test(fn-render): update fn render E2E tests to use :latest set-namespace

This PR updates the kpt fn render E2E test suite to use the :latest version of the set-namespace function.

Key changes:

- Add isUnknown() heuristic in internal/kptops/set-namespace.go to detect Custom Resources by API group, skipping namespace for unknown CRs without existing namespace

- Update Kptfile pipeline references from pinned set-namespace image tags to :latest (ghcr.io/kptdev/krm-functions/set-namespace:latest)

- Update .expected/ golden files and diff.patch files to reflect new :latest behavior

- Add .gitattributes to force LF for *.sh and CRLF for *.bat/*.cmd, preventing bash errors in CI

- Update internal/fnruntime/runner_test.go and internal/util/render/executor_test.go

Part 2 of 2 from the original PR #4420 (fn-render portion).

Signed-off-by: Surbhi <agarwalsurbhi1807@gmail.com>

Author: SurbhiAgarwal1

.gitattributes

@@ -0,0 +1,9 @@
+# Set default behavior to automatically normalize line endings
+* text=auto
+
+# Force bash scripts to always use LF line endings
+*.sh text eol=lf
+
+# Force batch scripts to always use CRLF line endings
+*.bat text eol=crlf
+*.cmd text eol=crlf

e2e/testdata/fn-render/all-resource-deletion/.expected/diff.patch

@@ -1,43 +1,92 @@
 diff --git a/Kptfile b/Kptfile
-index 3c93e9e..fe0bc96 100644
+index 20fac6a..7f10467 100644
 --- a/Kptfile
 +++ b/Kptfile
-@@ -2,6 +2,9 @@ apiVersion: kpt.dev/v1
- kind: Kptfile
- metadata:
-   name: app
-+  namespace: staging
+@@ -1,14 +1,16 @@
+-apiVersion: kpt.dev/v1
+-kind: Kptfile
+-metadata:
+-  name: app
+-pipeline:
+-  mutators:
+-    - image: ghcr.io/kptdev/krm-functions-catalog/starlark:latest
+-      configPath: delete-all.yaml
+-    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace:latest
+-      configMap:
+-        namespace: staging
+-    - image: ghcr.io/kptdev/krm-functions-catalog/set-labels:v0.1.5
+-      configMap:
+-        tier: backend
++apiVersion: kpt.dev/v1
++kind: Kptfile
++metadata:
++  name: app
 +  labels:
 +    tier: backend
- pipeline:
-   mutators:
-     - image: ghcr.io/kptdev/krm-functions-catalog/starlark:latest
-@@ -12,3 +15,8 @@ pipeline:
-     - image: ghcr.io/kptdev/krm-functions-catalog/set-labels:v0.1.5
-       configMap:
-         tier: backend
-+status:
-+  conditions:
-+    - type: Rendered
-+      status: "True"
-+      reason: RenderSuccess
++pipeline:
++  mutators:
++    - image: ghcr.io/kptdev/krm-functions-catalog/starlark:latest
++      configPath: delete-all.yaml
++    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace:latest
++      configMap:
++        namespace: staging
++    - image: ghcr.io/kptdev/krm-functions-catalog/set-labels:v0.1.5
++      configMap:
++        tier: backend
 diff --git a/delete-all.yaml b/delete-all.yaml
-index 3c86d8b..6754b0a 100644
+index 9ddbbe2..bea1693 100644
 --- a/delete-all.yaml
 +++ b/delete-all.yaml
-@@ -17,6 +17,9 @@ metadata:
-   name: delete-all
-   annotations:
-     config.kubernetes.io/local-config: "true"
-+  namespace: staging
+@@ -1,22 +1,24 @@
+-# Copyright 2021 The kpt Authors
+-#
+-# Licensed under the Apache License, Version 2.0 (the "License");
+-# you may not use this file except in compliance with the License.
+-# You may obtain a copy of the License at
+-#
+-#      http://www.apache.org/licenses/LICENSE-2.0
+-#
+-# Unless required by applicable law or agreed to in writing, software
+-# distributed under the License is distributed on an "AS IS" BASIS,
+-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+-# See the License for the specific language governing permissions and
+-# limitations under the License.
+-apiVersion: fn.kpt.dev/v1alpha1
+-kind: StarlarkRun
+-metadata:
+-  name: delete-all
+-  annotations:
+-    config.kubernetes.io/local-config: "true"
+-source: |-
+-  # delete all resources
+-  ctx.resource_list["items"] = [x for x in ctx.resource_list["items"] if x["kind"] in ["Kptfile", "StarlarkRun"]]
++# Copyright 2021 The kpt Authors
++#
++# Licensed under the Apache License, Version 2.0 (the "License");
++# you may not use this file except in compliance with the License.
++# You may obtain a copy of the License at
++#
++#      http://www.apache.org/licenses/LICENSE-2.0
++#
++# Unless required by applicable law or agreed to in writing, software
++# distributed under the License is distributed on an "AS IS" BASIS,
++# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
++# See the License for the specific language governing permissions and
++# limitations under the License.
++apiVersion: fn.kpt.dev/v1alpha1
++kind: StarlarkRun
++metadata:
++  name: delete-all
++  annotations:
++    config.kubernetes.io/local-config: "true"
 +  labels:
 +    tier: backend
- source: |-
-   # delete all resources
-   ctx.resource_list["items"] = [x for x in ctx.resource_list["items"] if x["kind"] in ["Kptfile", "StarlarkRun"]]
++source: |-
++  # delete all resources
++  ctx.resource_list["items"] = [x for x in ctx.resource_list["items"] if x["kind"] in ["Kptfile", "StarlarkRun"]]
 diff --git a/deployment.yaml b/deployment.yaml
 deleted file mode 100644
-index 990ca9b..0000000
+index 73d3f5e..0000000
 --- a/deployment.yaml
 +++ /dev/null
 @@ -1,24 +0,0 @@
@@ -67,7 +116,7 @@ index 990ca9b..0000000
 -          image: kennethreitz/httpbin
 diff --git a/resources.yaml b/resources.yaml
 deleted file mode 100644
-index 239f0d6..0000000
+index 027731c..0000000
 --- a/resources.yaml
 +++ /dev/null
 @@ -1,19 +0,0 @@

