Compare commits
1 Commits
renovate/d
...
2907352f20
| Author | SHA1 | Date | |
|---|---|---|---|
2907352f20
|
86
.gitea/workflows/lint-test-docker-pull.yaml
Normal file
86
.gitea/workflows/lint-test-docker-pull.yaml
Normal file
@@ -0,0 +1,86 @@
|
|||||||
|
name: lint-test-docker
|
||||||
|
|
||||||
|
on:
|
||||||
|
pull_request:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
paths:
|
||||||
|
- 'hosts/**'
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
docker-lint:
|
||||||
|
runs-on: ubuntu-js
|
||||||
|
steps:
|
||||||
|
- name: Checkout
|
||||||
|
uses: actions/checkout@v6
|
||||||
|
with:
|
||||||
|
fetch-depth: 0
|
||||||
|
|
||||||
|
- name: Check Branch Exists
|
||||||
|
id: check-branch-exists
|
||||||
|
uses: GuillaumeFalourd/branch-exists@v1.1
|
||||||
|
with:
|
||||||
|
branch: "${{ github.base_ref }}"
|
||||||
|
|
||||||
|
- name: Branch Does Not Exist
|
||||||
|
if: steps.check-branch-exists.outputs.exists == 'false'
|
||||||
|
run: echo "Branch ${{ github.base_ref }} was not found, likely already merged"
|
||||||
|
|
||||||
|
- name: Set up Node.js
|
||||||
|
if: steps.check-branch-exists.outputs.exists == 'true'
|
||||||
|
uses: actions/setup-node@v6
|
||||||
|
with:
|
||||||
|
node-version: '24'
|
||||||
|
|
||||||
|
- name: Lint Docker Compose
|
||||||
|
if: steps.check-branch-exists.outputs.exists == 'true'
|
||||||
|
run: |
|
||||||
|
set -e # Exit immediately if a command exits with a non-zero status.
|
||||||
|
|
||||||
|
TARGET_BRANCH="origin/${{ github.base_ref }}"
|
||||||
|
echo ">> Target branch for diff is: $TARGET_BRANCH"
|
||||||
|
|
||||||
|
CHANGED_FILES=$(git diff --name-only "$TARGET_BRANCH" -- 'hosts/**')
|
||||||
|
|
||||||
|
echo ">> Found changed files:"
|
||||||
|
echo "$CHANGED_FILES"
|
||||||
|
|
||||||
|
# For each changed file, find its parent chart directory (the one with compose.yaml).
|
||||||
|
# Then, create a unique list of those directories.
|
||||||
|
CHANGED_COMPOSE=$(echo "$CHANGED_FILES" | while read -r file; do
|
||||||
|
dir=$(dirname "$file")
|
||||||
|
while [[ "$dir" != "." && ! -f "$dir/compose.yaml" ]]; do
|
||||||
|
dir=$(dirname "$dir")
|
||||||
|
done
|
||||||
|
if [[ "$dir" != "." ]]; then
|
||||||
|
echo "$dir"
|
||||||
|
fi
|
||||||
|
done | sort -u)
|
||||||
|
|
||||||
|
if [[ -z "$CHANGED_COMPOSE" ]]; then
|
||||||
|
echo ">> Could not determine changed compose files. This will happen if only files outside a compose file were changed."
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo ">> Running dclint on changed compose files:"
|
||||||
|
echo "$CHANGED_COMPOSE"
|
||||||
|
|
||||||
|
echo "$CHANGED_COMPOSE" | while read -r compose; do
|
||||||
|
echo ">> Linting $compose ..."
|
||||||
|
npx dclint $compose
|
||||||
|
done
|
||||||
|
|
||||||
|
- name: ntfy Failed
|
||||||
|
uses: niniyas/ntfy-action@master
|
||||||
|
if: failure()
|
||||||
|
with:
|
||||||
|
url: '${{ secrets.NTFY_URL }}'
|
||||||
|
topic: '${{ secrets.NTFY_TOPIC }}'
|
||||||
|
title: 'Test Failure - Infrastructure'
|
||||||
|
priority: 3
|
||||||
|
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
||||||
|
tags: action,failed
|
||||||
|
details: 'Docker linting on Pull Request for Infrastructure has failed!'
|
||||||
|
icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
|
||||||
|
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/infrastructure/actions?workflow=lint-test-docker-pull.yaml", "clear": true}]'
|
||||||
|
image: true
|
||||||
74
.gitea/workflows/lint-test-docker-push.yaml
Normal file
74
.gitea/workflows/lint-test-docker-push.yaml
Normal file
@@ -0,0 +1,74 @@
|
|||||||
|
name: lint-test-docker
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
paths:
|
||||||
|
- 'hosts/**'
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
docker-lint:
|
||||||
|
runs-on: ubuntu-js
|
||||||
|
steps:
|
||||||
|
- name: Checkout
|
||||||
|
uses: actions/checkout@v6
|
||||||
|
with:
|
||||||
|
fetch-depth: 0
|
||||||
|
|
||||||
|
- name: Set up Node.js
|
||||||
|
uses: actions/setup-node@v6
|
||||||
|
with:
|
||||||
|
node-version: '24'
|
||||||
|
|
||||||
|
- name: Lint Docker Compose
|
||||||
|
run: |
|
||||||
|
set -e # Exit immediately if a command exits with a non-zero status.
|
||||||
|
|
||||||
|
TARGET_BRANCH="origin/main"
|
||||||
|
echo ">> Target branch for diff is: $TARGET_BRANCH"
|
||||||
|
|
||||||
|
CHANGED_FILES=$(git diff --name-only "$TARGET_BRANCH" -- 'hosts/**')
|
||||||
|
|
||||||
|
echo ">> Found changed files:"
|
||||||
|
echo "$CHANGED_FILES"
|
||||||
|
|
||||||
|
# For each changed file, find its parent chart directory (the one with compose.yaml).
|
||||||
|
# Then, create a unique list of those directories.
|
||||||
|
CHANGED_COMPOSE=$(echo "$CHANGED_FILES" | while read -r file; do
|
||||||
|
dir=$(dirname "$file")
|
||||||
|
while [[ "$dir" != "." && ! -f "$dir/compose.yaml" ]]; do
|
||||||
|
dir=$(dirname "$dir")
|
||||||
|
done
|
||||||
|
if [[ "$dir" != "." ]]; then
|
||||||
|
echo "$dir"
|
||||||
|
fi
|
||||||
|
done | sort -u)
|
||||||
|
|
||||||
|
if [[ -z "$CHANGED_COMPOSE" ]]; then
|
||||||
|
echo ">> Could not determine changed compose files. This will happen if only files outside a compose file were changed."
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo ">> Running dclint on changed compose files:"
|
||||||
|
echo "$CHANGED_COMPOSE"
|
||||||
|
|
||||||
|
echo "$CHANGED_COMPOSE" | while read -r compose; do
|
||||||
|
echo ">> Linting $compose ..."
|
||||||
|
npx dclint $compose
|
||||||
|
done
|
||||||
|
|
||||||
|
- name: ntfy Failed
|
||||||
|
uses: niniyas/ntfy-action@master
|
||||||
|
if: failure()
|
||||||
|
with:
|
||||||
|
url: '${{ secrets.NTFY_URL }}'
|
||||||
|
topic: '${{ secrets.NTFY_TOPIC }}'
|
||||||
|
title: 'Test Failure - Infrastructure'
|
||||||
|
priority: 4
|
||||||
|
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
||||||
|
tags: action,failed
|
||||||
|
details: 'Docker linting on Push for Infrastructure has failed!'
|
||||||
|
icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
|
||||||
|
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/infrastructure/actions?workflow=lint-test-docker-push.yaml", "clear": true}]'
|
||||||
|
image: true
|
||||||
@@ -1,125 +0,0 @@
|
|||||||
name: lint-test-docker
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
branches:
|
|
||||||
- main
|
|
||||||
paths:
|
|
||||||
- 'hosts/**'
|
|
||||||
|
|
||||||
push:
|
|
||||||
branches:
|
|
||||||
- main
|
|
||||||
paths:
|
|
||||||
- 'hosts/**'
|
|
||||||
|
|
||||||
env:
|
|
||||||
BASE_BRANCH: "origin/${{ gitea.base_ref }}"
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
lint-docker-compose:
|
|
||||||
runs-on: ubuntu-js
|
|
||||||
steps:
|
|
||||||
- name: Checkout
|
|
||||||
uses: actions/checkout@v6
|
|
||||||
with:
|
|
||||||
fetch-depth: 0
|
|
||||||
|
|
||||||
- name: Check Branch Exists
|
|
||||||
id: check-branch-exists
|
|
||||||
if: github.event_name == 'pull_request'
|
|
||||||
uses: GuillaumeFalourd/branch-exists@v1.1
|
|
||||||
with:
|
|
||||||
branch: "${{ github.base_ref }}"
|
|
||||||
|
|
||||||
- name: Report Branch Exists
|
|
||||||
id: branch-exists
|
|
||||||
if: github.event_name == 'push' || steps.check-branch-exists.outputs.exists == 'true' && github.event_name == 'pull_request'
|
|
||||||
run: |
|
|
||||||
echo ">> Branch ${{ gitea.base_ref }} exists, will continue with linting"
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "exists=true" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
- name: Set up Node.js
|
|
||||||
if: steps.check-branch-exists.outputs.exists == 'true'
|
|
||||||
uses: actions/setup-node@v6
|
|
||||||
with:
|
|
||||||
node-version: '24'
|
|
||||||
|
|
||||||
- name: Check Directories for Changes
|
|
||||||
id: check-dir-changes
|
|
||||||
if: steps.branch-exists.outputs.exists == 'true'
|
|
||||||
run: |
|
|
||||||
CHANGED_COMPOSE=()
|
|
||||||
|
|
||||||
echo ">> Target branch for diff is: ${BASE_BRANCH}"
|
|
||||||
|
|
||||||
if [ "${{ github.event_name }}" == "pull_request" ]; then
|
|
||||||
echo ""
|
|
||||||
echo ">> Checking for changes in a pull request ..."
|
|
||||||
GIT_DIFF=$(git diff --name-only "${BASE_BRANCH}" | xargs -I {} dirname {} | sort -u | grep -E "hosts/[^/]+/[^/]+")
|
|
||||||
else
|
|
||||||
echo ""
|
|
||||||
echo ">> Checking for changes from a push ..."
|
|
||||||
GIT_DIFF=$(git diff --name-only ${{ gitea.event.before }}..HEAD | xargs -I {} dirname {} | sort -u | grep -E "hosts/[^/]+/[^/]+")
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "${GIT_DIFF}" ]; then
|
|
||||||
echo ""
|
|
||||||
echo ">> Changes detected:"
|
|
||||||
echo "$GIT_DIFF"
|
|
||||||
|
|
||||||
for path in $GIT_DIFF; do
|
|
||||||
CHANGED_COMPOSE+=$(echo "$path")
|
|
||||||
done
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ""
|
|
||||||
echo ">> No changes detected"
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "${CHANGED_COMPOSE}" ]; then
|
|
||||||
echo ""
|
|
||||||
echo ">> Compose to Lint:"
|
|
||||||
echo "$(echo "${CHANGED_COMPOSE[@]}" | sort -u)"
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "changes-detected=true" >> $GITEA_OUTPUT
|
|
||||||
echo "compose-dir<<EOF" >> $GITEA_OUTPUT
|
|
||||||
echo "$(echo "${CHANGED_COMPOSE[@]}" | sort -u)" >> $GITEA_OUTPUT
|
|
||||||
echo "EOF" >> $GITEA_OUTPUT
|
|
||||||
else
|
|
||||||
echo "changes-detected=false" >> $GITEA_OUTPUT
|
|
||||||
fi
|
|
||||||
|
|
||||||
- name: Lint Docker Compose
|
|
||||||
if: steps.check-branch-exists.outputs.exists == 'true'
|
|
||||||
env:
|
|
||||||
CHANGED_COMPOSE: ${{ steps.check-dir-changes.outputs.compose-dir }}
|
|
||||||
run: |
|
|
||||||
echo ">> Running dclint on changed compose files:"
|
|
||||||
echo "$CHANGED_COMPOSE"
|
|
||||||
|
|
||||||
echo "$CHANGED_COMPOSE" | while read -r compose; do
|
|
||||||
echo ">> Linting $compose ..."
|
|
||||||
npx dclint $compose
|
|
||||||
done
|
|
||||||
|
|
||||||
- name: ntfy Failed
|
|
||||||
uses: niniyas/ntfy-action@master
|
|
||||||
if: failure()
|
|
||||||
with:
|
|
||||||
url: '${{ secrets.NTFY_URL }}'
|
|
||||||
topic: '${{ secrets.NTFY_TOPIC }}'
|
|
||||||
title: 'Test Failure - Infrastructure'
|
|
||||||
priority: 3
|
|
||||||
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
|
||||||
tags: action,failed
|
|
||||||
details: 'Docker linting on Pull Request for Infrastructure has failed!'
|
|
||||||
icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
|
|
||||||
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/infrastructure/actions?workflow=lint-test-docker-pull.yaml", "clear": true}]'
|
|
||||||
image: true
|
|
||||||
89
.gitea/workflows/lint-test-helm-pull.yaml
Normal file
89
.gitea/workflows/lint-test-helm-pull.yaml
Normal file
@@ -0,0 +1,89 @@
|
|||||||
|
name: lint-test-helm
|
||||||
|
|
||||||
|
on:
|
||||||
|
pull_request:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
paths:
|
||||||
|
- 'clusters/**'
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
helm-lint:
|
||||||
|
runs-on: ubuntu-js
|
||||||
|
steps:
|
||||||
|
- name: Checkout
|
||||||
|
uses: actions/checkout@v6
|
||||||
|
with:
|
||||||
|
fetch-depth: 0
|
||||||
|
|
||||||
|
- name: Check Branch Exists
|
||||||
|
id: check-branch-exists
|
||||||
|
uses: GuillaumeFalourd/branch-exists@v1.1
|
||||||
|
with:
|
||||||
|
branch: ${{ github.base_ref }}
|
||||||
|
|
||||||
|
- name: Branch Does Not Exist
|
||||||
|
if: steps.check-branch-exists.outputs.exists == 'false'
|
||||||
|
run: echo "Branch ${{ github.base_ref }} was not found, likely already merged"
|
||||||
|
|
||||||
|
- name: Set up Helm
|
||||||
|
if: steps.check-branch-exists.outputs.exists == 'true'
|
||||||
|
uses: azure/setup-helm@v4
|
||||||
|
with:
|
||||||
|
token: ${{ secrets.GITEA_TOKEN }}
|
||||||
|
version: latest
|
||||||
|
|
||||||
|
- name: Lint Helm Chart
|
||||||
|
if: steps.check-branch-exists.outputs.exists == 'true'
|
||||||
|
run: |
|
||||||
|
set -e # Exit immediately if a command exits with a non-zero status.
|
||||||
|
|
||||||
|
TARGET_BRANCH="origin/${{ github.base_ref }}"
|
||||||
|
echo ">> Target branch for diff is: $TARGET_BRANCH"
|
||||||
|
|
||||||
|
CHANGED_FILES=$(git diff --name-only "$TARGET_BRANCH" -- 'clusters/**')
|
||||||
|
|
||||||
|
echo ">> Found changed files:"
|
||||||
|
echo "$CHANGED_FILES"
|
||||||
|
|
||||||
|
# For each changed file, find its parent chart directory (the one with Chart.yaml).
|
||||||
|
# Then, create a unique list of those directories.
|
||||||
|
CHANGED_CHARTS=$(echo "$CHANGED_FILES" | while read -r file; do
|
||||||
|
dir=$(dirname "$file")
|
||||||
|
while [[ "$dir" != "." && ! -f "$dir/Chart.yaml" ]]; do
|
||||||
|
dir=$(dirname "$dir")
|
||||||
|
done
|
||||||
|
if [[ "$dir" != "." ]]; then
|
||||||
|
echo "$dir"
|
||||||
|
fi
|
||||||
|
done | sort -u)
|
||||||
|
|
||||||
|
if [[ -z "$CHANGED_CHARTS" ]]; then
|
||||||
|
echo ">> Could not determine changed charts. This could happen if only files outside a chart were changed."
