flux-image-test.yaml

---
  name: Flux Image Test

  on:
    pull_request:
      branches: ["main"]
      paths: ["kubernetes/**"]

  concurrency:
    group: ${{ github.workflow }}-${{ github.event.number || github.ref }}
    cancel-in-progress: true

  jobs:
    extract-images:
      name: Extract Images
      runs-on: ubuntu-latest
      permissions:
        pull-requests: write
      strategy:
        matrix:
          paths: ["kubernetes"]
      outputs:
        matrix: ${{ steps.extract-images.outputs.images }}
      steps:
        - name: Generate Token
          uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0
          id: app-token
          with:
            app-id: "${{ secrets.BOT_APP_ID }}"
            private-key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"

        - name: Setup Path
          run: echo "/home/linuxbrew/.linuxbrew/bin" >> $GITHUB_PATH

        - name: Setup Workflow Tools
          run: brew update && brew install jo yq

        - name: Checkout Default Branch
          uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
          with:
            token: "${{ steps.app-token.outputs.token }}"
            ref: "${{ github.event.repository.default_branch }}"
            path: default

        - name: Checkout Pull Request Branch
          uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
          with:
            token: "${{ steps.app-token.outputs.token }}"
            path: pull

        - name: Gather Images in Default Branch
          uses: docker://ghcr.io/allenporter/flux-local:main
          with:
            args: >-
              get cluster
              --path /github/workspace/default/${{ matrix.paths }}
              --enable-images
              --output yaml
              --output-file default.yaml

        - name: Gather Images in Pull Request Branch
          uses: docker://ghcr.io/allenporter/flux-local:main
          with:
            args: >-
              get cluster
              --path /github/workspace/pull/${{ matrix.paths }}
              --enable-images
              --output yaml
              --output-file pull.yaml

        - name: Filter Default Branch Results
          shell: bash
          run: |
            yq -r '[.. | .images? | select(. != null)] | flatten | sort | unique | .[]' \
                default.yaml > default.txt

        - name: Filter Pull Request Branch Results
          shell: bash
          run: |
            yq -r '[.. | .images? | select(. != null)] | flatten | sort | unique | .[]' \
                pull.yaml > pull.txt

        - name: Compare Default and Pull Request Images
          id: extract-images
          shell: bash
          run: |
            images=$(jo -a $(grep -vf default.txt pull.txt))
            echo "images=${images}" >> $GITHUB_OUTPUT
            echo "${images}"

    test-images:
      if: ${{ needs.extract-images.outputs.matrix != '[]' }}
      name: Test images
      runs-on: ubuntu-latest
      needs: ["extract-images"]
      strategy:
        matrix:
          images: ${{ fromJSON(needs.extract-images.outputs.matrix) }}
        max-parallel: 4
        fail-fast: false
      steps:
        - name: Test Images
          run: docker pull ${{ matrix.images }}

    # Summarize matrix https://github.community/t/status-check-for-a-matrix-jobs/127354/7
    test-images-success:
      if: ${{ always() }}
      needs: ["test-images"]
      name: Test Images Successful
      runs-on: ubuntu-latest
      steps:
        - if: ${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}
          name: Check matrix status
          run: exit 1