initial commit

Author: muhammad-asn

.dockerignore

@@ -0,0 +1,2 @@
+venv
+__pycache__

.env.docker.example

@@ -0,0 +1,3 @@
+TELEGRAM_CHANNEL_ID=-10xxxx
+TELEGRAM_BOT_TOKEN=1999xxxx5:AAGxxxxxx
+TELEGRAM_TOPIC_ID=1

.env.example

@@ -0,0 +1,3 @@
+export TELEGRAM_CHANNEL_ID=-10xxxx
+export TELEGRAM_BOT_TOKEN=1999xxxx5:AAGxxxxxx
+export TELEGRAM_TOPIC_ID=1

.gitignore

@@ -0,0 +1,4 @@
+.env
+.env.docker
+__pycache__
+venv

Dockerfile

@@ -0,0 +1,16 @@
+FROM python:3.10
+
+RUN mkdir /app
+
+WORKDIR /app
+
+COPY requirements.txt /app
+
+RUN pip install -r requirements.txt
+
+COPY . /app
+
+EXPOSE 8000
+
+CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "8000"]
+

README.md

@@ -0,0 +1,66 @@
+## KubeWatch Webhook for Telegram
+
+Kubewatch: https://github.com/robusta-dev/kubewatch
+
+## Notes
+This kubewatch is reduced only for **Created** and **Deleted** resource
+
+### Prerequisites
+1. Docker
+2. Python >=3.10
+
+
+### How to run
+
+1. Build the docker image
+   ```bash
+   $ docker build -t kubewatch-telegram-webhook . 
+   ```
+2. Set the Telegram environment variable, save as file called `.env.docker`
+   ```bash
+   TELEGRAM_CHANNEL_ID=-10xxxx
+   TELEGRAM_BOT_TOKEN=1999xxxx5:AAGxxxxxx
+   TELEGRAM_TOPIC_ID=1
+   ```
+3. Run the docker compose
+   This will run on port 8000 
+   ```bash
+   $ docker compose up -d 
+
+   $ docker ps                                   
+    CONTAINER ID   IMAGE          COMMAND                  CREATED         STATUS         PORTS                                       NAMES
+    e081d433cc3f   4a60b6e1a206   "uvicorn main:app --…"   8 minutes ago   Up 8 minutes   0.0.0.0:8000->8000/tcp, :::8000->8000/tcp   kubewatch-telegram-webhook-kubewatch-telegram-webhook-1
+   ```
+4. Setup https (self-signed, ngrok, etc)
+   ```bash
+   $ ngrok http 8000 
+   ```
+5. Set the kubewatch config, for this example we use Helm (deployed on Kubernetes)
+    ```yaml
+    namespace: ""
+    rbac:
+        create: true
+    slack:
+        enabled: false
+    webhook:
+        enabled: true
+        url: "https://9e7c-2001-df0-9e00-00-1321-64-119.ngrok-free.app/webhook-telegram"
+        tlsskip: true
+    resourcesToWatch:
+        deployment: true
+        replicationcontroller: false
+        replicaset: false
+        daemonset: true
+        services: true
+        pod: true
+        job: true
+        persistentvolume: true
+        namespace: true
+        secret: true
+        ingress: true
+        event: false
+    ```
+
+
+### Screenshot
+![screenshot](assets/telegram-screenshot.png)

assets/telegram-screenshot.png

@@ -0,0 +1,7 @@
+services:
+  kubewatch-telegram-webhook:
+    image: kubewatch-telegram-webhook
+    ports:
+      - "8000:8000"
+    env_file:
+      - .env

docker-compose.yml

@@ -0,0 +1,22 @@
+namespace: ""
+rbac:
+  create: true
+slack:
+  enabled: false
+webhook:
+  enabled: true
+  url: "https://9e7c-2001-df0-9e00-00-1321-64-119.ngrok-free.app/webhook-telegram"
+  tlsskip: true
+resourcesToWatch:
+  deployment: true
+  replicationcontroller: false
+  replicaset: false
+  daemonset: true
+  services: true
+  pod: true
+  job: true
+  persistentvolume: true
+  namespace: true
+  secret: true
+  ingress: true
+  event: false

examples/kubewatch/kubewatch.conf.webhook.yaml

@@ -0,0 +1,55 @@
+import os
+import requests
+import json
+
+TELEGRAM_BOT_TOKEN = os.getenv("TELEGRAM_BOT_TOKEN")
+TELEGRAM_CHAT_ID = os.getenv("TELEGRAM_CHAT_ID")
+TELEGRAM_TOPIC_ID = os.getenv("TELEGRAM_TOPIC_ID")
+TELEGRAM_URL = "https://api.telegram.org"
+
+if not (TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID and TELEGRAM_TOPIC_ID):
+    raise EnvironmentError("The Telegram environment variables are not set.")
+
+
+class Telegram:
+    def __init__(self):
+        self.telegram_bot_token = TELEGRAM_BOT_TOKEN
+        self.telegram_chat_id = TELEGRAM_CHAT_ID
+        self.telegram_topic_id = TELEGRAM_TOPIC_ID
+
+    def send_message(self, message):
+        msg = ""
+        try:
+            if message.eventmeta.reason == "Created":
+                msg = f"""
+"✅ *Info: Resource Created* ✅"            
+*Name:* {message.eventmeta.name}
+*Namespace:* {message.eventmeta.namespace}
+*Reason:* {message.eventmeta.reason}
+*Message:* {message.text}
+        """
+
+            elif message.eventmeta.reason == "Deleted":
+                msg = f"""
+🚨 *Alert: Resource Deleted* 🚨
+*Name:* {message.eventmeta.name}
+*Namespace:* {message.eventmeta.namespace}
+*Reason:* {message.eventmeta.reason}
+*Message:* {message.text}
+        """
+
+            data = {
+                "chat_id": self.telegram_chat_id,
+                "text": msg,
+                "message_thread_id": self.telegram_topic_id,
+                "parse_mode": "Markdown",
+            }
+            headers = {"Content-Type": "application/json"}
+            requests.post(
+                f"{TELEGRAM_URL}/bot{TELEGRAM_BOT_TOKEN}/sendMessage",
+                headers=headers,
+                data=json.dumps(data),
+            )
+
+        except Exception as e:
+            print(f"Error sending message: {e}")