helm-chart-releaser.yml

name: Release Charts

on:
  push:
    branches:
      - main
  workflow_dispatch:

jobs:
  setenv:
    runs-on: ubuntu-latest

    outputs:
      short_sha: ${{ steps.env.outputs.short_sha }}
      chart_version: ${{ steps.env.outputs.chart_version }}
      image_version: ${{ steps.env.outputs.image_version }}
      image_tag: ${{ steps.env.outputs.image_tag }}
      image_repo_tag: ${{ steps.env.outputs.image_repo_tag }}
      image_repository: ${{ steps.env.outputs.image_repository }}
      registry: ${{ steps.env.outputs.registry }}
      branch: ${{ steps.env.outputs.branch }}
      compname: ${{ steps.env.outputs.compname }}
      dhurl: ${{ steps.env.outputs.dhurl }}
      gh_handle: ${{ steps.env.outputs.gh_handle }}

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs

      - name: Checkout
        id: checkout
        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
        with:
          fetch-depth: 1

      - name: Export env
        id: env
        env:
          DHURL: https://console.deployhub.com
          REGISTRY: quay.io
          BRANCH: ${{ github.head_ref || github.ref_name }}
        run: |
          BRANCH=$(echo "${{ env.BRANCH }}" | cut -d'/' -f1)
          BASE_VERSION=$(curl -s "https://deployhubproject.github.io/${{ github.event.repository.name }}/index.yaml" | grep version: | awk '{print $2}' | cut -f1-2 -d. | sort -u -r --version-sort | head -1)
          SHORT_SHA=$(echo ${{ github.sha }} | cut -c 1-6)
          {
           echo "dhurl=${{ env.DHURL }}"
           echo "branch=${BRANCH}"
           echo "chart_version=${BASE_VERSION}.${{ github.run_number }}"
           echo "compname=deployhub"
           echo "image_repo_tag=${{ env.REGISTRY }}/${{ github.repository }}:${BRANCH}-v${BASE_VERSION}.${{ github.run_number }}-g${SHORT_SHA}"
           echo "image_repository=${{ env.REGISTRY }}/${{ github.repository }}"
           echo "image_tag=${BRANCH}-v${BASE_VERSION}.${{ github.run_number }}-g${SHORT_SHA}"
           echo "image_version=${BASE_VERSION}.${{ github.run_number }}-g${SHORT_SHA}"
           echo "registry=${{ env.REGISTRY }}"
           echo "short_sha=${SHORT_SHA}"
           echo "gh_handle=$GITHUB_ACTOR"
          } >> "$GITHUB_OUTPUT"

  release:
    runs-on: ubuntu-latest
    needs: setenv

    steps:
      - name: Helm Chart Releaser
        uses: DeployHubProject/ms-cr-action@5751df3dd834c153c0ae4aa30ef1131a2be2dd40 # v1.2.90
        with:
          gpg_keyring_base64: ${{ secrets.GPG_KEYRING_BASE64 }}
          gpg_passphrase: ${{ secrets.GPG_PASSPHRASE }}
          gpg_key: ${{ secrets.GPG_KEY }}
          gh_token: ${{ secrets.DH_HELM_INDEXER_TOKEN }}
          gh_handle: ${{ needs.setenv.outputs.gh_handle }}
          chart: charts/${{ needs.setenv.outputs.compname }}