fix: use correct securityContext for Alpine based helm-repository Pod… #3015
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright 2023 Nutanix. All rights reserved. | |
| # SPDX-License-Identifier: Apache-2.0 | |
| name: checks | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| types: | |
| - opened | |
| - synchronize | |
| - reopened | |
| merge_group: | |
| types: | |
| - checks_requested | |
| permissions: | |
| contents: read | |
| defaults: | |
| run: | |
| shell: bash | |
| jobs: | |
| unit-test: | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - name: Check out code | |
| uses: actions/checkout@v4 | |
| - name: Install devbox | |
| uses: jetify-com/devbox-install-action@v0.11.0 | |
| with: | |
| enable-cache: true | |
| - name: Go cache | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cache/go-build | |
| ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| restore-keys: | | |
| ${{ runner.os }}-go- | |
| - name: Run unit tests | |
| run: devbox run -- make test | |
| - name: Annotate tests | |
| if: always() | |
| uses: guyarb/golang-test-annotations@v0.8.0 | |
| with: | |
| test-results: test.json | |
| e2e-quick-start: | |
| needs: | |
| - "lint-gha" | |
| - "lint-go" | |
| - "lint-test-helm" | |
| - "pre-commit" | |
| - "unit-test" | |
| strategy: | |
| matrix: | |
| config: | |
| - {"provider": "Nutanix", "kubernetesVersion": "v1.29.6", "osImage": "nkp-rocky-9.4-release-1.29.6-20240816215147"} | |
| - {"provider": "Nutanix", "kubernetesVersion": "v1.30.5", "osImage": "nkp-rocky-9.4-release-1.30.5-20240930171619"} | |
| - {"provider": "Docker", "kubernetesVersion": "v1.29.8"} | |
| - {"provider": "Docker", "kubernetesVersion": "v1.30.5"} | |
| - {"provider": "Docker", "kubernetesVersion": "v1.31.0"} | |
| # Uncomment below once we have the ability to run e2e tests on other providers from GHA. | |
| # - {"provider": "AWS", "kubernetesVersion": "v1.29.6"} | |
| fail-fast: false | |
| name: e2e-quick-start (${{ matrix.config.provider }}, ${{ matrix.config.kubernetesVersion }}) | |
| uses: ./.github/workflows/e2e.yml | |
| with: | |
| focus: Quick start | |
| provider: ${{ matrix.config.provider }} | |
| kubernetes-version: ${{ matrix.config.kubernetesVersion }} | |
| runs-on: ${{ matrix.config.provider == 'Nutanix' && 'self-hosted-ncn-dind' || 'ubuntu-22.04' }} | |
| os-image: ${{ matrix.config.provider == 'Nutanix' && matrix.config.osImage || '' }} | |
| secrets: inherit | |
| permissions: | |
| contents: read | |
| checks: write | |
| e2e-self-hosted: | |
| needs: | |
| - "lint-gha" | |
| - "lint-go" | |
| - "lint-test-helm" | |
| - "pre-commit" | |
| - "unit-test" | |
| strategy: | |
| matrix: | |
| config: | |
| - {"provider": "Docker", "kubernetesVersion": "v1.29.8"} | |
| - {"provider": "Docker", "kubernetesVersion": "v1.30.5"} | |
| - {"provider": "Docker", "kubernetesVersion": "v1.31.0"} | |
| # Uncomment below once we have the ability to run e2e tests on other providers from GHA. | |
| # - {"provider": "Nutanix", "kubernetesVersion": "v1.29.6"} | |
| # - {"provider": "AWS", "kubernetesVersion": "v1.29.6"} | |
| fail-fast: false | |
| uses: ./.github/workflows/e2e.yml | |
| with: | |
| focus: Self-hosted | |
| provider: ${{ matrix.config.provider }} | |
| kubernetes-version: ${{ matrix.config.kubernetesVersion }} | |
| runs-on: ${{ matrix.config.provider == 'Nutanix' && 'self-hosted-ncn-dind' || 'ubuntu-22.04' }} | |
| secrets: inherit | |
| permissions: | |
| contents: read | |
| checks: write | |
| lint-go: | |
| runs-on: ubuntu-22.04 | |
| strategy: | |
| matrix: | |
| module: [api, common, .] | |
| fail-fast: false | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| - name: Check out code | |
| uses: actions/checkout@v4 | |
| - name: Install devbox | |
| uses: jetify-com/devbox-install-action@v0.11.0 | |
| with: | |
| enable-cache: true | |
| - name: Export golang and golangci-lint versions | |
| id: versions | |
| run: | | |
| echo "golangci-lint=$(devbox run -- golangci-lint version --format short)" >>"${GITHUB_OUTPUT}" | |
