126 lines
4.7 KiB
YAML
126 lines
4.7 KiB
YAML
name: Publish helm chart
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
paths:
|
|
- 'charts/**'
|
|
- '.github/workflows/on-push-master-publish-chart.yml'
|
|
- '!charts/actions-runner-controller/docs/**'
|
|
- '!**.md'
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
KUBE_SCORE_VERSION: 1.10.0
|
|
HELM_VERSION: v3.8.0
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
lint-chart:
|
|
runs-on: ubuntu-latest
|
|
name: Lint Chart
|
|
outputs:
|
|
publish-chart: ${{ steps.publish-chart-step.outputs.publish }}
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Set up Helm
|
|
uses: azure/setup-helm@217bf70cbd2e930ba2e81ba7e1de2f7faecc42ba
|
|
with:
|
|
version: ${{ env.HELM_VERSION }}
|
|
|
|
- name: Set up kube-score
|
|
run: |
|
|
wget https://github.com/zegl/kube-score/releases/download/v${{ env.KUBE_SCORE_VERSION }}/kube-score_${{ env.KUBE_SCORE_VERSION }}_linux_amd64 -O kube-score
|
|
chmod 755 kube-score
|
|
|
|
- name: Kube-score generated manifests
|
|
run: helm template --values charts/.ci/values-kube-score.yaml charts/* | ./kube-score score -
|
|
--ignore-test pod-networkpolicy
|
|
--ignore-test deployment-has-poddisruptionbudget
|
|
--ignore-test deployment-has-host-podantiaffinity
|
|
--ignore-test container-security-context
|
|
--ignore-test pod-probes
|
|
--ignore-test container-image-tag
|
|
--enable-optional-test container-security-context-privileged
|
|
--enable-optional-test container-security-context-readonlyrootfilesystem
|
|
|
|
# python is a requirement for the chart-testing action below (supports yamllint among other tests)
|
|
- uses: actions/setup-python@c57f79353baa47cac20975f0a134915e0a8c18bf
|
|
with:
|
|
python-version: 3.7
|
|
|
|
- name: Set up chart-testing
|
|
uses: helm/chart-testing-action@62a185010be4cb08459f7acb19f37927235d5cf3
|
|
|
|
- name: Run chart-testing (list-changed)
|
|
id: list-changed
|
|
run: |
|
|
changed=$(ct list-changed --config charts/.ci/ct-config.yaml)
|
|
if [[ -n "$changed" ]]; then
|
|
echo "::set-output name=changed::true"
|
|
fi
|
|
|
|
- name: Run chart-testing (lint)
|
|
run: ct lint --config charts/.ci/ct-config.yaml
|
|
|
|
- name: Create kind cluster
|
|
uses: helm/kind-action@94729529f85113b88f4f819c17ce61382e6d8478
|
|
if: steps.list-changed.outputs.changed == 'true'
|
|
|
|
# We need cert-manager already installed in the cluster because we assume the CRDs exist
|
|
- name: Install cert-manager
|
|
run: |
|
|
helm repo add jetstack https://charts.jetstack.io --force-update
|
|
helm install cert-manager jetstack/cert-manager --set installCRDs=true --wait
|
|
if: steps.list-changed.outputs.changed == 'true'
|
|
|
|
- name: Run chart-testing (install)
|
|
run: ct install --config charts/.ci/ct-config.yaml
|
|
if: steps.list-changed.outputs.changed == 'true'
|
|
|
|
# WARNING: This relies on the latest release being inat the top of the JSON from GitHub and a clean chart.yaml
|
|
- name: Check if Chart Publish is Needed
|
|
id: publish-chart-step
|
|
run: |
|
|
CHART_TEXT=$(curl -fs https://raw.githubusercontent.com/actions-runner-controller/actions-runner-controller/master/charts/actions-runner-controller/Chart.yaml)
|
|
NEW_CHART_VERSION=$(echo "$CHART_TEXT" | grep version: | cut -d ' ' -f 2)
|
|
RELEASE_LIST=$(curl -fs https://api.github.com/repos/actions-runner-controller/actions-runner-controller/releases | jq .[].tag_name | grep actions-runner-controller | cut -d '"' -f 2 | cut -d '-' -f 4)
|
|
LATEST_RELEASED_CHART_VERSION=$(echo $RELEASE_LIST | cut -d ' ' -f 1)
|
|
echo "Chart version in master : $NEW_CHART_VERSION"
|
|
echo "Latest release chart version : $LATEST_RELEASED_CHART_VERSION"
|
|
if [[ $NEW_CHART_VERSION != $LATEST_RELEASED_CHART_VERSION ]]; then
|
|
echo "::set-output name=publish::true"
|
|
fi
|
|
|
|
publish-chart:
|
|
permissions:
|
|
contents: write # for helm/chart-releaser-action to push chart release and create a release
|
|
if: needs.lint-chart.outputs.publish-chart == 'true'
|
|
needs: lint-chart
|
|
runs-on: ubuntu-latest
|
|
name: Publish Chart
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Configure Git
|
|
run: |
|
|
git config user.name "$GITHUB_ACTOR"
|
|
git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
|
|
|
|
- name: Run chart-releaser
|
|
uses: helm/chart-releaser-action@a3454e46a6f5ac4811069a381e646961dda2e1bf
|
|
env:
|
|
CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
|
|
|