Update dependencies #504
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow proposes updates to the dependencies that dependabot cannot | |
| name: Update dependencies | |
| on: | |
| # Allow manual executions | |
| workflow_dispatch: | |
| # Run nightly | |
| schedule: | |
| - cron: '0 0 * * *' | |
| jobs: | |
| # Note that although the Azimuth components all have Helm charts, we use the | |
| # GitHub releases to discover new versions, so that we only get tagged versions | |
| # For Azimuth components, we also allow pre-releases so we can easily cut release candidates | |
| propose_github_release_updates: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| include: | |
| - key: ansible.posix | |
| path: galaxy.yml | |
| repository: ansible-collections/ansible.posix | |
| version_jsonpath: dependencies['ansible.posix'] | |
| - key: community.general | |
| path: galaxy.yml | |
| repository: ansible-collections/community.general | |
| version_jsonpath: dependencies['community.general'] | |
| - key: kubernetes.core | |
| path: galaxy.yml | |
| repository: ansible-collections/kubernetes.core | |
| tags: "yes" | |
| version_jsonpath: dependencies['kubernetes.core'] | |
| - key: ansible-collection-terraform | |
| path: ./galaxy.yml | |
| repository: azimuth-cloud/ansible-collection-terraform | |
| prereleases: "yes" | |
| version_jsonpath: dependencies['git+https://github.com/azimuth-cloud/ansible-collection-terraform.git'] | |
| # - key: ansible-slurm-appliance | |
| # path: ./roles/azimuth_caas_operator/defaults/main.yml | |
| # repository: stackhpc/ansible-slurm-appliance | |
| # prereleases: "yes" | |
| # version_jsonpath: azimuth_caas_stackhpc_slurm_appliance_git_version | |
| - key: azimuth | |
| path: ./roles/azimuth/defaults/main.yml | |
| repository: azimuth-cloud/azimuth | |
| prereleases: "yes" | |
| version_jsonpath: azimuth_chart_version | |
| - key: azimuth-caas-operator | |
| path: ./roles/azimuth_caas_operator/defaults/main.yml | |
| repository: azimuth-cloud/azimuth-caas-operator | |
| prereleases: "yes" | |
| version_jsonpath: azimuth_caas_operator_chart_version | |
| - key: azimuth-capi-operator | |
| path: ./roles/azimuth_capi_operator/defaults/main.yml | |
| repository: azimuth-cloud/azimuth-capi-operator | |
| prereleases: "yes" | |
| version_jsonpath: azimuth_capi_operator_chart_version | |
| - key: azimuth-identity-operator | |
| path: ./roles/azimuth_identity_operator/defaults/main.yml | |
| repository: azimuth-cloud/azimuth-identity-operator | |
| prereleases: "yes" | |
| version_jsonpath: azimuth_identity_operator_chart_version | |
| - key: azimuth-images | |
| path: ./roles/community_images/defaults/main.yml | |
| repository: azimuth-cloud/azimuth-images | |
| prereleases: "yes" | |
| version_jsonpath: community_images_azimuth_images_version | |
| - key: azimuth-schedule-operator | |
| path: ./roles/azimuth_schedule_operator/defaults/main.yml | |
| repository: azimuth-cloud/azimuth-schedule-operator | |
| prereleases: "yes" | |
| version_jsonpath: azimuth_schedule_operator_chart_version | |
| - key: caas-workstation | |
| path: ./roles/azimuth_caas_operator/defaults/main.yml | |
| repository: azimuth-cloud/caas-workstation | |
| prereleases: "yes" | |
| version_jsonpath: azimuth_caas_workstation_default_git_version | |
| - key: caas-repo2docker | |
| path: ./roles/azimuth_caas_operator/defaults/main.yml | |
| repository: azimuth-cloud/caas-repo2docker | |
| prereleases: "yes" | |
| version_jsonpath: azimuth_caas_repo2docker_default_git_version | |
| - key: caas-rstudio | |
| path: ./roles/azimuth_caas_operator/defaults/main.yml | |
| repository: azimuth-cloud/caas-r-studio-server | |
| prereleases: "yes" | |
| version_jsonpath: azimuth_caas_rstudio_default_git_version | |
| - key: capi-helm-openstack-cluster | |
| path: ./roles/capi_cluster/defaults/main.yml | |
| repository: azimuth-cloud/capi-helm-charts | |
