ci: add lint, kustomize-validate, release jobs
Some checks are pending
Some checks are pending
This commit is contained in:
alex-local
433
.github/workflows/ci.yml
vendored
433
.github/workflows/ci.yml
vendored
@@ -6,187 +6,10 @@ on:
|
||||
pull_request:
|
||||
branches: [ main, master, devel ]
|
||||
|
||||
jobs:
|
||||
lint-and-validate:
|
||||
name: Lint, dry-run and validate
|
||||
runs-on: ${{ matrix.os }}
|
||||
strategy:
|
||||
matrix:
|
||||
os: [ubuntu-22.04, ubuntu-20.04]
|
||||
timeout-minutes: 30
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Install apt packages
|
||||
run: |
|
||||
sudo apt-get update -y
|
||||
sudo apt-get install -y shellcheck yamllint gettext-base curl ca-certificates
|
||||
|
||||
- name: Install kustomize
|
||||
run: |
|
||||
set -e
|
||||
if ! command -v kustomize >/dev/null 2>&1; then
|
||||
curl -sSL "https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash -s 5.0.0
|
||||
sudo mv kustomize /usr/local/bin/kustomize || true
|
||||
fi
|
||||
|
||||
- name: Install kubectl
|
||||
run: |
|
||||
set -e
|
||||
if ! command -v kubectl >/dev/null 2>&1; then
|
||||
KUBECTL_VERSION=$(curl -L -s https://dl.k8s.io/release/stable.txt)
|
||||
curl -sSL -o kubectl https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl
|
||||
chmod +x kubectl
|
||||
sudo mv kubectl /usr/local/bin/kubectl
|
||||
fi
|
||||
|
||||
- name: Shellcheck - scan shell scripts
|
||||
run: |
|
||||
set -e
|
||||
files=$(git ls-files 'awx-local-setup/*.sh' || true)
|
||||
if [ -n "$files" ]; then
|
||||
shellcheck -x $files
|
||||
else
|
||||
echo "No shell scripts found to lint"
|
||||
fi
|
||||
|
||||
- name: Shell syntax check
|
||||
run: |
|
||||
set -e
|
||||
for f in awx-local-setup/*.sh; do
|
||||
[ -f "$f" ] || continue
|
||||
bash -n "$f"
|
||||
done
|
||||
|
||||
- name: YAML lint
|
||||
run: |
|
||||
set -e
|
||||
files=$(git ls-files '*.yml' '*.yaml' || true)
|
||||
if [ -n "$files" ]; then
|
||||
echo "$files" | xargs yamllint -d "extends: default"
|
||||
else
|
||||
echo "No YAML files found to lint"
|
||||
fi
|
||||
|
||||
- name: Dry-run setup script
|
||||
run: |
|
||||
set -e
|
||||
chmod +x awx-local-setup/setup_awx_local.sh
|
||||
./awx-local-setup/setup_awx_local.sh --dry-run --repo-root="$(pwd)"
|
||||
|
||||
- name: Kustomize -> kubectl --dry-run=client validation
|
||||
run: |
|
||||
set -e
|
||||
validated=false
|
||||
for d in config config/*; do
|
||||
[ -d "$d" ] || continue
|
||||
if [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ]; then
|
||||
kustomize build "$d" | kubectl apply --dry-run=client -f -
|
||||
validated=true
|
||||
fi
|
||||
done
|
||||
if [ "$validated" = false ]; then
|
||||
echo "No kustomize directories found to validate"
|
||||
fi
|
||||
|
||||
package:
|
||||
name: Package awx-local-setup
|
||||
runs-on: ubuntu-latest
|
||||
needs: lint-and-validate
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
- name: Create tarball artifact
|
||||
run: |
|
||||
tar -czf awx-local-setup.tar.gz awx-local-setup
|
||||
- name: Upload artifact
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: awx-local-setup
|
||||
path: awx-local-setup.tar.gz
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [ main, master ]
|
||||
pull_request:
|
||||
branches: [ main, master ]
|
||||
|
||||
jobs:
|
||||
lint:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- name: Install linters
