Package all manifests with release

.github/workflows/helm-unittest.yaml

@@ -3,7 +3,12 @@
 
 name: Run Helm unit tests
 
-"on": pull_request
+"on":
+  pull_request:
+    branches:
+      - main
+    paths:
+      - deploy/charts/**
 
 # Do not grant jobs any permissions by default
 permissions: {}

.github/workflows/operator-lint-and-test.yaml

@@ -2,6 +2,10 @@ name: Lint and Test Prefect Operator Chart
 
 "on":
   pull_request:
+    branches:
+      - main
+    paths:
+      - deploy/charts/**
 
 # Do not grant jobs any permissions by default
 permissions: {}

.github/workflows/release.yaml

@@ -33,6 +33,7 @@ jobs:
         run: make test
 
   build-and-upload-manifests:
+    if: github.ref_type == 'tag'
     needs: unit-tests
     permissions:
       contents: write
@@ -44,15 +45,29 @@ jobs:
       - name: Install tool dependencies
         uses: jdx/mise-action@v2
 
-      - name: Package CRDs
+      - name: Package kubernetes manifests & CRDs
         run: |
+          # package just CRDs
           cat deploy/charts/prefect-operator/crds/*.yaml > prefect-crds.yaml
+          # handle helm dependencies
+          helm repo add bitnami https://charts.bitnami.com/bitnami
+          helm dependency build deploy/charts/prefect-operator
+          # template the helm chart including the CRDs
+          helm template prefect-operator deploy/charts/prefect-operator \
+          --include-crds --set operator.image.tag=${{ github.ref_name }} \
+          > prefect-operator.yaml
+          # Remove labels relevant only for Helm installs
+          yq -i 'del(.metadata.labels."app.kubernetes.io/managed-by")' prefect-operator.yaml
+          yq -i 'del(.metadata.labels."helm.sh/chart")' prefect-operator.yaml
+          yq -i 'del(.spec.template.metadata.labels."app.kubernetes.io/managed-by")' prefect-operator.yaml
+          yq -i 'del(.spec.template.metadata.labels."helm.sh/chart")' prefect-operator.yaml
+          # Ensure all references to app version match the released version tag
+          yq -i '(.. | select(tag == "!!str" and . == "v0.0.0")) |= "${{ github.ref_name }}"' prefect-operator.yaml
 
       - name: Upload release assets
-        if: github.ref_type == 'tag'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: gh release upload ${{ github.ref_name }} prefect-crds.yaml
+        run: gh release upload ${{ github.ref_name }} prefect-crds.yaml prefect-operator.yaml
 
   build-and-push-docker-image:
     needs: unit-tests

.mise.toml

@@ -12,6 +12,7 @@ kustomize = '5.3.0'
 pre-commit = '3.8.0'
 setup-envtest = '0.17.0'
 yamllint = '1.35.1'
+yq = '4.44.3'
 
 # tomlv does not currently have an entry in the registry.
 # For now, install with `go`:

.yamllint

@@ -2,7 +2,7 @@
 extends: default
 
 ignore: |
-  deploy/
+  deploy/charts/
 
 rules:
   comments:

Makefile

@@ -90,6 +90,7 @@ vet: ## Run go vet against code.
 
 .PHONY: helmbuild
 helmbuild: ## Build Helm dependencies
+	helm repo add bitnami https://charts.bitnami.com/bitnami
 	helm dependency build $(CHART_PATH)
 
 

deploy/samples/kustomization.yaml

@@ -1,4 +1,3 @@
-## Append samples of your project ##
 resources:
   - v1_prefectserver_sqlite.yaml
   - v1_prefectworkpool_process.yaml
@@ -7,4 +6,3 @@ resources:
   # - v1_prefectserver_sqlite.yaml
   # - v1_prefectworkpool_kubernetes.yaml
   # - v1_prefectworkpool_process.yaml
-#+kubebuilder:scaffold:manifestskustomizesamples

deploy/samples/v1_prefectworkpool_external_prefect_cloud.yaml

@@ -4,7 +4,7 @@ metadata:
   name: the-api-key-secret
 type: Opaque
 stringData:
-  the-api-key: "pnu_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
+  the-api-key: pnu_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
 ---
 apiVersion: prefect.io/v1
 kind: PrefectWorkPool
@@ -17,11 +17,11 @@ spec:
   type: process
   server:
     remoteApiUrl: https://api.prefect.cloud
-    accountId:   aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa
+    accountId: aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa
     workspaceId: bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb
     apiKey:
       valueFrom:
         secretKeyRef:
-          name: 'the-api-key-secret'
-          key: 'the-api-key'
+          name: the-api-key-secret
+          key: the-api-key
   workers: 3