mirror of
https://github.com/actions/actions-runner-controller.git
synced 2025-12-11 03:57:01 +00:00
81 lines
2.8 KiB
YAML
81 lines
2.8 KiB
YAML
name: Lint and Test Charts
|
|
|
|
on:
|
|
push:
|
|
paths:
|
|
- 'charts/**'
|
|
- '.github/workflows/on-push-lint-charts.yml'
|
|
- '!charts/actions-runner-controller/docs/**'
|
|
- '!**.md'
|
|
workflow_dispatch:
|
|
env:
|
|
KUBE_SCORE_VERSION: 1.10.0
|
|
HELM_VERSION: v3.8.0
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
lint-test:
|
|
runs-on: ubuntu-latest
|
|
name: Lint Chart
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Set up Helm
|
|
uses: azure/setup-helm@217bf70cbd2e930ba2e81ba7e1de2f7faecc42ba
|
|
with:
|
|
version: ${{ env.HELM_VERSION }}
|
|
|
|
- name: Set up kube-score
|
|
run: |
|
|
wget https://github.com/zegl/kube-score/releases/download/v${{ env.KUBE_SCORE_VERSION }}/kube-score_${{ env.KUBE_SCORE_VERSION }}_linux_amd64 -O kube-score
|
|
chmod 755 kube-score
|
|
|
|
- name: Kube-score generated manifests
|
|
run: helm template --values charts/.ci/values-kube-score.yaml charts/* | ./kube-score score -
|
|
--ignore-test pod-networkpolicy
|
|
--ignore-test deployment-has-poddisruptionbudget
|
|
--ignore-test deployment-has-host-podantiaffinity
|
|
--ignore-test container-security-context
|
|
--ignore-test pod-probes
|
|
--ignore-test container-image-tag
|
|
--enable-optional-test container-security-context-privileged
|
|
--enable-optional-test container-security-context-readonlyrootfilesystem
|
|
|
|
# python is a requirement for the chart-testing action below (supports yamllint among other tests)
|
|
- uses: actions/setup-python@fff15a21cc8b16191cb1249f621fa3a55b9005b8
|
|
with:
|
|
python-version: 3.7
|
|
|
|
- name: Set up chart-testing
|
|
uses: helm/chart-testing-action@62a185010be4cb08459f7acb19f37927235d5cf3
|
|
|
|
- name: Run chart-testing (list-changed)
|
|
id: list-changed
|
|
run: |
|
|
changed=$(ct list-changed --config charts/.ci/ct-config.yaml)
|
|
if [[ -n "$changed" ]]; then
|
|
echo "::set-output name=changed::true"
|
|
fi
|
|
|
|
- name: Run chart-testing (lint)
|
|
run: ct lint --config charts/.ci/ct-config.yaml
|
|
|
|
- name: Create kind cluster
|
|
uses: helm/kind-action@94729529f85113b88f4f819c17ce61382e6d8478
|
|
if: steps.list-changed.outputs.changed == 'true'
|
|
|
|
# We need cert-manager already installed in the cluster because we assume the CRDs exist
|
|
- name: Install cert-manager
|
|
run: |
|
|
helm repo add jetstack https://charts.jetstack.io --force-update
|
|
helm install cert-manager jetstack/cert-manager --set installCRDs=true --wait
|
|
if: steps.list-changed.outputs.changed == 'true'
|
|
|
|
- name: Run chart-testing (install)
|
|
run: ct install --config charts/.ci/ct-config.yaml
|