t.behrendt/k_deploy_workflows
1
0
Fork 0
Code Issues 1 Pull Requests Actions Activity

ci: pin varios actions to a proper semver version

Browse Source
This commit is contained in:
Timo Behrendt
2026-02-14 18:58:19 +01:00
parent b85ff0a4d5
commit 6df412f356
3 changed files with 20 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
.gitea/workflows/cd.yaml
View File

@@ -41,7 +41,7 @@ jobs:
has_helmfile: ${{ steps.check-helmfile.outputs.exists }} has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
has_k8s: ${{ steps.check-k8s.outputs.exists }} has_k8s: ${{ steps.check-k8s.outputs.exists }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Check if helmfile.yaml exists - name: Check if helmfile.yaml exists
id: check-helmfile id: check-helmfile
run: | run: |
@@ -68,15 +68,15 @@ jobs:
needs: detect-service-type needs: detect-service-type
if: needs.detect-service-type.outputs.has_k8s == 'true' if: needs.detect-service-type.outputs.has_k8s == 'true'
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with: with:
ref: ${{ inputs.deploy_branch }} ref: ${{ inputs.deploy_branch }}
- uses: ./.gitea/actions/extract-namespace-from-repo-name - uses: ./.gitea/actions/extract-namespace-from-repo-name
id: namespace id: namespace
with: with:
repo: ${{ github.repository }} repo: ${{ github.repository }}
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -119,16 +119,16 @@ jobs:
needs.detect-service-type.outputs.has_k8s == 'true' && needs.detect-service-type.outputs.has_k8s == 'true' &&
inputs.skip_helm_deployment != 'true' inputs.skip_helm_deployment != 'true'
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with: with:
ref: ${{ inputs.deploy_branch }} ref: ${{ inputs.deploy_branch }}
- uses: ./.gitea/actions/extract-namespace-from-repo-name - uses: ./.gitea/actions/extract-namespace-from-repo-name
id: namespace id: namespace
with: with:
repo: ${{ github.repository }} repo: ${{ github.repository }}
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4 - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -156,14 +156,14 @@ jobs:
echo "No custom secrets to create" echo "No custom secrets to create"
fi fi
- name: Deploy Helm - name: Deploy Helm
uses: helmfile/helmfile-action@f64d5db9f8660aae0205b5fcfc56577d44acefab # v2 uses: helmfile/helmfile-action@6867d18430fbe251b9c1a498e26b6c45fe6ed9db # v2.2.0
with: with:
helmfile-args: apply helmfile-args: apply
# Summary job that always runs to show what was deployed # Summary job that always runs to show what was deployed
deployment-summary: deployment-summary:
runs-on: ubuntu-latest runs-on: ubuntu-latest
needs: [detect-service-type, deploy-k8s, deploy-helm] needs: [ detect-service-type, deploy-k8s, deploy-helm ]
if: always() if: always()
steps: steps:
- name: Deployment Summary - name: Deployment Summary

20
.gitea/workflows/ci.yaml
View File

@@ -26,7 +26,7 @@ jobs:
has_helmfile: ${{ steps.check-helmfile.outputs.exists }} has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
has_k8s: ${{ steps.check-k8s.outputs.exists }} has_k8s: ${{ steps.check-k8s.outputs.exists }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Check if helmfile.yaml exists - name: Check if helmfile.yaml exists
id: check-helmfile id: check-helmfile
run: | run: |
@@ -53,18 +53,18 @@ jobs:
needs: detect-service-type needs: detect-service-type
if: needs.detect-service-type.outputs.has_k8s == 'true' if: needs.detect-service-type.outputs.has_k8s == 'true'
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: ./.gitea/actions/extract-namespace-from-repo-name - uses: ./.gitea/actions/extract-namespace-from-repo-name
id: namespace id: namespace
with: with:
repo: ${{ github.repository }} repo: ${{ github.repository }}
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
- name: Validate k8s manifests - name: Validate k8s manifests
uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3 uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v4.0.1
with: with:
namespace: ${{ steps.namespace.outputs.namespace }} namespace: ${{ steps.namespace.outputs.namespace }}
lintType: dryrun lintType: dryrun
@@ -78,26 +78,26 @@ jobs:
needs.detect-service-type.outputs.has_k8s == 'true' && needs.detect-service-type.outputs.has_k8s == 'true' &&
inputs.skip_helm_validation != 'true' inputs.skip_helm_validation != 'true'
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: ./.gitea/actions/extract-namespace-from-repo-name - uses: ./.gitea/actions/extract-namespace-from-repo-name
id: namespace id: namespace
with: with:
repo: ${{ github.repository }} repo: ${{ github.repository }}
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4 - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
- uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4 - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4 - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
with: with:
method: kubeconfig method: kubeconfig
kubeconfig: ${{ secrets.KUBECONFIG }} kubeconfig: ${{ secrets.KUBECONFIG }}
- name: Validate Helm - name: Validate Helm
uses: helmfile/helmfile-action@37b026692c13757b2852cd7449e6e82eccc345d3 # v2.1.1 uses: helmfile/helmfile-action@6867d18430fbe251b9c1a498e26b6c45fe6ed9db # v2.2.0
with: with:
helmfile-args: diff helmfile-args: diff
# Summary job that always runs to show what was validated # Summary job that always runs to show what was validated
ci-summary: ci-summary:
runs-on: ubuntu-latest runs-on: ubuntu-latest
needs: [detect-service-type, validate-k8s, validate-helm] needs: [ detect-service-type, validate-k8s, validate-helm ]
if: always() if: always()
steps: steps:
- name: CI Summary - name: CI Summary

2
.gitea/workflows/release.yaml
View File

@@ -13,7 +13,7 @@ jobs:
name: Release name: Release
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Increment tag - name: Increment tag