Skip to content

Commit d25518a

Browse files
soerenschneidersoerenschneider
committed
add cyberchef
1 parent 49d6366 commit d25518a

File tree

9 files changed

+217
-0
lines changed

9 files changed

+217
-0
lines changed

‎apps/cyberchef/components/istio-proxy/kustomization.yaml‎

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
---
2+
apiVersion: "kustomize.config.k8s.io/v1alpha1"
3+
kind: "Component"
4+
patches:
5+
- target:
6+
kind: "Namespace"
7+
patch: |-
8+
- op: add
9+
path: "/metadata/labels/istio-injection"
10+
value: "enabled"
11+
- target:
12+
kind: "NetworkPolicy"
13+
name: "cyberchef"
14+
patch: |-
15+
- op: "add"
16+
path: "/spec/egress/-"
17+
value:
18+
to:
19+
- namespaceSelector:
20+
matchLabels:
21+
kubernetes.io/metadata.name: kube-system
22+
podSelector: {}
23+
- namespaceSelector: {}
24+
podSelector:
25+
matchLabels:
26+
k8s-app: kube-dns
27+
ports:
28+
- port: 53
29+
protocol: TCP
30+
- port: 53
31+
protocol: UDP
32+
- op: "add"
33+
path: "/spec/egress/-"
34+
value:
35+
to:
36+
- namespaceSelector:
37+
matchLabels:
38+
kubernetes.io/metadata.name: istio-system
39+
podSelector: {}
40+
ports:
41+
- port: 15012
42+
protocol: TCP

‎apps/cyberchef/components/istio/istio-virtualservice.yaml‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
---
2+
apiVersion: "networking.istio.io/v1alpha3"
3+
kind: "VirtualService"
4+
metadata:
5+
name: "cyberchef"
6+
spec:
7+
hosts:
8+
- "cyberchef"
9+
gateways:
10+
- "istio-system/gateway"
11+
http:
12+
- match:
13+
- uri:
14+
prefix: "/"
15+
route:
16+
- destination:
17+
host: "cyberchef"
18+
port:
19+
number: 80

‎apps/cyberchef/components/istio/kustomization.yaml‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
---
2+
apiVersion: "kustomize.config.k8s.io/v1alpha1"
3+
kind: "Component"
4+
resources:
5+
- "istio-virtualservice.yaml"
6+
patches:
7+
- target:
8+
kind: "NetworkPolicy"
9+
name: "cyberchef"
10+
patch: |-
11+
- op: "add"
12+
path: "/spec/ingress/-"
13+
value:
14+
ports:
15+
- protocol: "TCP"
16+
port: "cyberchef"
17+
from:
18+
- namespaceSelector:
19+
matchLabels:
20+
kubernetes.io/metadata.name: "istio-system"
21+
podSelector:
22+
matchLabels:
23+
istio: "ingressgateway"

‎apps/cyberchef/deployment.yaml‎

Lines changed: 71 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,71 @@
1+
---
2+
apiVersion: apps/v1
3+
kind: Deployment
4+
metadata:
5+
name: cyberchef
6+
labels:
7+
app.kubernetes.io/name: cyberchef
8+
annotations:
9+
reloader.stakater.com/auto: "true"
10+
spec:
11+
replicas: 1
12+
selector:
13+
matchLabels:
14+
app.kubernetes.io/name: cyberchef
15+
template:
16+
metadata:
17+
labels:
18+
app: cyberchef
19+
app.kubernetes.io/name: cyberchef
20+
app.kubernetes.io/instance: cyberchef-prod
21+
app.kubernetes.io/component: cyberchef
22+
spec:
23+
securityContext:
24+
runAsUser: 27634
25+
runAsGroup: 27634
26+
fsGroup: 27634
27+
runAsNonRoot: true
28+
seccompProfile:
29+
type: RuntimeDefault
30+
containers:
31+
- name: "cyberchef"
32+
image: "ghcr.io/soerenschneider/cyberchef:10.19.2"
33+
imagePullPolicy: "IfNotPresent"
34+
env:
35+
- name: "APLOS_ADDR"
36+
value: "0.0.0.0:8080"
37+
ports:
38+
- containerPort: 8080
39+
name: "cyberchef"
40+
securityContext:
41+
allowPrivilegeEscalation: false
42+
readOnlyRootFilesystem: true
43+
runAsUser: 27634
44+
runAsGroup: 27634
45+
capabilities:
46+
drop:
47+
- "ALL"
48+
seccompProfile:
49+
type: "RuntimeDefault"
50+
livenessProbe:
51+
httpGet:
52+
path: "/_health"
53+
port: "cyberchef"
54+
initialDelaySeconds: 15
55+
readinessProbe:
56+
httpGet:
57+
path: "/_health"
58+
port: "cyberchef"
59+
initialDelaySeconds: 5
60+
startupProbe:
61+
httpGet:
62+
path: "/_health"
63+
port: "cyberchef"
64+
failureThreshold: 60
65+
periodSeconds: 10
66+
resources:
67+
limits:
68+
memory: "256Mi"
69+
requests:
70+
cpu: "5m"
71+
memory: "32Mi"

‎apps/cyberchef/kustomization.yaml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
apiVersion: kustomize.config.k8s.io/v1beta1
3+
kind: Kustomization
4+
resources:
5+
- deployment.yaml
6+
- service.yaml
7+
- networkpolicy.yaml

‎apps/cyberchef/networkpolicy.yaml‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
apiVersion: networking.k8s.io/v1
3+
kind: NetworkPolicy
4+
metadata:
5+
name: "cyberchef"
6+
spec:
7+
podSelector:
8+
matchLabels:
9+
app.kubernetes.io/name: "cyberchef"
10+
policyTypes:
11+
- Egress
12+
- Ingress
13+
ingress:
14+
- ports:
15+
- protocol: TCP
16+
port: "cyberchef"
17+
from: []
18+
egress: []

‎apps/cyberchef/service.yaml‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
---
2+
apiVersion: v1
3+
kind: Service
4+
metadata:
5+
name: cyberchef
6+
spec:
7+
ports:
8+
- port: 80
9+
targetPort: cyberchef
10+
selector:
11+
app.kubernetes.io/name: cyberchef

‎clusters/svc.pt.soeren.cloud/cyberchef/kustomization.yaml‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
---
2+
apiVersion: "kustomize.config.k8s.io/v1beta1"
3+
kind: "Kustomization"
4+
namespace: "cyberchef"
5+
components:
6+
- "../../../apps/cyberchef/components/istio"
7+
- "../../../apps/cyberchef/components/istio-proxy"
8+
resources:
9+
- "namespace.yaml"
10+
- "../../../apps/cyberchef"
11+
patches:
12+
- target:
13+
kind: "VirtualService"
14+
name: "cyberchef"
15+
patch: |-
16+
- op: "replace"
17+
path: "/spec/hosts"
18+
value:
19+
- "cyberchef.svc.pt.soeren.cloud"

‎clusters/svc.pt.soeren.cloud/cyberchef/namespace.yaml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
kind: Namespace
3+
apiVersion: v1
4+
metadata:
5+
name: cyberchef
6+
labels:
7+
name: cyberchef

0 commit comments

Comments
 (0)