Skip to content

Commit

Permalink
[glitchtip-project-dsn] new integration (#3257)
Browse files Browse the repository at this point in the history 
The glitchtip-project-dsn integration populates glitchtip project dsn's as Kubernetes secret into the tenant's namespaces.

Ticket: APPSRE-6631
Depends on: qontract-schemas#398

A .gitleaks.toml config file has been added because the word secret is in one of the fixture files. For more information, see https://source.redhat.com/departments/it/it-information-security/wiki/details_about_rover_github_information_security_and_scanning#how-can-i-tell-the-scanner-to-allow-certain-things-in-my-repo-
  • Loading branch information
@chassing
chassing authored Mar 2, 2023
1 parent 81210a0 commit eca23d5
Show file tree
Hide file tree
Showing 16 changed files with 748 additions and 5 deletions.
10 changes: 10 additions & 0 deletions .gitleaks.toml
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@

# Configure the Red Hat InfoSec security scanner to ignore certain files
# See https://source.redhat.com/departments/it/it-information-security/wiki/details_about_rover_github_information_security_and_scanning#how-can-i-tell-the-scanner-to-allow-certain-things-in-my-repo-
[allowlist]
description = "Global Allowlist"

# Ignore based on any subset of the file path
paths = [
'''reconcile\/test\/fixtures\/glitchtip\/api\/0\/projects\/nasa\/apollo-11-flight-control\/keys\/get.json$''',
]
43 changes: 38 additions & 5 deletions README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -23,8 +23,12 @@ Additional tools that use the libraries created by the reconciliations are also
blackbox-exporter-endpoint-monitoring
Manages Prometheus Probe resources for
blackbox-exporter
change-owners Detects owners for changes in app-interface
PRs and allows them to self-service merge.
cluster-deployment-mapper Maps ClusterDeployment resources to Cluster
IDs.
cna-resources Manage Cloud Resources using Cloud Native
Assets (CNA).
dashdotdb-cso Collects the ImageManifestVuln CRs from all
the clusters and posts them to Dashdotdb.
dashdotdb-dvo Collects the DeploymentValidations from all
Expand Down Expand Up @@ -64,6 +68,10 @@ Additional tools that use the libraries created by the reconciliations are also
based on OWNERS files schema.
gitlab-permissions Manage permissions on GitLab projects.
gitlab-projects Create GitLab projects.
glitchtip Configure and enforce glitchtip instance
configuration.
glitchtip-project-dsn Glitchtip project dsn as openshift secret.
integrations-manager Manages Qontract Reconcile integrations.
integrations-validator Ensures all integrations are defined in App-
Interface.
jenkins-job-builder Manage Jenkins jobs configurations using
Expand All @@ -78,26 +86,38 @@ Additional tools that use the libraries created by the reconciliations are also
jenkins-webhooks Manage web hooks to Jenkins jobs.
jenkins-webhooks-cleaner Remove webhooks to previous Jenkins
instances.
jenkins-worker-fleets Manage Jenkins worker fleets via JCasC.
jira-watcher Watch for changes in Jira boards and notify
on Slack.
kafka-clusters Manages Kafka clusters via OCM.
ldap-users Removes users which are not found in LDAP
search.
ocm-additional-routers Manage additional routers in OCM.
ocm-addons Manages cluster Addons in OCM.
ocm-addons-upgrade-scheduler-org
Manage Addons Upgrade Policy schedules in
OCM organizations.
ocm-addons-upgrade-tests-trigger
Trigger jenkins jobs following Addon
upgrades.
ocm-aws-infrastructure-access Grants AWS infrastructure access to members
in AWS groups via OCM.
ocm-cluster-admin Manage Cluster Admin in OCM.
ocm-clusters Manages clusters via OCM.
ocm-external-configuration-labels
Manage External Configuration labels in OCM.
ocm-github-idp Manage GitHub Identity Providers in OCM.
ocm-groups Manage membership in OpenShift groups via
OCM.
ocm-machine-pools Manage Machine Pools in OCM.
ocm-oidc-idp Manage OIDC Identity Providers in OCM.
ocm-update-recommended-version Update recommended version for OCM orgs
ocm-upgrade-scheduler Manage Upgrade Policy schedules in OCM.