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo ">> Running helm lint on changed charts:"
|
||||||
|
echo "$CHANGED_CHARTS"
|
||||||
|
|
||||||
|
echo "$CHANGED_CHARTS" | while read -r chart; do
|
||||||
|
echo ">> Building dependency for "$chart" ..."
|
||||||
|
helm dependency build "$chart"
|
||||||
|
echo ">> Linting $chart..."
|
||||||
|
helm lint "$chart"
|
||||||
|
done
|
||||||
|
|
||||||
|
- name: ntfy Failed
|
||||||
|
uses: niniyas/ntfy-action@master
|
||||||
|
if: failure()
|
||||||
|
with:
|
||||||
|
url: '${{ secrets.NTFY_URL }}'
|
||||||
|
topic: '${{ secrets.NTFY_TOPIC }}'
|
||||||
|
title: 'Test Failure - Infrastructure'
|
||||||
|
priority: 3
|
||||||
|
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
||||||
|
tags: action,failed
|
||||||
|
details: 'Helm linting on Pull Request for Infrastructure has failed!'
|
||||||
|
icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
|
||||||
|
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/infrastructure/actions?workflow=lint-test-helm-pull.yaml", "clear": true}]'
|
||||||
|
image: true
|
||||||
77
.gitea/workflows/lint-test-helm-push.yaml
Normal file
77
.gitea/workflows/lint-test-helm-push.yaml
Normal file
@@ -0,0 +1,77 @@
|
|||||||
|
name: lint-test-helm
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
paths:
|
||||||
|
- 'clusters/**'
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
helm-lint:
|
||||||
|
runs-on: ubuntu-js
|
||||||
|
steps:
|
||||||
|
- name: Checkout
|
||||||
|
uses: actions/checkout@v6
|
||||||
|
with:
|
||||||
|
fetch-depth: 0
|
||||||
|
|
||||||
|
- name: Set up Helm
|
||||||
|
uses: azure/setup-helm@v4
|
||||||
|
with:
|
||||||
|
token: ${{ secrets.GITEA_TOKEN }}
|
||||||
|
version: latest
|
||||||
|
|
||||||
|
- name: Lint Helm Chart
|
||||||
|
run: |
|
||||||
|
set -e # Exit immediately if a command exits with a non-zero status.
|
||||||
|
|
||||||
|
TARGET_BRANCH="origin/main"
|
||||||
|
echo ">> Target branch for diff is: $TARGET_BRANCH"
|
||||||
|
|
||||||
|
CHANGED_FILES=$(git diff --name-only "$TARGET_BRANCH" -- 'clusters/**')
|
||||||
|
|
||||||
|
echo ">> Found changed files:"
|
||||||
|
echo "$CHANGED_FILES"
|
||||||
|
|
||||||
|
# For each changed file, find its parent chart directory (the one with Chart.yaml).
|
||||||
|
# Then, create a unique list of those directories.
|
||||||
|
CHANGED_CHARTS=$(echo "$CHANGED_FILES" | while read -r file; do
|
||||||
|
dir=$(dirname "$file")
|
||||||
|
while [[ "$dir" != "." && ! -f "$dir/Chart.yaml" ]]; do
|
||||||
|
dir=$(dirname "$dir")
|
||||||
|
done
|
||||||
|
if [[ "$dir" != "." ]]; then
|
||||||
|
echo "$dir"
|
||||||
|
fi
|
||||||
|
done | sort -u)
|
||||||
|
|
||||||
|
if [[ -z "$CHANGED_CHARTS" ]]; then
|
||||||
|
echo ">> Could not determine changed charts. This could happen if only files outside a chart were changed."
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo ">> Running helm lint on changed charts:"
|
||||||
|
echo "$CHANGED_CHARTS"
|
||||||
|
|
||||||
|
echo "$CHANGED_CHARTS" | while read -r chart; do
|
||||||
|
echo ">> Building dependency for "$chart" ..."
|
||||||
|
helm dependency build "$chart"
|
||||||
|
echo ">> Linting $chart..."
|
||||||
|
helm lint "$chart"
|
||||||
|
done
|
||||||
|
|
||||||
|
- name: ntfy Failed
|
||||||
|
uses: niniyas/ntfy-action@master
|
||||||
|
if: failure()
|
||||||
|
with:
|
||||||
|
url: '${{ secrets.NTFY_URL }}'
|
||||||
|
topic: '${{ secrets.NTFY_TOPIC }}'
|
||||||
|
title: 'Test Failure - Infrastructure'
|
||||||
|
priority: 4
|
||||||
|
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
||||||
|
tags: action,failed
|
||||||
|
details: 'Helm linting on Push for Infrastructure has failed!'
|
||||||
|
icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
|
||||||
|
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/infrastructure/actions?workflow=lint-test-helm-push.yaml", "clear": true}]'
|
||||||
|
image: true
|
||||||
@@ -1,164 +0,0 @@
|
|||||||
name: lint-test-helm
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
branches:
|
|
||||||
- main
|
|
||||||
paths:
|
|
||||||
- 'clusters/*/helm/**'
|
|
||||||
|
|
||||||
push:
|
|
||||||
branches:
|
|
||||||
- main
|
|
||||||
paths:
|
|
||||||
- 'clusters/*/helm/**'
|
|
||||||
|
|
||||||
env:
|
|
||||||
CLUSTER: cl01tl
|
|
||||||
BASE_BRANCH: "origin/${{ gitea.base_ref }}"
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
lint-helm:
|
|
||||||
runs-on: ubuntu-js
|
|
||||||
steps:
|
|
||||||
- name: Checkout
|
|
||||||
uses: actions/checkout@v6
|
|
||||||
with:
|
|
||||||
fetch-depth: 0
|
|
||||||
|
|
||||||
- name: Check Branch Exists
|
|
||||||
id: check-branch-exists
|
|
||||||
if: github.event_name == 'pull_request'
|
|
||||||
uses: GuillaumeFalourd/branch-exists@v1.1
|
|
||||||
with:
|
|
||||||
branch: ${{ gitea.base_ref }}
|
|
||||||
|
|
||||||
- name: Report Branch Exists
|
|
||||||
id: branch-exists
|
|
||||||
if: github.event_name == 'push' || steps.check-branch-exists.outputs.exists == 'true' && github.event_name == 'pull_request'
|
|
||||||
run: |
|
|
||||||
echo ">> Branch ${{ gitea.base_ref }} exists, will continue with linting"
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "exists=true" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
- name: Set up Helm
|
|
||||||
if: steps.branch-exists.outputs.exists == 'true'
|
|
||||||
uses: azure/setup-helm@v4
|
|
||||||
with:
|
|
||||||
token: ${{ secrets.GITEA_TOKEN }}
|
|
||||||
version: v3
|
|
||||||
|
|
||||||
- name: Check Directories for Changes
|
|
||||||
id: check-dir-changes
|
|
||||||
if: steps.branch-exists.outputs.exists == 'true'
|
|
||||||
run: |
|
|
||||||
CHANGED_CHARTS=()
|
|
||||||
|
|
||||||
echo ">> Target branch for diff is: ${BASE_BRANCH}"
|
|
||||||
|
|
||||||
if [ "${{ github.event_name }}" == "pull_request" ]; then
|
|
||||||
echo ""
|
|
||||||
echo ">> Checking for changes in a pull request ..."
|
|
||||||
GIT_DIFF=$(git diff --name-only "${BASE_BRANCH}" | xargs -I {} dirname {} | sort -u | grep -E "clusters/[^/]+/helm/[^/]+")
|
|
||||||
else
|
|
||||||
echo ""
|
|
||||||
echo ">> Checking for changes from a push ..."
|
|
||||||
GIT_DIFF=$(git diff --name-only ${{ gitea.event.before }}..HEAD | xargs -I {} dirname {} | sort -u | grep -E "clusters/[^/]+/helm/[^/]+")
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "${GIT_DIFF}" ]; then
|
|
||||||
echo ""
|
|
||||||
echo ">> Changes detected:"
|
|
||||||
echo "$GIT_DIFF"
|
|
||||||
|
|
||||||
for path in $GIT_DIFF; do
|
|
||||||
CHANGED_CHARTS+=$(echo "$path" | awk -F '/' '{print $4}')
|
|
||||||
done
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ""
|
|
||||||
echo ">> No changes detected"
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "${CHANGED_CHARTS}" ]; then
|
|
||||||
echo ""
|
|
||||||
echo ">> Chart to Lint:"
|
|
||||||
echo "$(echo "${CHANGED_CHARTS[@]}" | sort -u)"
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "changes-detected=true" >> $GITEA_OUTPUT
|
|
||||||
echo "chart-dir<<EOF" >> $GITEA_OUTPUT
|
|
||||||
echo "$(echo "${CHANGED_CHARTS[@]}" | sort -u)" >> $GITEA_OUTPUT
|
|
||||||
echo "EOF" >> $GITEA_OUTPUT
|
|
||||||
else
|
|
||||||
echo "changes-detected=false" >> $GITEA_OUTPUT
|
|
||||||
fi
|
|
||||||
|
|
||||||
- name: Add Repositories
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
CHANGED_CHARTS: ${{ steps.check-dir-changes.outputs.chart-dir }}
|
|
||||||
run: |
|
|
||||||
echo ">> Adding repositories for chart dependencies ..."
|
|
||||||
for dir in ${CHANGED_CHARTS}; do
|
|
||||||
helm dependency list --max-col-width 120 clusters/${CLUSTER}/helm/$dir 2> /dev/null \
|
|
||||||
| tail +2 | head -n -1 \
|
|
||||||
| awk '{ print "helm repo add " $1 " " $3 }' \
|
|
||||||
| while read cmd; do echo "$cmd" | sh; done || true
|
|
||||||
done
|
|
||||||
|
|
||||||
if helm repo list | tail +2 | read -r; then
|
|
||||||
echo ""
|
|
||||||
echo ">> Update repository cache ..."
|
|
||||||
helm repo update
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Lint Helm Chart
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
CHANGED_CHARTS: ${{ steps.check-dir-changes.outputs.chart-dir }}
|
|
||||||
run: |
|
|
||||||
echo ">> Running linting on changed charts ..."
|
|
||||||
|
|
||||||
for dir in ${CHANGED_CHARTS}; do
|
|
||||||
chart_path=clusters/${CLUSTER}/helm/$dir
|
|
||||||
chart_name=$(basename "$chart_path")
|
|
||||||
|
|
||||||
if [ -f "$chart_path/Chart.yaml" ]; then
|
|
||||||
cd $chart_path
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Building helm dependency ..."
|
|
||||||
helm dependency build --skip-refresh
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Linting helm ..."
|
|
||||||
helm lint --namespace "$chart_name"
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ""
|
|
||||||
echo ">> Directory $chart_path does not contain a Chart.yaml. Skipping ..."
|
|
||||||
echo ""
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
- name: ntfy Failed
|
|
||||||
uses: niniyas/ntfy-action@master
|
|
||||||
if: failure()
|
|
||||||
with:
|
|
||||||
url: '${{ secrets.NTFY_URL }}'
|
|
||||||
topic: '${{ secrets.NTFY_TOPIC }}'
|
|
||||||
title: 'Test Failure - Infrastructure'
|
|
||||||
priority: 3
|
|
||||||
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
|
||||||
tags: action,failed
|
|
||||||
details: 'Helm linting on Pull Request for Infrastructure has failed!'
|
|
||||||
icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
|
|
||||||
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/infrastructure/actions?workflow=lint-test-helm-pull.yaml", "clear": true}]'
|
|
||||||
image: true
|
|
||||||
@@ -1,410 +0,0 @@
|
|||||||
name: render-manifests-automerge
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
branches:
|
|
||||||
- main
|
|
||||||
paths:
|
|
||||||
- 'clusters/cl01tl/helm/**'
|
|
||||||
types:
|
|
||||||
- closed
|
|
||||||
|
|
||||||
env:
|
|
||||||
CLUSTER: cl01tl
|
|
||||||
BASE_BRANCH: manifests
|
|
||||||
BRANCH_NAME_BASE: auto/update-manifests-automerge
|
|
||||||
MAIN_DIR: /workspace/alexlebens/infrastructure/infrastructure
|
|
||||||
MANIFEST_DIR: /workspace/alexlebens/infrastructure/infrastructure-manifests
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
render-manifests-automerge:
|
|
||||||
runs-on: ubuntu-js
|
|
||||||
if: ${{ (github.event.pull_request.merged == true) && (contains(github.event.pull_request.labels.*.name, 'automerge')) }}
|
|
||||||
steps:
|
|
||||||
- name: Checkout Main
|
|
||||||
uses: actions/checkout@v6
|
|
||||||
with:
|
|
||||||
path: infrastructure
|
|
||||||
fetch-depth: 0
|
|
||||||
|
|
||||||
- name: Checkout Manifests
|
|
||||||
uses: actions/checkout@v6
|
|
||||||
with:
|
|
||||||
ref: manifests
|
|
||||||
path: infrastructure-manifests
|
|
||||||
|
|
||||||
- name: Set up Helm
|
|
||||||
uses: azure/setup-helm@v4
|
|
||||||
with:
|
|
||||||
token: ${{ secrets.GITEA_TOKEN }}
|
|
||||||
version: v3.17.2 # Pending https://github.com/helm/helm/pull/30743
|
|
||||||
|
|
||||||
- name: Prepare Manifest Branch
|
|
||||||
id: prepare-manifest-branch
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
BRANCH_NAME="${BRANCH_NAME_BASE}-$(date +%Y%m%d%H%M%S)"
|
|
||||||
|
|
||||||
echo ">> Configure git to use gitea-bot as user ..."
