ci: Update workflow formatting, token action

Signed-off-by: Bᴇʀɴᴅ Sᴄʜᴏʀɢᴇʀs <me@bjw-s.dev>
This commit is contained in:
Bᴇʀɴᴅ Sᴄʜᴏʀɢᴇʀs 2022-01-21 14:43:14 +01:00
parent 42dbe4ee4a
commit a3582f3c83
No known key found for this signature in database
GPG Key ID: BC5E2BD907F9A8EC
6 changed files with 324 additions and 322 deletions

View File

@ -8,15 +8,15 @@ on:
branches: branches:
- master - master
paths: paths:
- 'charts/**' - "charts/**"
jobs: jobs:
release: release:
runs-on: ubuntu-20.04 runs-on: ubuntu-20.04
steps: steps:
- name: Get k8s-at-home token - name: Generate Token
id: get-app-token uses: tibdex/github-app-token@v1
uses: getsentry/action-github-app-token@v1 id: generate-token
with: with:
app_id: ${{ secrets.K8S_AT_HOME_APP_ID }} app_id: ${{ secrets.K8S_AT_HOME_APP_ID }}
private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }} private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }}
@ -24,7 +24,7 @@ jobs:
- name: Checkout - name: Checkout
uses: actions/checkout@v2 uses: actions/checkout@v2
with: with:
token: ${{ steps.get-app-token.outputs.token }} token: ${{ steps.generate-token.outputs.token }}
ref: master ref: master
fetch-depth: 0 fetch-depth: 0
@ -44,7 +44,7 @@ jobs:
charts_dir: charts/* charts_dir: charts/*
charts_repo_url: https://k8s-at-home.com/charts/ charts_repo_url: https://k8s-at-home.com/charts/
env: env:
CR_TOKEN: "${{ steps.get-app-token.outputs.token }}" CR_TOKEN: "${{ steps.generate-token.outputs.token }}"
CR_SKIP_EXISTING: "true" CR_SKIP_EXISTING: "true"
generate-summary: generate-summary:
@ -53,9 +53,9 @@ jobs:
needs: needs:
- release - release
steps: steps:
- name: Get k8s-at-home token - name: Generate Token
id: get-app-token uses: tibdex/github-app-token@v1
uses: getsentry/action-github-app-token@v1 id: generate-token
with: with:
app_id: ${{ secrets.K8S_AT_HOME_APP_ID }} app_id: ${{ secrets.K8S_AT_HOME_APP_ID }}
private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }} private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }}
@ -63,7 +63,7 @@ jobs:
- name: Checkout - name: Checkout
uses: actions/checkout@v2 uses: actions/checkout@v2
with: with:
token: ${{ steps.get-app-token.outputs.token }} token: ${{ steps.generate-token.outputs.token }}
ref: master ref: master
fetch-depth: 0 fetch-depth: 0

View File

@ -66,9 +66,9 @@ jobs:
if: | if: |
needs.pr-metadata.outputs.isFork == 'false' needs.pr-metadata.outputs.isFork == 'false'
steps: steps:
- name: Get app-token - name: Generate Token
uses: getsentry/action-github-app-token@v1 uses: tibdex/github-app-token@v1
id: get-app-token id: generate-token
with: with:
app_id: ${{ secrets.K8S_AT_HOME_APP_ID }} app_id: ${{ secrets.K8S_AT_HOME_APP_ID }}
private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }} private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }}
@ -77,7 +77,7 @@ jobs:
uses: actions/checkout@v2 uses: actions/checkout@v2
with: with:
fetch-depth: 0 fetch-depth: 0
token: ${{ steps.get-app-token.outputs.token }} token: ${{ steps.generate-token.outputs.token }}
- uses: yokawasa/action-setup-kube-tools@v0.8.0 - uses: yokawasa/action-setup-kube-tools@v0.8.0
if: | if: |
@ -212,8 +212,7 @@ jobs:
lint: lint:
needs: needs:
- changes-lint - changes-lint
if: if: always() &&
always() &&
needs.changes-lint.outputs.detected == 'true' needs.changes-lint.outputs.detected == 'true'
name: Lint successful name: Lint successful
runs-on: ubuntu-20.04 runs-on: ubuntu-20.04
@ -280,8 +279,7 @@ jobs:
needs: needs:
- changes-install - changes-install
- lint - lint
if: if: always() &&
always() &&
needs.lint.result == 'success' && needs.lint.result == 'success' &&
needs.changes-install.outputs.detected == 'true' needs.changes-install.outputs.detected == 'true'
name: Install charts name: Install charts

