📖 Update book-v4 with changes from release 4.13.0 (#5519)

* (infra/demos): Remove asciicinema demos

The asciicinema demos add tooling debt, maintenance burden, poor UX,
and provides little value to users, making it not worth the effort.

* fix(go/v4): CI lint by using make lint instead of golangci-lint-action so the custom binary (with logcheck plugin) is built and used.

* fix(helm/v2-alpha): use manager.replicas from values in chart template

Generated-by: Cursor/Claude

* ✨ (helm/v2-alpha): Add manager.envOverrides for CLI env overrides

* fix(helm/v2-alpha): use sigs.k8s.io/yaml for 2-space YAML indentation in generated value files

* 🌱 Bump goreleaser/goreleaser-action from 6 to 7

Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6 to 7.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@v6...v7)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* 🐛 fix: resolve panic when multiple plugins define the same flag (e.g. edit with go/v4 + helm) (#5506)

fix: resolve panic when multiple plugins define the same flag (e.g. edit with go/v4 + helm)

- Merge duplicate flags instead of binding twice; sync parsed value to all plugins in PreRunE.
- Aggregate flag help as "For plugin (key): desc AND for plugin (key): desc".
- Return a clear error when the same flag name is used with different types (e.g. bool vs string).

Generated-by: Cursor/Claude

* ✨ chore(go/v4): Upgrade cert-manager from 1.19.3 to 1.19.4 (#5509)

chore(go/v4): Upgrade cert-manager from 1.19.3 to 1.19.4

* 🌱 cleanup(docs): remove script no longer used to build samples under books (#5511)

cleanup(docs): remove script no longer used to build samples under books

* 🌱 chore: add yamllint config for 2-space indentation and Kubernetes YAML best practices (#5507)

chore: add yamllint config for 2-space indentation and Kubernetes YAML best practices

* 🌱 infra: Remove pkg/internal/validation (#5512)

infra: remove validation package

Package validation was copied from k8s.io/apimachinery/utils/validation to avoid adding a dependency. Considering that kubebuilder already depends on apimachinery, using the original package requires less maintainance.

* 🌱 Bump actions/upload-artifact from 6.0.0 to 7.0.0

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* 🐛 fix(go/v4,helm/v2-alpha): use 0644/0755 for generated files (#5508)

fix(go/v4,helm/v2-alpha): use 0644/0755 for generated files

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Vitor Floriano <107767584+vitorfloriano@users.noreply.github.com>
Co-authored-by: Kubernetes Prow Robot <20407524+k8s-ci-robot@users.noreply.github.com>
Co-authored-by: v47 <victor.verg@hotmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: 5 people

.github/workflows/lint.yml

@@ -32,8 +32,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6.0.2
-      - name: Run yamllint make target
+      - name: Install Helm
+        run: make install-helm
+      - name: Run yamllint (YAML + Helm chart output 2-space indentation)
         run: make yamllint
+      - name: Check sample permissions
+        run: make check-sample-permissions
 
   license:
     runs-on: ubuntu-latest

.github/workflows/release-version-ci.yml

@@ -38,7 +38,7 @@ jobs:
           echo "$HOME/bin" >> $GITHUB_PATH
           
       - name: Run GoReleaser in mock mode using tag
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
         with:
           version: v2.7.0
           args: release --skip=publish --clean -f ./build/.goreleaser.yml

.github/workflows/release.yml

@@ -29,14 +29,14 @@ jobs:
           curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b $HOME/bin
           echo "$HOME/bin" >> $GITHUB_PATH
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
         with:
           version: v2.7.0
           args: release -f ./build/.goreleaser.yml
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Upload assets
-        uses: actions/upload-artifact@v6.0.0
+        uses: actions/upload-artifact@v7.0.0
         with:
           name: kubebuilder
           path: dist/*

.github/workflows/scorecard.yml

@@ -60,7 +60,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: SARIF file
           path: results.sarif

.gitignore

@@ -31,3 +31,5 @@ docs/book/src/docs
 
 ## Skip testdata files that generate by tests using TestContext
 **/e2e-*/**
+# Optional rendered chart output (e.g. from make yamllint-helm when debugging)
+testdata/.helm-rendered.yaml

.yamllint

@@ -0,0 +1,33 @@
+# yamllint configuration for Kubebuilder
+# Aligns with Kubernetes YAML best practices:
+# - 2-space indentation, spaces only (no tabs)
+# - true/false over yes/no for booleans (truthy)
+# - Newline at end of file, no trailing spaces (POSIX)
+# - Unix newlines, consistent colons/hyphens
+# - No duplicate keys (key-duplicates)
+# - Document start (---) recommended for manifests; not enforced to allow existing testdata
+extends: default
+rules:
+  line-length:
+    max: 120
+    allow-non-breakable-words: true
+    # Generated CRDs and Prometheus manifests often have long lines
+    ignore: |
+      **/config/crd/bases/*.yaml
+      **/config/prometheus/*.yaml
+  indentation:
+    spaces: 2
+    # Kubernetes manifests often use list items at same indent as key (rules:\n- apiGroups:)
+    indent-sequences: whatever
+    # Uncommented replacement blocks in config/default/kustomization.yaml use 1-space for list items
+    ignore: |
+      **/config/default/kustomization.yaml
+  # Kubernetes: prefer true/false over yes/no; do not check keys (e.g. "on" in workflows)
+  truthy:
+    check-keys: false
+  # Allow single trailing blank line (common in editors)
+  empty-lines:
+    max-end: 1
+  # Optional: document-start (---) is K8s best practice but not enforced for testdata
+  document-start: disable
+  document-end: disable

