From 7e85d91a9bd2c466c3b9161094ffc8cf86ff7e18 Mon Sep 17 00:00:00 2001 From: Melvin Stans Date: Tue, 11 Nov 2025 17:03:41 +0100 Subject: [PATCH 1/5] Add workflow for publishing helm charts to github baserow/baserow-chart --- .../workflows/trigger-helm-chart-upload.yml | 76 +++++++++++++++++++ 1 file changed, 76 insertions(+) create mode 100644 .github/workflows/trigger-helm-chart-upload.yml diff --git a/.github/workflows/trigger-helm-chart-upload.yml b/.github/workflows/trigger-helm-chart-upload.yml new file mode 100644 index 0000000000..1c0a3d9ca7 --- /dev/null +++ b/.github/workflows/trigger-helm-chart-upload.yml @@ -0,0 +1,76 @@ +name: Publish Helm Chart + +on: + push: + tags: + - "*" + +jobs: + publish-helm-chart: + runs-on: ubuntu-latest + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Set up Helm + uses: azure/setup-helm@v4 + + - name: Package Helm Chart + id: package + run: | + cd deploy/helm + rm -f baserow/Chart.lock + + # Add Helm repositories + helm repo add bitnami https://charts.bitnami.com/bitnami + helm repo add caddy https://caddyserver.github.io/ingress + + # Build dependencies + helm dependency build baserow + + # Package the chart + helm package baserow + + # Get chart details + CHART_FILE=$(ls baserow-*.tgz) + echo "chart-file=$CHART_FILE" >> $GITHUB_OUTPUT + + HELM_CHART_VERSION=$(helm show chart baserow | grep '^version:' | awk '{print $2}') + echo "chart-version=$HELM_CHART_VERSION" >> $GITHUB_OUTPUT + + echo "Packaged chart: $CHART_FILE (version: $HELM_CHART_VERSION)" + + - name: Upload Helm Chart Artifact + uses: actions/upload-artifact@v4 + with: + name: helm-chart + path: deploy/helm/baserow-*.tgz + retention-days: 30 + + - name: Generate GitHub App Token + if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/') + id: generate-token + uses: actions/create-github-app-token@v2 + with: + app-id: ${{ vars.CHART_REPO_APP_ID }} + private-key: ${{ secrets.CHART_REPO_APP_PRIVATE_KEY }} + owner: ${{ vars.CHART_REPO_OWNER }} + repositories: ${{ vars.CHART_REPO_NAME }} + + - name: Trigger Chart Repository Update + if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/') + run: | + curl -X POST \ + -H "Accept: application/vnd.github.v3+json" \ + -H "Authorization: Bearer ${{ steps.generate-token.outputs.token }}" \ + https://api.github.com/repos/${{ vars.CHART_REPO_OWNER }}/${{ vars.CHART_REPO_NAME }}/dispatches \ + -d '{ + "event_type": "helm-chart-published", + "client_payload": { + "chart_file": "${{ steps.package.outputs.chart-file }}", + "chart_version": "${{ steps.package.outputs.chart-version }}", + "app_version": "${{ github.ref_name }}", + "source_repo": "${{ github.event.repository.name }}", + "source_run_id": "${{ github.run_id }}" + } + }' From 88d84036205667d5bf057343b643f824492c0743 Mon Sep 17 00:00:00 2001 From: Melvin Stans Date: Tue, 11 Nov 2025 17:14:47 +0100 Subject: [PATCH 2/5] Enable strict linting for Helm chart Added strict linting for the Helm chart. --- .github/workflows/trigger-helm-chart-upload.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/trigger-helm-chart-upload.yml b/.github/workflows/trigger-helm-chart-upload.yml index 1c0a3d9ca7..81d957dded 100644 --- a/.github/workflows/trigger-helm-chart-upload.yml +++ b/.github/workflows/trigger-helm-chart-upload.yml @@ -28,6 +28,9 @@ jobs: # Build dependencies helm dependency build baserow + # Lint the chart with strict mode + helm lint baserow --strict + # Package the chart helm package baserow From b34d363af8b80c14105fc2ba15c053f2e3d8e0ad Mon Sep 17 00:00:00 2001 From: Melvin Stans Date: Fri, 14 Nov 2025 13:27:41 +0100 Subject: [PATCH 3/5] Add image_repo fix on pipeline --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 301cbd89d9..9136fc7ac0 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,7 +17,7 @@ concurrency: env: REGISTRY: ghcr.io - IMAGE_REPO: ${{ github.repository }} + IMAGE_REPO: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }} CI_IMAGE_TAG_PREFIX: ci- DEVELOP_BRANCH_NAME: develop From d8ae3782b296367c9dcb92e3fa14e52b2b3053a5 Mon Sep 17 00:00:00 2001 From: Melvin Stans Date: Fri, 14 Nov 2025 13:43:33 +0100 Subject: [PATCH 4/5] Change image repo to base repo instead of the fork --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9136fc7ac0..4f36be6f21 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,7 +17,7 @@ concurrency: env: REGISTRY: ghcr.io - IMAGE_REPO: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }} + IMAGE_REPO: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.repo.full_name || github.repository }} CI_IMAGE_TAG_PREFIX: ci- DEVELOP_BRANCH_NAME: develop From f7f1f3e24b7d3bd9bfdf5a2de5fde0b6ee36af21 Mon Sep 17 00:00:00 2001 From: Melvin Stans Date: Fri, 14 Nov 2025 13:50:24 +0100 Subject: [PATCH 5/5] Update again --- .github/workflows/ci.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4f36be6f21..ba2f2f3f57 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,7 +17,10 @@ concurrency: env: REGISTRY: ghcr.io - IMAGE_REPO: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.repo.full_name || github.repository }} + # For fork PRs: use fork's registry (they can't write to base repo) + # For same-repo PRs: use base/original repository + # For pushes: use current repository + IMAGE_REPO: ${{ github.event_name == 'pull_request' && (github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name && github.event.pull_request.head.repo.full_name || github.event.pull_request.base.repo.full_name) || github.repository }} CI_IMAGE_TAG_PREFIX: ci- DEVELOP_BRANCH_NAME: develop