raijin-server 0.3.3__py3-none-any.whl → 0.3.6__py3-none-any.whl

{raijin_server-0.3.3.dist-info → raijin_server-0.3.6.dist-info}/RECORD

@@ -1,19 +1,20 @@
-raijin_server/__init__.py,sha256=PxBToT7REJri8rHFGLoeIfEApLUM9TrOogmxCLdnomI,94
-raijin_server/cli.py,sha256=rqkAQCU5imi52YJCIeEuZqWo8bWYkVErOQh3JpKIDok,38149
+raijin_server/__init__.py,sha256=DizNqR7krrm4UEAK6a2xeOG3wuV7xlSekBC-mCSHadw,94
+raijin_server/cli.py,sha256=74ZqEPhg9R9jxNFZRV37CHrwm-dBKmYdT_MxdK4FKKA,37585
 raijin_server/config.py,sha256=QNiEVvrbW56XgvNn5-h3bkJm46Xc8mjNqPbvixXD8N0,4829
 raijin_server/healthchecks.py,sha256=lzXdFw6S0hOYbUKbqksh4phb04lXgXdTspP1Dsz4dx8,15401
 raijin_server/module_manager.py,sha256=Wmhj603CN0XGUVr7_Fo8CHzKd9yIbS9x5BJLqDj78kw,10259
 raijin_server/utils.py,sha256=9RnGnPoUTYOpMVRLNa4P4lIQrJNQLkSkPUxycZRGv78,20827
 raijin_server/validators.py,sha256=EATYPy2pllAb6IX4gUZKnELvospWwyGV3DHrzxb_RMg,11761
-raijin_server/modules/__init__.py,sha256=ojxAdnJfXifNUVa4WuLVh97jHqeVzIi6DZ_fAtXB9tM,984
+raijin_server/modules/__init__.py,sha256=BCTLuNtmvn8IWqGNQZQBRokqAv-KwUZP4_kyxkyHyN4,896
 raijin_server/modules/apokolips_demo.py,sha256=8ltsXRbVDwlDwLMIvh02NG-FeAfBWw_v6lh7IGOyNqs,13725
 raijin_server/modules/bootstrap.py,sha256=oVIGNRW_JbgY8zXNHGAIP0vGbbHNHyQexthxo5zhbcw,9762
 raijin_server/modules/calico.py,sha256=TTPF1bLFdAKb3IVOqFqRxNblULkRmMMRylsIBp4w8I8,6700
 raijin_server/modules/cert_manager.py,sha256=XkFlXJjiP4_9It_PJaFcVYMS-QKTzzFAt839QQ9qNsg,50223
 raijin_server/modules/essentials.py,sha256=2xUXCyCQtFGd2DnCKV81N1R6bEJqH8zaet8mLovtQ1I,689
 raijin_server/modules/firewall.py,sha256=h6AISqiZeTinVT7BjmQIS872qRAFZJLg7meqlth3cfw,757
-raijin_server/modules/full_install.py,sha256=xiKe2GLuZ97c4YdTmhP-kwDVuJJ9Xq3dlgcLlqSPeYM,15518
-raijin_server/modules/grafana.py,sha256=r4U6FJZ9OeTk4d3LDJT0NbN8wumB3REMtd3E3PRL_oE,17383
+raijin_server/modules/full_install.py,sha256=M4SV4OA-r41xhpMmZQvUieRugiq0faLa4f0N499ksd4,15035
+raijin_server/modules/grafana.py,sha256=8YbKG-UL19lwTkH1-ZxpUetOZd-CLI4_kPsuZblNaWI,18080
+raijin_server/modules/harbor.py,sha256=ix0qnu_FugzbFnnTRZ3Dyy6UmKdm3nD0ubZ4SZYHkWE,21940
 raijin_server/modules/hardening.py,sha256=4hz3ifkMhPlXa2n7gPxN0gitQgzALZ-073vuU3LM4RI,1616
 raijin_server/modules/harness.py,sha256=uWTxTVJlY_VB6xi4ftMtTSaIb96HA8WJQS-RbyxU45M,5391
 raijin_server/modules/internal_dns.py,sha256=Jynngq0TEEUo3jkAR4m8F1ihF10rkQuKHVP-gZYyDFY,15191
@@ -21,15 +22,13 @@ raijin_server/modules/istio.py,sha256=o0K5-Fw4LRs-kbAVgwzYxHzEt_aPFJG8suqOqvg274
 raijin_server/modules/kafka.py,sha256=n7ZpLPWv6sKBJhdBiPe7VgeDB24YiCIOWvOQkWwt03Y,5664
 raijin_server/modules/kong.py,sha256=_w1VIkND6zZuUwIl_CNDxbwWdzaEdXZEO_Iqc1ngPwQ,13654
 raijin_server/modules/kubernetes.py,sha256=9E6zV0zGQWZW92NVpxwYctpi-4JDmi6YzF3tKRI4HlU,13343
-raijin_server/modules/loki.py,sha256=aNiUpnOFppZMXoQwYhn7IoPMzwUz4aHi6pbiqj1PRjc,5022
+raijin_server/modules/loki.py,sha256=fRoXNghwffW6afE_a3sKMhjPJ9DIWhGMTTPM-ltNr2E,5766
 raijin_server/modules/metallb.py,sha256=uUuklc_RsQ-W2qDVRMQAxQm9HKGEqso444b1IwBpM6w,8554
-raijin_server/modules/minio.py,sha256=QbladHGefZBZ8l3f9D7t45nwfwVcuAgHi78E4Ygi300,17614
