application/.github/workflows/pull_request.yaml at main · stakater/application · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
name: Pull Request

on:
  pull_request:
    branches:
      - main

permissions:
  contents: read

env:
  CHART_NAME: "application"

jobs:
  build:
    name: Build
    if: "! contains(toJSON(github.event.commits.*.message), '[skip-ci]')"
    runs-on: stakater-nonprod
    env:
      KUBECONFIG: "${{ github.workspace }}/.kubeconfig.yaml"
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
        with:
          ref: ${{github.event.pull_request.head.sha}}
      - name: Set up Helm
        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
      - name: Install OpenShift CLI
        uses: redhat-actions/oc-installer@35b60c3f9757ae4301521556e1b75ff6f59f8d7c # v1
        with:
          oc_version: "https://mirror.openshift.com/pub/openshift-v4/x86_64/clients/ocp/stable-4.7/openshift-client-linux.tar.gz"
      - name: Login to cluster
        run: oc login --token=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) --server=https://kubernetes.default.svc --insecure-skip-tls-verify=true
      - name: Helm Lint
        run: |
          helm lint ${CHART_NAME}
          helm lint ${CHART_NAME} -f ${CHART_NAME}/values-test.yaml
      - name: Run Checkov
        uses: bridgecrewio/checkov-action@f9b0a2206b0401cad02ac0a66be2a7934a5be838 # v12.3088.0
        with:
          quiet: true
          soft_fail: false
          file: ${{ env.CHART_NAME }}/Chart.yaml
          var_file: ${{ env.CHART_NAME }}/values-test.yaml
      - name: Dry Run Chart
        run: |
          helm install ${CHART_NAME} ${CHART_NAME} -f ${CHART_NAME}/values-test.yaml -n stakater-chart-pipeline-test --dry-run=server --debug

  unit-test:
    name: Unit Tests
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
        with:
          ref: ${{github.event.pull_request.head.sha}}
      - uses: d3adb5/helm-unittest-action@850bc76597579183998069830d5fa8c3ef0ea34a # v2
        with:
          charts: application

  helm-docs:
    name: Helm Docs
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
        with:
          ref: ${{github.event.pull_request.head.sha}}
      - name: Run helm-docs
        uses: losisin/helm-docs-github-action@6f957579ac122ecc167bf515fe84e828686c9a15 # v1.7.1
        with:
          # Keep args in sync with /.pre-commit-config.yaml
          output-file: ./../README.md
          template-files: ./README.md.gotmpl
          sort-values-order: file
      - name: Check diff
        run: |
          git diff --exit-code README.md || { echo; echo "error: README.md is out of date. Please run `make build-docs` and commit the resulting file."; exit 1; }