Add a rich example of fn framework for abstraction

2026-05-17 10:15:22 +00:00 · 2023-04-06 20:04:55 -04:00
parent d3184da4c6
commit 85d623bc86
27 changed files with 1450 additions and 3 deletions
--- a/4
+++ b/4
@@ -134,11 +134,11 @@ test-unit-all: \
 # This target is used by our Github Actions CI to run unit tests for all non-plugin modules in multiple GOOS environments.
 .PHONY: test-unit-non-plugin
 test-unit-non-plugin:
-	./hack/for-each-module.sh "make test" "./plugin/*" 15
+	./hack/for-each-module.sh "make test" "./plugin/*" 16

 .PHONY: build-non-plugin-all
 build-non-plugin-all:
-	./hack/for-each-module.sh "make build" "./plugin/*" 15
+	./hack/for-each-module.sh "make build" "./plugin/*" 16

 .PHONY: test-unit-kustomize-plugins
 test-unit-kustomize-plugins:
--- a/functions/examples/fn-framework-application/Makefile
+++ b/functions/examples/fn-framework-application/Makefile
@@ -0,0 +1,25 @@
+export KUSTOMIZE_ROOT ?= $(shell pwd | sed -E 's|(.*\/kustomize)/(.*)|\1|')
+include $(KUSTOMIZE_ROOT)/Makefile-modules.mk
+
+CONTROLLER_GEN_VERSION=v0.11.3
+
+generate: $(MYGOBIN)/controller-gen $(MYGOBIN)/embedmd
+	go generate ./...
+	embedmd -w README.md
+
+build: generate
+	go build -v -o $(MYGOBIN)/app-fn cmd/main.go
+
+$(MYGOBIN)/controller-gen:
+	go install sigs.k8s.io/controller-tools/cmd/controller-gen@$(CONTROLLER_GEN_VERSION)
+
+$(MYGOBIN)/embedmd:
+	go install github.com/campoy/embedmd@v1.0.0
+
+.PHONY: example
+example: build
+	$(MYGOBIN)/app-fn pkg/exampleapp/testdata/success/basic/config.yaml
+
+
+test: generate
+	go test -v -timeout 45m -cover ./...
--- a/functions/examples/fn-framework-application/README.md
+++ b/functions/examples/fn-framework-application/README.md
@@ -0,0 +1,132 @@
+## Kyaml Functions Framework Example: Application Custom Resource
+
+This is a moderate-complexity example of a KRM function built using the [KRM Functions Framework package](https://pkg.go.dev/sigs.k8s.io/kustomize/kyaml/fn/framework). It demonstrates how to write a function that implements a custom resource (CR) representing an abstract application. 
+
+[embedmd]:# (pkg/exampleapp/v1alpha1/testdata/success/basic/config.yaml)
+```yaml
+apiVersion: platform.example.com/v1alpha1
+kind: ExampleApp
+metadata:
+  name: simple-app-sample
+env: production
+workloads:
+  webWorkers:
+    - name: web-worker
+      domains:
+      - example.com
+  jobWorkers:
+    - name: job-worker
+      replicas: 10
+      resources: medium
+      queues:
+      - high
+      - medium
+      - low
+    - name: job-worker-2
+      replicas: 5
+      queues:
+      - bg2
+datastores:
+  postgresInstance: simple-app-sample-postgres
+```
+
+It also demonstrates the pattern of having the CR accept patches, allowing the user to customize the final result beyond the fields the CR exposes.
+
+[embedmd]:# (pkg/exampleapp/v1alpha1/testdata/success/overrides/config.yaml)
+```yaml
+apiVersion: platform.example.com/v1alpha1
+kind: ExampleApp
+metadata:
+  name: simple-app-sample
+env: production
+workloads:
+  webWorkers:
+    - name: web-worker
+      domains:
+      - first.example.com
+    - name: web-worker-no-sidecar
+      domains:
+      - second.example.com
+
+overrides:
+  additionalResources:
+    - custom-configmap.yaml
+  resourcePatches:
+    - web-worker-sidecar.yaml
+  containerPatches:
+    - custom-app-env.yaml
+```
+
+## Implementation walkthrough
+
+The entrypoint for the function is [cmd/main.go](cmd/main.go), which invokes a ["dispatcher"](pkg/dispatcher/dispatcher.go) that determines which `Filter` implements the resource passed in. The dispatcher pattern allows a single function binary to handle multiple CRs, and is also useful for evolving a single CR over time (e.g. handle `ExampleApp` API versions `example.com/v1beta1` and `example.com/v1`).
+
+[embedmd]:# (pkg/dispatcher/dispatcher.go go /.*VersionedAPIProcessor.*/ /}}/)
+```go
+	p := framework.VersionedAPIProcessor{FilterProvider: framework.GVKFilterMap{
+		"ExampleApp": map[string]kio.Filter{
+			"platform.example.com/v1alpha1": &v1alpha1.ExampleApp{},
+		},
+	}}
+```
+
+
+The ExampleApp type is defined in [pkg/exampleapp/v1alpha1/types.go](pkg/exampleapp/v1alpha1/types.go). It is responsible for implementing the logic of the CR, most of which is done by implementing the `kyaml.Filter` interface in [pkg/exampleapp/v1alpha1/processing.go](pkg/exampleapp/v1alpha1/processing.go). Internally, the filter function mostly builds up and executes a `framework.TemplateProcessor`. 
+
+The ExampleApp type is annotated with [kubebuilder markers](https://book.kubebuilder.io/reference/markers/crd-validation.html), and a Go generator uses those to create the CRD YAML in [pkg/exampleapp/v1alpha1/platform.example.com_exampleapps.yaml](pkg/exampleapp/v1alpha1/platform.example.com_exampleapps.yaml). The CR then implements `framework.ValidationSchemaProvider`, which causes the CRD to be used for validation. It also implements `framework.Validator` to add custom validations and `framework.Defaulter` to add defaulting.
+
+[embedmd]:# (pkg/exampleapp/v1alpha1/types.go go /.*type ExampleApp.*/ /}/)
+```go
+type ExampleApp struct {
+	// Embedding these structs is required to use controller-gen to produce the CRD
+	metav1.TypeMeta   `json:",inline"`
+	metav1.ObjectMeta `json:"metadata"`
+
+	// +kubebuilder:validation:Enum=production;staging;development
+	Env string `json:"env" yaml:"env"`
+
+	// +optional
+	AppImage string `json:"appImage" yaml:"appImage"`
+
+	Workloads Workloads `json:"workloads" yaml:"workloads"`
+
+	// +optional
+	Datastores Datastores `json:"datastores,omitempty" yaml:"datastores,omitempty"`
+
+	// +optional
+	Overrides Overrides `json:"overrides,omitempty" yaml:"overrides,omitempty"`
+}
+```
+
+[embedmd]:# (pkg/exampleapp/v1alpha1/processing.go go /.*Filter.*/ /error\) {/)
+```go
+func (a ExampleApp) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) {
+```
+
+[embedmd]:# (pkg/exampleapp/v1alpha1/processing.go go /.*Schema.*/ /error\) {/)
+```go
+func (a *ExampleApp) Schema() (*spec.Schema, error) {
+```
+
+[embedmd]:# (pkg/exampleapp/v1alpha1/processing.go go /.*Validate.*/ /error {/)
+```go
+func (a *ExampleApp) Validate() error {
+```
+
+[embedmd]:# (pkg/exampleapp/v1alpha1/processing.go go /.*Default.*/ /error {/)
+```go
+func (a *ExampleApp) Default() error {
+```
+
+
+## Running the Example
+
+There are three ways to try this out:
+
+A. Run `make example` in the root of the example to run the function with the test data in [pkg/exampleapp/v1alpha1/testdata/success/basic](pkg/exampleapp/v1alpha1/testdata/success/basic).