+raijin_server/modules/minio.py,sha256=ZoxugJvvuGLzViDfEzrVCRZUevoiFwcEy0PNyn0My4w,18918
 raijin_server/modules/network.py,sha256=QRlYdcryCCPAWG3QQ_W7ld9gJgETI7H8gwntOU7UqFE,4818
-raijin_server/modules/observability_dashboards.py,sha256=fVz0WEOQrUTF5rJ__Nu_onyBuwL_exFmysWMmg8AE9w,7319
-raijin_server/modules/observability_ingress.py,sha256=S4MtJKahiZ1qSx0P71P3IhKvq4RY-g01Z4IogW3c1hs,7045
-raijin_server/modules/prometheus.py,sha256=y5sy_mH1YeQWTOt5CNqqj5JD92-GMxbWQaaZKwx505U,19728
+raijin_server/modules/prometheus.py,sha256=lyhaqLIfMl0GtQ2b2Hre7_A47HrHBB5gspmnWtwXZ4Y,21880
 raijin_server/modules/sanitize.py,sha256=_RnWn1DUuNrzx3NnKEbMvf5iicgjiN_ubwT59e0rYWY,6040
-raijin_server/modules/secrets.py,sha256=d4j12feQL8m_4-hYN5FfboQHvBc75TFeGno3OzrXokE,9266
+raijin_server/modules/secrets.py,sha256=C5k10ODo6Ai_e6Ei-JiWTOa-cOh-5d2__PhTQA0UmjI,19452
 raijin_server/modules/ssh_hardening.py,sha256=Zd0dlylUBr01SkrI1CS05-0DB9xIto5rWH1bUVs80ow,5422
 raijin_server/modules/traefik.py,sha256=omziywss4o-8t64Kj-upLqbXdFYm2JwqOoOukDUmqxY,5008
 raijin_server/modules/velero.py,sha256=yDtqd6yUu0L5wzLCjYXqvvxB_RyaAoZtntb6HoHVAOo,5642
@@ -40,9 +39,9 @@ raijin_server/scripts/checklist.sh,sha256=j6E0Kmk1EfjLvKK1VpCqzXJAXI_7Bm67LK4ndy
 raijin_server/scripts/install.sh,sha256=Y1ickbQ4siQ0NIPs6UgrqUr8WWy7U0LHmaTQbEgavoI,3949
 raijin_server/scripts/log_size_metric.sh,sha256=Iv4SsX8AuCYRou-klYn32mX41xB6j0xJGLBO6riw4rU,1208
 raijin_server/scripts/pre-deploy-check.sh,sha256=XqMo7IMIpwUHF17YEmU0-cVmTDMoCGMBFnmS39FidI4,4912
-raijin_server-0.3.3.dist-info/licenses/LICENSE,sha256=kJsMCjOiRZE0AQNtxWqBa32z9kMAaF4EUxyHj3hKaJo,1105
-raijin_server-0.3.3.dist-info/METADATA,sha256=dtdbYJo209BpoUkIJ5PswDw_1ik5tyQxfFupiiTNRZE,8829
-raijin_server-0.3.3.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
-raijin_server-0.3.3.dist-info/entry_points.txt,sha256=3ZvxDX4pvcjkIRsXAJ69wIfVmKa78LKo-C3QhqN2KVM,56
-raijin_server-0.3.3.dist-info/top_level.txt,sha256=Yz1xneCRtsZOzbPIcTAcrSxd-1p80pohMXYAZ74dpok,14
-raijin_server-0.3.3.dist-info/RECORD,,
+raijin_server-0.3.6.dist-info/licenses/LICENSE,sha256=kJsMCjOiRZE0AQNtxWqBa32z9kMAaF4EUxyHj3hKaJo,1105
+raijin_server-0.3.6.dist-info/METADATA,sha256=egpj4eEFQ3JJAA-bT3Iz5ebOc57e5JpyuQ2a8-ruAD4,8829
+raijin_server-0.3.6.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
+raijin_server-0.3.6.dist-info/entry_points.txt,sha256=3ZvxDX4pvcjkIRsXAJ69wIfVmKa78LKo-C3QhqN2KVM,56
+raijin_server-0.3.6.dist-info/top_level.txt,sha256=Yz1xneCRtsZOzbPIcTAcrSxd-1p80pohMXYAZ74dpok,14
+raijin_server-0.3.6.dist-info/RECORD,,

raijin_server/modules/observability_dashboards.py

@@ -1,233 +0,0 @@
-"""Provisiona dashboards opinativos do Grafana e alertas padrao do Prometheus/Alertmanager."""
-
-from __future__ import annotations
-
-import json
-import textwrap
-from pathlib import Path
-
-import typer
-
-from raijin_server.utils import (
-    ExecutionContext,
-    kubectl_apply,
-    kubectl_create_ns,
-    require_root,
-    write_file,
-)
-
-MANIFEST_PATH = Path("/tmp/raijin-observability-dashboards.yaml")
-
-CLUSTER_DASHBOARD = {
-    "title": "Raijin Cluster Overview",