|
|
||||||
git config user.name "gitea-bot"
|
|
||||||
git config user.email "gitea-bot@alexlebens.net"
|
|
||||||
|
|
||||||
echo ">> Creating branch ..."
|
|
||||||
git checkout -b $BRANCH_NAME
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "BRANCH_NAME=${BRANCH_NAME}" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
- name: Check which Directories have Changes
|
|
||||||
id: check-dir-changes
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
RENDER_DIR=()
|
|
||||||
|
|
||||||
echo ">> Checking for changes from HEAD^..HEAD ..."
|
|
||||||
GIT_DIFF=$(git diff --name-only HEAD^..HEAD | xargs -I {} dirname {} | sort -u | grep -E "clusters/[^/]+/helm/[^/]+")
|
|
||||||
|
|
||||||
if [ -n "${GIT_DIFF}" ]; then
|
|
||||||
echo ">> Changes detected:"
|
|
||||||
echo "$GIT_DIFF"
|
|
||||||
for path in $GIT_DIFF; do
|
|
||||||
RENDER_DIR+=$(echo "$path" | awk -F '/' '{print $4}')
|
|
||||||
done
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> No changes detected"
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "${RENDER_DIR}" ]; then
|
|
||||||
echo ">> Directories to Render:"
|
|
||||||
echo "$(echo "${RENDER_DIR[@]}" | sort -u)"
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "changes-detected=true" >> $GITEA_OUTPUT
|
|
||||||
echo "render-dir<<EOF" >> $GITEA_OUTPUT
|
|
||||||
echo "$(echo "${RENDER_DIR[@]}" | sort -u)" >> $GITEA_OUTPUT
|
|
||||||
echo "EOF" >> $GITEA_OUTPUT
|
|
||||||
else
|
|
||||||
echo "changes-detected=false" >> $GITEA_OUTPUT
|
|
||||||
fi
|
|
||||||
|
|
||||||
- name: Add Repositories
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
echo ">> Adding repositories for chart dependencies ..."
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
helm dependency list --max-col-width 120 ${MAIN_DIR}/clusters/${CLUSTER}/helm/$dir 2> /dev/null \
|
|
||||||
| tail +2 | head -n -1 \
|
|
||||||
| awk '{ print "helm repo add " $1 " " $3 }' \
|
|
||||||
| while read cmd; do echo "$cmd" | sh; done || true
|
|
||||||
done
|
|
||||||
|
|
||||||
if helm repo list | tail +2 | read -r; then
|
|
||||||
echo ">> Update repository cache ..."
|
|
||||||
helm repo update
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Remove Changed Manifest Files
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Remove manfiest files and rebuild from source ..."
|
|
||||||
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
chart_path=${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$dir
|
|
||||||
|
|
||||||
echo "$chart_path"
|
|
||||||
rm -rf $chart_path/*
|
|
||||||
done
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Render Helm Manifests
|
|
||||||
id: render-manifests
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
echo ">> Rendering Manifests ..."
|
|
||||||
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
chart_path=${MAIN_DIR}/clusters/${CLUSTER}/helm/$dir
|
|
||||||
chart_name=$(basename "$chart_path")
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ""
|
|
||||||
echo ">> Rendering chart: $chart_name"
|
|
||||||
echo ">> Chart path $chart_path"
|
|
||||||
|
|
||||||
if [ -f "$chart_path/Chart.yaml" ]; then
|
|
||||||
OUTPUT_FOLDER="${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$chart_name/"
|
|
||||||
TEMPLATE=""
|
|
||||||
|
|
||||||
mkdir -p ${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$chart_name
|
|
||||||
|
|
||||||
cd $chart_path
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Building helm dependency ..."
|
|
||||||
helm dependency build --skip-refresh
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Linting helm ..."
|
|
||||||
helm lint --namespace "$chart_name"
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Rendering templates ..."
|
|
||||||
case "$chart_name" in
|
|
||||||
"stack")
|
|
||||||
echo ""
|
|
||||||
echo ">> Special Rendering for stack into argocd namespace ..."
|
|
||||||
TEMPLATE=$(helm template $chart_name ./ --namespace argocd --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
"cilium" | "coredns" | "metrics-server" |"prometheus-operator-crds")
|
|
||||||
echo ""
|
|
||||||
echo ">> Special Rendering for $chart_name into kube-system namespace ..."
|
|
||||||
TEMPLATE=$(helm template $chart_name ./ --namespace kube-system --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
echo ""
|
|
||||||
echo ">> Standard Rendering for $chart_name ..."
|
|
||||||
TEMPLATE=$(helm template "$chart_name" ./ --namespace "$chart_name" --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Formating rendered template ..."
|
|
||||||
echo "$TEMPLATE" | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Manifests for $chart_name rendered to $OUTPUT_FOLDER"
|
|
||||||
ls $OUTPUT_FOLDER
|
|
||||||
echo ""
|
|
||||||
else
|
|
||||||
echo ""
|
|
||||||
echo ">> Directory $chart_path does not contain a Chart.yaml. Skipping ..."
|
|
||||||
echo ""
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Check for Changes
|
|
||||||
id: check-changes
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
if git status --porcelain | grep -q .; then
|
|
||||||
echo ">> Changes detected"
|
|
||||||
git status --porcelain
|
|
||||||
echo "changes-detected=true" >> $GITEA_OUTPUT
|
|
||||||
else
|
|
||||||
echo ">> No changes detected, skipping PR creation"
|
|
||||||
exit 0
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Commit and Push Changes
|
|
||||||
id: commit-push
|
|
||||||
if: steps.check-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
BRANCH_NAME: ${{ steps.prepare-manifest-branch.outputs.BRANCH_NAME }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Commiting changes to ${BRANCH_NAME} ..."
|
|
||||||
git add .
|
|
||||||
git commit -m "chore: Update manifests after automerge"
|
|
||||||
|
|
||||||
REPO_URL="${{ secrets.REPO_URL }}/${{ gitea.repository }}"
|
|
||||||
echo ">> Pushing changes to $REPO_URL ..."
|
|
||||||
git push -u "https://oauth2:${{ secrets.BOT_TOKEN }}@$(echo $REPO_URL | sed -e 's|https://||')" ${BRANCH_NAME}
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "push=true" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
- name: Create Pull Request
|
|
||||||
id: create-pull-request
|
|
||||||
if: steps.commit-push.outputs.push == 'true'
|
|
||||||
env:
|
|
||||||
GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
|
|
||||||
GITEA_URL: ${{ secrets.REPO_URL }}
|
|
||||||
BRANCH_NAME: ${{ steps.prepare-manifest-branch.outputs.BRANCH_NAME }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls"
|
|
||||||
|
|
||||||
PAYLOAD=$( jq -n \
|
|
||||||
--arg head "${BRANCH_NAME}" \
|
|
||||||
--arg base "${BASE_BRANCH}" \
|
|
||||||
--arg title "Automated Manifest Update - Automerge" \
|
|
||||||
--arg body "This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. This is expected to be automerged." \
|
|
||||||
'{head: $head, base: $base, title: $title, body: $body}' )
|
|
||||||
|
|
||||||
echo ">> Creating PR from branch ${BRANCH_NAME} into ${BASE_BRANCH}"
|
|
||||||
echo ">> With Endpoint of:"
|
|
||||||
echo "$API_ENDPOINT"
|
|
||||||
echo ">> With Payload of:"
|
|
||||||
echo "$PAYLOAD"
|
|
||||||
|
|
||||||
HTTP_STATUS=$(
|
|
||||||
curl -X POST \
|
|
||||||
--silent \
|
|
||||||
--write-out '%{http_code}' \
|
|
||||||
--output response_body.json \
|
|
||||||
--dump-header response_headers.txt \
|
|
||||||
--data "$PAYLOAD" \
|
|
||||||
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
||||||
-H "Content-Type: application/json" \
|
|
||||||
"$API_ENDPOINT" 2> response_errors.txt
|
|
||||||
)
|
|
||||||
|
|
||||||
echo ">> HTTP Status Code: $HTTP_STATUS"
|
|
||||||
echo ">> Response Output ..."
|
|
||||||
echo "----"
|
|
||||||
cat response_body.json
|
|
||||||
echo "----"
|
|
||||||
cat response_headers.txt
|
|
||||||
echo "----"
|
|
||||||
cat response_errors.txt
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
if [ "$HTTP_STATUS" == "201" ]; then
|
|
||||||
echo ">> Pull Request created successfully!"
|
|
||||||
PR_URL=$(cat response_body.json | jq -r .html_url)
|
|
||||||
echo "pull-request-url=${PR_URL}" >> $GITEA_OUTPUT
|
|
||||||
PR_ID=$(cat response_body.json | jq -r .id)
|
|
||||||
echo "pull-request-id=${PR_ID}" >> $GITEA_OUTPUT
|
|
||||||
echo "pull-request-operation=created" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
elif [ "$HTTP_STATUS" == "422" ]; then
|
|
||||||
echo ">> Failed to create PR (HTTP 422: Unprocessable Entity), PR may already exist"
|
|
||||||
|
|
||||||
elif [ "$HTTP_STATUS" == "409" ]; then
|
|
||||||
echo ">> Failed to create PR (HTTP 409: Conflict), PR already exists"
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> Failed to create PR, HTTP status code: $HTTP_STATUS"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Merge Changes
|
|
||||||
id: merge-changes
|
|
||||||
if: steps.commit-push.outputs.push == 'true'
|
|
||||||
env:
|
|
||||||
GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
|
|
||||||
GITEA_URL: ${{ secrets.REPO_URL }}
|
|
||||||
BRANCH_NAME: ${{ steps.prepare-manifest-branch.outputs.BRANCH_NAME }}
|
|
||||||
PR_ID: ${{ steps.create-pull-request.outputs.pull-request-id }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls/${PR_ID}/merge"
|
|
||||||
|
|
||||||
PAYLOAD=$( jq -n \
|
|
||||||
--arg Do "merge" \
|
|
||||||
--arg delete_branch_after_merge "true" \
|
|
||||||
'{Do: $Do, delete_branch_after_merge: $delete_branch_after_merge}' )
|
|
||||||
|
|
||||||
echo ">> Merging PR with ID: ${PR_ID}"
|
|
||||||
echo ">> With Endpoint of:"
|
|
||||||
echo "$API_ENDPOINT"
|
|
||||||
echo ">> With Payload of:"
|
|
||||||
echo "$PAYLOAD"
|
|
||||||
|
|
||||||
HTTP_STATUS=$(
|
|
||||||
curl -X POST \
|
|
||||||
--silent \
|
|
||||||
--write-out '%{http_code}' \
|
|
||||||
--output response_body.json \
|
|
||||||
--dump-header response_headers.txt \
|
|
||||||
--data "$PAYLOAD" \
|
|
||||||
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
||||||
-H "Content-Type: application/json" \
|
|
||||||
"$API_ENDPOINT" 2> response_errors.txt
|
|
||||||
)
|
|
||||||
|
|
||||||
echo ">> HTTP Status Code: $HTTP_STATUS"
|
|
||||||
echo ">> Response Output ..."
|
|
||||||
echo "----"
|
|
||||||
cat response_body.json
|
|
||||||
echo "----"
|
|
||||||
cat response_headers.txt
|
|
||||||
echo "----"
|
|
||||||
cat response_errors.txt
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
if [ "$HTTP_STATUS" == "200" ]; then
|
|
||||||
echo ">> Pull Request merged successfully!"
|
|
||||||
echo "pull-request-operation=merged" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> Failed to create PR, HTTP status code: $HTTP_STATUS"
|
|
||||||
echo "pull-request-operation=failed" >> $GITEA_OUTPUT
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Cleanup Branch
|
|
||||||
if: failure()
|
|
||||||
env:
|
|
||||||
BRANCH_NAME: ${{ steps.prepare-manifest-branch.outputs.BRANCH_NAME }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Removing branch: ${BRANCH_NAME}"
|
|
||||||
git push origin --delete ${BRANCH_NAME}
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: ntfy Merged
|
|
||||||
uses: niniyas/ntfy-action@master
|
|
||||||
if: steps.merge-changes.outputs.pull-request-operation == 'merged'
|
|
||||||
with:
|
|
||||||
url: "${{ secrets.NTFY_URL }}"
|
|
||||||
topic: "${{ secrets.NTFY_TOPIC }}"
|
|
||||||
title: "Manifest Render PR Merged - Infrastructure"
|
|
||||||
priority: 3
|
|
||||||
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
|
||||||
tags: action,successfully,completed
|
|
||||||
details: "Automerge Manifest rendering for Infrastructure!"
|
|
||||||
icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
|
|
||||||
actions: '[{"action": "view", "label": "Open Gitea", "url": "${{ steps.create-pull-request.outputs.pull-request-url }}", "clear": true}]'
|
|
||||||
|
|
||||||
- name: ntfy Failed
|
|
||||||
uses: niniyas/ntfy-action@master
|
|
||||||
if: failure()
|
|
||||||
with:
|
|
||||||
url: "${{ secrets.NTFY_URL }}"
|
|
||||||
topic: "${{ secrets.NTFY_TOPIC }}"
|
|
||||||
title: "Manifest Render Failure - Infrastructure"
|
|
||||||
priority: 4
|
|
||||||
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
|
||||||
tags: action,failed
|
|
||||||
details: "Automerge Manifest rendering for Infrastructure has failed!"
