cd-helm-release.yml

name: Release Helm Chart
concurrency: chart_releaser

on:
  push:
    branches:
      - main
    paths:
      - 'charts/generic-device-plugin/**'

jobs:
  release:
    # depending on default permission settings for your org (contents being read-only or read-write for workloads), you will have to add permissions
    # see: https://docs.github.com/en/actions/security-guides/automatic-token-authentication#modifying-the-permissions-for-the-github_token
    permissions:
      contents: write
      packages: write
      id-token: write
    runs-on: ubuntu-22.04
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Fetch history
        run: git fetch --prune --unshallow

      - name: Configure Git
        run: |
          git config user.name "$GITHUB_ACTOR"
          git config user.email "$GITHUB_ACTOR@users.noreply.github.com"

      - name: Set up Helm
        uses: azure/setup-helm@v3.5

      - name: Run chart-releaser for generic-device-plugin
        id: cr
        uses: helm/chart-releaser-action@v1.6.0
        env:
          CR_GENERATE_RELEASE_NOTES: true
          CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

      - name: Login to GHCR
        if: steps.cr.outputs.changed_charts != ''
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Push chart to OCI registry
        id: push
        if: steps.cr.outputs.changed_charts != ''
        run: |
          out=$(helm push .cr-release-packages/*.tgz oci://ghcr.io/${{ github.repository_owner }}/charts 2>&1)
          echo "$out"
          echo "digest=$(awk '/^Digest:/ {print $2}' <<<"$out")" >> "$GITHUB_OUTPUT"

      - name: Install Cosign
        if: steps.cr.outputs.changed_charts != ''
        uses: sigstore/cosign-installer@v4.1.2

      - name: Sign chart
        if: steps.cr.outputs.changed_charts != ''
        run: cosign sign --yes "ghcr.io/${{ github.repository_owner }}/charts/generic-device-plugin@${{ steps.push.outputs.digest }}"