-
Notifications
You must be signed in to change notification settings - Fork 0
40 lines (37 loc) · 1.07 KB
/
helmfile-linter.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
name: Helmfile lint
run-name: Helmfile lint
on:
push:
jobs:
helmfile-lint:
runs-on: ubuntu-latest
container:
image: ghcr.io/helmfile/helmfile:latest
steps:
-
uses: actions/create-github-app-token@v1
id: app-token
with:
app-id: ${{ secrets.APP_ID }}
private-key: ${{ secrets.PRIVATE_KEY }}
owner: ${{ github.repository_owner }}
repositories: "meet,secrets"
-
name: Checkout repository
uses: actions/checkout@v4
with:
submodules: recursive
token: ${{ steps.app-token.outputs.token }}
-
name: Load sops secrets
uses: rouja/actions-sops@main
with:
secret-file: secrets/numerique-gouv/meet/secrets.enc.env
age-key: ${{ secrets.SOPS_PRIVATE }}
-
name: Create sops master key file
shell: bash
run: mkdir -p ~/.config/sops/age/ && echo ${SOPS_PRIVATE} > ~/.config/sops/age/keys.txt
-
name: Validate helmfile
run: bash bin/validate-helm-configuration.sh