allow stringData or encodedData on secrets #605
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Pull Request | |
on: | |
pull_request_target: | |
branches: | |
- master | |
paths-ignore: | |
- '.github/workflows/pull_request.yaml' | |
- 'README.md' | |
- 'LICENSE' | |
env: | |
CHART_NAME: "application" | |
jobs: | |
build: | |
name: Build | |
if: "! contains(toJSON(github.event.commits.*.message), '[skip-ci]')" | |
runs-on: stakater-nonprod | |
steps: | |
- name: Check out code | |
uses: actions/checkout@v4 | |
with: | |
fetch-depth: 0 | |
ref: ${{github.event.pull_request.head.sha}} | |
# Set Up Helm | |
- name: Set up Helm | |
uses: azure/setup-helm@v3 | |
with: | |
version: v3.8.2 | |
# Lint | |
- name: Helm Lint | |
run: | | |
helm lint ${CHART_NAME} | |
- name: Install kubectl | |
uses: azure/setup-kubectl@v3 | |
with: | |
version: v1.26.0 | |
- name: Install CLI tools from OpenShift Mirror | |
uses: redhat-actions/openshift-tools-installer@v1 | |
with: | |
oc: "4" | |
# This is used to setup kubeconfig, required by Tilt | |
- name: Login to cluster | |
run: oc login --token=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) --server=https://kubernetes.default.svc --insecure-skip-tls-verify=true | |
# This is required for adding ghcr helm registry | |
- name: Login to Container Registry | |
uses: docker/login-action@v3 | |
with: | |
registry: ghcr.io/stakater | |
username: ${{ github.actor }} | |
password: ${{ secrets.GITHUB_TOKEN }} | |
# Dry run to ensure that manifests are generated successfully | |
- name: Dry Run Chart | |
run: | | |
helm install ${CHART_NAME} ${CHART_NAME} -f ${CHART_NAME}/values-test.yaml -n stakater-chart-pipeline-test --dry-run --debug | |
- name: Comment on PR | |
uses: mshick/add-pr-comment@v2 | |
env: | |
GITHUB_TOKEN: ${{ secrets.STAKATER_GITHUB_TOKEN }} | |
with: | |
message-success: '@${{ github.actor }} validation successful`' | |
message-failure: '@${{ github.actor }} Yikes! You better fix it before anyone else finds out! [Build](https://github.com/${{ github.repository }}/commit/${{ github.event.pull_request.head.sha }}/checks) has Failed!' | |
allow-repeats: false | |
- name: Notify Slack | |
uses: 8398a7/action-slack@v3 | |
if: always() # Pick up events even if the job fails or is canceled. | |
with: | |
status: ${{ job.status }} | |
fields: repo,author,action,eventName,ref,workflow | |
env: | |
SLACK_WEBHOOK_URL: ${{ secrets.STAKATER_DELIVERY_SLACK_WEBHOOK }} | |
unittest: | |
name: Unit Tests | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v4 | |
with: | |
ref: ${{github.event.pull_request.head.sha}} | |
- uses: d3adb5/helm-unittest-action@v2 | |
with: | |
charts: application |