feat(diagrams): automate generation, svg previews, firewall variant and flavor linting fixes

Author: lweberru

.github/mermaid-config.json

@@ -0,0 +1,8 @@
+{
+  "securityLevel": "loose",
+  "maxTextSize": 200000000,
+  "maxEdges": 20000,
+  "flowchart": {
+    "htmlLabels": true
+  }
+}

.github/mermaid-puppeteer-config.json

@@ -0,0 +1,6 @@
+{
+  "args": [
+    "--no-sandbox",
+    "--disable-setuid-sandbox"
+  ]
+}

.github/workflows/generate-architecture-diagrams.yml

@@ -0,0 +1,70 @@
+name: Generate Architecture Diagrams
+
+on:
+  workflow_dispatch:
+  pull_request:
+    paths:
+      - "src/**"
+      - "modules/**"
+      - "assets/**"
+      - "docs/scripts/generate_example_architecture.py"
+      - "docs/diagram-generation.md"
+  push:
+    branches:
+      - main
+    paths:
+      - "src/**"
+      - "modules/**"
+      - "assets/**"
+      - "docs/scripts/generate_example_architecture.py"
+      - "docs/diagram-generation.md"
+
+permissions:
+  contents: write
+
+jobs:
+  generate-diagrams:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - name: Install Mermaid CLI
+        run: npm install -g @mermaid-js/mermaid-cli
+
+      - name: Generate architecture diagrams
+        run: python3 docs/scripts/generate_example_architecture.py --out-dir docs/diagrams
+
+      - name: Render Mermaid SVG diagrams
+        run: |
+          for diagram in docs/diagrams/*.mmd; do
+            output="${diagram%.mmd}.svg"
+            mmdc -i "$diagram" -o "$output" -c .github/mermaid-config.json -p .github/mermaid-puppeteer-config.json
+          done
+
+      - name: Verify generated diagrams are committed (PR)
+        if: github.event_name == 'pull_request'
+        run: |
+          if [[ -n "$(git status --porcelain -- docs/diagrams)" ]]; then
+            echo "::error::Generated diagrams are out of date. Run the generator locally and commit the changes."
+            git status --short -- docs/diagrams
+            exit 1
+          fi
+
+      - name: Commit updated diagrams (main)
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main' && github.actor != 'github-actions[bot]'
+        uses: stefanzweifel/git-auto-commit-action@v5
+        with:
+          commit_message: "chore(diagrams): regenerate architecture diagrams"
+          file_pattern: docs/diagrams/*.mmd docs/diagrams/*.mmd.md docs/diagrams/*.svg

.github/workflows/tflint.yml

@@ -38,4 +38,4 @@ jobs:
 
       # runs 6h
       # - name: Validate STACKIT flavors (live)
-      #   run: python3 scripts/validate_stackit_flavors.py
+      #   run: python3 docs/scripts/validate_stackit_flavors.py

.gitignore

@@ -36,4 +36,10 @@ override.tf.json
 .terraformrc
 terraform.rc
 
-.terraform.lock.hcl
+.terraform.lock.hcl
+
+# Local AI/model-serving credentials and generated semantic cache
+openai.token
+.env
+.env.local
+.cache/