validate-k8s-samples.yml

name: validate-k8s-samples

on:
  pull_request:
    paths:
      - "assets/queries/k8s/**/test/*.yaml"
      - "assets/queries/k8s/**/test/*.yml"

jobs:
  validate-k8s-manifests:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          persist-credentials: false
      - name: Get Kubeval
        env:
          KUBEVAL_RELEASES_URL: https://github.com/instrumenta/kubeval/releases/latest/download/kubeval-linux-amd64.tar.gz
        run: |
          mkdir -p .bin
          PROJDIR=$(pwd)
          cd .bin && wget "${KUBEVAL_RELEASES_URL}" \
            && tar xf $(basename "${KUBEVAL_RELEASES_URL}") \
            && chmod +x kubeval \
            && rm -vf $(basename "${KUBEVAL_RELEASES_URL}") \
            && cd "${PROJDIR}"
      - name: Validate k8s manifests
        run: |
          python3 -u .github/scripts/samples-linters/validate-syntax.py \
            "assets/queries/k8s/**/test/*.yaml" \
            --extra ' --skip-kinds CustomResourceDefinition,KubeletConfiguration,Policy,EncryptionConfiguration,KubeSchedulerConfiguration,SecretProviderClass,Service,Configuration,ContainerSource,Revision' \
            --linter .bin/kubeval \
            --skip '.github/scripts/samples-linters/ignore-list/k8s' -v