View File

@ -1,5 +1,5 @@
--- ---
name: 'Metadata: Label Commenter' name: "Metadata: Label Commenter"
on: on:
issues: issues:
@ -21,17 +21,18 @@ jobs:
name: Label commenter name: Label commenter
runs-on: ubuntu-20.04 runs-on: ubuntu-20.04
steps: steps:
- uses: getsentry/action-github-app-token@v1 - name: Generate Token
id: get-app-token uses: tibdex/github-app-token@v1
id: generate-token
with: with:
app_id: ${{ secrets.K8S_AT_HOME_APP_ID }} app_id: ${{ secrets.K8S_AT_HOME_APP_ID }}
private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }} private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }}
- uses: actions/checkout@v2 - uses: actions/checkout@v2
with: with:
token: ${{ steps.get-app-token.outputs.token }} token: ${{ steps.generate-token.outputs.token }}
ref: master ref: master
- uses: peaceiris/actions-label-commenter@v1 - uses: peaceiris/actions-label-commenter@v1
with: with:
github_token: ${{ steps.get-app-token.outputs.token }} github_token: ${{ steps.generate-token.outputs.token }}

View File

@ -22,15 +22,16 @@ jobs:
name: Label issues and pull requests name: Label issues and pull requests
runs-on: ubuntu-20.04 runs-on: ubuntu-20.04
steps: steps:
- uses: getsentry/action-github-app-token@v1 - name: Generate Token
id: get-app-token uses: tibdex/github-app-token@v1
id: generate-token
with: with:
app_id: ${{ secrets.K8S_AT_HOME_APP_ID }} app_id: ${{ secrets.K8S_AT_HOME_APP_ID }}
private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }} private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }}
- uses: Videndum/label-mastermind@2.1.3 - uses: Videndum/label-mastermind@2.1.3
with: with:
GITHUB_TOKEN: ${{ steps.get-app-token.outputs.token }} GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
configJSON: | configJSON: |
{ {
"releaseMastermind": { "releaseMastermind": {

