diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml new file mode 100644 index 00000000..35882ab7 --- /dev/null +++ b/.github/workflows/lint.yml @@ -0,0 +1,18 @@ +--- +name: Lint yaml +on: push + +jobs: + run-kube-linter: + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v4 + + - name: Scan repo with kube-linter + uses: stackrox/kube-linter-action@v1.0.4 + with: + directory: . + format: sarif + output-file: kube-linter.sarif + continue-on-error: true \ No newline at end of file diff --git a/.kube-linter.yml b/.kube-linter.yml new file mode 100644 index 00000000..a04c9711 --- /dev/null +++ b/.kube-linter.yml @@ -0,0 +1,4 @@ +--- +checks: + addAllBuiltIn: true + exclude: [] \ No newline at end of file diff --git a/apps/deploy-debug/deployment.yml b/apps/deploy-debug/deployment.yml deleted file mode 100644 index 1e9632d5..00000000 --- a/apps/deploy-debug/deployment.yml +++ /dev/null @@ -1,20 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: debug - namespace: argocd -spec: - destination: - namespace: ir - name: staging - project: staging - source: - path: components/debug - repoURL: https://github.com/interactivereduction/gitops.git - targetRevision: HEAD - syncPolicy: - automated: - prune: true - selfHeal: true - syncOptions: - - CreateNamespace=true \ No newline at end of file diff --git a/components/debug/busybox.yaml b/components/debug/busybox.yaml deleted file mode 100644 index a7696aa8..00000000 --- a/components/debug/busybox.yaml +++ /dev/null @@ -1,42 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: busybox - namespace: ir - labels: - app: busybox -spec: - replicas: 1 - selector: - matchLabels: - app: busybox - template: - metadata: - name: busybox - labels: - app: busybox - spec: - containers: - - name: busybox - image: busybox:1.30.1 - imagePullPolicy: IfNotPresent - command: - - "sh" - - "-c" - - "while true; do sleep 6000; done" - volumeMounts: - - mountPath: /mnt/var - name: host-var - - mountPath: /mnt/sbin - name: sbin - restartPolicy: Always - volumes: - - name: host-var - hostPath: - type: Directory - path: /var - - name: sbin - hostPath: - path: /usr/sbin - type: Directory - \ No newline at end of file diff --git a/components/debug/infinite-runner.yml b/components/debug/infinite-runner.yml deleted file mode 100644 index a9eb64c2..00000000 --- a/components/debug/infinite-runner.yml +++ /dev/null @@ -1,19 +0,0 @@ ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: infinite-runner - namespace: ir -spec: - selector: - matchLabels: - app: infinite-runner - template: - metadata: - labels: - app: infinite-runner - spec: - containers: - - name: infinite-runner - image: ghcr.io/interactivereduction/runner@sha256:c167f65af1a4d2e51eec468b5ac97759a353d5a963ce2f01f6a959c5d957118d - args: ["import time; time.sleep(60*60*24*365)"] diff --git a/components/rabbitmq/base/queues.yml b/components/rabbitmq/base/queues.yml index 00ed5293..f5d5d1a4 100644 --- a/components/rabbitmq/base/queues.yml +++ b/components/rabbitmq/base/queues.yml @@ -8,7 +8,7 @@ spec: name: watched-files # name of the queue type: quorum # without providing a queue type, rabbitmq creates a classic queue autoDelete: false - durable: true # seting 'durable' to false means this queue won't survive a server restart + durable: true # setting 'durable' to false means this queue won't survive a server restart rabbitmqClusterReference: name: rabbitmq-cluster # rabbitmqCluster must exist in the same namespace as this resource ---