feat: stage commit of the OSS CSIT repo

.gitattributes

@@ -0,0 +1,34 @@
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.arrow filter=lfs diff=lfs merge=lfs -text
+*.bin filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.ckpt filter=lfs diff=lfs merge=lfs -text
+*.ftz filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.h5 filter=lfs diff=lfs merge=lfs -text
+*.joblib filter=lfs diff=lfs merge=lfs -text
+*.lfs.* filter=lfs diff=lfs merge=lfs -text
+*.mlmodel filter=lfs diff=lfs merge=lfs -text
+*.model filter=lfs diff=lfs merge=lfs -text
+*.msgpack filter=lfs diff=lfs merge=lfs -text
+*.npy filter=lfs diff=lfs merge=lfs -text
+*.npz filter=lfs diff=lfs merge=lfs -text
+*.onnx filter=lfs diff=lfs merge=lfs -text
+*.ot filter=lfs diff=lfs merge=lfs -text
+*.parquet filter=lfs diff=lfs merge=lfs -text
+*.pb filter=lfs diff=lfs merge=lfs -text
+*.pickle filter=lfs diff=lfs merge=lfs -text
+*.pkl filter=lfs diff=lfs merge=lfs -text
+*.pt filter=lfs diff=lfs merge=lfs -text
+*.pth filter=lfs diff=lfs merge=lfs -text
+*.rar filter=lfs diff=lfs merge=lfs -text
+*.safetensors filter=lfs diff=lfs merge=lfs -text
+*.tar.* filter=lfs diff=lfs merge=lfs -text
+*.tar filter=lfs diff=lfs merge=lfs -text
+*.tflite filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.wasm filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text
+*tfevents* filter=lfs diff=lfs merge=lfs -text

.github/CODEOWNERS

@@ -1,19 +1 @@
-####################################################
-#
-# List of approvers for <project-name> project
-#
-#####################################################
-#
-# Learn about CODEOWNERS file format:
-#  https://help.github.com/en/articles/about-code-owners
-#
-
-# These owners will be the default owners for everything in
-# the repository. Unless a later match takes precedence,
-# the following users/teams will be requested for
-# review when someone opens a pull request.
-* @agntcy/<maintainer-team-name>
-
-# Enforces admin protections for repo configuration via probot settings app.
-# ref: https://github.com/probot/settings#security-implications
-.github/settings.yml @agntcy/<admin-team-name>
+**/ @muscariello @pbalogh-sa

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2025 Cisco and/or its affiliates.
+# SPDX-License-Identifier: Apache-2.0
+
 ---
 name: Bug Report
 description: Report a bug to help us improve.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: Copyright (c) 2025 Cisco and/or its affiliates.
+# SPDX-License-Identifier: Apache-2.0
+
 ---
 name: Feature Request
 description: Suggest a feature for this project.

.github/actions/detect-changes/action.yaml

@@ -0,0 +1,54 @@
+# SPDX-FileCopyrightText: Copyright (c) 2025 Cisco and/or its affiliates.
+# SPDX-License-Identifier: Apache-2.0
+
+---
+
+name: Detect changes
+description: Detect changes in as list of directories
+inputs:
+  dirs:
+    description: 'Directories where to search for changes'
+    required: true
+    default: "./"
+outputs:
+  changed-dirs:
+    description: 'Directories with changes'
+    value: ${{ steps.detect-changes.outputs.changed-dirs }}
+
+runs:
+  using: "composite"
+  steps:
+    - name: Detect changes
+      id: detect-changes
+      run: |
+        # Function to get the diff in a directory in case of pr or push event
+        get_diff() {
+          dir=${1}
+
+          if [[ "${{ github.event_name }}" == "pull_request" ]]; then
+            base_ref="${{ github.event.pull_request.base.sha }}"
+            head_ref="${{ github.event.pull_request.head.sha }}"
+          else
+            # For push to main, compare against the previous commit
+            base_ref="${{ github.event.before }}"
+            head_ref="${{ github.sha }}"
+          fi
+
+          git diff --quiet --name-only $base_ref $head_ref -- ${dir}
+        }
+
+        # Check if any of the folder have changed
+        CHANGED_DIRS=()
+        for DIR in ${{ inputs.dirs }}; do
+          if get_diff ${DIR}; then
+            echo "No changes in ${DIR}"
+          else
+            echo "Changes detected in ${DIR}"
+            CHANGED_DIRS+=($DIR)
+          fi
+        done
+
+        # Set the output variable
+        dirs_out=$(echo -n ${CHANGED_DIRS[*]} | jq -R -s -c 'split(" ") | map(select(length > 0))')
+        echo changed-dirs=${dirs_out} >> $GITHUB_OUTPUT
+      shell: bash