-    "uid": "raijin-cluster",
-    "timezone": "browser",
-    "schemaVersion": 39,
-    "panels": [
-        {
-            "type": "timeseries",
-            "title": "Node CPU %",
-            "datasource": "Prometheus",
-            "targets": [
-                {
-                    "expr": '100 - (avg by(instance) (irate(node_cpu_seconds_total{mode="idle"}[5m])) * 100)',
-                    "legendFormat": "{{instance}}",
-                }
-            ],
-        },
-        {
-            "type": "timeseries",
-            "title": "Node Memory %",
-            "datasource": "Prometheus",
-            "targets": [
-                {
-                    "expr": '((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes) * 100',
-                    "legendFormat": "{{instance}}",
-                }
-            ],
-        },
-        {
-            "type": "stat",
-            "title": "API Server Errors (5m)",
-            "datasource": "Prometheus",
-            "targets": [
-                {
-                    "expr": 'sum(rate(apiserver_request_total{code=~"5.."}[5m]))',
-                }
-            ],
-        },
-    ],
-}
-
-SLO_DASHBOARD = {
-    "title": "Raijin SLO - Workloads",
-    "uid": "raijin-slo",
-    "schemaVersion": 39,
-    "panels": [
-        {
-            "type": "timeseries",
-            "title": "Pod Restarts (1h)",
-            "datasource": "Prometheus",
-            "targets": [
-                {
-                    "expr": 'increase(kube_pod_container_status_restarts_total[1h])',
-                    "legendFormat": "{{namespace}}/{{pod}}",
-                }
-            ],
-        },
-        {
-            "type": "timeseries",
-            "title": "Ingress HTTP 5xx Rate",
-            "datasource": "Prometheus",
-            "targets": [
-                {
-                    "expr": 'sum(rate(traefik_service_requests_total{code=~"5.."}[5m])) by (service)',
-                    "legendFormat": "{{service}}",
-                }
-            ],
-        },
-        {
-            "type": "gauge",
-            "title": "Cluster CPU Pressure",
-            "datasource": "Prometheus",
-            "targets": [
-                {
-                    "expr": 'avg(node_pressure_cpu_waiting_seconds_total)',
-                }
-            ],
-        },
-    ],
-}
-
-
-def _json_block(obj: dict) -> str:
-    return json.dumps(obj, indent=2, separators=(",", ": "))
-
-
-def _alertmanager_block(contact_email: str, webhook_url: str) -> str:
-    receivers = ["receivers:", "  - name: default"]
-    if contact_email:
-        receivers.append("    email_configs:")
-        receivers.append(f"      - to: {contact_email}")
-        receivers.append("        send_resolved: true")
-    if webhook_url:
-        receivers.append("    webhook_configs:")
-        receivers.append(f"      - url: {webhook_url}")
-        receivers.append("        send_resolved: true")
-    receivers_str = "\n".join(receivers) if len(receivers) > 2 else "receivers:\n  - name: default"
-    return textwrap.dedent(
