498b01396c
The CronJob ran every 5 min on a vanilla python:3.12-alpine image, doing `apk add git` + `pip install uptime-kuma-api` from scratch on every invocation. Caught at ~3.2 MB/s on k8s-node4's root LV, contributing to ~8 MB/s sustained on the pve-data thin pool (sdc) — ~804 GB written over the prior 18 h. Commented out the kubernetes_cron_job_v1.status_page_pusher resource (kept ns / SA / RBAC / ConfigMap intact for trivial revert). Re-enable once a custom image with git + uptime-kuma-api baked in is published so no per-run cold install happens. status.viktorbarzin.me stops updating until then.
621 lines
22 KiB
HCL
621 lines
22 KiB
HCL
variable "tls_secret_name" {
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
variable "nfs_server" { type = string }
|
|
|
|
data "vault_kv_secret_v2" "viktor" {
|
|
mount = "secret"
|
|
name = "viktor"
|
|
}
|
|
|
|
locals {
|
|
index_html = file("${path.module}/index.html")
|
|
}
|
|
|
|
resource "kubernetes_namespace_v1" "status_page" {
|
|
metadata {
|
|
name = "status-page"
|
|
labels = {
|
|
tier = local.tiers.aux
|
|
}
|
|
}
|
|
}
|
|
|
|
resource "kubernetes_config_map_v1" "status_page_template" {
|
|
metadata {
|
|
name = "status-page-template"
|
|
namespace = kubernetes_namespace_v1.status_page.metadata[0].name
|
|
}
|
|
data = {
|
|
"index.html" = local.index_html
|
|
"CNAME" = "status.viktorbarzin.me"
|
|
}
|
|
}
|
|
|
|
resource "kubernetes_service_account_v1" "status_page" {
|
|
metadata {
|
|
name = "status-page-pusher"
|
|
namespace = kubernetes_namespace_v1.status_page.metadata[0].name
|
|
}
|
|
}
|
|
|
|
resource "kubernetes_cluster_role_v1" "ingress_reader" {
|
|
metadata {
|
|
name = "status-page-ingress-reader"
|
|
}
|
|
rule {
|
|
api_groups = ["networking.k8s.io"]
|
|
resources = ["ingresses"]
|
|
verbs = ["list"]
|
|
}
|
|
}
|
|
|
|
resource "kubernetes_cluster_role_binding_v1" "ingress_reader" {
|
|
metadata {
|
|
name = "status-page-ingress-reader"
|
|
}
|
|
role_ref {
|
|
api_group = "rbac.authorization.k8s.io"
|
|
kind = "ClusterRole"
|
|
name = kubernetes_cluster_role_v1.ingress_reader.metadata[0].name
|
|
}
|
|
subject {
|
|
kind = "ServiceAccount"
