Setup CI

To reduce overhead and to aid in multiplying development time, CI is to be setup.

Details

As actions occur within this repository, CI will run. The following workflows will be used:

• commit / merge / push Any branch (PR Required)

  • Linting of the kubernetes manifests
  • SAST Scan of the expanded manifests (kustomize build)
  • On Success: Deploy to K3d

• on schedule - schedule to be devised

  • update tasks
  • SAST Scan of manifests

Other

• kustomize.yaml manifests can be edited via CLI with kustomize edit which could be helpful to update image tags and other items as needed.

Required CI Tasks

• Style:

  • Linting of manifest yaml

• Security:

  • SAST of Kubernetes manifests

• Tests:

  • Deployment to cluster (K3d)

• Auto-Update tasks

  • Images within manifests
  • external Kustomize manifests (within git repo)
  • Fetching / updating external manifests / Helm charts[^github-kmt-2]

[^github-kmt-2]: Related: nofusscomputing/kubernetes-manifest-tools#2