| prereleases: "yes" | |
| version_jsonpath: capi_cluster_chart_version | |
| - key: coral-credits | |
| path: ./roles/coral_credits/defaults/main.yml | |
| repository: stackhpc/coral-credits | |
| prereleases: "yes" | |
| version_jsonpath: coral_credits_chart_version | |
| - key: cluster-api | |
| path: ./roles/clusterapi/defaults/main.yml | |
| repository: kubernetes-sigs/cluster-api | |
| version_jsonpath: clusterapi_core_version | |
| - key: cluster-api-provider-openstack | |
| path: ./roles/clusterapi/defaults/main.yml | |
| repository: kubernetes-sigs/cluster-api-provider-openstack | |
| version_jsonpath: clusterapi_openstack_version | |
| - key: cluster-api-addon-provider | |
| path: ./roles/clusterapi/defaults/main.yml | |
| repository: azimuth-cloud/cluster-api-addon-provider | |
| prereleases: "yes" | |
| version_jsonpath: clusterapi_addon_provider_chart_version | |
| - key: cluster-api-janitor-openstack | |
| path: ./roles/clusterapi/defaults/main.yml | |
| repository: azimuth-cloud/cluster-api-janitor-openstack | |
| prereleases: "yes" | |
| version_jsonpath: clusterapi_janitor_openstack_chart_version | |
| - key: helm | |
| path: ./roles/helm/defaults/main.yml | |
| repository: helm/helm | |
| version_jsonpath: helm_version | |
| - key: k3s | |
| path: ./roles/k3s/defaults/main.yml | |
| repository: k3s-io/k3s | |
| version_jsonpath: k3s_version | |
| - key: keycloak-operator | |
| path: ./roles/keycloak/defaults/main.yml | |
| repository: keycloak/keycloak-k8s-resources | |
| tags: "yes" | |
| version_jsonpath: keycloak_operator_version | |
| - key: kustomize | |
| path: ./roles/kustomize/defaults/main.yml | |
| repository: kubernetes-sigs/kustomize | |
| version_jsonpath: kustomize_version | |
| - key: velero-cli | |
| path: ./roles/velero/defaults/main.yml | |
| repository: vmware-tanzu/velero | |
| version_jsonpath: velero_cli_version | |
| - key: velero-plugin-for-aws | |
| path: ./roles/velero/defaults/main.yml | |
| repository: vmware-tanzu/velero-plugin-for-aws | |
| version_jsonpath: velero_s3_plugin_image_version | |
| - key: zenith | |
| path: ./roles/zenith/defaults/main.yml | |
| repository: azimuth-cloud/zenith | |
| prereleases: "yes" | |
| version_jsonpath: zenith_chart_version | |
| name: ${{ matrix.key }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Check for most recent GitHub release | |
| id: next | |
| uses: azimuth-cloud/github-actions/github-latest-release@master | |
| with: | |
| repository: ${{ matrix.repository }} | |
| prereleases: ${{ matrix.prereleases || 'no' }} | |
| tags: ${{ matrix.tags || 'no' }} | |
| - name: Update dependency key | |
| uses: azimuth-cloud/github-actions/config-update@master | |
| with: | |
| path: ${{ matrix.path }} | |
| updates: | | |
| ${{ matrix.version_jsonpath }}=${{ steps.next.outputs.version }} | |
| - name: Generate app token for PR | |
| uses: azimuth-cloud/github-actions/generate-app-token@master | |
| id: generate-app-token | |
| with: | |
| repository: ${{ github.repository }} | |
| app-id: ${{ secrets.AUTOMATION_APP_ID }} | |
| app-private-key: ${{ secrets.AUTOMATION_APP_PRIVATE_KEY }} | |
| - name: Propose changes via PR if required | |
| uses: peter-evans/create-pull-request@v6 | |
| with: | |
| token: ${{ steps.generate-app-token.outputs.token }} | |
| commit-message: >- | |
| Update ${{ matrix.key }} to ${{ steps.next.outputs.version }} | |
| branch: update-dependency/${{ matrix.key }} | |
| delete-branch: true | |
| title: >- | |
| Update ${{ matrix.key }} to ${{ steps.next.outputs.version }} | |
| body: > | |
| This PR was created automatically to update | |
| ${{ matrix.key }} to ${{ steps.next.outputs.version }}. | |
| labels: | | |
| automation | |
| dependency-update | |
| propose_helm_chart_updates: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| include: | |
| - key: cert-manager | |
| path: ./roles/certmanager/defaults/main.yml | |
