publish.yaml

name: Publish Helm Chart

on:
  push:
    tags:
      - "**"
  pull_request:
    types:
      - opened
      - synchronize
      - reopened

jobs:
  publish-tag:
    permissions:
      id-token: write
      contents: read
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repo
        uses: actions/checkout@v3

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ secrets.ROLE_TO_ASSUME }}
          aws-region: us-east-1

      - name: Login to Amazon ECR Public
        id: login-ecr-public
        uses: aws-actions/amazon-ecr-login@v2
        with:
          registry-type: public

      - name: Package and push helm chart to Amazon ECR Public
        env:
          REGISTRY: ${{ steps.login-ecr-public.outputs.registry }}
          REGISTRY_ALIAS: cyral/helm/crawler
          REPOSITORY: crawler
        run: |
          VERSION="0.0.0+${GITHUB_SHA}"
          echo "setting version to $VERSION"
          sed -i "s/version: .*/version: $VERSION/" Chart.yaml
          helm package .
          helm push $REPOSITORY-${VERSION}.tgz oci://$REGISTRY/$REGISTRY_ALIAS