name: Update Docker Image Tags and Release Helm Chart on: schedule: - cron: '0 3 * * 1' # 毎週月曜日 3:00 AM (JST 12:00 PM) workflow_dispatch: env: REGISTRY_URL: https://git.cafepieters.com OWNER: helmchart jobs: update-and-release: runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v3 with: fetch-depth: 0 - name: Install Helm uses: azure/setup-helm@v3 with: version: 'v3.12.0' - name: Check jq availability run: | if ! command -v jq &> /dev/null; then echo "Installing jq..." apt-get update && apt-get install -y jq fi jq --version - name: Check for new nginx version id: nginx run: | set -e echo "Checking nginx versions..." CURRENT=$(grep -A3 "nginx:" values.yaml | grep "tag:" | head -1 | sed 's/.*tag: *"\([^"]*\)".*/\1/' | tr -d ' ') echo "Current nginx: $CURRENT" LATEST=$(curl -s "https://registry.hub.docker.com/v2/repositories/library/nginx/tags?page_size=100" | \ jq -r '.results[].name' | \ grep -E '^[0-9]+\.[0-9]+\.[0-9]+-alpine-perl$' | \ sort -V | tail -1) if [ -z "$LATEST" ]; then echo "Warning: Could not fetch latest nginx version, using current" LATEST="$CURRENT" fi echo "Latest nginx: $LATEST" echo "current=$CURRENT" >> $GITHUB_OUTPUT echo "latest=$LATEST" >> $GITHUB_OUTPUT - name: Check for new phpMyAdmin version id: phpmyadmin run: | set -e echo "Checking phpMyAdmin versions..." CURRENT=$(grep -A3 "phpmyadmin:" values.yaml | grep "tag:" | head -1 | sed 's/.*tag: *"\([^"]*\)".*/\1/' | tr -d ' ') echo "Current phpMyAdmin: $CURRENT" # Docker Hub API v2を使用してタグを取得 # パターン: 5.2.3-fpm-alpine 形式 LATEST=$(curl -s "https://registry.hub.docker.com/v2/repositories/phpmyadmin/phpmyadmin/tags?page_size=100" | \ jq -r '.results[].name' | \ grep -E '^[0-9]+\.[0-9]+\.[0-9]+-fpm-alpine$' | \ sort -V | tail -1) if [ -z "$LATEST" ]; then echo "Warning: Could not fetch latest phpMyAdmin version, using current" LATEST="$CURRENT" fi # phpMyAdminバージョンを抽出 (5.2.3の部分) APP_VERSION=$(echo "$LATEST" | grep -oE '^[0-9]+\.[0-9]+\.[0-9]+') if [ -z "$APP_VERSION" ]; then echo "Error: Could not extract phpMyAdmin version" exit 1 fi echo "Latest phpMyAdmin: $LATEST" echo "phpMyAdmin version: $APP_VERSION" echo "current=$CURRENT" >> $GITHUB_OUTPUT echo "latest=$LATEST" >> $GITHUB_OUTPUT echo "app_version=$APP_VERSION" >> $GITHUB_OUTPUT - name: Determine update and release conditions id: check_update run: | set -e NGINX_CURRENT="${{ steps.nginx.outputs.current }}" NGINX_LATEST="${{ steps.nginx.outputs.latest }}" PMA_CURRENT="${{ steps.phpmyadmin.outputs.current }}" PMA_LATEST="${{ steps.phpmyadmin.outputs.latest }}" echo "Nginx: $NGINX_CURRENT vs $NGINX_LATEST" echo "phpMyAdmin: $PMA_CURRENT vs $PMA_LATEST" UPDATE_NEEDED=false RELEASE_NEEDED=false if [ "$NGINX_CURRENT" != "$NGINX_LATEST" ] || [ "$PMA_CURRENT" != "$PMA_LATEST" ]; then UPDATE_NEEDED=true echo "Update needed" else echo "Already up to date" fi if [ "$PMA_CURRENT" != "$PMA_LATEST" ]; then RELEASE_NEEDED=true echo "Release needed: phpMyAdmin updated" else echo "No release (nginx-only update or no change)" fi echo "update_needed=$UPDATE_NEEDED" >> $GITHUB_OUTPUT echo "release_needed=$RELEASE_NEEDED" >> $GITHUB_OUTPUT - name: Update values.yaml if: steps.check_update.outputs.update_needed == 'true' run: | set -e echo "Updating values.yaml..." NGINX_OLD="${{ steps.nginx.outputs.current }}" NGINX_NEW="${{ steps.nginx.outputs.latest }}" PMA_OLD="${{ steps.phpmyadmin.outputs.current }}" PMA_NEW="${{ steps.phpmyadmin.outputs.latest }}" if [ "$NGINX_OLD" != "$NGINX_NEW" ]; then sed -i "0,/tag: \"${NGINX_OLD}\"/s//tag: \"${NGINX_NEW}\"/" values.yaml echo "Nginx updated: $NGINX_OLD -> $NGINX_NEW" fi if [ "$PMA_OLD" != "$PMA_NEW" ]; then sed -i "0,/tag: \"${NGINX_NEW}\"/b; s/tag: \"${PMA_OLD}\"/tag: \"${PMA_NEW}\"/" values.yaml echo "phpMyAdmin updated: $PMA_OLD -> $PMA_NEW" fi echo "values.yaml updated" git diff values.yaml - name: Update Chart.yaml version if: steps.check_update.outputs.release_needed == 'true' run: | set -e APP_VERSION="${{ steps.phpmyadmin.outputs.app_version }}" sed -i "s/^version: .