.github/actions/setup-env/action.yaml

@@ -0,0 +1,47 @@
+# SPDX-FileCopyrightText: Copyright (c) 2025 Cisco and/or its affiliates.
+# SPDX-License-Identifier: Apache-2.0
+
+---
+
+name: Setup Environment
+description: setup environment with common tools/vars
+inputs:
+  python:
+    description: 'Install python'
+    required: false
+    default: false
+  python-version:
+    description: 'Python version to install'
+    required: false
+    default: '3.12'
+  go:
+    description: 'Install golang'
+    required: false
+    default: false
+  go-version:
+    description: 'Go version to install'
+    required: false
+    default: '1.23.1'
+
+runs:
+  using: "composite"
+  steps:
+    - name: Setup Taskfile
+      shell: bash
+      run: sh -c "$(curl --location https://taskfile.dev/install.sh)" -- -d -b ~/.local/bin
+
+    - name: Setup Python
+      if: ${{ inputs.python == 'true' }}
+      uses:  ./.github/actions/setup-python
+      with:
+        py-version: ${{ inputs.python-version }}
+
+    - name: Setup Golang
+      if: ${{ inputs.go == 'true' }}
+      uses: ./.github/actions/setup-go
+      with:
+        go-version: ${{ inputs.go-version }}
+
+    - name: Update GITHUB_PATH
+      shell: bash
+      run: echo "$HOME/.local/bin" >> $GITHUB_PATH

.github/actions/setup-go/action.yaml

@@ -0,0 +1,76 @@
+# SPDX-FileCopyrightText: Copyright (c) 2025 Cisco and/or its affiliates.
+# SPDX-License-Identifier: Apache-2.0
+
+---
+
+name: Setup Environment
+description: setup environment to build/test/lint go applications
+inputs:
+  go-version:
+    description: 'Go version to install'
+    required: false
+    default: ~1.23
+  check-latest:
+    description: 'Check if the cached Go version is the latest one. If the locally cached version is not the most up-to-date, a relevant Go version will then be downloaded.'
+    required: false
+    default: true
+  github-token:
+    description: 'github token'
+    required: false
+    default: ''
+  go-fips:
+    description: 'Whether to install GoFIPS'
+    required: false
+    default: "false"
+outputs:
+  cache-hit:
+    description: "Whether we hit the cache"
+    value: ${{ steps.go-cache.outputs.cache-hit }}
+runs:
+  using: "composite"
+  steps:
+    - name: Setup Go
+      if: ${{ inputs.go-fips != 'true' }}
+      uses: actions/setup-go@v5
+      with:
+        go-version: ${{ inputs.go-version }}
+        check-latest: ${{ inputs.check-latest }}
+        cache: false
+
+    - name: Setup Go fips
+      if: ${{ inputs.go-fips == 'true' }}
+      run: |
+        # Install GoFIPS
+        curl -fsSL https://devhub.cisco.com/artifactory/csl-ubuntu-sto/csl-key.gpg | sudo tee /etc/apt/trusted.gpg.d/csm-toolkit.asc
+        sudo add-apt-repository -y "deb https://devhub.cisco.com/artifactory/csl-ubuntu-sto/ $(lsb_release -cs) main"
+        sudo apt-get update
+        sudo apt-get install -y csm-toolkit
+        sudo /opt/cisco/csm-toolkit/bin/csm-toolkit install gofips
+        echo 'source /opt/cisco/csm-toolkit/environment/buildtime*' >> ~/.bashrc
+        echo 'source /opt/cisco/csm-toolkit/environment/buildtime*' >> ~/.shrc
+      shell: bash
+
+    - name: Cache Go
+      id: go-cache
+      uses: actions/cache@v4
+      with:
+        path: |
+          ~/go/bin
+          ~/go/pkg/mod
+          ~/gofips/pkg/mod
+          ~/gofips/bin
+        key: go-cache-${{ inputs.go-fips == 'true' && 'fips' || 'nofips' }}-${{ runner.os }}-${{ hashFiles('**/go.sum') }}
+
+    - id: set-cache-hit
+      run: echo "cache-hit=${{ steps.go-cache.outputs.cache-hit }}" >> $GITHUB_OUTPUT
+      shell: bash
+
+    - name: Update GITHUB_PATH
+      run: echo "$HOME/.local/bin" >> $GITHUB_PATH
+      shell: bash
+
+    - name: Setup access to private go modules
+      if: ${{ inputs.github-token != '' }}
+      run: |
+        git config --global --add url."https://${{ inputs.github-token }}:x-oauth-basic@github.com/".insteadOf "https://github.com/"
+      shell: bash

