                    - name: NODE_IP
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: status.hostIP
-                    - name: POD_IP
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: status.podIP
-                    - name: APP_NAME
-                      value: base-service
-                  image: busybox
-                  imagePullPolicy: Always
-                  name: sidecar-sre
-                  resources:
-                    limits:
-                      cpu: 100m
-                      memory: 100Mi
-                  volumeMounts:
-                    - mountPath: /tmp/data/log/base-service
-                      name: log-volume
-                    - mountPath: /scratch
-                      name: sidecar-sre
-              terminationGracePeriodSeconds: 120
-              volumes:
-                - hostPath:
-                    path: /logs/dev/base-service
-                    type: DirectoryOrCreate
-                  name: log-volume
-                - emptyDir: {}
-                  name: sidecar-sre
-                - emptyDir: {}
-                  name: skywalking
-      parameters:
-        - name: image
-          required: true
-          type: string
-          fieldPaths:
-            - "spec.template.spec.containers[0].image"
-        - name: cluster
-          required: true
-          type: string
-          fieldPaths:
-            - "spec.template.spec.containers[0].env[6].value"
-            - "spec.template.metadata.labels.cluster"
 ---
 apiVersion: core.oam.dev/v1beta1
 kind: ComponentDefinition
 metadata:
+  annotations:
+    definition.oam.dev/description: ""
+  labels: {}
   name: proxy-service
 spec:
+  schematic:
+    cue:
+      template: |
+        output: {
+          apiVersion: "argoproj.io/v1alpha1"
+          kind:       "Rollout"
+          metadata: {
+            labels: {
+              appId:   "PROXY-SERVICE"
+              appName: "proxy-service"
+              version: "0.0.0"
+            }
+            name: "proxy-service"
+          }
+          spec: {
+            replicas:             1
+            revisionHistoryLimit: 1
+            selector: matchLabels: app: "proxy-service"
+            strategy: canary: steps: [
+              {setWeight: 50},
+              {pause: {}},
+            ]
+            template: {
+              metadata: labels: {
+                app:     "proxy-service"
+                appId:   "PROXY-SERVICE"
+                cluster: parameter.cluster
+                version: "0.0.1"
+              }
+              spec: {
+                affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: [
+                  {
+                    podAffinityTerm: {
+                      labelSelector: matchExpressions: [
+                        {
+                          key:      "app"
+                          operator: "In"
+                          values: ["proxy-service"]
+                        },
+                      ]
+                      topologyKey: "kubernetes.io/hostname"
+                    }
+                    weight: 100
+                  },
+                ]
+                containers: [
+                  {
+                    env: [
+                      {name: "NODE_IP", valueFrom: fieldRef: fieldPath:       "status.hostIP"},
+                      {name: "POD_IP", valueFrom: fieldRef: fieldPath:        "status.podIP"},
+                      {name: "POD_NAME", valueFrom: fieldRef: fieldPath:      "metadata.name"},
+                      {name: "POD_NAMESPACE", valueFrom: fieldRef: fieldPath: "metadata.namespace"},
+                      {name: "APP_NAME", value:                               "proxy-service"},
+                      {name: "LOG_BASE", value:                               "/app/data/log"},
+                      {name: "RUNTIME_CLUSTER", value:                        parameter.cluster},
+                    ]
+                    #image:          "proxy-service:0.1"
+                    image:           parameter.image
+                    imagePullPolicy: "Always"
+                    name:            "proxy-service"
+                    ports: [
+                      {containerPort: 11024, protocol: "TCP"},
+                      {containerPort: 11025, protocol: "TCP"},
+                    ]
+                    volumeMounts: [
+                      {mountPath: "/tmp/data/log/proxy-service", name: "log-volume"},
+                      {mountPath: "/app/data", name:                   "sidecar-sre"},
+                      {mountPath: "/app/skywalking", name:             "skywalking"},
+                    ]
+                  },
+                ]
+                initContainers: [
+                  {
+                    args: ["echo \"do something\" "]
+                    command: ["/bin/sh", "-c"]
+                    env: [
+                      {name: "NODE_IP", valueFrom: fieldRef: fieldPath: "status.hostIP"},
+                      {name: "POD_IP", valueFrom: fieldRef: fieldPath:  "status.podIP"},
+                      {name: "APP_NAME", value:                         "proxy-service"},
+                    ]
+                    image:           "busybox"
+                    imagePullPolicy: "Always"
+                    name:            "sidecar-sre"
+                    resources: limits: {
+                      cpu:    "100m"
+                      memory: "100Mi"
+                    }
+                    volumeMounts: [
+                      {mountPath: "/tmp/data/log/proxy-service", name: "log-volume"},
+                      {mountPath: "/scratch", name:                    "sidecar-sre"},
+                    ]
+                  },
+                ]
+                terminationGracePeriodSeconds: 120
+                volumes: [
+                  {hostPath: {path:    "/app/logs/dev/proxy-service", type: "DirectoryOrCreate"}, name: "log-volume"},
+                  {emptyDir: {}, name: "sidecar-sre"},
+                  {emptyDir: {}, name: "skywalking"},
+                ]
+              }
+            }
+          }
+        }
+        parameter: {
+          image:   string
+          cluster: string
+        }
   workload:
     definition:
       apiVersion: argoproj.io/v1alpha1
       kind: Rollout
-  schematic:
-    kube:
-      template:
-        apiVersion: argoproj.io/v1alpha1
-        kind: Rollout
-        metadata:
-          labels:
-            appId: PROXY-SERVICE
-            appName: proxy-service
-            version: 0.0.0
-          name: proxy-service
-        spec:
-          replicas: 1
-          revisionHistoryLimit: 1
-          selector:
-            matchLabels:
-              app: proxy-service
-          strategy:
-            canary:
-              steps:
-                - setWeight: 50
-                - pause: {}
-          template:
-            metadata:
-              labels:
-                app: proxy-service
-                appId: PROXY-SERVICE
-                cluster: default
-                version: 0.0.1
-            spec:
-              affinity:
-                podAntiAffinity:
-                  preferredDuringSchedulingIgnoredDuringExecution:
-                    - podAffinityTerm:
-                        labelSelector:
-                          matchExpressions:
-                            - key: app
-                              operator: In
-                              values:
-                                - proxy-service
-                        topologyKey: kubernetes.io/hostname
-                      weight: 100
-              containers:
-                - env:
-                    - name: NODE_IP
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: status.hostIP
-                    - name: POD_IP
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: status.podIP
-                    - name: POD_NAME
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: metadata.name
-                    - name: POD_NAMESPACE
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: metadata.namespace
-                    - name: APP_NAME
-                      value: proxy-service
-                    - name: LOG_BASE
-                      value: /app/data/log
-                    - name: RUNTIME_CLUSTER
-                      value: default
-                  image: proxy-service:0.1
-                  imagePullPolicy: Always
-                  name: proxy-service
-                  ports:
-                    - containerPort: 11024
-                      protocol: TCP
-                    - containerPort: 11025
-                      protocol: TCP
-                  volumeMounts:
-                    - mountPath: /tmp/data/log/proxy-service
-                      name: log-volume
-                    - mountPath: /app/data
-                      name: sidecar-sre
-                    - mountPath: /app/skywalking
-                      name: skywalking
-              initContainers:
-                - args:
-                    - 'echo "do something" '
-                  command:
-                    - /bin/sh
-                    - -c
-                  env:
-                    - name: NODE_IP
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: status.hostIP
-                    - name: POD_IP
-                      valueFrom:
-                        fieldRef:
-                          fieldPath: status.podIP
-                    - name: APP_NAME
-                      value: proxy-service
-                  image: busybox
-                  imagePullPolicy: Always
-                  name: sidecar-sre
-                  resources:
-                    limits:
-                      cpu: 100m
-                      memory: 100Mi
-                  volumeMounts:
-                    - mountPath: /tmp/data/log/proxy-service
-                      name: log-volume
-                    - mountPath: /scratch
-                      name: sidecar-sre
-              terminationGracePeriodSeconds: 120
-              volumes:
-                - hostPath:
-                    path: /app/logs/dev/proxy-service
-                    type: DirectoryOrCreate
-                  name: log-volume
-                - emptyDir: {}
-                  name: sidecar-sre
-                - emptyDir: {}
-                  name: skywalking
-      parameters:
-        - name: image
-          required: true
-          type: string
-          fieldPaths:
-            - "spec.template.spec.containers[0].image"
-        - name: cluster
-          required: true
-          type: string
-          fieldPaths:
-            - "spec.template.spec.containers[0].env[5].value"
-            - "spec.template.metadata.labels.cluster"
+
 ---
 apiVersion: core.oam.dev/v1beta1
 kind: TraitDefinition

docs/examples/workflow/inti-secret-with-http/app.yaml

@@ -26,7 +26,7 @@ spec:
         type: webhook
         outputs: 
           - name: mysecret
-            valueFrom: webhook.http.response.body
+            valueFrom: webhook.req.$returns.response.body
         properties:
           url:
             value: <url>

docs/examples/workflow/read-object/app.yaml

@@ -16,9 +16,9 @@ spec:
       type: read-object
       outputs:
         - name: cpu
-          valueFrom: output.value.data["cpu"]
+          valueFrom: output.$returns.value.data["cpu"]
         - name: memory
-          valueFrom: output.value.data["memory"]
+          valueFrom: output.$returns.value.data["memory"]
       properties:
         apiVersion: v1
         kind: ConfigMap

e2e/addon/mock/testdata/fluxcd/resources/deployment/helm-controller.yaml

@@ -31,7 +31,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: fluxcd/helm-controller:v0.11.1
+          image: ghcr.io/fluxcd/helm-controller:v0.11.1
           imagePullPolicy: IfNotPresent
           livenessProbe:
             httpGet:

e2e/addon/mock/testdata/fluxcd/resources/deployment/kustomize-controller.yaml

@@ -31,7 +31,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: fluxcd/kustomize-controller:v0.13.1
+          image: ghcr.io/fluxcd/kustomize-controller:v0.13.1
           imagePullPolicy: IfNotPresent
           livenessProbe:
             httpGet:

e2e/addon/mock/testdata/fluxcd/resources/deployment/source-controller.yaml

@@ -35,7 +35,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: fluxcd/source-controller:v0.15.3
+          image: ghcr.io/fluxcd/source-controller:v0.15.3
           imagePullPolicy: IfNotPresent
           livenessProbe:
             httpGet:

e2e/addon/mock/testdata/terraform/template.yaml

@@ -27,4 +27,7 @@ spec:
         url: https://charts.kubevela.net/addons
         chart: terraform-controller
         version: 0.2.11
-
+        values: 
+          image:
+            repository: ghcr.io/kubevela/oamdev/terraform-controller
+            tag: v0.8.0

e2e/plugin/plugin_test.go

@@ -143,7 +143,7 @@ var _ = Describe("Test Kubectl Plugin", func() {
 			Expect(err).NotTo(HaveOccurred())
 			Expect(output).ShouldNot(ContainSubstring("addRevisionLabel"))
 		})
-		It("Test show webservice def with cue ignore annotation ", func() {
+		It("Test show webservice def with cue ignore annotation2 ", func() {
 			tdName := "mywebservice"
 			output, err := e2e.Exec(fmt.Sprintf("kubectl-vela show %s -n default", tdName))
 			Expect(err).NotTo(HaveOccurred())

go.mod

@@ -1,9 +1,9 @@
 module github.com/oam-dev/kubevela
 
-go 1.19
+go 1.22
 
 require (
-	cuelang.org/go v0.5.0
+	cuelang.org/go v0.9.2
 	github.com/AlecAivazis/survey/v2 v2.1.1
 	github.com/FogDong/uitable v0.0.5
 	github.com/Masterminds/semver/v3 v3.2.1
@@ -37,7 +37,7 @@ require (
 	github.com/hinshun/vt10x v0.0.0-20180616224451-1954e6464174
 	github.com/imdario/mergo v0.3.16
 	github.com/kubevela/pkg v1.9.2
-	github.com/kubevela/workflow v0.6.0
+	github.com/kubevela/workflow v0.6.1-0.20240924152948-55f1433fd7f8
 	github.com/kyokomi/emoji v2.2.4+incompatible
 	github.com/magiconair/properties v1.8.7
 	github.com/mattn/go-runewidth v0.0.15
@@ -57,9 +57,8 @@ require (
 	github.com/prometheus/client_golang v1.16.0
 	github.com/prometheus/client_model v0.4.0
 	github.com/rivo/tview v0.0.0-20221128165837-db36428c92d9
-	github.com/rogpeppe/go-internal v1.10.0
 	github.com/sirupsen/logrus v1.9.3
-	github.com/spf13/cobra v1.7.0
+	github.com/spf13/cobra v1.8.0
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.8.4
 	github.com/tidwall/gjson v1.14.4
@@ -67,12 +66,13 @@ require (
 	github.com/xanzy/go-gitlab v0.91.1
 	github.com/xlab/treeprint v1.2.0
 	go.uber.org/multierr v1.11.0
-	golang.org/x/crypto v0.21.0
-	golang.org/x/oauth2 v0.12.0
-	golang.org/x/sync v0.4.0
-	golang.org/x/term v0.18.0
-	golang.org/x/text v0.14.0
-	golang.org/x/tools v0.14.0
+	golang.org/x/crypto v0.25.0
+	golang.org/x/mod v0.17.0
+	golang.org/x/oauth2 v0.20.0
+	golang.org/x/sync v0.7.0
+	golang.org/x/term v0.22.0
+	golang.org/x/text v0.16.0
+	golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d
 	gomodules.xyz/jsonpatch/v2 v2.4.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.11.2
@@ -98,6 +98,7 @@ require (
 )
 
