init

2026-04-18 10:43:01 +07:00
parent 5ee121d49a
commit 9342806c3f
5 changed files with 142 additions and 1 deletions
@@ -0,0 +1,43 @@
+# .github/workflows/policy-ci.yaml
+name: Kyverno Policy CI
+
+on:
+  pull_request:
+    paths:
+    - 'policies/**'
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    
+    - name: Install Kyverno CLI
+      run: |
+        curl -LO https://github.com/kyverno/kyverno/releases/latest/download/kyverno-cli_linux_amd64.tar.gz
+        tar -xzf kyverno-cli_linux_amd64.tar.gz
+        sudo mv kyverno /usr/local/bin/
+    
+    - name: Lint policies
+      run: |
+        kyverno apply policies/ --resource test-resources/ --detailed-results
+    
+    - name: Run tests
+      run: |
+        kyverno test policies/tests/
+    
+    - name: Validate helm chart
+      run: |
+        helm lint kyverno-policies/
+        helm template kyverno-policies/ | kyverno apply - --resource test-resources/
+  
+  deploy-staging:
+    needs: test
+    if: github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    steps:
+    - name: Deploy to staging
+      run: |
+        helm upgrade --install kyverno-policies ./kyverno-policies \
+          -f values-staging.yaml \
+          --kubeconfig ${{ secrets.STAGING_KUBECONFIG }}