.github/actions/setup-k8s/action.yaml

@@ -0,0 +1,77 @@
+# SPDX-FileCopyrightText: Copyright (c) 2025 Cisco and/or its affiliates.
+# SPDX-License-Identifier: Apache-2.0
+
+---
+
+name: Setup Kubernetes tooling
+description: Setup Kubernetes tooling
+inputs:
+  helm-version:
+    description: 'Helm version'
+    required: false
+    default: "3.12.1"
+  helm-ct-version:
+    description: 'Helm chart-testing version'
+    required: false
+    default: "3.11.0"
+  kind-version:
+    description: 'Kind version'
+    required: false
+    default: "0.24.0"
+  kind-create-cluster:
+    description: 'Create kind K8s cluster'
+    required: false
+    default: "false"
+  kind-cluster-name:
+    description: 'Kind K8s cluster name to create'
+    required: false
+    default: "kind"
+  kind-cluster-gateway:
+    description: 'Gateway IP to use for kind server nodes. Useful when running actions inside containers.'
+    required: false
+    default: "127.0.0.1"
+runs:
+  using: "composite"
+  steps:
+    #
+    # Install kubernetes tools
+    #
+    - name: Setup Helm
+      uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
+      with:
+        version: ${{ inputs.helm-version }}
+
+    - name: Set up Helm chart-testing
+      uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
+      with:
+        version: ${{ inputs.helm-ct-version }}
+
+    - name: Setup kind
+      uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde # v1.10.0
+      with:
+        version: v${{ inputs.kind-version }}
+        install_only: true
+
+    - name: Setup kubectl
+      uses: azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0
+
+    #
+    # Setup cluster
+    #
+    - name: Setup Kind cluster
+      if: ${{ inputs.kind-create-cluster == 'true' }}
+      shell: bash
+      run: |
+        # Create cluster config
+        KIND_CONFIG_FILE=$(mktemp -p /tmp)
+        cat <<EOF > $KIND_CONFIG_FILE
+        kind: Cluster
+        apiVersion: kind.x-k8s.io/v1alpha4
+        networking:
+          apiServerAddress: "${{ inputs.kind-cluster-gateway }}"
+          apiServerPort: 6443
+        EOF
+
+        # Create cluster
+        kind create cluster --config $KIND_CONFIG_FILE --name ${{ inputs.kind-cluster-name }}
+        kubectl cluster-info

.github/actions/setup-python/action.yaml

@@ -0,0 +1,59 @@
+# SPDX-FileCopyrightText: Copyright (c) 2025 Cisco and/or its affiliates.
+# SPDX-License-Identifier: Apache-2.0
+
+---
+
+name: Setup Python Environment
+description: setup environment to build/test/lint python applications
+inputs:
+  py-version:
+    description: 'Python version to install'
+    required: false
+    default: "3.12"
+  py-package-manager:
+    description: 'Python package manager to use'
+    required: false
+    default: "poetry"
+  py-poetry-version:
+    description: 'Poetry version to use'
+    required: false
+    default: "1.7.1"
+
+runs:
+  using: "composite"
+  steps:
+    - name: Setup Python
+      id: setup-python
+      uses: actions/setup-python@v5
+      with:
+        python-version: ${{ inputs.py-version }}
+
+    - name: Load cached Poetry Binary
+      uses: actions/cache@v4
+      with:
+        path: ~/.local
+        key: venv-${{ runner.os }}-${{ steps.setup-python.outputs.python-version }}-${{ inputs.py-poetry-version }}
+
+    - name: Install Poetry
+      shell: bash
+      run: |
+        if [[ -f ~/.local/bin/poetry ]]; then
+          echo "Poetry already installed"
+        else
+          curl -sSL https://install.python-poetry.org | POETRY_VERSION=${{ inputs.py-poetry-version }} python3 -
+        fi
+
+    - name: Install uv
+      shell: bash
+      run: |
+        curl -LsSf https://astral.sh/uv/install.sh | env UV_INSTALL_DIR="${HOME}/.local/bin" sh
+
+    - name: Load cached venv
+      uses: actions/cache@v4
+      with:
+        path: ~/.cache/pypoetry/virtualenvs
+        key: venv-${{ runner.os }}-${{ steps.setup-python.outputs.python-version }}-${{ hashFiles('**/poetry.lock') }}
+
+    - name: Update GITHUB_PATH
+      shell: bash
+      run: echo "$HOME/.local/bin" >> $GITHUB_PATH