| echo "golang=$(devbox run -- go version | grep -o "[[:digit:]]\+.[[:digit:]]\+\(.[[:digit:]]\+\)\?")" >>"${GITHUB_OUTPUT}" | |
| - name: golangci-lint | |
| uses: reviewdog/action-golangci-lint@v2 | |
| with: | |
| fail_on_error: true | |
| reporter: github-pr-review | |
| golangci_lint_version: v${{ steps.versions.outputs.golangci-lint }} | |
| go_version: v${{ steps.versions.outputs.golang }} | |
| workdir: ${{ matrix.module }} | |
| golangci_lint_flags: "--config=${{ github.workspace }}/.golangci.yml" | |
| lint-gha: | |
| runs-on: ubuntu-22.04 | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| - name: Check out code | |
| uses: actions/checkout@v4 | |
| - name: actionlint | |
| uses: reviewdog/action-actionlint@v1 | |
| with: | |
| fail_on_error: true | |
| reporter: github-pr-review | |
| pre-commit: | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - name: Check out code | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ github.event.pull_request.head.sha }} | |
| - name: Install devbox | |
| uses: jetify-com/devbox-install-action@v0.11.0 | |
| with: | |
| enable-cache: true | |
| - name: Go cache | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cache/go-build | |
| ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| restore-keys: | | |
| ${{ runner.os }}-go- | |
| - name: Set up pre-commit cache | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.cache/pre-commit | |
| key: pre-commit-3|${{ hashFiles('.pre-commit-config.yaml') }} | |
| - name: Run pre-commit | |
| run: devbox run -- make pre-commit | |
| env: | |
| SKIP: no-commit-to-branch,golangci-lint,actionlint-system | |
| lint-test-helm: | |
| runs-on: ubuntu-22.04 | |
| env: | |
| KIND_CLUSTER_NAME: chart-testing | |
| KIND_KUBECONFIG: ct-kind-kubeconfig | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Install devbox | |
| uses: jetify-com/devbox-install-action@v0.11.0 | |
| with: | |
| enable-cache: true | |
| - name: Run chart-testing (list-changed) | |
| id: list-changed | |
| run: | | |
| changed="$(devbox run -- \ | |
| ct list-changed --config charts/ct-config.yaml \ | |
| )" | |
| if [[ -n "$changed" ]]; then | |
| echo "changed=true" >> "$GITHUB_OUTPUT" | |
| fi | |
| - if: steps.list-changed.outputs.changed == 'true' | |
| name: Run chart-testing (lint) | |
| run: | | |
| devbox run -- \ | |
| ct lint --config charts/ct-config.yaml | |
| - if: steps.list-changed.outputs.changed == 'true' | |
| name: Create kind cluster | |
| run: devbox run -- make kind.create | |
| - if: steps.list-changed.outputs.changed == 'true' | |
| name: Build Docker images | |
| run: devbox run -- make release-snapshot | |
| - if: steps.list-changed.outputs.changed == 'true' | |
| name: Sideload docker image | |
| run: | | |
| devbox run -- \ | |
| kind load docker-image \ | |
| --name "${KIND_CLUSTER_NAME}" \ | |
| "ko.local/cluster-api-runtime-extensions-nutanix:$(devbox run -- gojq -r .version dist/metadata.json)-$(devbox run -- go env GOARCH)" \ | |
| "ghcr.io/nutanix-cloud-native/caren-helm-reg:$(devbox run -- gojq -r .version dist/metadata.json)-$(devbox run -- go env GOARCH)" | |
| - if: steps.list-changed.outputs.changed == 'true' | |
| name: Setup Cluster API and cert-manager | |
| run: devbox run -- make clusterctl.init | |
| - if: steps.list-changed.outputs.changed == 'true' | |
| name: Run chart-testing (install) | |
| run: | | |
| devbox run -- \ | |
| ct install \ | |
| --config charts/ct-config.yaml \ | |
| --helm-extra-set-args "--set-string image.repository=ko.local/cluster-api-runtime-extensions-nutanix --set-string image.tag=$(devbox run -- gojq -r .version dist/metadata.json)-$(devbox run -- go env GOARCH) --set-string helmRepositoryImage.tag=$(devbox run -- gojq -r .version dist/metadata.json)-$(devbox run -- go env GOARCH)" | |
| env: | |
| KUBECONFIG: ${{ env.KIND_KUBECONFIG }} | |
| - if: steps.list-changed.outputs.changed == 'true' && always() | |
| name: Delete chart-testing KinD cluster | |
| run: | | |
| devbox run -- make kind.delete |