|
|
name = kubernetes_service_account_v1.status_page.metadata[0].name
|
|
namespace = kubernetes_namespace_v1.status_page.metadata[0].name
|
|
}
|
|
}
|
|
|
|
# =============================================================================
|
|
# Status Page Pusher ── DISABLED 2026-05-26
|
|
# Reads Uptime Kuma monitors, generates status.json, pushes to GitHub Pages.
|
|
#
|
|
# Disabled because per-invocation `apk add git` + `pip install uptime-kuma-api`
|
|
# was hammering the Proxmox sdc thin pool (~3.2 MB/s of the ~8 MB/s sustained
|
|
# host-side, ~804 GB written over 18 h). Re-enable with a custom image that
|
|
# bakes git + uptime-kuma-api so cold-install is gone.
|
|
# =============================================================================
|
|
# resource "kubernetes_cron_job_v1" "status_page_pusher" {
|
|
# metadata {
|
|
# name = "status-page-pusher"
|
|
# namespace = kubernetes_namespace_v1.status_page.metadata[0].name
|
|
# }
|
|
# spec {
|
|
# concurrency_policy = "Forbid"
|
|
# failed_jobs_history_limit = 3
|
|
# successful_jobs_history_limit = 3
|
|
# schedule = "*/5 * * * *"
|
|
# job_template {
|
|
# metadata {}
|
|
# spec {
|
|
# backoff_limit = 1
|
|
# ttl_seconds_after_finished = 300
|
|
# template {
|
|
# metadata {}
|
|
# spec {
|
|
# service_account_name = kubernetes_service_account_v1.status_page.metadata[0].name
|
|
# container {
|
|
# name = "status-pusher"
|
|
# image = "docker.io/library/python:3.12-alpine"
|
|
# command = ["/bin/sh", "-c", <<-EOT
|
|
# apk add --no-cache git >/dev/null 2>&1
|
|
# pip install --quiet --disable-pip-version-check uptime-kuma-api
|
|
# python3 << 'PYEOF'
|
|
# import os, sys, json, time, subprocess
|
|
# from datetime import datetime, timezone, timedelta
|
|
# from uptime_kuma_api import UptimeKumaApi
|
|
#
|
|
# UPTIME_KUMA_URL = "http://uptime-kuma.uptime-kuma.svc.cluster.local"
|
|
# UPTIME_KUMA_PASS = os.environ["UPTIME_KUMA_PASSWORD"]
|
|
# GITHUB_TOKEN = os.environ["GITHUB_TOKEN"]
|
|
# REPO = "ViktorBarzin/status-page"
|
|
# REPO_URL = "https://" + GITHUB_TOKEN + "@github.com/" + REPO + ".git"
|
|
#
|
|
# TYPE_NAMES = {
|
|
# "http": "HTTP",
|
|
# "port": "TCP Port",
|
|
# "ping": "Ping",
|
|
# "keyword": "HTTP Keyword",
|
|
# "grpc-keyword": "gRPC",
|
|
# "dns": "DNS",
|
|
# "docker": "Docker",
|
|
# "push": "Push",
|
|
# "steam": "Steam",
|
|
# "gamedig": "GameDig",
|
|
# "mqtt": "MQTT",
|
|
# "sqlserver": "SQL Server",
|
|
# "postgres": "PostgreSQL",
|
|
# "mysql": "MySQL",
|
|
# "mongodb": "MongoDB",
|
|
# "radius": "RADIUS",
|
|
# "redis": "Redis",
|
|
# "tailscale-ping": "Tailscale Ping",
|
|
# "real-browser": "Real Browser",
|
|
# "group": "Group",
|
|
# "snmp": "SNMP",
|
|
# "json-query": "JSON Query",
|
|
# }
|
|
#
|
|
# def beat_status_is_up(status_val):
|
|
# """Handle both enum and int status values."""
|
|
# if hasattr(status_val, "value"):
|
|
# return status_val.value == 1
|
|
# return status_val == 1
|
|
#
|
|
# # Build namespace -> external URL map from K8s ingresses
|
|
# ingress_map = {}
|
|
# try:
|
|
# import ssl, urllib.request
|
|
# token_path = "/var/run/secrets/kubernetes.io/serviceaccount/token"
|
|
# ca_path = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
|
|
