New install-test job in validate-charts.yml: for exactly the charts a PR changes, install them into an ephemeral k3d cluster (pinned k3d v5.9.0, k3s v1.35.5-k3s1) and require every Deployment/StatefulSet to become Ready. Runs non-blocking (continue-on-error) during the stabilization phase. Fixtures live at the repo root under ci/ (not inside chart directories, so they neither trigger publishes on merge nor get packaged): a stub OnePasswordItem CRD, per-chart test values and fixtures (dummy secrets with in-cluster DSNs, throwaway postgres/redis/dex, synapse-generate seed job, static hostPath PVs where charts pin storage classes or need RWX), plus a shared ci/run-install-test.sh harness that also runs locally. Excluded with documented reasons (ci/excluded-charts.txt): satisfactory (multi-GB image), teamspeak-server (TS6 beta license expired, image crashes on start), template-chart (placeholder image). All 14 non-excluded charts verified locally in k3d using only the committed fixtures.
25 lines
758 B
YAML
25 lines
758 B
YAML
# Schema-less stub CRD for the 1Password operator's OnePasswordItem CR.
|
|
# The charts render OnePasswordItem resources; in CI there is no operator, so
|
|
# this stub lets them apply cleanly while the actual Kubernetes Secrets are
|
|
# hand-created per chart in ci/<chart>/fixtures.yaml.
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
name: onepassworditems.onepassword.com
|
|
spec:
|
|
group: onepassword.com
|
|
names:
|
|
kind: OnePasswordItem
|
|
listKind: OnePasswordItemList
|
|
plural: onepassworditems
|
|
singular: onepassworditem
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1
|
|
served: true
|
|
storage: true
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|