this repo has no description
Use custom image for validate.yml
+34
-8
+3
-8
.tangled/workflows/validate.yml
+3
-8
.tangled/workflows/validate.yml
···
1
+
image: zot.sans-self.org/infra/ci-validate:latest
2
+
architecture: arm64
3
+
1
4
when:
2
5
- event: ["push"]
3
6
branch: ["main"]
···
5
8
branch: ["main"]
6
9
7
10
engine: "kubernetes"
8
-
9
-
dependencies:
10
-
nixpkgs:
11
-
- kustomize
12
-
- kubeconform
13
-
- opentofu
14
-
- yamllint
15
-
- shellcheck
16
11
17
12
steps:
18
13
- name: "Stub encrypted secrets"
+9
Makefile
+9
Makefile
···
44
44
push-tranquil-frontend:
45
45
docker push zot.sans-self.org/infra/tranquil-frontend:latest
46
46
47
+
# CI validate image
48
+
.PHONY: build-ci-validate push-ci-validate
49
+
50
+
build-ci-validate:
51
+
docker buildx build --platform linux/arm64 -t zot.sans-self.org/infra/ci-validate:latest -f dockerfiles/ci-validate.Dockerfile .
52
+
53
+
push-ci-validate:
54
+
docker push zot.sans-self.org/infra/ci-validate:latest
55
+
+22
dockerfiles/ci-validate.Dockerfile
+22
dockerfiles/ci-validate.Dockerfile
···
1
+
FROM alpine:3
2
+
3
+
RUN apk add --no-cache \
4
+
bash \
5
+
curl \
6
+
git \
7
+
yamllint \
8
+
shellcheck \
9
+
&& ARCH=$(uname -m) \
10
+
&& case "$ARCH" in aarch64) ARCH=arm64;; x86_64) ARCH=amd64;; esac \
11
+
# kustomize
12
+
&& curl -sL "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv5.6.0/kustomize_v5.6.0_linux_${ARCH}.tar.gz" \
13
+
| tar xz -C /usr/local/bin \
14
+
# kubeconform
15
+
&& curl -sL "https://github.com/yannh/kubeconform/releases/download/v0.6.7/kubeconform-linux-${ARCH}.tar.gz" \
16
+
| tar xz -C /usr/local/bin \
17
+
# opentofu
18
+
&& curl -sL "https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_linux_${ARCH}.zip" \
19
+
-o /tmp/tofu.zip \
20
+
&& unzip -q /tmp/tofu.zip -d /usr/local/bin tofu \
21
+
&& rm /tmp/tofu.zip \
22
+
&& chmod +x /usr/local/bin/kustomize /usr/local/bin/kubeconform /usr/local/bin/tofu