# if os.path.exists(token_path):
|
|
# with open(token_path) as f:
|
|
# token = f.read().strip()
|
|
# ctx = ssl.create_default_context(cafile=ca_path)
|
|
# k8s_host = os.environ.get("KUBERNETES_SERVICE_HOST", "kubernetes.default.svc")
|
|
# k8s_port = os.environ.get("KUBERNETES_SERVICE_PORT", "443")
|
|
# req = urllib.request.Request(
|
|
# "https://" + k8s_host + ":" + k8s_port + "/apis/networking.k8s.io/v1/ingresses",
|
|
# headers={"Authorization": "Bearer " + token}
|
|
# )
|
|
# resp = urllib.request.urlopen(req, context=ctx, timeout=10)
|
|
# ing_data = json.loads(resp.read())
|
|
# for item in ing_data.get("items", []):
|
|
# ns = item["metadata"]["namespace"]
|
|
# rules = item.get("spec", {}).get("rules", [])
|
|
# if rules and rules[0].get("host"):
|
|
# host = rules[0]["host"]
|
|
# if ns not in ingress_map:
|
|
# ingress_map[ns] = "https://" + host
|
|
# print(f"Built ingress map: {len(ingress_map)} namespaces")
|
|
# except Exception as e:
|
|
# print(f"Warning: could not build ingress map: {e}")
|
|
#
|
|
# print("Connecting to Uptime Kuma...")
|
|
# api = UptimeKumaApi(UPTIME_KUMA_URL, timeout=30)
|
|
# api.login("admin", UPTIME_KUMA_PASS)
|
|
#
|
|
# monitors = api.get_monitors()
|
|
# print(f"Fetched {len(monitors)} monitors")
|
|
#
|
|
# # Get current heartbeats for live status
|
|
# heartbeats = api.get_heartbeats()
|
|
#
|
|
# now = datetime.now(timezone.utc)
|
|
#
|
|
# def calc_uptime(beat_list, hours):
|
|
# cutoff = now - timedelta(hours=hours)
|
|
# relevant = []
|
|
# for b in beat_list:
|
|
# t = str(b["time"])
|
|
# try:
|
|
# bt = datetime.fromisoformat(t.replace("Z", "+00:00"))
|
|
# except (ValueError, TypeError):
|
|
# continue
|
|
# if bt.tzinfo is None:
|
|
# bt = bt.replace(tzinfo=timezone.utc)
|
|
# if bt > cutoff:
|
|
# relevant.append(b)
|
|
# if not relevant:
|
|
# return None
|
|
# up_count = sum(1 for b in relevant if beat_status_is_up(b.get("status", 0)))
|
|
# return round(up_count / len(relevant) * 100, 1)
|
|
#
|
|
# groups = {}
|
|
# for m in monitors:
|
|
# raw_type = m.get("type", "unknown")
|
|
# monitor_type = raw_type.value if hasattr(raw_type, "value") else str(raw_type)
|
|
# monitor_type = monitor_type.lower().replace("monitortype.", "")
|
|
# if m["name"].startswith("[External] "):
|
|
# group_name = "External Reachability"
|
|
# else:
|
|
# group_name = TYPE_NAMES.get(monitor_type, monitor_type.upper())
|
|
#
|
|
# if not m.get("active", True):
|
|
# continue
|
|
# else:
|
|
# # Get latest heartbeat for current status
|
|
# mid = m["id"]
|
|
# mon_beats = heartbeats.get(mid, heartbeats.get(str(mid), []))
|
|
# if mon_beats:
|
|
# # Flatten nested lists (API format varies by version)
|
|
# flat = []
|
|
# for item in mon_beats:
|
|
# if isinstance(item, list):
|
|
# flat.extend(item)
|
|
# elif isinstance(item, dict):
|
|
# flat.append(item)
|
|
# mon_beats = flat if flat else mon_beats
|
|
# latest = mon_beats[-1] if mon_beats else None
|
|
# if latest and isinstance(latest, dict) and beat_status_is_up(latest.get("status", 0)):
|
|
# status = "up"
|
|
# else:
|
|
# status = "down"
|
|
# else:
|
|
# status = "pending"
|
|
#
|
|
# uptime_24h = None
|
|
# uptime_7d = None
|
|
# uptime_30d = None
|
|
# try:
|
|
