Compare commits
1 Commits
renovate/g
...
0bb4fc2a3e
| Author | SHA1 | Date | |
|---|---|---|---|
|
0bb4fc2a3e |
@@ -8,22 +8,14 @@ jobs:
|
|||||||
kubeconform:
|
kubeconform:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container:
|
container:
|
||||||
image: ghcr.io/yannh/kubeconform:v0.7.0-alpine
|
image: docker.io/archlinux/archlinux:latest
|
||||||
steps:
|
steps:
|
||||||
|
- name: Setup environment
|
||||||
- name: Install dependencies
|
|
||||||
run: |
|
run: |
|
||||||
apk add --no-cache \
|
pacman -Syu --noconfirm kubeconform git yq nodejs npm
|
||||||
yq \
|
|
||||||
findutils \
|
|
||||||
curl \
|
|
||||||
jq \
|
|
||||||
npm \
|
|
||||||
nodejs \
|
|
||||||
bash
|
|
||||||
|
|
||||||
- name: Checkout code
|
- name: Checkout code
|
||||||
uses: actions/checkout@v6
|
uses: actions/checkout@v4
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
|
||||||
@@ -34,62 +26,55 @@ jobs:
|
|||||||
- default
|
- default
|
||||||
- "https://raw.githubusercontent.com/datreeio/CRDs-catalog/refs/heads/main/{{ .ResourceKind }}_{{ .ResourceAPIVersion }}.json"
|
- "https://raw.githubusercontent.com/datreeio/CRDs-catalog/refs/heads/main/{{ .ResourceKind }}_{{ .ResourceAPIVersion }}.json"
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
- name: Validate Manifests
|
- name: Validate Manifests
|
||||||
shell: bash
|
|
||||||
run: |
|
run: |
|
||||||
# Define schema mappings
|
# Create a cache directory for schemas
|
||||||
declare -A SCHEMA_MAP=(
|
mkdir -p /tmp/kubeconform-cache
|
||||||
["HelmRelease"]="helm.toolkit.fluxcd.io/helmrelease_v2.json"
|
|
||||||
["HelmRepository"]="source.toolkit.fluxcd.io/helmrepository_v1.json"
|
|
||||||
["L2Advertisement"]="metallb.io/l2advertisement_v1beta1.json"
|
|
||||||
["IPAddressPool"]="metallb.io/ipaddresspool_v1beta1.json"
|
|
||||||
["SealedSecret"]="bitnami.com/sealedsecret_v1alpha1.json"
|
|
||||||
)
|
|
||||||
|
|
||||||
# Create cache directory
|
# Validate manifests with proper schema resolution
|
||||||
export KUBECONFORM_CACHE_DIR="/tmp/kubeconform-cache"
|
find . -type f \( -name "*.yml" \) \
|
||||||
mkdir -p "$KUBECONFORM_CACHE_DIR"
|
-not -path "./.gitea/*" \
|
||||||
|
-not -path "./clusters/default/system-upgrade/*" \
|
||||||
# Exit code tracking
|
-exec sh -c '
|
||||||
EXIT_CODE=0
|
for file do
|
||||||
|
echo "=== Validating: $file ==="
|
||||||
# Process all YAML files
|
if yq -e "select(.kind == \"HelmRelease\")" "$file" >/dev/null 2>&1; then
|
||||||
while IFS= read -r file; do
|
echo "Found HelmRelease - using fluxcd schema"
|
||||||
echo "=== Validating: $file ==="
|
kubeconform \
|
||||||
|
-schema-location "https://raw.githubusercontent.com/datreeio/CRDs-catalog/refs/heads/main/helm.toolkit.fluxcd.io/helmrelease_v2.json" \
|
||||||
# Skip excluded paths
|
-output json \
|
||||||
if [[ "$file" == *".gitea/"* ]] || [[ "$file" == *"clusters/default/system-upgrade/"* ]]; then
|
"$file"
|
||||||
echo "Skipping excluded file"
|
elif yq -e "select(.kind == \"HelmRepository\")" "$file" >/dev/null 2>&1; then
