85 lines
2.4 KiB
YAML
85 lines
2.4 KiB
YAML
name: Validate Charts
|
|
on:
|
|
pull_request:
|
|
paths:
|
|
- 'charts/**'
|
|
|
|
jobs:
|
|
charts-changed:
|
|
name: Get Charts being Changed
|
|
runs-on: ci-os
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: List changed charts
|
|
id: changed-charts
|
|
run: |
|
|
changed=$(ct --config .forgejo/ct.yaml list-changed | tr '\n' ' ' | jq -R -s -c 'split(" ") | map(select(length > 0))')
|
|
if [[ -n "$changed" ]]; then
|
|
echo "changesExist=true" >> $GITHUB_ENV
|
|
echo "::set-output name=reposChanged::$changed" # Sets output as a JSON array
|
|
fi
|
|
outputs:
|
|
reposChanged: ${{ steps.changed-charts.outputs.reposChanged }}
|
|
changesExist: ${{ env.changesExist }}
|
|
|
|
validate-linting:
|
|
name: "Lint"
|
|
needs: charts-changed
|
|
if: needs.charts-changed.outputs.changesExist == 'true'
|
|
runs-on: ci-os
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Validate
|
|
run: |
|
|
repos='${{ needs.charts-changed.outputs.reposChanged }}'
|
|
for repo in $(echo $repos | jq -r '.[]'); do
|
|
echo "Linting $repo"
|
|
ct --config .forgejo/ct.yaml lint "$repo"
|
|
done
|
|
|
|
validate-audit:
|
|
name: "Audit"
|
|
needs: charts-changed
|
|
if: needs.charts-changed.outputs.changesExist == 'true'
|
|
runs-on: ci-os
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Validate
|
|
run: |
|
|
repos='${{ needs.charts-changed.outputs.reposChanged }}'
|
|
for repo in $(echo $repos | jq -r '.[]'); do
|
|
echo "Auditing $repo"
|
|
polaris audit --helm-chart "$repo" \
|
|
--helm-values "$repo/values.yaml" \
|
|
--format pretty \
|
|
--set-exit-code-on-danger \
|
|
--set-exit-code-below-score 80
|
|
done
|
|
|
|
validate-api:
|
|
name: "Outdated APIs"
|
|
needs: charts-changed
|
|
if: needs.charts-changed.outputs.changesExist == 'true'
|
|
runs-on: ci-os
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Validate
|
|
run: |
|
|
repos='${{ needs.charts-changed.outputs.reposChanged }}'
|
|
for repo in $(echo $repos | jq -r '.[]'); do
|
|
echo "Checking deprecated apiVersions for $repo"
|
|
helm template "$repo" -f "$repo/ci/pluto-values.yaml" | pluto detect - --ignore-deprecations
|
|
done
|