e2e/testdata/fn-render/all-resource-deletion/Kptfile

@@ -6,7 +6,7 @@ pipeline:
   mutators:
     - image: ghcr.io/kptdev/krm-functions-catalog/starlark:latest
       configPath: delete-all.yaml
-    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace:v0.2.0
+    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace:latest
       configMap:
         namespace: staging
     - image: ghcr.io/kptdev/krm-functions-catalog/set-labels:v0.1.5

e2e/testdata/fn-render/basicpipeline-out-of-place/Kptfile

@@ -4,7 +4,7 @@ metadata:
   name: app
 pipeline:
   mutators:
-    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace:v0.2.0
+    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace:latest
       configMap:
         namespace: staging
     - image: ghcr.io/kptdev/krm-functions-catalog/set-labels:v0.1.5

e2e/testdata/fn-render/basicpipeline-semver/.expected/diff.patch

@@ -1,52 +1,100 @@
 diff --git a/Kptfile b/Kptfile
-index 2336da4..eae3be3 100644
+index 68ea4fc..85f42f5 100644
 --- a/Kptfile
 +++ b/Kptfile
-@@ -2,13 +2,20 @@ apiVersion: kpt.dev/v1
- kind: Kptfile
- metadata:
-   name: app
-+  labels:
-+    tier: backend
- pipeline:
-   mutators:
-     - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace
+@@ -1,14 +1,16 @@
+-apiVersion: kpt.dev/v1
+-kind: Kptfile
+-metadata:
+-  name: app
+-pipeline:
+-  mutators:
+-    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace
 -      tag: "0.4.1 - 0.4.3"
-       configMap:
-         namespace: staging
-+      tag: 0.4.1 - 0.4.3
-     - image: ghcr.io/kptdev/krm-functions-catalog/set-labels
+-      configMap:
+-        namespace: staging
+-    - image: ghcr.io/kptdev/krm-functions-catalog/set-labels
 -      tag: "~0.2"
-       configMap:
-         tier: backend
-+      tag: ~0.2
-+status:
-+  conditions:
-+    - type: Rendered
-+      status: "True"
-+      reason: RenderSuccess
+-      configMap:
+-        tier: backend
++apiVersion: kpt.dev/v1
++kind: Kptfile
++metadata:
++  name: app
++  labels:
++    tier: backend
++pipeline:
++  mutators:
++    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace
++      tag: "0.4.1 - 0.4.3"
++      configMap:
++        namespace: staging
++    - image: ghcr.io/kptdev/krm-functions-catalog/set-labels
++      tag: "~0.2"
++      configMap:
++        tier: backend
 diff --git a/resources.yaml b/resources.yaml
-index 1f15150..936d957 100644
+index ffbb3d7..936d957 100644
 --- a/resources.yaml
 +++ b/resources.yaml
-@@ -15,12 +15,20 @@ apiVersion: apps/v1
- kind: Deployment
- metadata:
-   name: nginx-deployment
+@@ -1,26 +1,34 @@
+-# Copyright 2026 The kpt Authors
+-#
+-# Licensed under the Apache License, Version 2.0 (the "License");
+-# you may not use this file except in compliance with the License.
+-# You may obtain a copy of the License at
+-#
+-#      http://www.apache.org/licenses/LICENSE-2.0
+-#
+-# Unless required by applicable law or agreed to in writing, software
+-# distributed under the License is distributed on an "AS IS" BASIS,
+-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+-# See the License for the specific language governing permissions and
+-# limitations under the License.
+-apiVersion: apps/v1
+-kind: Deployment
+-metadata:
+-  name: nginx-deployment
+-spec:
+-  replicas: 3
+----
+-apiVersion: custom.io/v1
+-kind: Custom
+-metadata:
+-  name: custom
+-spec:
+-  image: nginx:1.2.3
++# Copyright 2026 The kpt Authors
++#
++# Licensed under the Apache License, Version 2.0 (the "License");
++# you may not use this file except in compliance with the License.
++# You may obtain a copy of the License at
++#
++#      http://www.apache.org/licenses/LICENSE-2.0
++#
++# Unless required by applicable law or agreed to in writing, software
++# distributed under the License is distributed on an "AS IS" BASIS,
++# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
++# See the License for the specific language governing permissions and
++# limitations under the License.
++apiVersion: apps/v1
++kind: Deployment
++metadata:
++  name: nginx-deployment
 +  namespace: staging
 +  labels:
 +    tier: backend
- spec:
-   replicas: 3
++spec:
++  replicas: 3
 +  selector:
 +    matchLabels:
 +      tier: backend
- ---
- apiVersion: custom.io/v1
- kind: Custom
- metadata:
-   name: custom
++---
++apiVersion: custom.io/v1
++kind: Custom
++metadata:
++  name: custom
 +  labels:
 +    tier: backend
- spec:
-   image: nginx:1.2.3
++spec:
++  image: nginx:1.2.3

