refactor!: modernize shared cicd deploy and validate workflows (#49)

Reviewed-on: #49 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2026-04-29 19:49:08 +02:00
parent dc62bc4e6a
commit bb6706d1a0
6 changed files with 81 additions and 238 deletions
@@ -0,0 +1,129 @@
+name: CI
+
+on:
+  workflow_call:
+    inputs:
+      k8s_dir:
+        description: "Path to Kubernetes manifests directory"
+        required: false
+        default: "k8s/"
+        type: string
+      helmfile_path:
+        description: "Path to helmfile.yaml"
+        required: false
+        default: "helmfile.yaml"
+        type: string
+      skip_helm_validation:
+        description: "Skip Helm validation even if helmfile.yaml exists"
+        required: false
+        default: false
+        type: boolean
+      helmfile_env:
+        description: "Optional JSON object string of environment variables for Helmfile"
+        required: false
+        default: "{}"
+        type: string
+
+jobs:
+  detect-service-type:
+    runs-on: ubuntu-latest
+    outputs:
+      has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
+      has_k8s: ${{ steps.check-k8s.outputs.exists }}
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Check if helmfile.yaml exists
+        id: check-helmfile
+        run: |
+          if [ -f "${{ inputs.helmfile_path }}" ]; then
+            echo "exists=true" >> $GITHUB_OUTPUT
+            echo "Found helmfile.yaml at ${{ inputs.helmfile_path }}"
+          else
+            echo "exists=false" >> $GITHUB_OUTPUT
+            echo "No helmfile.yaml found at ${{ inputs.helmfile_path }}"
+          fi
+      - name: Check if k8s directory exists
+        id: check-k8s
+        run: |
+          if [ -d "${{ inputs.k8s_dir }}" ]; then
+            echo "exists=true" >> $GITHUB_OUTPUT
+            echo "Found k8s directory at ${{ inputs.k8s_dir }}"
+          else
+            echo "exists=false" >> $GITHUB_OUTPUT
+            echo "No k8s directory found at ${{ inputs.k8s_dir }}"
+          fi
+
+  validate-k8s:
+    runs-on: ubuntu-latest
+    needs: detect-service-type
+    if: needs.detect-service-type.outputs.has_k8s == 'true'
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+        id: namespace
+        with:
+          repo: ${{ github.repository }}
+      - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+        with:
+          method: kubeconfig
+          kubeconfig: ${{ secrets.KUBECONFIG }}
+      - name: Validate k8s manifests
+        uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3.0.1
+        with:
+          namespace: ${{ steps.namespace.outputs.namespace }}
+          lintType: dryrun
+          manifests: "${{ inputs.k8s_dir }}"
+
+  validate-helm:
+    runs-on: ubuntu-latest
+    needs: detect-service-type
+    if: |
+      needs.detect-service-type.outputs.has_helmfile == 'true' && 
+      needs.detect-service-type.outputs.has_k8s == 'true' && 
+      inputs.skip_helm_validation != 'true'
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+        id: namespace
+        with:
+          repo: ${{ github.repository }}
+      - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
+      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+        with:
+          method: kubeconfig
+          kubeconfig: ${{ secrets.KUBECONFIG }}
+      - name: Validate Helm
+        uses: helmfile/helmfile-action@02671705b1dda1dc4b0a4ddd4f9f1ea8f4568c6f # v2.4.3
+        with:
+          helmfile-args: diff
+        env: ${{ fromJSON(inputs.helmfile_env) }}
+
+  # Summary job that always runs to show what was validated
+  ci-summary:
+    runs-on: ubuntu-latest
+    needs: [detect-service-type, validate-k8s, validate-helm]
+    if: always()
+    steps:
+      - name: CI Summary
+        run: |
+          echo "## CI Validation Summary" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          if [ "${{ needs.detect-service-type.outputs.has_k8s }}" == "true" ]; then
+            echo "✅ **Kubernetes validation**: Completed" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "❌ **Kubernetes validation**: Skipped (no k8s/ directory found)" >> $GITHUB_STEP_SUMMARY
+          fi
+
+          if [ "${{ needs.detect-service-type.outputs.has_helmfile }}" == "true" ] && [ "${{ inputs.skip_helm_validation }}" != "true" ]; then
+            echo "✅ **Helm validation**: Completed" >> $GITHUB_STEP_SUMMARY
+          elif [ "${{ needs.detect-service-type.outputs.has_helmfile }}" == "true" ] && [ "${{ inputs.skip_helm_validation }}" == "true" ]; then
+            echo "⏭️ **Helm validation**: Skipped (manually disabled)" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "⏭️ **Helm validation**: Skipped (no helmfile.yaml found)" >> $GITHUB_STEP_SUMMARY
+          fi
+
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Service Type**: ${{ needs.detect-service-type.outputs.has_helmfile == 'true' && 'Helm + Kubernetes' || 'Kubernetes Only' }}" >> $GITHUB_STEP_SUMMARY