+
+B. Run `go run cmd/main.go [FILE]` in the root of the example. Try it with the test input from one of the cases in [pkg/exampleapp/v1alpha1/testdata/success](pkg/exampleapp/v1alpha1/testdata/success). For example: `go run cmd/main.go pkg/exampleapp/v1alpha1/testdata/success/basic/config.yaml`.
+
+C. Build the binary with `make build`, then run it with `app-fn [FILE]`. Try it with the test input from one of the cases in [pkg/exampleapp/v1alpha1/testdata/success](pkg/exampleapp/v1alpha1/testdata/success). For example: `app-fn pkg/exampleapp/v1alpha1/testdata/success/basic/config.yaml`.
+
+
--- a/functions/examples/fn-framework-application/cmd/main.go
+++ b/functions/examples/fn-framework-application/cmd/main.go
@@ -0,0 +1,7 @@
+package main
+
+import "sigs.k8s.io/kustomize/functions/examples/fn-framework-application/pkg/dispatcher"
+
+func main() {
+	_ = dispatcher.NewCommand().Execute()
+}
--- a/functions/examples/fn-framework-application/go.mod
+++ b/functions/examples/fn-framework-application/go.mod
@@ -0,0 +1,50 @@
+module sigs.k8s.io/kustomize/functions/examples/fn-framework-application
+
+go 1.19
+
+require (
+	github.com/spf13/cobra v1.4.0
+	k8s.io/apimachinery v0.27.0
+	k8s.io/kube-openapi v0.0.0-20230308215209-15aac26d736a
+	sigs.k8s.io/kustomize/kyaml v0.14.1
+)
+
+require (
+	github.com/asaskevich/govalidator v0.0.0-20190424111038-f61b66f89f4a // indirect
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/go-errors/errors v1.4.2 // indirect
+	github.com/go-logr/logr v1.2.3 // indirect
+	github.com/go-openapi/jsonpointer v0.19.6 // indirect
+	github.com/go-openapi/jsonreference v0.20.1 // indirect
+	github.com/go-openapi/swag v0.22.3 // indirect
+	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/golang/protobuf v1.5.3 // indirect
+	github.com/google/gnostic v0.5.7-v3refs // indirect
+	github.com/google/go-cmp v0.5.9 // indirect
+	github.com/google/gofuzz v1.1.0 // indirect
+	github.com/inconshreveable/mousetrap v1.0.0 // indirect
+	github.com/josharian/intern v1.0.0 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/mailru/easyjson v0.7.7 // indirect
+	github.com/mitchellh/mapstructure v1.4.1 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
+	github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect
+	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/rogpeppe/go-internal v1.10.0 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
+	github.com/stretchr/testify v1.8.1 // indirect
+	github.com/xlab/treeprint v1.1.0 // indirect
+	golang.org/x/net v0.8.0 // indirect
+	golang.org/x/sys v0.6.0 // indirect
+	golang.org/x/text v0.8.0 // indirect
+	google.golang.org/protobuf v1.28.1 // indirect
+	gopkg.in/inf.v0 v0.9.1 // indirect
+	gopkg.in/yaml.v2 v2.4.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
+	k8s.io/klog/v2 v2.90.1 // indirect
+	k8s.io/utils v0.0.0-20230209194617-a36077c30491 // indirect
+	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
+	sigs.k8s.io/yaml v1.3.0 // indirect
+)
--- a/functions/examples/fn-framework-application/go.sum
+++ b/functions/examples/fn-framework-application/go.sum
@@ -0,0 +1,207 @@
+cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
+github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
+github.com/asaskevich/govalidator v0.0.0-20190424111038-f61b66f89f4a h1:idn718Q4B6AGu/h5Sxe66HYVdqdGu2l9Iebqhi/AEoA=
+github.com/asaskevich/govalidator v0.0.0-20190424111038-f61b66f89f4a/go.mod h1:lB+ZfQJz7igIIfQNfa7Ml4HSf2uFQQRzpGGRXenZAgY=
+github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
+github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
+github.com/cpuguy83/go-md2man/v2 v2.0.1/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
+github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815/go.mod h1:WwZ+bS3ebgob9U8Nd0kOddGdZWjyMGR8Wziv+TBNwSE=
+github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
+github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
+github.com/go-errors/errors v1.4.2 h1:J6MZopCL4uSllY1OfXM374weqZFFItUbrImctkmUxIA=
+github.com/go-errors/errors v1.4.2/go.mod h1:sIVyrIiJhuEF+Pj9Ebtd6P/rEYROXFi3BopGUQ5a5Og=
+github.com/go-logr/logr v1.2.0/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-logr/logr v1.2.3 h1:2DntVwHkVopvECVRSlL5PSo9eG+cAkDCuckLubN+rq0=
+github.com/go-logr/logr v1.2.3/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-openapi/jsonpointer v0.19.6 h1:eCs3fxoIi3Wh6vtgmLTOjdhSpiqphQ+DaPn38N2ZdrE=
+github.com/go-openapi/jsonpointer v0.19.6/go.mod h1:osyAmYz/mB/C3I+WsTTSgw1ONzaLJoLCyoi6/zppojs=
+github.com/go-openapi/jsonreference v0.20.1 h1:FBLnyygC4/IZZr893oiomc9XaghoveYTrLC1F86HID8=
+github.com/go-openapi/jsonreference v0.20.1/go.mod h1:Bl1zwGIM8/wsvqjsOQLJ/SH+En5Ap4rVB5KVcIDZG2k=
+github.com/go-openapi/swag v0.22.3 h1:yMBqmnQ0gyZvEb/+KzuWZOXgllrXT4SADYbvDaXHv/g=
+github.com/go-openapi/swag v0.22.3/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
+github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
+github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
+github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
+github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
+github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
+github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
+github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
+github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
+github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
+github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QDs8UjoX8=
+github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
+github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
+github.com/golang/protobuf v1.5.3 h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=
+github.com/golang/protobuf v1.5.3/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
+github.com/google/gnostic v0.5.7-v3refs h1:FhTMOKj2VhjpouxvWJAV1TL304uMlb9zcDqkl6cEI54=
+github.com/google/gnostic v0.5.7-v3refs/go.mod h1:73MKFl6jIHelAJNaBGFzt3SPtZULs9dYrGFt8OiIsHQ=
+github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
+github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
+github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/gofuzz v1.1.0 h1:Hsa8mG0dQ46ij8Sl2AYJDUv1oA9/d6Vk+3LG99Oe02g=
+github.com/google/gofuzz v1.1.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I=
+github.com/inconshreveable/mousetrap v1.0.0 h1:Z8tu5sraLXCXIcARxBp/8cbvlwVa7Z1NHg9XEKhtSvM=
+github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8=
+github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
+github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
+github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
+github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
+github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
+github.com/kr/pretty v0.2.0/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
+github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
+github.com/kr/pretty v0.3.0 h1:WgNl7dwNpEZ6jJ9k1snq4pZsg7DOEN8hP9Xw0Tsjwk0=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0=
+github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
