Merge pull request 'Add yamllint to Woodpecker CI' (#154) from improce_ci into main

Reviewed-on: #154
Reviewed-by: Aaron Riedel <git@ar21.de>

.drone.yml

@@ -1,3 +1,4 @@
+---
 kind: pipeline
 name: deploy
 steps:

.woodpecker/.yamllint.yaml

@@ -0,0 +1,8 @@
+---
+steps:
+  - name: linting
+    image: cytopia/yamllint:latest
+    commands:
+      - yamllint -f colored -s .
+when:
+  - event: push

.yamllint

@@ -0,0 +1,10 @@
+---
+yaml-files:
+  - '*.yaml'
+  - '*.yml'
+  - '.yamllint'
+
+extends: default
+
+rules:
+  line-length: disable

argo/kustomization.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 generators:

argo/secret-generator.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: viaduct.ai/v1
 kind: ksops
 metadata:

argo/secret.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Secret
 metadata:

argo/sops-secret.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Secret
 metadata:

argo/values.yaml

@@ -1,3 +1,4 @@
+---
 global:
   domain: argo.services.yolokube.de
 configs:

authentik/kustomization.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 generators:

authentik/manifest.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Namespace
 metadata:

authentik/secret-generator.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: viaduct.ai/v1
 kind: ksops
 metadata:

authentik/secret.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Secret
 metadata:

cert-manager/namespace.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Namespace
 metadata:

cert-manager/values.yaml

@@ -1,3 +1,4 @@
+---
 namespace: cert-manager
 replicaCount: 3
 podDisruptionBudget:

cilium/values.yaml

@@ -1,3 +1,4 @@
+---
 encryption:
   enabled: false
 ipam:

dashboard/base/dashboard.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Namespace
 metadata:

dashboard/base/kustomization.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:

dashboard/overlays/prod/kustomization.yaml

@@ -1,3 +1,4 @@
+---
 resources:
   - ../../base
 apiVersion: kustomize.config.k8s.io/v1beta1

dashboard/overlays/staging/kustomization.yaml

@@ -1,3 +1,4 @@
+---
 resources:
   - ../../base
 apiVersion: kustomize.config.k8s.io/v1beta1

ingress/values.yaml

@@ -1,3 +1,4 @@
+---
 controller:
   enableSnippets: true
   hostNetwork: true

loki/kustomization.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 generators:

loki/namespace.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Namespace
 metadata:

loki/secret-generator.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: viaduct.ai/v1
 kind: ksops
 metadata:

loki/secret.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Secret
 metadata:

loki/values.yaml

@@ -1,3 +1,4 @@
+---
 loki:
   auth_enabled: false
   persistence:

longhorn/kustomization.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 generators:

longhorn/namespace.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Namespace
 metadata:

longhorn/recurringjobs.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: longhorn.io/v1beta1
 kind: RecurringJob
 metadata:

longhorn/secret-generator.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: viaduct.ai/v1
 kind: ksops
 metadata:

longhorn/secret.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Secret
 metadata:

longhorn/storageclass.yaml

@@ -1,3 +1,4 @@
+---
 # this is the storageclass manifest for the logs and metrics volumes
 kind: StorageClass
 apiVersion: storage.k8s.io/v1

longhorn/values.yaml

@@ -1,3 +1,4 @@
+---
 persistence:
   recurringJobSelector:
     enable: true

longhorn/volumesnapshotclass.yaml

@@ -1,3 +1,4 @@
+---
 kind: VolumeSnapshotClass
 apiVersion: snapshot.storage.k8s.io/v1
 metadata:

node-labeler/node-labeler.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Namespace
 metadata:

prometheus/kustomization.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 generators:

prometheus/namespace.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Namespace
 metadata:

prometheus/secret-generator.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: viaduct.ai/v1
 kind: ksops
 metadata:

prometheus/secret.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Secret
 metadata:

prometheus/service-monitor-longhorn.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:

prometheus/templates.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: ConfigMap
 metadata:

prometheus/values.yaml

@@ -1,3 +1,4 @@
+---
 alertmanager:
   alertmanagerSpec:
     podAntiAffinity: "hard"

quota/quotad.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Namespace
 metadata:

thanos/2-objectstore-secret.enc.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Secret
 metadata:

thanos/kustomization.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 generators:

thanos/secret-generator.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: viaduct.ai/v1
 kind: ksops
 metadata:

traefik/basicauth.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:

traefik/secondingressclass.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: networking.k8s.io/v1
 kind: IngressClass
 metadata:

traefik/values.yaml

@@ -1,3 +1,4 @@
+---
 deployment:
   kind: DaemonSet
   minReadySeconds: 120

vcluster/aaron.yaml

@@ -1,3 +1,4 @@
+---
 controlPlane:
   distro:
     k8s:

vcluster/ingress-aaron.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRouteTCP
 metadata:

vcluster/tom.yaml

@@ -1,3 +1,4 @@
+---
 controlPlane:
   distro:
     k8s:

woodpecker/secrets/kustomization.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 generators:

woodpecker/secrets/secret-generator.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: viaduct.ai/v1
 kind: ksops
 metadata:

woodpecker/secrets/secrets.enc.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Secret
 metadata:

woodpecker/values/values.yaml

@@ -1,3 +1,4 @@
+---
 server:
   ingress:
     # -- Enable the ingress for the server component