Feature/lab11

.github/pull_request_template.md

@@ -0,0 +1,21 @@
+# Pull Request
+
+## Goal
+<!-- Briefly describe what this PR aims to accomplish -->
+
+
+## Changes
+<!-- List the main changes made in this PR -->
+
+-
+-
+
+## Testing
+<!-- Describe how you tested these changes -->
+
+
+## Checklist
+
+- [ ] PR has a clear and descriptive title
+- [ ] Documentation/README updated if needed
+- [ ] No secrets or large temporary files included

.github/workflows/github-actions-demo.yml

@@ -0,0 +1,49 @@
+name: GitHub Actions Demo
+run-name: ${{ github.actor }} is testing out GitHub Actions 🚀
+on: 
+  push:
+  workflow_dispatch:
+jobs:
+  Explore-GitHub-Actions:
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo "🎉 The job was automatically triggered by a ${{ github.event_name }} event."
+      - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by GitHub!"
+      - run: echo "🔎 The name of your branch is ${{ github.ref }} and your repository is ${{ github.repository }}."
+      - name: Check out repository code
+        uses: actions/checkout@v5
+      - run: echo "💡 The ${{ github.repository }} repository has been cloned to the runner."
+      - run: echo "🖥️ The workflow is now ready to test your code on the runner."
+      - name: List files in the repository
+        run: |
+          ls ${{ github.workspace }}
+      - run: echo "🍏 This job's status is ${{ job.status }}."
+
+  System-Info-Collection:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Displaying trigger event
+        run: |
+          echo "This workflow was triggered by the ${{ github.event_name }} event."
+          echo "The event payload is:"
+          echo "${{ toJson(github.event) }}"
+      - name: Displaying system information
+        run: |
+          echo "This job is running on a ${{ runner.os }} server hosted by GitHub."
+          echo "The server has the following processors:"
+          lscpu
+          echo "The server has the following amount of free memory:"
+          free -h
+          echo "The server has the following disk space:"
+          df -h
+
+      - name: Runtime Environment Information
+        run: |
+          echo "username: $(whoami)"
+          echo "home directory: $(echo $HOME)"
+          echo "current working directory: $(pwd)"
+          echo "PATH: $(echo $PATH)"
+          echo "shell: $SHELL"
+          echo "env variables: $(printenv)"
+
+

gitops-lab/current-state.txt

@@ -0,0 +1,3 @@
+version: 1.0
+app: myapp
+replicas: 3

gitops-lab/desired-state.txt

@@ -0,0 +1,3 @@
+version: 1.0
+app: myapp
+replicas: 3

gitops-lab/gen.conf

@@ -0,0 +1,70 @@
+# zap-baseline rule configuration file
+# Change WARN to IGNORE to ignore rule or FAIL to fail if rule matches
+# Only the rule identifiers are used - the names are just for info
+# You can add your own messages to each rule by appending them after a tab on each line.
+10003	WARN	(Vulnerable JS Library (Powered by Retire.js))
+10009	WARN	(In Page Banner Information Leak)
+10010	WARN	(Cookie No HttpOnly Flag)
+10011	WARN	(Cookie Without Secure Flag)
+10015	WARN	(Re-examine Cache-control Directives)
+10017	WARN	(Cross-Domain JavaScript Source File Inclusion)
+10019	WARN	(Content-Type Header Missing)
+10020	WARN	(Anti-clickjacking Header)
+10021	WARN	(X-Content-Type-Options Header Missing)
+10023	WARN	(Information Disclosure - Debug Error Messages)
+10024	WARN	(Information Disclosure - Sensitive Information in URL)
+10025	WARN	(Information Disclosure - Sensitive Information in HTTP Referrer Header)
+10026	WARN	(HTTP Parameter Override)
+10027	WARN	(Information Disclosure - Suspicious Comments)
+10028	WARN	(Off-site Redirect)
+10029	WARN	(Cookie Poisoning)
+10030	WARN	(User Controllable Charset)
+10031	WARN	(User Controllable HTML Element Attribute (Potential XSS))
+10032	WARN	(Viewstate)
+10033	WARN	(Directory Browsing)
+10034	WARN	(Heartbleed OpenSSL Vulnerability (Indicative))
+10035	WARN	(Strict-Transport-Security Header)
+10036	WARN	(HTTP Server Response Header)
+10037	WARN	(Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s))
+10038	WARN	(Content Security Policy (CSP) Header Not Set)
+10039	WARN	(X-Backend-Server Header Information Leak)
+10040	WARN	(Secure Pages Include Mixed Content)
+10041	WARN	(HTTP to HTTPS Insecure Transition in Form Post)
+10042	WARN	(HTTPS to HTTP Insecure Transition in Form Post)
+10043	WARN	(User Controllable JavaScript Event (XSS))
+10044	WARN	(Big Redirect Detected (Potential Sensitive Information Leak))
+10049	WARN	(Content Cacheability)
+10050	WARN	(Retrieved from Cache)
+10052	WARN	(X-ChromeLogger-Data (XCOLD) Header Information Leak)
+10054	WARN	(Cookie without SameSite Attribute)
+10055	WARN	(CSP)
+10056	WARN	(X-Debug-Token Information Leak)
+10057	WARN	(Username Hash Found)
+10061	WARN	(X-AspNet-Version Response Header)
+10062	WARN	(PII Disclosure)
+10063	WARN	(Permissions Policy Header Not Set)
+10096	WARN	(Timestamp Disclosure)
+10097	WARN	(Hash Disclosure)
+10098	WARN	(Cross-Domain Misconfiguration)
+10099	WARN	(Source Code Disclosure)
+10105	WARN	(Weak Authentication Method)
+10108	WARN	(Reverse Tabnabbing)
+10109	WARN	(Modern Web Application)
+10110	WARN	(Dangerous JS Functions)
+10111	WARN	(Authentication Request Identified)
+10112	WARN	(Session Management Response Identified)
+10113	WARN	(Verification Request Identified)
+10115	WARN	(Script Served From Malicious Domain (polyfill))
+10116	WARN	(ZAP is Out of Date)
+10202	WARN	(Absence of Anti-CSRF Tokens)
+2	WARN	(Private IP Disclosure)
+3	WARN	(Session ID in URL Rewrite)
+50001	WARN	(Script Passive Scan Rules)
+90001	WARN	(Insecure JSF ViewState)
+90002	WARN	(Java Serialization Object)
+90003	WARN	(Sub Resource Integrity Attribute Missing)
+90004	WARN	(Insufficient Site Isolation Against Spectre Vulnerability)
+90011	WARN	(Charset Mismatch)
+90022	WARN	(Application Error Disclosure)
+90030	WARN	(WSDL File Detection)
+90033	WARN	(Loosely Scoped Cookie)

