actions-marketplace-validations/kustomize-automation
Run kustomize, clean up YAML for Flux, validate YAML with kubeval. YAML can then be committed/released.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
- Runtime
- Deprecated runtime
Inputs
| name | description | required | default |
|---|---|---|---|
| kustomize-path | Path to directory containing root kustomization.yaml. Relative to repo root. | yes | ./ |
| output-actions | Array of actions to take with the generated YAML. Currently the options are:\n{"type":"LoggerOutputAction","logErrors":true,"logYaml":true}\n{"type":"VariableOutputAction","outputVariableName":"thisIsAVariableInGitWorkflow","errorsVariableName":undefined}\n{"type":"FileOutputAction","createDirIfMissing":true,"fileOpenFlags":"w","errorsFileName":"$GITHUB_WORKSPACE/errors.yml","yamlFileName":"$GITHUB_WORKSPACE/output.yml"}\n{"type":"ArtifactOutputAction","name":"my-artifact","errorsFileName":"errors.yml","yamlFileName":"output.yml"} | yes | [{"type":"LoggerOutputAction","logErrors":true,"logYaml":false},{"type":"VariableOutputAction","outputVariableName":"yaml","errorsVariableName":"errors"},{"type":"FileOutputAction","createDirIfMissing":true,"errorsFileName":"$GITHUB_WORKSPACE/errors.yml","yamlFileName":"$GITHUB_WORKSPACE/output.yml"},{"type":"ArtifactOutputAction","name":"my-artifact","errorsFileName":"errors.yml","yamlFileName":"output.yml"}] |
| extra-resources | Comma separated list of additional .yaml files to reference when running kustomize. E.g. if you have dev and test on the same cluster then you would want to include dev's YAML when building test or vice versa. | no | — |
| allowed-secrets | Comma separated list of "namespace/secret" pairs that we allow to exist in the YAML. | no | — |
| custom-validation-rules | Newline separated list of "error message|required/forbidden|/regex/" e.g. "Dont commit passwords|false|/password|key/i\nOwner must exist|true|/owner:/i". | no | — |
| required-bins | Comma separated list of binaries to check for on start up. | no | kustomize,kubeval,helm |
| verbose | Output detailed logging | no | false |
| validate-with-kubeval | Validates the YAML against schemas with kubeval | no | true |
| kustomize-args | Arguments to run kustomize with | no | --enable_alpha_plugins |
| warnings-as-errors | Report warnings as errors | no | false |
| ignore-errors-regex | Regex to filter out warnings and errors, e.g. '/ignore/i' | no | — |
Outputs
| name | description |
|---|---|
| yaml | Generated YAML (if VariableOutputAction.outputVariableName is set) |
| errors | Any errors (if VariableOutputAction.errorsVariableName is set) |