viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

stem95su: scheduled Drive->site sync CronJob (every 10m)

Browse source 
CronJob stem95su-gdrive-sync (*/10) mounts the content PVC RW and
rclone-syncs the read-only Drive folder "claude" (stem claude/files) onto
it (rclone/rclone:1.74.3, scope=drive.readonly, empty-source guard +
--max-delete 25). ESO ExternalSecret stem95su-rclone <- Vault
secret/stem95su. Requires the GCP OAuth app published to Production or the
refresh token expires ~weekly.

Lands the gdrive-sync stack on master (it had landed on a feature branch
by accident on the shared devvm checkout).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Viktor Barzin 2026-06-09 08:42:26 +00:00
parent 05b50d2b96
commit 6d224861c4
1168 changed files with 120 additions and 358547 deletions
Download patch file Download diff file Expand all files Collapse all files

81
cli/email_alias.go
View file

@ -1,81 +0,0 @@
package main
import (
"fmt"
"io/ioutil"
"os"
"strings"
"github.com/badoux/checkmail"
"github.com/brianvoe/gofakeit/v6"
"github.com/golang/glog"
"github.com/pkg/errors"
)
const (
addEmailAliasUseCase = "add-email-alias"
emailAliasFlagName = "forward-to"
fromEmailDomainFlagName = "from-domain"
emailAliasesConfigFileRelative = "/modules/kubernetes/mailserver/extra/aliases.txt"
)
func addEmailAlias(gitFs *GitFS, to, fromDomain string) (string, error) {
if err := checkmail.ValidateFormat(to); err != nil {
return "", errors.Wrapf(err, fmt.Sprintf("failed to create new email aliases because invalid input format: %s", to))
}
if err := checkmail.ValidateHost(to); err != nil {
return "", errors.Wrapf(err, fmt.Sprintf("failed to create new email aliases because domain for %s does not exist", to))
}
aliasEmail := generateRandomEmail(fromDomain)
glog.Infof("adding %s -> %s alias to %s", aliasEmail, to, emailAliasesConfigFileRelative)
// Read existing contents
fRead, err := (*gitFs.fs).OpenFile(emailAliasesConfigFileRelative, os.O_RDONLY, 0644)
if err != nil {
return "", errors.Wrapf(err, "failed to open file where email aliases are recorded")
}
fileContentsBytes, err := ioutil.ReadAll(fRead)
if err != nil {
return "", errors.Wrapf(err, "failed to read existing aliases file")
}
glog.Infof("current aliases file contents: \n%s", string(fileContentsBytes))
defer fRead.Close()
newContents := getAddedAliasContents(string(fileContentsBytes), aliasEmail, to)
// Write new contents
fWrite, err := (*gitFs.fs).OpenFile(emailAliasesConfigFileRelative, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0644)
if err != nil {
return "", errors.Wrapf(err, "failed to open file where new email alias will be added")
}
glog.Infof("writing new contents to file: \n%s", newContents)
if _, err = fWrite.Write([]byte(newContents)); err != nil {
return "", errors.Wrapf(err, "failed to write config to file")
}
defer fWrite.Close()
return aliasEmail, nil
}
func generateRandomEmail(fromDomain string) string {
return fmt.Sprintf("%s-%s-generated%s", strings.ToLower(gofakeit.Adverb()), strings.ToLower(gofakeit.FirstName()), fromDomain)
}
func getPostfixAlias(from, to string) string {
return fmt.Sprintf("%s %s", from, to)
}
func getAddedAliasContents(currentContents, from, to string) string {
lines := strings.Split(currentContents, "\n")
newLines := []string{}
for _, l := range lines {
l = strings.TrimSpace(l)
if l == "" {
continue
}
if strings.HasSuffix(l, to) {
continue
}
newLines = append(newLines, l)
}
newLines = append(newLines, getPostfixAlias(from, to))
return strings.Join(newLines, "\n") + "\n"
}