chore: improve workflows and helm chart #50
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ############################################################### | |
| # Copyright (c) 2024 Contributors to the Eclipse Foundation | |
| # | |
| # See the NOTICE file(s) distributed with this work for additional | |
| # information regarding copyright ownership. | |
| # | |
| # This program and the accompanying materials are made available under the | |
| # terms of the Apache License, Version 2.0 which is available at | |
| # https://www.apache.org/licenses/LICENSE-2.0. | |
| # | |
| # Unless required by applicable law or agreed to in writing, software | |
| # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT | |
| # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the | |
| # License for the specific language governing permissions and limitations | |
| # under the License. | |
| # | |
| # SPDX-License-Identifier: Apache-2.0 | |
| ############################################################### | |
| name: Lint and Test Chart | |
| on: | |
| push: | |
| paths: | |
| - 'charts/ssi-credential-issuer/**' | |
| branches: [main, dev, release-candidate] | |
| pull_request: | |
| paths: | |
| - 'charts/ssi-credential-issuer/**' | |
| workflow_dispatch: | |
| inputs: | |
| node_image: | |
| description: 'kindest/node image for k8s kind cluster' | |
| # k8s version from 3.1 release as default | |
| default: 'kindest/node:v1.27.3' | |
| required: false | |
| type: string | |
| upgrade_from: | |
| description: 'ssi credential issuer chart version to upgrade from' | |
| # tbd | |
| default: 'tbd' | |
| required: false | |
| type: string | |
| jobs: | |
| lint-test: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
| with: | |
| fetch-depth: 0 | |
| - name: Kubernetes KinD Cluster | |
| uses: container-tools/kind-action@0ad70e2299366b0e1552c7240f4e4567148f723e # v2.0.4 | |
| with: | |
| # upgrade version, default (v0.17.0) uses node image v1.21.1 and doesn't work with more recent node image versions | |
| version: v0.20.0 | |
| # default value for event_name != workflow_dispatch | |
| node_image: ${{ github.event.inputs.node_image || 'kindest/node:v1.27.3' }} | |
| - name: Build migration image | |
| id: build-migration-image | |
| uses: docker/build-push-action@v3 | |
| with: | |
| context: . | |
| file: ./docker/Dockerfile-credential-issuer-migrations | |
| push: true | |
| tags: kind-registry:5000/credential-issuer-migrations:testing | |
| - name: Build service image | |
| id: build-service-image | |
| uses: docker/build-push-action@v3 | |
| with: | |
| context: . | |
| file: ./docker/Dockerfile-credential-issuer-service | |
| push: true | |
| tags: kind-registry:5000/credential-issuer-service:testing | |
| - name: Build expiry app | |
| id: build-expiry-app-image | |
| uses: docker/build-push-action@v3 | |
| with: | |
| context: . | |
| file: ./docker/Dockerfile-credential-expiry-app | |
| push: true | |
| tags: kind-registry:5000/credential-expiry-app:testing | |
| - name: Build processes worker | |
| id: build-processes-worker-image | |
| uses: docker/build-push-action@v3 | |
| with: | |
| context: . | |
| file: ./docker/Dockerfile-credential-issuer-processes-worker | |
| push: true | |
| tags: kind-registry:5000/credential-issuer-processes-worker:testing | |
| - name: Set up Helm | |
| uses: azure/setup-helm@b7246b12e77f7134dc2d460a3d5bad15bbe29390 # v4 | |
| with: | |
| version: v3.9.3 | |
| - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0 | |
| with: | |
| python-version: '3.9' | |
| check-latest: true | |
| - name: Set up chart-testing | |
| uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1 | |
| - name: Run chart-testing (list-changed) | |
| id: list-changed | |
| run: | | |
| changed=$(ct list-changed --target-branch ${{ github.event.repository.default_branch }}) | |
| if [[ -n "$changed" ]]; then | |
| echo "changed=true" >> $GITHUB_OUTPUT | |
| fi | |
| - name: Run chart-testing (lint) | |
| run: ct lint --validate-maintainers=false --check-version-increment=false --target-branch ${{ github.event.repository.default_branch }} | |
| - name: Run chart-testing (install) | |
| run: ct install --charts charts/ssi-credential-issuer --config charts/chart-testing-config.yaml --helm-extra-set-args "--set issuer.image.name=kind-registry:5000/credential-issuer-service --set issuer.image.tag=testing --set issuermigrations.image.name=kind-registry:5000/credential-issuer-migrations --set issuermigrations.image.tag=testing --set processesworker.image.name=kind-registry:5000/credential-issuer-processes-worker --set processesworker.image.tag=testing --set credentialExpiry.image.name=kind-registry:5000/credential-expiry-app --set credentialExpiry.image.tag=testing" | |
| if: github.event_name != 'pull_request' || steps.list-changed.outputs.changed == 'true' | |
| # TODO: re-add the step after the first version release | |
| # Upgrade the released chart version with the locally available chart | |
| # default value for event_name != workflow_dispatch | |
| # - name: Run helm upgrade | |
| # run: | | |
| # helm repo add bitnami https://charts.bitnami.com/bitnami | |
| # helm repo add tractusx-dev https://eclipse-tractusx.github.io/charts/dev | |
| # helm install ssi-credential-issuer tractusx-dev/ssi-credential-issuer --version ${{ github.event.inputs.upgrade_from || 'tbd' }} --namespace upgrade --create-namespace | |
| # helm dependency update charts/ssi-credential-issuer | |
| # helm upgrade ssi-credential-issuer charts/ssi-credential-issuer --set issuer.image.name=kind-registry:5000/credential-issuer-service --set issuer.image.tag=testing --set issuermigrations.image.name=kind-registry:5000/credential-issuer-migrations --set issuermigrations.image.tag=testing --set processesworker.image.name=kind-registry:5000/credential-issuer-processes-worker --set processesworker.image.tag=testing --set credentialExpiry.image.name=kind-registry:5000/credential-expiry-app --set credentialExpiry.image.tag=testing --namespace upgrade | |
| # if: github.event_name != 'pull_request' || steps.list-changed.outputs.changed == 'true' |