-
Notifications
You must be signed in to change notification settings - Fork 70
110 lines (95 loc) · 3.02 KB
/
lint-test.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
name: Lint and Test Charts
on: pull_request
jobs:
lint:
runs-on: ubuntu-latest
strategy:
matrix:
helm:
- v3.9.4 # renovate: helm
- v3.10.3 # renovate: helm
- v3.11.3 # renovate: helm
- v3.12.3 # renovate: helm
steps:
- name: Checkout
uses: actions/[email protected]
with:
fetch-depth: 0
- name: Set up Helm
uses: azure/[email protected]
with:
version: ${{ matrix.helm }}
- name: Set up Python
uses: actions/[email protected]
with:
python-version: 3.13.0 # renovate: python
- name: Set up chart-testing
uses: helm/[email protected]
- name: Run chart-testing (list-changed)
id: list-changed
run: |
changed=$(ct list-changed)
if [[ -n "$changed" ]]; then
echo "changed=true" >> $GITHUB_OUTPUT
fi
- name: Run chart-testing (lint)
run: ct lint --config ct.yaml
if: steps.list-changed.outputs.changed == 'true'
test:
needs:
- lint
runs-on: ubuntu-latest
strategy:
matrix:
kubernetes:
- v1.24.17 # renovate: kindest/node
- v1.25.16 # renovate: kindest/node
- v1.26.15 # renovate: kindest/node
- v1.27.16 # renovate: kindest/node
steps:
- name: Checkout
uses: actions/[email protected]
with:
fetch-depth: 0
- name: Set up Helm
uses: azure/[email protected]
with:
version: v3.12.3 # renovate: helm
- name: Set up Python
uses: actions/[email protected]
with:
python-version: 3.13.0 # renovate: python
- name: Set up chart-testing
uses: helm/[email protected]
- name: List excluded charts
id: list-excluded
run: |
pip install semantic_version
excluded=$(python .github/excluded-charts.py --kube-version ${{ matrix.kubernetes }})
echo "excluded=$excluded" >> $GITHUB_OUTPUT
- name: Run chart-testing (list-changed)
id: list-changed
run: |
changed=$(ct list-changed --config ct.yaml --excluded-charts "${{ steps.list-excluded.outputs.excluded }}")
if [[ -n "$changed" ]]; then
echo "changed=true" >> $GITHUB_OUTPUT
fi
- name: Create kind cluster
uses: helm/[email protected]
if: steps.list-changed.outputs.changed == 'true'
with:
node_image: kindest/node:${{ matrix.kubernetes }}
- name: Run chart-testing (install)
run: ct install --config ct.yaml --excluded-charts "${{ steps.list-excluded.outputs.excluded }}"
if: steps.list-changed.outputs.changed == 'true'
checkov:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/[email protected]
with:
fetch-depth: 0
- name: Run Checkov
uses: bridgecrewio/[email protected]
with:
config_file: checkov.yaml