render.yml

name: Render Helm chart

on:
  push:
    branches: [main]
  pull_request:

jobs:
  render:
    runs-on: blacksmith-4vcpu-ubuntu-2404
    permissions:
      contents: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Helm
        uses: azure/setup-helm@v4
        with:
          version: latest

      - name: Install kubeconform
        run: |
          curl -fLsS https://github.com/yannh/kubeconform/releases/latest/download/kubeconform-linux-amd64.tar.gz | tar xz
          sudo mv kubeconform /usr/local/bin/

      - name: Run chart tests
        run: ./test/test.sh

  validate-configs:
    runs-on: blacksmith-4vcpu-ubuntu-2404
    timeout-minutes: 30
    permissions:
      contents: read
    env:
      CONTROL2_IMAGE: ghcr.io/pgdogdev/pgdog-enterprise/control:main-ent

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Helm
        uses: azure/setup-helm@v4
        with:
          version: latest

      - name: Install yq
        uses: mikefarah/yq@master

      - name: Pull control2 image
        run: docker pull "$CONTROL2_IMAGE"

      - name: Validate generated control configs
        run: |
          set -eo pipefail
          for values_file in test/values-*.yaml; do
            name=$(basename "$values_file" .yaml | sed 's/values-//')
            echo "==> Validating control config for $name..."
            rm -f /tmp/control.toml
            ./test/generate-config.sh "$values_file" /tmp/control.toml
            docker run --rm \
              -e COOKIE_SECRET=test-cookie-secret \
              -e INCIDENT_IO_API_KEY=inc_test \
              -e RAFT_TOKEN=test-raft-token \
              -e REDIS_URL=redis://redis.example.com:6379 \
              -v /tmp/control.toml:/tmp/control.toml:ro \
              "$CONTROL2_IMAGE" \
              /usr/local/bin/control2 configcheck --config /tmp/control.toml
          done
          echo "==> All control configs valid!"