|
|
||||||
icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
|
|
||||||
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/infrastructure/actions?workflow=render-manifests-automerge.yaml", "clear": true}]'
|
|
||||||
image: true
|
|
||||||
@@ -1,383 +0,0 @@
|
|||||||
name: render-manifests-dispatch
|
|
||||||
|
|
||||||
on:
|
|
||||||
workflow_dispatch:
|
|
||||||
|
|
||||||
env:
|
|
||||||
CLUSTER: cl01tl
|
|
||||||
BASE_BRANCH: manifests
|
|
||||||
BRANCH_NAME: auto/update-manifests
|
|
||||||
ASSIGNEE: alexlebens
|
|
||||||
MAIN_DIR: /workspace/alexlebens/infrastructure/infrastructure
|
|
||||||
MANIFEST_DIR: /workspace/alexlebens/infrastructure/infrastructure-manifests
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
render-manifests-dispatch:
|
|
||||||
runs-on: ubuntu-js
|
|
||||||
steps:
|
|
||||||
- name: Checkout Main
|
|
||||||
uses: actions/checkout@v6
|
|
||||||
with:
|
|
||||||
path: infrastructure
|
|
||||||
fetch-depth: 0
|
|
||||||
|
|
||||||
- name: Checkout Manifests
|
|
||||||
uses: actions/checkout@v6
|
|
||||||
with:
|
|
||||||
ref: manifests
|
|
||||||
path: infrastructure-manifests
|
|
||||||
|
|
||||||
- name: Set up Helm
|
|
||||||
uses: azure/setup-helm@v4
|
|
||||||
with:
|
|
||||||
token: ${{ secrets.GITEA_TOKEN }}
|
|
||||||
version: v3.17.2 # Pending https://github.com/helm/helm/pull/30743
|
|
||||||
|
|
||||||
- name: Prepare Manifest Branch
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Configure git to use gitea-bot as user ..."
|
|
||||||
git config user.name "gitea-bot"
|
|
||||||
git config user.email "gitea-bot@alexlebens.net"
|
|
||||||
|
|
||||||
echo ">> Checking if PR branch exists ..."
|
|
||||||
if [[ $(git ls-remote --heads origin "${BRANCH_NAME}" | wc -l) -gt 0 ]]; then
|
|
||||||
echo ">> Branch '${BRANCH_NAME}' exists, pulling changes ..."
|
|
||||||
git fetch origin "${BRANCH_NAME}"
|
|
||||||
git checkout "${BRANCH_NAME}"
|
|
||||||
git pull --rebase
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> Branch '${BRANCH_NAME}' does not exist, creating ..."
|
|
||||||
git checkout -b $BRANCH_NAME
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Check which Directories have Changes
|
|
||||||
id: check-dir-changes
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
RENDER_DIR=()
|
|
||||||
|
|
||||||
echo ">> Triggered on dispatch, will check all paths ..."
|
|
||||||
RENDER_DIR+=$(ls clusters/cl01tl/helm/)
|
|
||||||
|
|
||||||
if [ -n "${RENDER_DIR}" ]; then
|
|
||||||
echo ">> Directories to Render:"
|
|
||||||
echo "$(echo "${RENDER_DIR[@]}" | sort -u)"
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "changes-detected=true" >> $GITEA_OUTPUT
|
|
||||||
echo "render-dir<<EOF" >> $GITEA_OUTPUT
|
|
||||||
echo "$(echo "${RENDER_DIR[@]}" | sort -u)" >> $GITEA_OUTPUT
|
|
||||||
echo "EOF" >> $GITEA_OUTPUT
|
|
||||||
else
|
|
||||||
echo "changes-detected=false" >> $GITEA_OUTPUT
|
|
||||||
fi
|
|
||||||
|
|
||||||
- name: Add Repositories
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
echo ">> Adding repositories for chart dependencies ..."
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
helm dependency list --max-col-width 120 ${MAIN_DIR}/clusters/${CLUSTER}/helm/$dir 2> /dev/null \
|
|
||||||
| tail +2 | head -n -1 \
|
|
||||||
| awk '{ print "helm repo add " $1 " " $3 }' \
|
|
||||||
| while read cmd; do echo "$cmd" | sh; done || true
|
|
||||||
done
|
|
||||||
|
|
||||||
if helm repo list | tail +2 | read -r; then
|
|
||||||
echo ">> Update repository cache ..."
|
|
||||||
helm repo update
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Remove Changed Manifest Files
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Remove manfiest files and rebuild from source ..."
|
|
||||||
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
chart_path=${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$dir
|
|
||||||
|
|
||||||
echo "$chart_path"
|
|
||||||
rm -rf $chart_path/*
|
|
||||||
done
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Render Helm Manifests
|
|
||||||
id: render-manifests
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
echo ">> Rendering Manifests ..."
|
|
||||||
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
chart_path=${MAIN_DIR}/clusters/${CLUSTER}/helm/$dir
|
|
||||||
chart_name=$(basename "$chart_path")
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ""
|
|
||||||
echo ">> Rendering chart: $chart_name"
|
|
||||||
echo ">> Chart path $chart_path"
|
|
||||||
|
|
||||||
if [ -f "$chart_path/Chart.yaml" ]; then
|
|
||||||
OUTPUT_FOLDER="${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$chart_name/"
|
|
||||||
TEMPLATE=""
|
|
||||||
|
|
||||||
mkdir -p ${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$chart_name
|
|
||||||
|
|
||||||
cd $chart_path
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Building helm dependency ..."
|
|
||||||
helm dependency build --skip-refresh
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Linting helm ..."
|
|
||||||
helm lint --namespace "$chart_name"
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Rendering templates ..."
|
|
||||||
case "$chart_name" in
|
|
||||||
"stack")
|
|
||||||
echo ""
|
|
||||||
echo ">> Special Rendering for stack into argocd namespace ..."
|
|
||||||
TEMPLATE=$(helm template $chart_name ./ --namespace argocd --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
"cilium" | "coredns" | "metrics-server" |"prometheus-operator-crds")
|
|
||||||
echo ""
|
|
||||||
echo ">> Special Rendering for $chart_name into kube-system namespace ..."
|
|
||||||
TEMPLATE=$(helm template $chart_name ./ --namespace kube-system --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
echo ""
|
|
||||||
echo ">> Standard Rendering for $chart_name ..."
|
|
||||||
TEMPLATE=$(helm template "$chart_name" ./ --namespace "$chart_name" --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Formating rendered template ..."
|
|
||||||
echo "$TEMPLATE" | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Manifests for $chart_name rendered to $OUTPUT_FOLDER"
|
|
||||||
ls $OUTPUT_FOLDER
|
|
||||||
echo ""
|
|
||||||
else
|
|
||||||
echo ""
|
|
||||||
echo ">> Directory $chart_path does not contain a Chart.yaml. Skipping ..."
|
|
||||||
echo ""
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Check for Changes
|
|
||||||
id: check-changes
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
git status --porcelain
|
|
||||||
|
|
||||||
if git status --porcelain | grep -q . ; then
|
|
||||||
echo ">> Changes detected"
|
|
||||||
# git status --porcelain
|
|
||||||
echo "changes-detected=true" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> No changes detected, skipping PR creation"
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Commit and Push Changes
|
|
||||||
id: commit-push
|
|
||||||
if: steps.check-changes.outputs.changes-detected == 'true'
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Commiting changes to ${BRANCH_NAME} ..."
|
|
||||||
git add .
|
|
||||||
git commit -m "chore: Update manifests after change"
|
|
||||||
|
|
||||||
REPO_URL="${{ secrets.REPO_URL }}/${{ gitea.repository }}"
|
|
||||||
echo ">> Pushing changes to $REPO_URL ..."
|
|
||||||
git push -u "https://oauth2:${{ secrets.BOT_TOKEN }}@$(echo $REPO_URL | sed -e 's|https://||')" ${BRANCH_NAME}
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "HEAD_BRANCH=${BRANCH_NAME}" >> $GITEA_OUTPUT
|
|
||||||
echo "push=true" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
- name: Check for Pull Request
|
|
||||||
id: check-for-pull-requst
|
|
||||||
if: steps.commit-push.outputs.push == 'true'
|
|
||||||
env:
|
|
||||||
GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
|
|
||||||
GITEA_URL: ${{ secrets.REPO_URL }}
|
|
||||||
HEAD_BRANCH: ${{ steps.commit-push.outputs.HEAD_BRANCH }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls?base_branch=${BASE_BRANCH}&state=open&page=1"
|
|
||||||
|
|
||||||
echo ">> Checking if PR from branch ${HEAD_BRANCH} into ${BASE_BRANCH}"
|
|
||||||
echo ">> With Endpoint of:"
|
|
||||||
echo "$API_ENDPOINT"
|
|
||||||
|
|
||||||
HTTP_STATUS=$(
|
|
||||||
curl -X GET \
|
|
||||||
--silent \
|
|
||||||
--write-out '%{http_code}' \
|
|
||||||
--output response_body.json \
|
|
||||||
--dump-header response_headers.txt \
|
|
||||||
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
||||||
-H "Content-Type: application/json" \
|
|
||||||
"$API_ENDPOINT" 2> response_errors.txt
|
|
||||||
)
|
|
||||||
|
|
||||||
echo ">> HTTP Status Code: $HTTP_STATUS"
|
|
||||||
echo ">> Response Output ..."
|
|
||||||
echo "----"
|
|
||||||
cat response_body.json
|
|
||||||
echo "----"
|
|
||||||
cat response_headers.txt
|
|
||||||
echo "----"
|
|
||||||
cat response_errors.txt
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
if [ "$HTTP_STATUS" == "200" ] && [ "$(cat response_body.json | jq -r .[0].state)" == "open" ]; then
|
|
||||||
echo ">> Pull Request has been found open, will update"
|
|
||||||
PR_INDEX=$(cat response_body.json | jq -r .[0].number)
|
|
||||||
echo "pull-request-exists=${PR_INDEX}" >> $GITEA_OUTPUT
|
|
||||||
echo "pull-request-index=true" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
elif [ "$HTTP_STATUS" == "200" ] && [ "$(cat response_body.json | jq -r .[0].state)" == "closed" ]; then
|
|
||||||
echo ">> Pull Request found, but was closed"
|
|
||||||
echo "pull-request-exists=false" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> Pull Request not found"
|
|
||||||
echo "pull-request-exists=false" >> $GITEA_OUTPUT
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Create Pull Request
|
|
||||||
id: create-pull-request
|
|
||||||
if: steps.commit-push.outputs.push == 'true' && steps.check-for-pull-requst.outputs.pull-request-exists == 'false'
|
|
||||||
env:
|
|
||||||
GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
|
|
||||||
GITEA_URL: ${{ secrets.REPO_URL }}
|
|
||||||
HEAD_BRANCH: ${{ steps.commit-push.outputs.HEAD_BRANCH }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls"
|
|
||||||
|
|
||||||
PAYLOAD=$( jq -n \
|
|
||||||
--arg head "${HEAD_BRANCH}" \
|
|
||||||
--arg base "${BASE_BRANCH}" \
|
|
||||||
--arg assignee "${ASSIGNEE}" \
|
|
||||||
--arg title "Automated Manifest Update" \
|
|
||||||
--arg body "This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow." \
|
|
||||||
'{head: $head, base: $base, assignee: $assignee, title: $title, body: $body}' )
|
|
||||||
|
|
||||||
echo ">> Creating PR from branch ${HEAD_BRANCH} into ${BASE_BRANCH}"
|
|
||||||
echo ">> With Endpoint of:"
|
|
||||||
echo "$API_ENDPOINT"
|
|
||||||
echo ">> With Payload of:"
|
|
||||||
echo "$PAYLOAD"
|
|
||||||
|
|
||||||
HTTP_STATUS=$(
|
|
||||||
curl -X POST \
|
|
||||||
--silent \
|
|
||||||
--write-out '%{http_code}' \
|
|
||||||
--output response_body.json \
|
|
||||||
--dump-header response_headers.txt \
|
|
||||||
--data "$PAYLOAD" \
|
|
||||||
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
||||||
-H "Content-Type: application/json" \
|
|
||||||
"$API_ENDPOINT" 2> response_errors.txt
|
|
||||||
)
|
|
||||||
|
|
||||||
echo ">> HTTP Status Code: $HTTP_STATUS"
|
|
||||||
echo ">> Response Output ..."
|
|
||||||
echo "----"
|
|
||||||
cat response_body.json
|
|
||||||
echo "----"
|
|
||||||
cat response_headers.txt
|
|
||||||
echo "----"
|
|
||||||
cat response_errors.txt
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
if [ "$HTTP_STATUS" == "201" ]; then
|
|
||||||
echo ">> Pull Request created successfully!"
|
|
||||||
PR_URL=$(cat response_body.json | jq -r .html_url)
|
|
||||||
echo "pull-request-url=${PR_URL}" >> $GITEA_OUTPUT
|
|
||||||
PR_ID=$(cat response_body.json | jq -r .id)
|
|
||||||
echo "pull-request-id=${PR_ID}" >> $GITEA_OUTPUT
|
|
||||||
echo "pull-request-operation=created" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
elif [ "$HTTP_STATUS" == "422" ]; then
|
|
||||||
echo ">> Failed to create PR (HTTP 422: Unprocessable Entity), PR may already exist"
|
|
||||||
|
|
||||||
elif [ "$HTTP_STATUS" == "409" ]; then
|
|
||||||
echo ">> Failed to create PR (HTTP 409: Conflict), PR already exists"
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> Failed to create PR, HTTP status code: $HTTP_STATUS"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: ntfy Created
|
|
||||||
uses: niniyas/ntfy-action@master
|
|
||||||
if: steps.create-pull-request.outputs.pull-request-operation == 'created'
|
|
||||||
with:
|
|
||||||
url: "${{ secrets.NTFY_URL }}"
|
|
||||||
topic: "${{ secrets.NTFY_TOPIC }}"
|
|
||||||
title: "Manifest Render PR Created - Infrastructure"
|
|
||||||
priority: 3
|
|
||||||
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
|
||||||
tags: action,successfully,completed
|
|
||||||
details: "Manifest rendering for Infrastructure has created a new Pull Request with ID: ${{ steps.create-pull-request.outputs.pull-request-id }}!"
|
|
||||||
icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
|
|
||||||
actions: '[{"action": "view", "label": "Open Gitea", "url": "${{ steps.create-pull-request.outputs.pull-request-url }}", "clear": true}]'
|
|
||||||
|
|
||||||
- name: ntfy Failed
|
|
||||||
uses: niniyas/ntfy-action@master
|
|
||||||
if: failure()
|
|
||||||
with:
|
|
||||||
url: "${{ secrets.NTFY_URL }}"
|
|
||||||
topic: "${{ secrets.NTFY_TOPIC }}"
|
|
||||||
title: "Manifest Render Failure - Infrastructure"
|
|
||||||
priority: 4
|
|
||||||
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
|
||||||
tags: action,failed
|
|
||||||
details: "Manifest rendering for Infrastructure has failed!"
