chore(shield): add webhook/checksum on cluster deployment #5772
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Lint and Test Charts | |
| on: | |
| pull_request: | |
| jobs: | |
| lint-test-branch: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Helm | |
| uses: azure/setup-helm@v4 | |
| with: | |
| version: v3.10.3 | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: "3.10" | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: "^1.18" | |
| check-latest: true | |
| - name: Install pre-commit | |
| run: pip install pre-commit | |
| - name: Check pre-commit | |
| run: | | |
| pre-commit run -a --show-diff-on-failure | |
| git clean -df . | |
| - name: Set up chart-testing | |
| uses: helm/[email protected] | |
| - name: Expand templates for CI | |
| run: | | |
| find -path ".*/ci/*.yaml.template" | xargs -L1 -- bash -c 'envsubst < $0 > ${0%.template}' | |
| shell: bash | |
| env: | |
| SECURE_AGENT_TOKEN: ${{ secrets.KUBELAB_AGENT_KEY }} | |
| SECURE_API_TOKEN: ${{ secrets.KUBELAB_SECURE_API_TOKEN }} | |
| SYSDIG_JFROG_SAAS_QA_URL: ${{ secrets.SYSDIG_JFROG_SAAS_QA_URL }} | |
| SYSDIG_JFROG_SAAS_QA_API_URL: ${{ secrets.SYSDIG_JFROG_SAAS_QA_API_URL }} | |
| SYSDIG_JFROG_SAAS_QA_USER: ${{ secrets.SYSDIG_JFROG_SAAS_QA_USER }} | |
| SYSDIG_JFROG_SAAS_QA_TOKEN: ${{ secrets.SYSDIG_JFROG_SAAS_QA_TOKEN }} | |
| SYSDIG_AWS_QA_CNT_ACCOUNT_ACCESS_KEY_ID: ${{secrets.SYSDIG_AWS_QA_CNT_ACCOUNT_ACCESS_KEY_ID}} | |
| SYSDIG_AWS_QA_CNT_ACCOUNT_SECRET_ACCESS_KEY: ${{secrets.SYSDIG_AWS_QA_CNT_ACCOUNT_SECRET_ACCESS_KEY}} | |
| SYSDIG_AWS_QA_REG_MANAGEMENT_ROLE_ARN: ${{secrets.SYSDIG_AWS_QA_REG_MANAGEMENT_ROLE_ARN}} | |
| SYSDIG_AWS_QA_TARGET_ACCOUNT_ID: ${{secrets.SYSDIG_AWS_QA_TARGET_ACCOUNT_ID}} # cnt QA account | |
| SHOW_USAGE: false | |
| - name: Run chart-testing (lint) | |
| run: ct lint --target-branch=main | |
| - name: Run chart-testing (list-changed) | |
| id: list-changed | |
| run: | | |
| changed=$(ct list-changed --target-branch=main) | |
| if [[ -n "$changed" ]]; then | |
| echo "::set-output name=changed::true" | |
| fi | |
| - name: Create testing cluster | |
| uses: jupyterhub/action-k3s-helm@v4 | |
| with: | |
| k3s-version: v1.23.9+k3s1 | |
| - name: Run chart-testing (install) | |
| run: ct install --upgrade --target-branch=main --excluded-charts cluster-shield,common,sysdig-stackdriver-bridge,sysdig-mcm-navmenu |