Upgrade to Kyverno 1.13.1 #201
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test Private Helm | |
| on: | |
| pull_request: | |
| paths: | |
| - charts-private/** | |
| - .github/workflows/test-private.yaml | |
| jobs: | |
| test-helm-lint: | |
| runs-on: ubuntu-latest | |
| name: Lint Helm Charts | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Helm | |
| uses: azure/setup-helm@v3 | |
| with: | |
| version: v3.12.0 | |
| - uses: actions/setup-python@v4 | |
| with: | |
| python-version: 3.9 | |
| - name: Set up chart-testing | |
| uses: helm/[email protected] | |
| - name: Run chart-testing (lint) | |
| run: ct lint --config .github/config/cf.yaml --chart-dirs charts-private | |
| test-helm-install: | |
| needs: [test-helm-lint] | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| chart: | |
| - "phylogatr-web" | |
| - "sirmodel" | |
| # TODO: Maybe too few resources with Kind cluster to support init job | |
| # Init job is required to bootstrap Nominatim | |
| #- nominatim | |
| - "rigatoni" | |
| - webmo | |
| - emthub | |
| - chatsqc | |
| - emt-api | |
| name: Test Install Helm Chart ${{ matrix.chart }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Helm | |
| uses: azure/setup-helm@v3 | |
| with: | |
| version: v3.12.0 | |
| - name: Set up chart-testing | |
| uses: helm/[email protected] | |
| - name: Create kind cluster | |
| uses: helm/[email protected] | |
| with: | |
| version: v0.17.0 | |
| cluster_name: kind | |
| node_image: kindest/node:v1.25.3@sha256:f52781bc0d7a19fb6c405c2af83abfeb311f130707a0e219175677e366cc45d1 | |
| config: .github/config/kind.yaml | |
| - name: Label kind nodes | |
| run: | | |
| kubectl label node kind-worker node-role.kubernetes.io/test='' | |
| kubectl label node kind-worker2 node-role.kubernetes.io/test='' | |
| - name: Build and Load nominatim images | |
| if: matrix.chart == 'nominatim' | |
| run: | | |
| make -f docker-images/postgresql/Makefile build | |
| make -f docker-images/postgresql/Makefile kind-load | |
| make -f docker-images/nominatim/Makefile build | |
| make -f docker-images/nominatim/Makefile kind-load | |
| make -f docker-images/postgresql-nominatim/Makefile build | |
| make -f docker-images/postgresql-nominatim/Makefile kind-load | |
| - name: Set image pull secret | |
| run: | | |
| sed -i 's|IMAGE-PULL-PASSWORD|${{ secrets.OSC_REGISTRY_ROBOT_WEBSERVICES_READ_TOKEN}}|g' charts-private/${{ matrix.chart }}/ci/*.yaml | |
| sed -i 's|IMAGE-PULL-PASSWORD|${{ secrets.OSC_REGISTRY_ROBOT_WEBSERVICES_READ_TOKEN}}|g' .github/config/*.yaml | |
| - name: Install Keycloak | |
| run: | | |
| helm repo add bitnami https://charts.bitnami.com/bitnami | |
| helm install keycloak bitnami/keycloak -n keycloak --create-namespace --version 21.2.0 | |
| - name: Install Kyverno | |
| run: | | |
| helm repo add kyverno https://kyverno.github.io/kyverno/ | |
| helm install kyverno kyverno/kyverno -n kyverno --create-namespace -f .github/config/kyverno-values.yaml --version 3.3.3 | |
| timeout 120 /bin/bash -c 'until kubectl get pods -n kyverno -l app.kubernetes.io/component=admission-controller -o jsonpath="{range .items[*]}{.status.containerStatuses[*].ready}{end}" | grep "true" ; do echo "Waiting for Kyverno" ; sleep 10 ; done' | |
| helm dependency build charts/kyverno-policies | |
| helm install kyverno-policies charts/kyverno-policies -n kyverno -f .github/config/kyverno-policies-values.yaml | |
| kubectl apply -f .github/config/k8-ldap-configmaps.yaml | |
| sleep 120 | |
| - name: Add namespaces | |
| run: kubectl apply -f .github/config/namespaces.yaml | |
| - name: Run chart-testing (install) | |
| run: | | |
| ct install --config .github/config/cf.yaml --charts charts-private/${{ matrix.chart }} --namespace ${{ matrix.chart }} | |
| - name: Debug failure | |
| if: failure() | |
| run: | | |
| kubectl describe node -A | |
| kubectl describe pod -A | |
| kubectl describe service -A | |
| kubectl describe daemonset -A | |
| if [ ${{ matrix.chart }} == "nominatim" ]; then | |
| kubectl describe job -A | |
| kubectl logs job.batch/$(kubectl get jobs -n nominatim -o jsonpath="{.items[0].metadata.name}") -n nominatim | |
| fi | |
| kubectl logs -n kyverno -l app.kubernetes.io/component=admission-controller |