feat: add netbird network configuration script to automate the networks, resources, routings, and policies reconciliation

Signed-off-by: Sidharth Jawale <sidharth@obmondo.com>

Author: VILJkid

argocd-helm-charts/netbird/README.md

@@ -188,6 +188,39 @@ Forwarding rules: 0
 Peers count: 1/2 Connected
 ```
 
+
+## Network and Policy Automation
+
+This tool synchronizes your network, resource, and policy configuration with the NetBird Management API.
+
+### Build the binary
+To compile the configuration management tool:
+```bash
+cd argocd-helm-charts/netbird/config/
+go build -o netbird-config .
+```
+
+### Setup and Execution
+
+1. Copy the example configuration to your cluster's `kubeaid-config` directory:
+   ```bash
+   cp argocd-helm-charts/netbird/config/config.yaml.example k8s/<cluster-name>/netbird-configs/config.yaml
+   ```
+2. Populate `k8s/<cluster-name>/netbird-configs/config.yaml` with your required networks, resources, and policies.
+
+3. Run the tool by passing the path to your cluster-specific configuration file:
+   ```bash
+   export NETBIRD_MGMT_URL="https://vpn.example.com"
+   export NETBIRD_API_TOKEN="nbp_your_token_here"
+   ./netbird-config --config k8s/<cluster-name>/netbird/config.yaml
+   ```
+
+### Idempotency
+- The script treats the provided configuration as the "Desired State."
+- It checks existing Networks, Resources, Routers, and Policies by name.
+- It will **Create** if missing, **Update** if the attributes (address, groups, etc.) differ, and do nothing if the state already matches the config.
+- Renaming a network/resource in the `config.yaml` will result in the creation of a *new* object, leaving the old one as is (it does not automatically delete).
+
 ### Troubleshooting
 
 #### GET /api/users status 401

argocd-helm-charts/netbird/config/config.yaml.example

@@ -0,0 +1,18 @@
+networks:
+  - name: "examplenetwork-location"
+    resources:
+      - name: "exampleresource-location-uniqueidentifier"
+        address: "172.17.0.0/24"
+        groups: ["Access-Group-Name"]
+    routing_peers:
+      groups: ["Routing-Peer-Group-Name"]
+
+policies:
+  - source:
+      groups: ["Source-Group-Name"]
+    destination:
+      groups: ["Destination-Group-Name"]
+    protocol: "TCP"
+    ports: 
+      - "80"
+      - "443"

argocd-helm-charts/netbird/config/core/core.go

@@ -0,0 +1,35 @@
+package core
+
+import (
+	"fmt"
+	"strings"
+)
+
+// GenerateNetworkDescription generates the description based on hyphen separators.
+func GenerateNetworkDescription(name string) string {
+	parts := strings.Split(name, "-")
+	if len(parts) < 2 {
+		return fmt.Sprintf("Network %s", name)
+	}
+	return fmt.Sprintf("Network %s located in %s", parts[0], parts[1])
+}
+
+// GenerateResourceDescription generates the description based on hyphens and other metadata.
+func GenerateResourceDescription(name, groupsStr, address string) string {
+	parts := strings.Split(name, "-")
+
+	// 1. Identify the location
+	location := ""
+	if len(parts) >= 2 {
+		location = " located in " + parts[1]
+	}
+
+	// 2. Determine base name
+	baseName := parts[0]
+	if len(parts) == 3 {
+		baseName = parts[0] + "-" + parts[2]
+	}
+
+	// 3. Format with the location variable
+	return fmt.Sprintf("Resource %s%s part of %s pointing to %s", baseName, location, groupsStr, address)
+}

argocd-helm-charts/netbird/config/go.mod

@@ -0,0 +1,33 @@
+module github.com/obmondo/kubeaid/argocd-helm-charts/netbird/config
+
+go 1.26.5
+
+require (
+	github.com/netbirdio/netbird v0.74.1
+	github.com/spf13/pflag v1.0.10
+	github.com/spf13/viper v1.21.0
+	gopkg.in/yaml.v3 v3.0.1
+)
+
+require (
+	github.com/apapsch/go-jsonmerge/v2 v2.0.0 // indirect
+	github.com/fsnotify/fsnotify v1.9.0 // indirect
+	github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
+	github.com/google/uuid v1.6.0 // indirect
+	github.com/oapi-codegen/runtime v1.1.2 // indirect
+	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
+	github.com/sagikazarmark/locafero v0.11.0 // indirect
+	github.com/sirupsen/logrus v1.9.4 // indirect
+	github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 // indirect
+	github.com/spf13/afero v1.15.0 // indirect
+	github.com/spf13/cast v1.10.0 // indirect
+	github.com/subosito/gotenv v1.6.0 // indirect
+	go.yaml.in/yaml/v3 v3.0.4 // indirect
+	golang.org/x/sys v0.44.0 // indirect
+	golang.org/x/text v0.36.0 // indirect
+)
+
+replace (
+	github.com/dexidp/dex => github.com/netbirdio/dex v0.244.1-0.20260512110716-8d70ad8647c1
+	github.com/dexidp/dex/api/v2 => github.com/netbirdio/dex/api/v2 v2.0.0-20260512110716-8d70ad8647c1
+)