View File

@ -15,8 +15,9 @@ jobs:
runs-on: ubuntu-20.04 runs-on: ubuntu-20.04
if: "${{ github.event.workflow.name == 'Pre-commit consistency check' }}" if: "${{ github.event.workflow.name == 'Pre-commit consistency check' }}"
steps: steps:
- uses: getsentry/action-github-app-token@v1 - name: Generate Token
id: get-app-token uses: tibdex/github-app-token@v1
id: generate-token
with: with:
app_id: ${{ secrets.K8S_AT_HOME_APP_ID }} app_id: ${{ secrets.K8S_AT_HOME_APP_ID }}
private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }} private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }}
@ -25,14 +26,14 @@ jobs:
uses: potiuk/get-workflow-origin@v1_3 uses: potiuk/get-workflow-origin@v1_3
id: source-run-info id: source-run-info
with: with:
token: ${{ steps.get-app-token.outputs.token }} token: ${{ steps.generate-token.outputs.token }}
sourceRunId: ${{ github.event.workflow_run.id }} sourceRunId: ${{ github.event.workflow_run.id }}
- name: Label precommit success - name: Label precommit success
uses: andymckay/labeler@1.0.4 uses: andymckay/labeler@1.0.4
if: ${{ github.event.workflow_run.conclusion == 'success' }} if: ${{ github.event.workflow_run.conclusion == 'success' }}
with: with:
repo-token: ${{ steps.get-app-token.outputs.token }} repo-token: ${{ steps.generate-token.outputs.token }}
issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }} issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }}
add-labels: "precommit:ok" add-labels: "precommit:ok"
remove-labels: "precommit:failed" remove-labels: "precommit:failed"
@ -41,7 +42,7 @@ jobs:
uses: andymckay/labeler@1.0.4 uses: andymckay/labeler@1.0.4
if: ${{ github.event.workflow_run.conclusion == 'failure' }} if: ${{ github.event.workflow_run.conclusion == 'failure' }}
with: with:
repo-token: ${{ steps.get-app-token.outputs.token }} repo-token: ${{ steps.generate-token.outputs.token }}
issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }} issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }}
add-labels: "precommit:failed" add-labels: "precommit:failed"
remove-labels: "precommit:ok" remove-labels: "precommit:ok"
@ -51,8 +52,9 @@ jobs:
runs-on: ubuntu-20.04 runs-on: ubuntu-20.04
if: "${{ github.event.workflow.name == 'Charts: Validate' }}" if: "${{ github.event.workflow.name == 'Charts: Validate' }}"
steps: steps:
- uses: getsentry/action-github-app-token@v1 - name: Generate Token
id: get-app-token uses: tibdex/github-app-token@v1
id: generate-token
with: with:
app_id: ${{ secrets.K8S_AT_HOME_APP_ID }} app_id: ${{ secrets.K8S_AT_HOME_APP_ID }}
private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }} private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }}
@ -61,14 +63,14 @@ jobs:
uses: potiuk/get-workflow-origin@v1_3 uses: potiuk/get-workflow-origin@v1_3
id: source-run-info id: source-run-info
with: with:
token: ${{ steps.get-app-token.outputs.token }} token: ${{ steps.generate-token.outputs.token }}
sourceRunId: ${{ github.event.workflow_run.id }} sourceRunId: ${{ github.event.workflow_run.id }}
- name: "Get workflow job status" - name: "Get workflow job status"
uses: actions/github-script@v5 uses: actions/github-script@v5
id: get-workflow-jobs id: get-workflow-jobs
with: with:
github-token: ${{ steps.get-app-token.outputs.token }} github-token: ${{ steps.generate-token.outputs.token }}
script: | script: |
let result = new Object let result = new Object
@ -93,7 +95,7 @@ jobs:
uses: andymckay/labeler@1.0.4 uses: andymckay/labeler@1.0.4
if: ${{ fromJSON(steps.get-workflow-jobs.outputs.result).lint == 'success' }} if: ${{ fromJSON(steps.get-workflow-jobs.outputs.result).lint == 'success' }}
with: with:
repo-token: ${{ steps.get-app-token.outputs.token }} repo-token: ${{ steps.generate-token.outputs.token }}
issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }} issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }}
add-labels: "lint:ok" add-labels: "lint:ok"
remove-labels: "lint:failed" remove-labels: "lint:failed"
@ -102,7 +104,7 @@ jobs:
uses: andymckay/labeler@1.0.4 uses: andymckay/labeler@1.0.4
if: ${{ fromJSON(steps.get-workflow-jobs.outputs.result).lint == 'failure' }} if: ${{ fromJSON(steps.get-workflow-jobs.outputs.result).lint == 'failure' }}
with: with:
repo-token: ${{ steps.get-app-token.outputs.token }} repo-token: ${{ steps.generate-token.outputs.token }}
issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }} issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }}
add-labels: "lint:failed" add-labels: "lint:failed"
remove-labels: "lint:ok" remove-labels: "lint:ok"
@ -111,7 +113,7 @@ jobs:
uses: andymckay/labeler@1.0.4 uses: andymckay/labeler@1.0.4
if: ${{ fromJSON(steps.get-workflow-jobs.outputs.result).install == 'success' }} if: ${{ fromJSON(steps.get-workflow-jobs.outputs.result).install == 'success' }}
with: with:
repo-token: ${{ steps.get-app-token.outputs.token }} repo-token: ${{ steps.generate-token.outputs.token }}
issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }} issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }}
add-labels: "install:ok" add-labels: "install:ok"
remove-labels: "install:failed" remove-labels: "install:failed"
@ -120,7 +122,7 @@ jobs:
uses: andymckay/labeler@1.0.4 uses: andymckay/labeler@1.0.4
if: ${{ fromJSON(steps.get-workflow-jobs.outputs.result).install == 'failure' }} if: ${{ fromJSON(steps.get-workflow-jobs.outputs.result).install == 'failure' }}
with: with:
repo-token: ${{ steps.get-app-token.outputs.token }} repo-token: ${{ steps.generate-token.outputs.token }}
issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }} issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }}
add-labels: "install:failed" add-labels: "install:failed"
remove-labels: "install:ok" remove-labels: "install:ok"

View File

@ -10,9 +10,9 @@ jobs:
stale: stale:
runs-on: ubuntu-20.04 runs-on: ubuntu-20.04
steps: steps:
- name: Get app-token - name: Generate Token
uses: getsentry/action-github-app-token@v1 uses: tibdex/github-app-token@v1
id: get-app-token id: generate-token
with: with:
app_id: ${{ secrets.K8S_AT_HOME_APP_ID }} app_id: ${{ secrets.K8S_AT_HOME_APP_ID }}
private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }} private_key: ${{ secrets.K8S_AT_HOME_APP_PRIVATE_KEY }}
@ -20,7 +20,7 @@ jobs:
- name: Check for stale issues and PRs - name: Check for stale issues and PRs
uses: actions/stale@v4 uses: actions/stale@v4
with: with:
repo-token: ${{ steps.get-app-token.outputs.token }} repo-token: ${{ steps.generate-token.outputs.token }}
days-before-issue-stale: 60 days-before-issue-stale: 60
days-before-pr-stale: 60 days-before-pr-stale: 60
days-before-close: 14 days-before-close: 14