# beats = api.get_monitor_beats(m["id"], 720)
|
|
# if beats:
|
|
# uptime_24h = calc_uptime(beats, 24)
|
|
# uptime_7d = calc_uptime(beats, 168)
|
|
# uptime_30d = calc_uptime(beats, 720)
|
|
# except Exception as e:
|
|
# print(f" Warning: could not get beats for {m['name']}: {e}")
|
|
#
|
|
# if group_name not in groups:
|
|
# groups[group_name] = []
|
|
#
|
|
# # Extract external URL for HTTP monitors
|
|
# monitor_url = None
|
|
# raw_url = m.get("url", "") or ""
|
|
# if monitor_type == "http" and raw_url:
|
|
# if ".svc.cluster.local" not in raw_url and raw_url.startswith("http"):
|
|
# monitor_url = raw_url.rstrip("/")
|
|
# else:
|
|
# # Internal URL — derive external from namespace
|
|
# import re as _re
|
|
# ns_match = _re.search(r"//[^.]+\.([^.]+)\.svc\.cluster\.local", raw_url)
|
|
# if ns_match:
|
|
# ns = ns_match.group(1)
|
|
# if ns in ingress_map:
|
|
# monitor_url = ingress_map[ns]
|
|
#
|
|
# entry = {
|
|
# "name": m["name"],
|
|
# "status": status,
|
|
# "uptime_24h": uptime_24h,
|
|
# "uptime_7d": uptime_7d,
|
|
# "uptime_30d": uptime_30d,
|
|
# }
|
|
# if monitor_url:
|
|
# entry["url"] = monitor_url
|
|
#
|
|
# groups[group_name].append(entry)
|
|
#
|
|
# api.disconnect()
|
|
# print(f"Generated {len(groups)} groups")
|
|
#
|
|
# # ============ Detect external-down / internal-up divergence ============
|
|
# external_status = {}
|
|
# internal_status = {}
|
|
# for gname, gmonitors in groups.items():
|
|
# for mon in gmonitors:
|
|
# if mon["name"].startswith("[External] "):
|
|
# svc = mon["name"].replace("[External] ", "").lower()
|
|
# external_status[svc] = mon["status"]
|
|
# elif gname != "External Reachability":
|
|
# internal_status[mon["name"].lower()] = mon["status"]
|
|
#
|
|
# divergent = []
|
|
# for svc, ext_st in external_status.items():
|
|
# if ext_st != "down":
|
|
# continue
|
|
# for iname, int_st in internal_status.items():
|
|
# if svc in iname or iname in svc:
|
|
# if int_st == "up":
|
|
# divergent.append(svc)
|
|
# break
|
|
#
|
|
# divergence_count = len(divergent)
|
|
# metric_body = (
|
|
# "# HELP external_internal_divergence_count Services externally down but internally up\n"
|
|
# "# TYPE external_internal_divergence_count gauge\n"
|
|
# f"external_internal_divergence_count {divergence_count}\n"
|
|
# )
|
|
# for svc in divergent:
|
|
# metric_body += f'external_internal_divergence_services{{service="{svc}"}} 1\n'
|
|
#
|
|
# try:
|
|
# import urllib.request as _ur
|
|
# req = _ur.Request(
|
|
# "http://prometheus-prometheus-pushgateway.monitoring:9091/metrics/job/external-monitor-divergence",
|
|
# data=metric_body.encode(),
|
|
# method="POST"
|
|
# )
|
|
# _ur.urlopen(req, timeout=10)
|
|
# if divergent:
|
|
# print(f"WARNING: {len(divergent)} services externally down but internally up: {divergent}")
|
|
# else:
|
|
# print("No external/internal divergence detected")
|
|
# except Exception as e:
|
|
# print(f"Warning: could not push divergence metric: {e}")
|
|
#
|
|
# # ============ Fetch incidents from GitHub Issues ============
|
|
# import urllib.request, urllib.error, re as _re2
|
|
#
|
|
# def fetch_github_json(url):
|
|
# req = urllib.request.Request(url, headers={
|
|
# "Authorization": "token " + GITHUB_TOKEN,
|
