Merge pull request #79 from embik/validate-resources

✨ Add hack/ci/render-helm-charts.sh that improves validation

.gitignore

@@ -1 +1,4 @@
 *.kubeconfig
+
+# output of hack/ci/validate-helm-resources.sh
+kcp-templated.yaml

.prow.yaml

@@ -5,15 +5,9 @@ presubmits:
     clone_uri: "https://github.com/kcp-dev/helm-charts"
     spec:
       containers:
-        - image: ghcr.io/kcp-dev/infra/build:1.20.8-1
+        - image: ghcr.io/kcp-dev/infra/build:1.20.9-3
           command:
-            - helm
-          args:
-            - template
-            - --debug
-            - --set=externalHostname=ci.kcp.io
-            - kcp
-            - charts/kcp/
+            - hack/ci/render-helm-charts.sh
           resources:
             requests:
               memory: 64Mi

hack/ci/render-helm-charts.sh

@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+cd "$(dirname "$0")/../.."
+
+if ! [ -x "$(command -v helm)" ]; then
+    echo "missing helm command in PATH"
+    exit 1
+fi
+
+if ! [ -x "$(command -v kubeconform)" ]; then
+    echo "missing kubeconform command in PATH"
+    exit 1
+fi
+
+helm template \
+  --debug \
+  --set=externalHostname=ci.kcp.io \
+  kcp charts/kcp/ | tee kcp-templated.yaml
+
+echo "---"
+
+# run kubeconform on template output to validate Kubernetes resources.
+# the external schema-location allows us to validate resources for
+# common CRDs (e.g. cert-manager resources).
+kubeconform \
+  -schema-location default \
+  -schema-location 'https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \
+  -strict \
+  -summary \
+  kcp-templated.yaml