Action to Lint and Publish Charts and tag repo

.github/workflows/main.yml

@@ -12,6 +12,26 @@ on:
       - main
 
 jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Helm
+        uses: azure/setup-helm@v3
+        with:
+          version: latest
+          token: ${{ secrets.GH_OMEC_PAT }}
+
+      - name: Find all Charts and Lint them
+        run: |
+          for dir in $(find . -maxdepth 1 -mindepth 1 -type d); do
+            if [[ -f "$dir/Chart.yaml" ]]; then
+              helm lint "$dir"
+            fi
+          done
+
   license-check:
     runs-on: ubuntu-latest
     steps:

.github/workflows/push.yml

@@ -0,0 +1,118 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright 2024 Intel Corporation
+
+name: Tag/Publish Release
+
+on:
+  push:
+    branches:
+      - main
+
+env:
+  CHARTS_REPO_URL: https://charts.aetherproject.org
+  CHARTS_DIR: charts
+  REF_CHARTS_DIR: charts-ref
+
+jobs:
+  # CAUTION: Other actions depend on this name "tag-github"
+  tag-github:
+    runs-on: ubuntu-latest
+    outputs:
+      changed: ${{ steps.version-change.outputs.changed }}
+      version: ${{ steps.version-change.outputs.version }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Get changes
+        id: version-file
+        run: |
+          if git diff --name-only ${{ github.event.before }} ${{ github.event.after }} | grep VERSION; then
+            echo "changed=true" >> $GITHUB_OUTPUT
+          else
+            echo "VERSION file was not changed"
+          fi
+
+      - name: Validate change in version file
+        id: version-change
+        if: steps.version-file.outputs.changed == 'true'
+        run: |
+          version=$(cat VERSION)
+          echo "version=$version"
+          validate="^[0-9]+\.[0-9]+\.[0-9]+$"
+          if [[ $version =~ $validate ]]; then
+            echo "changed=true" >> $GITHUB_OUTPUT
+            echo "version=$version" >> $GITHUB_OUTPUT
+          else
+            echo "Version change not for release"
+          fi
+
+      - name: Create release using REST API
+        if: steps.version-change.outputs.changed == 'true'
+        run: |
+          curl -L \
+            -X POST \
+            -H "Accept: application/vnd.github+json" \
+            -H "Authorization: Bearer ${{ secrets.GH_OMEC_PAT }}" \
+            -H "X-GitHub-Api-Version: 2022-11-28" \
+            https://api.github.com/repos/${{ github.repository }}/releases \
+            -d '{
+              "tag_name": "${{ steps.version-change.outputs.version }}",
+              "target_commitish": "master",
+              "name": "${{ steps.version-change.outputs.version }}",
+              "draft": false,
+              "prerelease": false,
+              "generate_release_notes": true
+              }'
+
+  publish:
+    runs-on: ubuntu-latest
+    needs: tag-github
+    if: needs.tag-github.outputs.changed == 'true'
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Helm
+        uses: azure/setup-helm@v3
+        with:
+          version: latest
+          token: ${{ secrets.GH_OMEC_PAT }}
+
+      - name: Get current Index.yaml
+        run: |
+          mkdir -p ${{ env.REF_CHARTS_DIR }}
+          curl -o ${{ env.REF_CHARTS_DIR }}/index.yaml ${{ env.CHARTS_REPO_URL }}/index.yaml
+
+      - name: Find all Charts and Package them
+        run: |
+          mkdir -p ${{ env.CHARTS_DIR }}
+          for dir in $(find . -maxdepth 1 -mindepth 1 -type d); do
+            if [[ -f "$dir/Chart.yaml" ]]; then
+              echo "Packaging charts for: $dir"
+              helm dependency update "$dir"
+              helm package "$dir" --destination ${{ env.CHARTS_DIR }}
+            fi
+          done
+          helm repo index ${{ env.CHARTS_DIR }} --url ${{ env.CHARTS_REPO_URL }} --merge ${{ env.REF_CHARTS_DIR }}/index.yaml
+
+      - name: Remove not "updated" local Charts (version has not changed)
+        working-directory: ${{ env.CHARTS_DIR }}
+        run: |
+          for file in *.tgz; do
+            if grep -q "${{ env.CHARTS_REPO_URL }}/$file" "../${{ env.REF_CHARTS_DIR }}/index.yaml"; then
+              echo "Not publishing $file because it is already in ${{ env.CHARTS_REPO_URL }}/index.yaml"
+              rm $file
+            fi
+          done
+
+      - name: rsync deployments
+        uses: burnett01/[email protected]
+        with:
+          switches: -avh
+          path: ${{ env.CHARTS_DIR }}
+          remote_path: /srv/sites/charts.aetherproject.org/
+          remote_host: static.opennetworking.org
+          remote_user: ${{ secrets.JENKINS_USERNAME }}
+          remote_key: ${{ secrets.JENKINS_SSHKEY }}
+          remote_key_pass: ${{ secrets.JENKINS_PASSPHRASE }}

.gitignore

@@ -7,6 +7,7 @@ requirements.lock
 
 # ignore dependent chart dirs
 charts
+charts-ref
 Chart.lock
 
 # ignore MacOS DS_Store