|
||||||
continue
|
echo "Found HelmRepository - using fluxcd schema"
|
||||||
fi
|
kubeconform \
|
||||||
|
-schema-location "https://raw.githubusercontent.com/datreeio/CRDs-catalog/refs/heads/main/source.toolkit.fluxcd.io/helmrepository_v1.json" \
|
||||||
# Detect resource kind
|
-output json \
|
||||||
KIND=$(yq -r '.kind // ""' "$file" 2>/dev/null || echo "")
|
"$file"
|
||||||
|
elif yq -e "select(.kind == \"L2Advertisement\")" "$file" >/dev/null 2>&1; then
|
||||||
if [[ -n "$KIND" && -n "${SCHEMA_MAP[$KIND]}" ]]; then
|
echo "Found L2Advertisement - using metallb schema"
|
||||||
echo "Found $KIND - using custom schema"
|
kubeconform \
|
||||||
SCHEMA_URL="https://raw.githubusercontent.com/datreeio/CRDs-catalog/refs/heads/main/${SCHEMA_MAP[$KIND]}"
|
-schema-location "https://raw.githubusercontent.com/datreeio/CRDs-catalog/refs/heads/main/metallb.io/l2advertisement_v1beta1.json" \
|
||||||
|
-output json \
|
||||||
if ! /kubeconform \
|
"$file"
|
||||||
-schema-location "$SCHEMA_URL" \
|
elif yq -e "select(.kind == \"IPAddressPool\")" "$file" >/dev/null 2>&1; then
|
||||||
-cache "$KUBECONFORM_CACHE_DIR" \
|
echo "Found IPAddressPool - using metallb schema"
|
||||||
-output json \
|
kubeconform \
|
||||||
"$file"; then
|
-schema-location "https://raw.githubusercontent.com/datreeio/CRDs-catalog/refs/heads/main/metallb.io/ipaddresspool_v1beta1.json" \
|
||||||
EXIT_CODE=1
|
-output json \
|
||||||
fi
|
"$file"
|
||||||
else
|
elif yq -e "select(.kind == \"SealedSecret\")" "$file" >/dev/null 2>&1; then
|
||||||
echo "Validating with default schemas"
|
echo "Found SealedSecret - using bitnami schema"
|
||||||
if ! /kubeconform \
|
kubeconform \
|
||||||
-schema-location default \
|
-schema-location "https://raw.githubusercontent.com/datreeio/CRDs-catalog/refs/heads/main/bitnami.com/sealedsecret_v1alpha1.json" \
|
||||||
-cache "$KUBECONFORM_CACHE_DIR" \
|
-output json \
|
||||||
-output json \
|
"$file"
|
||||||
"$file"; then
|
else
|
||||||
EXIT_CODE=1
|
echo "Validating with default schemas"
|
||||||
fi
|
kubeconform \
|
||||||
fi
|
-schema-location default \
|
||||||
|
-output json \
|
||||||
echo ""
|
"$file"
|
||||||
done < <(find . -type f \( -name "*.yml" \) -print)
|
fi
|
||||||
|
done
|
||||||
exit $EXIT_CODE
|
' sh {} +
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ jobs:
|
|||||||
renovate:
|
renovate:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container:
|
container:
|
||||||
image: renovate/renovate:42.26.11
|
image: renovate/renovate:42.30.4
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
|
|||||||
1
.gitignore
vendored
1
.gitignore
vendored
@@ -1 +0,0 @@
|
|||||||
/tmp-pod.yml
|
|
||||||
@@ -6,8 +6,8 @@ metadata:
|
|||||||
namespace: git-ops
|
namespace: git-ops
|
||||||
spec:
|
spec:
|
||||||
encryptedData:
|
encryptedData:
|
||||||
TOKEN: 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
|
TOKEN: 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
|
||||||
URL: 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
