Add GitHub Actions to publish helm chart (#257)

* Add chart workflows (#1) * Add chart workflows * Fix publishing step in CI Signed-off-by: David Young <[email protected]> * Update CI on push-to-master (#3) * Put helm installation step in the correct CI job Signed-off-by: David Young <[email protected]> * Put helm installation step in the correct CI job (#4) * Update on-push-master-publish-chart.yml * Remove references to certmanager dependency Signed-off-by: David Young <[email protected]> * Add ability to customize kube-rbac-proxy image Signed-off-by: David Young <[email protected]> * Only install cert-manager if we're going to spin up KinD Signed-off-by: David Young <[email protected]>
2021-01-24 15:37:01 +09:00
parent ace95d72ab
commit 1127c447c4
12 changed files with 275 additions and 5 deletions
@@ -0,0 +1,4 @@
+# This file defines the config for "ct" (chart tester) used by the helm linting GitHub workflow
+lint-conf: charts/.ci/lint-config.yaml
+chart-repos:
+  - jetstack=https://charts.jetstack.io
@@ -0,0 +1,6 @@
+rules:
+  # One blank line is OK
+  empty-lines: 
+    max-start: 1
+    max-end: 1
+    max: 1
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+docker run --rm -it -w /repo -v $(pwd):/repo quay.io/helmpack/chart-testing ct lint --all --config charts/.ci/ct-config.yaml
@@ -0,0 +1,15 @@
+#!/bin/bash
+
+
+for chart in `ls charts`;
+do
+helm template --values charts/$chart/ci/ci-values.yaml charts/$chart | kube-score score - \
+    --ignore-test pod-networkpolicy \
+    --ignore-test deployment-has-poddisruptionbudget \
+    --ignore-test deployment-has-host-podantiaffinity \
+    --ignore-test pod-probes \
+    --ignore-test container-image-tag \
+    --enable-optional-test container-security-context-privileged \
+    --enable-optional-test container-security-context-readonlyrootfilesystem \
+    --ignore-test container-security-context
+done