CI/CD: Helm packages signing (#6)

vertisan · Oct 12, 2024 · 9adf00d · 9adf00d
1 parent 6c21a58
commit 9adf00d
Show file tree

Hide file tree

Showing 3 changed files with 33 additions and 1 deletion.
diff --git a/.github/workflows/lint-test.yaml b/.github/workflows/lint-test.yaml
@@ -49,3 +49,16 @@ jobs:
       - name: Run chart-testing (install)
         if: steps.list-changed.outputs.changed == 'true'
         run: ct install --target-branch ${{ github.event.repository.default_branch }}
+
+  lint-artifacthub:
+    runs-on: ubuntu-latest
+    container:
+      image: artifacthub/ah
+      options: --user 1001
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Run ah lint
+        working-directory: ./charts/prometheus-mktxp
+        run: ah lint
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -27,8 +27,24 @@ jobs:
         with:
           version: v3.14.4
 
+      - name: Prepare GPG
+        run: |
+          gpg_dir=.cr-gpg
+          mkdir "$gpg_dir"
+          keyring="$gpg_dir/secring.gpg"
+          base64 -d <<< "$GPG_KEYRING_BASE64" > "$keyring"
+          passphrase_file="$gpg_dir/passphrase"
+          echo "$GPG_PASSPHRASE" > "$passphrase_file"
+          echo "CR_PASSPHRASE_FILE=$passphrase_file" >> "$GITHUB_ENV"
+          echo "CR_KEYRING=$keyring" >> "$GITHUB_ENV"
+        env:
+          GPG_KEYRING_BASE64: "${{ secrets.GPG_KEYRING_BASE64 }}"
+          GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
+
       - name: Run chart-releaser
         uses: helm/chart-releaser-action@v1.6.0
         if: startsWith(github.ref, 'refs/tags/')
         env:
           CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+          CR_KEY: "${{ secrets.CR_KEY }}"
+          CR_SIGN: true
diff --git a/charts/prometheus-mktxp/Chart.yaml b/charts/prometheus-mktxp/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: prometheus-mikrotik-exporter
 description: Prometheus Exporter for Mikrotik RouterOS devices.
 type: application
-version: 0.5.0
+version: 0.5.1
 appVersion: "v1.2.7"
 home: https://github.com/akpw/mktxp
 maintainers:
@@ -26,3 +26,6 @@ annotations:
       url: https://github.com/akpw/mktxp
     - name: Dedicated Grafana dashboard
       url: https://grafana.com/grafana/dashboards/13679
+  artifacthub.io/signKey: |
+    fingerprint: BF013739E0FE6C13C90077C780A79E38DF9F4B33
+    url: https://keybase.io/vrsfactory/pgp_keys.asc