feat(container): update external-secrets group ( 2.7.0 → 2.8.0 ) #1976
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json | |
| name: "k8s - Flux Diff" | |
| on: | |
| pull_request: | |
| branches: ["main"] | |
| paths: ["kubernetes/**"] | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.number || github.ref }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| jobs: | |
| filter-changes: | |
| name: Filter Changes | |
| runs-on: ubuntu-latest | |
| outputs: | |
| changed-files: ${{ steps.changed-files.outputs.changed_files }} | |
| steps: | |
| - name: Get changed files | |
| id: changed-files | |
| uses: bjw-s-labs/action-changed-files@v0.6.0 | |
| with: | |
| patterns: |- | |
| kubernetes/**/* | |
| flate-diff: | |
| name: Flate Diff | |
| runs-on: ubuntu-latest | |
| needs: filter-changes | |
| if: ${{ needs.filter-changes.outputs.changed-files != '[]' }} | |
| env: | |
| FLATE_PATH: ./kubernetes/flux | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v7 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Setup flate | |
| uses: home-operations/flate/action@v0.4.10 | |
| with: | |
| cache: true | |
| - name: Test | |
| run: flate test all --allow-missing-secrets | |
| - name: Diff | |
| id: diff | |
| run: | | |
| diff=$(flate diff all --allow-missing-secrets) | |
| { | |
| echo 'diff<<EOF' | |
| echo "${diff}" | |
| echo 'EOF' | |
| } >> "${GITHUB_OUTPUT}" | |
| - name: Post PR comment | |
| if: ${{ steps.diff.outputs.diff != '' }} | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| MARKER: "<!-- flate-diff -->" | |
| DIFF_CONTENT: ${{ steps.diff.outputs.diff }} | |
| run: | | |
| DIFF_LENGTH=${#DIFF_CONTENT} | |
| PR_NUMBER=${{ github.event.pull_request.number }} | |
| RUN_URL="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" | |
| if [[ ${DIFF_LENGTH} -gt 60000 ]]; then | |
| BODY=$(printf '%s\n<details open>\n <summary>Changes (%d chars — too large to post)</summary>\n\nDiff exceeds the GitHub comment size limit. View the [workflow run](%s) for full output.\n</details>' \ | |
| "${MARKER}" "${DIFF_LENGTH}" "${RUN_URL}") | |
| else | |
| BODY=$(printf '%s\n<details open>\n <summary>Changes</summary>\n\n```diff\n%s\n```\n\n</details>' \ | |
| "${MARKER}" "${DIFF_CONTENT}") | |
| fi | |
| COMMENT_ID=$(gh api "repos/${{ github.repository }}/issues/${PR_NUMBER}/comments" \ | |
| --jq --arg marker "${MARKER}" '.[] | select(.body | startswith($marker)) | .id' \ | |
| | head -1) | |
| if [[ -n "${COMMENT_ID}" ]]; then | |
| gh api --method PATCH "repos/${{ github.repository }}/issues/comments/${COMMENT_ID}" \ | |
| -f body="${BODY}" | |
| else | |
| gh api --method POST "repos/${{ github.repository }}/issues/${PR_NUMBER}/comments" \ | |
| -f body="${BODY}" | |
| fi |