| chart_repo_jsonpath: certmanager_chart_repo | |
| chart_name_jsonpath: certmanager_chart_name | |
| chart_version_jsonpath: certmanager_chart_version | |
| - key: cloud-metrics-grafana | |
| path: ./roles/cloud_metrics/defaults/main.yml | |
| chart_repo_jsonpath: cloud_metrics_grafana_chart_repo | |
| chart_name_jsonpath: cloud_metrics_grafana_chart_name | |
| chart_version_jsonpath: cloud_metrics_grafana_chart_version | |
| - key: harbor | |
| path: ./roles/harbor/defaults/main.yml | |
| chart_repo_jsonpath: harbor_chart_repo | |
| chart_name_jsonpath: harbor_chart_name | |
| chart_version_jsonpath: harbor_chart_version | |
| - key: helm-dashboard | |
| path: ./roles/helm_dashboard/defaults/main.yml | |
| chart_repo_jsonpath: helm_dashboard_chart_repo | |
| chart_name_jsonpath: helm_dashboard_chart_name | |
| chart_version_jsonpath: helm_dashboard_chart_version | |
| - key: ingress-nginx | |
| path: ./roles/ingress_nginx/defaults/main.yml | |
| chart_repo_jsonpath: ingress_nginx_chart_repo | |
| chart_name_jsonpath: ingress_nginx_chart_name | |
| chart_version_jsonpath: ingress_nginx_chart_version | |
| - key: kube-prometheus-stack | |
| path: ./roles/kube_prometheus_stack/defaults/main.yml | |
| chart_repo_jsonpath: kube_prometheus_stack_chart_repo | |
| chart_name_jsonpath: kube_prometheus_stack_chart_name | |
| chart_version_jsonpath: kube_prometheus_stack_chart_version | |
| - key: kubernetes-dashboard | |
| path: ./roles/kubernetes_dashboard/defaults/main.yml | |
| chart_repo_jsonpath: kubernetes_dashboard_chart_repo | |
| chart_name_jsonpath: kubernetes_dashboard_chart_name | |
| chart_version_jsonpath: kubernetes_dashboard_chart_version | |
| - key: snapshot-controller | |
| path: ./roles/velero/defaults/main.yml | |
| chart_repo_jsonpath: velero_csi_snapshot_controller_chart_repo | |
| chart_name_jsonpath: velero_csi_snapshot_controller_chart_name | |
| chart_version_jsonpath: velero_csi_snapshot_controller_chart_version | |
| - key: velero | |
| path: ./roles/velero/defaults/main.yml | |
| chart_repo_jsonpath: velero_chart_repo | |
| chart_name_jsonpath: velero_chart_name | |
| chart_version_jsonpath: velero_chart_version | |
| name: ${{ matrix.key }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Extract repo and chart | |
| id: chart-info | |
| uses: azimuth-cloud/github-actions/config-extract@master | |
| with: | |
| path: ${{ matrix.path }} | |
| outputs: | | |
| repo=${{ matrix.chart_repo_jsonpath }} | |
| name=${{ matrix.chart_name_jsonpath }} | |
| - name: Check for updates | |
| id: next | |
| uses: azimuth-cloud/github-actions/helm-latest-version@master | |
| with: | |
| repository: ${{ steps.chart-info.outputs.repo }} | |
| chart: ${{ steps.chart-info.outputs.name }} | |
| - name: Update chart version | |
| uses: azimuth-cloud/github-actions/config-update@master | |
| with: | |
| path: ${{ matrix.path }} | |
| updates: | | |
| ${{ matrix.chart_version_jsonpath }}=${{ steps.next.outputs.version }} | |
| - name: Generate app token for PR | |
| uses: azimuth-cloud/github-actions/generate-app-token@master | |
| id: generate-app-token | |
| with: | |
| repository: ${{ github.repository }} | |
| app-id: ${{ secrets.AUTOMATION_APP_ID }} | |
| app-private-key: ${{ secrets.AUTOMATION_APP_PRIVATE_KEY }} | |
| - name: Propose changes via PR if required | |
| uses: peter-evans/create-pull-request@v6 | |
| with: | |
| token: ${{ steps.generate-app-token.outputs.token }} | |
| commit-message: >- | |
| Update ${{ matrix.key }} to ${{ steps.next.outputs.version }} | |
| branch: update-dependency/${{ matrix.key }} | |
| delete-branch: true | |
| title: >- | |
| Update ${{ matrix.key }} to ${{ steps.next.outputs.version }} | |
| body: > | |
| This PR was created automatically to update | |
| ${{ matrix.key }} to ${{ steps.next.outputs.version }}. | |
| labels: | | |
| automation | |
| dependency-update |