externalize summary

.gitea/actions/ci-summary/action.yaml

@@ -0,0 +1,41 @@
+name: "CI Summary"
+description: "Writes CI validation summary to GITHUB_STEP_SUMMARY"
+inputs:
+  has_k8s:
+    description: "Whether Kubernetes manifests were detected"
+    required: true
+  has_helmfile:
+    description: "Whether helmfile.yaml was detected"
+    required: true
+  skip_helm_validation:
+    description: "Whether Helm validation is manually disabled"
+    required: true
+runs:
+  using: "composite"
+  steps:
+    - shell: bash
+      run: |
+        echo "## CI Validation Summary" >> "$GITHUB_STEP_SUMMARY"
+        echo "" >> "$GITHUB_STEP_SUMMARY"
+
+        if [ "${{ inputs.has_k8s }}" = "true" ]; then
+          echo "✅ **Kubernetes validation**: Completed" >> "$GITHUB_STEP_SUMMARY"
+        else
+          echo "❌ **Kubernetes validation**: Skipped (no k8s/ directory found)" >> "$GITHUB_STEP_SUMMARY"
+        fi
+
+        if [ "${{ inputs.has_helmfile }}" = "true" ] && [ "${{ inputs.skip_helm_validation }}" != "true" ]; then
+          echo "✅ **Helm validation**: Completed" >> "$GITHUB_STEP_SUMMARY"
+        elif [ "${{ inputs.has_helmfile }}" = "true" ] && [ "${{ inputs.skip_helm_validation }}" = "true" ]; then
+          echo "⏭️ **Helm validation**: Skipped (manually disabled)" >> "$GITHUB_STEP_SUMMARY"
+        else
+          echo "⏭️ **Helm validation**: Skipped (no helmfile.yaml found)" >> "$GITHUB_STEP_SUMMARY"
+        fi
+
+        echo "" >> "$GITHUB_STEP_SUMMARY"
+        if [ "${{ inputs.has_helmfile }}" = "true" ]; then
+          service_type="Helm + Kubernetes"
+        else
+          service_type="Kubernetes Only"
+        fi
+        echo "**Service Type**: ${service_type}" >> "$GITHUB_STEP_SUMMARY"

.gitea/actions/deployment-summary/action.yaml

@@ -0,0 +1,41 @@
+name: "Deployment Summary"
+description: "Writes deployment summary to GITHUB_STEP_SUMMARY"
+inputs:
+  has_k8s:
+    description: "Whether Kubernetes manifests were detected"
+    required: true
+  has_helmfile:
+    description: "Whether helmfile.yaml was detected"
+    required: true
+  skip_helm_deployment:
+    description: "Whether Helm deployment is manually disabled"
+    required: true
+runs:
+  using: "composite"
+  steps:
+    - shell: bash
+      run: |
+        echo "## Deployment Summary" >> "$GITHUB_STEP_SUMMARY"
+        echo "" >> "$GITHUB_STEP_SUMMARY"
+
+        if [ "${{ inputs.has_k8s }}" = "true" ]; then
+          echo "✅ **Kubernetes deployment**: Completed" >> "$GITHUB_STEP_SUMMARY"
+        else
+          echo "❌ **Kubernetes deployment**: Skipped (no k8s/ directory found)" >> "$GITHUB_STEP_SUMMARY"
+        fi
+
+        if [ "${{ inputs.has_helmfile }}" = "true" ] && [ "${{ inputs.skip_helm_deployment }}" != "true" ]; then
+          echo "✅ **Helm deployment**: Completed" >> "$GITHUB_STEP_SUMMARY"
+        elif [ "${{ inputs.has_helmfile }}" = "true" ] && [ "${{ inputs.skip_helm_deployment }}" = "true" ]; then
+          echo "⏭️ **Helm deployment**: Skipped (manually disabled)" >> "$GITHUB_STEP_SUMMARY"
+        else
+          echo "⏭️ **Helm deployment**: Skipped (no helmfile.yaml found)" >> "$GITHUB_STEP_SUMMARY"
+        fi
+
+        echo "" >> "$GITHUB_STEP_SUMMARY"
+        if [ "${{ inputs.has_helmfile }}" = "true" ]; then
+          service_type="Helm + Kubernetes"
+        else
+          service_type="Kubernetes Only"
+        fi
+        echo "**Service Type**: ${service_type}" >> "$GITHUB_STEP_SUMMARY"

