Unsafe in multi-tenant environments

[MacroPower]

• AppProjects should have their own cache.
• Not all plugins should be usable in every AppProject.
• Implement ResolveValueFilePathOrUrl

[MacroPower]

Depends on argoproj/argo-cd#15186

[daudcanugerah]

so is it safe then?

[MacroPower]

so is it safe then?

Well... My PR for this was pulled into ArgoCD v3.0.0, so in that regard, yes. However, I later learned that KCL itself can read/write anywhere via file in the stdlib, so trying to come up with a multi-tenant solution was sort of a pointless exercise.

[daudcanugerah]

thanks @MacroPower, just curious — are you still using KCL in your work or maybe as a hobby? I noticed that KCL development has been slower lately compared to 2024, so I was wondering how things are going on your end.

[MacroPower]

thanks @MacroPower, just curious — are you still using KCL in your work or maybe as a hobby? I noticed that KCL development has been slower lately compared to 2024, so I was wondering how things are going on your end.

Just as a hobby. I would not personally use any of these DSLs at work (learned my lesson after hepito was killed by vmware and a ton of jsonnet tooling was unmaintained for years). I did have high hopes for KCL since it was accepted by CNCF so it is a bit sad to see it go the same way as so many other projects in this category. I do plan to keep using it though, I think, as it mostly has all of the features I would want. And at some point it might be a good reason to learn Rust...

[daudcanugerah]

I have high hopes too. I’ve been considering using KCL at my company as an alternative to Helm templating—it feels much cleaner and more maintainable. At some point, I’ll probably need to learn Rust as well, especially since so much of the tooling is built around it, @MacroPower