+github.com/mitchellh/mapstructure v1.4.1 h1:CpVNEelQCZBooIPDn+AR3NpivK/TIKU8bDxdASFVQag=
+github.com/mitchellh/mapstructure v1.4.1/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
+github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 h1:n6/2gBQ3RWajuToeY6ZtZTIKv2v7ThUy5KKusIT0yc0=
+github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00/go.mod h1:Pm3mSP3c5uWn86xMLZ5Sa7JB9GsEZySvHYXCTK4E9q4=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
+github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
+github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
+github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
+github.com/sergi/go-diff v1.1.0 h1:we8PVUC3FE2uYfodKH/nBHMSetSfHDR6scGdBi+erh0=
+github.com/spf13/cobra v1.4.0 h1:y+wJpx64xcgO1V+RcnwW0LEHxTKRi2ZDPSBjWnrg88Q=
+github.com/spf13/cobra v1.4.0/go.mod h1:Wo4iy3BUC+X2Fybo0PDqwJIv3dNRiZLHQymsfxlB84g=
+github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
+github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/stoewer/go-strcase v1.2.0/go.mod h1:IBiWB2sKIp3wVVQ3Y035++gc+knqhUQag1KpM8ahLw8=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/objx v0.5.0 h1:1zr/of2m5FGMsad5YfcqgdqdWrIhu+EBEJRhR1U7z/c=
+github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+github.com/stretchr/testify v1.8.1 h1:w7B6lhMri9wdJUVmEZPGGhZzrYTPvgJArz7wNPgYKsk=
+github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
+github.com/xlab/treeprint v1.1.0 h1:G/1DjNkPpfZCFt9CSh6b5/nY4VimlbHF3Rh4obvtzDk=
+github.com/xlab/treeprint v1.1.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0=
+github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
+golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
+golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
+golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
+golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.8.0 h1:Zrh2ngAOFYneWTAIAPethzeaQLuHwhuBkuV6ZiRnUaQ=
+golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
+golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
+golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.6.0 h1:MVltZSvRTcU2ljQOhs94SXPftV6DCNnZViHeQps87pQ=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.8.0 h1:57P1ETyNKtuIjB4SRd15iJxuhj8Gc416Y78H3qgMh68=
+golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
+golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
+golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
+google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
+google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
+google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
+google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo=
+google.golang.org/genproto v0.0.0-20201019141844-1ed22bb0c154/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
+google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
+google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
+google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
+google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
+google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
+google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
+google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
+google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+google.golang.org/protobuf v1.24.0/go.mod h1:r/3tXBNzIEhYS9I1OUVjXDlt8tc493IdKGjtUeSXeh4=
+google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
+google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
+google.golang.org/protobuf v1.28.1 h1:d0NfwRgPtno5B1Wa6L2DAG+KivqkdutMf1UhdNx175w=
+google.golang.org/protobuf v1.28.1/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
+gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
+gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
+gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
+honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
+k8s.io/apimachinery v0.27.0 h1:vEyy/PVMbPMCPutrssCVHCf0JNZ0Px+YqPi82K2ALlk=
+k8s.io/apimachinery v0.27.0/go.mod h1:5ikh59fK3AJ287GUvpUsryoMFtH9zj/ARfWCo3AyXTM=
+k8s.io/klog/v2 v2.90.1 h1:m4bYOKall2MmOiRaR1J+We67Do7vm9KiQVlT96lnHUw=
+k8s.io/klog/v2 v2.90.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
+k8s.io/kube-openapi v0.0.0-20230308215209-15aac26d736a h1:gmovKNur38vgoWfGtP5QOGNOA7ki4n6qNYoFAgMlNvg=
+k8s.io/kube-openapi v0.0.0-20230308215209-15aac26d736a/go.mod h1:y5VtZWM9sHHc2ZodIH/6SHzXj+TPU5USoA8lcIeKEKY=
+k8s.io/utils v0.0.0-20230209194617-a36077c30491 h1:r0BAOLElQnnFhE/ApUsg3iHdVYYPBjNSSOMowRZxxsY=
+k8s.io/utils v0.0.0-20230209194617-a36077c30491/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
+sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
+sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
+sigs.k8s.io/kustomize/kyaml v0.14.1 h1:c8iibius7l24G2wVAGZn/Va2wNys03GXLjYVIcFVxKA=
+sigs.k8s.io/kustomize/kyaml v0.14.1/go.mod h1:AN1/IpawKilWD7V+YvQwRGUvuUOOWpjsHu6uHwonSF4=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.3 h1:PRbqxJClWWYMNV1dhaG4NsibJbArud9kFxnAMREiWFE=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.3/go.mod h1:qjx8mGObPmV2aSZepjQjbmb2ihdVs8cGKBraizNC69E=
+sigs.k8s.io/yaml v1.3.0 h1:a2VclLzOGrwOHDiV8EfBGhvjHvP46CtW5j6POvhYGGo=
+sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8=
--- a/functions/examples/fn-framework-application/pkg/dispatcher/dispatcher.go
+++ b/functions/examples/fn-framework-application/pkg/dispatcher/dispatcher.go
@@ -0,0 +1,38 @@
+package dispatcher
+
+import (
+	"github.com/spf13/cobra"
+	"sigs.k8s.io/kustomize/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1"
+	"sigs.k8s.io/kustomize/kyaml/errors"
+	"sigs.k8s.io/kustomize/kyaml/fn/framework"
+	"sigs.k8s.io/kustomize/kyaml/fn/framework/command"
+	"sigs.k8s.io/kustomize/kyaml/kio"
+	"sigs.k8s.io/kustomize/kyaml/kio/filters"
+)
+
+func New() framework.ResourceListProcessor {
+	return framework.ResourceListProcessorFunc(processKnownAPIGroups)
+}
+
+func NewCommand() *cobra.Command {
+	return command.Build(New(), command.StandaloneEnabled, false)
+}
+
+func processKnownAPIGroups(rl *framework.ResourceList) error {
+	p := framework.VersionedAPIProcessor{FilterProvider: framework.GVKFilterMap{
+		"ExampleApp": map[string]kio.Filter{
+			"platform.example.com/v1alpha1": &v1alpha1.ExampleApp{},
+		},
+	}}
+	if err := p.Process(rl); err != nil {
+		return errors.Wrap(err)
+	}
+	var err error
+	// FormatFilter sorts the fields in a deterministic order, which makes the output
+	// more suitable for review in version control.
+	rl.Items, err = filters.FormatFilter{UseSchema: true}.Filter(rl.Items)
+	if err != nil {
+		return errors.WrapPrefixf(err, "formatting output")
+	}
+	return nil
+}
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/crd_gen.sh
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/crd_gen.sh
@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+
+set -eo pipefail
+
+# This generates a useful starting point for a CRD that can be used for validation.
+echo "  - Generating CRD"
+controller-gen crd paths=./... output:crd:dir=.
+
+# controller-gen does not currently support "additionalProperties: false".
+# This hack adds it manually to all properties sections of the schema.