.gitea/workflows/deploy.yaml

@@ -28,6 +28,19 @@ on:
         required: false
         default: "{}"
         type: string
+    outputs:
+      has_k8s:
+        description: "Whether Kubernetes manifests were detected"
+        value: ${{ jobs.summary-data.outputs.has_k8s }}
+      has_helmfile:
+        description: "Whether helmfile.yaml was detected"
+        value: ${{ jobs.summary-data.outputs.has_helmfile }}
+      skip_helm_deployment:
+        description: "Whether Helm deployment was manually skipped"
+        value: ${{ jobs.summary-data.outputs.skip_helm_deployment }}
+      service_type:
+        description: "Service type inferred from repository contents"
+        value: ${{ jobs.summary-data.outputs.service_type }}
 
 jobs:
   detect-service-type:
@@ -64,17 +77,8 @@ jobs:
     if: inputs.skip_shared_secrets_deployment != 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
-        id: namespace
-        with:
-          repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
-      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
-        with:
-          method: kubeconfig
-          kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Set restic backup secret
-        uses: azure/k8s-create-secret@5e49ad902ac755e0815974a44904c728da961747 # v6.0.0
+        uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
         with:
           namespace: ${{ steps.namespace.outputs.namespace }}
           secret-name: backupsidecar-secret
@@ -93,7 +97,7 @@ jobs:
     if: needs.detect-service-type.outputs.has_k8s == 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
@@ -119,7 +123,7 @@ jobs:
       inputs.skip_helm_deployment != 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
@@ -135,30 +139,30 @@ jobs:
           helmfile-args: apply
         env: ${{ fromJSON(inputs.helmfile_env) }}
 
-  # Summary job that always runs to show what was deployed
+  summary-data:
-  deployment-summary:
     runs-on: ubuntu-latest
     needs: [detect-service-type, deploy-k8s, deploy-helm]
     if: always()
+    outputs:
+      has_k8s: ${{ steps.export.outputs.has_k8s }}
+      has_helmfile: ${{ steps.export.outputs.has_helmfile }}
+      skip_helm_deployment: ${{ steps.export.outputs.skip_helm_deployment }}
+      service_type: ${{ steps.export.outputs.service_type }}
     steps:
-      - name: Deployment Summary
+      - name: Export summary data
+        id: export
         run: |
-          echo "## Deployment Summary" >> $GITHUB_STEP_SUMMARY
+          has_k8s="${{ needs.detect-service-type.outputs.has_k8s }}"
-          echo "" >> $GITHUB_STEP_SUMMARY
+          has_helmfile="${{ needs.detect-service-type.outputs.has_helmfile }}"
+          skip_helm_deployment="${{ inputs.skip_helm_deployment }}"
 
-          if [ "${{ needs.detect-service-type.outputs.has_k8s }}" == "true" ]; then
+          if [ "$has_helmfile" = "true" ]; then
-            echo "✅ **Kubernetes deployment**: Completed" >> $GITHUB_STEP_SUMMARY
+            service_type="Helm + Kubernetes"
           else
-            echo "❌ **Kubernetes deployment**: Skipped (no k8s/ directory found)" >> $GITHUB_STEP_SUMMARY
+            service_type="Kubernetes Only"
           fi
 
-          if [ "${{ needs.detect-service-type.outputs.has_helmfile }}" == "true" ] && [ "${{ inputs.skip_helm_deployment }}" != "true" ]; then
+          echo "has_k8s=$has_k8s" >> "$GITHUB_OUTPUT"
-            echo "✅ **Helm deployment**: Completed" >> $GITHUB_STEP_SUMMARY
+          echo "has_helmfile=$has_helmfile" >> "$GITHUB_OUTPUT"
-          elif [ "${{ needs.detect-service-type.outputs.has_helmfile }}" == "true" ] && [ "${{ inputs.skip_helm_deployment }}" == "true" ]; then
+          echo "skip_helm_deployment=$skip_helm_deployment" >> "$GITHUB_OUTPUT"
-            echo "⏭️ **Helm deployment**: Skipped (manually disabled)" >> $GITHUB_STEP_SUMMARY
+          echo "service_type=$service_type" >> "$GITHUB_OUTPUT"
-          else
-            echo "⏭️ **Helm deployment**: Skipped (no helmfile.yaml found)" >> $GITHUB_STEP_SUMMARY
-          fi
-
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "**Service Type**: ${{ needs.detect-service-type.outputs.has_helmfile == 'true' && 'Helm + Kubernetes' || 'Kubernetes Only' }}" >> $GITHUB_STEP_SUMMARY

