Added permissive network policy for webhook

.jenkins/Dockerfile

@@ -1,32 +0,0 @@
-FROM debian:bookworm-slim
-
-# Zapobiega interaktywnym promptom
-ENV DEBIAN_FRONTEND=noninteractive
-
-# Instalacja zależności systemowych
-RUN apt-get update && apt-get install -y \
-    ca-certificates \
-    curl \
-    gnupg \
-    lsb-release \
-    apt-transport-https \
-    software-properties-common \
-    unzip \
-    bash \
-    && rm -rf /var/lib/apt/lists/*
-
-# Instalacja Azure CLI
-RUN curl -sL https://aka.ms/InstallAzureCLIDeb | bash
-
-# Instalacja kubectl (najświeższa stabilna wersja)
-RUN curl -sLo /usr/local/bin/kubectl https://dl.k8s.io/release/v1.33.1/bin/linux/amd64/kubectl \
-    && chmod +x /usr/local/bin/kubectl
-
-# Instalacja kubelogin
-RUN curl -sLo /tmp/kubelogin.zip https://github.com/Azure/kubelogin/releases/latest/download/kubelogin-linux-amd64.zip \
-    && unzip -j /tmp/kubelogin.zip -d /usr/local/bin \
-    && chmod +x /usr/local/bin/kubelogin \
-    && rm /tmp/kubelogin.zip
-
-# Domyślna komenda po starcie kontenera
-CMD ["bash"]

.jenkins/Jenkinsfile

@@ -1,86 +0,0 @@
-pipeline {
-    agent {
-        kubernetes {
-            yamlFile '.jenkins/podTemplate.yaml'
-        }
-    }
-    environment {
-        RESOURCE_GROUP = 'tst-aks-rg'
-        CLUSTER_NAME   = 'build'
-        DEPLOY_FILES   = 'namespace.yaml secret-store.yaml deploy.yaml ingress.yaml'
-        NAMESPACE      = 'user-microservice'
-        DEPLOYMENT     = 'api'
-        CLIENT_ID      = 'c302726f-fafb-4143-94c1-67a70975574a'
-    }
-    stages {
-        stage('Checkout') {
-            steps {
-                container('kubectl') {
-                    checkout scm
-                }
-            }
-        }
-        stage('Login to Azure & Get Kubeconfig') {
-            steps {
-                container('kubectl') {
-                    sh '''
-                        az login --identity --client-id ${CLIENT_ID}
-                        az aks get-credentials --resource-group $RESOURCE_GROUP --name $CLUSTER_NAME --overwrite-existing
-                        kubelogin convert-kubeconfig -l azurecli
-                    '''
-                }
-            }
-        }
-        stage('Apply Kubernetes Resources') {
-            steps {
-                container('kubectl') {
-                    script {
-                        def files = DEPLOY_FILES.tokenize()
-                        for (file in files) {
-                            sh "kubectl apply -f ${file}"
-                        }
-                    }
-                }
-            }
-        }
-
-        stage('Verify Deployment') {
-            steps {
-                container('kubectl') {
-                    script {
-                        // Waiting until all pods reach "ready" status
-                        sh '''
-                            echo "Waiting for deployment rollout..."
-                            kubectl rollout status deployment/$DEPLOYMENT -n $NAMESPACE --timeout=60s
-                        '''
-                    }
-                }
-            }
-        }
-
-        stage('Health Check') {
-            steps {
-                container('kubectl') {
-                    script {
-                        // Check if app is healthy
-                        def ingressUrl = "https://user-microservice.marcin00.pl/health"
-                        sh """
-                            echo "Checking app health ${ingressUrl}..."
-                            for i in {1..30}; do
-                                if curl -sf $ingressUrl; then
-                                    echo "Health check OK"
-                                    exit 0
-                                else
-                                    echo "Health check failed. Retry \$i..."
-                                    sleep 5
-                                fi
-                            done
-                            echo "Health check failed."
-                            exit 1
-                        """
-                    }
-                }
-            }
-        }
-    }
-}

.jenkins/podTemplate.yaml

@@ -1,24 +0,0 @@
-apiVersion: v1
-kind: Pod
-metadata:
-  labels:
-    some-label: jenkins-agent
-spec:
-  containers:
-  - name: kubectl
-    image: marcin00.azurecr.io/azure-cli-kubectl:latest
-    command:
-    - cat
-    tty: true
-    volumeMounts:
-    - name: workspace-volume
-      mountPath: /home/jenkins/agent
-
-  volumes:
-  - name: workspace-volume
-    emptyDir: {}
-
-  nodeSelector:
-    kubernetes.io/os: linux
-
-  restartPolicy: Never

apps/user-microservice/deploy.yaml

@@ -81,7 +81,7 @@ spec:
     spec:
       containers:
         - name: api
-          image: marcin00.azurecr.io/user-microservice:a79ae2d50f2fc3dfcf976eb2a8ebe32511ae4a33
+          image: marcin00.azurecr.io/user-microservice:d855e795e2706e235b397a73ca5f0e068ee8eec4
           ports:
             - containerPort: 80
           env:

clusters/prod/flux-receiver.yaml

@@ -0,0 +1,17 @@
+apiVersion: notification.toolkit.fluxcd.io/v1
+kind: Receiver
+metadata:
+  name: gitea-receiver
+  namespace: flux-system
+spec:
+  type: github
+  events:
+    - "ping"
+    - "push"
+  secretRef:
+    name: webhook-token
+  resources:
+    - apiVersion: source.toolkit.fluxcd.io/v1
+      kind: GitRepository
+      name: user-microservice-repo
+      namespace: flux-system

clusters/prod/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: user-microservice
+  namespace: flux-system
+spec:
+  interval: 1m
+  path: ./apps/user-microservice
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: user-microservice-repo
+  targetNamespace: user-microservice

clusters/prod/load-balancer.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: receiver
+  namespace: flux-system
+spec:
+  type: LoadBalancer
+  selector:
+    app: notification-controller
+  ports:
+    - name: http
+      port: 80
+      protocol: TCP
+      targetPort: 9292

clusters/prod/network-policy.yaml

@@ -0,0 +1,12 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-all-to-flux
+  namespace: flux-system
+spec:
+  podSelector: {}
+  ingress:
+    - {}
+  policyTypes:
+    - Ingress
+

clusters/prod/source.yaml

@@ -0,0 +1,10 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: GitRepository
+metadata:
+  name: user-microservice-repo
+  namespace: flux-system
+spec:
+  interval: 1m
+  url: https://gitea.marcin00.pl/pikram/user-microservice-deploy.git
+  ref:
+    branch: fluxcd