From 2023f8cd7113d442dc63bd30446c5fd58a68212a Mon Sep 17 00:00:00 2001 From: Predrag Janosevic Date: Mon, 2 Dec 2024 15:27:16 +0000 Subject: [PATCH] Publix helm chart --- .github/workflows/release.yml | 31 +++++++++++++++++++++---------- .goreleaser.yaml | 15 +-------------- 2 files changed, 22 insertions(+), 24 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1fd2aeac..09d5175b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -7,6 +7,27 @@ on: - 'v[0-9]+\.[0-9]+\.[0-9]+' jobs: + chart-releaser: + runs-on: ubuntu-latest + + permissions: + contents: write + + steps: + - uses: actions/checkout@v3 + with: + fetch-depth: 0 + + - name: Install Helm + uses: azure/setup-helm@v4 + + - name: Run chart-releaser + uses: helm/chart-releaser-action@v1.6.0 + env: + CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}" + with: + charts_dir: deploy/exoscale-webhook + goreleaser: runs-on: ubuntu-latest @@ -21,16 +42,6 @@ jobs: - run: make go.mk shell: bash - - name: Import GPG key - # This is a third-party GitHub action and we trust it with our GPG key. - # To be on the safer side, we should always pin to the commit SHA. - # It's not a perfect mitigation, but we should always do some due diligence before upgrading. - # The author seems trustworthy, as the author is part of the docker and goreleaser organizations on GitHub. - uses: crazy-max/ghaction-import-gpg@72b6676b71ab476b77e676928516f6982eef7a41 - with: - gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }} - passphrase: ${{ secrets.GPG_PASSPHRASE }} - - uses: ./go.mk/.github/actions/release with: release_github_token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.goreleaser.yaml b/.goreleaser.yaml index ba844e49..b6176a1c 100644 --- a/.goreleaser.yaml +++ b/.goreleaser.yaml @@ -29,18 +29,5 @@ dockers: - --build-arg="VCS_REF={{.ShortCommit}}" - --build-arg="BUILD_DATE={{.Date}}" -signs: -- cmd: gpg - args: ["--default-key", "7100E8BFD6199CE0374CB7F003686F8CDE378D41", "--detach-sign", "${artifact}"] - artifacts: all - -checksum: - name_template: 'checksums.txt' - -snapshot: - name_template: "{{ .Tag }}-snapshot" - release: - github: - owner: exoscale - name: cert-manager-webhook-exoscale + disable: true