Update Helm release kube-prometheus-stack to v66 #1629
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test | |
| on: | |
| pull_request: | |
| branches: [main] | |
| # Added 'edited' temporarily, as there currently is no trigger for when the base branch is updated. | |
| # https://github.com/orgs/community/discussions/64119 | |
| types: | |
| - opened | |
| - synchronize | |
| - reopened | |
| - ready_for_review | |
| - closed | |
| - edited | |
| merge_group: | |
| workflow_dispatch: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| KSAIL_CLUSTER_NAME: homelab-local | |
| jobs: | |
| path-filter: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| should_skip: ${{ steps.filter.outputs.should_skip }} | |
| steps: | |
| - uses: actions/checkout@v4 # better this action use git diff, so you need checkout the code first | |
| with: | |
| filter: blob:none # reduce clone size | |
| fetch-depth: 0 # need full history, the default is 1, which is not enough. if you limit the pull request' commit length, you can set it to your limit. | |
| - uses: leavesster/pull-request-path-filter@v0.2 # v0.2 is the latest version | |
| id: "filter" | |
| with: | |
| paths: | # notice the `|`, it's required. the left is same as github action's path and paths-ignore | |
| - "src/**" | |
| test: | |
| runs-on: homelab | |
| env: | |
| KSAIL_CLUSTER_NAME: homelab-local | |
| needs: path-filter | |
| if: ${{ github.event.pull_request.draft == false || needs.path-filter.outputs.should_skip != 'true' }} | |
| steps: | |
| - name: 📑 Checkout | |
| uses: actions/checkout@v4 | |
| - name: ⚙️ Install wget | |
| run: sudo apt-get install -y wget | |
| - name: ⚙️ Install KSail | |
| run: | | |
| sudo wget -qO /usr/local/bin/ksail "https://getbin.io/devantler/ksail?os=linux&arch=arm64" | |
| sudo chmod +x /usr/local/bin/ksail | |
| - name: ⚙️ Install K8sGPT | |
| run: | | |
| sudo wget -qO- "https://getbin.io/k8sgpt-ai/k8sgpt?os=linux&arch=arm64" | tar xvz | |
| sudo mv k8sgpt /usr/local/bin/k8sgpt | |
| sudo chmod +x /usr/local/bin/k8sgpt | |
| - name: ⛴️ Provision cluster | |
| run: | | |
| ksail sops ${{ env.KSAIL_CLUSTER_NAME }} --import "${{ secrets.KSAIL_SOPS_KEY }}" | |
| ksail up ${{ env.KSAIL_CLUSTER_NAME }} | |
| - name: 🪲 Analyze | |
| if: always() | |
| run: | | |
| k8sgpt auth add --backend ollama --model "gemma2:2b" --password "${{ secrets.OPEN_WEBUI_API_TOKEN }}" --baseurl https://open-webui.devantler.com/ollama/api | |
| k8sgpt auth default -p ollama | |
| # k8sgpt integration activate trivy --no-install --namespace trivy-operator | |
| # k8sgpt integration activate kyverno --no-install --namespace kyverno | |
| # k8sgpt filters add GatewayClass,Gateway,HTTPRoute,HorizontalPodAutoScaler,PodDisruptionBudget,NetworkPolicy | |
| # k8sgpt filters remove VulnerabilityReport,ConfigAuditReport | |
| k8sgpt filters list | |
| output=$(k8sgpt analyze --with-doc) | |
| echo "$output" | |
| # if [[ "$output" != *"No problems detected"* ]]; then | |
| # exit 1 | |
| # fi | |
| - name: 🔥 Teardown cluster | |
| if: always() | |
| run: ksail down ${{ env.KSAIL_CLUSTER_NAME }} |