Add support OCI container registry (#24)

cryptpad · Dec 14, 2023 · c108597 · c108597
1 parent 8ca7a1f
commit c108597
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 10 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+      - 'feat/**'
     paths:
       - '.github/**'
       - 'charts/**'
@@ -53,6 +54,8 @@ jobs:
     # see: https://docs.github.com/en/actions/security-guides/automatic-token-authentication#modifying-the-permissions-for-the-github_token
     permissions:
       contents: write
+      packages: write
+
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -73,6 +76,20 @@ jobs:
           helm repo add bitnami https://charts.bitnami.com/bitnami
           helm plugin install https://github.com/helm-unittest/helm-unittest
 
+      - name: Prepare GPG key
+        run: |
+          gpg_dir=.cr-gpg
+          mkdir "$gpg_dir"
+          keyring="$gpg_dir/secring.gpg"
+          base64 -d <<< "$GPG_KEYRING_BASE64" > "$keyring"
+          passphrase_file="$gpg_dir/passphrase"
+          echo "$GPG_PASSPHRASE" > "$passphrase_file"
+          echo "CR_PASSPHRASE_FILE=$passphrase_file" >> "$GITHUB_ENV"
+          echo "CR_KEYRING=$keyring" >> "$GITHUB_ENV"
+        env:
+          GPG_KEYRING_BASE64: "${{ secrets.GPG_KEYRING_BASE64 }}"
+          GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
+
       - name: Run chart-releaser
         uses: helm/chart-releaser-action@v1.5.0
         env:
@@ -83,7 +100,7 @@ jobs:
         uses: docker/login-action@v1
         with:
           registry: ghcr.io
-          username: ${{ github.repository_owner }}
+          username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Push Charts to GHCR
@@ -94,5 +111,4 @@ jobs:
               break
             fi
             helm push "${pkg}" oci://ghcr.io/${GITHUB_REPOSITORY_OWNER}/helm
-          done
-  
+          done
diff --git a/charts/cryptpad/Chart.yaml b/charts/cryptpad/Chart.yaml
@@ -21,7 +21,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.0.16
+version: 0.0.17-Beta.15
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

diff --git a/charts/cryptpad/values.yaml b/charts/cryptpad/values.yaml
@@ -245,7 +245,7 @@ probes:
     # -- Enable startup probe
     enabled: true
     httpGet:
-      # -- If enabled uses httpGet to check, if false uses tcpSocket checking. 
+      # -- If enabled uses httpGet to check, if false uses tcpSocket checking.
       enabled: false
       # -- Path to be tested with HTTP GET request
       path: /
@@ -255,15 +255,15 @@ probes:
     timeoutSeconds: 1
     # -- Period seconds for startup probe
     periodSeconds: 10
-    # -- Failure threshold for startup probe 
+    # -- Failure threshold for startup probe
     failureThreshold: 5
     # -- Success threshold for startup probe
     successThreshold: 1
   liveness:
     # -- Enable liveness probe
     enabled: true
     httpGet:
-      # -- If enabled uses httpGet to check, if false uses tcpSocket checking. 
+      # -- If enabled uses httpGet to check, if false uses tcpSocket checking.
       enabled: true
       # -- Path to be tested with HTTP GET request
       path: /
@@ -273,15 +273,15 @@ probes:
     timeoutSeconds: 1
     # -- Period seconds for liveness probe
     periodSeconds: 10
-    # -- Failure threshold for liveness probe 
+    # -- Failure threshold for liveness probe
     failureThreshold: 5
     # -- Success threshold for liveness probe
     successThreshold: 1
   readiness:
     # -- Enable readiness probe
     enabled: true
     httpGet:
-      # -- If enabled uses httpGet to check, if false uses tcpSocket checking. 
+      # -- If enabled uses httpGet to check, if false uses tcpSocket checking.
       enabled: true
       # -- Path to be tested with HTTP GET request
       path: /
@@ -291,7 +291,7 @@ probes:
     timeoutSeconds: 1
     # -- Period seconds for readiness probe
     periodSeconds: 10
-    # -- Failure threshold for readiness probe 
+    # -- Failure threshold for readiness probe
     failureThreshold: 5
     # -- Success threshold for readiness probe
     successThreshold: 1