feat: add ci

.flake8

@@ -0,0 +1,8 @@
+[flake8]
+per-file-ignores =
+    # imported but unused
+    __init__.py: F401
+
+max-complexity = 10
+
+extend-ignore = E501,C901

.github/workflows/controller-container.yaml

@@ -0,0 +1,39 @@
+name: Controller Container
+
+on:
+  pull_request:
+    paths:
+      - 'containers/controller/**'
+  push:
+    branches:
+      - main
+    paths:
+      - 'containers/controller/**'
+
+permissions:
+  contents: write
+  pull-requests: read
+  actions: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  controller-container:
+    uses: SwanseaUniversityMedical/workflows/.github/workflows/[email protected]
+    with:
+      job-name: controller-container
+      registry: ${{ vars.HARBOR_REGISTRY }}
+      registry-user: ${{ vars.HARBOR_USER }}
+      registry-repo: ${{ vars.HARBOR_PROJECT }}/controller
+      release-tag-format: 'controller-container-${version}'
+      cosign-public-key: ${{ vars.COSIGN_PUBLIC_KEY }}
+      slack-channel: ${{ vars.SLACK_CHANNEL }}
+      build-file: containers/controller/Dockerfile
+      build-context: containers/controller
+    secrets:
+      cosign-private-key: ${{ secrets.COSIGN_PRIVATE_KEY }}
+      cosign-password: ${{ secrets.COSIGN_PASSWORD }}
+      registry-token: ${{ secrets.HARBOR_TOKEN }}
+      slack-token: ${{ secrets.SLACK_TOKEN }}

.github/workflows/flake8.yaml

@@ -0,0 +1,31 @@
+name: Flake8
+
+on:
+  pull_request:
+    paths:
+      - '.flake8'
+      - 'containers/controller/src/**.py'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  flake8:
+    runs-on:
+      labels: [self-hosted, linux, x64]
+      group: light
+
+    steps:
+      - name: clone repo
+        uses: actions/checkout@v4
+
+      - name: install flake8
+        run: pip install flake8
+
+      - name: install flake8 annotations
+        uses: rbialon/flake8-annotations@v1
+
+      - name: run flake8
+        run: |
+          flake8 containers/controller/src

.github/workflows/guacamole-chart.yaml

@@ -0,0 +1,42 @@
+name: Guacamole Chart
+
+on:
+  pull_request:
+    paths:
+      - 'charts/guacamole/**'
+  push:
+    branches:
+      - main
+    paths:
+      - 'charts/guacamole/**'
+
+permissions:
+  contents: write
+  pull-requests: read
+  actions: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  guacamole-chart:
+    uses: SwanseaUniversityMedical/workflows/.github/workflows/[email protected]
+    with:
+      job-name: guacamole-chart
+      registry: ${{ vars.HARBOR_REGISTRY }}
+      registry-user: ${{ vars.HARBOR_USER }}
+      registry-project: ${{ vars.HARBOR_PROJECT }}
+      registry-repo: guacamole
+      release-tag-format: 'guacamole-chart-${version}'
+      cosign-public-key: ${{ vars.COSIGN_PUBLIC_KEY }}
+      slack-channel: ${{ vars.SLACK_CHANNEL }}
+      chart: charts/guacamole
+      test-command: |
+        helm template $CHART --debug
+
+    secrets:
+      cosign-private-key: ${{ secrets.COSIGN_PRIVATE_KEY }}
+      cosign-password: ${{ secrets.COSIGN_PASSWORD }}
+      registry-token: ${{ secrets.HARBOR_TOKEN }}
+      slack-token: ${{ secrets.SLACK_TOKEN }}

.github/workflows/guacamole-crds-chart.yaml

@@ -0,0 +1,42 @@
+name: Guacamole Chart
+
+on:
+  pull_request:
+    paths:
+      - 'charts/guacamole-crds/**'
+  push:
+    branches:
+      - main
+    paths:
+      - 'charts/guacamole-crds/**'
+
+permissions:
+  contents: write
+  pull-requests: read
+  actions: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  guacamole-crds-chart:
+    uses: SwanseaUniversityMedical/workflows/.github/workflows/[email protected]
+    with:
+      job-name: guacamole-crds-chart
+      registry: ${{ vars.HARBOR_REGISTRY }}
+      registry-user: ${{ vars.HARBOR_USER }}
+      registry-project: ${{ vars.HARBOR_PROJECT }}
+      registry-repo: guacamole-crds
+      release-tag-format: 'guacamole-crds-chart-${version}'
+      cosign-public-key: ${{ vars.COSIGN_PUBLIC_KEY }}
+      slack-channel: ${{ vars.SLACK_CHANNEL }}
+      chart: charts/guacamole-crds
+      test-command: |
+        helm template $CHART --debug
+
+    secrets:
+      cosign-private-key: ${{ secrets.COSIGN_PRIVATE_KEY }}
+      cosign-password: ${{ secrets.COSIGN_PASSWORD }}
+      registry-token: ${{ secrets.HARBOR_TOKEN }}
+      slack-token: ${{ secrets.SLACK_TOKEN }}

charts/guacamole-crds/.helmignore

@@ -1,3 +1,4 @@
+
 # Patterns to ignore when building packages.
 # This supports shell glob matching, relative path matching, and
 # negation (prefixed with !). Only one pattern per line..

charts/guacamole/.helmignore

@@ -1,3 +1,4 @@
+
 # Patterns to ignore when building packages.
 # This supports shell glob matching, relative path matching, and
 # negation (prefixed with !). Only one pattern per line..

containers/guacamole/controller/src/api/build_url.py → containers/controller/src/api/build_url.py

@@ -33,4 +33,4 @@ def build_url(
     )
 
     logging.debug(f"{url=}")
-    return url
+    return url

containers/guacamole/controller/src/controller.py → containers/controller/src/controller.py

@@ -239,7 +239,7 @@ def main(
             username = record["attributes"].get(ldap_username_attribute, "")
             logging.debug(f"{dn=} {ldap_username_attribute}={username}")
 
-        logging.debug(f"sleeping...")
+        logging.debug("sleeping...")
         time.sleep(60)
 
     logging.info("halting")

containers/guacamole/controller/src/database/create_service_user.py → containers/controller/src/database/create_service_user.py

@@ -7,10 +7,10 @@
 
 
 def db_create_service_user(
-        client: Connection,
-        username: str,
-        password: str
-    ):
+    client: Connection,
+    username: str,
+    password: str
+):
 
     logging.debug(f"{username=}")
 

containers/guacamole/controller/src/directory/authenticate_user.py → containers/controller/src/directory/authenticate_user.py

@@ -17,4 +17,3 @@ def ldap_authenticate_user(
     client.start_tls()
 
     return client
-