From 434e91144be443e100329fcd8f4d0ff6d930bc14 Mon Sep 17 00:00:00 2001
From: alex-local <alex@example.local>
Date: Fri, 12 Sep 2025 11:59:03 +0200
Subject: [PATCH] ci: add lint, kustomize-validate, release jobs

---
 .github/workflows/ci.yml | 433 +--------------------------------------
 1 file changed, 2 insertions(+), 431 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3d43c4d..79df435 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,187 +6,10 @@ on:
   pull_request:
     branches: [ main, master, devel ]
 
-jobs:
-  lint-and-validate:
-    name: Lint, dry-run and validate
-    runs-on: ${{ matrix.os }}
-    strategy:
-      matrix:
-        os: [ubuntu-22.04, ubuntu-20.04]
-    timeout-minutes: 30
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Install apt packages
-        run: |
-          sudo apt-get update -y
-          sudo apt-get install -y shellcheck yamllint gettext-base curl ca-certificates
-
-      - name: Install kustomize
-        run: |
-          set -e
-          if ! command -v kustomize >/dev/null 2>&1; then
-            curl -sSL "https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash -s 5.0.0
-            sudo mv kustomize /usr/local/bin/kustomize || true
-          fi
-
-      - name: Install kubectl
-        run: |
-          set -e
-          if ! command -v kubectl >/dev/null 2>&1; then
-            KUBECTL_VERSION=$(curl -L -s https://dl.k8s.io/release/stable.txt)
-            curl -sSL -o kubectl https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl
-            chmod +x kubectl
-            sudo mv kubectl /usr/local/bin/kubectl
-          fi
-
-      - name: Shellcheck - scan shell scripts
-        run: |
-          set -e
-          files=$(git ls-files 'awx-local-setup/*.sh' || true)
-          if [ -n "$files" ]; then
-            shellcheck -x $files
-          else
-            echo "No shell scripts found to lint"
-          fi
-
-      - name: Shell syntax check
-        run: |
-          set -e
-          for f in awx-local-setup/*.sh; do
-            [ -f "$f" ] || continue
-            bash -n "$f"
-          done
-
-      - name: YAML lint
-        run: |
-          set -e
-          files=$(git ls-files '*.yml' '*.yaml' || true)
-          if [ -n "$files" ]; then
-            echo "$files" | xargs yamllint -d "extends: default"
-          else
-            echo "No YAML files found to lint"
-          fi
-
-      - name: Dry-run setup script
-        run: |
-          set -e
-          chmod +x awx-local-setup/setup_awx_local.sh
-          ./awx-local-setup/setup_awx_local.sh --dry-run --repo-root="$(pwd)"
-
-      - name: Kustomize -> kubectl --dry-run=client validation
-        run: |
-          set -e
-          validated=false
-          for d in config config/*; do
-            [ -d "$d" ] || continue
-            if [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ]; then
-              kustomize build "$d" | kubectl apply --dry-run=client -f -
-              validated=true
-            fi
-          done
-          if [ "$validated" = false ]; then
-            echo "No kustomize directories found to validate"
-          fi
-
-  package:
-    name: Package awx-local-setup
-    runs-on: ubuntu-latest
-    needs: lint-and-validate
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-      - name: Create tarball artifact
-        run: |
-          tar -czf awx-local-setup.tar.gz awx-local-setup
-      - name: Upload artifact
-        uses: actions/upload-artifact@v4
-        with:
-          name: awx-local-setup
-          path: awx-local-setup.tar.gz
-
-on:
-  push:
-    branches: [ main, master ]
-  pull_request:
-    branches: [ main, master ]
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Install linters
-        run: |
-          sudo apt-get update -y
-          sudo apt-get install -y shellcheck yamllint gettext-base
-      - name: Shellcheck
-        run: |
-          set -e
-          files=$(git ls-files 'awx-local-setup/*.sh' || true)
-          [ -z "$files" ] || shellcheck -x $files
-      - name: YAML lint
-        run: |
-          set -e
-          files=$(git ls-files '*.yml' '*.yaml' || true)
-          [ -z "$files" ] || (echo "$files" | xargs yamllint -d "extends: default")
-      - name: Dry-run setup script
-        run: |
-          set -e
-          chmod +x awx-local-setup/setup_awx_local.sh
-          ./awx-local-setup/setup_awx_local.sh --dry-run --repo-root="$(pwd)"
-
-  kustomize-validate:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Install kustomize and kubectl
-        run: |
-          set -e
-          if ! command -v kustomize >/dev/null 2>&1; then
-            curl -sSL "https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash -s 5.0.0
-            sudo mv kustomize /usr/local/bin/kustomize || true
-          fi
-          if ! command -v kubectl >/dev/null 2>&1; then
-            curl -sSL -o kubectl https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl
-            chmod +x kubectl
-            sudo mv kubectl /usr/local/bin/kubectl
-          fi
-      - name: Build and validate kustomize
-        run: |
-          set -e
-          for d in config config/*; do
-            [ -d "$d" ] || continue
-            if [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ]; then
-              kustomize build "$d" | kubectl apply --dry-run=client -f -
-            fi
-          done
-
-  release:
-    runs-on: ubuntu-latest
