jad0s/gitops
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Compare commits

base: jad0s:ea7b51453bfb65a98651d438cdbd3b5f5f2823ad
Branches Tags
jad0s:main
jad0s:dev
...
compare: jad0s:8353299737d31b7406d6587e8e5095d6745ed6a5
Branches Tags
jad0s:main
jad0s:dev

2 commits
ea7b51453b ... 8353299737

Author SHA1 Message Date
jad0s
8353299737 Merge pull request 'dev - create a testing pipeline with kubeconform and k3d' (#2) from dev into main 
Reviewed-on: #2
 2026-06-12 20:02:12 +00:00
jad0s
ab8150ccc6 feat(actions): added k3d test to CI workflow on push
Some checks failed
/ validate (pull_request) Failing after 6s
Details 
fix(actions): switch k3d installation from sh to bash

fix(actions): install curl into the runner before running k3d install script

fix(actions): install k3d binary directly instead of running the install script

fix(actions): install k3d binary to /tmp

fix(actions): use curl to install k3d as wget had SSL errors in node:22

fix(actions): install bash into the runner before testing

fix(actions): change default shell from bash to sh in runner

fix(forgejo): remove extra indentation

fix(forgejo): fixed indentation in yaml

fix(actions): install curl in runner during the setup

fix(actions): chmod +x the k3d binary before executing it

fix(actions): set DOCKER_HOST env var to tcp instead of unix socket

test(actions): check if the docker daemon is reachable on loopback addresses

fix(actions): update DOCKER_HOST env var to an internal IP that docker daemon runs on

fix(actions): install kubectl before creating test cluster

fix(actions): add missing newline

fix(actions): install ArgoCD and SealedSecrets into the test cluster in k3d

fix(actions): missing dot

fix(actions): add --server-side flag to the argocd kubectl apply since the manifest is too long

fix(actions): capitalize h in selfheal

fix(actions): rework validate workflow file to skip installation steps solved by the custom container image

fix(actions): optimized workflow by installing argocd and sealedsecrets in parallel, manually sync argocd

fix(actions): fix the 'Wait for argocd sync' step logic

fix(actions): add argocd login step

fix(actions): wait for argocd initial admin secret to be created

fix(actions): create admin password during argocd install to login with

fix(actions): stop argocd login, use the kubernetes api directly with --core flag of argocd command

fix(actions): stop using argocd cli to wait for app sync, use kubectl instead

fix(actions): change testing event from push to PR
 2026-06-12 22:00:29 +02:00
3 changed files with 54 additions and 9 deletions
Show stats Expand all files Collapse all files

57
.forgejo/workflows/validate.yaml
View file

@ -1,20 +1,18 @@
on: on:
push: pull_request:
branches:
- dev
jobs: jobs:
validate: validate:
runs-on: docker runs-on: docker
defaults:
run:
shell: sh
env:
DOCKER_HOST: tcp://172.17.0.1:2375
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4 uses: actions/checkout@v4
- name: Install kubeconform
run: |
wget -O- https://github.com/yannh/kubeconform/releases/latest/download/kubeconform-linux-amd64.tar.gz | tar xz
mv kubeconform /usr/local/bin
- name: Validate manifests - name: Validate manifests
run: | run: |
kubeconform \ kubeconform \
@ -24,3 +22,46 @@ jobs:
-schema-location default \ -schema-location default \
-schema-location 'https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \ -schema-location 'https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \
./manifests/ ./manifests/
- name: Create test cluster
run: k3d cluster create test --wait
- name: Install ArgoCD
run: |
kubectl create namespace argocd
kubectl apply -n argocd --server-side -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.27.0/controller.yaml
kubectl wait --for=condition=available --timeout=180s \
deployment/argocd-server \
deployment/argocd-repo-server \
deployment/argocd-applicationset-controller \
-n argocd
kubectl wait --for=condition=available --timeout=60s \
deployment/sealed-secrets-controller -n kube-system
- name: Import SealedSecrets key
env:
SEALED_SECRETS_KEY: ${{ secrets.SEALED_SECRETS_KEY }}
run: |
echo "$SEALED_SECRETS_KEY" | kubectl apply -f -
kubectl rollout restart deployment/sealed-secrets-controller -n kube-system
kubectl rollout status deployment/sealed-secrets-controller -n kube-system --timeout=60s
- name: Apply ArgoCD apps
run: kubectl apply -f apps/
- name: Wait for ArgoCD sync
run: |
sleep 10
kubectl wait applications \
--all \
--namespace argocd \
--for=jsonpath='{.status.health.status}'=Healthy \
--timeout=300s
- name: Wait for all deployments
run: kubectl wait --for=condition=available --timeout=300s deployment --all --all-namespaces
- name: Cleanup
if: always()
run: k3d cluster delete test

2
apps/sealed-secrets.yaml
View file

@ -15,4 +15,4 @@ spec:
syncPolicy: syncPolicy:
automated: automated:
prune: true prune: true
selfheal: true selfHeal: true

4
manifests/forgejo/runner.yaml
View file

@ -14,7 +14,11 @@ spec:
spec: spec:
containers: containers:
- name: runner - name: runner
<<<<<<< HEAD
image: forgejo.libretalk.eu/jad0s/forgejo-runner:latest image: forgejo.libretalk.eu/jad0s/forgejo-runner:latest
=======
image: code.forgejo.org/forgejo/runner:3.5.1
>>>>>>> e1bf8ad (fix(forgejo): remove extra indentation)
command: command:
- sh - sh
- -c - -c