temporal-worker-controller/.github/workflows/helm-validate.yml at e4f0bfe9b9be1c25c34b1f13690694dcea432c92 · temporalio/temporal-worker-controller · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
name: Helm Chart Validation

on:
  push:
    branches: [main]
  pull_request:

permissions:
  contents: read

jobs:
  helm-lint:
    name: Lint Helm Chart
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install Helm
        uses: azure/setup-helm@v3

      - name: Build chart dependencies
        run: helm repo add jetstack https://charts.jetstack.io && helm dependency build helm/temporal-worker-controller

      - name: Lint chart
        run: helm lint --strict helm/temporal-worker-controller

  helm-template:
    name: Template Helm Chart
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install Helm
        uses: azure/setup-helm@v3

      - name: Build chart dependencies
        run: helm repo add jetstack https://charts.jetstack.io && helm dependency build helm/temporal-worker-controller

      - name: Template with default values
        run: helm template test-release helm/temporal-worker-controller

      - name: Template with namespace creation
        run: |
          helm template test-release helm/temporal-worker-controller \
            --set namespace.create=true

      - name: Template with auth proxy disabled
        run: |
          helm template test-release helm/temporal-worker-controller \
            --set metrics.disableAuth=true

  helm-lint-crds:
    name: Lint CRDs Chart
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install Helm
        uses: azure/setup-helm@v3

      - name: Lint CRDs chart
        run: helm lint --strict helm/temporal-worker-controller-crds

  helm-template-crds:
    name: Template CRDs Chart
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install Helm
        uses: azure/setup-helm@v3

      - name: Template CRDs chart
        run: helm template test-release helm/temporal-worker-controller-crds

  helm-check-rbac:
    name: Check Helm RBAC wasn't manually updated
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-go@v5
        with:
          go-version-file: go.mod

      - name: Regenerate and diff
        run: make manifests && git diff --exit-code helm/temporal-worker-controller/templates/rbac.yaml

  helm-validate-succeed:
    name: All Helm Validations Succeed
    needs:
      - helm-lint
      - helm-template
      - helm-lint-crds
      - helm-template-crds
      - helm-check-rbac
    runs-on: ubuntu-latest
    if: always()
    env:
      RESULTS: ${{ toJSON(needs.*.result) }}
    steps:
      - name: Check results
        run: |
          if [[ -n $(echo "$RESULTS" | jq '.[] | select (. != "success")') ]]; then
            exit 1
          fi