-    needs: [lint, kustomize-validate]
-    steps:
-      - uses: actions/checkout@v4
-      - name: Create tarball
-        run: tar -czf awx-local-setup.tar.gz awx-local-setup
-      - name: Upload artifact
-        uses: actions/upload-artifact@v4
-        with:
-          name: awx-local-setup
-          path: awx-local-setup.tar.gz
-name: CI
-
-on:
-  push:
-    branches: [ main, master ]
-  pull_request:
-    branches: [ main, master ]
-
 jobs:
   lint:
     name: Lint scripts & YAML
-    runs-on: ubuntu-latest
+    runs-on: ${{ matrix.os }}
     strategy:
       matrix:
         os: [ubuntu-22.04, ubuntu-20.04]
@@ -197,7 +20,7 @@ jobs:
       - name: Install linters
         run: |
           sudo apt-get update -y
-          sudo apt-get install -y shellcheck yamllint gettext-base
+          sudo apt-get install -y shellcheck yamllint gettext-base curl ca-certificates
 
       - name: Shellcheck - scan shell scripts
         run: |
@@ -255,258 +78,6 @@ jobs:
             sudo mv kubectl /usr/local/bin/kubectl
           fi
 
-      name: CI
-
-      on:
-        push:
-          branches: [ main, master ]
-        pull_request:
-          branches: [ main, master ]
-
-      jobs:
-        lint:
-          name: Lint scripts & YAML
-          runs-on: ${{ matrix.os }}
-          strategy:
-            matrix:
-              os: [ubuntu-22.04, ubuntu-20.04]
-          steps:
-            - name: Checkout
-              uses: actions/checkout@v4
-
-            - name: Install linters
-              run: |
-                sudo apt-get update -y
-                sudo apt-get install -y shellcheck yamllint gettext-base
-
-            - name: Shellcheck - scan shell scripts
-              run: |
-                set -e
-                files=$(git ls-files 'awx-local-setup/*.sh' || true)
-                if [ -n "$files" ]; then
-                  echo "Running shellcheck on: $files"
-                  shellcheck -x $files
-                else
-                  echo "No shell scripts found to lint"
-                fi
-
-            - name: Shell syntax check
-              run: |
-                set -e
-                for f in awx-local-setup/*.sh; do
-                  [ -f "$f" ] || continue
-                  echo "Checking bash syntax: $f"
-                  bash -n "$f"
-                done
-
-            - name: YAML lint
-              run: |
-                set -e
-                files=$(git ls-files '*.yml' '*.yaml' || true)
-                if [ -n "$files" ]; then
-                  echo "$files" | xargs yamllint -d "extends: default"
-                else
-                  echo "No YAML files found to lint"
-                fi
-
-            - name: Dry-run setup script
-              run: |
-                set -e
-                chmod +x awx-local-setup/setup_awx_local.sh
-                ./awx-local-setup/setup_awx_local.sh --dry-run --repo-root="$(pwd)"
-
-        kustomize-validate:
-          name: Validate kustomize builds (if any)
-          runs-on: ubuntu-latest
-          steps:
-            - name: Checkout
-              uses: actions/checkout@v4
-
-            - name: Install kustomize and kubectl
-              run: |
-                set -e
-                if ! command -v kustomize >/dev/null 2>&1; then
-                  curl -sSL "https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash -s 5.0.0
-                  sudo mv kustomize /usr/local/bin/kustomize || true
-                fi
-                if ! command -v kubectl >/dev/null 2>&1; then
-                  curl -sSL -o kubectl https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl
-                  chmod +x kubectl
-                  sudo mv kubectl /usr/local/bin/kubectl
-                fi
-
-            - name: Run kustomize build for known directories
-              run: |
-                set -e
-                ok=true
-                for d in config config/*; do
-                  if [ -d "$d" ] && ( [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ] ); then
-                    echo "Building kustomize for $d"
-                    kustomize build "$d" >/dev/null || { ok=false; echo "kustomize build failed for $d"; }
-                  fi
-                done
-                $ok || (echo "One or more kustomize builds failed" && exit 1)
-
-            - name: Kustomize -> kubectl --dry-run=client validation
-              run: |
-                set -e
-                any=false
-                for d in config config/*; do
-                  if [ -d "$d" ] && ( [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ] ); then
-                    echo "Validating manifests from $d with kubectl --dry-run=client"
-                    kustomize build "$d" | kubectl apply --dry-run=client -f - || { echo "kubectl --dry-run failed for $d"; exit 1; }
-                    any=true
-                  fi
-                done
-                if [ "$any" = false ]; then
-                  echo "No kustomize directories found to validate with kubectl"
-                fi
-
-        release:
-          name: Create release artifact
-          runs-on: ubuntu-latest
-          needs: [lint, kustomize-validate]
-          steps:
-            - name: Checkout
-              uses: actions/checkout@v4
-
-            - name: Create tarball
-              run: |
-                tar -czf awx-local-setup.tar.gz awx-local-setup
-
-            - name: Upload artifact