.gitea/workflows/release.yaml

@@ -5,9 +5,8 @@ on:
     branches:
       - main
     paths:
-      - ".gitea/workflows/deploy.yaml"
+      - ".gitea/workflows/cd.yaml"
-      - ".gitea/workflows/validate.yaml"
+      - ".gitea/workflows/ci.yaml"
-  workflow_dispatch:
 
 jobs:
   release:
@@ -23,6 +22,6 @@ jobs:
         with:
           token: ${{ secrets.GITEA_TOKEN }}
       - name: Push tag
-        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@38c1bbd8bad3e7965744d03de85faa4a5b808d1b # 0.2.4
+        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@47a1c635cfc76cfb4eeee3db0d0b89bf19007c7a # 0.2.3
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/validate.yaml

@@ -23,6 +23,19 @@ on:
         required: false
         default: "{}"
         type: string
+    outputs:
+      has_k8s:
+        description: "Whether Kubernetes manifests were detected"
+        value: ${{ jobs.summary-data.outputs.has_k8s }}
+      has_helmfile:
+        description: "Whether helmfile.yaml was detected"
+        value: ${{ jobs.summary-data.outputs.has_helmfile }}
+      skip_helm_validation:
+        description: "Whether Helm validation was manually skipped"
+        value: ${{ jobs.summary-data.outputs.skip_helm_validation }}
+      service_type:
+        description: "Service type inferred from repository contents"
+        value: ${{ jobs.summary-data.outputs.service_type }}
 
 jobs:
   detect-service-type:
@@ -59,7 +72,7 @@ jobs:
     if: needs.detect-service-type.outputs.has_k8s == 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
@@ -69,7 +82,7 @@ jobs:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Validate k8s manifests
-        uses: azure/k8s-lint@e4234c50ea835112e72b145bdecd00a94bad42fd # v4.0.0
+        uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3.0.1
         with:
           namespace: ${{ steps.namespace.outputs.namespace }}
           lintType: dryrun
@@ -84,7 +97,7 @@ jobs:
       inputs.skip_helm_validation != 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
@@ -100,30 +113,30 @@ jobs:
           helmfile-args: diff
         env: ${{ fromJSON(inputs.helmfile_env) }}
 
-  # Summary job that always runs to show what was validated
+  summary-data:
-  ci-summary:
     runs-on: ubuntu-latest
     needs: [detect-service-type, validate-k8s, validate-helm]
     if: always()
+    outputs:
+      has_k8s: ${{ steps.export.outputs.has_k8s }}
+      has_helmfile: ${{ steps.export.outputs.has_helmfile }}
+      skip_helm_validation: ${{ steps.export.outputs.skip_helm_validation }}
+      service_type: ${{ steps.export.outputs.service_type }}
     steps:
-      - name: CI Summary
+      - name: Export summary data
+        id: export
         run: |
-          echo "## CI Validation Summary" >> $GITHUB_STEP_SUMMARY
+          has_k8s="${{ needs.detect-service-type.outputs.has_k8s }}"
-          echo "" >> $GITHUB_STEP_SUMMARY
+          has_helmfile="${{ needs.detect-service-type.outputs.has_helmfile }}"
+          skip_helm_validation="${{ inputs.skip_helm_validation }}"
 
-          if [ "${{ needs.detect-service-type.outputs.has_k8s }}" == "true" ]; then
+          if [ "$has_helmfile" = "true" ]; then
-            echo "✅ **Kubernetes validation**: Completed" >> $GITHUB_STEP_SUMMARY
+            service_type="Helm + Kubernetes"
           else
-            echo "❌ **Kubernetes validation**: Skipped (no k8s/ directory found)" >> $GITHUB_STEP_SUMMARY
+            service_type="Kubernetes Only"
           fi
 