-        f"""
-route:
-  receiver: default
-  group_by: ['alertname']
-  group_wait: 30s
-  group_interval: 5m
-  repeat_interval: 4h
-{receivers_str}
-"""
-    ).strip()
-
-
-def _build_manifest(namespace: str, contact_email: str, webhook_url: str) -> str:
-    cluster_json = textwrap.indent(_json_block(CLUSTER_DASHBOARD), "    ")
-    slo_json = textwrap.indent(_json_block(SLO_DASHBOARD), "    ")
-    alertmanager_yaml = textwrap.indent(_alertmanager_block(contact_email, webhook_url), "    ")
-
-    prometheus_rules = textwrap.dedent(
-        f"""
-        apiVersion: monitoring.coreos.com/v1
-        kind: PrometheusRule
-        metadata:
-          name: raijin-default-alerts
-          namespace: {namespace}
-        spec:
-          groups:
-            - name: raijin-cluster-health
-              rules:
-                - alert: NodeDown
-                  expr: kube_node_status_condition{{condition="Ready",status="true"}} == 0
-                  for: 5m
-                  labels:
-                    severity: critical
-                  annotations:
-                    summary: "Node fora do cluster"
-                    description: "O node {{ $labels.node }} nao reporta Ready ha 5 minutos."
-                - alert: HighNodeCPU
-                  expr: avg(node_load1) by (instance) > count(node_cpu_seconds_total{{mode="system"}}) by (instance)
-                  for: 10m
-                  labels:
-                    severity: warning
-                  annotations:
-                    summary: "CPU elevada em {{ $labels.instance }}"
-                    description: "Load1 superior ao numero de cores ha 10 minutos."
-                - alert: APIServerErrorRate
-                  expr: sum(rate(apiserver_request_total{{code=~"5.."}}[5m])) > 5
-                  for: 5m
-                  labels:
-                    severity: warning
-                  annotations:
-                    summary: "API Server retornando 5xx"
-                    description: "Taxa de erros 5xx do API Server acima de 5 req/s."
-        """
-    ).strip()
-
-    grafana_cm = textwrap.dedent(
-        f"""
-        apiVersion: v1
-        kind: ConfigMap
-        metadata:
-          name: grafana-dashboards-raijin
-          namespace: {namespace}
-          labels:
-            grafana_dashboard: "1"
-        data:
-          cluster-overview.json: |
-{cluster_json}
-          slo-workloads.json: |
-{slo_json}
-        """
-    ).strip()
-
-    alertmanager_cm = textwrap.dedent(
-        f"""
-        apiVersion: v1
-        kind: ConfigMap
-        metadata:
-          name: alertmanager-raijin
-          namespace: {namespace}
-          labels:
-            app.kubernetes.io/name: alertmanager
-        data:
-          alertmanager.yml: |
-{alertmanager_yaml}
-        """
-    ).strip()
-
-    documents = "\n---\n".join([grafana_cm, alertmanager_cm, prometheus_rules])
-    return documents + "\n"
-
-
-def run(ctx: ExecutionContext) -> None:
-    require_root(ctx)
-    typer.echo("Aplicando dashboards e alertas opinativos...")
