reaventech/schlundtech-webhook repository overview

⁠SchlundTech Webhook

⁠🚀 Overview

SchlundTech Webhook is a lightweight, production-ready webhook service designed to automate and secure domain certification workflows with SchlundTech. Built for Kubernetes and cloud-native environments, it seamlessly integrates with your CI/CD pipelines and supports robust configuration for enterprise-grade deployments.

⁠✨ Features

• Automated Domain Certification: Handles domain validation and certificate issuance via SchlundTech APIs.
• Kubernetes Native: Optimized for deployment as a Kubernetes Admission Webhook.
• Secure & Auditable: TLS support, detailed logging, and audit trails.
• Highly Configurable: Environment variables and Helm chart support for flexible deployments.
• Lightweight & Fast: Minimal dependencies, quick startup, and low resource usage.

⁠🐳 Quick Start

⁠Pull from Docker Hub

docker pull reaventech/schlundtech-webhook:latest

⁠Run with Docker

docker run -d \
  -e SCHLUNDTECH_API_USER=youruser \
  -e SCHLUNDTECH_API_PASSWORD=yourpassword \
  -e WEBHOOK_PORT=8443 \
  -p 8443:8443 \
  reaventech/schlundtech-webhook:latest

⁠Deploy on Kubernetes

apiVersion: apps/v1
kind: Deployment
metadata:
  name: schlundtech-webhook
spec:
  replicas: 1
  template:
    spec:
      containers:
        - name: schlundtech-webhook
          image: reaventech/schlundtech-webhook:latest
          env:
            - name: SCHLUNDTECH_API_USER
              valueFrom:
                secretKeyRef:
                  name: schlundtech-credentials
                  key: user
            - name: SCHLUNDTECH_API_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: schlundtech-credentials
                  key: password
          ports:
            - containerPort: 8443

⁠⚙️ Configuration

⁠📦 Helm Chart

A Helm chart is nedded for streamlined Kubernetes deployments.

⁠🔒 Security

• All secrets should be managed via Kubernetes Secrets or environment variables.
• TLS is enabled by default; provide your own certificates or use Kubernetes cert-manager.

⁠📈 Metrics & Monitoring

• Exposes Prometheus metrics at /metrics endpoint.
• Health checks available at /healthz.