{"id":37858360,"url":"https://github.com/pl4nty/ctfcli-deploy-kubernetes","last_synced_at":"2026-01-16T16:29:40.789Z","repository":{"id":187184028,"uuid":"676445201","full_name":"pl4nty/ctfcli-deploy-kubernetes","owner":"pl4nty","description":"Deploy CTF challenges to Kubernetes with ctfcli","archived":false,"fork":false,"pushed_at":"2024-10-20T06:47:18.000Z","size":20,"stargazers_count":2,"open_issues_count":6,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-01-13T02:08:41.859Z","etag":null,"topics":["ctf-platform","ctfd","kubernetes"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/pl4nty.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-08-09T08:05:23.000Z","updated_at":"2024-08-22T16:19:37.000Z","dependencies_parsed_at":"2024-01-01T14:42:25.537Z","dependency_job_id":"49e77246-b781-47eb-bac8-1c25cfdab01d","html_url":"https://github.com/pl4nty/ctfcli-deploy-kubernetes","commit_stats":null,"previous_names":["pl4nty/ctfcli-deploy-kubernetes"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/pl4nty/ctfcli-deploy-kubernetes","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pl4nty%2Fctfcli-deploy-kubernetes","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pl4nty%2Fctfcli-deploy-kubernetes/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pl4nty%2Fctfcli-deploy-kubernetes/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pl4nty%2Fctfcli-deploy-kubernetes/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/pl4nty","download_url":"https://codeload.github.com/pl4nty/ctfcli-deploy-kubernetes/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pl4nty%2Fctfcli-deploy-kubernetes/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28479893,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-16T11:59:17.896Z","status":"ssl_error","status_checked_at":"2026-01-16T11:55:55.838Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ctf-platform","ctfd","kubernetes"],"created_at":"2026-01-16T16:29:40.204Z","updated_at":"2026-01-16T16:29:40.775Z","avatar_url":"https://github.com/pl4nty.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# ctfcli-deploy-kubernetes\n\nA [ctfcli](https://github.com/CTFd/ctfcli) plugin for deploying CTF challenge containers to Kubernetes.\n\n## Installation\n\n1. Install the plugin: `ctf plugins install https://github.com/pl4nty/ctfcli-deploy-kubernetes.git`\n2. [Install Kompose](https://kompose.io/installation/)\n3. Install `kubectl` and configure cluster access, eg [Google Kubernetes Engine docs](https://cloud.google.com/kubernetes-engine/docs/how-to/cluster-access-for-kubectl)\n4. Login to a container registry, eg `docker login ghcr.io`\n\n## Usage\n\n1. Add a [Compose](https://www.compose-spec.io/) file like `docker-compose.yml` to your challenge(s)\n2. `ctf challenge deploy --host \"kubernetes://chals.example.com?registry=ghcr.io/username\" --skip-login`\n3. If your Compose files already have `image` fields, the registry parameter isn't required\n4. If your `.ctf/config` file contains registry credentials, the `--skip-login` parameter isn't required\n\n## Pwn challenges\n\nTo expose pwn challenges to the internet:\n\n1. Ensure challenges have unique ports\n2. Choose a domain for challenges to be exposed on subdomains, eg `chals.example.com`\n3. `ctf challenge deploy --host \"kubernetes://chals.example.com?registry=ghcr.io/username\" --skip-login`\n4. Configure DNS for `chals.example.com` to point to your cloud provider's load balancer external IP address\n5. Visit your challenge eg at `chals.example.com:1234`\n\n## Web challenges\n\nTo expose web challenges to the internet:\n\n1. [Install an ingress controller](https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/)\n2. Set it as the default IngressClass: `kubectl annotate ingressclass your-ingress-class ingressclass.kubernetes.io/is-default-class=true`. Alternatively, set `kompose.service.expose.ingress-class-name` in an [override](#overrides)\n3. Choose a domain for challenges to be exposed on subdomains, eg `chals.example.com`\n4. `ctf challenge deploy --host \"kubernetes://chals.example.com?registry=ghcr.io/username\" --skip-login`\n5. Configure DNS for `*.chals.example.com` to point to your ingress controller external IP address\n6. Visit your challenge at `http://challenge-name.chals.example.com`. This will be the first service in the Compose file, other services will be available with the pattern `http://challenge-name-service-name.chals.example.com`\n7. (Optional) Configure TLS termination at the ingress controller. If using the Ingress TLS field, create a Kubernetes secret in the challenge namespace and set `kompose.service.expose.tls-secret` in an [override](#override). Secret creation can be automated with [reflector](https://github.com/emberstack/kubernetes-reflector) for wildcard certificates (recommended) or [cert-manager](https://cert-manager.io/).\n\n## Private container registries\n\nTo use a private container registry with password authentication, create a Kubernetes secret in the challenge namespace. Secret creation can be automated with [reflector](https://github.com/emberstack/kubernetes-reflector).\n\n```sh\nkubectl create secret docker-registry ghcr --namespace=$namespace \\\n--docker-server=ghcr.io \\\n--docker-username=username \\\n--docker-password=password\n```\n\nThen set `kompose.image-pull-secret` in an [override](#override).\n\n## Overrides\n\nUse the `override` parameter with a [Compose](https://www.compose-spec.io/) file to [merge](https://docs.docker.com/compose/multiple-compose-files/merge/) it into challenges. This can enable certain features. For a full list of supported `kompose` labels, see the labels section of the [Kompose docs](https://kompose.io/user-guide/).\n\n```yaml\nservices:\n  app:\n    labels:\n      kompose.image-pull-secret: 'mypullsecretname'\n      kompose.service.expose.ingress-class-name: 'myingressclass'\n      kompose.service.expose.tls-secret: 'mytlssecretname'\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpl4nty%2Fctfcli-deploy-kubernetes","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpl4nty%2Fctfcli-deploy-kubernetes","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpl4nty%2Fctfcli-deploy-kubernetes/lists"}