Setup CI

[jon-nfc]

To reduce overhead and to aid in multiplying development time, CI is to be setup.

Details

As actions occur within this repository, CI will run. The following workflows will be used:

• commit / merge / push Any branch (PR Required)

  • Linting of the kubernetes manifests
  • SAST Scan of the expanded manifests (kustomize build)
  • On Success: Deploy to K3d

• on schedule - schedule to be devised

  • update tasks
  • SAST Scan of manifests

Other

• kustomize.yaml manifests can be edited via CLI with kustomize edit which could be helpful to update image tags and other items as needed.

Required CI Tasks

• Style:

  • Linting of manifest yaml

• Security:

  • SAST of Kubernetes manifests

• Tests:

  • Deployment to cluster (K3d)

• Auto-Update tasks

  • Images within manifests
  • external Kustomize manifests (within git repo)
  • Fetching / updating external manifests / Helm charts¹

Footnotes

1. Related: Helm chart expansion kubernetes-manifest-tools#2 ↩