lint.yaml

---
# Lint and Format files.
# Linting YAML/YML

name: Lint & Format

# yamllint disable-line rule:truthy
on:
  workflow_call:
  push:
    branches: ['main']
  pull_request:
    branches: ['main']

concurrency:
  group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
  cancel-in-progress: true

jobs:
  lintYaml:
    name: Lint YAML Files
    uses: darpa-askem/.github/.github/workflows/lint-yaml.yaml@main
    with:
      strict: false

  lintDocker:
    name: Lint Docker Files
    uses: darpa-askem/.github/.github/workflows/lint-docker.yaml@main

  kubeconform:
    name: Validate K8 Configs
    runs-on: ubuntu-latest
    env:
      REGISTRY: ghcr.io
    steps:
      # 1 - Checkout the repository
      - name: Checkout the repository
        uses: actions/checkout@v3

      # 2 - Login to GHCR
      - name: Login to registry ${{ env.REGISTRY }}
        uses: docker/login-action@v2
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      # 3 - Validate Kubernetes Configs
      - name: Validate K8s Config
        uses: docker://ghcr.io/yannh/kubeconform:v0.5.0-alpine
        with:
          entrypoint: '/kubeconform'
          args: '-summary -output json -ignore-filename-pattern secrets -ignore-filename-pattern certificates -ignore-filename-pattern keycloak-realm -ignore-filename-pattern keycloak-ingress -ignore-filename-pattern data-service-ingress -ignore-filename-pattern overlays -ignore-filename-pattern keycloak\/realm -ignore-filename-pattern kustomization ./kubernetes'