From 5292684a4a87a5860b33eb2c6b633d2c45fb7742 Mon Sep 17 00:00:00 2001 From: pat-s Date: Fri, 16 May 2025 16:05:05 +0200 Subject: [PATCH] ci: fix release workflow --- .gitea/workflows/release-version.yml | 116 ++++++++++++++------------- 1 file changed, 60 insertions(+), 56 deletions(-) diff --git a/.gitea/workflows/release-version.yml b/.gitea/workflows/release-version.yml index 18a239c..ccd0d89 100644 --- a/.gitea/workflows/release-version.yml +++ b/.gitea/workflows/release-version.yml @@ -10,73 +10,77 @@ env: HELM_VERSION: "3.17.3" jobs: - generate-chart-publish: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - name: install tools - run: | - apt update -y - apt install -y curl ca-certificates curl gnupg - # helm - curl -O https://get.helm.sh/helm-v${{ env.HELM_VERSION }}-linux-amd64.tar.gz - tar -xzf helm-v${{ env.HELM_VERSION }}-linux-amd64.tar.gz - mv linux-amd64/helm /usr/local/bin/ - rm -rf linux-amd64 helm-v${{ env.HELM_VERSION }}-linux-amd64.tar.gz - helm version - # docker - install -m 0755 -d /etc/apt/keyrings - curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg - chmod a+r /etc/apt/keyrings/docker.gpg - echo "deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu "$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null - apt update -y - apt install -y python3 python3-pip apt-transport-https docker-ce-cli - pip install awscli --break-system-packages + # generate-chart-publish: + # runs-on: ubuntu-latest + # steps: + # - uses: actions/checkout@v4 + # - name: install tools + # run: | + # apt update -y + # apt install -y curl ca-certificates curl gnupg + # # helm + # curl -O https://get.helm.sh/helm-v${{ env.HELM_VERSION }}-linux-amd64.tar.gz + # tar -xzf helm-v${{ env.HELM_VERSION }}-linux-amd64.tar.gz + # mv linux-amd64/helm /usr/local/bin/ + # rm -rf linux-amd64 helm-v${{ env.HELM_VERSION }}-linux-amd64.tar.gz + # helm version + # # docker + # install -m 0755 -d /etc/apt/keyrings + # curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg + # chmod a+r /etc/apt/keyrings/docker.gpg + # echo "deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu "$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null + # apt update -y + # apt install -y python3 python3-pip apt-transport-https docker-ce-cli + # pip install awscli --break-system-packages - - name: Import GPG key - id: import_gpg - uses: https://github.com/crazy-max/ghaction-import-gpg@v6 - with: - gpg_private_key: ${{ secrets.GPGSIGN_KEY }} - passphrase: ${{ secrets.GPGSIGN_PASSPHRASE }} - fingerprint: CC64B1DB67ABBEECAB24B6455FC346329753F4B0 + # - name: Import GPG key + # id: import_gpg + # uses: https://github.com/crazy-max/ghaction-import-gpg@v6 + # with: + # gpg_private_key: ${{ secrets.GPGSIGN_KEY }} + # passphrase: ${{ secrets.GPGSIGN_PASSPHRASE }} + # fingerprint: CC64B1DB67ABBEECAB24B6455FC346329753F4B0 - # Using helm gpg plugin as 'helm package --sign' has issues with gpg2: https://github.com/helm/helm/issues/2843 - - name: package chart - run: | - echo ${{ secrets.DOCKER_CHARTS_PASSWORD }} | docker login -u ${{ secrets.DOCKER_CHARTS_USERNAME }} --password-stdin - # FIXME: use upstream after https://github.com/technosophos/helm-gpg/issues/1 is solved - helm plugin install https://github.com/pat-s/helm-gpg - helm dependency build - helm package --version "${GITHUB_REF#refs/tags/v}" ./ - mkdir gitea - mv gitea*.tgz gitea/ - curl -s -L -o gitea/index.yaml https://dl.gitea.com/charts/index.yaml - helm repo index gitea/ --url https://dl.gitea.com/charts --merge gitea/index.yaml - # push to dockerhub - echo ${{ secrets.DOCKER_CHARTS_PASSWORD }} | helm registry login -u ${{ secrets.DOCKER_CHARTS_USERNAME }} registry-1.docker.io --password-stdin - helm push gitea/gitea-${GITHUB_REF#refs/tags/v}.tgz oci://registry-1.docker.io/giteacharts - helm registry logout registry-1.docker.io + # # Using helm gpg plugin as 'helm package --sign' has issues with gpg2: https://github.com/helm/helm/issues/2843 + # - name: package chart + # run: | + # echo ${{ secrets.DOCKER_CHARTS_PASSWORD }} | docker login -u ${{ secrets.DOCKER_CHARTS_USERNAME }} --password-stdin + # # FIXME: use upstream after https://github.com/technosophos/helm-gpg/issues/1 is solved + # helm plugin install https://github.com/pat-s/helm-gpg + # helm dependency build + # helm package --version "${GITHUB_REF#refs/tags/v}" ./ + # mkdir gitea + # mv gitea*.tgz gitea/ + # curl -s -L -o gitea/index.yaml https://dl.gitea.com/charts/index.yaml + # helm repo index gitea/ --url https://dl.gitea.com/charts --merge gitea/index.yaml + # # push to dockerhub + # echo ${{ secrets.DOCKER_CHARTS_PASSWORD }} | helm registry login -u ${{ secrets.DOCKER_CHARTS_USERNAME }} registry-1.docker.io --password-stdin + # helm push gitea/gitea-${GITHUB_REF#refs/tags/v}.tgz oci://registry-1.docker.io/giteacharts + # helm registry logout registry-1.docker.io - - name: aws credential configure - uses: https://github.com/aws-actions/configure-aws-credentials@v4 - with: - aws-access-key-id: ${{ secrets.AWS_KEY_ID }} - aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - aws-region: ${{ secrets.AWS_REGION }} + # - name: aws credential configure + # uses: https://github.com/aws-actions/configure-aws-credentials@v4 + # with: + # aws-access-key-id: ${{ secrets.AWS_KEY_ID }} + # aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} + # aws-region: ${{ secrets.AWS_REGION }} - - name: Copy files to S3 and clear cache - run: | - aws s3 sync gitea/ s3://${{ secrets.AWS_S3_BUCKET}}/charts/ + # - name: Copy files to S3 and clear cache + # run: | + # aws s3 sync gitea/ s3://${{ secrets.AWS_S3_BUCKET}}/charts/ release-gitea: - needs: generate-chart-publish + # needs: generate-chart-publish runs-on: ubuntu-latest container: docker.io/thegeeklab/git-sv:2.0.1 steps: + - name: install tools + run: | + apk add -q --update --no-cache nodejs - uses: actions/checkout@v4 with: fetch-tags: true + fetch-depth: 0 - name: Create changelog run: | @@ -89,4 +93,4 @@ jobs: uses: https://github.com/akkuman/gitea-release-action@v1 with: body_path: CHANGELOG.md - token: "${{secrets.ISSUE_RW_TOKEN}}" + token: "${{ secrets.RELEASE_TOKEN }}"