Prevent flapping of external DNS configuration #1091
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # thanks to https://github.com/giantswarm/devctl/blob/v5.9.0/pkg/gen/input/workflows/internal/file/check_values_schema.yaml.template for the idea | |
| name: 'Check if values schema file has been updated' | |
| on: | |
| pull_request: | |
| branches: | |
| - master | |
| paths: | |
| - 'chart/k8gb/values.yaml' | |
| - 'chart/k8gb/values.schema.json' | |
| permissions: # added using https://github.com/step-security/secure-workflows | |
| contents: read | |
| jobs: | |
| check: | |
| name: 'Check values.yaml and its schema in PR' | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs | |
| - name: 'Checkout' | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: 'Check if values.schema.json was updated' | |
| run: | | |
| VALUES_FILE=chart/k8gb/values.yaml | |
| SCHEMA_FILE=chart/k8gb/values.schema.json | |
| # check if the values.json is covered by the schema | |
| pip3 install json-spec | |
| yq -o=json eval ${VALUES_FILE} > /tmp/values.json | |
| json validate --schema-file=${SCHEMA_FILE} --document-file=/tmp/values.json | |
| echo "PASSED: values.yaml and values.schema.json both appear to have been updated and the document is valid against the schema" |