|
||||
run: |
|
||||
sudo apt-get update -y
|
||||
sudo apt-get install -y shellcheck yamllint gettext-base
|
||||
- name: Shellcheck
|
||||
run: |
|
||||
set -e
|
||||
files=$(git ls-files 'awx-local-setup/*.sh' || true)
|
||||
[ -z "$files" ] || shellcheck -x $files
|
||||
- name: YAML lint
|
||||
run: |
|
||||
set -e
|
||||
files=$(git ls-files '*.yml' '*.yaml' || true)
|
||||
[ -z "$files" ] || (echo "$files" | xargs yamllint -d "extends: default")
|
||||
- name: Dry-run setup script
|
||||
run: |
|
||||
set -e
|
||||
chmod +x awx-local-setup/setup_awx_local.sh
|
||||
./awx-local-setup/setup_awx_local.sh --dry-run --repo-root="$(pwd)"
|
||||
|
||||
kustomize-validate:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- name: Install kustomize and kubectl
|
||||
run: |
|
||||
set -e
|
||||
if ! command -v kustomize >/dev/null 2>&1; then
|
||||
curl -sSL "https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash -s 5.0.0
|
||||
sudo mv kustomize /usr/local/bin/kustomize || true
|
||||
fi
|
||||
if ! command -v kubectl >/dev/null 2>&1; then
|
||||
curl -sSL -o kubectl https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl
|
||||
chmod +x kubectl
|
||||
sudo mv kubectl /usr/local/bin/kubectl
|
||||
fi
|
||||
- name: Build and validate kustomize
|
||||
run: |
|
||||
set -e
|
||||
for d in config config/*; do
|
||||
[ -d "$d" ] || continue
|
||||
if [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ]; then
|
||||
kustomize build "$d" | kubectl apply --dry-run=client -f -
|
||||
fi
|
||||
done
|
||||
|
||||
release:
|
||||
runs-on: ubuntu-latest
|
||||
needs: [lint, kustomize-validate]
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- name: Create tarball
|
||||
run: tar -czf awx-local-setup.tar.gz awx-local-setup
|
||||
- name: Upload artifact
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: awx-local-setup
|
||||
path: awx-local-setup.tar.gz
|
||||
name: CI
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [ main, master ]
|
||||
pull_request:
|
||||
branches: [ main, master ]
|
||||
|
||||
jobs:
|
||||
lint:
|
||||
name: Lint scripts & YAML
|
||||
runs-on: ubuntu-latest
|
||||
runs-on: ${{ matrix.os }}
|
||||
strategy:
|
||||
matrix:
|
||||
os: [ubuntu-22.04, ubuntu-20.04]
|
||||
@@ -197,7 +20,7 @@ jobs:
|
||||
- name: Install linters
|
||||
run: |
|
||||
sudo apt-get update -y
|
||||
sudo apt-get install -y shellcheck yamllint gettext-base
|
||||
sudo apt-get install -y shellcheck yamllint gettext-base curl ca-certificates
|
||||
|
||||
- name: Shellcheck - scan shell scripts
|
||||
run: |
|
||||
@@ -255,258 +78,6 @@ jobs:
|
||||
sudo mv kubectl /usr/local/bin/kubectl
|
||||
fi
|
||||
|
||||
name: CI
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [ main, master ]
|
||||
pull_request:
|
||||
branches: [ main, master ]
|
||||
|
||||
jobs:
|
||||
lint:
|
||||
name: Lint scripts & YAML
|
||||
runs-on: ${{ matrix.os }}
|
||||
strategy:
|
||||
matrix:
|
||||
os: [ubuntu-22.04, ubuntu-20.04]
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Install linters
|
||||
run: |
|
||||
sudo apt-get update -y
|
||||
sudo apt-get install -y shellcheck yamllint gettext-base
|
||||
|
||||
- name: Shellcheck - scan shell scripts
|
||||
run: |
|
||||
set -e
|
||||
files=$(git ls-files 'awx-local-setup/*.sh' || true)
|
||||
if [ -n "$files" ]; then
|
||||
echo "Running shellcheck on: $files"
|