+echo "  - Adding additionalProperties: false to all properties sections"
+if [[ "$OSTYPE" == linux* ]]; then
+  # Linux (GNU sed) expression
+  sed -i "s/\(^[[:space:]]*\)properties:/\1additionalProperties: false\n\1properties:/g" ./platform.example.com_exampleapps.yaml
+elif [[ "$OSTYPE" == darwin* ]]; then
+  # macOS (BSD sed) expression
+  sed -i "" "s/\(^[[:space:]]*\)properties:/\1additionalProperties: false\n\1properties:/g" ./platform.example.com_exampleapps.yaml
+else
+  echo "Unsupported OS: $OSTYPE"
+  exit 1
+fi
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/example_app_test.go
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/example_app_test.go
@@ -0,0 +1,17 @@
+package v1alpha1_test
+
+import (
+	"testing"
+
+	"sigs.k8s.io/kustomize/functions/examples/fn-framework-application/pkg/dispatcher"
+	"sigs.k8s.io/kustomize/kyaml/fn/framework/frameworktestutil"
+)
+
+func TestExampleApp_GoldenFiles(t *testing.T) {
+	c := frameworktestutil.CommandResultsChecker{
+		Command: dispatcher.NewCommand,
+		// TestDataDirectory:        "testdata/success",
+		// UpdateExpectedFromActual: true,
+	}
+	c.Assert(t)
+}
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/platform.example.com_exampleapps.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/platform.example.com_exampleapps.yaml
@@ -0,0 +1,131 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.11.3
+  creationTimestamp: null
+  name: exampleapps.platform.example.com
+spec:
+  group: platform.example.com
+  names:
+    kind: ExampleApp
+    listKind: ExampleAppList
+    plural: exampleapps
+    singular: exampleapp
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        additionalProperties: false
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          appImage:
+            type: string
+          datastores:
+            additionalProperties: false
+            properties:
+              postgresInstance:
+                type: string
+            type: object
+          env:
+            enum:
+            - production
+            - staging
+            - development
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          overrides:
+            minProperties: 1
+            additionalProperties: false
+            properties:
+              additionalResources:
+                items:
+                  type: string
+                type: array
+              containerPatches:
+                items:
+                  type: string
+                type: array
+              resourcePatches:
+                items:
+                  type: string
+                type: array
+            type: object
+          workloads:
+            minProperties: 1
+            additionalProperties: false
+            properties:
+              jobWorkers:
+                items:
+                  additionalProperties: false
+                  properties:
+                    name:
+                      pattern: ^[a-z0-9](?:[-a-z0-9]*[a-z0-9])?(?:\.[a-z0-9](?:[-a-z0-9]*[a-z0-9])?)*$
+                      type: string
+                    queues:
+                      items:
+                        type: string
+                      minItems: 1
+                      type: array
+                      uniqueItems: true
+                    replicas:
+                      minimum: 0
+                      type: integer
+                    resources:
+                      enum:
+                      - small
+                      - medium
+                      - large
+                      type: string
+                  required:
+                  - name
+                  - queues
+                  type: object
+                type: array
+              webWorkers:
+                items:
+                  additionalProperties: false
+                  properties:
+                    domains:
+                      items:
+                        type: string
+                      minItems: 1
+                      type: array
+                      uniqueItems: true
+                    name:
+                      pattern: ^[a-z0-9](?:[-a-z0-9]*[a-z0-9])?(?:\.[a-z0-9](?:[-a-z0-9]*[a-z0-9])?)*$
+                      type: string
+                    replicas:
+                      minimum: 0
+                      type: integer
+                    resources:
+                      enum:
+                      - small
+                      - medium
+                      - large
+                      type: string
+                  required:
+                  - domains
+                  - name
+                  type: object
+                type: array
+            type: object
+        required:
+        - env
+        - metadata
+        - workloads
+        type: object
+    served: true
+    storage: true
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/processing.go
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/processing.go
@@ -0,0 +1,216 @@
+package v1alpha1
+
+import (
+	"bytes"
+	"embed"
+	"encoding/json"
+	"fmt"
+	"strings"
+
+	"k8s.io/kube-openapi/pkg/validation/spec"
+	"sigs.k8s.io/kustomize/kyaml/errors"
+	"sigs.k8s.io/kustomize/kyaml/fn/framework"
+	"sigs.k8s.io/kustomize/kyaml/fn/framework/parser"
+	"sigs.k8s.io/kustomize/kyaml/resid"
+	"sigs.k8s.io/kustomize/kyaml/yaml"
+)
+
+//go:embed templates/*
+var templateFS embed.FS
+
+func (a *ExampleApp) Schema() (*spec.Schema, error) {
+	schema, err := framework.SchemaFromFunctionDefinition(resid.NewGvk(Group, Version, Kind), CRDString)
+	return schema, errors.WrapPrefixf(err, "parsing %s schema", Kind)
+}
+
+func (a *ExampleApp) Default() error {
+	if a.AppImage == "" {
+		a.AppImage = fmt.Sprintf("registry.example.com/path/to/%s", a.ObjectMeta.Name)
+	}
+	for i := range a.Workloads.WebWorkers {
+		if a.Workloads.WebWorkers[i].Replicas == nil {
+			a.Workloads.WebWorkers[i].Replicas = func() *int { three := 3; return &three }()
+		}
+		if a.Workloads.WebWorkers[i].Resources == "" {
+			a.Workloads.WebWorkers[i].Resources = ResourceBinSizeSmall
+		}
+	}
+	for i := range a.Workloads.JobWorkers {
+		if a.Workloads.JobWorkers[i].Replicas == nil {
+			a.Workloads.JobWorkers[i].Replicas = func() *int { one := 1; return &one }()
+		}
+		if a.Workloads.JobWorkers[i].Resources == "" {
+			a.Workloads.JobWorkers[i].Resources = ResourceBinSizeSmall
+		}
+	}
+	return nil
+}
+
+func (a *ExampleApp) Validate() error {
+	seenDomains := make(map[string]bool)
+	for i, worker := range a.Workloads.WebWorkers {
+		for _, domain := range worker.Domains {
+			if seenDomains[domain] {
+				return errors.Errorf("duplicate domain %q in worker %d", domain, i)
+			}
+			seenDomains[domain] = true
+		}
+	}
+	return nil
+}
+
+func (a ExampleApp) Filter(items []*yaml.RNode) ([]*yaml.RNode, error) {
+	templates := make([]framework.ResourceTemplate, 0)
+	for _, worker := range a.Workloads.JobWorkers {
+		templates = append(templates, framework.ResourceTemplate{
+			Templates:    parser.TemplateFiles("templates/job_worker.template.yaml").FromFS(templateFS),
+			TemplateData: a.jobWorkerTemplateData(worker),
+		})
+	}
+	for _, worker := range a.Workloads.WebWorkers {
+		templates = append(templates, framework.ResourceTemplate{
+			Templates:    parser.TemplateFiles("templates/web_worker.template.yaml").FromFS(templateFS),
+			TemplateData: a.webWorkerTemplateData(worker),
+		})
+	}
+
+	var patches []framework.PatchTemplate
+	if a.Datastores.PostgresInstance != "" {
+		templates = append(templates, framework.ResourceTemplate{
+			TemplateData: map[string]interface{}{"Name": a.Datastores.PostgresInstance},
+			Templates: parser.TemplateStrings(`apiVersion: apps.example.com/v1
+kind: PostgresSecretRequest
+metadata:
+  name: {{ .Name }}
+`)})
+		patches = append(patches, framework.PatchTemplate(&framework.ContainerPatchTemplate{
+			Templates:        parser.TemplateFiles("templates/postgres_secret_env_patch.template.yaml").FromFS(templateFS),
+			ContainerMatcher: framework.ContainerNameMatcher("app"),
+		}))
+	}
+
+	if len(a.Overrides.AdditionalResources) > 0 {
+		templates = append(templates, framework.ResourceTemplate{
+			Templates:    parser.TemplateFiles(a.Overrides.AdditionalResources...).WithExtensions(".yaml", ".template.yaml"),
+			TemplateData: a,
+		})
+	}
+
+	for i, resource := range a.Overrides.ResourcePatches {
+		overridePatches, err := a.resourceSMPsFromOverrides(resource, i, patches)
+		if err != nil {
+			return nil, err
+		}
+		patches = append(patches, overridePatches...)