 require (
+	cuelabs.dev/go/oci/ociregistry v0.0.0-20240404174027-a39bec0462d2 // indirect
 	dario.cat/mergo v1.0.0 // indirect
 	github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
 	github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
@@ -125,12 +126,12 @@ require (
 	github.com/cenkalti/backoff/v4 v4.2.0 // indirect
 	github.com/cespare/xxhash/v2 v2.2.0 // indirect
 	github.com/chai2010/gettext-go v1.0.2 // indirect
-	github.com/cloudflare/circl v1.3.3 // indirect
-	github.com/cockroachdb/apd/v2 v2.0.2 // indirect
+	github.com/cloudflare/circl v1.3.7 // indirect
+	github.com/cockroachdb/apd/v3 v3.2.1 // indirect
 	github.com/containerd/stargz-snapshotter/estargz v0.14.3 // indirect
 	github.com/coreos/go-semver v0.3.0 // indirect
 	github.com/coreos/go-systemd/v22 v22.5.0 // indirect
-	github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
+	github.com/cpuguy83/go-md2man/v2 v2.0.3 // indirect
 	github.com/creack/pty v1.1.18 // indirect
 	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
 	github.com/docker/cli v24.0.0+incompatible // indirect
@@ -169,7 +170,6 @@ require (
 	github.com/gobuffalo/flect v0.3.0 // indirect
 	github.com/gobwas/glob v0.2.3 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
-	github.com/golang/glog v1.0.0 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.3 // indirect
 	github.com/google/btree v1.0.1 // indirect
@@ -180,9 +180,8 @@ require (
 	github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38 // indirect
 	github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2 // indirect
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
-	github.com/google/uuid v1.3.0 // indirect
+	github.com/google/uuid v1.6.0 // indirect
 	github.com/gorilla/mux v1.8.0 // indirect
-	github.com/gorilla/websocket v1.5.0 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
 	github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0 // indirect
@@ -224,11 +223,10 @@ require (
 	github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 // indirect
 	github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect
 	github.com/morikuni/aec v1.0.0 // indirect
-	github.com/mpvl/unique v0.0.0-20150818121801-cbe035fff7de // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
-	github.com/opencontainers/image-spec v1.1.0-rc3 // indirect
+	github.com/opencontainers/image-spec v1.1.0 // indirect
 	github.com/openshift/library-go v0.0.0-20230327085348-8477ec72b725 // indirect
 	github.com/perimeterx/marshmallow v1.1.4 // indirect
 	github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
@@ -236,9 +234,10 @@ require (
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/prometheus/common v0.42.0 // indirect
 	github.com/prometheus/procfs v0.10.1 // indirect
-	github.com/protocolbuffers/txtpbfmt v0.0.0-20220428173112-74888fd59c2b // indirect
+	github.com/protocolbuffers/txtpbfmt v0.0.0-20230328191034-3462fbc510c0 // indirect
 	github.com/rivo/uniseg v0.4.3 // indirect
 	github.com/robfig/cron/v3 v3.0.1 // indirect
+	github.com/rogpeppe/go-internal v1.12.0 // indirect
 	github.com/rubenv/sql-migrate v1.3.1 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/sergi/go-diff v1.1.0 // indirect
@@ -271,11 +270,9 @@ require (
 	go.uber.org/atomic v1.9.0 // indirect
 	go.uber.org/automaxprocs v1.5.3 // indirect
 	go.uber.org/zap v1.24.0 // indirect
-	golang.org/x/mod v0.13.0 // indirect
-	golang.org/x/net v0.21.0 // indirect
-	golang.org/x/sys v0.18.0 // indirect
+	golang.org/x/net v0.25.0 // indirect
+	golang.org/x/sys v0.22.0 // indirect
 	golang.org/x/time v0.3.0 // indirect
-	google.golang.org/appengine v1.6.7 // indirect
 	google.golang.org/genproto v0.0.0-20230306155012-7f2fa6fef1f4 // indirect
 	google.golang.org/grpc v1.53.0 // indirect
 	google.golang.org/protobuf v1.33.0 // indirect