|
|
||||||
icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
|
|
||||||
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/infrastructure/actions?workflow=render-manifests.yaml", "clear": true}]'
|
|
||||||
image: true
|
|
||||||
@@ -1,399 +0,0 @@
|
|||||||
name: render-manifests-merge
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
branches:
|
|
||||||
- main
|
|
||||||
paths:
|
|
||||||
- 'clusters/cl01tl/helm/**'
|
|
||||||
types:
|
|
||||||
- closed
|
|
||||||
|
|
||||||
env:
|
|
||||||
CLUSTER: cl01tl
|
|
||||||
BASE_BRANCH: manifests
|
|
||||||
BRANCH_NAME: auto/update-manifests
|
|
||||||
ASSIGNEE: alexlebens
|
|
||||||
MAIN_DIR: /workspace/alexlebens/infrastructure/infrastructure
|
|
||||||
MANIFEST_DIR: /workspace/alexlebens/infrastructure/infrastructure-manifests
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
render-manifests-merge:
|
|
||||||
runs-on: ubuntu-js
|
|
||||||
if: ${{ (github.event.pull_request.merged == true) && !(contains(github.event.pull_request.labels.*.name, 'automerge')) }}
|
|
||||||
steps:
|
|
||||||
- name: Checkout Main
|
|
||||||
uses: actions/checkout@v6
|
|
||||||
with:
|
|
||||||
path: infrastructure
|
|
||||||
fetch-depth: 0
|
|
||||||
|
|
||||||
- name: Checkout Manifests
|
|
||||||
uses: actions/checkout@v6
|
|
||||||
with:
|
|
||||||
ref: manifests
|
|
||||||
path: infrastructure-manifests
|
|
||||||
|
|
||||||
- name: Set up Helm
|
|
||||||
uses: azure/setup-helm@v4
|
|
||||||
with:
|
|
||||||
token: ${{ secrets.GITEA_TOKEN }}
|
|
||||||
version: v3.17.2 # Pending https://github.com/helm/helm/pull/30743
|
|
||||||
|
|
||||||
- name: Prepare Manifest Branch
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Configure git to use gitea-bot as user ..."
|
|
||||||
git config user.name "gitea-bot"
|
|
||||||
git config user.email "gitea-bot@alexlebens.net"
|
|
||||||
|
|
||||||
echo ">> Checking if PR branch exists ..."
|
|
||||||
if [[ $(git ls-remote --heads origin "${BRANCH_NAME}" | wc -l) -gt 0 ]]; then
|
|
||||||
echo ">> Branch '${BRANCH_NAME}' exists, pulling changes ..."
|
|
||||||
git fetch origin "${BRANCH_NAME}"
|
|
||||||
git checkout "${BRANCH_NAME}"
|
|
||||||
git pull --rebase
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> Branch '${BRANCH_NAME}' does not exist, creating ..."
|
|
||||||
git checkout -b $BRANCH_NAME
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Check which Directories have Changes
|
|
||||||
id: check-dir-changes
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
RENDER_DIR=()
|
|
||||||
|
|
||||||
echo ">> Checking for changes from HEAD^..HEAD ..."
|
|
||||||
GIT_DIFF=$(git diff --name-only HEAD^..HEAD | xargs -I {} dirname {} | sort -u | grep -E "clusters/[^/]+/helm/[^/]+")
|
|
||||||
|
|
||||||
if [ -n "${GIT_DIFF}" ]; then
|
|
||||||
echo ">> Changes detected:"
|
|
||||||
echo "$GIT_DIFF"
|
|
||||||
for path in $GIT_DIFF; do
|
|
||||||
RENDER_DIR+=$(echo "$path" | awk -F '/' '{print $4}')
|
|
||||||
done
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> No changes detected"
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "${RENDER_DIR}" ]; then
|
|
||||||
echo ">> Directories to Render:"
|
|
||||||
echo "$(echo "${RENDER_DIR[@]}" | sort -u)"
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "changes-detected=true" >> $GITEA_OUTPUT
|
|
||||||
echo "render-dir<<EOF" >> $GITEA_OUTPUT
|
|
||||||
echo "$(echo "${RENDER_DIR[@]}" | sort -u)" >> $GITEA_OUTPUT
|
|
||||||
echo "EOF" >> $GITEA_OUTPUT
|
|
||||||
else
|
|
||||||
echo "changes-detected=false" >> $GITEA_OUTPUT
|
|
||||||
fi
|
|
||||||
|
|
||||||
- name: Add Repositories
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
echo ">> Adding repositories for chart dependencies ..."
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
helm dependency list --max-col-width 120 ${MAIN_DIR}/clusters/${CLUSTER}/helm/$dir 2> /dev/null \
|
|
||||||
| tail +2 | head -n -1 \
|
|
||||||
| awk '{ print "helm repo add " $1 " " $3 }' \
|
|
||||||
| while read cmd; do echo "$cmd" | sh; done || true
|
|
||||||
done
|
|
||||||
|
|
||||||
if helm repo list | tail +2 | read -r; then
|
|
||||||
echo ">> Update repository cache ..."
|
|
||||||
helm repo update
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Remove Changed Manifest Files
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Remove manfiest files and rebuild from source ..."
|
|
||||||
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
chart_path=${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$dir
|
|
||||||
|
|
||||||
echo "$chart_path"
|
|
||||||
rm -rf $chart_path/*
|
|
||||||
done
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Render Helm Manifests
|
|
||||||
id: render-manifests
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
echo ">> Rendering Manifests ..."
|
|
||||||
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
chart_path=${MAIN_DIR}/clusters/${CLUSTER}/helm/$dir
|
|
||||||
chart_name=$(basename "$chart_path")
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ""
|
|
||||||
echo ">> Rendering chart: $chart_name"
|
|
||||||
echo ">> Chart path $chart_path"
|
|
||||||
|
|
||||||
if [ -f "$chart_path/Chart.yaml" ]; then
|
|
||||||
OUTPUT_FOLDER="${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$chart_name/"
|
|
||||||
TEMPLATE=""
|
|
||||||
|
|
||||||
mkdir -p ${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$chart_name
|
|
||||||
|
|
||||||
cd $chart_path
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Building helm dependency ..."
|
|
||||||
helm dependency build --skip-refresh
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Linting helm ..."
|
|
||||||
helm lint --namespace "$chart_name"
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Rendering templates ..."
|
|
||||||
case "$chart_name" in
|
|
||||||
"stack")
|
|
||||||
echo ""
|
|
||||||
echo ">> Special Rendering for stack into argocd namespace ..."
|
|
||||||
TEMPLATE=$(helm template $chart_name ./ --namespace argocd --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
"cilium" | "coredns" | "metrics-server" |"prometheus-operator-crds")
|
|
||||||
echo ""
|
|
||||||
echo ">> Special Rendering for $chart_name into kube-system namespace ..."
|
|
||||||
TEMPLATE=$(helm template $chart_name ./ --namespace kube-system --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
echo ""
|
|
||||||
echo ">> Standard Rendering for $chart_name ..."
|
|
||||||
TEMPLATE=$(helm template "$chart_name" ./ --namespace "$chart_name" --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Formating rendered template ..."
|
|
||||||
echo "$TEMPLATE" | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Manifests for $chart_name rendered to $OUTPUT_FOLDER"
|
|
||||||
ls $OUTPUT_FOLDER
|
|
||||||
echo ""
|
|
||||||
else
|
|
||||||
echo ""
|
|
||||||
echo ">> Directory $chart_path does not contain a Chart.yaml. Skipping ..."
|
|
||||||
echo ""
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Check for Changes
|
|
||||||
id: check-changes
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
if git status --porcelain | grep -q .; then
|
|
||||||
echo ">> Changes detected"
|
|
||||||
git status --porcelain
|
|
||||||
echo "changes-detected=true" >> $GITEA_OUTPUT
|
|
||||||
else
|
|
||||||
echo ">> No changes detected, skipping PR creation"
|
|
||||||
exit 0
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Commit and Push Changes
|
|
||||||
id: commit-push
|
|
||||||
if: steps.check-changes.outputs.changes-detected == 'true'
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Commiting changes to ${BRANCH_NAME} ..."
|
|
||||||
git add .
|
|
||||||
git commit -m "chore: Update manifests after change"
|
|
||||||
|
|
||||||
REPO_URL="${{ secrets.REPO_URL }}/${{ gitea.repository }}"
|
|
||||||
echo ">> Pushing changes to $REPO_URL ..."
|
|
||||||
git push -u "https://oauth2:${{ secrets.BOT_TOKEN }}@$(echo $REPO_URL | sed -e 's|https://||')" ${BRANCH_NAME}
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "HEAD_BRANCH=${BRANCH_NAME}" >> $GITEA_OUTPUT
|
|
||||||
echo "push=true" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
- name: Check for Pull Request
|
|
||||||
id: check-for-pull-requst
|
|
||||||
if: steps.commit-push.outputs.push == 'true'
|
|
||||||
env:
|
|
||||||
GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
|
|
||||||
GITEA_URL: ${{ secrets.REPO_URL }}
|
|
||||||
HEAD_BRANCH: ${{ steps.commit-push.outputs.HEAD_BRANCH }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls?base_branch=${BASE_BRANCH}&state=open&page=1"
|
|
||||||
|
|
||||||
echo ">> Checking if PR from branch ${HEAD_BRANCH} into ${BASE_BRANCH}"
|
|
||||||
echo ">> With Endpoint of:"
|
|
||||||
echo "$API_ENDPOINT"
|
|
||||||
|
|
||||||
HTTP_STATUS=$(
|
|
||||||
curl -X GET \
|
|
||||||
--silent \
|
|
||||||
--write-out '%{http_code}' \
|
|
||||||
--output response_body.json \
|
|
||||||
--dump-header response_headers.txt \
|
|
||||||
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
||||||
-H "Content-Type: application/json" \
|
|
||||||
"$API_ENDPOINT" 2> response_errors.txt
|
|
||||||
)
|
|
||||||
|
|
||||||
echo ">> HTTP Status Code: $HTTP_STATUS"
|
|
||||||
echo ">> Response Output ..."
|
|
||||||
echo "----"
|
|
||||||
cat response_body.json
|
|
||||||
echo "----"
|
|
||||||
cat response_headers.txt
|
|
||||||
echo "----"
|
|
||||||
cat response_errors.txt
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
if [ "$HTTP_STATUS" == "200" ] && [ "$(cat response_body.json | jq -r .[0].state)" == "open" ]; then
|
|
||||||
echo ">> Pull Request has been found open, will update"
|
|
||||||
PR_INDEX=$(cat response_body.json | jq -r .[0].number)
|
|
||||||
echo "pull-request-exists=${PR_INDEX}" >> $GITEA_OUTPUT
|
|
||||||
echo "pull-request-index=true" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
elif [ "$HTTP_STATUS" == "200" ] && [ "$(cat response_body.json | jq -r .[0].state)" == "closed" ]; then
|
|
||||||
echo ">> Pull Request found, but was closed"
|
|
||||||
echo "pull-request-exists=false" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> Pull Request not found"
|
|
||||||
echo "pull-request-exists=false" >> $GITEA_OUTPUT
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Create Pull Request
|
|
||||||
id: create-pull-request
|
|
||||||
if: steps.commit-push.outputs.push == 'true' && steps.check-for-pull-requst.outputs.pull-request-exists == 'false'
|
|
||||||
env:
|
|
||||||
GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
|
|
||||||
GITEA_URL: ${{ secrets.REPO_URL }}
|
|
||||||
HEAD_BRANCH: ${{ steps.commit-push.outputs.HEAD_BRANCH }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls"
|
|
||||||
|
|
||||||
PAYLOAD=$( jq -n \
|
|
||||||
--arg head "${HEAD_BRANCH}" \
|
|
||||||
--arg base "${BASE_BRANCH}" \
|
|
||||||
--arg assignee "${ASSIGNEE}" \
|
|
||||||
--arg title "Automated Manifest Update" \
|
|
||||||
--arg body "This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow." \
|
|
||||||
'{head: $head, base: $base, assignee: $assignee, title: $title, body: $body}' )
|
|
||||||
|
|
||||||
echo ">> Creating PR from branch ${HEAD_BRANCH} into ${BASE_BRANCH}"
|
|
||||||
echo ">> With Endpoint of:"
|
|
||||||
echo "$API_ENDPOINT"
|
|
||||||
echo ">> With Payload of:"
|
|
||||||
echo "$PAYLOAD"
|
|
||||||
|
|
||||||
HTTP_STATUS=$(
|
|
||||||
curl -X POST \
|
|
||||||
--silent \
|
|
||||||
--write-out '%{http_code}' \
|
|
||||||
--output response_body.json \
|
|
||||||
--dump-header response_headers.txt \
|
|
||||||
--data "$PAYLOAD" \
|
|
||||||
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
||||||
-H "Content-Type: application/json" \
|
|
||||||
"$API_ENDPOINT" 2> response_errors.txt
|
|
||||||
)
|
|
||||||
|
|
||||||
echo ">> HTTP Status Code: $HTTP_STATUS"
|
|
||||||
echo ">> Response Output ..."
|
|
||||||
echo "----"
|
|
||||||
cat response_body.json
|
|
||||||
echo "----"
|
|
||||||
cat response_headers.txt
|
|
||||||
echo "----"
|
|
||||||
cat response_errors.txt
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
if [ "$HTTP_STATUS" == "201" ]; then
|
|
||||||
echo ">> Pull Request created successfully!"
|
|
||||||
PR_URL=$(cat response_body.json | jq -r .html_url)
|
|
||||||
echo "pull-request-url=${PR_URL}" >> $GITEA_OUTPUT
|
|
||||||
PR_ID=$(cat response_body.json | jq -r .id)
|
|
||||||
echo "pull-request-id=${PR_ID}" >> $GITEA_OUTPUT
|
|
||||||
echo "pull-request-operation=created" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
elif [ "$HTTP_STATUS" == "422" ]; then
|
|
||||||
echo ">> Failed to create PR (HTTP 422: Unprocessable Entity), PR may already exist"
|
|
||||||
|
|
||||||
elif [ "$HTTP_STATUS" == "409" ]; then
|
|
||||||
echo ">> Failed to create PR (HTTP 409: Conflict), PR already exists"
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> Failed to create PR, HTTP status code: $HTTP_STATUS"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: ntfy Created
|
|
||||||
uses: niniyas/ntfy-action@master
|
|
||||||
if: steps.create-pull-request.outputs.pull-request-operation == 'created'
|
|
||||||
with:
|
|
||||||
url: "${{ secrets.NTFY_URL }}"
|
|
||||||
topic: "${{ secrets.NTFY_TOPIC }}"
|
|
||||||
title: "Manifest Render PR Created - Infrastructure"
|
|
||||||
priority: 3
|
|
||||||
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
|
||||||
tags: action,successfully,completed
|
|
||||||
details: "Manifest rendering for Infrastructure has created a new Pull Request with ID: ${{ steps.create-pull-request.outputs.pull-request-id }}!"