+	}
+
+	if len(a.Overrides.ContainerPatches) > 0 {
+		patches = append(patches, framework.PatchTemplate(&framework.ContainerPatchTemplate{
+			Templates:    parser.TemplateFiles(a.Overrides.ContainerPatches...).WithExtensions(".yaml", ".template.yaml"),
+			TemplateData: a,
+		}))
+	}
+
+	items, err := framework.TemplateProcessor{
+		ResourceTemplates: templates,
+		PatchTemplates:    patches,
+	}.Filter(items)
+	if err != nil {
+		return nil, errors.WrapPrefixf(err, "processing templates")
+	}
+
+	return items, nil
+}
+
+// resourceSMPsFromOverrides parses the resource template and returns a patch that
+// is targeted to match resources with the same GVKNN the patch itself contains.
+// TODO: This is standard SMP semantics, so the framework should make this easier.
+func (a ExampleApp) resourceSMPsFromOverrides(resource string, i int, patches []framework.PatchTemplate) ([]framework.PatchTemplate, error) {
+	tpl, err := parser.TemplateFiles(resource).WithExtensions(".yaml", ".template.yaml").Parse()
+	if err != nil {
+		return nil, errors.WrapPrefixf(err, "parsing resource template %d", i)
+	}
+	for _, template := range tpl {
+		var b bytes.Buffer
+		if err := template.Execute(&b, a); err != nil {
+			return nil, errors.WrapPrefixf(err, "failed to render patch template %v", template.DefinedTemplates())
+		}
+		var id yaml.ResourceMeta
+		err := yaml.Unmarshal(b.Bytes(), &id)
+		if err != nil {
+			return nil, errors.WrapPrefixf(err, "failed to unmarshal resource identifier from %v", template.DefinedTemplates())
+		}
+		selector := framework.MatchAll(
+			framework.GVKMatcher(strings.Join([]string{id.APIVersion, id.Kind}, "/")), framework.NameMatcher(id.Name),
+			framework.NamespaceMatcher(id.Namespace))
+		selector.FailOnEmptyMatch = true
+		patches = append(patches, framework.PatchTemplate(&framework.ResourcePatchTemplate{
+			Templates: parser.TemplateFiles(a.Overrides.ResourcePatches...).WithExtensions(".yaml", ".template.yaml"),
+			Selector:  selector,
+		}))
+	}
+	return patches, nil
+}
+
+type resourceBucket struct {
+	Requests resourceAllocation `yaml:"requests" json:"requests"`
+	Limits   resourceAllocation `yaml:"limits" json:"limits"`
+}
+
+type resourceAllocation struct {
+	CPU    string `yaml:"cpu" json:"cpu"`
+	Memory string `yaml:"memory" json:"memory"`
+}
+
+//nolint:gochecknoglobals
+var resourceBucketConversion = map[ResourceBinSize]resourceBucket{
+	"small": {
+		Requests: resourceAllocation{CPU: "100m", Memory: "128Mi"},
+		Limits:   resourceAllocation{CPU: "500m", Memory: "512Mi"},
+	},
+	"medium": {
+		Requests: resourceAllocation{CPU: "1", Memory: "1Gi"},
+		Limits:   resourceAllocation{CPU: "2", Memory: "2Gi"},
+	},
+	"large": {
+		Requests: resourceAllocation{CPU: "8", Memory: "8Gi"},
+		Limits:   resourceAllocation{CPU: "8", Memory: "8Gi"},
+	},
+}
+
+const anArbitraryMultiplier = 2
+
+func (a ExampleApp) jobWorkerTemplateData(w JobWorker) map[string]interface{} {
+	resourcesJson, err := json.Marshal(resourceBucketConversion[w.Resources])
+	if err != nil {
+		panic("failed to marshal resources for job worker" + err.Error())
+	}
+
+	return map[string]interface{}{
+		"Name":            w.Name,
+		"AppImage":        a.AppImage,
+		"QueueList":       strings.Join(w.Queues, ","),
+		"ProcessPoolSize": len(w.Queues) * anArbitraryMultiplier,
+		"Resources":       string(resourcesJson),
+		"Replicas":        w.Replicas,
+		"Environment":     a.Env,
+	}
+}
+
+const containerPort = 8080
+
+func (a ExampleApp) webWorkerTemplateData(w WebWorker) map[string]interface{} {
+	resourcesJson, err := json.Marshal(resourceBucketConversion[w.Resources])
+	if err != nil {
+		panic("failed to marshal resources for web worker" + err.Error())
+	}
+
+	return map[string]interface{}{
+		"Name":        w.Name,
+		"AppImage":    a.AppImage,
+		"Resources":   string(resourcesJson),
+		"Replicas":    w.Replicas,
+		"Port":        containerPort,
+		"Environment": a.Env,
+	}
+}
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/templates/job_worker.template.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/templates/job_worker.template.yaml
@@ -0,0 +1,45 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    name:  {{ .Name }}
+    env: {{ .Environment }}
+    type: jobs
+  name:  {{ .Name }}
+spec:
+  replicas: {{ .Replicas }}
+  selector:
+    matchLabels:
+      type: jobs
+      name: {{ .Name }}
+      env: {{ .Environment }}
+  template:
+    metadata:
+      labels:
+        type: jobs
+        name: {{ .Name }}
+        env: {{ .Environment }}
+    spec:
+      automountServiceAccountToken: false
+      containers:
+      - name: app
+        image: {{ .AppImage }}
+        args: [
+          "job-worker",
+          "--queues",
+          "{{ .QueueList }}",
+          "--workers", "{{ .ProcessPoolSize }}",
+        ]
+        readinessProbe:
+          exec:
+            command:
+              - "bin/job-worker-readiness-probe"
+        resources: {{ .Resources }}
+        env:
+          - name: KUBE_NAMESPACE
+            valueFrom:
+              fieldRef:
+                fieldPath: metadata.namespace
+          - name: ENV
+            value: {{ .Environment }}
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/templates/postgres_secret_env_patch.template.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/templates/postgres_secret_env_patch.template.yaml
@@ -0,0 +1,6 @@
+env:
+- name: DATABASE_URL
+  valueFrom:
+    secretKeyRef:
+      name: database-url
+      key: DATABASE_URL
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/templates/web_worker.template.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/templates/web_worker.template.yaml
@@ -0,0 +1,50 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .Name }}
+  labels:
+    name: {{ .Name }}
+    env: {{ .Environment }}
+    type: web
+spec:
+  replicas: {{ .Replicas }}
+  selector:
+    matchLabels:
+        name: {{ .Name }}
+        env: {{ .Environment }}
+        type: web
+  template:
+    metadata:
+      labels:
+        name: {{ .Name }}
+        env: {{ .Environment }}
+        type: web
+    spec:
+      containers:
+        - name: app
+          image: {{ .AppImage }}
+          args:
+            - web
+          ports:
+            - containerPort: {{ .Port }}
+              name: http
+          readinessProbe:
+            httpGet:
+              path: "/ping"
+              port: {{ .Port }}
+              httpHeaders:
+                - name: "X-Forwarded-Proto"
+                  value: "https"
+            initialDelaySeconds: 20