|
# "Accept": "application/vnd.github.v3+json",
|
|
# "User-Agent": "status-page-pusher",
|
|
# })
|
|
# resp = urllib.request.urlopen(req, timeout=15)
|
|
# return json.loads(resp.read())
|
|
#
|
|
# def parse_severity(labels):
|
|
# for lbl in labels:
|
|
# name = lbl["name"].lower()
|
|
# if name in ("sev1", "sev2", "sev3"):
|
|
# return name
|
|
# return "sev3"
|
|
#
|
|
# def parse_affected_services(body):
|
|
# services = []
|
|
# if not body:
|
|
# return services
|
|
# in_section = False
|
|
# for line in body.split("\n"):
|
|
# stripped = line.strip()
|
|
# if stripped.lower().startswith("## affected"):
|
|
# in_section = True
|
|
# continue
|
|
# if in_section:
|
|
# if stripped.startswith("##"):
|
|
# break
|
|
# if stripped.startswith("- ") and not stripped.startswith("- <!--"):
|
|
# services.append(stripped[2:].strip())
|
|
# return services
|
|
#
|
|
# def parse_timeline(comments):
|
|
# timeline = []
|
|
# for c in comments:
|
|
# body = (c.get("body") or "").strip()
|
|
# status_label = "Update"
|
|
# if body.startswith("**"):
|
|
# end = body.find("**", 2)
|
|
# if end > 2:
|
|
# status_label = body[2:end]
|
|
# timeline.append({
|
|
# "timestamp": c["created_at"],
|
|
# "status": status_label,
|
|
# "body": body,
|
|
# })
|
|
# return timeline
|
|
#
|
|
# def extract_postmortem(comments):
|
|
# for c in reversed(comments):
|
|
# body = (c.get("body") or "").lower()
|
|
# if "postmortem" in body:
|
|
# urls = _re2.findall(r'https?://\S+', c.get("body", ""))
|
|
# if urls:
|
|
# return urls[0].rstrip(")>")
|
|
# return None
|
|
#
|
|
# incidents_active = []
|
|
# incidents_resolved = []
|
|
# user_reports = []
|
|
#
|
|
# ISSUES_REPO = "ViktorBarzin/infra"
|
|
#
|
|
# def has_label(issue, name):
|
|
# return any(l["name"].lower() == name.lower() for l in issue.get("labels", []))
|
|
#
|
|
# def parse_form_field(body, heading):
|
|
# """Extract value after a ### heading from GitHub Issue Form response."""
|
|
# if not body:
|
|
# return None
|
|
# lines = body.split("\n")
|
|
# for i, ln in enumerate(lines):
|
|
# if heading.lower() in ln.lower() and ln.strip().startswith("#"):
|
|
# for j in range(i + 1, len(lines)):
|
|
# val = lines[j].strip()
|
|
# if val and not val.startswith("#") and val != "_No response_":
|
|
# return val
|
|
# return None
|
|
#
|
|
# def parse_user_report_context(body):
|
|
# """Extract structured fields from the issue form body."""
|
|
# service = parse_form_field(body, "affected service")
|
|
# # Strip parenthetical hints: "Nextcloud (files, calendar)" -> "Nextcloud"
|
|
# if service and "(" in service:
|
|
# service = service[:service.index("(")].strip()
|
|
# return {
|
|
# "service": service,
|
|
# "error_type": parse_form_field(body, "what kind of error"),
|
|
# "scope": parse_form_field(body, "is it just you"),
|
|
# "when": parse_form_field(body, "when did it start"),
|
|
# "url": parse_form_field(body, "url you were accessing"),
|
|
# }
|
|
#
|
|
# try:
|
|
# issues_url = "https://api.github.com/repos/" + ISSUES_REPO + "/issues"
|
|
#
|
|
# # Fetch admin-declared incidents (open)
|
|
# open_incidents = fetch_github_json(
|
|
# issues_url + "?labels=incident&state=open&per_page=50&sort=created&direction=desc"
|
|
# )
|
|