go.sum

@@ -1,12 +1,15 @@
 cloud.google.com/go v0.100.2 h1:t9Iw5QH5v4XtlEQaCtUY7x6sCABps8sW0acw7e2WQ6Y=
 cloud.google.com/go v0.100.2/go.mod h1:4Xra9TjzAeYHrl5+oeLlzbM2k3mjVhZh4UqTZ//w99A=
 cloud.google.com/go/compute v0.1.0/go.mod h1:GAesmwr110a34z04OlxYkATPBEfVhkymfTBXtfbBFow=
-cloud.google.com/go/compute v1.20.1 h1:6aKEtlUiwEpJzM001l0yFkpXmUVXaN8W+fbkb2AZNbg=
-cloud.google.com/go/compute/metadata v0.2.3 h1:mg4jlk7mCAj6xXp9UJ4fjI9VUI5rubuGBW5aJ7UnBMY=
+cloud.google.com/go/compute v1.19.3 h1:DcTwsFgGev/wV5+q8o2fzgcHOaac+DKGC91ZlvpsQds=
+cloud.google.com/go/compute/metadata v0.3.0 h1:Tz+eQXMEqDIKRsmY3cHTL6FVaynIjX2QxYC4trgAKZc=
+cloud.google.com/go/compute/metadata v0.3.0/go.mod h1:zFmK7XCadkQkj6TtorcaGlCW1hT1fIilQDwofLpJ20k=
 cloud.google.com/go/firestore v1.1.0/go.mod h1:ulACoGHTpvq5r8rxGJ4ddJZBZqakUQqClKRT5SZwBmk=
 cloud.google.com/go/storage v1.0.0/go.mod h1:IhtSnM/ZTZV8YYJWCY8RULGVqBDmpoyjwiyrjsg+URw=
-cuelang.org/go v0.5.0 h1:D6N0UgTGJCOxFKU8RU+qYvavKNsVc/+ZobmifStVJzU=
-cuelang.org/go v0.5.0/go.mod h1:okjJBHFQFer+a41sAe2SaGm1glWS8oEb6CmJvn5Zdws=
+cuelabs.dev/go/oci/ociregistry v0.0.0-20240404174027-a39bec0462d2 h1:BnG6pr9TTr6CYlrJznYUDj6V7xldD1W+1iXPum0wT/w=
+cuelabs.dev/go/oci/ociregistry v0.0.0-20240404174027-a39bec0462d2/go.mod h1:pK23AUVXuNzzTpfMCA06sxZGeVQ/75FdVtW249de9Uo=
+cuelang.org/go v0.9.2 h1:pfNiry2PdRBr02G/aKm5k2vhzmqbAOoaB4WurmEbWvs=
+cuelang.org/go v0.9.2/go.mod h1:qpAYsLOf7gTM1YdEg6cxh553uZ4q9ZDWlPbtZr9q1Wk=
 dario.cat/mergo v1.0.0 h1:AGCNq9Evsj31mOgNPcLyXc+4PNABt905YmuqPYYpBWk=
 dario.cat/mergo v1.0.0/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
 dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
@@ -30,6 +33,7 @@ github.com/BurntSushi/toml v1.2.1 h1:9F2/+DoOYIOksmaJFPw1tGFy1eDnIJXg+UHjuD8lTak
 github.com/BurntSushi/toml v1.2.1/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
 github.com/DATA-DOG/go-sqlmock v1.5.0 h1:Shsta01QNfFxHCfpW6YH2STWB0MudeXXEWMr20OEh60=
+github.com/DATA-DOG/go-sqlmock v1.5.0/go.mod h1:f/Ixk793poVmq4qj/V1dPUg2JEAKC73Q5eFN3EC/SaM=
 github.com/FogDong/uitable v0.0.5 h1:1bJo/uvhGUC6i8JPHZCr8XKMHiDExE7mQkOCmDl0ryQ=
 github.com/FogDong/uitable v0.0.5/go.mod h1:1yEaP13SkkBUj3HvqKIUWnsb42XigyZbNle84mc5kLM=
 github.com/MakeNowJust/heredoc v1.0.0 h1:cXCdzVdstXyiTqTvfqk9SDHpKNjxuom+DOlyEeQ4pzQ=
@@ -53,6 +57,7 @@ github.com/Microsoft/go-winio v0.5.2/go.mod h1:WpS1mjBmmwHBEWmogvA2mj8546UReBk4v
 github.com/Microsoft/go-winio v0.6.1 h1:9/kr64B9VUZrLm5YYwbGtUJnMgqWVOdUAXu6Migciow=
 github.com/Microsoft/go-winio v0.6.1/go.mod h1:LRdKpFKfdobln8UmuiYcKPot9D2v6svN5+sAH+4kjUM=
 github.com/Microsoft/hcsshim v0.10.0-rc.8 h1:YSZVvlIIDD1UxQpJp0h+dnpLUw+TrY0cx8obKsp3bek=
+github.com/Microsoft/hcsshim v0.10.0-rc.8/go.mod h1:OEthFdQv/AD2RAdzR6Mm1N1KPCztGKDurW1Z8b8VGMM=
 github.com/NYTimes/gziphandler v0.0.0-20170623195520-56545f4a5d46/go.mod h1:3wb06e3pkSAbeQ52E9H9iFoQsEEwGN64994WTCIhntQ=
 github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I=
 github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c=
@@ -64,6 +69,7 @@ github.com/ProtonMail/go-crypto v0.0.0-20230717121422-5aa5874ade95/go.mod h1:EjA
 github.com/PuerkitoBio/purell v1.1.1/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0=
 github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578/go.mod h1:uGdkoq3SwY9Y+13GIhn11/XLaGBb4BfwItxLd5jeuXE=
 github.com/Shopify/logrus-bugsnag v0.0.0-20171204204709-577dee27f20d h1:UrqY+r/OJnIp5u0s1SbQ8dVfLCZJsnvazdBP5hS4iRs=
+github.com/Shopify/logrus-bugsnag v0.0.0-20171204204709-577dee27f20d/go.mod h1:HI8ITrYtUY+O+ZhtlqUnD8+KwNPOyugEhfP9fdUIaEQ=
 github.com/a8m/expect v1.0.0/go.mod h1:4IwSCMumY49ScypDnjNbYEjgVeqy1/U2cEs3Lat96eA=
 github.com/acomagu/bufpipe v1.0.4 h1:e3H4WUzM3npvo5uv95QuJM3cQspFNtFBzvJ2oNjKIDQ=
 github.com/acomagu/bufpipe v1.0.4/go.mod h1:mxdxdup/WdsKVreO5GpW4+M/1CE2sMG4jeGJ2sYmHc4=
@@ -72,6 +78,7 @@ github.com/agext/levenshtein v1.2.2/go.mod h1:JEDfjyjHDjOF/1e4FlBE/PkbqA9OfWu2ki
 github.com/agext/levenshtein v1.2.3 h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo=
 github.com/agext/levenshtein v1.2.3/go.mod h1:JEDfjyjHDjOF/1e4FlBE/PkbqA9OfWu2ki2W0IB5558=
 github.com/agiledragon/gomonkey/v2 v2.9.0 h1:PDiKKybR596O6FHW+RVSG0Z7uGCBNbmbUXh3uCNQ7Hc=
+github.com/agiledragon/gomonkey/v2 v2.9.0/go.mod h1:ap1AmDzcVOAz1YpeJ3TCzIgstoaWLA6jbbgxfB4w2iY=
 github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
 github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
 github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0=
@@ -82,6 +89,7 @@ github.com/alessio/shellescape v1.4.1/go.mod h1:PZAiSCk0LJaZkiCSkPv8qIobYglO3FPp
 github.com/aliyun/alibaba-cloud-sdk-go v1.61.1704 h1:PpfENOj/vPfhhy9N2OFRjpue0hjM5XqAp2thFmkXXIk=
 github.com/aliyun/alibaba-cloud-sdk-go v1.61.1704/go.mod h1:RcDobYh8k5VP6TNybz9m++gL3ijVI5wueVr0EM10VsU=
 github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFIImctFaOjnTIavg87rW78vTPkQqLI8=
+github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4=
 github.com/antihax/optional v1.0.0/go.mod h1:uupD/76wgC+ih3iEmQUL+0Ugr19nfwCT1kdvxnR2qWY=
 github.com/antlr/antlr4/runtime/Go/antlr v0.0.0-20210826220005-b48c857c3a0e/go.mod h1:F7bn7fEU90QkQ3tnmaTx3LTKLEDqnwWODIYppRQ5hnY=
 github.com/antlr/antlr4/runtime/Go/antlr v0.0.0-20220418222510-f25a4f6275ed/go.mod h1:F7bn7fEU90QkQ3tnmaTx3LTKLEDqnwWODIYppRQ5hnY=
@@ -123,11 +131,15 @@ github.com/bluele/gcache v0.0.2/go.mod h1:m15KV+ECjptwSPxKhOhQoAFQVtUFjTVkc3H8o0
 github.com/briandowns/spinner v1.23.0 h1:alDF2guRWqa/FOZZYWjlMIx2L6H0wyewPxo/CH4Pt2A=
 github.com/briandowns/spinner v1.23.0/go.mod h1:rPG4gmXeN3wQV/TsAY4w8lPdIM6RX3yqeBQJSrbXjuE=
 github.com/bshuster-repo/logrus-logstash-hook v1.0.0 h1:e+C0SB5R1pu//O4MQ3f9cFuPGoOVeF2fE4Og9otCc70=
+github.com/bshuster-repo/logrus-logstash-hook v1.0.0/go.mod h1:zsTqEiSzDgAa/8GZR7E1qaXrhYNDKBYy5/dWPTIflbk=
 github.com/buger/jsonparser v1.1.1 h1:2PnMjfWD7wBILjqQbt530v576A/cAbQvEW9gGIpYMUs=
 github.com/buger/jsonparser v1.1.1/go.mod h1:6RYKKt7H4d4+iWqouImQ9R2FZql3VbhNgx27UK13J/0=
 github.com/bugsnag/bugsnag-go v0.0.0-20141110184014-b1d153021fcd h1:rFt+Y/IK1aEZkEHchZRSq9OQbsSzIT/OrI8YFFmRIng=
+github.com/bugsnag/bugsnag-go v0.0.0-20141110184014-b1d153021fcd/go.mod h1:2oa8nejYd4cQ/b0hMIopN0lCRxU0bueqREvZLWFrtK8=
 github.com/bugsnag/osext v0.0.0-20130617224835-0dd3f918b21b h1:otBG+dV+YK+Soembjv71DPz3uX/V/6MMlSyD9JBQ6kQ=
+github.com/bugsnag/osext v0.0.0-20130617224835-0dd3f918b21b/go.mod h1:obH5gd0BsqsP2LwDJ9aOkm/6J86V6lyAXCoQWGw3K50=
 github.com/bugsnag/panicwrap v0.0.0-20151223152923-e2c28503fcd0 h1:nvj0OLI3YqYXer/kZD8Ri1aaunCxIEsOst1BVJswV0o=
+github.com/bugsnag/panicwrap v0.0.0-20151223152923-e2c28503fcd0/go.mod h1:D/8v3kj0zr8ZAKg1AQ6crr+5VwKN5eIywRkfhyM/+dE=
 github.com/bwesterb/go-ristretto v1.2.3/go.mod h1:fUIoIZaG73pV5biE2Blr2xEzDoMj7NFEuV9ekS419A0=
 github.com/cenkalti/backoff/v4 v4.1.1/go.mod h1:scbssz8iZGpm3xbr14ovlUdkxfGXNInqkPWOWmG2CLw=
 github.com/cenkalti/backoff/v4 v4.1.3/go.mod h1:scbssz8iZGpm3xbr14ovlUdkxfGXNInqkPWOWmG2CLw=
@@ -149,8 +161,9 @@ github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWR
 github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI=
 github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
-github.com/cloudflare/circl v1.3.3 h1:fE/Qz0QdIGqeWfnwq0RE0R7MI51s0M2E4Ga9kq5AEMs=
 github.com/cloudflare/circl v1.3.3/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA=
+github.com/cloudflare/circl v1.3.7 h1:qlCDlTPz2n9fu58M0Nh1J/JzcFpfgkFHHX3O35r5vcU=
+github.com/cloudflare/circl v1.3.7/go.mod h1:sRTcRWXGLrKw6yIGJ+l7amYJFfAXbZG0kBSc8r4zxgA=
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
 github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
 github.com/cncf/udpa/go v0.0.0-20210930031921-04548b0d99d4/go.mod h1:6pvJx4me5XPnfI9Z40ddWsdw2W/uZgQLFXToKeRcDiI=
@@ -159,15 +172,17 @@ github.com/cncf/xds/go v0.0.0-20210805033703-aa0b78936158/go.mod h1:eXthEFrGJvWH
 github.com/cncf/xds/go v0.0.0-20210922020428-25de7278fc84/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cncf/xds/go v0.0.0-20211001041855-01bcc9b48dfe/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cncf/xds/go v0.0.0-20211011173535-cb28da3451f1/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
-github.com/cockroachdb/apd/v2 v2.0.2 h1:weh8u7Cneje73dDh+2tEVLUvyBc89iwepWCD8b8034E=
-github.com/cockroachdb/apd/v2 v2.0.2/go.mod h1:DDxRlzC2lo3/vSlmSoS7JkqbbrARPuFOGr0B9pvN3Gw=
+github.com/cockroachdb/apd/v3 v3.2.1 h1:U+8j7t0axsIgvQUqthuNm82HIrYXodOV2iWLWtEaIwg=
+github.com/cockroachdb/apd/v3 v3.2.1/go.mod h1:klXJcjp+FffLTHlhIG69tezTDvdP065naDsHzKhYSqc=
 github.com/cockroachdb/datadriven v0.0.0-20200714090401-bf6692d28da5/go.mod h1:h6jFvWxBdQXxjopDMZyH2UVceIRfR84bdzbkoKrsWNo=
 github.com/cockroachdb/errors v1.2.4/go.mod h1:rQD95gz6FARkaKkQXUksEje/d9a6wBJoCr5oaCLELYA=
 github.com/cockroachdb/logtags v0.0.0-20190617123548-eb05cc24525f/go.mod h1:i/u985jwjWRlyHXQbwatDASoW0RMlZ/3i9yJHE2xLkI=
 github.com/containerd/cgroups v1.1.0 h1:v8rEWFl6EoqHB+swVNjVoCJE8o3jX7e8nqBGPLaDFBM=
+github.com/containerd/cgroups v1.1.0/go.mod h1:6ppBcbh/NOOUU+dMKrykgaBnK9lCIBxHqJDGwsa1mIw=
 github.com/containerd/containerd v1.7.5 h1:i9T9XpAWMe11BHMN7pu1BZqOGjXaKTPyz2v+KYOZgkY=
 github.com/containerd/containerd v1.7.5/go.mod h1:ieJNCSzASw2shSGYLHx8NAE7WsZ/gEigo5fQ78W5Zvw=
 github.com/containerd/continuity v0.4.2 h1:v3y/4Yz5jwnvqPKJJ+7Wf93fyWoCB3F5EclWG023MDM=
+github.com/containerd/continuity v0.4.2/go.mod h1:F6PTNCKepoxEaXLQp3wDAjygEnImnZ/7o4JzpodfroQ=
 github.com/containerd/stargz-snapshotter/estargz v0.14.3 h1:OqlDCK3ZVUO6C3B/5FSkDwbkEETK84kQgEeFwDC+62k=
 github.com/containerd/stargz-snapshotter/estargz v0.14.3/go.mod h1:KY//uOCIkSuNAHhJogcZtrNHdKrA99/FCCRjE3HD36o=
 github.com/coreos/bbolt v1.3.2/go.mod h1:iRUV2dpdMOn7Bo10OQBFzIJO9kkE559Wcmn+qkEiiKk=
@@ -184,8 +199,9 @@ github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSV
 github.com/coreos/pkg v0.0.0-20180928190104-399ea9e2e55f/go.mod h1:E3G3o1h8I7cfcXa63jLwjI0eiQQMgzzUDFVpN/nH/eA=
 github.com/cpuguy83/go-md2man/v2 v2.0.0/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
 github.com/cpuguy83/go-md2man/v2 v2.0.1/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
-github.com/cpuguy83/go-md2man/v2 v2.0.2 h1:p1EgwI/C7NhT0JmVkwCD2ZBK8j4aeHQX2pMHHBfMQ6w=
 github.com/cpuguy83/go-md2man/v2 v2.0.2/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
+github.com/cpuguy83/go-md2man/v2 v2.0.3 h1:qMCsGGgs+MAzDFyp9LpAe1Lqy/fY/qCovCm0qnXZOBM=
+github.com/cpuguy83/go-md2man/v2 v2.0.3/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
 github.com/creack/pty v1.1.7/go.mod h1:lj5s0c3V2DBrqTV7llrYr5NG6My20zk30Fl46Y7DoTY=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/creack/pty v1.1.11/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
@@ -206,6 +222,7 @@ github.com/denisenkom/go-mssqldb v0.9.0/go.mod h1:xbL0rPBG9cCiLr28tMa8zpbdarY27N
 github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ=
 github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod h1:vAd38F8PWV+bWy6jNmig1y/TA+kYO4g3RSRF0IAv0no=
 github.com/distribution/distribution/v3 v3.0.0-20221208165359-362910506bc2 h1:aBfCb7iqHmDEIp6fBvC/hQUddQfg+3qdYjwzaiP9Hnc=
+github.com/distribution/distribution/v3 v3.0.0-20221208165359-362910506bc2/go.mod h1:WHNsWjnIn2V1LYOrME7e8KxSeKunYHsxEm4am0BUtcI=
 github.com/docker/cli v20.10.9+incompatible h1:OJ7YkwQA+k2Oi51lmCojpjiygKpi76P7bg91b2eJxYU=
 github.com/docker/cli v20.10.9+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/distribution v2.8.2+incompatible h1:T3de5rq0dB1j30rp0sA2rER+m322EBzniBPB6ZIzuh8=
@@ -215,16 +232,19 @@ github.com/docker/docker-credential-helpers v0.7.0/go.mod h1:rETQfLdHNT3foU5kuNk
 github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=
 github.com/docker/go-connections v0.4.0/go.mod h1:Gbd7IOopHjR8Iph03tsViu4nIes5XhDvyHbTtUxmeec=
 github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c h1:+pKlWGMw7gf6bQ+oDZB4KHQFypsfjYlq/C4rfL7D3g8=
