Done Lab04

.github/workflows/go-ci.yml

@@ -0,0 +1,113 @@
+name: Go CI
+
+on:
+  push:
+    branches: [ "master", "lab03" ]
+    paths:
+      - "app_go/**"
+      - '.github/workflows/go-ci.yml'
+  pull_request:
+    paths:
+      - "app_go/**"
+      - '.github/workflows/go-ci.yml'
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.22"
+
+      - name: Cache Go modules
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/go/pkg/mod
+            ~/.cache/go-build
+          key: ${{ runner.os }}-go-${{ hashFiles('app_go/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+
+      - name: Run Go tests with coverage
+        run: |
+          cd app_go
+          go test ./... -coverprofile=coverage.out
+          go tool cover -func=coverage.out | tee coverage.txt
+          TOTAL=$(go tool cover -func=coverage.out | grep total: | awk '{print substr($3, 1, length($3)-1)}')
+          echo "Total coverage: $TOTAL%"
+          if (( $(echo "$TOTAL < 70" | bc -l) )); then
+            echo "Coverage below 70%"
+            exit 1
+          fi
+
+      - name: Convert Go coverage to Cobertura
+        run: |
+          go install github.com/boumenot/gocover-cobertura@latest
+          cd app_go
+          gocover-cobertura < coverage.out > coverage.xml
+
+      - name: Upload coverage reports to Codecov
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          format: cobertura
+          file: app_go/coverage.xml
+          flag-name: go
+          parallel: true
+
+      - name: Finalize Coveralls
+        uses: coverallsapp/github-action@v2
+        with:
+          parallel-finished: true
+
+
+  security:
+    runs-on: ubuntu-latest
+    needs: test
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.22"
+
+      - name: Run Snyk security scan
+        uses: snyk/actions/setup@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          command: test
+          args: --file=app_go/go.mod
+
+
+
+  docker:
+    needs: test
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: ./app_go
+          push: true
+          tags: |
+            ${{ secrets.DOCKERHUB_USERNAME }}/info-service-go:latest

.github/workflows/python-ci.yml

@@ -0,0 +1,118 @@
+name: Python CI
+
+on:
+  push:
+    branches: [ "master", "lab03" ]
+    paths:
+      - "app_python/**"
+      - '.github/workflows/python-ci.yml'
+  pull_request:
+    paths:
+      - "app_python/**"
+      - '.github/workflows/python-ci.yml'
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "^3.13"
+
+      - name: Cache pip
+        uses: actions/cache@v4
+        with:
+          path: ~/.cache/pip
+          key: ${{ runner.os }}-pip-${{ hashFiles('app_python/requirements*.txt') }}
+          restore-keys: |
+            ${{ runner.os }}-pip-
+
+      - name: Install dependencies
+        run: |
+          pip install -r app_python/requirements.txt
+          pip install -r app_python/requirements-dev.txt
+
+      - name: Run tests with coverage
+        run: |
+          cd app_python
+          coverage run -m pytest
+          coverage report --fail-under=70
+          coverage xml
+
+      - name: Upload coverage reports to Codecov
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          format: cobertura
+          file: app_python/coverage.xml
+          flag-name: python
+          parallel: true
+
+  security:
+    runs-on: ubuntu-latest
+    needs: test
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "^3.13"
+
+      - name: Cache pip
+        uses: actions/cache@v4
+        with:
+          path: ~/.cache/pip
+          key: ${{ runner.os }}-pip-security-${{ hashFiles('app_python/requirements*.txt') }}
+          restore-keys: |
+            ${{ runner.os }}-pip-security-
+
+      - name: Install dependencies
+        run: |
+          pip install -r app_python/requirements.txt
+          pip install -r app_python/requirements-dev.txt
+
+      - name: Run Snyk scan for main dependencies
+        uses: snyk/actions/setup@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          command: test
+          args: --file=app_python/requirements.txt
+
+      - name: Run Snyk scan for dev dependencies
+        uses: snyk/actions/setup@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          command: test
+          args: --file=app_python/requirements-dev.txt
+
+  docker:
+    needs: test
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: ./app_python
+          push: true
+          tags: |
+            ${{ secrets.DOCKERHUB_USERNAME }}/info-service-python:latest

