build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 #707
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish | |
| on: | |
| - push | |
| - workflow_dispatch | |
| jobs: | |
| check-dockerhub-token: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| HAS_DOCKERHUB_TOKEN: ${{ steps.gh-token.outputs.HAS_DOCKERHUB_TOKEN }} | |
| steps: | |
| - id: gh-token | |
| env: | |
| HAS_DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN != '' }} | |
| run: | | |
| echo "HAS_DOCKERHUB_TOKEN=$HAS_DOCKERHUB_TOKEN" >> $GITHUB_OUTPUT | |
| echo "HAS_DOCKERHUB_TOKEN=$HAS_DOCKERHUB_TOKEN" >> $GITHUB_STEP_SUMMARY | |
| lint: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.22" | |
| - name: install and run golangci-lint | |
| uses: golangci/golangci-lint-action@v6.0.1 | |
| with: | |
| version: v1.56.2 | |
| args: --timeout=3m | |
| test: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.22" | |
| - name: Download K8s envtest - local K8s cluster control plane | |
| run: | | |
| go install sigs.k8s.io/controller-runtime/tools/setup-envtest@latest | |
| mkdir -p local/envtest-bin/ | |
| setup-envtest use -p env 1.30.x --bin-dir local/envtest-bin > local/envtest-bin/env | |
| - name: Run Unit tests @ | |
| run: | | |
| source local/envtest-bin/env | |
| export KUBEBUILDER_ASSETS=$(pwd)/$KUBEBUILDER_ASSETS | |
| go test -race -covermode atomic -coverprofile=profile.cov ./... | |
| - name: Send coverage | |
| env: | |
| COVERALLS_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| go install github.com/mattn/goveralls@v0.0.11 | |
| goveralls -coverprofile=profile.cov -service=github | |
| test-helm: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Helm | |
| uses: azure/setup-helm@v4 | |
| with: | |
| version: v3.5.0 | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: 3.7 | |
| - name: Set up chart-testing | |
| uses: helm/chart-testing-action@v2.6.1 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.22" | |
| - uses: ko-build/setup-ko@v0.6 | |
| name: Setup ko | |
| env: | |
| KO_DOCKER_REPO: ko.local | |
| - name: Run ko publish | |
| run: | | |
| export REF=${{ github.ref}} | |
| export COMMIT=${{ github.sha}} | |
| ko publish ./cmd/kubelet-csr-approver/ --base-import-paths --platform=linux/amd64 --local | |
| - name: Run chart-testing (lint) | |
| run: ct lint --target-branch=main --check-version-increment=false --chart-dirs=charts | |
| - name: Create kind cluster | |
| uses: helm/kind-action@v1.10.0 | |
| with: | |
| cluster_name: kind | |
| - name: Load image | |
| run: kind load docker-image ko.local/kubelet-csr-approver:latest | |
| - name: Update chart values | |
| run: | | |
| sed -i \ | |
| -e 's|repository:.*|repository: ko.local/kubelet-csr-approver|g' \ | |
| -e 's|tag:.*|tag: latest|g' \ | |
| -e 's|providerRegex:.*|providerRegex: ^.+$|g' \ | |
| -e 's|maxExpirationSeconds:.*|maxExpirationSeconds: "86400"|g' \ | |
| -e 's|bypassDnsResolution:.*|bypassDnsResolution: true|g' \ | |
| -e 's|providerIpPrefixes:.*|providerIpPrefixes: [ '192.168.8.0/22', 'fc00::/7' ]|g' \ | |
| charts/kubelet-csr-approver/values.yaml | |
| cat charts/kubelet-csr-approver/values.yaml | |
| - name: Run chart-testing (install) | |
| run: ct install --target-branch=main --chart-dirs=charts | |
| publish-tagged: | |
| needs: | |
| - lint | |
| - test | |
| - check-dockerhub-token | |
| if: | | |
| startsWith(github.ref, 'refs/tags/v') && | |
| !github.event.pull_request.head.repo.fork && | |
| needs.check-dockerhub-token.outputs.HAS_DOCKERHUB_TOKEN == 'true' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.22" | |
| - uses: ko-build/setup-ko@v0.6 | |
| name: Setup ko | |
| - name: Login to DockerHub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: postfinance | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Run ko publish for docker.io | |
| env: | |
| KO_DOCKER_REPO: docker.io/postfinance | |
| run: | | |
| export REF=${{ github.ref}} | |
| export COMMIT=${{ github.sha}} | |
| export TAG=$(echo ${{ github.ref }} | cut -d "/" -f 3 - ) | |
| ko publish ./cmd/kubelet-csr-approver/ --base-import-paths --platform=linux/amd64,linux/arm64,linux/arm --tags $TAG | |
| ko publish ./cmd/kubelet-csr-approver/ --base-import-paths --platform=linux/amd64,linux/arm64,linux/arm | |
