Skip to content

feat: upgrade ci to use docker caching, apply pr labels, and lint pr titles #7

feat: upgrade ci to use docker caching, apply pr labels, and lint pr titles

feat: upgrade ci to use docker caching, apply pr labels, and lint pr titles #7

name: Guacamole CRDs Chart
on:
pull_request:
# Ignore PRs on branches specifically intended for other assets
branches-ignore:
- '*/controller-container*'
- '*/guacamole-chart*'
# Only consider PRs that change files for this asset, including cQi scripts
paths:
- '.github/workflows/guacamole-crds-chart.yaml'
- 'charts/guacamole-crds/**'
# Make sure all workflows that are "required checks" for a given
# branch protection rule have the same paths: and branches-ignore:
# filters. Otherwise, you can end up in a deadlock waiting on a
# required check that will never be executed.
push:
# Only release off of release and maintenance branches for this asset
branches:
- 'maintenance/guacamole-crds-chart/[0-9]+.x.x'
- 'maintenance/guacamole-crds-chart/[0-9]+.[0-9]+.x'
- 'main'
# Only consider pushes that change files for this asset, including ci scripts
paths:
- '.github/workflows/guacamole-crds-chart.yaml'
- 'charts/guacamole-crds/**'
permissions:
contents: write
pull-requests: read
actions: read
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
# Needed to generate releases safely
cancel-in-progress: false
jobs:
# Job name must be unique across repo to target
# branch protection rules "required checks" properly!
guacamole-crds-chart:
uses: SwanseaUniversityMedical/workflows/.github/workflows/[email protected]
with:
job-name: guacamole-crds-chart
registry: ${{ vars.HARBOR_REGISTRY }}
registry-user: ${{ vars.HARBOR_USER }}
registry-project: ${{ vars.HARBOR_PROJECT }}
registry-repo: guacamole-crds
release-tag-format: 'guacamole-crds-chart-${version}'
release-branches: |
[
'maintenance/guacamole-crds-chart/[0-9]+\.([0-9]+|x)\.x',
'main'
]
cosign-public-key: ${{ vars.COSIGN_PUBLIC_KEY }}
slack-channel: ${{ vars.SLACK_CHANNEL }}
chart: charts/guacamole-crds
test-command: |
helm template $CHART --debug
secrets:
cosign-private-key: ${{ secrets.COSIGN_PRIVATE_KEY }}
cosign-password: ${{ secrets.COSIGN_PASSWORD }}
registry-token: ${{ secrets.HARBOR_TOKEN }}
slack-token: ${{ secrets.SLACK_TOKEN }}