ci: add script to check for helm chart updates (#1827)

Author: j-zimnowoda

.github/workflows/ci-helm-chart-update.yml

@@ -0,0 +1,13 @@
+name: CI - helm chart update
+concurrency: ${{ github.workflow }}-${{ github.ref }}
+on:
+  schedule:
+    - cron: '30 0 * * *'
+
+jobs:
+  start-helm-update-ci:
+    name: Helm chart minor update
+    uses: ./.github/workflows/ci-helm-chart.yml
+    secrets: inherit
+    with:
+      CI_UPDATE_TYPE: minor

.github/workflows/ci-helm-chart.yml

@@ -0,0 +1,71 @@
+name: Helm chart updates
+on:
+  workflow_call:
+    inputs:
+      CI_UPDATE_TYPE:
+        type: string
+        required: true
+      CI_HELM_CHART_NAME_FILTER:
+        type: string
+        default: '[]'
+      CI_GIT_BASELINE_BRANCH:
+        type: string
+        default: 'main'
+  workflow_dispatch:
+    inputs:
+      CI_UPDATE_TYPE:
+        description: 'Specify the type of update (e.g., patch, minor, major)'
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+        default: 'patch'
+      CI_HELM_CHART_NAME_FILTER:
+        description: 'Filter for Helm chart names (list in JSON format)'
+        required: true
+        default: '[]'
+      CI_GIT_BASELINE_BRANCH:
+        description: 'Baseline branch for Git operations'
+        required: true
+        default: 'main'
+
+env:
+  GIT_USER: svcAPLBot
+  BOT_EMAIL: ${{ vars.BOT_EMAIL }}
+  BOT_USERNAME: ${{ vars.BOT_USERNAME }}
+  CHECK_CONTEXT: continuous-integration/integration-test
+  COMMIT_ID: '${{ github.event.pull_request.head.sha || github.sha }}'
+jobs:
+  preprocess-input:
+    name: Helm chart update
+    runs-on: ubuntu-latest
+    steps:
+      - name: Print user input
+        run: |
+          echo 'CI_UPDATE_TYPE: ${{ inputs.CI_UPDATE_TYPE }}'
+          echo 'CI_HELM_CHART_NAME_FILTER: ${{ inputs.CI_HELM_CHART_NAME_FILTER }}'
+          echo 'CI_GIT_BASELINE_BRANCH: ${{ inputs.CI_GIT_BASELINE_BRANCH }}'
+      - name: Set env
+        run: |
+          git config --global user.email $BOT_EMAIL
+          git config --global user.name $BOT_USERNAME
+      - name: Checkout repository
+        uses: actions/checkout@v3
+      - name: Set up Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: 20
+      - name: Install packages
+        run: |
+          cd ci/
+          npm install
+      - name: Update helm charts
+        env:
+          CI_UPDATE_TYPE: ${{ inputs.CI_UPDATE_TYPE }}
+          CI_HELM_CHART_NAME_FILTER: ${{ inputs.CI_HELM_CHART_NAME_FILTER }}
+          CI_GIT_BASELINE_BRANCH: ${{ inputs.CI_GIT_BASELINE_BRANCH }}
+          GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+        run: |
+          cd ci/ 
+          npm run update-helm-chart-deps

ci/.env.sample

@@ -0,0 +1,5 @@
+CI_UPDATE_TYPE='minor'
+CI_HELM_CHART_NAME_FILTER='["cert-manager"]'
+CI_GH_CREATE_PR='false'
+CI_GIT_BASELINE_BRANCH='APL-11'
+CI_GIT_LOCAL_BRANCH_ONLY='true'

ci/.gitignore

@@ -0,0 +1 @@
+.env

ci/package-lock.json

@@ -0,0 +1,33 @@
+{
+  "author": "Akamai",
+  "bugs": {
+    "url": "https://github.com/linode/apl-core/issues"
+  },
+  "dependencies": {
+    "ajv": "8.17.1",
+    "dotenv": "^16.4.7",
+    "envalid": "8.0.0",
+    "js-yaml": "^4.1.0",
+    "semver": "^7.6.3",
+    "yaml": "2.3.0-5",
+    "zx": "^8.2.2"
+  },
+  "description": "CI scripts",
+  "engines": {
+    "node": ">=20 <21",
+    "npm": "^10"
+  },
+  "homepage": "https://github.com/linode/apl-core#readme",
+  "license": "Apache-2.0",
+  "name": "apl-core",
+  "private": true,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/linode/apl-core.git"
+  },
+  "scripts": {
+    "update-helm-chart-deps": "src/update-helm-chart-deps.mjs"
+  },
+  "type": "commonjs",
+  "version": "1.0.0"
+}