imp/.github/workflows/kubeconform.yml at 6daa8a829e840fea40e1a042c007e2565546fbba · syscode-labs/imp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
name: Manifest Compatibility (kubeconform)

on:
  pull_request:
    branches: [main]
  push:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read

jobs:
  resolve-kubernetes-versions:
    name: Resolve latest 3 Kubernetes stable versions
    runs-on: ubuntu-latest
    outputs:
      versions: ${{ steps.resolve.outputs.versions_without_v }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6

      - name: Resolve from official Kubernetes release channel
        id: resolve
        uses: ./.github/actions/resolve-k8s-versions

  kubeconform:
    name: kubeconform (K8s ${{ matrix.kubernetes_version }})
    runs-on: ubuntu-latest
    needs: resolve-kubernetes-versions
    strategy:
      fail-fast: false
      matrix:
        kubernetes_version: ${{ fromJSON(needs.resolve-kubernetes-versions.outputs.versions) }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6

      - name: Install kustomize
        uses: imranismail/setup-kustomize@v3

      - name: Install kubeconform
        env:
          KUBECONFORM_VERSION: "v0.7.0"
        run: |
          set -euo pipefail
          curl -fsSL \
            "https://github.com/yannh/kubeconform/releases/download/${KUBECONFORM_VERSION}/kubeconform-linux-amd64.tar.gz" \
            -o /tmp/kubeconform.tar.gz
          tar -xzf /tmp/kubeconform.tar.gz -C /tmp
          sudo install -m 0755 /tmp/kubeconform /usr/local/bin/kubeconform

      - name: Render manifests
        run: |
          set -euo pipefail
          kustomize build config/crd > /tmp/crd.yaml
          kustomize build config/default > /tmp/default.yaml

      - name: Validate manifests against Kubernetes schema
        run: |
          set -euo pipefail
          kubeconform \
            -strict \
            -ignore-missing-schemas \
            -summary \
            -kubernetes-version "${{ matrix.kubernetes_version }}" \
            /tmp/crd.yaml /tmp/default.yaml