Render pipeline failure should block package push to remote

pkg/engine/engine.go

@@ -504,7 +504,9 @@ func (cad *cadEngine) UpdatePackageResources(ctx context.Context, repositoryObj
 	}
 
 	renderStatus, err := cad.taskHandler.DoPRResourceMutations(ctx, pr2Update, draft, oldRes, newRes)
-
+	if err != nil {
+		return nil, renderStatus, err
+	}
 	// No lifecycle change when updating package resources; updates are done.
 	repoPkgRev, err := draft.Close(ctx, "")
 	if err != nil {

pkg/task/generictaskhandler.go

@@ -225,19 +225,26 @@ func (th *genericTaskHandler) DoPRResourceMutations(ctx context.Context, pr2Upda
 
 	var renderStatus *api.RenderStatus
 	if len(appliedResources.Contents) > 0 {
+		// a porch package which fails render validation will no longer be accepted.
 		// render the package
-		// Render failure will not fail the overall API operation.
+		// Render failure WILL fail the overall API operation.
 		// The render error and result is captured as part of renderStatus above
-		// and is returned in packageresourceresources API's status field. We continue with
-		// saving the non-rendered resources to avoid losing user's changes.
-		// and supress this err.
-		_, renderStatus, _ = applyResourceMutations(ctx,
+		// and is returned in PackageRevisionResources API's status field.
+		// We do not push the package further to remote
+		// the users changes are captured on their local
+		// and can be amended using the error returned to properly validate/mutate the package before retrying
+		// we no longer suppress this err.
+		_, renderStatus, err = applyResourceMutations(ctx,
 			draft,
 			appliedResources,
 			[]mutation{&renderPackageMutation{
 				runnerOptions: runnerOptions,
 				runtime:       th.runtime,
 			}})
+		if err != nil {
+			klog.Errorf("Kpt function pipeline error occurred in render. Package has NOT been pushed to remote. Modify and Fix local package and retry.")
+			return renderStatus, err
+		}
 	} else {
 		renderStatus = nil
 	}
@@ -455,6 +462,7 @@ func applyResourceMutations(ctx context.Context, draft repository.PackageDraft,
 			renderStatus = taskResult.RenderStatus
 		}
 		if err != nil {
+			err = fmt.Errorf("%w%s%s%s", err, "\n\nKpt function pipeline error occured during render.", "\nPackage has NOT been pushed to remote.", "\nAmend local package using error message above & retry.")
 			return updatedResources, renderStatus, err
 		}