bb9a069c06
* Add workflow hashicorp/vault-helm/update-helm-charts-index * Add workflow hashicorp/vault-helm/manual-trigger-update-helm-charts-index * SHA-pin all 3rd-party actions * Restrict workflow permissions * Add actionslint * Add dependabot * Add CODEOWNERS * Replace deprecated references * fixup: First pass at cleaning up update-helm-charts-index * fixup: move to self-hosted for access to vault * fixup: remove vault bits, correct GHA action * fixup: Remove manual invocation * fixup: update CODEOWNERS * Update CODEOWNERS * Fix CODEOWNERS syntax * Use common workflow for action lint * fixup: address review feedback * fixup: codeowners set * Apply suggestions from code review Co-authored-by: Alvin Huang <17609145+alvin-huang@users.noreply.github.com> * fixup: remove slack status action * fixup: more clear error message and correct syntax * fixup: limit actionlint trigger to GHA paths * fixup: glob * fixup: incorporate emily's superior syntax --------- Co-authored-by: Daniel Kimsey <daniel.kimsey@hashicorp.com> Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com> Co-authored-by: Daniel Kimsey <90741+dekimsey@users.noreply.github.com> Co-authored-by: Alvin Huang <17609145+alvin-huang@users.noreply.github.com>
40 lines
1.4 KiB
YAML
40 lines
1.4 KiB
YAML
name: update-helm-charts-index
|
|
on:
|
|
push:
|
|
tags:
|
|
- 'v[0-9]+.[0-9]+.[0-9]+'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
update-helm-charts-index:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
|
|
- name: verify Chart version matches tag version
|
|
run: |-
|
|
export TAG=${{ github.ref_name }}
|
|
git_tag=$(echo "${TAG#v}")
|
|
chart_tag=$(yq r Chart.yaml version)
|
|
if [ "${git_tag}" != "${chart_tag}" ]; then
|
|
echo "chart version (${chart_tag}) did not match git version (${git_tag})"
|
|
exit 1
|
|
fi
|
|
- name: update helm-charts index
|
|
id: update
|
|
env:
|
|
GH_TOKEN: ${{ secrets.HELM_CHARTS_GITHUB_TOKEN }}
|
|
run: |-
|
|
gh workflow run publish-charts.yml \
|
|
--repo hashicorp/helm-charts \
|
|
--ref main \
|
|
-f SOURCE_TAG="${{ github.ref_name }}" \
|
|
-f SOURCE_REPO="${{ github.repository }}"
|
|
- uses: hashicorp/actions-slack-status@v1
|
|
if: ${{always()}}
|
|
with:
|
|
success-message: "vault-helm charts index update triggered successfully. View the run <https://github.com/hashicorp/helm-charts/actions/workflows/publish-charts.yml|here>."
|
|
failure-message: "vault-helm charts index update trigger failed."
|
|
status: ${{job.status}}
|
|
slack-webhook-url: ${{secrets.SLACK_WEBHOOK_URL}}
|