gitops-lab/health.log

@@ -0,0 +1,11 @@
+Mon Oct 13 18:02:27 MSK 2025 - ✅ OK: States synchronized
+Mon Oct 13 18:03:13 MSK 2025 - ❌ CRITICAL: State mismatch detected!
+  Desired MD5: a15a1a4f965ecd8f9e23a33a6b543155
+  Current MD5: 48168ff3ab5ffc0214e81c7e2ee356f5
+Mon Oct 13 18:05:05 MSK 2025 - ✅ OK: States synchronized
+Mon Oct 13 18:07:20 MSK 2025 - ✅ OK: States synchronized
+Mon Oct 13 18:07:23 MSK 2025 - ✅ OK: States synchronized
+Mon Oct 13 18:07:26 MSK 2025 - ✅ OK: States synchronized
+Mon Oct 13 18:07:29 MSK 2025 - ✅ OK: States synchronized
+Mon Oct 13 18:07:32 MSK 2025 - ✅ OK: States synchronized
+Mon Oct 13 18:07:35 MSK 2025 - ✅ OK: States synchronized

gitops-lab/healthcheck.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+# healthcheck.sh - Monitor GitOps sync health
+
+DESIRED_MD5=$(md5sum desired-state.txt | awk '{print $1}')
+CURRENT_MD5=$(md5sum current-state.txt | awk '{print $1}')
+
+if [ "$DESIRED_MD5" != "$CURRENT_MD5" ]; then
+    echo "$(date) - ❌ CRITICAL: State mismatch detected!" | tee -a health.log
+    echo "  Desired MD5: $DESIRED_MD5" | tee -a health.log
+    echo "  Current MD5: $CURRENT_MD5" | tee -a health.log
+else
+    echo "$(date) - ✅ OK: States synchronized" | tee -a health.log
+fi

gitops-lab/monitor.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+# monitor.sh - Combined reconciliation and health monitoring
+
+echo "Starting GitOps monitoring..."
+for i in {1..10}; do
+    echo "\n--- Check #$i ---"
+    ./healthcheck.sh
+    ./reconcile.sh
+    sleep 3
+done

gitops-lab/reconcile.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+# reconcile.sh - GitOps reconciliation loop
+
+DESIRED=$(cat desired-state.txt)
+CURRENT=$(cat current-state.txt)
+
+if [ "$DESIRED" != "$CURRENT" ]; then
+    echo "$(date) - ⚠️  DRIFT DETECTED!"
+    echo "Reconciling current state with desired state..."
+    cp desired-state.txt current-state.txt
+    echo "$(date) - ✅ Reconciliation complete"
+else
+    echo "$(date) - ✅ States synchronized"
+fi