-
Notifications
You must be signed in to change notification settings - Fork 12
Commit
chore(v0.1.0-rc.1): merge release into main
- Loading branch information
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,63 @@ | ||
############################################################### | ||
# Copyright (c) 2021, 2024 Contributors to the Eclipse Foundation | ||
# | ||
# See the NOTICE file(s) distributed with this work for additional | ||
# information regarding copyright ownership. | ||
# | ||
# This program and the accompanying materials are made available under the | ||
# terms of the Apache License, Version 2.0 which is available at | ||
# https://www.apache.org/licenses/LICENSE-2.0. | ||
# | ||
# Unless required by applicable law or agreed to in writing, software | ||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT | ||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the | ||
# License for the specific language governing permissions and limitations | ||
# under the License. | ||
# | ||
# SPDX-License-Identifier: Apache-2.0 | ||
############################################################### | ||
|
||
name: Release Chart | ||
|
||
on: | ||
workflow_dispatch: | ||
push: | ||
paths: | ||
- 'charts/**' | ||
branches: | ||
- main | ||
|
||
jobs: | ||
release: | ||
# depending on default permission settings for your org (contents being read-only or read-write for workloads), you will have to add permissions | ||
# see: https://docs.github.com/en/actions/security-guides/automatic-token-authentication#modifying-the-permissions-for-the-github_token | ||
permissions: | ||
contents: write | ||
runs-on: ubuntu-latest | ||
steps: | ||
- name: Checkout | ||
uses: actions/checkout@v3 | ||
with: | ||
fetch-depth: 0 | ||
|
||
- name: Configure Git | ||
run: | | ||
git config user.name "$GITHUB_ACTOR" | ||
git config user.email "[email protected]" | ||
- name: Install Helm | ||
uses: azure/setup-helm@v3 | ||
Check warning on line 49 in .github/workflows/chart-release.yaml GitHub Actions / Analyze[MEDIUM] Unpinned Actions Full Length Commit SHA
|
||
with: | ||
token: ${{ secrets.GITHUB_TOKEN }} | ||
|
||
- name: Update helm dependencies for policy-hub | ||
run: | | ||
cd charts/policy-hub | ||
helm repo add bitnami https://charts.bitnami.com/bitnami | ||
helm dependency update | ||
- name: Run chart-releaser | ||
uses: helm/[email protected] | ||
Check warning on line 60 in .github/workflows/chart-release.yaml GitHub Actions / Analyze[MEDIUM] Unpinned Actions Full Length Commit SHA
|
||
env: | ||
CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | ||
CR_SKIP_EXISTING: "true" |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,61 @@ | ||
# ############################################################################# | ||
# Copyright (c) 2023 Contributors to the Eclipse Foundation | ||
# | ||
# See the NOTICE file(s) distributed with this work for additional | ||
# information regarding copyright ownership. | ||
# | ||
# This program and the accompanying materials are made available under the | ||
# terms of the Apache License, Version 2.0 which is available at | ||
# https://www.apache.org/licenses/LICENSE-2.0. | ||
# | ||
# Unless required by applicable law or agreed to in writing, software | ||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT | ||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the | ||
# License for the specific language governing permissions and limitations | ||
# under the License. | ||
# | ||
# SPDX-License-Identifier: Apache-2.0 | ||
# ############################################################################# | ||
|
||
name: "Lint PullRequest" | ||
|
||
on: | ||
pull_request_target: | ||
types: | ||
- opened | ||
- edited | ||
- synchronize | ||
|
||
jobs: | ||
main: | ||
name: Validate PR title | ||
runs-on: ubuntu-latest | ||
steps: | ||
- uses: amannn/action-semantic-pull-request@v5 | ||
id: lint_pr_title | ||
env: | ||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
|
||
- uses: marocchino/sticky-pull-request-comment@v2 | ||
Check warning on line 39 in .github/workflows/lint-pull-request.yml GitHub Actions / Analyze[MEDIUM] Unpinned Actions Full Length Commit SHA
|
||
# When the previous steps fail, the workflow would stop. By adding this | ||
# condition you can continue the execution with the populated error message. | ||
if: always() && (steps.lint_pr_title.outputs.error_message != null) | ||
with: | ||
header: pr-title-lint-error | ||
message: | | ||
Hey there and thank you for opening this pull request! 👋🏼 | ||
We require pull request titles to follow the [Conventional Commits specification](https://www.conventionalcommits.org/en/v1.0.0/) and it looks like your proposed title needs to be adjusted. | ||
Details: | ||
``` | ||
${{ steps.lint_pr_title.outputs.error_message }} | ||
``` | ||
# Delete a previous comment when the issue has been resolved | ||
- if: ${{ steps.lint_pr_title.outputs.error_message == null }} | ||