-
-    namespace = typer.prompt("Namespace de observabilidade", default="observability")
-    contact_email = typer.prompt(
-        "Email para receber alertas (ENTER para ignorar)",
-        default="",
-    )
-    webhook_url = typer.prompt(
-        "Webhook HTTP (Slack/Teams) para Alertmanager (ENTER para ignorar)",
-        default="",
-    )
-
-    kubectl_create_ns(namespace, ctx)
-
-    manifest = _build_manifest(namespace, contact_email, webhook_url)
-    write_file(MANIFEST_PATH, manifest, ctx)
-    kubectl_apply(str(MANIFEST_PATH), ctx)
-
-    typer.secho("Dashboards e alertas aplicados no namespace de observabilidade.", fg=typer.colors.GREEN)
-    typer.echo("Grafana: ConfigMap 'grafana-dashboards-raijin'")
-    typer.echo("Alertmanager: ConfigMap 'alertmanager-raijin'")
-    typer.echo("Prometheus: PrometheusRule 'raijin-default-alerts'")

raijin_server/modules/observability_ingress.py

@@ -1,246 +0,0 @@
-"""Provisiona ingressos seguros para Grafana, Prometheus e Alertmanager."""
-
-from __future__ import annotations
-
-import base64
-import subprocess
-from pathlib import Path
-from typing import Dict, List
-
-import typer
-
-from raijin_server.utils import (
-    ExecutionContext,
-    kubectl_apply,
-    kubectl_create_ns,
-    require_root,
-    write_file,
-)
-
-MANIFEST_PATH = Path("/tmp/raijin-observability-ingress.yaml")
-
-COMPONENTS: List[Dict[str, object]] = [
-    {
-        "key": "grafana",
-        "label": "Grafana",
-        "service": "grafana",
-        "port": 80,
-        "default_host": "grafana.example.com",
-        "default_tls": "grafana-tls",
-        "auth_secret": "grafana-basic-auth",
-        "middleware": "grafana-auth",
-    },
-    {
-        "key": "prometheus",
-        "label": "Prometheus",
-        "service": "kube-prometheus-stack-prometheus",
-        "port": 9090,
-        "default_host": "prometheus.example.com",
-        "default_tls": "prometheus-tls",
-        "auth_secret": "prometheus-basic-auth",
-        "middleware": "prometheus-auth",
-    },
-    {
-        "key": "alertmanager",
-        "label": "Alertmanager",
-        "service": "kube-prometheus-stack-alertmanager",
-        "port": 9093,
-        "default_host": "alerts.example.com",
-        "default_tls": "alertmanager-tls",
-        "auth_secret": "alertmanager-basic-auth",
-        "middleware": "alertmanager-auth",
-    },
-]
-
-
-def _generate_htpasswd(username: str, password: str) -> str:
-  try:
-    result = subprocess.run(
-      ["openssl", "passwd", "-6", password],
-      capture_output=True,
-      text=True,
-      check=True,
-    )
-    hashed = result.stdout.strip()
-  except Exception:
-    import crypt
-
-    hashed = crypt.crypt(password, crypt.mksalt(crypt.METHOD_SHA512))
-  return f"{username}:{hashed}"
-
-
-def _build_manifest(
-    namespace: str,
-    ingress_class: str,
-    services: List[Dict[str, object]],
-    encoded_users: str,
-    issuer_name: str,
-    issuer_kind: str,
-) -> str:
-    documents: List[str] = []
-
-    for svc in services:
-        host = svc["host"]
-        tls_secret = svc["tls_secret"]
-        auth_secret = svc["auth_secret"]
-        middleware = svc["middleware"]
-        service_name = svc["service"]
-        port = svc["port"]
-        name = svc["key"]
-
-        documents.append(
-            f"""apiVersion: v1
-kind: Secret
-metadata:
-  name: {auth_secret}
-  namespace: {namespace}
-type: Opaque
-data:
-  users: {encoded_users}
-"""
-        )
-
-        documents.append(
-            f"""apiVersion: traefik.containo.us/v1alpha1
-kind: Middleware
-metadata:
-  name: {middleware}
-  namespace: {namespace}
-spec:
-  basicAuth:
-    secret: {auth_secret}
-    removeHeader: true
-"""
-        )
-
-        if issuer_name:
-            documents.append(
-                f"""apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: {name}-ingress-cert
-  namespace: {namespace}
-spec:
-  secretName: {tls_secret}
-  dnsNames:
-    - {host}
-  issuerRef:
-    name: {issuer_name}
-    kind: {issuer_kind}