+github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c/go.mod h1:Uw6UezgYA44ePAFQYUehOuCzmy5zmg/+nl2ZfMWGkpA=
 github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQV8=
 github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw=
 github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4=
 github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
 github.com/docker/libtrust v0.0.0-20160708172513-aabc10ec26b7 h1:UhxFibDNY/bfvqU5CAUmr9zpesgbU6SWc8/B4mflAE4=
+github.com/docker/libtrust v0.0.0-20160708172513-aabc10ec26b7/go.mod h1:cyGadeNEkKy96OOhEzfZl+yxihPEzKnqJwvfuSUqbZE=
 github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815/go.mod h1:WwZ+bS3ebgob9U8Nd0kOddGdZWjyMGR8Wziv+TBNwSE=
 github.com/dustin/go-humanize v1.0.0 h1:VSnTsYCnlFHaM2/igO1h6X3HA71jcobQuxemgkq4zYo=
 github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
 github.com/elazarl/goproxy v0.0.0-20180725130230-947c36da3153/go.mod h1:/Zj4wYkgs4iZTTu3o/KG3Itv/qCCa8VVMlb3i9OVuzc=
 github.com/elazarl/goproxy v0.0.0-20221015165544-a0805db90819 h1:RIB4cRk+lBqKK3Oy0r2gRX4ui7tuhiZq2SuTtTCi0/0=
+github.com/elazarl/goproxy v0.0.0-20221015165544-a0805db90819/go.mod h1:Ro8st/ElPeALwNFlcTpWmkr6IoMFfkjXAvTHpevnDsM=
 github.com/emicklei/go-restful v0.0.0-20170410110728-ff4f55a20633/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs=
 github.com/emicklei/go-restful v2.9.5+incompatible/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs=
 github.com/emicklei/go-restful/v3 v3.8.0/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
@@ -300,6 +320,7 @@ github.com/getsentry/raven-go v0.2.0/go.mod h1:KungGk8q33+aIAZUIVWZDr2OfAEBsO49P
 github.com/ghodss/yaml v1.0.0 h1:wQHKEahhL6wmXdzwWG11gIVCkOv05bNOh+Rxn0yngAk=
 github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04=
 github.com/gliderlabs/ssh v0.3.5 h1:OcaySEmAQJgyYcArR+gGGTHCyE7nvhEMTlYY+Dp8CpY=
+github.com/gliderlabs/ssh v0.3.5/go.mod h1:8XB4KraRrX39qHhT6yxPsHedjA08I/uBVwj4xC+/+z4=
 github.com/go-errors/errors v1.0.1 h1:LUHzmkK3GUKUrL/1gfBUxAHzcev3apQlezX/+O7ma6w=
 github.com/go-errors/errors v1.0.1/go.mod h1:f4zRHt4oKfwPJE5k8C9vpYG+aDHdBFUsgrm6/TyX73Q=
 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI=
@@ -307,6 +328,7 @@ github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376/go.mod h1:an3vInlBmS
 github.com/go-git/go-billy/v5 v5.4.1 h1:Uwp5tDRkPr+l/TnbHOQzp+tmJfLceOlbVucgpTz8ix4=
 github.com/go-git/go-billy/v5 v5.4.1/go.mod h1:vjbugF6Fz7JIflbVpl1hJsGjSHNltrSw45YK/ukIvQg=
 github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20230305113008-0c11038e723f h1:Pz0DHeFij3XFhoBRGUDPzSJ+w2UcK5/0JvF8DRI58r8=
+github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20230305113008-0c11038e723f/go.mod h1:8LHG1a3SRW71ettAD/jW13h8c6AqjVSeL11RAdgaqpo=
 github.com/go-git/go-git/v5 v5.8.1 h1:Zo79E4p7TRk0xoRgMq0RShiTHGKcKI4+DI6BfJc/Q+A=
 github.com/go-git/go-git/v5 v5.8.1/go.mod h1:FHFuoD6yGz5OSKEBK+aWN9Oah0q54Jxl0abmj6GnqAo=
 github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=
@@ -345,6 +367,8 @@ github.com/go-openapi/swag v0.19.5/go.mod h1:POnQmlKehdgb5mhVOsnJFsivZCEZ/vjK9gh
 github.com/go-openapi/swag v0.19.14/go.mod h1:QYRuS/SOXUCsnplDa677K7+DxSOj6IPNl/eQntq43wQ=
 github.com/go-openapi/swag v0.19.15 h1:D2NRCBzS9/pEY3gP9Nl8aDqGUcPFrwG2p+CNFrLyrCM=
 github.com/go-openapi/swag v0.19.15/go.mod h1:QYRuS/SOXUCsnplDa677K7+DxSOj6IPNl/eQntq43wQ=
+github.com/go-quicktest/qt v1.101.0 h1:O1K29Txy5P2OK0dGo59b7b0LR6wKfIhttaAhHUyn7eI=
+github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZsDC26tQJow=
 github.com/go-resty/resty/v2 v2.8.0 h1:J29d0JFWwSWrDCysnOK/YjsPMLQTx0TvgJEHVGvf2L8=
 github.com/go-resty/resty/v2 v2.8.0/go.mod h1:UCui0cMHekLrSntoMyofdSTaPpinlRHFtPpizuyDW2w=
 github.com/go-sql-driver/mysql v1.6.0 h1:BCTh4TKNUYmOmMUcQ3IipzF5prigylS7XXjEkfCHuOE=
@@ -408,6 +432,7 @@ github.com/golang/protobuf v1.5.3 h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg
 github.com/golang/protobuf v1.5.3/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
 github.com/golang/snappy v0.0.3/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
 github.com/gomodule/redigo v1.8.2 h1:H5XSIre1MB5NbPYFp+i1NBbb5qN1W8Y8YAQoAYbkm8k=
+github.com/gomodule/redigo v1.8.2/go.mod h1:P9dn9mFrCBvWhGE1wpxx6fgq7BAeLBk+UUUzlpkBYO0=
 github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
 github.com/google/btree v1.0.0/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
 github.com/google/btree v1.0.1 h1:gK4Kx5IaGY9CD5sPJ36FHiBJ6ZXl0kilRiiCj+jdYp4=
@@ -454,8 +479,9 @@ github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510/go.mod h1:pupxD2MaaD3
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.2.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I=
 github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
+github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/googleapis/gax-go/v2 v2.0.5/go.mod h1:DWXyrwAJ9X0FpwwEdw+IPEYBICEFu5mhpdKc/us6bOk=
 github.com/googleapis/gax-go/v2 v2.1.0/go.mod h1:Q3nei7sK6ybPYH7twZdmQpAd1MKb7pfu6SK+H1/DsU0=
 github.com/googleapis/gax-go/v2 v2.1.1/go.mod h1:hddJymUZASv3XPyGkUpKj8pPO47Rmb0eJc8R6ouapiM=
@@ -463,6 +489,7 @@ github.com/googleapis/gnostic v0.5.1/go.mod h1:6U4PtQXGIEt/Z3h5MAT7FNofLnw9vXk2c
 github.com/googleapis/gnostic v0.5.5/go.mod h1:7+EbHbldMins07ALC74bsA81Ovc97DwqyJO1AENw9kA=
 github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY=
 github.com/gorilla/handlers v1.5.1 h1:9lRY6j8DEeeBT10CvO9hGW0gmky0BprnvDI5vfhUHH4=
+github.com/gorilla/handlers v1.5.1/go.mod h1:t8XrUpc4KVXb7HGyJ4/cEnwQiaxrX/hz1Zv/4g96P1Q=
 github.com/gorilla/mux v1.8.0 h1:i40aqfkR1h2SlN9hojwV5ZA91wcXFOvkdNIeFDP5koI=
 github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB71So=
 github.com/gorilla/websocket v1.4.0/go.mod h1:E7qHFY5m1UJ88s3WnNqhKjPHQ0heANvMoAMk2YaljkQ=
@@ -493,6 +520,7 @@ github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9n
 github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=
 github.com/hashicorp/go-hclog v0.9.2/go.mod h1:5CU+agLiy3J7N7QjHK5d05KxGsuXiQLrjA0H7acj2lQ=
 github.com/hashicorp/go-hclog v0.16.2 h1:K4ev2ib4LdQETX5cSZBG0DVLk1jwGqSPXBjdah3veNs=
+github.com/hashicorp/go-hclog v0.16.2/go.mod h1:whpDNt7SSdeAju8AWKIWsul05p54N/39EeqMAyrmvFQ=
 github.com/hashicorp/go-immutable-radix v1.0.0/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
 github.com/hashicorp/go-msgpack v0.5.3/go.mod h1:ahLV/dePpqEmjfWmKiqvPkv/twdG7iPBM1vqhUKIvfM=
 github.com/hashicorp/go-multierror v1.0.0/go.mod h1:dHtQlpGsu+cZNNAkkCN/P3hoUDHhCYQXV3UM06sGGrk=
@@ -510,6 +538,7 @@ github.com/hashicorp/go.net v0.0.1/go.mod h1:hjKkEWcCURg++eb33jQU7oqQcI9XDCnUzHA
 github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
 github.com/hashicorp/golang-lru v0.5.1/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
 github.com/hashicorp/golang-lru v0.5.4 h1:YDjusn29QI/Das2iO9M0BHnIbxPeyuCHsjMW+lJfyTc=
+github.com/hashicorp/golang-lru v0.5.4/go.mod h1:iADmTwqILo4mZ8BN3D2Q6+9jd8WM5uGBxy+E8yxSoD4=
 github.com/hashicorp/hcl v0.0.0-20170504190234-a4b07c25de5f/go.mod h1:oZtUIOe8dh44I2q6ScRibXws4Ajl+d+nod3AaR9vL5w=
 github.com/hashicorp/hcl v1.0.0 h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4=
 github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ=
@@ -603,8 +632,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/kubevela/pkg v1.9.2 h1:K6pGoJikf6l8vlfehewmb36hyToX0KpUaQP4NVET/S8=
 github.com/kubevela/pkg v1.9.2/go.mod h1:u/MGuFXVSECxvIWdTKS4AQs1H+USfAMQgi30BUrOb04=
-github.com/kubevela/workflow v0.6.0 h1:fYXviOYD5zqHs3J61tNbM4HZ85EcZlPm7Fyz8Q5o9Fk=
-github.com/kubevela/workflow v0.6.0/go.mod h1:sjLcYqKHKeCQ+w77gijoNILwIShJKnCU+e3q7ETtZGI=
+github.com/kubevela/workflow v0.6.1-0.20240924152948-55f1433fd7f8 h1:dvqNMluYo4P9ngpUuoAym9WSr4E8TFZLQ8qc5D/XwU4=
+github.com/kubevela/workflow v0.6.1-0.20240924152948-55f1433fd7f8/go.mod h1:/tWZOtO+bp/EUQCJZjL8t3O5YDx5QXnKVllQkDTKKuw=
 github.com/kylelemons/godebug v0.0.0-20170820004349-d65d576e9348/go.mod h1:B69LEHPfb2qLo0BaaOLcbitczOKLWTsrBG9LczfCD4k=
 github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
 github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
@@ -701,6 +730,7 @@ github.com/moby/moby v20.10.24+incompatible/go.mod h1:fDXVQ6+S340veQPv35CzDahGBm
 github.com/moby/spdystream v0.2.0 h1:cjW1zVyyoiM0T7b6UoySUFqzXMoqRckQtXwGPiBhOM8=
 github.com/moby/spdystream v0.2.0/go.mod h1:f7i0iNDQJ059oMTcWxx8MA/zKFIuD/lY+0GqbN2Wy8c=
 github.com/moby/sys/mountinfo v0.6.2 h1:BzJjoreD5BMFNmD9Rus6gdd1pLuecOFPt8wC+Vygl78=
+github.com/moby/sys/mountinfo v0.6.2/go.mod h1:IJb6JQeOklcdMU9F5xQ8ZALD+CUr5VlGpwtX+VE0rpI=
 github.com/moby/term v0.0.0-20210610120745-9d4ed1856297/go.mod h1:vgPCkQMyxTZ7IDy8SXRufE172gr8+K/JE/7hHFxHW3A=
 github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6/go.mod h1:E2VnQOmVuvZB6UYnnDB0qG5Nq/1tD9acaOpo6xmt0Kw=
 github.com/moby/term v0.0.0-20220808134915-39b0c02b01ae/go.mod h1:E2VnQOmVuvZB6UYnnDB0qG5Nq/1tD9acaOpo6xmt0Kw=
@@ -719,8 +749,6 @@ github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 h1:n6/
 github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00/go.mod h1:Pm3mSP3c5uWn86xMLZ5Sa7JB9GsEZySvHYXCTK4E9q4=
 github.com/morikuni/aec v1.0.0 h1:nP9CBfwrvYnBRgY6qfDQkygYDmYwOilePFkwzv4dU8A=
 github.com/morikuni/aec v1.0.0/go.mod h1:BbKIizmSmc5MMPqRYbxO4ZU0S0+P200+tUnFx7PXmsc=
-github.com/mpvl/unique v0.0.0-20150818121801-cbe035fff7de h1:D5x39vF5KCwKQaw+OC9ZPiLVHXz3UFw2+psEX+gYcto=
-github.com/mpvl/unique v0.0.0-20150818121801-cbe035fff7de/go.mod h1:kJun4WP5gFuHZgRjZUWWuH1DTxCtxbHDOIJsudS8jzY=
 github.com/munnerz/goautoneg v0.0.0-20120707110453-a547fc61f48d/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
@@ -781,8 +809,8 @@ github.com/onsi/gomega v1.29.0 h1:KIA/t2t5UBzoirT4H9tsML45GEbo3ouUnBHsCfD2tVg=
 github.com/onsi/gomega v1.29.0/go.mod h1:9sxs+SwGrKI0+PWe4Fxa9tFQQBG5xSsSbMXOI8PPpoQ=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
-github.com/opencontainers/image-spec v1.1.0-rc3 h1:fzg1mXZFj8YdPeNkRXMg+zb88BFV0Ys52cJydRwBkb8=
-github.com/opencontainers/image-spec v1.1.0-rc3/go.mod h1:X4pATf0uXsnn3g5aiGIsVnJBR4mxhKzfwmvK/B2NTm8=
+github.com/opencontainers/image-spec v1.1.0 h1:8SG7/vwALn54lVB/0yZ/MMwhFrPYtpEHQb2IpWsCzug=
+github.com/opencontainers/image-spec v1.1.0/go.mod h1:W4s4sFTMaBeK1BQLXbG4AdM2szdn85PY75RI83NrTrM=
 github.com/openkruise/kruise-api v1.4.0 h1:MDDXQIYvaCh0ioIJSRniF4kCKby9JI3/ec6pZHHw/Ao=
 github.com/openkruise/kruise-api v1.4.0/go.mod h1:HyRlDV0MfW5Zm+3g36bx7u4CcWHcKBxL8g/c/2bjcd4=
 github.com/openkruise/rollouts v0.3.0 h1:T02r9BxHJ02MRkbc7C4F12qMGgrziZVjgmukwz6k60s=
@@ -802,6 +830,7 @@ github.com/perimeterx/marshmallow v1.1.4/go.mod h1:dsXbUu8CRzfYP5a87xpp0xq9S3u0V
 github.com/peterbourgon/diskv v2.0.1+incompatible h1:UBdAOUP5p4RWqPBg048CAvpKN+vxiaj6gdUUzhl4XmI=
 github.com/peterbourgon/diskv v2.0.1+incompatible/go.mod h1:uqqh8zWWbv1HBMNONnaR/tNboyR3/BZd58JJSHlUSCU=
 github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5 h1:Ii+DKncOVM8Cu1Hc+ETb5K+23HdAMvESYE3ZJ5b5cMI=
+github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5/go.mod h1:iIss55rKnNBTvrwdmkUpLnDpZoAHvWaiq5+iMmen4AE=
 github.com/pjbgf/sha1cd v0.3.0 h1:4D5XXmUUBUl/xQ6IjCkEAbqXskkq/4O7LmGn0AqMDs4=
 github.com/pjbgf/sha1cd v0.3.0/go.mod h1:nZ1rrWOcGJ5uZgEEVL1VUM9iRQiZvWdbZjkKyFzPPsI=
 github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA=
@@ -820,6 +849,7 @@ github.com/poy/onpar v1.1.2/go.mod h1:6X8FLNoxyr9kkmnlqpK6LSoiOtrO6MICtWwEuWkLjz
 github.com/pquerna/cachecontrol v0.0.0-20171018203845-0dec1b30a021/go.mod h1:prYjPmNq4d1NPVmpShWobRqXY3q7Vp+80DqgxxUrUIA=
 github.com/pquerna/cachecontrol v0.1.0/go.mod h1:NrUG3Z7Rdu85UNR3vm7SOsl1nFIeSiQnrHV5K9mBcUI=
 github.com/prashantv/gostub v1.1.0 h1:BTyx3RfQjRHnUWaGF9oQos79AlQ5k8WNktv7VGvVH4g=
+github.com/prashantv/gostub v1.1.0/go.mod h1:A5zLQHz7ieHGG7is6LLXLz7I8+3LZzsrV0P1IAHhP5U=
 github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
 github.com/prometheus/client_golang v0.9.3/go.mod h1:/TN21ttK/J9q6uSwhBd54HahCDft0ttaMvbicHlPoso=
