t.behrendt/k
1
0
Fork 0
Code Issues 1 Pull Requests Actions Activity

ci: pin various actions to a proper semver version (#49)
All checks were successful
Deploy / check-changes (push) Successful in 12s
Details
Deploy / deploy-node-labels (push) Has been skipped
Details
Deploy / deploy-coredns (push) Has been skipped
Details
Deploy / deploy-traefik (push) Has been skipped
Details
Deploy / deploy-crowdsec (push) Has been skipped
Details
Deploy / deploy-docker-registry-secret (push) Successful in 19s
Details

Browse Source 
Reviewed-on: #49
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
This commit was merged in pull request #49.
This commit is contained in:
Timo Behrendt
2026-02-14 19:28:18 +01:00
committed by t.behrendt
parent c70402fd4e
commit 72f8e70b5d
2 changed files with 36 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
.gitea/workflows/deploy.yaml
View File

@@ -15,10 +15,10 @@ jobs:
traefik: ${{ steps.filter.outputs.traefik }} traefik: ${{ steps.filter.outputs.traefik }}
crowdsec: ${{ steps.filter.outputs.crowdsec }} crowdsec: ${{ steps.filter.outputs.crowdsec }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with: with:
fetch-depth: 0 fetch-depth: 0
- uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3 - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
id: filter id: filter
with: with:
filters: | filters: |
@@ -36,9 +36,9 @@ jobs:
needs: check-changes needs: check-changes
if: ${{ needs.check-changes.outputs.node-labels == 'true' || github.event_name == 'workflow_dispatch' }} if: ${{ needs.check-changes.outputs.node-labels == 'true' || github.event_name == 'workflow_dispatch' }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -51,9 +51,9 @@ jobs:
needs: check-changes needs: check-changes
if: ${{ needs.check-changes.outputs.coredns == 'true' || github.event_name == 'workflow_dispatch' }} if: ${{ needs.check-changes.outputs.coredns == 'true' || github.event_name == 'workflow_dispatch' }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -69,14 +69,14 @@ jobs:
needs: check-changes needs: check-changes
if: ${{ needs.check-changes.outputs.traefik == 'true' || github.event_name == 'workflow_dispatch' }} if: ${{ needs.check-changes.outputs.traefik == 'true' || github.event_name == 'workflow_dispatch' }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
- name: Set ionos api credentials - name: Set ionos api credentials
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5 uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
with: with:
namespace: kube-system namespace: kube-system
secret-name: ionos-api-credentials secret-name: ionos-api-credentials
@@ -86,7 +86,7 @@ jobs:
"apiKey": "${{ secrets.IONOS_API_KEY }}" "apiKey": "${{ secrets.IONOS_API_KEY }}"
} }
- name: Set admin basic auth credentials - name: Set admin basic auth credentials
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5 uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
with: with:
namespace: kube-system namespace: kube-system
secret-name: admin-basic-auth-credentials secret-name: admin-basic-auth-credentials
@@ -96,7 +96,7 @@ jobs:
"auth": "${{ secrets.ADMIN_BASIC_AUTH_CREDENTIALS }}" "auth": "${{ secrets.ADMIN_BASIC_AUTH_CREDENTIALS }}"
} }
- name: Set crowdsec bouncer api key - name: Set crowdsec bouncer api key
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5 uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
with: with:
namespace: kube-system namespace: kube-system
secret-name: crowdsec-bouncer-api-key secret-name: crowdsec-bouncer-api-key
@@ -118,21 +118,21 @@ jobs:
needs: check-changes needs: check-changes
if: ${{ needs.check-changes.outputs.crowdsec == 'true' || github.event_name == 'workflow_dispatch' }} if: ${{ needs.check-changes.outputs.crowdsec == 'true' || github.event_name == 'workflow_dispatch' }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/actions/extract-namespace-from-repo-name@v0 - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/actions/extract-namespace-from-repo-name@0.0.2
id: namespace id: namespace
with: with:
repo: ${{ github.repository }} repo: ${{ github.repository }}
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4 - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
with: with:
version: "3.15.0" version: "3.15.0"
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
- name: Deploy helm - name: Deploy helm
uses: helmfile/helmfile-action@37b026692c13757b2852cd7449e6e82eccc345d3 # v2.1.1 uses: helmfile/helmfile-action@6867d18430fbe251b9c1a498e26b6c45fe6ed9db # v2.2.0
with: with:
helmfile-args: apply helmfile-args: apply
helmfile-workdirectory: "crowdsec" helmfile-workdirectory: "crowdsec"
@@ -141,9 +141,9 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
needs: check-changes needs: check-changes
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}

28
.gitea/workflows/validate.yaml
View File

@@ -9,9 +9,9 @@ jobs:
validate-node-lables: validate-node-lables:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -22,9 +22,9 @@ jobs:
validate-coredns: validate-coredns:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -35,14 +35,14 @@ jobs:
validate-traefik: validate-traefik:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
- name: Validate - name: Validate
uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3 uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3.0.1
with: with:
namespace: kube-system namespace: kube-system
lintType: dryrun lintType: dryrun
@@ -53,17 +53,17 @@ jobs:
- ubuntu-latest - ubuntu-latest
- linux_amd64 - linux_amd64
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4 - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
with: with:
version: "3.15.0" version: "3.15.0"
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
- name: Validate Helm - name: Validate Helm
uses: helmfile/helmfile-action@37b026692c13757b2852cd7449e6e82eccc345d3 # v2.1.1 uses: helmfile/helmfile-action@6867d18430fbe251b9c1a498e26b6c45fe6ed9db # v2.2.0
with: with:
helmfile-args: diff helmfile-args: diff
helmfile-workdirectory: "crowdsec" helmfile-workdirectory: "crowdsec"