uses: marocchino/sticky-pull-request-comment@v2 | ||
Check warning on line 58 in .github/workflows/lint-pull-request.yml GitHub Actions / Analyze[MEDIUM] Unpinned Actions Full Length Commit SHA
Check warning on line 58 in .github/workflows/lint-pull-request.yml GitHub Actions / Analyze[MEDIUM] Unpinned Actions Full Length Commit SHA
|
||
with: | ||
header: pr-title-lint-error | ||
delete: true |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,119 @@ | ||
############################################################### | ||
# Copyright (c) 2021, 2023 Contributors to the Eclipse Foundation | ||
# | ||
# See the NOTICE file(s) distributed with this work for additional | ||
# information regarding copyright ownership. | ||
# | ||
# This program and the accompanying materials are made available under the | ||
# terms of the Apache License, Version 2.0 which is available at | ||
# https://www.apache.org/licenses/LICENSE-2.0. | ||
# | ||
# Unless required by applicable law or agreed to in writing, software | ||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT | ||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the | ||
# License for the specific language governing permissions and limitations | ||
# under the License. | ||
# | ||
# SPDX-License-Identifier: Apache-2.0 | ||
############################################################### | ||
|
||
name: PolicyHub Lint and Test Chart | ||
|
||
on: | ||
push: | ||
paths: | ||
- 'charts/policy-hub/**' | ||
branches: [main, dev, release-candidate] | ||
pull_request: | ||
paths: | ||
- 'charts/policy-hub/**' | ||
workflow_dispatch: | ||
inputs: | ||
node_image: | ||
description: 'kindest/node image for k8s kind cluster' | ||
# k8s version from 3.1 release as default | ||
default: 'kindest/node:v1.27.3' | ||
required: false | ||
type: string | ||
upgrade_from: | ||
description: 'policyhub chart version to upgrade from' | ||
# tbd | ||
default: '0.1.0-rc.1' | ||
required: false | ||
type: string | ||
|
||
jobs: | ||
|
||
lint-test: | ||
runs-on: ubuntu-latest | ||
steps: | ||
- name: Checkout | ||
uses: actions/checkout@v3 | ||
with: | ||
fetch-depth: 0 | ||
|
||
- name: Kubernetes KinD Cluster | ||
uses: container-tools/kind-action@v1 | ||
with: | ||
# upgrade version, default (v0.17.0) uses node image v1.21.1 and doesn't work with more recent node image versions | ||
version: v0.20.0 | ||
# default value for event_name != workflow_dispatch | ||
node_image: ${{ github.event.inputs.node_image || 'kindest/node:v1.27.3' }} | ||
|
||
- name: Build migration image | ||
id: build-migration-image | ||
uses: docker/build-push-action@v3 | ||
with: | ||
context: . | ||
file: docker/Dockerfile-policy-hub-migrations | ||
push: true | ||
tags: kind-registry:5000/policy-hub-migrations:testing | ||
|
||
- name: Build service image | ||
id: build-service-image | ||
uses: docker/build-push-action@v3 | ||
with: | ||
context: . | ||
file: docker/Dockerfile-policy-hub-service | ||
push: true | ||
tags: kind-registry:5000/policy-hub-service:testing | ||
|
||
- name: Set up Helm | ||
uses: azure/setup-helm@v3 | ||
with: | ||
version: v3.9.3 | ||
|
||
- uses: actions/setup-python@v4 | ||
with: | ||
python-version: '3.9' | ||
check-latest: true | ||
|
||
- name: Set up chart-testing | ||
uses: helm/[email protected] | ||
|
||
- name: Run chart-testing (list-changed) | ||
id: list-changed | ||
run: | | ||
changed=$(ct list-changed --target-branch ${{ github.event.repository.default_branch }}) | ||
if [[ -n "$changed" ]]; then | ||
echo "changed=true" >> $GITHUB_OUTPUT | ||
fi | ||
- name: Run chart-testing (lint) | ||
run: ct lint --validate-maintainers=false --target-branch ${{ github.event.repository.default_branch }} | ||
|
||
- name: Run service chart-testing (install) | ||
run: ct install --charts charts/policy-hub --config charts/chart-testing-config.yaml --helm-extra-set-args "--set=policyhub.image=kind-registry:5000/policy-hub-service:testing --set=policyhubmigrations.image=kind-registry:5000/policy-hub-migrations:testing" | ||
if: github.event_name != 'pull_request' || steps.list-changed.outputs.changed == 'true' | ||
|
||
# currently the update is commented out, at the moment we're working for the initial version, after that the update will be enabled | ||
# Upgrade the released chart version with the locally available chart | ||
# default value for event_name != workflow_dispatch | ||
# - name: Run helm upgrade | ||
# run: | | ||
# helm repo add bitnami https://charts.bitnami.com/bitnami | ||
# helm repo add tractusx-dev https://eclipse-tractusx.github.io/charts/dev | ||
# helm install policy-hub-service tractusx-dev/policy-hub-service --version ${{ github.event.inputs.upgrade_from || '1.0.0' }} | ||
# helm dependency update charts/policy-hub-service | ||
# helm upgrade policy-hub-service charts/policy-hub-service | ||
# if: github.event_name != 'pull_request' || steps.list-changed.outputs.changed == 'true' |