.yamllint-helm

@@ -0,0 +1,6 @@
+# yamllint config for Helm-rendered manifest output (stdin or temp files).
+# Extends repo .yamllint; relaxes rules that are noisy for generated/template output.
+extends: .yamllint
+rules:
+  line-length: disable
+  trailing-spaces: disable

Makefile

@@ -104,7 +104,7 @@ check-docs: ## Run the script to ensure that the docs are updated
 	./hack/docs/check.sh
 
 .PHONY: lint
-lint: golangci-lint yamllint ## Run golangci-lint linter & yamllint
+lint: golangci-lint yamllint check-sample-permissions ## Run golangci-lint linter, yamllint & sample permissions check
 	$(GOLANGCI_LINT) run
 
 .PHONY: lint-fix
@@ -115,10 +115,36 @@ lint-fix: golangci-lint ## Run golangci-lint linter and perform fixes
 lint-config: golangci-lint ## Verify golangci-lint linter configuration
 	$(GOLANGCI_LINT) config verify
 
-.PHONY: yamllint
-yamllint:
-	@files=$$(find testdata -name '*.yaml' ! -path 'testdata/*/dist/*'); \
-    	docker run --rm $$(tty -s && echo "-it" || echo) -v $(PWD):/data cytopia/yamllint:latest $$files -d "{extends: relaxed, rules: {line-length: {max: 120}}}" --no-warnings
+# Lint all YAML: testdata files (yamllint-yaml) + Helm-rendered charts (yamllint-helm).
+# Repo YAML uses .yamllint; Helm output uses .yamllint-helm.
+YAMLLINT_FILES := $(shell find testdata -name '*.yaml' ! -path 'testdata/.helm-rendered.yaml' \( ! -path 'testdata/*/dist/*' -o -path 'testdata/*/dist/chart/Chart.yaml' -o -path 'testdata/*/dist/chart/values.yaml' \) 2>/dev/null)
+HELM_CHARTS := $(shell find testdata docs/book -type d -path '*/dist/chart' 2>/dev/null)
+
+.PHONY: yamllint yamllint-yaml yamllint-helm
+yamllint: yamllint-yaml yamllint-helm
+
+yamllint-yaml:
+	@docker run --rm $$(tty -s && echo "-it" || echo) -v $(PWD):/data -w /data cytopia/yamllint:latest $(YAMLLINT_FILES) -c .yamllint --no-warnings
+
+yamllint-helm:
+	@for chart in $(HELM_CHARTS); do \
+	  helm template release $$chart --namespace=release-system 2>/dev/null | \
+	  docker run --rm -i -v $(PWD):/data -w /data cytopia/yamllint:latest -c .yamllint-helm --no-warnings - || (echo "yamllint-helm: $$chart failed"; exit 1); \
+	done
+
+# All Kubebuilder-generated samples (go/v4, kustomize, helm use machinery defaults 0755/0644).
+SAMPLE_ROOTS := testdata \
+	docs/book/src/getting-started/testdata \
+	docs/book/src/cronjob-tutorial/testdata \
+	docs/book/src/multiversion-tutorial/testdata
+
+.PHONY: check-sample-permissions
+check-sample-permissions: ## Fail if any file/dir under testdata or docs samples has wrong permissions (expect 0644/0755). bin/ excluded.
+	@for d in $(SAMPLE_ROOTS); do \
+		test -d "$$d" || continue; \
+		bad=$$(find "$$d" -path '*/bin' -prune -o \( \( -type f ! -perm 0644 \) -o \( -type d ! -perm 0755 \) \) -print 2>/dev/null); \
+		if [ -n "$$bad" ]; then echo "Invalid permissions under $$d (expect 0644/0755):"; echo "$$bad"; exit 1; fi; \
+	done
 
 .PHONY: golangci-lint
 golangci-lint:

README.md

@@ -38,8 +38,6 @@ Follow the [instructions](https://book.kubebuilder.io/quick-start.html#installat
 
 See the [Getting Started](https://book.kubebuilder.io/quick-start.html) documentation.
 
-![Quick Start](docs/gif/kb-demo.v3.11.1.svg)
-
 Also, ensure that you check out the [Deploy Image](./docs/book/src/plugins/available/deploy-image-plugin-v1-alpha.md)
 Plugin. This plugin allows users to scaffold API/Controllers to deploy and manage an
 Operand (image) on the cluster following the guidelines and best practices. It abstracts the