||||
shellcheck -x $files
|
||||
else
|
||||
echo "No shell scripts found to lint"
|
||||
fi
|
||||
|
||||
- name: Shell syntax check
|
||||
run: |
|
||||
set -e
|
||||
for f in awx-local-setup/*.sh; do
|
||||
[ -f "$f" ] || continue
|
||||
echo "Checking bash syntax: $f"
|
||||
bash -n "$f"
|
||||
done
|
||||
|
||||
- name: YAML lint
|
||||
run: |
|
||||
set -e
|
||||
files=$(git ls-files '*.yml' '*.yaml' || true)
|
||||
if [ -n "$files" ]; then
|
||||
echo "$files" | xargs yamllint -d "extends: default"
|
||||
else
|
||||
echo "No YAML files found to lint"
|
||||
fi
|
||||
|
||||
- name: Dry-run setup script
|
||||
run: |
|
||||
set -e
|
||||
chmod +x awx-local-setup/setup_awx_local.sh
|
||||
./awx-local-setup/setup_awx_local.sh --dry-run --repo-root="$(pwd)"
|
||||
|
||||
kustomize-validate:
|
||||
name: Validate kustomize builds (if any)
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Install kustomize and kubectl
|
||||
run: |
|
||||
set -e
|
||||
if ! command -v kustomize >/dev/null 2>&1; then
|
||||
curl -sSL "https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash -s 5.0.0
|
||||
sudo mv kustomize /usr/local/bin/kustomize || true
|
||||
fi
|
||||
if ! command -v kubectl >/dev/null 2>&1; then
|
||||
curl -sSL -o kubectl https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl
|
||||
chmod +x kubectl
|
||||
sudo mv kubectl /usr/local/bin/kubectl
|
||||
fi
|
||||
|
||||
- name: Run kustomize build for known directories
|
||||
run: |
|
||||
set -e
|
||||
ok=true
|
||||
for d in config config/*; do
|
||||
if [ -d "$d" ] && ( [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ] ); then
|
||||
echo "Building kustomize for $d"
|
||||
kustomize build "$d" >/dev/null || { ok=false; echo "kustomize build failed for $d"; }
|
||||
fi
|
||||
done
|
||||
$ok || (echo "One or more kustomize builds failed" && exit 1)
|
||||
|
||||
- name: Kustomize -> kubectl --dry-run=client validation
|
||||
run: |
|
||||
set -e
|
||||
any=false
|
||||
for d in config config/*; do
|
||||
if [ -d "$d" ] && ( [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ] ); then
|
||||
echo "Validating manifests from $d with kubectl --dry-run=client"
|
||||
kustomize build "$d" | kubectl apply --dry-run=client -f - || { echo "kubectl --dry-run failed for $d"; exit 1; }
|
||||
any=true
|
||||
fi
|
||||
done
|
||||
if [ "$any" = false ]; then
|
||||
echo "No kustomize directories found to validate with kubectl"
|
||||
fi
|
||||
|
||||
release:
|
||||
name: Create release artifact
|
||||
runs-on: ubuntu-latest
|
||||
needs: [lint, kustomize-validate]
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Create tarball
|
||||
run: |
|
||||
tar -czf awx-local-setup.tar.gz awx-local-setup
|
||||
|
||||
- name: Upload artifact
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: awx-local-setup
|
||||
path: awx-local-setup.tar.gz
|
||||
push:
|
||||
branches: [ main, master ]
|
||||
pull_request:
|
||||
branches: [ main, master ]
|
||||
|
||||
jobs:
|
||||
lint:
|
||||
name: Lint scripts & YAML
|
||||
runs-on: ${{ matrix.os }}
|
||||
strategy:
|
||||
matrix:
|
||||
os: [ubuntu-22.04, ubuntu-20.04]
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Install linters
|
||||
run: |
|
||||
sudo apt-get update -y
|
||||
sudo apt-get install -y shellcheck yamllint gettext-base
|
||||
|
||||
- name: Shellcheck - scan shell scripts
|
||||
run: |
|
||||
