action

.github/workflows/action.yaml

@@ -1,33 +1,126 @@
-    on:
-      push:
-        branches:         
-        - '*' 
-
-    name: Accuknox-Job Pipeline
-
-    jobs:
-      deploy:
-        runs-on: ubuntu-latest
-
-        env:
-          ECR_REGION: us-east-1
-          ECR_REPO: public.ecr.aws/k9v9d5v2
-          # CHART_NAME: kube-prometheus-stack
-
-        steps:
-          - uses: actions/checkout@v2
-
-          - name: AWS Credentials
-            uses: aws-actions/configure-aws-credentials@v1
-            with:
-              aws-region: ${{ env.ECR_REGION }}
-              aws-access-key-id: ${{ secrets.AWS_DEV_ACCESS_ID }}
-              aws-secret-access-key: ${{ secrets.AWS_DEV_SECRET_ID }}
-
-          - name: Authenticate ECR public authenticate
-            shell: bash
-            run: |
-              aws ecr-public get-login-password --region  ${{ env.ECR_REGION }} | helm registry login --username AWS --password-stdin  ${{ env.ECR_REPO }}
-              helm template accuknox-*
-              helm package accuknox-*
-              helm push $(ls *.tgz) oci://${{ env.ECR_REPO }}
+    # on:
+    #   push:
+    #     branches:         
+    #     - '*' 
+
+    # name: Accuknox-Job Pipeline
+
+    # jobs:
+    #   deploy:
+    #     runs-on: ubuntu-latest
+
+    #     env:
+    #       ECR_REGION: us-east-1
+    #       ECR_REPO: public.ecr.aws/k9v9d5v2
+    #       # CHART_NAME: kube-prometheus-stack
+
+    #     steps:
+    #       - uses: actions/checkout@v2
+
+    #       - name: AWS Credentials
+    #         uses: aws-actions/configure-aws-credentials@v1
+    #         with:
+    #           aws-region: ${{ env.ECR_REGION }}
+    #           aws-access-key-id: ${{ secrets.AWS_DEV_ACCESS_ID }}
+    #           aws-secret-access-key: ${{ secrets.AWS_DEV_SECRET_ID }}
+
+    #       - name: Authenticate ECR public authenticate
+    #         shell: bash
+    #         run: |
+    #           aws ecr-public get-login-password --region  ${{ env.ECR_REGION }} | helm registry login --username AWS --password-stdin  ${{ env.ECR_REPO }}
+    #           helm template accuknox-*
+    #           helm package accuknox-*
+    #           helm push $(ls *.tgz) oci://${{ env.ECR_REPO }}
+
+
+name: Accuknox-Job Workflow
+on:
+  push:
+    tags:
+    - "v[0-9]+.[0-9]+.[0-9]+"
+    - "v[0-9]+.[0-9]+.[0-9]+-*"
+  pull_request_target:
+    branches:
+    - "*"
+
+
+env:
+  REPO: public.ecr.aws/k9v9d5v2
+  CHART_NAME: accuknox-cis-k8s
+  CHART_PATH: ./accuknox-cis-k8s
+  CHART_REVISION_NAME: accuknox-cis-k8s
+  CHART_NAME_K8TLS: accuknox-k8tls-job
+  CHART_PATH_K8TLS: ./accuknox-k8tls-job
+  CHART_REVISION_NAME_K8TLS: accuknox-k8tls-job
+  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_DEV_ACCESS_ID }}
+  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_DEV_SECRET_ID }} 
+  AWS_REGION: us-east-1
+
+
+jobs:
+  tag-validate:
+    runs-on: ubuntu-latest
+    if: startsWith(github.ref, 'refs/tags/v')
+    steps:
+    - uses: rubenesp87/[email protected]
+      with:
+       version: ${{ github.ref_name }}
+
+
+  chart-validate:
+    runs-on: ubuntu-latest
+    if: always() && !contains(needs.tag-validate.result, 'failure')
+    needs: [tag-validate]
+    steps:
+    - name: Checkout source
+      uses: accuknox/common-gh-actions/actions/checkout-source@main 
+    - name: Validate helm chart 
+      uses: accuknox/common-gh-actions/actions/helm-check@main
+      with:
+        chart-path: ${{ env.CHART_PATH }}        
+        revision-name: ${{ env.CHART_REVISION_NAME }}         
+
+  chart-validate-k8tls:
+    runs-on: ubuntu-latest
+    if: always() && !contains(needs.tag-validate.result, 'failure')
+    needs: [tag-validate]
+    steps:
+    - name: Checkout source
+      uses: accuknox/common-gh-actions/actions/checkout-source@main 
+    - name: Validate helm chart 
+      uses: accuknox/common-gh-actions/actions/helm-check@main
+      with:
+        chart-path: ${{ env.CHART_PATH_K8TLS }}        
+        revision-name: ${{ env.CHART_REVISION_NAME_K8TLS }}         
+
+  chart-push:
+    runs-on: ubuntu-latest 
+    needs: [chart-validate]
+    if: startsWith(github.ref, 'refs/tags/v')
+    steps:
+    - name: Checkout source
+      uses: accuknox/common-gh-actions/actions/checkout-source@main 
+    - name: Push helm chart to ECR
+      uses: accuknox/common-gh-actions/actions/helm-push@main
+      with:
+        chart-path: ${{ env.CHART_PATH }}
+        version: ${{ github.ref_name }}
+        ecr-region: ${{ env.AWS_REGION }}
+        ecr-repo: ${{ env.REPO }}
+        type: public
+
+  chart-push-k8tls:
+    runs-on: ubuntu-latest 
+    needs: [chart-validate]
+    if: startsWith(github.ref, 'refs/tags/v')
+    steps:
+    - name: Checkout source
+      uses: accuknox/common-gh-actions/actions/checkout-source@main 
+    - name: Push helm chart to ECR
+      uses: accuknox/common-gh-actions/actions/helm-push@main
+      with:
+        chart-path: ${{ env.CHART_PATH_K8TLS }}
+        version: ${{ github.ref_name }}
+        ecr-region: ${{ env.AWS_REGION }}
+        ecr-repo: ${{ env.REPO }}
+        type: public