# for issue in open_incidents:
|
|
# if issue.get("pull_request"):
|
|
# continue
|
|
# comments = fetch_github_json(issue["comments_url"]) if issue.get("comments", 0) > 0 else []
|
|
# incidents_active.append({
|
|
# "id": issue["number"],
|
|
# "title": issue["title"],
|
|
# "type": "incident",
|
|
# "severity": parse_severity(issue.get("labels", [])),
|
|
# "status": "active",
|
|
# "created_at": issue["created_at"],
|
|
# "updated_at": issue["updated_at"],
|
|
# "affected_services": parse_affected_services(issue.get("body")),
|
|
# "timeline": parse_timeline(comments),
|
|
# "url": issue["html_url"],
|
|
# "postmortem": None,
|
|
# })
|
|
#
|
|
# # Fetch user reports (open, not yet triaged to incident)
|
|
# open_reports = fetch_github_json(
|
|
# issues_url + "?labels=user-report&state=open&per_page=20&sort=created&direction=desc"
|
|
# )
|
|
# for issue in open_reports:
|
|
# if issue.get("pull_request"):
|
|
# continue
|
|
# if has_label(issue, "incident"):
|
|
# continue # Already promoted to incident, skip duplicate
|
|
# ctx = parse_user_report_context(issue.get("body"))
|
|
# svc = ctx["service"]
|
|
# user_reports.append({
|
|
# "id": issue["number"],
|
|
# "title": issue["title"],
|
|
# "type": "user-report",
|
|
# "status": "open",
|
|
# "created_at": issue["created_at"],
|
|
# "affected_services": [svc] if svc else [],
|
|
# "error_type": ctx.get("error_type"),
|
|
# "scope": ctx.get("scope"),
|
|
# "when_started": ctx.get("when"),
|
|
# "url": issue["html_url"],
|
|
# })
|
|
#
|
|
# # Fetch recently closed incidents (last 7 days)
|
|
# closed_incidents = fetch_github_json(
|
|
# issues_url + "?labels=incident&state=closed&per_page=20&sort=updated&direction=desc"
|
|
# )
|
|
# cutoff_7d = (now - timedelta(days=7)).isoformat()
|
|
# for issue in closed_incidents:
|
|
# if issue.get("pull_request"):
|
|
# continue
|
|
# if issue.get("closed_at") and issue["closed_at"] < cutoff_7d:
|
|
# continue
|
|
# comments = fetch_github_json(issue["comments_url"]) if issue.get("comments", 0) > 0 else []
|
|
# incidents_resolved.append({
|
|
# "id": issue["number"],
|
|
# "title": issue["title"],
|
|
# "type": "incident",
|
|
# "severity": parse_severity(issue.get("labels", [])),
|
|
# "status": "resolved",
|
|
# "created_at": issue["created_at"],
|
|
# "closed_at": issue["closed_at"],
|
|
# "updated_at": issue["updated_at"],
|
|
# "affected_services": parse_affected_services(issue.get("body")),
|
|
# "timeline": parse_timeline(comments),
|
|
# "url": issue["html_url"],
|
|
# "postmortem": extract_postmortem(comments),
|
|
# })
|
|
#
|
|
# print(f"Incidents: {len(incidents_active)} active, {len(incidents_resolved)} resolved, {len(user_reports)} user reports")
|
|
# except Exception as e:
|
|
# print(f"Warning: could not fetch incidents: {e}")
|
|
#
|
|
# status_data = {
|
|
# "last_updated": now.isoformat(),
|
|
# "groups": groups,
|
|
# "incidents": {
|
|
# "active": incidents_active,
|
|
# "resolved": incidents_resolved,
|
|
# "user_reports": user_reports,
|
|
# },
|
|
# }
|
|
#
|
|
# work_dir = "/tmp/status-page"
|
|
# subprocess.run(["rm", "-rf", work_dir], check=True)
|
|
# subprocess.run(["git", "clone", "--depth=1", REPO_URL, work_dir], check=True, capture_output=True)
|