|
|
||||||
icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
|
|
||||||
actions: '[{"action": "view", "label": "Open Gitea", "url": "${{ steps.create-pull-request.outputs.pull-request-url }}", "clear": true}]'
|
|
||||||
|
|
||||||
- name: ntfy Failed
|
|
||||||
uses: niniyas/ntfy-action@master
|
|
||||||
if: failure()
|
|
||||||
with:
|
|
||||||
url: "${{ secrets.NTFY_URL }}"
|
|
||||||
topic: "${{ secrets.NTFY_TOPIC }}"
|
|
||||||
title: "Manifest Render Failure - Infrastructure"
|
|
||||||
priority: 4
|
|
||||||
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
|
||||||
tags: action,failed
|
|
||||||
details: "Manifest rendering for Infrastructure has failed!"
|
|
||||||
icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
|
|
||||||
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/infrastructure/actions?workflow=render-manifests.yaml", "clear": true}]'
|
|
||||||
image: true
|
|
||||||
@@ -1,397 +0,0 @@
|
|||||||
name: render-manifests-push
|
|
||||||
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches:
|
|
||||||
- main
|
|
||||||
paths:
|
|
||||||
- 'clusters/cl01tl/helm/**'
|
|
||||||
|
|
||||||
env:
|
|
||||||
CLUSTER: cl01tl
|
|
||||||
BASE_BRANCH: manifests
|
|
||||||
BRANCH_NAME: auto/update-manifests
|
|
||||||
ASSIGNEE: alexlebens
|
|
||||||
MAIN_DIR: /workspace/alexlebens/infrastructure/infrastructure
|
|
||||||
MANIFEST_DIR: /workspace/alexlebens/infrastructure/infrastructure-manifests
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
render-manifests-push:
|
|
||||||
runs-on: ubuntu-js
|
|
||||||
if: gitea.event.commits[0].author.username != 'renovate-bot'
|
|
||||||
steps:
|
|
||||||
- name: Checkout Main
|
|
||||||
uses: actions/checkout@v6
|
|
||||||
with:
|
|
||||||
path: infrastructure
|
|
||||||
fetch-depth: 0
|
|
||||||
|
|
||||||
- name: Checkout Manifests
|
|
||||||
uses: actions/checkout@v6
|
|
||||||
with:
|
|
||||||
ref: manifests
|
|
||||||
path: infrastructure-manifests
|
|
||||||
|
|
||||||
- name: Set up Helm
|
|
||||||
uses: azure/setup-helm@v4
|
|
||||||
with:
|
|
||||||
token: ${{ secrets.GITEA_TOKEN }}
|
|
||||||
version: v3.17.2 # Pending https://github.com/helm/helm/pull/30743
|
|
||||||
|
|
||||||
- name: Prepare Manifest Branch
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Configure git to use gitea-bot as user ..."
|
|
||||||
git config user.name "gitea-bot"
|
|
||||||
git config user.email "gitea-bot@alexlebens.net"
|
|
||||||
|
|
||||||
echo ">> Checking if PR branch exists ..."
|
|
||||||
if [[ $(git ls-remote --heads origin "${BRANCH_NAME}" | wc -l) -gt 0 ]]; then
|
|
||||||
echo ">> Branch '${BRANCH_NAME}' exists, pulling changes ..."
|
|
||||||
git fetch origin "${BRANCH_NAME}"
|
|
||||||
git checkout "${BRANCH_NAME}"
|
|
||||||
git pull --rebase
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> Branch '${BRANCH_NAME}' does not exist, creating ..."
|
|
||||||
git checkout -b $BRANCH_NAME
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Check which Directories have Changes
|
|
||||||
id: check-dir-changes
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
RENDER_DIR=()
|
|
||||||
|
|
||||||
echo ">> Checking for changes ..."
|
|
||||||
GIT_DIFF=$(git diff --name-only ${{ gitea.event.before }}..HEAD | xargs -I {} dirname {} | sort -u | grep -E "clusters/[^/]+/helm/[^/]+")
|
|
||||||
|
|
||||||
if [ -n "${GIT_DIFF}" ]; then
|
|
||||||
echo ">> Changes detected:"
|
|
||||||
echo "$GIT_DIFF"
|
|
||||||
for path in $GIT_DIFF; do
|
|
||||||
RENDER_DIR+=$(echo "$path" | awk -F '/' '{print $4}')
|
|
||||||
done
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> No changes detected"
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ -n "${RENDER_DIR}" ]; then
|
|
||||||
echo ">> Directories to Render:"
|
|
||||||
echo "$(echo "${RENDER_DIR[@]}" | sort -u)"
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "changes-detected=true" >> $GITEA_OUTPUT
|
|
||||||
echo "render-dir<<EOF" >> $GITEA_OUTPUT
|
|
||||||
echo "$(echo "${RENDER_DIR[@]}" | sort -u)" >> $GITEA_OUTPUT
|
|
||||||
echo "EOF" >> $GITEA_OUTPUT
|
|
||||||
else
|
|
||||||
echo "changes-detected=false" >> $GITEA_OUTPUT
|
|
||||||
fi
|
|
||||||
|
|
||||||
- name: Add Repositories
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
echo ">> Adding repositories for chart dependencies ..."
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
helm dependency list --max-col-width 120 ${MAIN_DIR}/clusters/${CLUSTER}/helm/$dir 2> /dev/null \
|
|
||||||
| tail +2 | head -n -1 \
|
|
||||||
| awk '{ print "helm repo add " $1 " " $3 }' \
|
|
||||||
| while read cmd; do echo "$cmd" | sh; done || true
|
|
||||||
done
|
|
||||||
|
|
||||||
if helm repo list | tail +2 | read -r; then
|
|
||||||
echo ">> Update repository cache ..."
|
|
||||||
helm repo update
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Remove Changed Manifest Files
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Remove manfiest files and rebuild from source ..."
|
|
||||||
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
chart_path=${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$dir
|
|
||||||
|
|
||||||
echo "$chart_path"
|
|
||||||
rm -rf $chart_path/*
|
|
||||||
done
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Render Helm Manifests
|
|
||||||
id: render-manifests
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
env:
|
|
||||||
RENDER_DIR: ${{ steps.check-dir-changes.outputs.render-dir }}
|
|
||||||
run: |
|
|
||||||
cd ${MAIN_DIR}
|
|
||||||
|
|
||||||
echo ">> Rendering Manifests ..."
|
|
||||||
|
|
||||||
for dir in ${RENDER_DIR}; do
|
|
||||||
chart_path=${MAIN_DIR}/clusters/${CLUSTER}/helm/$dir
|
|
||||||
chart_name=$(basename "$chart_path")
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ""
|
|
||||||
echo ">> Rendering chart: $chart_name"
|
|
||||||
echo ">> Chart path $chart_path"
|
|
||||||
|
|
||||||
if [ -f "$chart_path/Chart.yaml" ]; then
|
|
||||||
OUTPUT_FOLDER="${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$chart_name/"
|
|
||||||
TEMPLATE=""
|
|
||||||
|
|
||||||
mkdir -p ${MANIFEST_DIR}/clusters/${CLUSTER}/manifests/$chart_name
|
|
||||||
|
|
||||||
cd $chart_path
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Building helm dependency ..."
|
|
||||||
helm dependency build --skip-refresh
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Linting helm ..."
|
|
||||||
helm lint --namespace "$chart_name"
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Rendering templates ..."
|
|
||||||
case "$chart_name" in
|
|
||||||
"stack")
|
|
||||||
echo ""
|
|
||||||
echo ">> Special Rendering for stack into argocd namespace ..."
|
|
||||||
TEMPLATE=$(helm template $chart_name ./ --namespace argocd --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
"cilium" | "coredns" | "metrics-server" |"prometheus-operator-crds")
|
|
||||||
echo ""
|
|
||||||
echo ">> Special Rendering for $chart_name into kube-system namespace ..."
|
|
||||||
TEMPLATE=$(helm template $chart_name ./ --namespace kube-system --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
echo ""
|
|
||||||
echo ">> Standard Rendering for $chart_name ..."
|
|
||||||
TEMPLATE=$(helm template "$chart_name" ./ --namespace "$chart_name" --include-crds --dry-run)
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Formating rendered template ..."
|
|
||||||
echo "$TEMPLATE" | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
echo ">> Manifests for $chart_name rendered to $OUTPUT_FOLDER"
|
|
||||||
ls $OUTPUT_FOLDER
|
|
||||||
echo ""
|
|
||||||
else
|
|
||||||
echo ""
|
|
||||||
echo ">> Directory $chart_path does not contain a Chart.yaml. Skipping ..."
|
|
||||||
echo ""
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Check for Changes
|
|
||||||
id: check-changes
|
|
||||||
if: steps.check-dir-changes.outputs.changes-detected == 'true'
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
if git status --porcelain | grep -q .; then
|
|
||||||
echo ">> Changes detected"
|
|
||||||
git status --porcelain
|
|
||||||
echo "changes-detected=true" >> $GITEA_OUTPUT
|
|
||||||
else
|
|
||||||
echo ">> No changes detected, skipping PR creation"
|
|
||||||
exit 0
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Commit and Push Changes
|
|
||||||
id: commit-push
|
|
||||||
if: steps.check-changes.outputs.changes-detected == 'true'
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
echo ">> Commiting changes to ${BRANCH_NAME} ..."
|
|
||||||
git add .
|
|
||||||
git commit -m "chore: Update manifests after change"
|
|
||||||
|
|
||||||
REPO_URL="${{ secrets.REPO_URL }}/${{ gitea.repository }}"
|
|
||||||
echo ">> Pushing changes to $REPO_URL ..."
|
|
||||||
git push -u "https://oauth2:${{ secrets.BOT_TOKEN }}@$(echo $REPO_URL | sed -e 's|https://||')" ${BRANCH_NAME}
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
echo "HEAD_BRANCH=${BRANCH_NAME}" >> $GITEA_OUTPUT
|
|
||||||
echo "push=true" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
- name: Check for Pull Request
|
|
||||||
id: check-for-pull-requst
|
|
||||||
if: steps.commit-push.outputs.push == 'true'
|
|
||||||
env:
|
|
||||||
GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
|
|
||||||
GITEA_URL: ${{ secrets.REPO_URL }}
|
|
||||||
HEAD_BRANCH: ${{ steps.commit-push.outputs.HEAD_BRANCH }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls?base_branch=${BASE_BRANCH}&state=open&page=1"
|
|
||||||
|
|
||||||
echo ">> Checking if PR from branch ${HEAD_BRANCH} into ${BASE_BRANCH}"
|
|
||||||
echo ">> With Endpoint of:"
|
|
||||||
echo "$API_ENDPOINT"
|
|
||||||
|
|
||||||
HTTP_STATUS=$(
|
|
||||||
curl -X GET \
|
|
||||||
--silent \
|
|
||||||
--write-out '%{http_code}' \
|
|
||||||
--output response_body.json \
|
|
||||||
--dump-header response_headers.txt \
|
|
||||||
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
||||||
-H "Content-Type: application/json" \
|
|
||||||
"$API_ENDPOINT" 2> response_errors.txt
|
|
||||||
)
|
|
||||||
|
|
||||||
echo ">> HTTP Status Code: $HTTP_STATUS"
|
|
||||||
echo ">> Response Output ..."
|
|
||||||
echo "----"
|
|
||||||
cat response_body.json
|
|
||||||
echo "----"
|
|
||||||
cat response_headers.txt
|
|
||||||
echo "----"
|
|
||||||
cat response_errors.txt
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
if [ "$HTTP_STATUS" == "200" ] && [ "$(cat response_body.json | jq -r .[0].state)" == "open" ]; then
|
|
||||||
echo ">> Pull Request has been found open, will update"
|
|
||||||
PR_INDEX=$(cat response_body.json | jq -r .[0].number)
|
|
||||||
echo "pull-request-exists=${PR_INDEX}" >> $GITEA_OUTPUT
|
|
||||||
echo "pull-request-index=true" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
elif [ "$HTTP_STATUS" == "200" ] && [ "$(cat response_body.json | jq -r .[0].state)" == "closed" ]; then
|
|
||||||
echo ">> Pull Request found, but was closed"
|
|
||||||
echo "pull-request-exists=false" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> Pull Request not found"
|
|
||||||
echo "pull-request-exists=false" >> $GITEA_OUTPUT
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: Create Pull Request
|
|
||||||
id: create-pull-request
|
|
||||||
if: steps.commit-push.outputs.push == 'true' && steps.check-for-pull-requst.outputs.pull-request-exists == 'false'
|
|
||||||
env:
|
|
||||||
GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
|
|
||||||
GITEA_URL: ${{ secrets.REPO_URL }}
|
|
||||||
HEAD_BRANCH: ${{ steps.commit-push.outputs.HEAD_BRANCH }}
|
|
||||||
run: |
|
|
||||||
cd ${MANIFEST_DIR}
|
|
||||||
|
|
||||||
API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls"
|
|
||||||
|
|
||||||
PAYLOAD=$( jq -n \
|
|
||||||
--arg head "${HEAD_BRANCH}" \
|
|
||||||
--arg base "${BASE_BRANCH}" \
|
|
||||||
--arg assignee "${ASSIGNEE}" \
|
|
||||||
--arg title "Automated Manifest Update" \
|
|
||||||
--arg body "This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow." \
|
|
||||||
'{head: $head, base: $base, assignee: $assignee, title: $title, body: $body}' )
|
|
||||||
|
|
||||||
echo ">> Creating PR from branch ${HEAD_BRANCH} into ${BASE_BRANCH}"
|
|
||||||
echo ">> With Endpoint of:"
|
|
||||||
echo "$API_ENDPOINT"
|
|
||||||
echo ">> With Payload of:"
|
|
||||||
echo "$PAYLOAD"
|
|
||||||
|
|
||||||
HTTP_STATUS=$(
|
|
||||||
curl -X POST \
|
|
||||||
--silent \
|
|
||||||
--write-out '%{http_code}' \
|
|
||||||
--output response_body.json \
|
|
||||||
--dump-header response_headers.txt \
|
|
||||||
--data "$PAYLOAD" \
|
|
||||||
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
||||||
-H "Content-Type: application/json" \
|
|
||||||
"$API_ENDPOINT" 2> response_errors.txt
|
|
||||||
)
|
|
||||||
|
|
||||||
echo ">> HTTP Status Code: $HTTP_STATUS"
|
|
||||||
echo ">> Response Output ..."
|
|
||||||
echo "----"
|
|
||||||
cat response_body.json
|
|
||||||
echo "----"
|
|
||||||
cat response_headers.txt
|
|
||||||
echo "----"
|
|
||||||
cat response_errors.txt
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
if [ "$HTTP_STATUS" == "201" ]; then
|
|
||||||
echo ">> Pull Request created successfully!"