+            timeoutSeconds: 3
+          env:
+            - name: ENV
+              value: {{ .Environment }}
+            - name: PORT
+              value: "{{ .Port }}"
+            - name: KUBE_NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
+          resources: {{ .Resources }}
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/error/config.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/error/config.yaml
@@ -0,0 +1,21 @@
+apiVersion: platform.example.com/v1alpha1
+kind: ExampleApp
+metadata:
+  name: simple-app-sample
+env: invalid
+workloads:
+  webWorkers:
+    - name: web-worker
+      replicas: -1
+      resources: small
+      domains:
+      - example.com
+    - name: web-worker-2
+      domains:
+      - example.com
+  jobWorkers:
+    - name: job-worker-$$
+      queues: []
+datastores:
+  mongoDB: simple-app-sample-mongo
+extraProperty: true
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/error/errors.txt
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/error/errors.txt
@@ -0,0 +1,8 @@
+validation failure list:
+.extraProperty in body is a forbidden property
+workloads.jobWorkers\[0\].name in body should match
+workloads.jobWorkers\[0\].queues in body should have at least 1 items
+workloads.webWorkers\[0\].replicas in body should be greater than or equal to 0
+datastores.mongoDB in body is a forbidden property
+env in body should be one of \[production staging development\]
+duplicate domain \"example.com\" in worker 1
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/basic/config.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/basic/config.yaml
@@ -0,0 +1,24 @@
+apiVersion: platform.example.com/v1alpha1
+kind: ExampleApp
+metadata:
+  name: simple-app-sample
+env: production
+workloads:
+  webWorkers:
+    - name: web-worker
+      domains:
+      - example.com
+  jobWorkers:
+    - name: job-worker
+      replicas: 10
+      resources: medium
+      queues:
+      - high
+      - medium
+      - low
+    - name: job-worker-2
+      replicas: 5
+      queues:
+      - bg2
+datastores:
+  postgresInstance: simple-app-sample-postgres
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/basic/expected.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/basic/expected.yaml
@@ -0,0 +1,149 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: job-worker
+  labels:
+    name: job-worker
+    type: jobs
+    env: production
+spec:
+  replicas: 10
+  selector:
+    matchLabels:
+      name: job-worker
+      type: jobs
+      env: production
+  template:
+    metadata:
+      labels:
+        name: job-worker
+        type: jobs
+        env: production
+    spec:
+      automountServiceAccountToken: false
+      containers:
+      - name: app
+        image: registry.example.com/path/to/simple-app-sample
+        args: ["job-worker", "--queues", "high,medium,low", "--workers", "6"]
+        env:
+        - name: KUBE_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        - name: ENV
+          value: production
+        - name: DATABASE_URL
+          valueFrom:
+            secretKeyRef:
+              name: database-url
+              key: DATABASE_URL
+        resources: {"limits": {"cpu": "2", "memory": "2Gi"}, "requests": {"cpu": "1", "memory": "1Gi"}}
+        readinessProbe:
+          exec:
+            command:
+            - "bin/job-worker-readiness-probe"
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: job-worker-2
+  labels:
+    name: job-worker-2
+    type: jobs
+    env: production
+spec:
+  replicas: 5
+  selector:
+    matchLabels:
+      name: job-worker-2
+      type: jobs
+      env: production
+  template:
+    metadata:
+      labels:
+        name: job-worker-2
+        type: jobs
+        env: production
+    spec:
+      automountServiceAccountToken: false
+      containers:
+      - name: app
+        image: registry.example.com/path/to/simple-app-sample
+        args: ["job-worker", "--queues", "bg2", "--workers", "2"]
+        env:
+        - name: KUBE_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        - name: ENV
+          value: production
+        - name: DATABASE_URL
+          valueFrom:
+            secretKeyRef:
+              name: database-url
+              key: DATABASE_URL
+        resources: {"limits": {"cpu": "500m", "memory": "512Mi"}, "requests": {"cpu": "100m", "memory": "128Mi"}}
+        readinessProbe:
+          exec:
+            command:
+            - "bin/job-worker-readiness-probe"
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: web-worker
+  labels:
+    name: web-worker
+    type: web
+    env: production
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      name: web-worker
+      type: web
+      env: production
+  template:
+    metadata:
+      labels:
+        name: web-worker
+        type: web
+        env: production
+    spec:
+      containers:
+      - name: app
+        image: registry.example.com/path/to/simple-app-sample
+        args:
+        - web
+        ports:
+        - name: http
+          containerPort: 8080
+        env:
+        - name: ENV
+          value: production
+        - name: PORT
+          value: "8080"
+        - name: KUBE_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        - name: DATABASE_URL
+          valueFrom:
+            secretKeyRef:
+              name: database-url
+              key: DATABASE_URL
+        resources: {"limits": {"cpu": "500m", "memory": "512Mi"}, "requests": {"cpu": "100m", "memory": "128Mi"}}
+        readinessProbe:
+          httpGet:
+            port: 8080
+            httpHeaders:
+            - name: "X-Forwarded-Proto"
+              value: "https"
+            path: "/ping"
+          initialDelaySeconds: 20
+          timeoutSeconds: 3
+---
+apiVersion: apps.example.com/v1
+kind: PostgresSecretRequest
+metadata:
+  name: simple-app-sample-postgres
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/overrides/config.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/overrides/config.yaml
@@ -0,0 +1,21 @@
+apiVersion: platform.example.com/v1alpha1
+kind: ExampleApp
+metadata:
+  name: simple-app-sample
+env: production
+workloads:
+  webWorkers:
+    - name: web-worker
+      domains:
+      - first.example.com
+    - name: web-worker-no-sidecar
+      domains:
+      - second.example.com
+
+overrides:
+  additionalResources:
+    - custom-configmap.yaml
+  resourcePatches:
+    - web-worker-sidecar.yaml
+  containerPatches:
+    - custom-app-env.yaml
