Add Hafnium deployment

Author: jb3

kubernetes/namespaces/tooling/hafnium/README.md

@@ -0,0 +1,3 @@
+# Hafnium
+
+This directory contains a deployment of [Hafnium](https://github.com/owl-corp/hafnium). It is a tool for syncing GitHub membership from Keycloak.

kubernetes/namespaces/tooling/hafnium/configmap.yml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: hafnium-config-env
+  namespace: tooling
+data:
+  HAFNIUM_KEYCLOAK_URL: "https://id.pydis.wtf"
+  HAFNIUM_KEYCLOAK_REALM: "pydis"
+  HAFNIUM_KEYCLOAK_USERNAME: "kingarthur"
+  HAFNIUM_DISCORD_GUILDID: "267624335836053506"
+  HAFNIUM_DISCORD_LOGCHANNELID: "675756741417369640"
+  HAFNIUM_DISCORD_DEBUGTHREADID: "1265289413433364511"
+  HAFNIUM_GITHUB_IGNORED_USERS: "pydis-bot"
+  HAFNIUM_GITHUB_ORG: "python-discord"
+  HAFNIUM_SYNC_MAPPINGFILE: "/app/mappings.toml"

kubernetes/namespaces/tooling/hafnium/deployment.yml

@@ -0,0 +1,44 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: hafnium
+  namespace: tooling
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: hafnium
+  template:
+    metadata:
+      labels:
+        app: hafnium
+      annotations:
+        prometheus.io/scrape: "true"
+        prometheus.io/port: "metrics"
+    spec:
+      containers:
+        - name: hafnium
+          image: ghcr.io/owl-corp/hafnium:latest
+          imagePullPolicy: Always
+          envFrom:
+            - secretRef:
+                name: hafnium-env
+            - configMapRef:
+                name: hafnium-config-env
+          securityContext:
+            readOnlyRootFilesystem: true
+          ports:
+            - name: metrics
+              containerPort: 9090
+          volumeMounts:
+            - name: hafnium-mappings
+              mountPath: /app/mappings.toml
+              subPath: mappings.toml
+      securityContext:
+        fsGroup: 2000
+        runAsUser: 1000
+        runAsNonRoot: true
+      volumes:
+        - name: hafnium-mappings
+          configMap:
+            name: hafnium-mappings

kubernetes/namespaces/tooling/hafnium/mappings.yml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: hafnium-mappings
+  namespace: tooling
+data:
+  mappings.toml: |
+    [mappings]
+    helpers = { github_team_slug = "helpers", discord_role_id = 267630620367257601 }
+    devops = { github_team_slug = "devops", discord_role_id = 409416496733880320 }
+    administrators = { github_team_slug = "admins", discord_role_id = 267628507062992896 }
+    moderators = { github_team_slug = "moderators", discord_role_id = 267629731250176001 }
+    coredevs = { github_team_slug = "core-developers", discord_role_id = 587606783669829632 }
+    events = { github_team_slug = "events-team", discord_role_id = 787816728474288181 }
+    directors = { github_team_slug = "directors", discord_role_id = 267627879762755584 }