Files
auricom-home-cluster/.github/workflows/kubeconform.yaml
feisar-bot 2886a717dc ⬆️ Update actions/checkout action to v3.5.2
| datasource  | package          | from   | to     |
| ----------- | ---------------- | ------ | ------ |
| github-tags | actions/checkout | v3.5.1 | v3.5.2 |
2023-04-13 13:22:11 +00:00

50 lines
1.3 KiB
YAML

---
name: "Kubeconform"
on:
workflow_dispatch:
push:
branches: ["main"]
paths: ["kubernetes/**"]
pull_request:
branches: ["main"]
paths: ["kubernetes/**"]
env:
KUBERNETES_DIR: ./kubernetes
SCHEMA_DIR: /home/runner/.datree/crdSchemas
jobs:
kubeconform:
name: Kubeconform
runs-on: ubuntu-latest
steps:
- name: Generate Token
uses: tibdex/github-app-token@b62528385c34dbc9f38e5f4225ac829252d1ea92 # v1.8.0
id: generate-token
with:
app_id: "${{ secrets.BOT_APP_ID }}"
private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"
- name: Checkout
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
with:
token: "${{ steps.generate-token.outputs.token }}"
- name: Setup Homebrew
uses: Homebrew/actions/setup-homebrew@master
- name: Setup Tools
run: |
brew install fluxcd/tap/flux kubeconform kustomize
- name: Download CRDs
run: |
mkdir -p ${{ env.SCHEMA_DIR }}
flux pull artifact oci://ghcr.io/onedr0p/kubernetes-schemas-oci:latest \
--output=${{ env.SCHEMA_DIR }}
- name: Run kubeconform
run: |
bash ./.github/scripts/kubeconform.sh ${{ env.KUBERNETES_DIR }} ${{ env.SCHEMA_DIR }}