Update README and manifests

Author: discordianfish

README.md

@@ -8,17 +8,32 @@ label matching the repo name and are in a namespace matching the branch name.
 If there are no other objects with the given label key in the namespace, it also
 deletes the namespace and all remaining objects.
 
+### PushEvent
+On push events, k8s-webhook-handler will checkout `.ci/workflow.yaml` from the
+repo the push was and submit it to the k8s api with the following annotations
+added:
+
+ - `k8s-webhook-handler.io/ref`: event.Ref
+ - `k8s-webhook-handler.io/revision`: event.HeadCommit.ID
+ - `k8s-webhook-handler.io/repo_name`: event.Repo.FullName
+ - `k8s-webhook-handler.io/repo_url`: event.Repo.GitURL
+ - `k8s-webhook-handler.io/repo_ssh`: event.Repo.SSHURL
+
 ## Binaries
 - cmd/webhook is the actual webhook handling server
 - cmd/reconciler iterates over all k8s namespaces and deletes all objects that
   are labeled for which there is no remote branch anymore.
 
 ## Usage
 Currently only github delete webhooks in json format are supported.
-Beside the manifests and templates in `deploy/`, a secret 'k8s-ci' with
-`GITHUB_SECRET` is expected. The value should match the "Secret" field in the
-GitHub webhook settings and can be created like this:
+Beside the manifests and templates in `deploy/`, a secret 'webhook-handler' with
+the following fields is expected:
+
+- `GITHUB_TOKEN` Personal Access Token for API access
+- `WEBHOOK_SECRET` Secret for validating the webhook
+
+The value should match the "Secret" field in the GitHub webhook settings and can be created like this:
 
 ```
-kubectl create secret generic k8s-ci --from-literal=GITHUB_SECRET=github-secret
+kubectl create secret generic k8s-ci --from-literal=GITHUB_SECRET=github-secret ...
 ```

deploy/deployment.yaml

@@ -4,6 +4,7 @@ metadata:
   labels:
     k8s-app: k8s-webhook-handler
   name: k8s-webhook-handler
+  namespace: ci
 spec:
   selector:
     matchLabels:
@@ -15,25 +16,20 @@ spec:
       name: k8s-webhook-handler
     spec:
       serviceAccountName: k8s-webhook-handler
-      imagePullSecrets:
-        - name: private-registry
       containers:
         - name: k8s-webhook-handler
-          image: itskoko/k8s-webhook-handler
-          command:
-            - /bin/sh
-            - -c
-            - exec webhook -statsd.address $HOST_IP:8125
+          image: itskoko/k8s-webhook-handler:v0.1.0
           env:
-            - name: HOST_IP
-              valueFrom:
-                fieldRef:
-                  fieldPath: status.hostIP
             - name: WEBHOOK_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: k8s-ci
+                  name: webhook-handler
                   key: WEBHOOK_SECRET
+            - name: GITHUB_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: webhook-handler
+                  key: GITHUB_TOKEN
           ports:
           - containerPort: 8080
             name: http