mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-04-16 01:07:14 +00:00
Code Activity

ci: Fix install manifests publishing with Flux (#5110)

Browse source 
- use the correct version to tag artifacts
- add only the generated install.yaml to the artifact contents

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
This commit is contained in:
Stefan Prodan 2022-10-21 15:29:55 +03:00 • committed by GitHub
parent 5d0adadfa7
commit 7812626e61
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
.github/workflows/release.yaml vendored
View file

@ -110,6 +110,10 @@ jobs:
needs:
- create-release
steps:
- name: Set version
id: version
run: echo ::set-output name=version::${GITHUB_REF#refs/*/}
- name: Checkout
uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # pin@v2.4.0
with:
@ -153,17 +157,19 @@ jobs:
CR_PAT_ARTIFACTS: ${{ secrets.CR_PAT_ARTIFACTS }}
run: |
set -e
cd config/.release/ && \
flux push artifact oci://ghcr.io/${{ github.repository_owner }}/manifests/kyverno:$(git rev-parse --short HEAD) \
mkdir -p config/.release-manifests
cp config/.release/install.yaml config/.release-manifests/install.yaml
cd config/.release-manifests/ && \
flux push artifact oci://ghcr.io/${{ github.repository_owner }}/manifests/kyverno:${{ steps.version.outputs.version }} \
--path="." \
--source="$(git config --get remote.origin.url)" \
--revision="$(git tag --points-at HEAD)/$(git rev-parse HEAD)"
--revision="${{ steps.version.outputs.version }}/$(git rev-parse HEAD)"
- name: Sign manifests in GHCR with Cosign
env:
COSIGN_EXPERIMENTAL: 1
run: |
cosign sign ghcr.io/${{ github.repository_owner }}/manifests/kyverno:$(git rev-parse --short HEAD)
cosign sign ghcr.io/${{ github.repository_owner }}/manifests/kyverno:${{ steps.version.outputs.version }}
release-cli-via-krew:
runs-on: ubuntu-latest