 github.com/prometheus/client_golang v1.0.0/go.mod h1:db9x61etRT2tGnBNRi70OPL5FsnadC4Ky3P0J6CfImo=
@@ -861,8 +891,8 @@ github.com/prometheus/procfs v0.8.0/go.mod h1:z7EfXMXOkbkqb9IINtpCn86r/to3BnA0ua
 github.com/prometheus/procfs v0.10.1 h1:kYK1Va/YMlutzCGazswoHKo//tZVlFpKYh+PymziUAg=
 github.com/prometheus/procfs v0.10.1/go.mod h1:nwNm2aOCAYw8uTR/9bWRREkZFxAUcWzPHWJq+XBB/FM=
 github.com/prometheus/tsdb v0.7.1/go.mod h1:qhTCs0VvXwvX/y3TZrWD7rabWM+ijKTux40TwIPHuXU=
-github.com/protocolbuffers/txtpbfmt v0.0.0-20220428173112-74888fd59c2b h1:zd/2RNzIRkoGGMjE+YIsZ85CnDIz672JK2F3Zl4vux4=
-github.com/protocolbuffers/txtpbfmt v0.0.0-20220428173112-74888fd59c2b/go.mod h1:KjY0wibdYKc4DYkerHSbguaf3JeIPGhNJBp2BNiFH78=
+github.com/protocolbuffers/txtpbfmt v0.0.0-20230328191034-3462fbc510c0 h1:sadMIsgmHpEOGbUs6VtHBXRR1OHevnj7hLx9ZcdNGW4=
+github.com/protocolbuffers/txtpbfmt v0.0.0-20230328191034-3462fbc510c0/go.mod h1:jgxiZysxFPM+iWKwQwPR+y+Jvo54ARd4EisXxKYpB5c=
 github.com/rivo/tview v0.0.0-20221128165837-db36428c92d9 h1:ccTgRxA37ypj3q8zB8G4k3xGPfBbIaMwrf3Yw6k50NY=
 github.com/rivo/tview v0.0.0-20221128165837-db36428c92d9/go.mod h1:YX2wUZOcJGOIycErz2s9KvDaP0jnWwRCirQMPLPpQ+Y=
 github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
@@ -875,8 +905,8 @@ github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6L
 github.com/rogpeppe/go-internal v1.6.1/go.mod h1:xXDCJY+GAPziupqXw64V24skbSoqbTEfhy4qGm1nDQc=
 github.com/rogpeppe/go-internal v1.8.0/go.mod h1:WmiCO8CzOY8rg0OYDC4/i/2WRWAB6poM+XZ2dLUbcbE=
 github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs=
-github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
-github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
+github.com/rogpeppe/go-internal v1.12.0 h1:exVL4IDcn6na9z1rAb56Vxr+CgyK3nn3O+epU5NdKM8=
+github.com/rogpeppe/go-internal v1.12.0/go.mod h1:E+RYuTGaKKdloAfM02xzb0FW3Paa99yedzYV+kq4uf4=
 github.com/rubenv/sql-migrate v1.3.1 h1:Vx+n4Du8X8VTYuXbhNxdEUoh6wiJERA0GlWocR5FrbA=
 github.com/rubenv/sql-migrate v1.3.1/go.mod h1:YzG/Vh82CwyhTFXy+Mf5ahAiiEOpAlHurg+23VEzcsk=
 github.com/russross/blackfriday/v2 v2.0.1/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
@@ -920,8 +950,8 @@ github.com/spf13/cobra v1.1.3/go.mod h1:pGADOWyqRD/YMrPZigI/zbliZ2wVD/23d+is3pSW
 github.com/spf13/cobra v1.2.1/go.mod h1:ExllRjgxM/piMAM+3tAZvg8fsklGAf3tPfi+i8t68Nk=
 github.com/spf13/cobra v1.4.0/go.mod h1:Wo4iy3BUC+X2Fybo0PDqwJIv3dNRiZLHQymsfxlB84g=
 github.com/spf13/cobra v1.6.0/go.mod h1:IOw/AERYS7UzyrGinqmz6HLUo219MORXGxhbaJUqzrY=
-github.com/spf13/cobra v1.7.0 h1:hyqWnYt1ZQShIddO5kBpj3vu05/++x6tJ6dg8EC572I=
-github.com/spf13/cobra v1.7.0/go.mod h1:uLxZILRyS/50WlhOIKD7W6V5bgeIt+4sICxh6uRMrb0=
+github.com/spf13/cobra v1.8.0 h1:7aJaZx1B85qltLMc546zn58BxxfZdR/W22ej9CFoEf0=
+github.com/spf13/cobra v1.8.0/go.mod h1:WXLWApfZ71AjXPya3WOlMsY9yMs7YeiHhFVlvLyhcho=
 github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
 github.com/spf13/jwalterweatherman v1.1.0/go.mod h1:aNWZUN0dPAAO/Ljvb5BEdw96iTZ0EXowPYD95IqWIGo=
 github.com/spf13/pflag v0.0.0-20170130214245-9ff6c6923cff/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
@@ -994,14 +1024,18 @@ github.com/yuin/goldmark v1.4.0/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1
 github.com/yuin/goldmark v1.4.1/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 github.com/yvasiyarov/go-metrics v0.0.0-20140926110328-57bccd1ccd43 h1:+lm10QQTNSBd8DVTNGHx7o/IKu9HYDvLMffDhbyLccI=
+github.com/yvasiyarov/go-metrics v0.0.0-20140926110328-57bccd1ccd43/go.mod h1:aX5oPXxHm3bOH+xeAttToC8pqch2ScQN/JoXYupl6xs=
 github.com/yvasiyarov/gorelic v0.0.0-20141212073537-a9bba5b9ab50 h1:hlE8//ciYMztlGpl/VA+Zm1AcTPHYkHJPbHqE6WJUXE=
+github.com/yvasiyarov/gorelic v0.0.0-20141212073537-a9bba5b9ab50/go.mod h1:NUSPSUX/bi6SeDMUh6brw0nXpxHnc96TguQh0+r/ssA=
 github.com/yvasiyarov/newrelic_platform_go v0.0.0-20140908184405-b21fdbd4370f h1:ERexzlUfuTvpE74urLSbIQW0Z/6hF9t8U4NsJLaioAY=
+github.com/yvasiyarov/newrelic_platform_go v0.0.0-20140908184405-b21fdbd4370f/go.mod h1:GlGEuHIJweS1mbCqG+7vt2nvWLzLLnRHbXz5JKd/Qbg=
 github.com/zclconf/go-cty v1.1.0/go.mod h1:xnAOWiHeOqg2nWS62VtQ7pbOu17FtxJNW8RLEih+O3s=
 github.com/zclconf/go-cty v1.13.0 h1:It5dfKTTZHe9aeppbNOda3mN7Ag7sg6QkBNm6TkyFa0=
 github.com/zclconf/go-cty v1.13.0/go.mod h1:YKQzy/7pZ7iq2jNFzy5go57xdxdWoLLpaEp4u238AE0=
 go.etcd.io/bbolt v1.3.2/go.mod h1:IbVyRI1SCnLcuJnV2u8VeU0CEYM7e686BmAb1XKL+uU=
 go.etcd.io/bbolt v1.3.6/go.mod h1:qXsaaIqmgQH0T+OPdb99Bf+PKfBBQVAdyD6TY9G8XM4=
 go.etcd.io/bbolt v1.3.7 h1:j+zJOnnEjF/kyHlDDgGnVL/AIqIJPq8UoB2GSNfkUfQ=
+go.etcd.io/bbolt v1.3.7/go.mod h1:N9Mkw9X8x5fupy0IKsmuqVtoGDyxsaDlbk4Rd05IAQw=
 go.etcd.io/etcd v0.0.0-20200513171258-e048e166ab9c h1:/RwRVN9EdXAVtdHxP7Ndn/tfmM9/goiwU0QTnLBgS4w=
 go.etcd.io/etcd/api/v3 v3.5.0/go.mod h1:cbVKeC6lCfl7j/8jBhAK6aIYO9XOjdptoxU/nLQcPvs=
 go.etcd.io/etcd/api/v3 v3.5.5 h1:BX4JIbQ7hl7+jL+g+2j5UAr0o1bctCm6/Ct+ArBGkf0=
@@ -1027,6 +1061,7 @@ go.etcd.io/etcd/server/v3 v3.5.5/go.mod h1:rZ95vDw/jrvsbj9XpTqPrTAB9/kzchVdhRiry
 go.opencensus.io v0.21.0/go.mod h1:mSImk1erAIZhrmZN+AvHh14ztQfjbGwt4TtuofqLduU=
 go.opencensus.io v0.23.0/go.mod h1:XItmlyltB5F7CS4xOC1DcqMoFqwtC6OG2xF7mCv7P7E=
 go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0=
+go.opencensus.io v0.24.0/go.mod h1:vNK8G9p7aAivkbmorf4v+7Hgx+Zs0yY+0fOtgBfjQKo=
 go.opentelemetry.io/contrib v0.20.0/go.mod h1:G/EtFaa6qaN7+LxqfIAT3GiZa7Wv5DTBUzl5H4LY0Kc=
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.20.0/go.mod h1:oVGt1LRbBOBq1A5BQLlUg9UaU/54aiHw8cgjV3aWZ/E=
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.25.0/go.mod h1:E5NNboN0UqSAki0Atn9kVwaN7I+l25gGxDqBueo/74E=
@@ -1091,6 +1126,7 @@ go.uber.org/goleak v1.1.11/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ
 go.uber.org/goleak v1.1.12/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
 go.uber.org/goleak v1.2.0/go.mod h1:XJYK+MuIchqpmGmUSAzotztawfKvYLUIgg7guXrwVUo=
 go.uber.org/goleak v1.2.1 h1:NBol2c7O1ZokfZ0LEU9K6Whx/KnwvepVetCUhtKja4A=
+go.uber.org/goleak v1.2.1/go.mod h1:qlT2yGI9QafXHhZZLxlSuNsMw3FFLxBr+tBRlmO1xH4=
 go.uber.org/multierr v1.1.0/go.mod h1:wR5kodmAFQ0UK8QlbwjlSNy0Z68gJhDJUG5sjR94q/0=
 go.uber.org/multierr v1.6.0/go.mod h1:cdWPpRnG4AhwMwsgIHip0KRBQjJy5kYEpYjJxpXp9iU=
 go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
@@ -1128,8 +1164,8 @@ golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2Uz
 golang.org/x/crypto v0.5.0/go.mod h1:NK/OQwhpMQP3MwtdjgLlYHnH9ebylxKWv3e0fK+mkQU=
 golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
 golang.org/x/crypto v0.13.0/go.mod h1:y6Z2r+Rw4iayiXXAIxJIDAJ1zMW4yaTpebo8fPOliYc=
-golang.org/x/crypto v0.21.0 h1:X31++rzVUdKhX5sWmSOFZxx8UW/ldWx55cbf08iNAMA=
-golang.org/x/crypto v0.21.0/go.mod h1:0BP7YvVV9gBbVKyeTG0Gyn+gZm94bibOW5BjDEYAOMs=
+golang.org/x/crypto v0.25.0 h1:ypSNr+bnYL2YhwoMt2zPxHFmbAN1KZs/njMG3hxUp30=
+golang.org/x/crypto v0.25.0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20191030013958-a1ab85dbe136/go.mod h1:JXzH8nQsPlswgeRAPE3MuO9GYsAcnJvJ4vnMwN/5qkY=
@@ -1152,8 +1188,8 @@ golang.org/x/mod v0.6.0-dev.0.20220106191415-9b9b3d81d5e3/go.mod h1:3p9vT2HGsQu2
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/mod v0.6.0/go.mod h1:4mET923SAdbXp2ki8ey+zGs1SLqsuM2Y0uvdZR/fUNI=
 golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.13.0 h1:I/DsJXRlw/8l/0c24sM9yb0T4z9liZTduXvdAWYiysY=
-golang.org/x/mod v0.13.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
+golang.org/x/mod v0.17.0 h1:zY54UmvipHiNd+pm+m0x9KhZ9hl1/7QNMyxXbc6ICqA=
+golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180811021610-c39426892332/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -1206,8 +1242,8 @@ golang.org/x/net v0.7.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.15.0/go.mod h1:idbUs1IY1+zTqbi8yxTbhexhEEk5ur9LInksu6HrEpk=
-golang.org/x/net v0.21.0 h1:AQyQV4dYCvJ7vGmJyKki9+PBdyvhkSd8EIx/qb0AYv4=
-golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
+golang.org/x/net v0.25.0 h1:d/OCCoBEUq33pjydKrGQhw7IlUPI2Oylr+8qLx49kac=
+golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -1219,8 +1255,8 @@ golang.org/x/oauth2 v0.0.0-20210819190943-2bc19b11175f/go.mod h1:KelEdhl1UZF7XfJ
 golang.org/x/oauth2 v0.0.0-20211104180415-d3ed0bb246c8/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
 golang.org/x/oauth2 v0.0.0-20220223155221-ee480838109b/go.mod h1:DAh4E804XQdzx2j+YRIaUnCqCV2RuMz24cGBJ5QYIrc=
 golang.org/x/oauth2 v0.0.0-20220411215720-9780585627b5/go.mod h1:DAh4E804XQdzx2j+YRIaUnCqCV2RuMz24cGBJ5QYIrc=
-golang.org/x/oauth2 v0.12.0 h1:smVPGxink+n1ZI5pkQa8y6fZT0RW0MgCO5bFpepy4B4=
-golang.org/x/oauth2 v0.12.0/go.mod h1:A74bZ3aGXgCY0qaIC9Ahg6Lglin4AMAco8cIv9baba4=
+golang.org/x/oauth2 v0.20.0 h1:4mQdhULixXKP1rwYBW0vAijoXnkTG0BLCDRzfe1idMo=
+golang.org/x/oauth2 v0.20.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -1233,8 +1269,8 @@ golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20220601150217-0de741cfad7f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.4.0 h1:zxkM55ReGkDlKSM+Fu41A+zmbZuaPVbGMzvvdUPznYQ=
-golang.org/x/sync v0.4.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
+golang.org/x/sync v0.7.0 h1:YsImfSBoP9QPYL0xyKJPq0gcaJdG3rInoqxTWbfQu9M=
+golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -1310,8 +1346,8 @@ golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.18.0 h1:DBdB3niSjOA/O0blCZBqDefyWNYveAYMNF1Wum0DYQ4=
-golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI=
+golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210220032956-6a3ed077a48d/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
@@ -1325,8 +1361,8 @@ golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
 golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
 golang.org/x/term v0.12.0/go.mod h1:owVbMEjm3cBLCHdkQu9b1opXd4ETQWc3BhuQGKgXgvU=
-golang.org/x/term v0.18.0 h1:FcHjZXDMxI8mM3nwhX9HlKop4C0YQvCVCdwYl2wOtE8=
-golang.org/x/term v0.18.0/go.mod h1:ILwASektA3OnRv7amZ1xhE/KTR+u50pbXfZ03+6Nx58=
+golang.org/x/term v0.22.0 h1:BbsgPEJULsl2fV/AT3v15Mjva5yXKQDyKf+TbDz7QJk=
+golang.org/x/term v0.22.0/go.mod h1:F3qCibpT5AMpCRfhfT53vVJwhLtIVHhB9XDjfFvnMI4=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
@@ -1340,8 +1376,8 @@ golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
-golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
-golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
+golang.org/x/text v0.16.0 h1:a94ExnEXNtEwYLGJSIUxnWoxoRz/ZcCsV63ROupILh4=
+golang.org/x/text v0.16.0/go.mod h1:GhwF1Be+LQoKShO3cGOHzqOgRrGaYc9AvblQOmPVHnI=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20210220033141-f8bda1e9f3ba/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20210723032227-1f47c861a9ac/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
@@ -1380,8 +1416,8 @@ golang.org/x/tools v0.1.10/go.mod h1:Uh6Zz+xoGYZom868N8YTex3t7RhtHDBrE8Gzo9bV56E
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.2.0/go.mod h1:y4OqIKeOV/fWJetJ8bXPU1sEVniLMIyDAZWeHdV+NTA=
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
-golang.org/x/tools v0.14.0 h1:jvNa2pY0M4r62jkRQ6RwEZZyPcymeL9XZMLBbV7U2nc=
-golang.org/x/tools v0.14.0/go.mod h1:uYBEerGOWcJyEORxN+Ek8+TT266gXkNlHdJBwexUsBg=
+golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d h1:vU5i/LfpvrRCpgM/VPfJLg5KjxD3E+hfT1SH+d9zLwg=
+golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -1399,7 +1435,6 @@ google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9Ywl
 google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/appengine v1.5.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/appengine v1.6.6/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
-google.golang.org/appengine v1.6.7 h1:FZR1q0exgwxzPzp/aF+VccGrSfxfPpkBqjIIEq3ru6c=
 google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
 google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
 google.golang.org/genproto v0.0.0-20190307195333-5fe7a883aa19/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=

