helm-test.yml

#
# Copyright (c) 2023,2024 Contributors to the Eclipse Foundation
#
# See the NOTICE file(s) distributed with this work for additional
# information regarding copyright ownership.
#
# This program and the accompanying materials are made available under the
# terms of the Apache License, Version 2.0 which is available at
# https://www.apache.org/licenses/LICENSE-2.0.
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# SPDX-License-Identifier: Apache-2.0
#
name: Lint and Test Charts

on:
    pull_request:
        paths:
            - 'charts/**'
    workflow_dispatch:
        inputs:
            node_image:
                description: 'kindest/node image for k8s kind cluster'
                # k8s version from 3.1 release as default
                default: 'kindest/node:v1.27.3'
                required: false
                type: string
            upgrade_from:
                description: 'chart version to upgrade from'
                # chart version from 1.0.0 (R24.03) release as default
                default: '1.0.0'
                required: false
                type: string
            helm_version:
                description: 'helm version to test (default = latest)'
                default: 'latest'
                required: false
                type: string

env:
    REGISTRY: kind-registry:5000
    TAG: testing
    APP_BACKEND_NAME: app-puris-backend
    APP_FRONTEND_NAME: app-puris-frontend

jobs:
    lint-test:
        runs-on: ubuntu-latest
        steps:
            -   name: Checkout
                uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
                with:
                    fetch-depth: 0

            -   name: Kubernetes KinD Cluster
                uses: container-tools/kind-action@0ad70e2299366b0e1552c7240f4e4567148f723e # v2.0.4
                with:
                    # upgrade version, default (v0.17.0) uses node image v1.21.1 and doesn't work with more recent node image versions
                    version: v0.20.0
                    # default value for event_name != workflow_dispatch
                    node_image: ${{ github.event.inputs.node_image || 'kindest/node:v1.27.3' }}

            -   name: Build Frontend image
                uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
                with:
                    context: ./frontend
                    file: ./frontend/Dockerfile
                    push: true
                    tags: ${{ env.REGISTRY }}/${{ env.APP_FRONTEND_NAME }}:${{ env.TAG }}

            -   name: Build Backend image
                uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
                with:
                    context: ./backend
                    file: ./backend/Dockerfile
                    push: true
                    tags: ${{ env.REGISTRY }}/${{ env.APP_BACKEND_NAME }}:${{ env.TAG }}

            -   name: Set up Helm
                uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3.5
                with:
                    version: ${{ github.event.inputs.helm_version || 'latest' }}

            -   uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
                with:
                    python-version: '3.9'
                    check-latest: true

            -   name: Set up chart-testing
                uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1

            -   name: Run chart-testing (list-changed)
                id: list-changed
                run: |
                    changed=$(ct list-changed --target-branch ${{ github.event.repository.default_branch }})
                    if [[ -n "$changed" ]]; then
                      echo "changed=true" >> $GITHUB_OUTPUT
                    fi

            -   name: Run chart-testing (lint)
                run: ct lint --validate-maintainers=false --target-branch ${{ github.event.repository.default_branch }}

            -   name: Run chart-testing (install)
                run: |
                    helm repo add bitnami https://charts.bitnami.com/bitnami
                    helm repo add postgresql https://charts.bitnami.com/bitnami
                    ct install --charts charts/puris --helm-extra-set-args "--set backend.image.repository=${{ env.REGISTRY }}/${{ env.APP_BACKEND_NAME}} --set backend.image.tag=${{ env.TAG }} --set frontend.image.repository=${{ env.REGISTRY }}/${{ env.APP_FRONTEND_NAME }} --set frontend.image.tag=${{ env.TAG }}"
                if: github.event_name != 'pull_request' || steps.list-changed.outputs.changed == 'true'

            # Upgrade the released chart version with the locally available chart
            # default value for event_name != workflow_dispatch
            # Setting passwords during upgrade:
            # - set existing secret to value currently defaulted
            # - insert password to postgres directly due to empty default for reuse during upgrade
            # https://docs.bitnami.com/general/how-to/troubleshoot-helm-chart-issues/#credential-errors-while-upgrading-chart-releases
            -   name: Run helm upgrade
                run: |
                    helm repo add bitnami https://charts.bitnami.com/bitnami
                    helm repo add tractusx-dev https://eclipse-tractusx.github.io/charts/dev
                    helm install puris tractusx-dev/puris --version ${{ github.event.inputs.upgrade_from || '1.0.0' }} --set postgresql.auth.existingSecret="secret-puris-postgres-init"
                    helm dependency update charts/puris
                    helm upgrade puris charts/puris
                if: github.event_name != 'pull_request' || steps.list-changed.outputs.changed == 'true'