|
URL: 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
|
||||||
template:
|
template:
|
||||||
metadata:
|
metadata:
|
||||||
name: gitea-act-runner-secret
|
name: gitea-act-runner-secret
|
||||||
|
|||||||
@@ -67,7 +67,7 @@ spec:
|
|||||||
- name: runner-data
|
- name: runner-data
|
||||||
mountPath: /data
|
mountPath: /data
|
||||||
- name: daemon
|
- name: daemon
|
||||||
image: docker:29.1.1-dind
|
image: docker:29.0.4-dind
|
||||||
env:
|
env:
|
||||||
- name: DOCKER_TLS_CERTDIR
|
- name: DOCKER_TLS_CERTDIR
|
||||||
value: /certs
|
value: /certs
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ spec:
|
|||||||
chart:
|
chart:
|
||||||
spec:
|
spec:
|
||||||
chart: gpu-operator
|
chart: gpu-operator
|
||||||
version: "v25.10.1"
|
version: "v25.3.2"
|
||||||
sourceRef:
|
sourceRef:
|
||||||
kind: HelmRepository
|
kind: HelmRepository
|
||||||
name: nvidia
|
name: nvidia
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ spec:
|
|||||||
chart:
|
chart:
|
||||||
spec:
|
spec:
|
||||||
chart: prometheus
|
chart: prometheus
|
||||||
version: "27.49.0"
|
version: "27.48.0"
|
||||||
sourceRef:
|
sourceRef:
|
||||||
kind: HelmRepository
|
kind: HelmRepository
|
||||||
name: prometheus-community
|
name: prometheus-community
|
||||||
|
|||||||
@@ -66,7 +66,7 @@ spec:
|
|||||||
- name: postgres-data
|
- name: postgres-data
|
||||||
mountPath: /var/lib/postgresql
|
mountPath: /var/lib/postgresql
|
||||||
- name: inv-companion
|
- name: inv-companion
|
||||||
image: quay.io/invidious/invidious-companion@sha256:a9de6b495fcad1de80d18b4452409e3f328af1f93cd0729c18fc833012efa9c8
|
image: quay.io/invidious/invidious-companion@sha256:9c6039ebe1691e70c76aefd207b1ea2784a4d8d1a7c531cdb18e6d1317c468e9
|
||||||
restartPolicy: Always
|
restartPolicy: Always
|
||||||
env:
|
env:
|
||||||
- name: SERVER_SECRET_KEY
|
- name: SERVER_SECRET_KEY
|
||||||
|
|||||||
@@ -17,7 +17,7 @@ spec:
|
|||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: pulse
|
- name: pulse
|
||||||
image: rcourtman/pulse:4.36.0
|
image: rcourtman/pulse:4.35.0
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: pulse-data
|
- name: pulse-data
|
||||||
mountPath: /data
|
mountPath: /data
|
||||||
|
|||||||
@@ -18,7 +18,7 @@ spec:
|
|||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: searxng
|
- name: searxng
|
||||||
image: searxng/searxng@sha256:6dd0dffc05a75d92bbacd858953b4e93b8f709403c3fb1fb8a33ca8fd02e40a4
|
image: searxng/searxng@sha256:faa7118f9167c2c1e09a3fbb9bd87eee0905d76456d297e62e815646afc97037
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 8080
|
- containerPort: 8080
|
||||||
env:
|
env:
|
||||||
|
|||||||
@@ -5,8 +5,7 @@
|
|||||||
],
|
],
|
||||||
"prHourlyLimit": 0,
|
"prHourlyLimit": 0,
|
||||||
"ignorePaths": [
|
"ignorePaths": [
|
||||||
"**/disabled/**",
|
"**/disabled/**"
|
||||||
"**/.gitea/workflows/**"
|
|
||||||
],
|
],
|
||||||
"flux": {
|
"flux": {
|
||||||
"managerFilePatterns": [
|
"managerFilePatterns": [
|
||||||
|
|||||||
Reference in New Issue
Block a user