OliveTin

# values.yaml — Minimal setup with a few example actions
config: |
  actions:
    - title: "Ping Google"
      shell: "ping -c 1 google.com"
      icon: "ping"

    - title: "Show Disk Usage"
      shell: "df -h"
      icon: "disk"

    - title: "Show Memory"
      shell: "free -h"
      icon: "memory"

ingress:
  enabled: true
  ingressClassName: traefik
  hosts:
    - host: olivetin.internal.example.com
      paths:
        - path: /
          pathType: Prefix

# values.yaml — Advanced action definitions with confirmation, timeouts, and arguments
config: |
  actions:
    - title: "Restart nginx"
      shell: "kubectl rollout restart deployment/nginx -n web"
      icon: "restart"
      confirmBeforeStart: true
      timeout: 30

    - title: "Trigger Backup"
      shell: "kubectl create job backup-manual --from=cronjob/database-backup -n database"
      icon: "backup"
      confirmBeforeStart: true
      timeout: 60

    - title: "Get Pod Logs"
      shell: "kubectl logs -n {{ namespace }} {{ pod }} --tail=100"
      icon: "logs"
      arguments:
        - name: namespace
          title: "Namespace"
          default: default
        - name: pod
          title: "Pod name"

    - title: "Scale Deployment"
      shell: "kubectl scale deployment {{ deployment }} --replicas={{ replicas }} -n {{ namespace }}"
      icon: "scale"
      confirmBeforeStart: true
      arguments:
        - name: namespace
          title: "Namespace"
          default: default
        - name: deployment
          title: "Deployment"
        - name: replicas
          title: "Replica count"
          default: "1"

ingress:
  enabled: true
  ingressClassName: traefik
  hosts:
    - host: olivetin.internal.example.com
      paths:
        - path: /
          pathType: Prefix

# values.yaml — OliveTin with Prometheus metrics and ServiceMonitor
config: |
  actions:
    - title: "Ping Google"
      shell: "ping -c 1 google.com"

metrics:
  enabled: true
  serviceMonitor:
    enabled: true
    interval: 30s
    scrapeTimeout: 10s

ingress:
  enabled: true
  ingressClassName: traefik
  hosts:
    - host: olivetin.internal.example.com
      paths:
        - path: /
          pathType: Prefix

# values.yaml — OliveTin behind Traefik ForwardAuth (Authelia example)
config: |
  actions:
    - title: "Ping Google"
      shell: "ping -c 1 google.com"

ingress:
  enabled: true
  ingressClassName: traefik
  annotations:
    traefik.ingress.kubernetes.io/router.middlewares: auth-authelia-forwardauth@kubernetescrd
  hosts:
    - host: olivetin.example.com
      paths:
        - path: /
          pathType: Prefix
  tls:
    - secretName: olivetin-tls
      hosts:
        - olivetin.example.com

# values.yaml — expose OliveTin through Gateway API
config: |
  actions:
    - title: "Show Disk Usage"
      shell: "df -h"

gatewayAPI:
  enabled: true
  httpRoutes:
    - name: olivetin
      spec:
        parentRefs:
          - name: internal-gateway
            namespace: gateway-system
        hostnames:
          - olivetin.internal.example.com
        rules:
          - matches:
              - path:
                  type: PathPrefix
                  value: /

# values.yaml — credentials for custom actions managed by External Secrets Operator
config: |
  actions:
    - title: "Trigger API"
      shell: "curl -H \"Authorization: Bearer ${API_TOKEN}\" https://api.example.com/jobs"

extraEnv:
  - name: API_TOKEN
    valueFrom:
      secretKeyRef:
        name: olivetin-command-credentials
        key: API_TOKEN

externalSecrets:
  enabled: true
  apiVersion: external-secrets.io/v1
  refreshInterval: 1h
  items:
    - name: command-credentials
      spec:
        secretStoreRef:
          name: platform-secrets
          kind: ClusterSecretStore
        target:
          name: olivetin-command-credentials
          creationPolicy: Owner
        data:
          - secretKey: API_TOKEN
            remoteRef:
              key: olivetin/api-token