makefiles/dependency.mk

@@ -1,5 +1,5 @@
 
-GOLANGCILINT_VERSION ?= 1.49.0
+GOLANGCILINT_VERSION ?= 1.54.2
 GLOBAL_GOLANGCILINT := $(shell which golangci-lint)
 GOBIN_GOLANGCILINT:= $(shell which $(GOBIN)/golangci-lint)
 
@@ -27,7 +27,7 @@ ifeq (, $(shell which staticcheck))
 	@{ \
 	set -e ;\
 	echo 'installing honnef.co/go/tools/cmd/staticcheck ' ;\
-	go install honnef.co/go/tools/cmd/staticcheck@d7e217c1ff411395475b2971c0824e1e7cc1af98 ;\
+	go install honnef.co/go/tools/cmd/staticcheck@v0.4.7 ;\
 	}
 STATICCHECK=$(GOBIN)/staticcheck
 else

makefiles/e2e.mk

@@ -27,7 +27,10 @@ e2e-setup-core-wo-auth:
 	    --set applicationRevisionLimit=5            \
 	    --set optimize.disableComponentRevision=false        \
 	    --set image.tag=$(GIT_COMMIT)               \
-	    --wait kubevela ./charts/vela-core
+			--set multicluster.clusterGateway.image.repository=ghcr.io/oam-dev/cluster-gateway \
+			--set admissionWebhooks.patch.image.repository=ghcr.io/oam-dev/kube-webhook-certgen/kube-webhook-certgen \
+	    --wait kubevela ./charts/vela-core          \
+			--debug
 
 .PHONY: e2e-setup-core-w-auth
 e2e-setup-core-w-auth:
@@ -47,8 +50,11 @@ e2e-setup-core-w-auth:
 	    --set featureGates.zstdResourceTracker=true     \
 	    --set featureGates.zstdApplicationRevision=true \
 	    --set featureGates.validateComponentWhenSharding=true \
-	    --set multicluster.clusterGateway.enabled=true \
-	    --set sharding.enabled=true
+	    --set multicluster.clusterGateway.enabled=true  \
+			--set multicluster.clusterGateway.image.repository=ghcr.io/oam-dev/cluster-gateway \
+			--set admissionWebhooks.patch.image.repository=ghcr.io/oam-dev/kube-webhook-certgen/kube-webhook-certgen \
+	    --set sharding.enabled=true                     \
+			--debug
 	kubectl get deploy kubevela-vela-core -oyaml -n vela-system | \
 		sed 's/schedulable-shards=/shard-id=shard-0/g' | \
 		sed 's/instance: kubevela/instance: kubevela-shard/g' | \

pkg/addon/addon.go

@@ -32,10 +32,11 @@ import (
 	"sync"
 	"time"
 
+	"cuelang.org/go/cue"
+	"cuelang.org/go/cue/cuecontext"
 	"github.com/Masterminds/semver/v3"
 	"github.com/google/go-github/v32/github"
 	"github.com/imdario/mergo"
-	"github.com/kubevela/workflow/pkg/cue/model/value"
 	"github.com/pkg/errors"
 	"github.com/xanzy/go-gitlab"
 	"go.uber.org/multierr"
@@ -63,11 +64,11 @@ import (
 	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1beta1"
 	"github.com/oam-dev/kubevela/apis/types"
 	"github.com/oam-dev/kubevela/pkg/config"
-	"github.com/oam-dev/kubevela/pkg/cue/script"
 	"github.com/oam-dev/kubevela/pkg/definition"
 	"github.com/oam-dev/kubevela/pkg/multicluster"
 	"github.com/oam-dev/kubevela/pkg/oam"
 	"github.com/oam-dev/kubevela/pkg/oam/util"
+	"github.com/oam-dev/kubevela/pkg/schema"
 	"github.com/oam-dev/kubevela/pkg/utils"
 	addonutil "github.com/oam-dev/kubevela/pkg/utils/addon"
 	"github.com/oam-dev/kubevela/pkg/utils/apply"
@@ -589,12 +590,11 @@ func unmarshalToContent(content []byte) (fileContent *github.RepositoryContent,
 }
 
 func genAddonAPISchema(addonRes *UIData) error {
-	cueScript := script.CUE(addonRes.Parameters)
-	schema, err := cueScript.ParsePropertiesToSchema()
+	s, err := schema.ParsePropertiesToSchema(context.Background(), addonRes.Parameters)
 	if err != nil {
 		return err
 	}
-	addonRes.APISchema = schema
+	addonRes.APISchema = s
 	return nil
 }
 
@@ -700,12 +700,12 @@ func RenderDefinitions(addon *InstallPackage, config *rest.Config) ([]*unstructu
 }
 
 // RenderConfigTemplates render the config template
-func RenderConfigTemplates(addon *InstallPackage, cli client.Client) ([]*unstructured.Unstructured, error) {
+func RenderConfigTemplates(ctx context.Context, addon *InstallPackage, cli client.Client) ([]*unstructured.Unstructured, error) {
 	templates := make([]*unstructured.Unstructured, 0)
 
 	factory := config.NewConfigFactory(cli)
 	for _, templateFile := range addon.ConfigTemplates {
-		t, err := factory.ParseTemplate("", []byte(templateFile.Data))
+		t, err := factory.ParseTemplate(ctx, "", []byte(templateFile.Data))
 		if err != nil {
 			return nil, err
 		}
@@ -738,7 +738,7 @@ func RenderDefinitionSchema(addon *InstallPackage) ([]*unstructured.Unstructured
 }
 
 // RenderViews will render views in addons.
-func RenderViews(addon *InstallPackage) ([]*unstructured.Unstructured, error) {
+func RenderViews(ctx context.Context, addon *InstallPackage) ([]*unstructured.Unstructured, error) {
 	views := make([]*unstructured.Unstructured, 0)
 	for _, view := range addon.YAMLViews {
 		obj, err := renderObject(view)
@@ -748,7 +748,7 @@ func RenderViews(addon *InstallPackage) ([]*unstructured.Unstructured, error) {
 		views = append(views, obj)
 	}
 	for _, view := range addon.CUEViews {
-		obj, err := renderCUEView(view)
+		obj, err := renderCUEView(ctx, view)
 		if err != nil {
 			return nil, errors.Wrapf(err, "render velaQL view file %s", view.Name)
 		}
@@ -811,13 +811,13 @@ func renderSchemaConfigmap(elem ElementFile) (*unstructured.Unstructured, error)
 	return util.Object2Unstructured(cm)
 }
 
-func renderCUEView(elem ElementFile) (*unstructured.Unstructured, error) {
+func renderCUEView(ctx context.Context, elem ElementFile) (*unstructured.Unstructured, error) {
 	name, err := utils.GetFilenameFromLocalOrRemote(elem.Name)
 	if err != nil {
 		return nil, err
 	}
 
-	cm, err := velaql.ParseViewIntoConfigMap(elem.Data, name)
+	cm, err := velaql.ParseViewIntoConfigMap(ctx, elem.Data, name)
 	if err != nil {
 		return nil, err
 	}
@@ -854,10 +854,7 @@ func deleteArgsSecret(ctx context.Context, k8sClient client.Client, addonName st
 	var sec v1.Secret
 	if err := k8sClient.Get(ctx, client.ObjectKey{Namespace: types.DefaultKubeVelaNS, Name: addonutil.Addon2SecName(addonName)}, &sec); err == nil {
 		// Handle successful get operation
-		if deleteErr := k8sClient.Delete(ctx, &sec); deleteErr != nil {
-			return deleteErr
-		}
-		return nil
+		return k8sClient.Delete(ctx, &sec)
 	} else if !apierrors.IsNotFound(err) {
 		return err
 	}
@@ -938,7 +935,7 @@ func NewAddonInstaller(ctx context.Context, cli client.Client, discoveryClient *
 	return i
 }
 
-func (h *Installer) enableAddon(addon *InstallPackage) (string, error) {
+func (h *Installer) enableAddon(ctx context.Context, addon *InstallPackage) (string, error) {
 	var err error
 	h.addon = addon
 	if !h.skipVersionValidate {
@@ -949,10 +946,10 @@ func (h *Installer) enableAddon(addon *InstallPackage) (string, error) {
 		}
 	}
 
-	if err = h.installDependency(addon); err != nil {
+	if err = h.installDependency(ctx, addon); err != nil {
 		return "", err
 	}
-	if err = h.dispatchAddonResource(addon); err != nil {
+	if err = h.dispatchAddonResource(ctx, addon); err != nil {
 		return "", err
 	}
 	// we shouldn't put continue func into dispatchAddonResource, because the re-apply app maybe already update app and
@@ -1018,7 +1015,7 @@ func (h *Installer) getAddonMeta() (map[string]SourceMeta, error) {
 }
 
 // installDependency checks if addon's dependency and install it
-func (h *Installer) installDependency(addon *InstallPackage) error {
+func (h *Installer) installDependency(ctx context.Context, addon *InstallPackage) error {
 	installedAddons, err := listInstalledAddons(h.ctx, h.cli)
 	if err != nil {
 		return err
@@ -1072,7 +1069,7 @@ func (h *Installer) installDependency(addon *InstallPackage) error {
 		// try to install the dependent addon from the same registry with the current addon
 		depAddon, err = h.loadInstallPackage(dep.Name, depVersion)
 		if err == nil {
-			additionalInfo, err := depHandler.enableAddon(depAddon)
+			additionalInfo, err := depHandler.enableAddon(ctx, depAddon)
 			if err != nil {
 				return errors.Wrap(err, "fail to dispatch dependent addon resource")
 			}
@@ -1099,7 +1096,7 @@ func (h *Installer) installDependency(addon *InstallPackage) error {
 			return err
 		}
 		if err == nil {
-			additionalInfo, err := depHandler.enableAddon(depAddon)
+			additionalInfo, err := depHandler.enableAddon(ctx, depAddon)
 			if err != nil {
 				return errors.Wrap(err, "fail to dispatch dependent addon resource")
 			}
@@ -1494,7 +1491,7 @@ func (h *Installer) createOrUpdate(app *v1beta1.Application) (bool, error) {
 	return true, nil
 }
 
-func (h *Installer) dispatchAddonResource(addon *InstallPackage) error {
+func (h *Installer) dispatchAddonResource(ctx context.Context, addon *InstallPackage) error {
 	app, auxiliaryOutputs, err := RenderApp(h.ctx, addon, h.cli, h.args)
 	if err != nil {
 		return errors.Wrap(err, "render addon application fail")
@@ -1524,7 +1521,7 @@ func (h *Installer) dispatchAddonResource(addon *InstallPackage) error {
 	}
 