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/overrides/custom-app-env.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/overrides/custom-app-env.yaml
@@ -0,0 +1,6 @@
+env:
+- name: MY_NEW_VAR
+  value: "new value"
+envFrom:
+- configMapRef:
+    name: custom-configmap
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/overrides/custom-configmap.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/overrides/custom-configmap.yaml
@@ -0,0 +1,6 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: custom-configmap
+data:
+  LOADED: "true"
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/overrides/expected.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/overrides/expected.yaml
@@ -0,0 +1,126 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: web-worker
+  labels:
+    name: web-worker
+    type: web
+    env: production
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      name: web-worker
+      type: web
+      env: production
+  template:
+    metadata:
+      labels:
+        name: web-worker
+        type: web
+        env: production
+    spec:
+      containers:
+      - name: app
+        image: registry.example.com/path/to/simple-app-sample
+        args:
+        - web
+        ports:
+        - name: http
+          containerPort: 8080
+        envFrom:
+        - configMapRef:
+            name: custom-configmap
+        env:
+        - name: ENV
+          value: production
+        - name: PORT
+          value: "8080"
+        - name: KUBE_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        - name: MY_NEW_VAR
+          value: "new value"
+        resources: {"limits": {"cpu": "500m", "memory": "512Mi"}, "requests": {"cpu": "100m", "memory": "128Mi"}}
+        readinessProbe:
+          httpGet:
+            port: 8080
+            httpHeaders:
+            - name: "X-Forwarded-Proto"
+              value: "https"
+            path: "/ping"
+          initialDelaySeconds: 20
+          timeoutSeconds: 3
+      - name: sidecar
+        image: registry.example.com/path/to/custom-sidecar
+        args:
+        - run
+        envFrom:
+        - configMapRef:
+            name: custom-configmap
+        env:
+        - name: MY_NEW_VAR
+          value: "new value"
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: web-worker-no-sidecar
+  labels:
+    name: web-worker-no-sidecar
+    type: web
+    env: production
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      name: web-worker-no-sidecar
+      type: web
+      env: production
+  template:
+    metadata:
+      labels:
+        name: web-worker-no-sidecar
+        type: web
+        env: production
+    spec:
+      containers:
+      - name: app
+        image: registry.example.com/path/to/simple-app-sample
+        args:
+        - web
+        ports:
+        - name: http
+          containerPort: 8080
+        envFrom:
+        - configMapRef:
+            name: custom-configmap
+        env:
+        - name: ENV
+          value: production
+        - name: PORT
+          value: "8080"
+        - name: KUBE_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        - name: MY_NEW_VAR
+          value: "new value"
+        resources: {"limits": {"cpu": "500m", "memory": "512Mi"}, "requests": {"cpu": "100m", "memory": "128Mi"}}
+        readinessProbe:
+          httpGet:
+            port: 8080
+            httpHeaders:
+            - name: "X-Forwarded-Proto"
+              value: "https"
+            path: "/ping"
+          initialDelaySeconds: 20
+          timeoutSeconds: 3
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: custom-configmap
+data:
+  LOADED: "true"
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/overrides/web-worker-sidecar.yaml
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/testdata/success/overrides/web-worker-sidecar.yaml
@@ -0,0 +1,12 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: web-worker
+spec:
+  template:
+    spec:
+      containers:
+        - name: sidecar
+          image: registry.example.com/path/to/custom-sidecar
+          args:
+          - run
--- a/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/types.go
+++ b/functions/examples/fn-framework-application/pkg/exampleapp/v1alpha1/types.go
@@ -0,0 +1,108 @@
+// +groupName=platform.example.com
+// +versionName=v1alpha1
+// +kubebuilder:validation:Required
+
+package v1alpha1
+
+import (
+	_ "embed"
+	"strings"
+
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+)
+
+//go:generate ./crd_gen.sh
+
+//go:embed platform.example.com_exampleapps.yaml
+var CRDString string
+
+const Group = "platform.example.com"
+const Version = "v1alpha1"
+const Kind = "ExampleApp"
+
+//nolint:gochecknoglobals
+var GroupVersion = strings.Join([]string{Group, Version}, "/")
+
+type ExampleApp struct {
+	// Embedding these structs is required to use controller-gen to produce the CRD
+	metav1.TypeMeta   `json:",inline"`
+	metav1.ObjectMeta `json:"metadata"`
+
+	// +kubebuilder:validation:Enum=production;staging;development
+	Env string `json:"env" yaml:"env"`
+
+	// +optional
+	AppImage string `json:"appImage" yaml:"appImage"`
+
+	Workloads Workloads `json:"workloads" yaml:"workloads"`
+
+	// +optional
+	Datastores Datastores `json:"datastores,omitempty" yaml:"datastores,omitempty"`
+
+	// +optional
+	Overrides Overrides `json:"overrides,omitempty" yaml:"overrides,omitempty"`
+}
+
+// +kubebuilder:validation:MinProperties=1
+type Overrides struct {
+	// +optional
+	AdditionalResources []string `json:"additionalResources,omitempty" yaml:"additionalResources,omitempty"`
+
+	// +optional
+	ResourcePatches []string `json:"resourcePatches,omitempty" yaml:"resourcePatches,omitempty"`
+
+	// +optional
+	ContainerPatches []string `json:"containerPatches,omitempty" yaml:"containerPatches,omitempty"`
+}
+
+// +kubebuilder:validation:MinProperties=1
+type Workloads struct {
+	// +optional
+	JobWorkers []JobWorker `json:"jobWorkers,omitempty" yaml:"jobWorkers,omitempty"`
+
+	// +optional
+	WebWorkers []WebWorker `json:"webWorkers,omitempty" yaml:"webWorkers,omitempty"`
+}
+
+// +kubebuilder:validation:Pattern="^[a-z0-9](?:[-a-z0-9]*[a-z0-9])?(?:\\.[a-z0-9](?:[-a-z0-9]*[a-z0-9])?)*$"
+type KubernetesMetaName string
+
+type JobWorker struct {
+	Name KubernetesMetaName `json:"name" yaml:"name"`
+
+	// +kubebuilder:validation:Minimum=0
+	// +optional
+	Replicas *int `json:"replicas,omitempty" yaml:"replicas,omitempty"`
+
+	// +optional
+	Resources ResourceBinSize `json:"resources,omitempty" yaml:"resources,omitempty"`
+
+	// +kubebuilder:validation:UniqueItems=true
+	// +kubebuilder:validation:MinItems=1