e2e/testdata/fn-render/basicpipeline-symlink/.expected/config.yaml

@@ -22,8 +22,8 @@ stdErrStripLines:
 stdErr: |-
   [WARN] resolved symlink "new-link" to ".", please note that the symlinks within the package are ignored
   Package: "basicpipeline-symlink"
-  [RUNNING] "ghcr.io/kptdev/krm-functions-catalog/set-namespace:v0.2.0"
-  [PASS] "ghcr.io/kptdev/krm-functions-catalog/set-namespace:v0.2.0" in 0s
+  [RUNNING] "ghcr.io/kptdev/krm-functions-catalog/set-namespace:latest"
+  [PASS] "ghcr.io/kptdev/krm-functions-catalog/set-namespace:latest" in 0s
   [RUNNING] "ghcr.io/kptdev/krm-functions-catalog/set-labels:v0.1.5"
   [PASS] "ghcr.io/kptdev/krm-functions-catalog/set-labels:v0.1.5" in 0s
   Successfully executed 2 function(s) in 1 package(s).

e2e/testdata/fn-render/basicpipeline-symlink/.expected/diff.patch

@@ -1,5 +1,5 @@
 diff --git a/Kptfile b/Kptfile
-index 1307fb5..f645d75 100644
+index 1307fb5..3a2c718 100644
 --- a/Kptfile
 +++ b/Kptfile
 @@ -2,6 +2,9 @@ apiVersion: kpt.dev/v1
@@ -12,15 +12,6 @@ index 1307fb5..f645d75 100644
  pipeline:
    mutators:
      - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace:v0.2.0
-@@ -10,3 +13,8 @@ pipeline:
-     - image: ghcr.io/kptdev/krm-functions-catalog/set-labels:v0.1.5
-       configMap:
-         tier: backend
-+status:
-+  conditions:
-+    - type: Rendered
-+      status: "True"
-+      reason: RenderSuccess
 diff --git a/resources.yaml b/resources.yaml
 index f2eec52..84cfb26 100644
 --- a/resources.yaml

e2e/testdata/fn-render/basicpipeline-symlink/Kptfile

@@ -4,7 +4,7 @@ metadata:
   name: app
 pipeline:
   mutators:
-    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace:v0.2.0
+    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace:latest
       configMap:
         namespace: staging
     - image: ghcr.io/kptdev/krm-functions-catalog/set-labels:v0.1.5

e2e/testdata/fn-render/basicpipeline-v1alpha2/Kptfile

@@ -4,7 +4,7 @@ metadata:
   name: app
 pipeline:
   mutators:
-    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace:v0.2.0
+    - image: ghcr.io/kptdev/krm-functions-catalog/set-namespace:latest
       configMap:
         namespace: staging
     - image: ghcr.io/kptdev/krm-functions-catalog/set-labels:v0.1.5

e2e/testdata/fn-render/basicpipeline-wasm/.expected/diff.patch

@@ -1,21 +1,8 @@
-diff --git a/Kptfile b/Kptfile
-index 17a7822..94b6f80 100644
---- a/Kptfile
-+++ b/Kptfile
-@@ -12,3 +12,8 @@ pipeline:
-     - image: ghcr.io/kptdev/krm-functions-catalog/wasm/set-labels:v0.2.4
-       configMap:
-         tier: backend
-+status:
-+  conditions:
-+    - type: Rendered
-+      status: "True"
-+      reason: RenderSuccess
 diff --git a/resources.yaml b/resources.yaml
-index eed43d6..c1de2b0 100644
+index eed43d6..e76b00d 100644
 --- a/resources.yaml
 +++ b/resources.yaml
-@@ -15,12 +15,20 @@ apiVersion: apps/v1
+@@ -15,12 +15,24 @@ apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: nginx-deployment
@@ -27,6 +14,10 @@ index eed43d6..c1de2b0 100644
 +  selector:
 +    matchLabels:
 +      tier: backend
++  template:
++    metadata:
++      labels:
++        tier: backend
  ---
  apiVersion: custom.io/v1
  kind: Custom