.github/workflows/terraform-ci.yml

@@ -0,0 +1,47 @@
+name: Terraform CI
+
+on:
+  push:
+    branches: [ "master", "lab04" ]
+    paths:
+      - "terraform/**"
+  pull_request:
+    paths:
+      - 'terraform/**'
+      - '.github/workflows/terraform-ci.yml'
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v2
+        with:
+          terraform_version: '1.14.5'
+
+      - name: Terraform fmt check
+        run: |
+          terraform -version
+          cd terraform
+          terraform fmt -check
+
+      - name: Terraform init
+        run: |
+          cd terraform
+          terraform init -input=false
+
+      - name: Terraform validate
+        run: |
+          cd terraform
+          terraform validate
+
+      - name: Setup TFLint
+        uses: terraform-linters/setup-tflint@v3
+
+      - name: Run TFLint
+        run: |
+          cd terraform
+          tflint --init
+          tflint --format compact

.gitignore

@@ -1 +1,21 @@
+# Root gitignore for lab
+
+# Terraform
+terraform/*.tfstate
+terraform/*.tfstate.*
+terraform/.terraform/
+terraform/terraform.tfvars
+
+# Pulumi
+pulumi/venv/
+pulumi/Pulumi.*.yaml
+
+# Keys and credentials
+*.pem
+*.key
+*.json
+
+# Python
+__pycache__/
+*.pyc
 test

app_go/.dockerignore

@@ -0,0 +1,12 @@
+devops-info-service
+*.log
+*.tmp
+*.out
+*.test
+*.swp
+*.swo
+.idea/
+.vscode/
+docs/
+README.md
+*.md

app_go/.gitignore

@@ -0,0 +1,9 @@
+__pycache__/
+*.py[cod]
+venv/
+*.log
+.DS_Store
+.vscode/
+.idea/
+.pytest_cache
+coverage.out

app_go/Dockerfile

@@ -0,0 +1,16 @@
+# Multi-stage build for Go application
+# Stage 1: Builder
+FROM golang:1.22-alpine AS builder
+WORKDIR /build
+COPY go.mod .
+RUN go mod download
+COPY main.go .
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-w -s" -o devops-info-service .
+
+# Stage 2: Runtime
+FROM gcr.io/distroless/static:nonroot
+WORKDIR /app
+COPY --from=builder /build/devops-info-service .
+EXPOSE 8080
+USER nonroot
+ENTRYPOINT ["/app/devops-info-service"]

app_go/README.md

@@ -0,0 +1,39 @@
+# DevOps Info Service — Go Version
+
+![CI/CD](https://github.com/sayfetik/DevOps-Core-Course/actions/workflows/python-ci.yml/badge.svg)
+
+[![Coverage](https://codecov.io/gh/sayfetik/DevOps-Core-Course/branch/lab03/graph/badge.svg)](https://codecov.io/gh/sayfetik/DevOps-Core-Course)
+
+## Overview
+
+This is a compiled Go implementation of the DevOps Info Service. It provides the same functionality as the Python version but is delivered as a single statically compiled binary.
+
+## Requirements
+
+- Go 1.22 or higher
+
+## Build and Run
+
+Initialize the module (once):
+
+```bash
+go mod init devops-info-service
+```
+
+## Run
+
+```bash
+./devops-info-service
+```
+
+Or with custom configuration:
+
+```bash
+PORT=9090 ./devops-info-service
+```
+
+## API Endpoints
+
+GET / — service and system information
+
+GET /health — health check endpoint

app_go/docs/GO.md

@@ -0,0 +1,12 @@
+# Why Go
+
+Go was selected for the compiled language implementation because it is widely used in DevOps and cloud-native environments.
+
+## Advantages
+
+- Compiles into a single static binary
+- Very fast startup time
+- Low memory usage
+- Excellent support for containers and Kubernetes
+
+Go binaries are ideal for multi-stage Docker builds where the final image contains only the compiled binary.