-"""
-            )
-
-        documents.append(
-            f"""apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: {name}-secure
-  namespace: {namespace}
-  annotations:
-    traefik.ingress.kubernetes.io/router.middlewares: {namespace}-{middleware}@kubernetescrd
-spec:
-  ingressClassName: {ingress_class}
-  rules:
-    - host: {host}
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: {service_name}
-                port:
-                  number: {port}
-  tls:
-    - secretName: {tls_secret}
-      hosts:
-        - {host}
-"""
-        )
-
-    return "---\n".join(documents)
-
-
-def run(ctx: ExecutionContext) -> None:
-    require_root(ctx)
-    
-    typer.secho("⚠️  AVISO DE SEGURANÇA", fg=typer.colors.RED, bold=True)
-    typer.secho(
-        "\nExpor ferramentas de observabilidade publicamente é um RISCO DE SEGURANÇA significativo!",
-        fg=typer.colors.YELLOW,
-    )
-    typer.secho(
-        "Mesmo com TLS e BasicAuth, você estará expondo informações sensíveis do cluster.\n",
-        fg=typer.colors.YELLOW,
-    )
-    typer.secho("✅ RECOMENDAÇÃO FORTE:", fg=typer.colors.GREEN, bold=True)
-    typer.echo("1. Configure VPN: sudo raijin vpn")
-    typer.echo("2. Use port-forward via VPN para acesso seguro")
-    typer.echo("3. Mantenha os dashboards APENAS na rede interna\n")
-    
-    proceed = typer.confirm(
-        "Você REALMENTE quer expor os dashboards publicamente?",
-        default=False
-    )
-    
-    if not proceed:
-        typer.secho("\n✓ Boa decisão! Use VPN para acesso seguro.", fg=typer.colors.GREEN)
-        typer.echo("\nPara acessar via VPN + port-forward:")
-        typer.echo("  kubectl -n observability port-forward svc/grafana 3000:80")
-        typer.echo("  kubectl -n observability port-forward svc/kube-prometheus-stack-prometheus 9090:9090")
-        typer.echo("  kubectl -n observability port-forward svc/kube-prometheus-stack-alertmanager 9093:9093")
-        raise typer.Exit(0)
-    
-    typer.echo("\nProvisionando ingress seguro para observabilidade...")
-
-    namespace = typer.prompt("Namespace dos componentes", default="observability")
-    ingress_class = typer.prompt("IngressClass dedicada", default="traefik")
-    username = typer.prompt("Usuario para basic auth", default="observability")
-    password = typer.prompt(
-        "Senha para basic auth",
-        hide_input=True,
-        confirmation_prompt=True,
-    )
-
-    configured: List[Dict[str, object]] = []
-    for comp in COMPONENTS:
-        host = typer.prompt(f"Host para {comp['label']}", default=comp["default_host"])
-        tls_secret = typer.prompt(
-            f"Secret TLS para {comp['label']}",
-            default=comp["default_tls"],
-        )
-        configured.append({**comp, "host": host, "tls_secret": tls_secret})
-
-    issue_certs = typer.confirm("Gerar Certificates via cert-manager?", default=True)
-    issuer_name = ""
-    issuer_kind = "ClusterIssuer"
-    if issue_certs:
-        issuer_name = typer.prompt("Nome do issuer (cert-manager)", default="letsencrypt-prod")
-        issuer_kind = typer.prompt("Tipo do issuer (Issuer/ClusterIssuer)", default="ClusterIssuer")
-
-    secret_line = _generate_htpasswd(username, password)
-    encoded_users = base64.b64encode(secret_line.encode()).decode()
-
-    kubectl_create_ns(namespace, ctx)
-
-    manifest = _build_manifest(
-        namespace,
-        ingress_class,
-        configured,
-        encoded_users,
-        issuer_name,
-        issuer_kind,
-    )
-
-    write_file(MANIFEST_PATH, manifest, ctx)
-    kubectl_apply(str(MANIFEST_PATH), ctx)
-
-    typer.secho("Ingress seguro aplicado com sucesso.", fg=typer.colors.GREEN)
-    typer.echo("Hosts publicados:")
-    for svc in configured:
-        typer.echo(f"  - {svc['label']}: https://{svc['host']}")
-    if not issuer_name:
-        typer.secho(
-            "Certificados nao foram criados automaticamente. Certifique-se de que os secrets TLS existem.",
-            fg=typer.colors.YELLOW,
-        )