+	Queues []string `json:"queues" yaml:"queues"`
+}
+
+// +kubebuilder:validation:Enum=small;medium;large
+type ResourceBinSize string
+
+const ResourceBinSizeSmall ResourceBinSize = "small"
+
+type WebWorker struct {
+	Name KubernetesMetaName `json:"name" yaml:"name"`
+
+	// +kubebuilder:validation:Minimum=0
+	// +optional
+	Replicas *int `json:"replicas,omitempty" yaml:"replicas,omitempty"`
+
+	// +optional
+	Resources ResourceBinSize `json:"resources,omitempty" yaml:"resources,omitempty"`
+
+	// +kubebuilder:validation:UniqueItems=true
+	// +kubebuilder:validation:MinItems=1
+	Domains []string `json:"domains" yaml:"domains"`
+}
+
+type Datastores struct {
+	// +optional
+	PostgresInstance string `json:"postgresInstance,omitempty" yaml:"postgresInstance,omitempty"`
+}
--- a/go.work
+++ b/go.work
@@ -10,6 +10,7 @@ use (
 	./cmd/mdtogo
 	./cmd/pluginator
 	./functions/examples/application-cr/image
+	./functions/examples/fn-framework-application
 	./functions/examples/injection-tshirt-sizes/image
 	./functions/examples/template-go-nginx/image
 	./functions/examples/validator-kubeval/image
--- a/go.work.sum
+++ b/go.work.sum
@@ -1,20 +1,32 @@
 github.com/360EntSecGroup-Skylar/excelize v1.4.1/go.mod h1:vnax29X2usfl7HHkBrX5EvSCJcmH3dT9luvxzu8iGAE=
 github.com/PuerkitoBio/goquery v1.5.0/go.mod h1:qD2PgZ9lccMbQlc7eEOjaeRlFQON7xY8kdmcsrnKqMg=
 github.com/andybalholm/cascadia v1.0.0/go.mod h1:GsXiBklL0woXo1j/WYWtSYYC4ouU9PqHO0sqidkEA4Y=
+github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs=
 github.com/dustmop/soup v1.1.2-0.20190516214245-38228baa104e/go.mod h1:CgNC6SGbT+Xb8wGGvzilttZL1mc5sQ/5KkcxsZttMIk=
+github.com/evanphx/json-patch v4.12.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
 github.com/fsnotify/fsnotify v1.4.9 h1:hsms1Qyu0jgnwNXIxa+/V/PDsU6CfLf6CNO8H7IWoS4=
 github.com/go-openapi/spec v0.19.3 h1:0XRyw8kguri6Yw4SxhsQA/atC88yqrk0+G4YhI2wabc=
 github.com/go-openapi/strfmt v0.19.5/go.mod h1:eftuHTlB/dI8Uq8JJOyRlieZf+WkkxUuk0dgdHXr2Qk=
 github.com/go-openapi/validate v0.19.8/go.mod h1:8DJv2CVJQ6kGNpFW6eV9N3JviE1C85nY1c2z52x1Gk4=
+github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0/go.mod h1:fyg7847qk6SyHyPtNmDHnmrv/HOrqktSC+C9fM+CJOE=
 github.com/gobuffalo/here v0.6.0/go.mod h1:wAG085dHOYqUpf+Ap+WOdrPTp5IYcDAs/x7PLa8Y5fM=
+github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
+github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
+github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/googleapis/gnostic v0.1.0/go.mod h1:sJBsCZ4ayReDTBIg8b9dl28c5xFWyhBTVRp3pOg5EKY=
+github.com/kr/pretty v0.3.0/go.mod h1:640gp4NfQd8pI5XOwp5fnNeVWj67G7CFk/SaSQn7NBk=
 github.com/markbates/pkger v0.17.1/go.mod h1:0JoVlrol20BSywW79rN3kdFFsE5xYM+rSCQDXbLhiuI=
+github.com/moby/spdystream v0.2.0/go.mod h1:f7i0iNDQJ059oMTcWxx8MA/zKFIuD/lY+0GqbN2Wy8c=
 github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826/go.mod h1:TaXosZuwdSHYgviHp1DAtfrULt5eUgsSMsZf+YrPgl8=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
 github.com/onsi/ginkgo/v2 v2.1.4/go.mod h1:um6tUpWM/cxCK3/FK8BXqEiUMUwRgSM4JXG47RKZmLU=
+github.com/onsi/ginkgo/v2 v2.9.1/go.mod h1:FEcmzVcCHl+4o9bQZVab+4dC9+j+91t2FHSzmGAPfuo=
 github.com/onsi/gomega v1.19.0/go.mod h1:LY+I3pBVzYsTBU1AnDwOSxaYi9WoWiqgwooUqq9yPro=
+github.com/onsi/gomega v1.27.3/go.mod h1:5vG284IBtfDAmDyrK+eGyZmUgUlmi+Wngqo557cZ6Gw=
+github.com/onsi/gomega v1.27.4/go.mod h1:riYq/GJKh8hhoM01HN6Vmuy93AarCXCBGpvFDK3q3fQ=
 github.com/paulmach/orb v0.1.3/go.mod h1:VFlX/8C+IQ1p6FTRRKzKoOPJnvEtA5G0Veuqwbu//Vk=
 github.com/qri-io/starlib v0.4.2-0.20200213133954-ff2e8cd5ef8d/go.mod h1:7DPO4domFU579Ga6E61sB9VFNaniPVwJP5C4bBCu3wA=
+github.com/rogpeppe/go-internal v1.6.1/go.mod h1:xXDCJY+GAPziupqXw64V24skbSoqbTEfhy4qGm1nDQc=
 github.com/spf13/cobra v1.0.0/go.mod h1:/6GTrnGXV9HjY+aR4k0oJ5tcvakLuG6EuKReYlHNrgE=
 github.com/spf13/viper v1.4.0/go.mod h1:PTJ7Z/lr49W6bUbkmS1V3by4uWynFiR9p7+dSq/yZzE=
 github.com/stretchr/testify v1.2.3-0.20181224173747-660f15d67dbb/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
@@ -22,25 +34,33 @@ github.com/ugorji/go v1.1.4/go.mod h1:uQMGLiO92mf5W77hV/PUCpI3pbzQx3CRekS0kk+RGr
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 go.starlark.net v0.0.0-20190528202925-30ae18b8564f/go.mod h1:c1/X6cHgvdXj6pUlmWKMkuqRnW4K8x2vwt6JAaaircg=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
+golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
+golang.org/x/mod v0.9.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/net v0.0.0-20180218175443-cbe0f9307d01/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190522155817-f3200d17e092/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.3.0/go.mod h1:MBQ8lrhLObU/6UmLb4fmbmk5OcyYmqtbGd/9yIeKjEE=
+golang.org/x/net v0.4.0/go.mod h1:MBQ8lrhLObU/6UmLb4fmbmk5OcyYmqtbGd/9yIeKjEE=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sys v0.0.0-20191022100944-742c48ecaeb7/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
+golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
 golang.org/x/text v0.5.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
+golang.org/x/time v0.0.0-20220210224613-90d013bbcef8/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.4.0/go.mod h1:UE5sM2OK9E/d67R0ANs2xJizIymRP5gJU295PvKXxjQ=
+golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
+golang.org/x/tools v0.7.0/go.mod h1:4pg6aUX35JBAogB10C9AtvVL+qowtN4pT3CGSQex14s=
 golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2/go.mod h1:K8+ghG5WaK9qNqU5K3HdILfMLy1f3aNYFI/wnl100a8=
 google.golang.org/grpc v1.21.0/go.mod h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM=
 gopkg.in/yaml.v2 v2.2.7/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v3 v3.0.0-20200121175148-a6ecf24a6d71/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 k8s.io/apimachinery v0.18.3/go.mod h1:OaXp26zu/5J7p0f92ASynJa1pZo06YlV9fG7BoWbCko=
 k8s.io/klog v1.0.0 h1:Pt+yjF5aB1xDSVbau4VsWe+dQNzA0qv1LlXdC2dF6Q8=
+k8s.io/klog/v2 v2.80.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
 k8s.io/kube-openapi v0.0.0-20200410145947-61e04a5be9a6/go.mod h1:GRQhZsXIAJ1xR0C9bd8UpWHZ5plfAS9fzPjJuQ6JL3E=
 k8s.io/kube-openapi v0.0.0-20210323165736-1a6458611d18/go.mod h1:UDkTDGblU9FBGrWsHAJ8G3ukmPKbCiJL1gCuA1DFd4I=
 k8s.io/kube-openapi v0.0.0-20210421082810-95288971da7e/go.mod h1:vHXdDvt9+2spS2Rx9ql3I8tycm3H9FDfdUoIuKCefvw=
--- a/hack/for-each-module.sh
+++ b/hack/for-each-module.sh
@@ -15,7 +15,7 @@ fi

 cmd=$1
 skip_pattern="${2-}"
-expected_module_count=${3:-44}
+expected_module_count=${3:-45}

 seen=()
 # Hack scripts must be run from the root of the repository.