|
|
||||||
PR_URL=$(cat response_body.json | jq -r .html_url)
|
|
||||||
echo "pull-request-url=${PR_URL}" >> $GITEA_OUTPUT
|
|
||||||
PR_ID=$(cat response_body.json | jq -r .id)
|
|
||||||
echo "pull-request-id=${PR_ID}" >> $GITEA_OUTPUT
|
|
||||||
echo "pull-request-operation=created" >> $GITEA_OUTPUT
|
|
||||||
|
|
||||||
elif [ "$HTTP_STATUS" == "422" ]; then
|
|
||||||
echo ">> Failed to create PR (HTTP 422: Unprocessable Entity), PR may already exist"
|
|
||||||
|
|
||||||
elif [ "$HTTP_STATUS" == "409" ]; then
|
|
||||||
echo ">> Failed to create PR (HTTP 409: Conflict), PR already exists"
|
|
||||||
|
|
||||||
else
|
|
||||||
echo ">> Failed to create PR, HTTP status code: $HTTP_STATUS"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "----"
|
|
||||||
|
|
||||||
- name: ntfy Created
|
|
||||||
uses: niniyas/ntfy-action@master
|
|
||||||
if: steps.create-pull-request.outputs.pull-request-operation == 'created'
|
|
||||||
with:
|
|
||||||
url: "${{ secrets.NTFY_URL }}"
|
|
||||||
topic: "${{ secrets.NTFY_TOPIC }}"
|
|
||||||
title: "Manifest Render PR Created - Infrastructure"
|
|
||||||
priority: 3
|
|
||||||
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
|
||||||
tags: action,successfully,completed
|
|
||||||
details: "Manifest rendering for Infrastructure has created a new Pull Request with ID: ${{ steps.create-pull-request.outputs.pull-request-id }}!"
|
|
||||||
icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
|
|
||||||
actions: '[{"action": "view", "label": "Open Gitea", "url": "${{ steps.create-pull-request.outputs.pull-request-url }}", "clear": true}]'
|
|
||||||
|
|
||||||
- name: ntfy Failed
|
|
||||||
uses: niniyas/ntfy-action@master
|
|
||||||
if: failure()
|
|
||||||
with:
|
|
||||||
url: "${{ secrets.NTFY_URL }}"
|
|
||||||
topic: "${{ secrets.NTFY_TOPIC }}"
|
|
||||||
title: "Manifest Render Failure - Infrastructure"
|
|
||||||
priority: 4
|
|
||||||
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
|
||||||
tags: action,failed
|
|
||||||
details: "Manifest rendering for Infrastructure has failed!"
|
|
||||||
icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
|
|
||||||
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/infrastructure/actions?workflow=render-manifests.yaml", "clear": true}]'
|
|
||||||
image: true
|
|
||||||
229
.gitea/workflows/render-manifests.yaml
Normal file
229
.gitea/workflows/render-manifests.yaml
Normal file
@@ -0,0 +1,229 @@
|
|||||||
|
name: render-manifests
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
paths:
|
||||||
|
- 'clusters/cl01tl/helm/**'
|
||||||
|
|
||||||
|
workflow_dispatch:
|
||||||
|
|
||||||
|
env:
|
||||||
|
CLUSTERS: cl01tl
|
||||||
|
BASE_BRANCH: manifests
|
||||||
|
MAIN_DIR: /workspace/alexlebens/infrastructure/infrastructure
|
||||||
|
MANIFEST_DIR: /workspace/alexlebens/infrastructure/infrastructure-manifests
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
render-manifests-helm:
|
||||||
|
runs-on: ubuntu-js
|
||||||
|
steps:
|
||||||
|
- name: Checkout
|
||||||
|
uses: actions/checkout@v6
|
||||||
|
with:
|
||||||
|
path: infrastructure
|
||||||
|
|
||||||
|
- name: Checkout Manifests
|
||||||
|
uses: actions/checkout@v6
|
||||||
|
with:
|
||||||
|
ref: manifests
|
||||||
|
path: infrastructure-manifests
|
||||||
|
|
||||||
|
- name: Set up Helm
|
||||||
|
uses: azure/setup-helm@v4
|
||||||
|
with:
|
||||||
|
token: ${{ secrets.GITEA_TOKEN }}
|
||||||
|
version: v3.17.2 # Pending https://github.com/helm/helm/pull/30743
|
||||||
|
|
||||||
|
- name: Remove Prior Manifests
|
||||||
|
run: |
|
||||||
|
cd ${MANIFEST_DIR}/clusters
|
||||||
|
rm -rf ./*
|
||||||
|
|
||||||
|
- name: Add Repositories
|
||||||
|
run: |
|
||||||
|
for cluster in ${CLUSTERS}; do
|
||||||
|
echo ">> Adding repositories for chart dependencies of cluster $cluster ..."
|
||||||
|
for chart_path in ${MAIN_DIR}/clusters/$cluster/helm/*; do
|
||||||
|
helm dependency list --max-col-width 120 $chart_path 2> /dev/null \
|
||||||
|
| tail +2 | head -n -1 \
|
||||||
|
| awk '{ print "helm repo add " $1 " " $3 }' \
|
||||||
|
| while read cmd; do echo "$cmd" | sh; done || true
|
||||||
|
done
|
||||||
|
done
|
||||||
|
|
||||||
|
- name: Render Helm Manifests
|
||||||
|
run: |
|
||||||
|
for cluster in ${CLUSTERS}; do
|
||||||
|
for chart_path in ${MAIN_DIR}/clusters/$cluster/helm/*; do
|
||||||
|
chart_name=$(basename "$chart_path")
|
||||||
|
echo ">> Rendering chart: $chart_name"
|
||||||
|
|
||||||
|
if [ -f "$chart_path/Chart.yaml" ]; then
|
||||||
|
mkdir -p ${MANIFEST_DIR}/clusters/$cluster/manifests/$chart_name
|
||||||
|
OUTPUT_FILE="${MANIFEST_DIR}/clusters/$cluster/manifests/$chart_name/$chart_name.yaml"
|
||||||
|
|
||||||
|
cd $chart_path
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo ">> Building helm dependency ..."
|
||||||
|
helm dependency build
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo ">> Linting helm ..."
|
||||||
|
helm lint --namespace "$chart_name" --with-subcharts
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo ">> Rendering templates ..."
|
||||||
|
helm template "$chart_name" ./ --namespace "$chart_name" --include-crds > "$OUTPUT_FILE"
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo ">> Manifests for $chart_name rendered to $OUTPUT_FILE"
|
||||||
|
echo ""
|
||||||
|
else
|
||||||
|
echo ""
|
||||||
|
echo ">> Directory $chart_path does not contain a Chart.yaml. Skipping ..."
|
||||||
|
echo ""
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
done
|
||||||
|
|
||||||
|
- name: Check for Changes
|
||||||
|
id: check-changes
|
||||||
|
run: |
|
||||||
|
cd ${MANIFEST_DIR}
|
||||||
|
|
||||||
|
if git status --porcelain | grep -q .; then
|
||||||
|
echo ">> Changes detected"
|
||||||
|
git status --porcelain
|
||||||
|
echo "changes-detected=true" >> $GITEA_OUTPUT
|
||||||
|
else
|
||||||
|
echo ">> No changes detected, skipping PR creation"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
- name: Commit and Push Changes
|
||||||
|
id: commit-push
|
||||||
|
if: steps.check-changes.outputs.changes-detected == 'true'
|
||||||
|
run: |
|
||||||
|
cd ${MANIFEST_DIR}
|
||||||
|
|
||||||
|
BRANCH_NAME="auto/update-manifests-$(date +%s)"
|
||||||
|
|
||||||
|
# Configure Git
|
||||||
|
echo ">> Configure git to use gitea-bot as user ..."
|
||||||
|
git config user.name "gitea-bot"
|
||||||
|
git config user.email "gitea-bot@alexlebens.net"
|
||||||
|
|
||||||
|
# Create a new branch and stage all changes
|
||||||
|
echo ">> Creating and commiting to $BRANCH_NAME ..."
|
||||||
|
git checkout -b $BRANCH_NAME
|
||||||
|
git add .
|
||||||
|
git commit -m "chore: Update manifests after change"
|
||||||
|
|
||||||
|
# Push the new branch to the remote repository
|
||||||
|
REPO_URL="${{ secrets.REPO_URL }}/${{ gitea.repository }}"
|
||||||
|
echo ">> Pushing changes to $REPO_URL ..."
|
||||||
|
git push -u "https://oauth2:${{ secrets.BOT_TOKEN }}@$(echo $REPO_URL | sed -e 's|https://||')" $BRANCH_NAME
|
||||||
|
|
||||||
|
echo "HEAD_BRANCH=$BRANCH_NAME" >> $GITEA_OUTPUT
|
||||||
|
echo "push=true" >> $GITEA_OUTPUT
|
||||||
|
|
||||||
|
- name: Create Pull Request
|
||||||
|
id: create-pull-request
|
||||||
|
if: steps.commit-push.outputs.push == 'true'
|
||||||
|
env:
|
||||||
|
GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
|
||||||
|
GITEA_URL: ${{ secrets.REPO_URL }}
|
||||||
|
HEAD_BRANCH: ${{ steps.commit-push.outputs.HEAD_BRANCH }}
|
||||||
|
run: |
|
||||||
|
cd ${MANIFEST_DIR}
|
||||||
|
|
||||||
|
API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls"
|
||||||
|
|
||||||
|
PAYLOAD=$( jq -n \
|
||||||
|
--arg head "${HEAD_BRANCH}" \
|
||||||
|
--arg base "${BASE_BRANCH}" \
|
||||||
|
--arg title "Automated Manifest Update: $(date +%F)" \
|
||||||
|
--arg body "This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow." \
|
||||||
|
'{head: $head, base: $base, title: $title, body: $body'} )
|
||||||
|
|
||||||
|
echo ">> Creating PR from branch ${HEAD_BRANCH} into ${BASE_BRANCH}"
|
||||||
|
echo ">> With Endpoint of:"
|
||||||
|
echo "$API_ENDPOINT"
|
||||||
|
echo ">> With Payload of:"
|
||||||
|
echo "$PAYLOAD"
|
||||||
|
|
||||||
|
HTTP_STATUS=$(
|
||||||
|
curl -X POST \
|
||||||
|
--silent \
|
||||||
|
--write-out '%{http_code}' \
|
||||||
|
--output response_body.json \
|
||||||
|
--dump-header response_headers.txt \
|
||||||
|
--data "$PAYLOAD" \
|
||||||
|
-H "Authorization: token ${GITEA_TOKEN}" \
|
||||||
|
-H "Content-Type: application/json" \
|
||||||
|
"$API_ENDPOINT" 2> response_errors.txt
|
||||||
|
)
|
||||||
|
|
||||||
|
echo ">> HTTP Status Code: $HTTP_STATUS"
|
||||||
|
echo ">> Response Output ..."
|
||||||
|
echo "----"
|
||||||
|
cat response_body.json
|
||||||
|
echo "----"
|
||||||
|
cat response_headers.txt
|
||||||
|
echo "----"
|
||||||
|
cat response_errors.txt
|
||||||
|
echo "----"
|
||||||
|
|
||||||
|
if [ "$HTTP_STATUS" == "201" ]; then
|
||||||
|
echo ">> Pull Request created successfully!"
|
||||||
|
|
||||||
|
PR_URL=$(cat response_body.json | jq -r .html_url)
|
||||||
|
echo "pull-request-url=${PR_URL}" >> $GITEA_OUTPUT
|
||||||
|
echo "pull-request-operation=created" >> $GITEA_OUTPUT
|
||||||
|
|
||||||
|
elif [ "$HTTP_STATUS" == "422" ]; then
|
||||||
|
echo ">> Failed to create PR (HTTP 422: Unprocessable Entity), PR may already exist"
|
||||||
|
else
|
||||||
|
echo ">> Failed to create PR, HTTP status code: $HTTP_STATUS"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
- name: Cleanup Branch
|
||||||
|
if: failure() && steps.create-pull-request.outcome == 'failure'
|
||||||
|
env:
|
||||||
|
HEAD_BRANCH: ${{ steps.commit-push.outputs.HEAD_BRANCH }}
|
||||||
|
run: |
|
||||||
|
echo ">> Removing branch: ${HEAD_BRANCH}"
|
||||||
|
git push origin --delete ${HEAD_BRANCH}
|
||||||
|
|
||||||
|
- name: ntfy Created
|
||||||
|
uses: niniyas/ntfy-action@master
|
||||||
|
if: steps.create-pull-request.outputs.pull-request-operation == 'created'
|
||||||
|
with:
|
||||||
|
url: "${{ secrets.NTFY_URL }}"
|
||||||
|
topic: "${{ secrets.NTFY_TOPIC }}"
|
||||||
|
title: "Manifest Render PR Created - Infrastructure"
|
||||||
|
priority: 3
|
||||||
|
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
||||||
|
tags: action,successfully,completed
|
||||||
|
details: "Manifest rendering for Infrastructure has created a new Pull Request!"
|
||||||
|
icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
|
||||||
|
actions: '[{"action": "view", "label": "Open Gitea", "url": "${{ steps.create-pull-request.outputs.pull-request-url }}", "clear": true}]'
|
||||||
|
|
||||||
|
- name: ntfy Failed
|
||||||
|
uses: niniyas/ntfy-action@master
|
||||||
|
if: failure()
|
||||||
|
with:
|
||||||
|
url: "${{ secrets.NTFY_URL }}"
|
||||||
|
topic: "${{ secrets.NTFY_TOPIC }}"
|
||||||
|
title: "Manifest Render Failure - Infrastructure"
|
||||||
|
priority: 4
|
||||||
|
headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
|
||||||
|
tags: action,failed
|
||||||
|
details: "Manifest rendering for Infrastructure has failed!"