 	// Step2: Render the config templates
-	templates, err := RenderConfigTemplates(addon, h.cli)
+	templates, err := RenderConfigTemplates(ctx, addon, h.cli)
 	if err != nil {
 		return errors.Wrap(err, "render the config template fail")
 	}
@@ -1536,7 +1533,7 @@ func (h *Installer) dispatchAddonResource(addon *InstallPackage) error {
 	}
 
 	// Step4: Render the velaQL views
-	views, err := RenderViews(addon)
+	views, err := RenderViews(ctx, addon)
 	if err != nil {
 		return errors.Wrap(err, "render addon views fail")
 	}
@@ -1628,15 +1625,15 @@ func (h *Installer) renderNotes(addon *InstallPackage) (string, error) {
 		return "", err
 	}
 	notesFile := contextFile + "\n" + addon.Notes.Data
-	val, err := value.NewValue(notesFile, nil, "")
-	if err != nil {
+	val := cuecontext.New().CompileString(notesFile)
+	if val.Err() != nil {
 		return "", errors.Wrap(err, "build values for NOTES.cue")
 	}
-	notes, err := val.LookupValue(KeyWordNotes)
-	if err != nil {
-		return "", errors.Wrap(err, "look up notes in NOTES.cue")
+	notes := val.LookupPath(cue.ParsePath(KeyWordNotes))
+	if !notes.Exists() {
+		return "", errors.New("notes not found")
 	}
-	notesStr, err := notes.CueValue().String()
+	notesStr, err := notes.String()
 	if err != nil {
 		return "", errors.Wrap(err, "convert notes to string")
 	}

pkg/addon/addon_suite_test.go

@@ -441,7 +441,7 @@ var _ = Describe("func addon update ", func() {
 		pkg := &InstallPackage{Meta: Meta{Name: "test-update", Version: "1.3.0"}}
 		h := NewAddonInstaller(context.Background(), k8sClient, nil, nil, nil, &Registry{Name: "test"}, nil, nil, nil)
 		h.addon = pkg
-		Expect(h.dispatchAddonResource(pkg)).Should(BeNil())
+		Expect(h.dispatchAddonResource(context.Background(), pkg)).Should(BeNil())
 
 		Eventually(func() error {
 			var err error
@@ -504,7 +504,7 @@ var _ = Describe("test dry-run addon from local dir", func() {
 
 		h := NewAddonInstaller(ctx, k8sClient, dc, apply.NewAPIApplicator(k8sClient), cfg, &Registry{Name: LocalAddonRegistryName}, map[string]interface{}{"example": "test-dry-run"}, nil, nil, DryRunAddon)
 
-		_, err = h.enableAddon(pkg)
+		_, err = h.enableAddon(context.Background(), pkg)
 		Expect(err).Should(BeNil())
 
 		decoder := yaml3.NewDecoder(h.dryRunBuff)

pkg/addon/addon_test.go

@@ -267,7 +267,7 @@ func TestRenderViews(t *testing.T) {
 		DisableControlPlane: false,
 		RuntimeCluster:      false,
 	}
-	views, err := RenderViews(&addonDeployToRuntime)
+	views, err := RenderViews(context.Background(), &addonDeployToRuntime)
 	assert.NoError(t, err)
 	assert.Equal(t, len(views), 2)
 
@@ -1107,7 +1107,7 @@ func TestCheckEnableAddonErrorWhenMissMatch(t *testing.T) {
 	version2.VelaVersion = "v1.3.0"
 	i := InstallPackage{Meta: Meta{SystemRequirements: &SystemRequirements{VelaVersion: ">=1.4.0"}}}
 	installer := &Installer{}
-	_, err := installer.enableAddon(&i)
+	_, err := installer.enableAddon(context.Background(), &i)
 	assert.Equal(t, errors.As(err, &VersionUnMatchError{}), true)
 }
 

pkg/addon/helper.go

@@ -61,7 +61,7 @@ func EnableAddon(ctx context.Context, name string, version string, cli client.Cl
 	if err := validateAddonPackage(pkg); err != nil {
 		return "", errors.Wrap(err, fmt.Sprintf("failed to enable addon: %s", name))
 	}
-	return h.enableAddon(pkg)
+	return h.enableAddon(ctx, pkg)
 }
 
 // DisableAddon will disable addon from cluster.
@@ -83,10 +83,7 @@ func DisableAddon(ctx context.Context, cli client.Client, name string, config *r
 		}
 	}
 
-	if err := cli.Delete(ctx, app); err != nil {
-		return err
-	}
-	return nil
+	return cli.Delete(ctx, app)
 }
 
 // EnableAddonByLocalDir enable an addon from local dir
@@ -120,7 +117,7 @@ func EnableAddonByLocalDir(ctx context.Context, name string, dir string, cli cli
 	if len(needEnableAddonNames) > 0 {
 		return "", fmt.Errorf("you must first enable dependencies: %v", needEnableAddonNames)
 	}
-	return h.enableAddon(pkg)
+	return h.enableAddon(ctx, pkg)
 }
 
 // GetAddonStatus is general func for cli and apiServer get addon status

pkg/addon/registry.go

@@ -100,10 +100,7 @@ func (r registryImpl) AddRegistry(ctx context.Context, registry Registry) error
 					registriesKey: string(b),
 				},
 			}
-			if err := r.client.Create(ctx, cm); err != nil {
-				return err
-			}
-			return nil
+			return r.client.Create(ctx, cm)
 		}
 		return err
 	}
@@ -119,10 +116,7 @@ func (r registryImpl) AddRegistry(ctx context.Context, registry Registry) error
 	cm.Data = map[string]string{
 		registriesKey: string(b),
 	}
-	if err := r.client.Update(ctx, cm); err != nil {
-		return err
-	}
-	return nil
+	return r.client.Update(ctx, cm)
 }
 
 func (r registryImpl) DeleteRegistry(ctx context.Context, name string) error {
@@ -142,10 +136,7 @@ func (r registryImpl) DeleteRegistry(ctx context.Context, name string) error {
 	cm.Data = map[string]string{
 		registriesKey: string(b),
 	}
-	if err := r.client.Update(ctx, cm); err != nil {
-		return err
-	}
-	return nil
+	return r.client.Update(ctx, cm)
 }
 
 func (r registryImpl) UpdateRegistry(ctx context.Context, registry Registry) error {
@@ -168,10 +159,7 @@ func (r registryImpl) UpdateRegistry(ctx context.Context, registry Registry) err
 	cm.Data = map[string]string{
 		registriesKey: string(b),
 	}
-	if err := r.client.Update(ctx, cm); err != nil {
-		return err
-	}
-	return nil
+	return r.client.Update(ctx, cm)
 }
 
 func (r registryImpl) GetRegistry(ctx context.Context, name string) (Registry, error) {

pkg/addon/render.go

@@ -24,8 +24,10 @@ import (
 	"strconv"
 	"strings"
 
+	"cuelang.org/go/cue"
 	"cuelang.org/go/cue/ast"
 	"cuelang.org/go/cue/build"
+	"cuelang.org/go/cue/cuecontext"
 	"cuelang.org/go/cue/parser"
 	"github.com/cue-exp/kubevelafix"
 	"github.com/pkg/errors"
@@ -36,7 +38,8 @@ import (
 	"sigs.k8s.io/controller-runtime/pkg/client"
 
 	"github.com/kubevela/workflow/pkg/cue/model/value"
-	"github.com/kubevela/workflow/pkg/cue/packages"
+
+	workflowerrors "github.com/kubevela/workflow/pkg/errors"
 
 	common2 "github.com/oam-dev/kubevela/apis/core.oam.dev/common"
 	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1alpha1"
@@ -47,7 +50,6 @@ import (
 	"github.com/oam-dev/kubevela/pkg/oam"
 	"github.com/oam-dev/kubevela/pkg/oam/util"
 	addonutil "github.com/oam-dev/kubevela/pkg/utils/addon"
-	verrors "github.com/oam-dev/kubevela/pkg/utils/errors"
 )
 
 const (
@@ -105,19 +107,16 @@ func (a addonCueTemplateRender) toObject(cueTemplate string, path string, object
 	if err != nil {
 		return err
 	}
-	v, err := value.NewValue(contextFile, nil, "")
+	v := cuecontext.New().CompileString(contextFile)
+	out, err := value.LookupValueByScript(v, cueTemplate)
 	if err != nil {
 		return err
 	}
-	out, err := v.LookupByScript(cueTemplate)
-	if err != nil {
-		return err
+	outputContent := out.LookupPath(cue.ParsePath(path))
+	if !outputContent.Exists() {
+		return workflowerrors.LookUpNotFoundErr(path)
 	}
-	outputContent, err := out.LookupValue(path)
-	if err != nil {
-		return err
-	}
-	return outputContent.UnmarshalTo(object)
+	return value.UnmarshalTo(outputContent, object)
 }
 
 // renderApp will render Application from CUE files
@@ -144,32 +143,29 @@ func (a addonCueTemplateRender) renderApp() (*v1beta1.Application, []*unstructur
 	}
 
 	// TODO(wonderflow): add package discover to support vela own packages if needed
-	v, err := newValueWithMainAndFiles(a.addon.AppCueTemplate.Data, files, nil, "")
+	v, err := newValueWithMainAndFiles(a.addon.AppCueTemplate.Data, files, "")
 	if err != nil {
 		return nil, nil, errors.Wrap(err, "load app template with CUE files")
 	}
-	if v.Error() != nil {
-		return nil, nil, errors.Wrap(v.Error(), "load app template with CUE files")
+	if v.Err() != nil {
+		return nil, nil, errors.Wrap(v.Err(), "load app template with CUE files")
 	}
 
-	outputContent, err := v.LookupValue(renderOutputCuePath)
-	if err != nil {
-		return nil, nil, errors.Wrap(err, "render app from output field from CUE")
+	outputContent := v.LookupPath(cue.ParsePath(renderOutputCuePath))
+	if !outputContent.Exists() {
+		return nil, nil, errors.Wrap(workflowerrors.LookUpNotFoundErr(renderOutputCuePath), "render app from output field from CUE")
 	}
-	err = outputContent.UnmarshalTo(&app)
+	err = value.UnmarshalTo(outputContent, &app)
 	if err != nil {
 		return nil, nil, errors.Wrap(err, "decode app from CUE")
 	}
-	auxiliaryContent, err := v.LookupValue(renderAuxiliaryOutputsPath)
-	if err != nil {
+	auxiliaryContent := v.LookupPath(cue.ParsePath(renderAuxiliaryOutputsPath))
+	if !auxiliaryContent.Exists() {
 		// no outputs defined in app template, return normal data
-		if verrors.IsCuePathNotFound(err) {
-			return &app, res, nil
-		}
-		return nil, nil, errors.Wrap(err, "render app from output field from CUE")
+		return &app, res, nil
 	}
 
-	err = auxiliaryContent.UnmarshalTo(&outputs)
+	err = value.UnmarshalTo(auxiliaryContent, &outputs)
 	if err != nil {
 		return nil, nil, errors.Wrap(err, "decode app from CUE")
 	}
@@ -184,49 +180,49 @@ func (a addonCueTemplateRender) renderApp() (*v1beta1.Application, []*unstructur
 }
 
 // newValueWithMainAndFiles new a value from main and appendix files
-func newValueWithMainAndFiles(main string, slaveFiles []string, pd *packages.PackageDiscover, tagTempl string, opts ...func(*ast.File) error) (*value.Value, error) {
+func newValueWithMainAndFiles(main string, slaveFiles []string, _ string, opts ...func(*ast.File) error) (cue.Value, error) {
 	builder := &build.Instance{}
 
 	mainFile, err := parser.ParseFile("main.cue", main, parser.ParseComments)
 	mainFile = kubevelafix.Fix(mainFile).(*ast.File)
 	if err != nil {
-		return nil, errors.Wrap(err, "parse main file")
+		return cue.Value{}, errors.Wrap(err, "parse main file")
 	}
 	if mainFile.PackageName() == "" {
 		// add a default package main if not exist
 		mainFile, err = parser.ParseFile("main.cue", defaultPackageHeader+main, parser.ParseComments)
 		if err != nil {
-			return nil, errors.Wrap(err, "parse main file with added package main header")
+			return cue.Value{}, errors.Wrap(err, "parse main file with added package main header")
 		}
 	}
 	for _, opt := range opts {
 		if err := opt(mainFile); err != nil {
-			return nil, errors.Wrap(err, "run option func for main file")
+			return cue.Value{}, errors.Wrap(err, "run option func for main file")
 		}
 	}
 	if err := builder.AddSyntax(mainFile); err != nil {
-		return nil, errors.Wrap(err, "add main file to CUE builder")
+		return cue.Value{}, errors.Wrap(err, "add main file to CUE builder")
 	}
 
 	for idx, sf := range slaveFiles {
 		cueSF, err := parser.ParseFile("sf-"+strconv.Itoa(idx)+".cue", sf, parser.ParseComments)
 		cueSF = kubevelafix.Fix(cueSF).(*ast.File)
 		if err != nil {
-			return nil, errors.Wrap(err, "parse added file "+strconv.Itoa(idx)+" \n"+sf)
+			return cue.Value{}, errors.Wrap(err, "parse added file "+strconv.Itoa(idx)+" \n"+sf)
 		}
 		if cueSF.PackageName() != mainFile.PackageName() {
 			continue
 		}
 		for _, opt := range opts {
 			if err := opt(cueSF); err != nil {
-				return nil, errors.Wrap(err, "run option func for files")
+				return cue.Value{}, errors.Wrap(err, "run option func for files")
 			}
 		}
 		if err := builder.AddSyntax(cueSF); err != nil {
-			return nil, errors.Wrap(err, "add slave files to CUE builder")
+			return cue.Value{}, errors.Wrap(err, "add slave files to CUE builder")
 		}
 	}
-	return value.NewValueWithInstance(builder, pd, tagTempl)
+	return cuecontext.New().BuildInstance(builder), nil
 }
 