-          if [ "${{ needs.detect-service-type.outputs.has_helmfile }}" == "true" ] && [ "${{ inputs.skip_helm_validation }}" != "true" ]; then
+          echo "has_k8s=$has_k8s" >> "$GITHUB_OUTPUT"
-            echo "✅ **Helm validation**: Completed" >> $GITHUB_STEP_SUMMARY
+          echo "has_helmfile=$has_helmfile" >> "$GITHUB_OUTPUT"
-          elif [ "${{ needs.detect-service-type.outputs.has_helmfile }}" == "true" ] && [ "${{ inputs.skip_helm_validation }}" == "true" ]; then
+          echo "skip_helm_validation=$skip_helm_validation" >> "$GITHUB_OUTPUT"
-            echo "⏭️ **Helm validation**: Skipped (manually disabled)" >> $GITHUB_STEP_SUMMARY
+          echo "service_type=$service_type" >> "$GITHUB_OUTPUT"
-          else
-            echo "⏭️ **Helm validation**: Skipped (no helmfile.yaml found)" >> $GITHUB_STEP_SUMMARY
-          fi
-
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "**Service Type**: ${{ needs.detect-service-type.outputs.has_helmfile == 'true' && 'Helm + Kubernetes' || 'Kubernetes Only' }}" >> $GITHUB_STEP_SUMMARY

README.md

@@ -1,75 +1,79 @@
-# Reusable CI/CD Workflows for k\_ Services
+> [!WARNING]
+> Repo is currently not in use and not tested.
+> We are waiting for proper shared workflow UI support in gitea. Otherwise errors are hard to identify.
+> Follow https://github.com/go-gitea/gitea/issues/24604
 
-This repository contains reusable CI and CD workflows that automatically detect Kubernetes service type (Kubernetes-only vs Helm + Kubernetes) and execute the relevant steps.
+# Reusable CI Workflow for Kubernetes Services
+
+This directory contains a reusable CI workflow that automatically detects and validates your Kubernetes services, whether they use Helm + Kubernetes or just Kubernetes manifests.
 
 ## Features
 
-- **Reusable CI and CD**: Separate reusable workflows for validation and deployment
+- **Automatic Detection**: Automatically detects if your service uses Helm (helmfile.yaml) or just Kubernetes manifests
-- **Automatic Detection**: Detects whether `helmfile.yaml` exists and whether `k8s/` exists
+- **Conditional Validation**: Only runs Helm validation when helmfile.yaml exists
-- **Conditional Execution**: Runs Helm steps only when applicable
+- **Flexible Paths**: Configurable paths for k8s directory and helmfile
-- **Flexible Inputs**: Supports custom `k8s_dir` and `helmfile_path`
+- **Comprehensive Validation**: Validates both Kubernetes manifests and Helm charts
+- **CI Summary**: Provides a clear summary of what was validated
 
 ## Usage
 
-### Basic CI Usage
+### Basic Usage (Recommended)
 
-Call the reusable CI workflow:
+Simply call the workflow without any parameters - it will automatically detect your service type:
 
 ```yaml
 jobs:
   ci:
-    uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/workflows/ci.yaml@main
+    uses: ./.gitea/workflows/ci.yaml
-    secrets: inherit
 ```
 
-### Basic CD Usage
+### Advanced Usage with Custom Paths
 
-Call the reusable CD workflow:
+If your service uses non-standard directory names:
-
-```yaml
-jobs:
-  deploy:
-    uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/workflows/cd.yaml@main
-    secrets: inherit
-```
-
-### Advanced Usage with Custom Paths and Flags
 
 ```yaml
 jobs:
   ci:
-    uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/workflows/ci.yaml@main
+    uses: ./.gitea/workflows/ci.yaml
     with:
       k8s_dir: "kubernetes/"
       helmfile_path: "helm/helmfile.yaml"
-      skip_helm_validation: true
-    secrets: inherit
 ```
 