|
||||||
|
icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
|
||||||
|
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/infrastructure/actions?workflow=render-manifests.yaml", "clear": true}]'
|
||||||
|
image: true
|
||||||
21
clusters/cl01tl/applications/actual/Chart.yaml
Normal file
21
clusters/cl01tl/applications/actual/Chart.yaml
Normal file
@@ -0,0 +1,21 @@
|
|||||||
|
apiVersion: v2
|
||||||
|
name: actual
|
||||||
|
version: 1.0.0
|
||||||
|
description: Actual
|
||||||
|
keywords:
|
||||||
|
- actual
|
||||||
|
- budget
|
||||||
|
home: https://wiki.alexlebens.dev/s/86192f45-94b7-45de-872c-6ef3fec7df5e
|
||||||
|
sources:
|
||||||
|
- https://github.com/actualbudget/actual
|
||||||
|
- https://github.com/actualbudget/actual/pkgs/container/actual
|
||||||
|
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
|
||||||
|
maintainers:
|
||||||
|
- name: alexlebens
|
||||||
|
dependencies:
|
||||||
|
- name: app-template
|
||||||
|
alias: actual
|
||||||
|
repository: https://bjw-s-labs.github.io/helm-charts/
|
||||||
|
version: 4.4.0
|
||||||
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
|
||||||
|
appVersion: v25.5.0
|
||||||
@@ -0,0 +1,55 @@
|
|||||||
|
apiVersion: external-secrets.io/v1
|
||||||
|
kind: ExternalSecret
|
||||||
|
metadata:
|
||||||
|
name: actual-data-backup-secret
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
labels:
|
||||||
|
app.kubernetes.io/name: actual-data-backup-secret
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
spec:
|
||||||
|
secretStoreRef:
|
||||||
|
kind: ClusterSecretStore
|
||||||
|
name: vault
|
||||||
|
target:
|
||||||
|
template:
|
||||||
|
mergePolicy: Merge
|
||||||
|
engineVersion: v2
|
||||||
|
data:
|
||||||
|
RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/actual/actual-data"
|
||||||
|
data:
|
||||||
|
- secretKey: BUCKET_ENDPOINT
|
||||||
|
remoteRef:
|
||||||
|
conversionStrategy: Default
|
||||||
|
decodingStrategy: None
|
||||||
|
key: /cl01tl/volsync/restic/config
|
||||||
|
metadataPolicy: None
|
||||||
|
property: S3_BUCKET_ENDPOINT
|
||||||
|
- secretKey: RESTIC_PASSWORD
|
||||||
|
remoteRef:
|
||||||
|
conversionStrategy: Default
|
||||||
|
decodingStrategy: None
|
||||||
|
key: /cl01tl/volsync/restic/config
|
||||||
|
metadataPolicy: None
|
||||||
|
property: RESTIC_PASSWORD
|
||||||
|
- secretKey: AWS_DEFAULT_REGION
|
||||||
|
remoteRef:
|
||||||
|
conversionStrategy: Default
|
||||||
|
decodingStrategy: None
|
||||||
|
key: /cl01tl/volsync/restic/config
|
||||||
|
metadataPolicy: None
|
||||||
|
property: AWS_DEFAULT_REGION
|
||||||
|
- secretKey: AWS_ACCESS_KEY_ID
|
||||||
|
remoteRef:
|
||||||
|
conversionStrategy: Default
|
||||||
|
decodingStrategy: None
|
||||||
|
key: /digital-ocean/home-infra/volsync-backups
|
||||||
|
metadataPolicy: None
|
||||||
|
property: access_key
|
||||||
|
- secretKey: AWS_SECRET_ACCESS_KEY
|
||||||
|
remoteRef:
|
||||||
|
conversionStrategy: Default
|
||||||
|
decodingStrategy: None
|
||||||
|
key: /digital-ocean/home-infra/volsync-backups
|
||||||
|
metadataPolicy: None
|
||||||
|
property: secret_key
|
||||||
@@ -0,0 +1,28 @@
|
|||||||
|
apiVersion: gateway.networking.k8s.io/v1
|
||||||
|
kind: HTTPRoute
|
||||||
|
metadata:
|
||||||
|
name: http-route-actual
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
labels:
|
||||||
|
app.kubernetes.io/name: http-route-actual
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
spec:
|
||||||
|
parentRefs:
|
||||||
|
- group: gateway.networking.k8s.io
|
||||||
|
kind: Gateway
|
||||||
|
name: traefik-gateway
|
||||||
|
namespace: traefik
|
||||||
|
hostnames:
|
||||||
|
- actual.alexlebens.net
|
||||||
|
rules:
|
||||||
|
- matches:
|
||||||
|
- path:
|
||||||
|
type: PathPrefix
|
||||||
|
value: /
|
||||||
|
backendRefs:
|
||||||
|
- group: ''
|
||||||
|
kind: Service
|
||||||
|
name: actual
|
||||||
|
port: 80
|
||||||
|
weight: 100
|
||||||
@@ -0,0 +1,25 @@
|
|||||||
|
apiVersion: volsync.backube/v1alpha1
|
||||||
|
kind: ReplicationSource
|
||||||
|
metadata:
|
||||||
|
name: actual-data-backup-source
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
labels:
|
||||||
|
app.kubernetes.io/name: actual-data-backup-source
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||||
|
spec:
|
||||||
|
sourcePVC: actual-data
|
||||||
|
trigger:
|
||||||
|
schedule: 0 4 * * *
|
||||||
|
restic:
|
||||||
|
pruneIntervalDays: 7
|
||||||
|
repository: actual-data-backup-secret
|
||||||
|
retain:
|
||||||
|
hourly: 1
|
||||||
|
daily: 3
|
||||||
|
weekly: 2
|
||||||
|
monthly: 2
|
||||||
|
yearly: 4
|
||||||
|
copyMethod: Snapshot
|
||||||
|
storageClassName: ceph-block
|
||||||
|
volumeSnapshotClassName: ceph-blockpool-snapshot
|
||||||
56
clusters/cl01tl/applications/actual/values.yaml
Normal file
56
clusters/cl01tl/applications/actual/values.yaml
Normal file
@@ -0,0 +1,56 @@
|
|||||||
|
actual:
|
||||||
|
controllers:
|
||||||
|
main:
|
||||||
|
type: deployment
|
||||||
|
replicas: 1
|
||||||
|
strategy: Recreate
|
||||||
|
revisionHistoryLimit: 3
|
||||||
|
containers:
|
||||||
|
main:
|
||||||
|
image:
|
||||||
|
repository: ghcr.io/actualbudget/actual
|
||||||
|
tag: 25.11.0
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
env:
|
||||||
|
- name: TZ
|
||||||
|
value: US/Central
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 10m
|
||||||
|
memory: 128Mi
|
||||||
|
probes:
|
||||||
|
liveness:
|
||||||
|
enabled: true
|
||||||
|
custom: true
|
||||||
|
spec:
|
||||||
|
exec:
|
||||||
|
command:
|
||||||
|
- /usr/bin/env
|
||||||
|
- bash
|
||||||
|
- -c
|
||||||
|
- node src/scripts/health-check.js
|
||||||
|
failureThreshold: 5
|
||||||
|
initialDelaySeconds: 60
|
||||||
|
periodSeconds: 10
|
||||||
|
successThreshold: 1
|
||||||
|
timeoutSeconds: 10
|
||||||
|
service:
|
||||||
|
main:
|
||||||
|
controller: main
|
||||||
|
ports:
|
||||||
|
http:
|
||||||
|
port: 80
|
||||||
|
targetPort: 5006
|
||||||
|
protocol: HTTP
|
||||||
|
persistence:
|
||||||
|
data:
|
||||||
|
forceRename: actual-data
|
||||||
|
storageClass: ceph-block
|
||||||
|
accessMode: ReadWriteOnce
|
||||||
|
size: 2Gi
|
||||||
|
retain: true
|
||||||
|
advancedMounts:
|
||||||
|
main:
|
||||||
|
main:
|
||||||
|
- path: /data
|
||||||
|
readOnly: false
|
||||||
@@ -9,7 +9,7 @@ audiobookshelf:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/advplyr/audiobookshelf
|
repository: ghcr.io/advplyr/audiobookshelf
|
||||||
tag: 2.31.0
|
tag: 2.30.0
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: TZ
|
- name: TZ
|
||||||
@@ -15,7 +15,7 @@ bazarr:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/linuxserver/bazarr
|
repository: ghcr.io/linuxserver/bazarr
|
||||||
tag: 1.5.3@sha256:ec11e988e8e13411c994a4d9f43ed9b97409aa92c1da54d9f23926c3da7c2032
|
tag: 1.5.3@sha256:2be164c02c0bb311b6c32e57d3d0ddc2813d524e89ab51a3408c1bf6fafecda5
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: TZ
|
- name: TZ
|
||||||
@@ -9,7 +9,7 @@ booklore:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/booklore-app/booklore
|
repository: ghcr.io/booklore-app/booklore
|
||||||
tag: v1.13.1
|
tag: v1.12.0
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: TZ
|
- name: TZ
|
||||||
@@ -23,6 +23,6 @@ dependencies:
|
|||||||
- name: cloudflared
|
- name: cloudflared
|
||||||
alias: cloudflared
|
alias: cloudflared
|
||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
version: 1.23.1
|
version: 1.23.0
|
||||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
|
||||||
appVersion: 4.100.2
|
appVersion: 4.100.2
|
||||||
@@ -9,7 +9,7 @@ code-server:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/linuxserver/code-server
|
repository: ghcr.io/linuxserver/code-server
|
||||||
tag: 4.106.3@sha256:aab9520fe923b2d93dccc2c806f3dc60649c2f4a2847fcd40c942227d0f1ae8f
|
tag: 4.106.2@sha256:a98afdbcb59559f11e5e8df284062e55da1076b2e470e13db4aae133ea82bad0
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: TZ
|
- name: TZ
|
||||||
@@ -24,10 +24,10 @@ dependencies:
|
|||||||
- name: cloudflared
|
- name: cloudflared
|
||||||
alias: cloudflared-directus
|
alias: cloudflared-directus
|
||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
version: 1.23.1
|
version: 1.23.0
|
||||||
- name: postgres-cluster
|
- name: postgres-cluster
|
||||||
alias: postgres-17-cluster
|
alias: postgres-17-cluster
|
||||||
version: 6.16.1
|
version: 6.16.0
|
||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
|
||||||
appVersion: 11.7.2
|
appVersion: 11.7.2
|
||||||
@@ -17,11 +17,11 @@ maintainers:
|
|||||||
- name: alexlebens
|
- name: alexlebens
|
||||||
dependencies:
|
dependencies:
|
||||||
- name: element-web
|
- name: element-web
|
||||||
version: 1.4.26
|
version: 1.4.24
|
||||||
repository: https://ananace.gitlab.io/charts
|
repository: https://ananace.gitlab.io/charts
|
||||||
- name: cloudflared
|
- name: cloudflared
|
||||||
alias: cloudflared
|
alias: cloudflared
|
||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
version: 1.23.1
|
version: 1.23.0
|
||||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
|
||||||
appVersion: v1.11.100
|
appVersion: v1.11.100
|
||||||
@@ -2,7 +2,7 @@ element-web:
|
|||||||
replicaCount: 1
|
replicaCount: 1
|
||||||
image:
|
image:
|
||||||
repository: vectorim/element-web
|
repository: vectorim/element-web
|
||||||
tag: v1.12.6
|
tag: v1.12.4
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
defaultServer:
|
defaultServer:
|
||||||
url: https://matrix.alexlebens.dev
|
url: https://matrix.alexlebens.dev
|
||||||
@@ -34,7 +34,7 @@ ephemera:
|
|||||||
flaresolverr:
|
flaresolverr:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/flaresolverr/flaresolverr
|
repository: ghcr.io/flaresolverr/flaresolverr
|
||||||
tag: v3.4.6
|
tag: v3.4.5
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: LOG_LEVEL
|
- name: LOG_LEVEL
|
||||||
@@ -24,10 +24,10 @@ dependencies:
|
|||||||
- name: cloudflared
|
- name: cloudflared
|
||||||
alias: cloudflared
|
alias: cloudflared
|
||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
version: 1.23.1
|
version: 1.23.0
|
||||||
- name: postgres-cluster
|
- name: postgres-cluster
|
||||||
alias: postgres-17-cluster
|
alias: postgres-17-cluster
|
||||||
version: 6.16.1
|
version: 6.16.0
|
||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
|
||||||
appVersion: 1.26.2
|
appVersion: 1.26.2
|
||||||
@@ -11,7 +11,7 @@ freshrss:
|
|||||||
runAsUser: 0
|
runAsUser: 0
|
||||||
image:
|
image:
|
||||||
repository: alpine
|
repository: alpine
|
||||||
tag: 3.23.0
|
tag: 3.22.2
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
command:
|
command:
|
||||||
- /bin/sh
|
- /bin/sh
|
||||||
@@ -35,7 +35,7 @@ freshrss:
|
|||||||
runAsUser: 0
|
runAsUser: 0
|
||||||
image:
|
image:
|
||||||
repository: alpine
|
repository: alpine
|
||||||
tag: 3.23.0
|
tag: 3.22.2
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
command:
|
command:
|
||||||
- /bin/sh
|
- /bin/sh
|
||||||
@@ -59,7 +59,7 @@ freshrss:
|
|||||||
runAsUser: 0
|
runAsUser: 0
|
||||||
image:
|
image:
|
||||||
repository: alpine
|
repository: alpine
|
||||||
tag: 3.23.0
|
tag: 3.22.2
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
command:
|
command:
|
||||||
- /bin/sh
|
- /bin/sh
|
||||||
@@ -9,7 +9,7 @@ home-assistant:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/home-assistant/home-assistant
|
repository: ghcr.io/home-assistant/home-assistant
|
||||||
tag: 2025.12.0
|
tag: 2025.11.3
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: TZ
|
- name: TZ
|
||||||
@@ -21,7 +21,7 @@ home-assistant:
|
|||||||
code-server:
|
code-server:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/linuxserver/code-server
|
repository: ghcr.io/linuxserver/code-server
|
||||||
tag: 4.106.3@sha256:aab9520fe923b2d93dccc2c806f3dc60649c2f4a2847fcd40c942227d0f1ae8f
|
tag: 4.106.2@sha256:a98afdbcb59559f11e5e8df284062e55da1076b2e470e13db4aae133ea82bad0
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: TZ
|
- name: TZ
|
||||||
@@ -22,6 +22,6 @@ dependencies:
|
|||||||
- name: cloudflared
|
- name: cloudflared
|
||||||
alias: cloudflared
|
alias: cloudflared
|
||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
version: 1.23.1
|
version: 1.23.0
|
||||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
|
||||||
appVersion: v1.2.0
|
appVersion: v1.2.0
|
||||||
@@ -20,7 +20,7 @@ dependencies:
|
|||||||
version: 4.4.0
|
version: 4.4.0
|
||||||
- name: postgres-cluster
|
- name: postgres-cluster
|
||||||
alias: postgres-17-cluster
|
alias: postgres-17-cluster
|
||||||
version: 6.16.1
|
version: 6.16.0
|
||||||
repository: oci://harbor.alexlebens.net/helm-charts
|
repository: oci://harbor.alexlebens.net/helm-charts
|
||||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
|
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
|
||||||
appVersion: v2.0.1
|
appVersion: v2.0.1
|
||||||
@@ -9,7 +9,7 @@ jellyfin:
|
|||||||
main:
|
main:
|
||||||
image:
|
image:
|
||||||
repository: ghcr.io/jellyfin/jellyfin
|
repository: ghcr.io/jellyfin/jellyfin
|
||||||
tag: 10.11.4
|
tag: 10.11.3
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: TZ
|
- name: TZ
|
||||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user