Feature/docker image detection (#7)

* feature/docker-image-detection
* helm chart for new detection version
* fix workflow

Author: shcherbak

.github/workflows/push-image.yml .github/workflows/build-docker-image.yml.github/workflows/push-image.yml renamed to .github/workflows/build-docker-image.yml

@@ -39,7 +39,7 @@ jobs:
           DOCKER_BUILDKIT: 1
         with:
           context: .
-          file: Dockerfile
+          file: docker/Dockerfile
           push: true
           tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
+          labels: ${{ steps.meta.outputs.labels }}

.github/workflows/build-chart.yml .github/workflows/push-helm-chart.yml.github/workflows/build-chart.yml renamed to .github/workflows/push-helm-chart.yml

@@ -3,7 +3,7 @@ name: Release Charts
 on:
   push:
     branches:
-      - main
+      - 'main'
 
 jobs:
   release:

Dockerfile

@@ -18,3 +18,8 @@ Deploy
 ```bash
 helm install keepup-helm-scraper/keepup-helm-scraper
 ```
+
+## Build Docker image
+```bash
+docker build -t ghcr.io/code-tool/keepup-helm-scraper:$(cat VERSION.txt) -f docker/Dockerfile .
+```

README.md

@@ -0,0 +1 @@
+0.2.0

VERSION.txt

@@ -2,5 +2,5 @@ apiVersion: v2
 name: keepup-helm-scraper
 description: A Helm chart for scrape charts release information.
 type: application
-version: 0.2.1
-appVersion: 0.1.1
+version: 0.3.0
+appVersion: 0.2.0

charts/keepup-helm-scraper/Chart.yaml

@@ -3,8 +3,21 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: {{ .Release.Name }}
+rules:
 rules:
   - apiGroups: [""]
-    resources: ["namespaces", "secrets"]
-    verbs: ["get", "list"]
+    resources:
+      - namespaces
+    verbs:
+      - get
+      - list
+
+  - apiGroups: ["apps"]
+    resources:
+      - deployments
+      - statefulsets
+      - daemonsets
+    verbs:
+      - get
+      - list
 {{- end }}

charts/keepup-helm-scraper/templates/clusterrole.yaml

@@ -0,0 +1,35 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ .Release.Name }}
+data:
+  rules.yaml: |
+    docker:
+    - applicationName: 'memcached'
+      detectionRegex: '\/memcached:'
+      versionRegex: '(:(v)?(\d+)\.(\d+)(\.(\d+))?)((@sha)?.*)?$'
+
+    - applicationName: 'victoriametrics'
+      detectionRegex: 'victoriametrics\/victoria-metrics:'
+      versionRegex: '(:(v)?(\d+)\.(\d+)(\.(\d+))?)((@sha)?.*)?$'
+
+    - applicationName: 'ingress-nginx'
+      detectionRegex: '\/ingress-nginx\/controller:'
+      versionRegex: '(:(v)?(\d+)\.(\d+)(\.(\d+))?)((@sha)?.*)?$'
+
+    - applicationName: 'nginx-opentracing'
+      detectionRegex: '\/nginx-opentracing:'
+      versionRegex: '(:(v)?(\d+)\.(\d+)(\.(\d+))?)((@sha)?.*)?$'
+
+    - applicationName: 'nginx'
+      detectionRegex: '(\/)?nginx:'
+      versionRegex: ':(\d+)\.(\d+)(\.\d+)?$'
+
+    - applicationName: 'headscale'
+      detectionRegex: 'ghcr\.io\/gurucomputing\/headscale-ui:'
+      versionRegex: '(:(v)?(\d+)\.(\d+)(\.(\d+))?)((@sha)?.*)?$'
+
+    - applicationName: 'elasticsearch'
+      detectionRegex: 'docker\.elastic\.co\/elasticsearch\/elasticsearch:'
+      versionRegex: '(:(v)?(\d+)\.(\d+)(\.(\d+))?)((@sha)?.*)?$'
+

charts/keepup-helm-scraper/templates/configmap.yaml

@@ -18,10 +18,16 @@ spec:
             - name: helm-scraper
               image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
               imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-              {{- if .Values.env }}
               env:
               {{- range $name, $value := .Values.env }}
                 - name: {{ $name }}
                   value: {{ $value }}
               {{- end }}
-              {{- end }}
+              volumeMounts:
+                - name: config
+                  mountPath: "{{ .Values.env.RULES_FILE }}"
+                  subPath: rules.yaml
+        volumes:
+          - name: config
+            configMap:
+              name: {{ .Release.Name }}

charts/keepup-helm-scraper/templates/cronjob.yaml

@@ -4,13 +4,15 @@ image:
   pullPolicy: IfNotPresent
 
 cronjob:
-  schedule: "0 */12 * * *"
+  schedule: "0 */3 * * *"
   restartPolicy: Never
 
 rbac:
   create: true
 
 env:
   CLUSTER_NAME: ''
-  API_URL: ''
   API_TOKEN: ''
+  API_URL: ''
+  APP_ENV: prod
+  RULES_FILE: /config/rules.yaml