Files
auricom-home-cluster/.github/workflows/kubeconform.yaml
feisar-bot 8643477079 ⬆️ Update tibdex/github-app-token action to v2.0.0
| datasource  | package                 | from   | to     |
| ----------- | ----------------------- | ------ | ------ |
| github-tags | tibdex/github-app-token | v1.9.0 | v2.0.0 |
2023-09-10 12:26:59 +02:00

48 lines
1.3 KiB
YAML

---
name: "Kubeconform"
on:
workflow_dispatch:
pull_request:
branches: ["main"]
paths: ["kubernetes/**"]
env:
KUBERNETES_DIR: ./kubernetes
SCHEMA_DIR: /home/runner/.datree/crdSchemas
jobs:
kubeconform:
name: Kubeconform
runs-on: ubuntu-latest
steps:
- name: Generate Token
uses: tibdex/github-app-token@0914d50df753bbc42180d982a6550f195390069f # v2.0.0
id: generate-token
with:
app_id: "${{ secrets.BOT_APP_ID }}"
private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"
- name: Checkout
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
with:
token: "${{ steps.generate-token.outputs.token }}"
- name: Setup Homebrew
uses: Homebrew/actions/setup-homebrew@master
- name: Setup Tools
shell: bash
run: brew install fluxcd/tap/flux kubeconform kustomize
- name: Download CRDs
shell: bash
run: |
mkdir -p ${{ env.SCHEMA_DIR }}
flux pull artifact oci://ghcr.io/auricom/manifests/kubernetes-schemas:latest \
--output=${{ env.SCHEMA_DIR }}
- name: Run kubeconform
shell: bash
run: bash ./.github/scripts/kubeconform.sh ${{ env.KUBERNETES_DIR }} ${{ env.SCHEMA_DIR }}