ocm-upgrade-scheduler-org Manage Upgrade Policy schedules in OCM organizations.
ocm-upgrade-scheduler-org Manage Upgrade Policy schedules in OCM
organizations.
ocm-upgrade-scheduler-org-updater
Update Upgrade Policy schedules in OCM organizations.
Update Upgrade Policy schedules in OCM
organizations.
ocp-release-mirror Mirrors OCP release images.
openshift-clusterrolebindings Configures ClusterRolebindings in OpenShift
clusters.
Expand All @@ -113,11 +133,16 @@ Additional tools that use the libraries created by the reconciliations are also
openshift-routes Manages OpenShift Routes.
openshift-saas-deploy Manage OpenShift resources defined in Saas
files.
openshift-saas-deploy-change-tester
Runs openshift-saas-deploy for each saas-
file that changed within a bundle.
openshift-saas-deploy-trigger-cleaner
Clean up deployment related resources.
openshift-saas-deploy-trigger-configs
Trigger deployments when configuration
changes.
openshift-saas-deploy-trigger-images
Trigger deployments when images are pushed.
openshift-saas-deploy-trigger-moving-commits
Trigger deployments when a commit changed
for a ref.
Expand All @@ -143,6 +168,8 @@ Additional tools that use the libraries created by the reconciliations are also
compatibility.
requests-sender Send emails to users based on requests
submitted to app-interface.
resource-scraper Get resources from clusters and store in
Vault.
saas-file-owners Manages labels on merge requests based on
approver schema for saas files.
saas-file-validator Validates Saas files.
Expand All @@ -157,15 +184,18 @@ Additional tools that use the libraries created by the reconciliations are also
signalfx-prometheus-endpoint-monitoring
Manages Prometheus Probe resources for
signalfx exporter
skupper-network Manages Skupper Networks.
slack-usergroups Manage Slack User Groups (channels and
users) and Slack Cluster User Groups
for OpenShift users notifications.
users).
sql-query Runs SQL Queries against app-interface RDS
resources.
status-page-components Manages components on statuspage.io hosted
status pages.
template-tester Tests templating of resources.
terraform-aws-route53 Manage AWS Route53 resources using
Terraform.
terraform-cloudflare-dns Manage Cloudflare DNS using Terraform.
terraform-cloudflare-resources Manage Cloudflare Resources using Terraform.
terraform-resources Manage AWS Resources using Terraform.
terraform-tgw-attachments Manages Transit Gateway attachments.
terraform-users Manage AWS users using Terraform.
Expand All @@ -174,7 +204,10 @@ Additional tools that use the libraries created by the reconciliations are also
terraform-cloudflare-users Manage user access to Cloudflare accounts.
unleash-watcher Watch for changes in Unleah feature toggles
and notify on Slack.
user-validator Validate user files.
vault-replication Allow vault to replicate secrets to other
instances.
vpc-peerings-validator Validates that VPC peerings do not exist
between public and internal clusters.
```

### e2e-tests
Expand Down
21 changes: 21 additions & 0 deletions reconcile/cli.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2473,6 +2473,27 @@ def glitchtip(ctx, instance):
run_integration(reconcile.glitchtip.integration, ctx.obj, instance)


@integration.command(short_help="Glitchtip project dsn as openshift secret.")
@threaded()
@binary(["oc", "ssh"])
@binary_version("oc", ["version", "--client"], OC_VERSION_REGEX, OC_VERSION)
@internal()
@use_jump_host()
@click.option("--instance", help="Reconcile just this instance.", default=None)
@click.pass_context
def glitchtip_project_dsn(ctx, thread_pool_size, internal, use_jump_host, instance):
import reconcile.glitchtip_project_dsn.integration

run_integration(
reconcile.glitchtip_project_dsn.integration,
ctx.obj,
thread_pool_size,
internal,
use_jump_host,
instance,
)


@integration.command(short_help="Manages Skupper Networks.")
@threaded()
@binary(["oc", "ssh"])
Expand Down
Empty file added reconcile/glitchtip_project_dsn/__init__.py
View file
Empty file.
Loading

0 comments on commit eca23d5

Please sign in to comment.