|
#
|
|
# # Sync template files from ConfigMap mount
|
|
# import shutil
|
|
# for tpl in ["index.html", "CNAME"]:
|
|
# src = os.path.join("/template", tpl)
|
|
# dst = os.path.join(work_dir, tpl)
|
|
# if os.path.exists(src):
|
|
# shutil.copy2(src, dst)
|
|
#
|
|
# # Ensure .nojekyll exists
|
|
# open(os.path.join(work_dir, ".nojekyll"), "a").close()
|
|
#
|
|
# with open(os.path.join(work_dir, "status.json"), "w") as f:
|
|
# json.dump(status_data, f, indent=2)
|
|
#
|
|
# history_dir = os.path.join(work_dir, "history")
|
|
# os.makedirs(history_dir, exist_ok=True)
|
|
# today_file = os.path.join(history_dir, now.strftime("%Y-%m-%d") + ".json")
|
|
# history = []
|
|
# if os.path.exists(today_file):
|
|
# with open(today_file) as f:
|
|
# try:
|
|
# history = json.load(f)
|
|
# except json.JSONDecodeError:
|
|
# history = []
|
|
#
|
|
# snapshot = {"timestamp": now.isoformat(), "monitors": {}}
|
|
# for gname, gmonitors in groups.items():
|
|
# for mon in gmonitors:
|
|
# snapshot["monitors"][mon["name"]] = mon["status"]
|
|
# history.append(snapshot)
|
|
# with open(today_file, "w") as f:
|
|
# json.dump(history, f)
|
|
#
|
|
# cutoff_date = (now - timedelta(days=30)).strftime("%Y-%m-%d")
|
|
# for fname in os.listdir(history_dir):
|
|
# if fname.endswith(".json") and fname < cutoff_date + ".json":
|
|
# os.remove(os.path.join(history_dir, fname))
|
|
# print(f" Deleted old history: {fname}")
|
|
#
|
|
# os.chdir(work_dir)
|
|
# subprocess.run(["git", "config", "user.email", "status-bot@viktorbarzin.me"], check=True)
|
|
# subprocess.run(["git", "config", "user.name", "Status Bot"], check=True)
|
|
# subprocess.run(["git", "add", "-A"], check=True)
|
|
#
|
|
# result = subprocess.run(["git", "diff", "--cached", "--quiet"])
|
|
# if result.returncode == 0:
|
|
# print("No changes to push")
|
|
# sys.exit(0)
|
|
#
|
|
# commit_msg = "status update " + now.strftime("%Y-%m-%d %H:%M UTC")
|
|
# subprocess.run(["git", "commit", "-m", commit_msg], check=True)
|
|
# push_result = subprocess.run(["git", "push"], capture_output=True, text=True)
|
|
# if push_result.returncode != 0:
|
|
# print(f"Push failed: {push_result.stderr}")
|
|
# sys.exit(1)
|
|
#
|
|
# print(f"Successfully pushed status update at {now.isoformat()}")
|
|
# PYEOF
|
|
# EOT
|
|
# ]
|
|
# env {
|
|
# name = "UPTIME_KUMA_PASSWORD"
|
|
# value = data.vault_kv_secret_v2.viktor.data["uptime_kuma_admin_password"]
|
|
# }
|
|
# env {
|
|
# name = "GITHUB_TOKEN"
|
|
# value = data.vault_kv_secret_v2.viktor.data["github_pat"]
|
|
# }
|
|
# volume_mount {
|
|
# name = "template"
|
|
# mount_path = "/template"
|
|
# read_only = true
|
|
# }
|
|
# resources {
|
|
# requests = {
|
|
# memory = "128Mi"
|
|
# cpu = "10m"
|
|
# }
|
|
# limits = {
|
|
# memory = "256Mi"
|
|
# }
|
|
# }
|
|
# }
|
|
# volume {
|
|
# name = "template"
|
|
# config_map {
|
|
# name = kubernetes_config_map_v1.status_page_template.metadata[0].name
|
|
# }
|
|
# }
|
|
# dns_config {
|
|
# option {
|
|
# name = "ndots"
|
|
# value = "2"
|
|
# }
|
|
# }
|
|
# }
|
|
# }
|
|
# }
|
|
# }
|
|
# }
|
|
# lifecycle {
|
|
# ignore_changes = [spec[0].job_template[0].spec[0].template[0].spec[0].dns_config] # KYVERNO_LIFECYCLE_V1
|
|
# }
|
|
# }
|