*/version: \"$APP_VERSION\"/" Chart.yaml sed -i "s/^appVersion: .*/appVersion: \"$APP_VERSION\"/" Chart.yaml echo "Chart.yaml updated to version $APP_VERSION" cat Chart.yaml - name: Commit changes if: steps.check_update.outputs.update_needed == 'true' run: | git config user.name "Claude" git config user.email "claude@cafepieters.com" git add values.yaml Chart.yaml git commit -m "chore: update to phpMyAdmin ${{ steps.phpmyadmin.outputs.latest }}, nginx ${{ steps.nginx.outputs.latest }}" git push origin main - name: Package Helm Chart if: steps.check_update.outputs.release_needed == 'true' run: | helm package . echo "Helm chart packaged" - name: Create Git Tag if: steps.check_update.outputs.release_needed == 'true' run: | APP_VERSION="${{ steps.phpmyadmin.outputs.app_version }}" if git rev-parse "v$APP_VERSION" >/dev/null 2>&1; then echo "Tag v$APP_VERSION already exists, skipping" else git tag -a "v$APP_VERSION" -m "Release phpMyAdmin $APP_VERSION" git push origin "v$APP_VERSION" echo "Git tag v$APP_VERSION created" fi - name: Create Gitea Release if: steps.check_update.outputs.release_needed == 'true' env: GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }} run: | APP_VERSION="${{ steps.phpmyadmin.outputs.app_version }}" CHART_NAME=$(grep '^name:' Chart.yaml | awk '{print $2}') PACKAGE_FILE="${CHART_NAME}-${APP_VERSION}.tgz" RELEASE_BODY="phpMyAdmin Helm Chart v${APP_VERSION} - phpMyAdmin: ${{ steps.phpmyadmin.outputs.latest }}, Nginx: ${{ steps.nginx.outputs.latest }}" # リリースが既に存在するか確認 EXISTING=$(curl -s \ -H "Authorization: token ${GITEA_TOKEN}" \ "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/releases/tags/v${APP_VERSION}" | jq -r '.id // empty') if [ -n "$EXISTING" ]; then echo "Release v$APP_VERSION already exists (id=$EXISTING), skipping" else # リリースを作成 RELEASE_ID=$(curl -s -X POST \ -H "Authorization: token ${GITEA_TOKEN}" \ -H "Content-Type: application/json" \ -d "{\"tag_name\":\"v${APP_VERSION}\",\"name\":\"v${APP_VERSION}\",\"body\":\"${RELEASE_BODY}\"}" \ "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/releases" | jq -r '.id') # アセットをアップロード curl -X POST \ -H "Authorization: token ${GITEA_TOKEN}" \ -H "Content-Type: application/gzip" \ --data-binary "@${PACKAGE_FILE}" \ "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/releases/${RELEASE_ID}/assets?name=${PACKAGE_FILE}" echo "Release v$APP_VERSION created with asset: ${PACKAGE_FILE}" fi - name: Publish to Gitea Package Registry if: steps.check_update.outputs.release_needed == 'true' run: | CHART_NAME=$(grep '^name:' Chart.yaml | awk '{print $2}') APP_VERSION="${{ steps.phpmyadmin.outputs.app_version }}" PACKAGE_FILE="${CHART_NAME}-${APP_VERSION}.tgz" echo "Publishing ${PACKAGE_FILE} to Gitea Package Registry..." curl --fail-with-body \ -u "${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_TOKEN }}" \ -X POST \ --upload-file "${PACKAGE_FILE}" \ "${REGISTRY_URL}/api/packages/${OWNER}/helm/api/charts" echo "Chart published to registry successfully" - name: Summary run: | APP_VERSION="${{ steps.phpmyadmin.outputs.app_version }}" NGINX_VERSION="${{ steps.nginx.outputs.latest }}" PMA_VERSION="${{ steps.phpmyadmin.outputs.latest }}" UPDATE_NEEDED="${{ steps.check_update.outputs.update_needed }}" RELEASE_NEEDED="${{ steps.check_update.outputs.release_needed }}" echo "========================================" if [ "$UPDATE_NEEDED" = "true" ]; then echo "Update completed!" else echo "Already up to date, no changes." fi echo "========================================" echo "phpMyAdmin: ${PMA_VERSION}" echo "Nginx: ${NGINX_VERSION}" if [ "$RELEASE_NEEDED" = "true" ]; then echo "Chart Version: ${APP_VERSION} (released)" echo "Registry: ${REGISTRY_URL}/api/packages/${OWNER}/helm" else echo "No release (nginx-only or no update)" fi echo "========================================"