set -e
|
||||
files=$(git ls-files 'awx-local-setup/*.sh' || true)
|
||||
if [ -n "$files" ]; then
|
||||
echo "Running shellcheck on: $files"
|
||||
shellcheck -x $files
|
||||
else
|
||||
echo "No shell scripts found to lint"
|
||||
fi
|
||||
|
||||
- name: Shell syntax check
|
||||
run: |
|
||||
set -e
|
||||
for f in awx-local-setup/*.sh; do
|
||||
[ -f "$f" ] || continue
|
||||
echo "Checking bash syntax: $f"
|
||||
bash -n "$f"
|
||||
done
|
||||
|
||||
- name: YAML lint
|
||||
run: |
|
||||
set -e
|
||||
files=$(git ls-files '*.yml' '*.yaml' || true)
|
||||
if [ -n "$files" ]; then
|
||||
echo "$files" | xargs yamllint -d "extends: default"
|
||||
else
|
||||
echo "No YAML files found to lint"
|
||||
fi
|
||||
|
||||
- name: Dry-run setup script
|
||||
run: |
|
||||
set -e
|
||||
chmod +x awx-local-setup/setup_awx_local.sh
|
||||
./awx-local-setup/setup_awx_local.sh --dry-run --repo-root="$(pwd)"
|
||||
|
||||
kustomize-validate:
|
||||
name: Validate kustomize builds (if any)
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Install kustomize and kubectl
|
||||
run: |
|
||||
set -e
|
||||
if ! command -v kustomize >/dev/null 2>&1; then
|
||||
curl -sSL "https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash -s 5.0.0
|
||||
sudo mv kustomize /usr/local/bin/kustomize || true
|
||||
fi
|
||||
if ! command -v kubectl >/dev/null 2>&1; then
|
||||
curl -sSL -o kubectl https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl
|
||||
chmod +x kubectl
|
||||
sudo mv kubectl /usr/local/bin/kubectl
|
||||
fi
|
||||
|
||||
- name: Run kustomize build for known directories
|
||||
run: |
|
||||
set -e
|
||||
ok=true
|
||||
for d in config config/*; do
|
||||
if [ -d "$d" ] && ( [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ] ); then
|
||||
echo "Building kustomize for $d"
|
||||
kustomize build "$d" >/dev/null || { ok=false; echo "kustomize build failed for $d"; }
|
||||
fi
|
||||
done
|
||||
$ok || (echo "One or more kustomize builds failed" && exit 1)
|
||||
|
||||
- name: Kustomize -> kubectl --dry-run=client validation
|
||||
run: |
|
||||
set -e
|
||||
any=false
|
||||
for d in config config/*; do
|
||||
if [ -d "$d" ] && ( [ -f "$d/kustomization.yaml" ] || [ -f "$d/kustomization.yml" ] ); then
|
||||
echo "Validating manifests from $d with kubectl --dry-run=client"
|
||||
kustomize build "$d" | kubectl apply --dry-run=client -f - || { echo "kubectl --dry-run failed for $d"; exit 1; }
|
||||
any=true
|
||||
fi
|
||||
done
|
||||
if [ "$any" = false ]; then
|
||||
echo "No kustomize directories found to validate with kubectl"
|
||||
fi
|
||||
|
||||
release:
|
||||
name: Create release artifact
|
||||
runs-on: ubuntu-latest
|
||||
needs: [lint, kustomize-validate]
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Create tarball
|
||||
run: |
|
||||
tar -czf awx-local-setup.tar.gz awx-local-setup
|
||||
|
||||
- name: Upload artifact
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: awx-local-setup
|
||||
path: awx-local-setup.tar.gz
|
||||
fi
|
||||
if ! command -v kubectl >/dev/null 2>&1; then
|
||||
curl -sSL -o kubectl https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl
|
||||
chmod +x kubectl
|
||||
sudo mv kubectl /usr/local/bin/kubectl
|
||||
fi
|
||||
|
||||
- name: Run kustomize build for known directories
|
||||
run: |
|
||||
set -e
|
||||
|
||||
Reference in New Issue
Block a user