-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* build post image * add dockerfile postjob * build image only on tags * build image only on tags * set cosign 1.8.0 in workflow * WIP: init chart * sign only ghcr * sign with new key and cosign 2.0 * add healthz func * go 1.20 * add missing atomic * healthz return always OK * fix atomic * service healthz on 8081 * extra go rotine for mserver * final chart release * add prometheus * act ob metrics uri * reorder requests * new handle func * duplicate metric register * fix depends * servicemonitor and dashboard for app * cleanup & doc * build helm chart * push to chart repo * update doc
- Loading branch information
Showing
175 changed files
with
31,386 additions
and
9 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -2,5 +2,9 @@ apiVersion: v2 | |
| name: cosignwebhook | ||
| description: A Helm chart for Cosign Webhook Admission Controller | ||
| type: application | ||
| version: 0.1.0 | ||
| version: 2.0.0 | ||
| appVersion: "2.0.0" | ||
| maintainers: | ||
| - name: eumel8 | ||
| email: [email protected] | ||
| url: https://www.telekom.com | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,155 @@ | ||
| {{ if .Values.grafanaDashboard.enabled }} | ||
| --- | ||
| apiVersion: v1 | ||
| data: | ||
| cosign-webhook.json: |- | ||
| { | ||
| "annotations": { | ||
| "list": [ | ||
| { | ||
| "builtIn": 1, | ||
| "datasource": "-- Grafana --", | ||
| "enable": true, | ||
| "hide": true, | ||
| "iconColor": "rgba(0, 211, 255, 1)", | ||
| "name": "Annotations & Alerts", | ||
| "type": "dashboard" | ||
| } | ||
| ] | ||
| }, | ||
| "editable": true, | ||
| "gnetId": null, | ||
| "graphTooltip": 0, | ||
| "id": 39, | ||
| "links": [], | ||
| "panels": [ | ||
| { | ||
| "aliasColors": {}, | ||
| "bars": false, | ||
| "dashLength": 10, | ||
| "dashes": false, | ||
| "datasource": null, | ||
| "description": "Monitor Cosign Webhook Activities", | ||
| "fieldConfig": { | ||
| "defaults": {}, | ||
| "overrides": [] | ||
| }, | ||
| "fill": 1, | ||
| "fillGradient": 0, | ||
| "gridPos": { | ||
| "h": 9, | ||
| "w": 12, | ||
| "x": 0, | ||
| "y": 0 | ||
| }, | ||
| "hiddenSeries": false, | ||
| "id": 2, | ||
| "legend": { | ||
| "avg": false, | ||
| "current": false, | ||
| "max": false, | ||
| "min": false, | ||
| "show": true, | ||
| "total": false, | ||
| "values": false | ||
| }, | ||
| "lines": true, | ||
| "linewidth": 1, | ||
| "nullPointMode": "null", | ||
| "options": { | ||
| "alertThreshold": true | ||
| }, | ||
| "percentage": false, | ||
| "pluginVersion": "7.5.11", | ||
| "pointradius": 2, | ||
| "points": false, | ||
| "renderer": "flot", | ||
| "seriesOverrides": [], | ||
| "spaceLength": 10, | ||
| "stack": false, | ||
| "steppedLine": false, | ||
| "targets": [ | ||
| { | ||
| "exemplar": true, | ||
| "expr": "rate(cosign_processed_ops_total[5m])", | ||
| "interval": "", | ||
| "legendFormat": "Cosign Process Operations Total", | ||
| "refId": "A" | ||
| }, | ||
| { | ||
| "exemplar": true, | ||
| "expr": "rate(cosign_processed_verified_total[5m])", | ||
| "hide": false, | ||
| "interval": "", | ||
| "legendFormat": "Cosign Verfified Operations Total", | ||
| "refId": "B" | ||
| } | ||
| ], | ||
| "thresholds": [], | ||
| "timeFrom": null, | ||
| "timeRegions": [], | ||
| "timeShift": null, | ||
| "title": "Cosign Webhook", | ||
| "tooltip": { | ||
| "shared": true, | ||
| "sort": 0, | ||
| "value_type": "individual" | ||
| }, | ||
| "type": "graph", | ||
| "xaxis": { | ||
| "buckets": null, | ||
| "mode": "time", | ||
| "name": null, | ||
| "show": true, | ||
| "values": [] | ||
| }, | ||
| "yaxes": [ | ||
| { | ||
| "format": "short", | ||
| "label": null, | ||
| "logBase": 1, | ||
| "max": null, | ||
| "min": null, | ||
| "show": true | ||
| }, | ||
| { | ||
| "format": "short", | ||
| "label": null, | ||
| "logBase": 1, | ||
| "max": null, | ||
| "min": null, | ||
| "show": true | ||
| } | ||
| ], | ||
| "yaxis": { | ||
| "align": false, | ||
| "alignLevel": null | ||
| } | ||
| } | ||
| ], | ||
| "schemaVersion": 27, | ||
| "style": "dark", | ||
| "tags": [], | ||
| "templating": { | ||
| "list": [] | ||
| }, | ||
| "time": { | ||
| "from": "now-5m", | ||
| "to": "now" | ||
| }, | ||
| "timepicker": {}, | ||
| "timezone": "", | ||
| "title": "Cosign Webhook Operations", | ||
| "uid": "7jU1pnfVk", | ||
| "version": 1 | ||
| } | ||
| kind: ConfigMap | ||
| metadata: | ||
| name: {{ include "cosignwebhook.fullname" . }} | ||
| {{ if .Values.grafanaDashboard.namespace }} | ||
| namespace: {{ .Values.grafanaDashboard.namespace }} | ||
| {{ end }} | ||
| labels: | ||
| grafana_dashboard: "1" | ||
| {{- include "cosignwebhook.labels" . | nindent 4 }} | ||
| {{ end }} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,17 @@ | ||
| {{ if .Values.serviceMonitor.enabled }} | ||
| --- | ||
| apiVersion: monitoring.coreos.com/v1 | ||
| kind: ServiceMonitor | ||
| metadata: | ||
| name: {{ include "cosignwebhook.fullname" . }} | ||
| labels: | ||
| {{- include "cosignwebhook.labels" . | nindent 4 }} | ||
| spec: | ||
| endpoints: | ||
| - port: metrics | ||
| interval: 10s | ||
| path: /metrics | ||
| selector: | ||
| matchLabels: | ||
| {{- include "cosignwebhook.selectorLabels" . | nindent 6 }} | ||
| {{ end }} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.