sign
This commit is contained in:
parent
618ae173b6
commit
11a9400d76
1 changed files with 30 additions and 31 deletions
|
@ -2,23 +2,23 @@ name: generate-chart
|
||||||
|
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
# tags:
|
tags:
|
||||||
# - "*"
|
- "*"
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
generate-chart-publish:
|
generate-chart-publish:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@v3
|
||||||
# - name: install tools
|
- name: install tools
|
||||||
# run: |
|
run: |
|
||||||
# apt update -y
|
apt update -y
|
||||||
# apt install -y curl
|
apt install -y curl
|
||||||
# curl https://baltocdn.com/helm/signing.asc | gpg --dearmor | tee /usr/share/keyrings/helm.gpg > /dev/null
|
curl https://baltocdn.com/helm/signing.asc | gpg --dearmor | tee /usr/share/keyrings/helm.gpg > /dev/null
|
||||||
# echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/helm.gpg] https://baltocdn.com/helm/stable/debian/ all main" | tee /etc/apt/sources.list.d/helm-stable-debian.list
|
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/helm.gpg] https://baltocdn.com/helm/stable/debian/ all main" | tee /etc/apt/sources.list.d/helm-stable-debian.list
|
||||||
# apt update -y
|
apt update -y
|
||||||
# apt install -y python helm python3-pip apt-transport-https
|
apt install -y python helm python3-pip apt-transport-https
|
||||||
# pip install awscli
|
pip install awscli
|
||||||
|
|
||||||
- name: Import GPG key
|
- name: Import GPG key
|
||||||
id: import_gpg
|
id: import_gpg
|
||||||
|
@ -30,24 +30,23 @@ jobs:
|
||||||
|
|
||||||
- name: package chart
|
- name: package chart
|
||||||
run: |
|
run: |
|
||||||
apk add --no-cache gnupg
|
# FIXME: use upstream after https://github.com/technosophos/helm-gpg/issues/1 is solved
|
||||||
gpg -K
|
helm plugin install https://github.com/pat-s/helm-gpg
|
||||||
helm dependency update
|
helm dependency update
|
||||||
helm package --sign --key 'Gitea' --keyring ~/.gnupg/secring.gpg --version "${GITHUB_REF#refs/tags/v}" ./
|
helm package --version "${GITHUB_REF#refs/tags/v}" ./
|
||||||
# mkdir gitea
|
helm gpg sign "gitea-${GITHUB_REF#refs/tags/v}.tgz"
|
||||||
# mv gitea*.tgz gitea/
|
mkdir gitea
|
||||||
# curl -L -o gitea/index.yaml https://dl.gitea.com/charts/index.yaml
|
mv gitea*.tgz gitea/
|
||||||
# helm repo index gitea/ --url https://dl.gitea.io/charts --merge gitea/index.yaml
|
curl -L -o gitea/index.yaml https://dl.gitea.com/charts/index.yaml
|
||||||
# - name: aws credential configure
|
helm repo index gitea/ --url https://dl.gitea.io/charts --merge gitea/index.yaml
|
||||||
# uses: https://github.com/aws-actions/configure-aws-credentials@v2
|
|
||||||
# with:
|
- name: aws credential configure
|
||||||
# aws-access-key-id: ${{ secrets.AWS_KEY_ID }}
|
uses: https://github.com/aws-actions/configure-aws-credentials@v2
|
||||||
# aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
with:
|
||||||
# aws-region: ${{ secrets.AWS_REGION }}
|
aws-access-key-id: ${{ secrets.AWS_KEY_ID }}
|
||||||
# - name: install aws cli
|
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
||||||
# run: |
|
aws-region: ${{ secrets.AWS_REGION }}
|
||||||
# apt update -y &&
|
|
||||||
# pip install awscli
|
- name: Copy files to S3 and clear cache
|
||||||
# - name: Copy files to S3 and clear cache
|
run: |
|
||||||
# run: |
|
aws s3 sync gitea/ s3://${{ secrets.AWS_S3_BUCKET}}/charts/
|
||||||
# aws s3 sync gitea/ s3://${{ secrets.AWS_S3_BUCKET}}/charts/
|
|
||||||
|
|
Loading…
Reference in a new issue