ChatOps uses GitHub status checks, so it's decidedly GitHub specific and won't work with another provider.
However, if you're just after notifications, what about Heroku's App webhooks? They have an 'entity' for new app releases (api:release) which might partially help you... in that you can set up a notification for successful releases, at least.
What is the Kubernetes version? Is it >1.8 ? (which has RBAC enabled by default).
The error message says that the Kubernetes Dashboard service account is not allowed to list configmaps in default namespace. RBAC by default is deny-all. You need to explicitly grant permissions.
You can create the following ClusterRoleBinding to grant dashboard full admin ...
I would really prefer to not have to also manage a separate Active Directory Domain within our VNets
You've already found the answer: centralized authentication.
If you use a tool like Okta, you can indirectly tie GSuite to AD (or an LDAP server). And then of course you can tie OpenSSH there as well.
or deal with revoking ssh keys
I suspect what is happening here is you are trying to insert the private key into the authorized_keys file, which is invalid as only the public key is required on the target machine.
What you need to do is extract the public key from the private key:
- name: Generate an OpenSSL public key with a passphrase protected private key
Are you doing the building using web hooks or just polling? I think it's inevitable that you'll have to create a Jenkins account to manage API access. This Gitlab link explains how to use the Jenkins Gitlab plugin to manage building when changes are pushed. You'll see they use a Jenkins account as well. This is common practice in my organization to remove ...