| - name: Log in to ghcr.io registry | |
| run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u $ --password-stdin | |
| - name: Run ko publish for ghcr.io/postfinance | |
| env: | |
| KO_DOCKER_REPO: ghcr.io/postfinance | |
| run: | | |
| export REF=${{ github.ref}} | |
| export COMMIT=${{ github.sha}} | |
| export TAG=$(echo ${{ github.ref }} | cut -d "/" -f 3 - ) | |
| ko publish ./cmd/kubelet-csr-approver/ --base-import-paths --platform=linux/amd64,linux/arm64,linux/arm --tags $TAG | |
| ko publish ./cmd/kubelet-csr-approver/ --base-import-paths --platform=linux/amd64,linux/arm64,linux/arm | |
| publish-helm-charts: | |
| needs: | |
| - lint | |
| - test-helm | |
| - check-dockerhub-token | |
| if: | | |
| startsWith(github.ref, 'refs/tags/v') && | |
| !github.event.pull_request.head.repo.fork && | |
| needs.check-dockerhub-token.outputs.HAS_DOCKERHUB_TOKEN == 'true' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.22" | |
| - name: Install Helm | |
| uses: azure/setup-helm@v4 | |
| with: | |
| version: v3.5.0 | |
| - name: Prepare version | |
| run: | | |
| export TAG=$(echo ${{ github.ref }} | cut -d '/' -f 3 - ) | |
| export VERSION=${TAG#v} | |
| echo TAG=${TAG} >> $GITHUB_ENV | |
| echo VERSION=${VERSION} >> $GITHUB_ENV | |
| echo "TAG: ${TAG}" | |
| echo "VERSION: ${VERSION}" | |
| - name: Run chart-releaser | |
| uses: stefanprodan/helm-gh-pages@v1.7.0 | |
| with: | |
| token: "${{ secrets.GITHUB_TOKEN }}" | |
| app_version: "${{env.TAG}}" | |
| chart_version: "${{env.VERSION}}" | |
| publish-untagged: | |
| needs: | |
| - lint | |
| - test | |
| - check-dockerhub-token | |
| if: | | |
| github.ref == 'refs/heads/main' && | |
| !github.event.pull_request.head.repo.fork && | |
| needs.check-dockerhub-token.outputs.HAS_DOCKERHUB_TOKEN == 'true' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.22" | |
| - uses: ko-build/setup-ko@v0.6 | |
| name: Setup ko | |
| - name: Login to DockerHub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: postfinance | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Run ko publish for docker.io | |
| env: | |
| KO_DOCKER_REPO: docker.io/postfinance | |
| run: | | |
| export REF=${{ github.ref}} | |
| export COMMIT=${{ github.sha}} | |
| ko publish ./cmd/kubelet-csr-approver/ --base-import-paths --platform=linux/amd64,linux/arm64,linux/arm -t dev | |
| - name: Log in to ghcr.io registry | |
| run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u $ --password-stdin | |
| - name: Run ko publish for ghcr.io/postfinance | |
| env: | |
| KO_DOCKER_REPO: ghcr.io/postfinance | |
| run: | | |
| export REF=${{ github.ref}} | |
| export COMMIT=${{ github.sha}} | |
| ko publish ./cmd/kubelet-csr-approver/ --base-import-paths --platform=linux/amd64,linux/arm64,linux/arm -t dev | |
| publish-feature: | |
| needs: | |
| - lint | |
| - test | |
| - check-dockerhub-token | |
| if: | | |
| startsWith(github.ref, 'refs/heads/feat') && | |
| !github.event.pull_request.head.repo.fork && | |
| needs.check-dockerhub-token.outputs.HAS_DOCKERHUB_TOKEN == 'true' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.22" | |
| - name: Login to DockerHub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: postfinance | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - uses: ko-build/setup-ko@v0.6 | |
| name: Setup ko | |
| - name: Run ko publish for docker.io | |
| env: | |
| KO_DOCKER_REPO: docker.io/postfinance | |
| run: | | |
| export REF=${{ github.ref}} | |
| export COMMIT=${{ github.sha}} | |
| export FEAT=$(echo $REF | awk -F 'feat/' '{print $2}') | |
| ko publish ./cmd/kubelet-csr-approver/ --base-import-paths --platform=linux/amd64,linux/arm64,linux/arm -t $FEAT | |
| - name: Log in to ghcr.io registry | |
| run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u $ --password-stdin | |
| - name: Run ko publish for ghcr.io/postfinance | |
| env: | |
| KO_DOCKER_REPO: ghcr.io/postfinance | |
| run: | | |
| export REF=${{ github.ref}} | |
| export COMMIT=${{ github.sha}} | |
| export FEAT=$(echo $REF | awk -F 'feat/' '{print $2}') | |
| ko publish ./cmd/kubelet-csr-approver/ --base-import-paths --platform=linux/amd64,linux/arm64,linux/arm -t $FEAT |