 // generateAppFramework generate application from yaml defined by template.yaml or cue file from template.cue

pkg/addon/suite_test.go

@@ -39,8 +39,6 @@ import (
 	"sigs.k8s.io/controller-runtime/pkg/log/zap"
 
 	coreoam "github.com/oam-dev/kubevela/apis/core.oam.dev"
-
-	"github.com/kubevela/workflow/pkg/cue/packages"
 	// +kubebuilder:scaffold:imports
 )
 
@@ -48,7 +46,6 @@ var cfg *rest.Config
 var scheme *runtime.Scheme
 var k8sClient client.Client
 var testEnv *envtest.Environment
-var pd *packages.PackageDiscover
 var testns string
 var dc *discovery.DiscoveryClient
 
@@ -87,9 +84,6 @@ var _ = BeforeSuite(func() {
 	Expect(err).ToNot(HaveOccurred())
 	Expect(dc).ShouldNot(BeNil())
 
-	pd, err = packages.NewPackageDiscover(cfg)
-	Expect(err).ToNot(HaveOccurred())
-	Expect(pd).ToNot(BeNil())
 	testns = "vela-system"
 	Expect(k8sClient.Create(context.Background(),
 		&v12.Namespace{TypeMeta: metav1.TypeMeta{APIVersion: "v1", Kind: "Namespace"}, ObjectMeta: metav1.ObjectMeta{

pkg/appfile/appfile.go

@@ -23,6 +23,7 @@ import (
 	"reflect"
 	"strings"
 
+	"cuelang.org/go/cue"
 	"github.com/crossplane/crossplane-runtime/pkg/fieldpath"
 	"github.com/kubevela/pkg/util/slices"
 	terraformapi "github.com/oam-dev/terraform-controller/api/v1beta2"
@@ -85,7 +86,7 @@ type Component struct {
 	Traits             []*Trait
 	FullTemplate       *Template
 	Ctx                process.Context
-	Patch              *value.Value
+	Patch              *cue.Value
 	engine             definition.AbstractEngine
 	SkipApplyWorkload  bool
 }
@@ -533,14 +534,14 @@ func baseGenerateComponent(pCtx process.Context, comp *Component, appName, ns st
 	}
 	if patcher := comp.Patch; patcher != nil {
 		workload, auxiliaries := pCtx.Output()
-		if p, err := patcher.LookupValue("workload"); err == nil {
-			if err := workload.Unify(p.CueValue()); err != nil {
+		if p := patcher.LookupPath(cue.ParsePath("workload")); p.Exists() {
+			if err := workload.Unify(p); err != nil {
 				return nil, errors.WithMessage(err, "patch workload")
 			}
 		}
 		for _, aux := range auxiliaries {
-			if p, err := patcher.LookupByScript(fmt.Sprintf("traits[\"%s\"]", aux.Name)); err == nil && p.CueValue().Err() == nil {
-				if err := aux.Ins.Unify(p.CueValue()); err != nil {
+			if p, err := value.LookupValueByScript(*patcher, fmt.Sprintf("traits[\"%s\"]", aux.Name)); err == nil && p.Err() == nil {
+				if err := aux.Ins.Unify(p); err != nil {
 					return nil, errors.WithMessagef(err, "patch outputs.%s", aux.Name)
 				}
 			}

pkg/appfile/appfile_test.go

@@ -386,7 +386,7 @@ variable "password" {
 					},
 				},
 				CapabilityCategory: oamtypes.TerraformCategory,
-				engine:             definition.NewWorkloadAbstractEngine(compName, pd),
+				engine:             definition.NewWorkloadAbstractEngine(compName),
 				Params: map[string]interface{}{
 					"variable": map[string]interface{}{
 						"account_name": "oamtest",
@@ -716,7 +716,7 @@ func TestBaseGenerateComponent(t *testing.T) {
 	assert.NoError(t, err)
 	tr := &Trait{
 		Name:   traitName,
-		engine: definition.NewTraitAbstractEngine(traitName, nil),
+		engine: definition.NewTraitAbstractEngine(traitName),
 		Template: `outputs:mytrait:{
 if context.componentType == "stateless" {
              kind:  			"Deployment"
@@ -759,7 +759,7 @@ var _ = Describe("Test use context.appLabels& context.appAnnotations in componen
 						"image": "busybox",
 						"cmd":   []interface{}{"sleep", "1000"},
 					},
-					engine: definition.NewWorkloadAbstractEngine("myweb", pd),
+					engine: definition.NewWorkloadAbstractEngine("myweb"),
 					FullTemplate: &Template{
 						TemplateStr: `
 						  output: {

pkg/appfile/dryrun/diff.go

@@ -30,7 +30,6 @@ import (
 	"sigs.k8s.io/yaml"
 
 	workflowv1alpha1 "github.com/kubevela/workflow/api/v1alpha1"
-	"github.com/kubevela/workflow/pkg/cue/packages"
 
 	"github.com/oam-dev/kubevela/apis/core.oam.dev/common"
 	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1alpha1"
@@ -41,9 +40,9 @@ import (
 )
 
 // NewLiveDiffOption creates a live-diff option
-func NewLiveDiffOption(c client.Client, cfg *rest.Config, pd *packages.PackageDiscover, as []*unstructured.Unstructured) *LiveDiffOption {
-	parser := appfile.NewApplicationParser(c, pd)
-	return &LiveDiffOption{DryRun: NewDryRunOption(c, cfg, pd, as, false), Parser: parser}
+func NewLiveDiffOption(c client.Client, cfg *rest.Config, as []*unstructured.Unstructured) *LiveDiffOption {
+	parser := appfile.NewApplicationParser(c)
+	return &LiveDiffOption{DryRun: NewDryRunOption(c, cfg, as, false), Parser: parser}
 }
 
 // ManifestKind enums the kind of OAM objects

pkg/appfile/dryrun/diff_test.go

@@ -153,8 +153,8 @@ var _ = Describe("Test Live-Diff", func() {
 
 	It("Test renderless diff", func() {
 		liveDiffOpt := LiveDiffOption{
-			DryRun: NewDryRunOption(k8sClient, cfg, pd, nil, false),
-			Parser: appfile.NewApplicationParser(k8sClient, pd),
+			DryRun: NewDryRunOption(k8sClient, cfg, nil, false),
+			Parser: appfile.NewApplicationParser(k8sClient),
 		}
 		applyFile := func(filename string, ns string) {
 			bs, err := os.ReadFile("./testdata/" + filename)

pkg/appfile/dryrun/dryrun.go

@@ -35,8 +35,6 @@ import (
 	"sigs.k8s.io/controller-runtime/pkg/client"
 	"sigs.k8s.io/yaml"
 
-	"github.com/kubevela/workflow/pkg/cue/packages"
-
 	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1alpha1"
 	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1beta1"
 	"github.com/oam-dev/kubevela/apis/types"
@@ -56,9 +54,9 @@ type DryRun interface {
 }
 
 // NewDryRunOption creates a dry-run option
-func NewDryRunOption(c client.Client, cfg *rest.Config, pd *packages.PackageDiscover, as []*unstructured.Unstructured, serverSideDryRun bool) *Option {
-	parser := appfile.NewDryRunApplicationParser(c, pd, as)
-	return &Option{c, pd, parser, parser.GenerateAppFileFromApp, cfg, as, serverSideDryRun}
+func NewDryRunOption(c client.Client, cfg *rest.Config, as []*unstructured.Unstructured, serverSideDryRun bool) *Option {
+	parser := appfile.NewDryRunApplicationParser(c, as)
+	return &Option{c, parser, parser.GenerateAppFileFromApp, cfg, as, serverSideDryRun}
 }
 
 // GenerateAppFileFunc generate the app file model from an application
@@ -67,7 +65,6 @@ type GenerateAppFileFunc func(ctx context.Context, app *v1beta1.Application) (*a
 // Option contains options to execute dry-run
 type Option struct {
 	Client          client.Client
-	PackageDiscover *packages.PackageDiscover
 	Parser          *appfile.Parser
 	GenerateAppFile GenerateAppFileFunc
 	cfg             *rest.Config
@@ -227,7 +224,7 @@ func (d *Option) ExecuteDryRunWithPolicies(ctx context.Context, application *v1b
 		app.Namespace = appNs.(string)
 	}
 	ctx = oamutil.SetNamespaceInCtx(ctx, app.Namespace)
-	parser := appfile.NewDryRunApplicationParser(d.Client, d.PackageDiscover, d.Auxiliaries)
+	parser := appfile.NewDryRunApplicationParser(d.Client, d.Auxiliaries)
 	af, err := parser.GenerateAppFileFromApp(ctx, app)
 	if err != nil {
 		return err

pkg/appfile/dryrun/suit_test.go

@@ -43,8 +43,6 @@ import (
 	logf "sigs.k8s.io/controller-runtime/pkg/log"
 	"sigs.k8s.io/controller-runtime/pkg/log/zap"
 
-	"github.com/kubevela/workflow/pkg/cue/packages"
-
 	coreoam "github.com/oam-dev/kubevela/apis/core.oam.dev"
 	"github.com/oam-dev/kubevela/pkg/appfile"
 	oamutil "github.com/oam-dev/kubevela/pkg/oam/util"
@@ -54,7 +52,6 @@ var cfg *rest.Config
 var scheme *runtime.Scheme
 var k8sClient client.Client
 var testEnv *envtest.Environment
-var pd *packages.PackageDiscover
 var dryrunOpt *Option
 var diffOpt *LiveDiffOption
 
@@ -85,9 +82,6 @@ var _ = BeforeSuite(func() {
 	k8sClient, err = client.New(cfg, client.Options{Scheme: scheme})
 	Expect(err).ToNot(HaveOccurred())
 	Expect(k8sClient).ToNot(BeNil())
-	pd, err = packages.NewPackageDiscover(cfg)
-	Expect(err).ToNot(HaveOccurred())
-	Expect(pd).ToNot(BeNil())
 
 	By("Prepare capability definitions")
 	myingressYAML := readDataFromFile("./testdata/td-myingress.yaml")
@@ -113,8 +107,8 @@ var _ = BeforeSuite(func() {
 	wfsd.SetNamespace(types.DefaultKubeVelaNS)
 	Expect(k8sClient.Create(context.TODO(), &wfsd)).Should(BeNil())
 
-	dryrunOpt = NewDryRunOption(k8sClient, cfg, pd, []*unstructured.Unstructured{cdMyWorker, tdMyIngress}, false)
-	diffOpt = &LiveDiffOption{DryRun: dryrunOpt, Parser: appfile.NewApplicationParser(k8sClient, pd)}
+	dryrunOpt = NewDryRunOption(k8sClient, cfg, []*unstructured.Unstructured{cdMyWorker, tdMyIngress}, false)
+	diffOpt = &LiveDiffOption{DryRun: dryrunOpt, Parser: appfile.NewApplicationParser(k8sClient)}
 })
 
 var _ = AfterSuite(func() {

pkg/appfile/parser.go

@@ -33,7 +33,6 @@ import (
 
 	monitorContext "github.com/kubevela/pkg/monitor/context"
 	workflowv1alpha1 "github.com/kubevela/workflow/api/v1alpha1"
-	"github.com/kubevela/workflow/pkg/cue/packages"
 
 	"github.com/oam-dev/kubevela/apis/core.oam.dev/common"
 	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1alpha1"
@@ -63,24 +62,21 @@ func (fn TemplateLoaderFn) LoadTemplate(ctx context.Context, c client.Client, ca
 // Parser is an application parser
 type Parser struct {
 	client     client.Client
-	pd         *packages.PackageDiscover
 	tmplLoader TemplateLoaderFn
 }
 
 // NewApplicationParser create appfile parser
-func NewApplicationParser(cli client.Client, pd *packages.PackageDiscover) *Parser {
+func NewApplicationParser(cli client.Client) *Parser {
 	return &Parser{
 		client:     cli,
-		pd:         pd,
 		tmplLoader: LoadTemplate,
 	}
 }
 
 // NewDryRunApplicationParser create an appfile parser for DryRun
-func NewDryRunApplicationParser(cli client.Client, pd *packages.PackageDiscover, defs []*unstructured.Unstructured) *Parser {
+func NewDryRunApplicationParser(cli client.Client, defs []*unstructured.Unstructured) *Parser {
 	return &Parser{
 		client:     cli,
-		pd:         pd,
 		tmplLoader: DryRunTemplateLoader(defs),
 	}
 }
@@ -515,7 +511,7 @@ func (p *Parser) convertTemplate2Component(name, typ string, props *runtime.RawE
 		CapabilityCategory: templ.CapabilityCategory,
 		FullTemplate:       templ,
 		Params:             settings,
-		engine:             definition.NewWorkloadAbstractEngine(name, p.pd),
+		engine:             definition.NewWorkloadAbstractEngine(name),
 	}, nil
 }
 
@@ -710,7 +706,7 @@ func (p *Parser) convertTemplate2Trait(name string, properties map[string]interf
 		HealthCheckPolicy:  templ.Health,
 		CustomStatusFormat: templ.CustomStatus,
 		FullTemplate:       templ,
-		engine:             definition.NewTraitAbstractEngine(traitName, p.pd),
+		engine:             definition.NewTraitAbstractEngine(traitName),
 	}, nil
 }