-              uses: actions/upload-artifact@v4
-              with:
-                name: awx-local-setup
-                path: awx-local-setup.tar.gz
-            push:
-              branches: [ main, master ]
-            pull_request:
-              branches: [ main, master ]
-
-          jobs:
-            lint:
-              name: Lint scripts & YAML
-              runs-on: ${{ matrix.os }}
-              strategy:
-                matrix:
-                  os: [ubuntu-22.04, ubuntu-20.04]
-              steps:
-                - name: Checkout
-                  uses: actions/checkout@v4
-
-                - name: Install linters
-                  run: |
-                    sudo apt-get update -y
-                    sudo apt-get install -y shellcheck yamllint gettext-base
-
-                - name: Shellcheck - scan shell scripts
-                  run: |
-                    set -e
-                    files=$(git ls-files 'awx-local-setup/*.sh' || true)
-                    if [ -n "$files" ]; then
-                      echo "Running shellcheck on: $files"
-                      shellcheck -x $files
-                    else
-                      echo "No shell scripts found to lint"
-                    fi
-
-                - name: Shell syntax check
-                  run: |
-                    set -e
-                    for f in awx-local-setup/*.sh; do
-                      [ -f "$f" ] || continue
-                      echo "Checking bash syntax: $f"
-                      bash -n "$f"
-                    done
-
-                - name: YAML lint
-                  run: |
-                    set -e
-                    files=$(git ls-files '*.yml' '*.yaml' || true)
-                    if [ -n "$files" ]; then
-                      echo "$files" | xargs yamllint -d "extends: default"
-                    else
-                      echo "No YAML files found to lint"
-                    fi
-
-                - name: Dry-run setup script
-                  run: |
-                    set -e
-                    chmod +x awx-local-setup/setup_awx_local.sh
-                    ./awx-local-setup/setup_awx_local.sh --dry-run --repo-root="$(pwd)"
-
-            kustomize-validate:
-              name: Validate kustomize builds (if any)
-              runs-on: ubuntu-latest
-              steps:
-                - name: Checkout
-                  uses: actions/checkout@v4
-
-                - name: Install kustomize and kubectl
-                  run: |
-                    set -e
-                    if ! command -v kustomize >/dev/null 2>&1; then
-                      curl -sSL "https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash -s 5.0.0
-                      sudo mv kustomize /usr/local/bin/kustomize || true
-                    fi
-                    if ! command -v kubectl >/dev/null 2>&1; then
-                      curl -sSL -o kubectl https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl
-                      chmod +x kubectl
-                      sudo mv kubectl /usr/local/bin/kubectl
-                    fi
-
-                - name: Run kustomize build for known directories
-                  run: |
-                    set -e
-                    ok=true
-                    for d in config config/*; do
-                      if [ -d "$d" ] && ( [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ] ); then
-                        echo "Building kustomize for $d"
-                        kustomize build "$d" >/dev/null || { ok=false; echo "kustomize build failed for $d"; }
-                      fi
-                    done
-                    $ok || (echo "One or more kustomize builds failed" && exit 1)
-
-                - name: Kustomize -> kubectl --dry-run=client validation
-                  run: |
-                    set -e
-                    any=false
-                    for d in config config/*; do
-                      if [ -d "$d" ] && ( [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ] ); then
-                        echo "Validating manifests from $d with kubectl --dry-run=client"
-                        kustomize build "$d" | kubectl apply --dry-run=client -f - || { echo "kubectl --dry-run failed for $d"; exit 1; }
-                        any=true
-                      fi
-                    done
-                    if [ "$any" = false ]; then
-                      echo "No kustomize directories found to validate with kubectl"
-                    fi
-
-            release:
-              name: Create release artifact
-              runs-on: ubuntu-latest
-              needs: [lint, kustomize-validate]
-              steps:
-                - name: Checkout
-                  uses: actions/checkout@v4
-
-                - name: Create tarball
-                  run: |
-                    tar -czf awx-local-setup.tar.gz awx-local-setup
-
-                - name: Upload artifact
-                  uses: actions/upload-artifact@v4
-                  with:
-                    name: awx-local-setup
-                    path: awx-local-setup.tar.gz
-          fi
-          if ! command -v kubectl >/dev/null 2>&1; then
-            curl -sSL -o kubectl https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl
-            chmod +x kubectl
-            sudo mv kubectl /usr/local/bin/kubectl
-          fi
-
       - name: Run kustomize build for known directories
         run: |
           set -e