-## Inputs
+### Force Skip Helm Validation
 
-### CI (`.gitea/workflows/ci.yaml`)
+If you want to skip Helm validation even when helmfile.yaml exists:
+
+```yaml
+jobs:
+  ci:
+    uses: ./.gitea/workflows/ci.yaml
+    with:
+      skip_helm_validation: true
+```
+
+## Input Parameters
 
 | Parameter              | Description                                  | Default         | Required |
 | ---------------------- | -------------------------------------------- | --------------- | -------- |
 | `k8s_dir`              | Path to Kubernetes manifests directory       | `k8s/`          | No       |
 | `helmfile_path`        | Path to helmfile.yaml                        | `helmfile.yaml` | No       |
 | `skip_helm_validation` | Skip Helm validation even if helmfile exists | `false`         | No       |
-| `helmfile_env`         | JSON object string passed as env to helmfile | `{}`            | No       |
-
-### CD (`.gitea/workflows/cd.yaml`)
-
-| Parameter                        | Description                                  | Default         | Required |
-| -------------------------------- | -------------------------------------------- | --------------- | -------- |
-| `k8s_dir`                        | Path to Kubernetes manifests directory       | `k8s/`          | No       |
-| `helmfile_path`                  | Path to helmfile.yaml                        | `helmfile.yaml` | No       |
-| `skip_helm_deployment`           | Skip Helm deployment even if helmfile exists | `false`         | No       |
-| `skip_shared_secrets_deployment` | Skip shared secrets deployment               | `false`         | No       |
-| `helmfile_env`                   | JSON object string passed as env to helmfile | `{}`            | No       |
 
 ## Directory Structure Requirements
 
-### Full example structure (Helm + Kubernetes):
+### For Kubernetes-only services:
+
+```
+your-service/
+├── k8s/
+│   ├── deployment.yaml
+│   ├── service.yaml
+│   └── ...
+└── .gitea/workflows/your-workflow.yaml
+```
+
+### For Helm + Kubernetes services:
 
 ```
 your-service/
@@ -80,3 +84,79 @@ your-service/
 ├── helmfile.yaml
 └── .gitea/workflows/your-workflow.yaml
 ```
+
+## What Gets Validated
+
+### Always (if k8s/ directory exists):
+
+- Kubernetes manifest validation using `kubectl --dry-run`
+- Namespace extraction from repository name
+- Basic Kubernetes syntax and schema validation
+
+### Conditionally (if helmfile.yaml exists and Helm validation not skipped):
+
+- Helm chart validation using `helmfile diff`
+- Kubernetes manifests in Helm context
+- Helm-specific configurations and values
+
+## Example Workflows
+
+See `example-usage.yaml` for complete examples of how to use this workflow in different scenarios.
+
+## Available Actions
+
+### Extract Chart Name from Repository Name
+
+The `extract-chart-name-from-repo-name` action extracts the chart name from repository names following the `helm-<chart-name>` convention.
+
+#### Usage
+
+```yaml
+- name: Extract chart name
+  uses: ./.gitea/actions/extract-chart-name-from-repo-name
+  with:
+    repo: ${{ github.repository_name }} # e.g., "helm-my-service"
+```
+
+#### Inputs
+
+| Parameter | Description                                      | Required |
+| --------- | ------------------------------------------------ | -------- |
+| `repo`    | The full repository name (e.g., "helm-my-chart") | Yes      |
+
+#### Outputs
+
+| Output       | Description                                                      |
+| ------------ | ---------------------------------------------------------------- |
+| `chart-name` | The extracted chart name (e.g., "my-chart" from "helm-my-chart") |
+
+#### Example
+
+For a repository named `helm-user-service`, this action will extract `user-service` as the chart name.
+
+## Dependencies
+
+This workflow requires:
+
+- `./.gitea/actions/extract-namespace-from-repo-name` action
+- `./.gitea/actions/extract-chart-name-from-repo-name` action
+- `KUBECONFIG` secret configured in your repository
+- Access to your Kubernetes cluster
+
+## Troubleshooting
+
+### Helm validation skipped unexpectedly
+
+- Check if `helmfile.yaml` exists in the expected location
+- Verify the `skip_helm_validation` parameter is not set to `true`
+- Ensure the file path is correct if using custom paths
+
+### Kubernetes validation skipped
+
+- Verify the `k8s/` directory (or custom path) exists
+- Check the directory contains valid Kubernetes manifests
+
+### Permission issues
+
+- Ensure the `KUBECONFIG` secret is properly configured
+- Verify the workflow has access to your Kubernetes cluster