mirror of
https://github.com/shadoll/helm-charts.git
synced 2026-08-28 19:43:12 +00:00
shaandClaude Sonnet 4.6
132ef9d020
v10.11.11 has a broken UpdateNormalizedUsername migration that queries a column that was never added to the schema. Pin to v10.11.10 and add version-exclude support to the update script so the daily bot skips the broken version until upstream fixes it. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
187 lines
7.3 KiB
Bash
Executable File
187 lines
7.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# scripts/update-charts.sh
|
|
# Checks for upstream image updates and bumps Helm chart versions automatically.
|
|
|
|
# Repository Root
|
|
REPO_ROOT=$(git rev-parse --show-toplevel)
|
|
UPDATES_FOUND=""
|
|
ERRORS_FOUND=""
|
|
|
|
# Fetch latest version from different sources
|
|
fetch_latest() {
|
|
local source_type=$1
|
|
local source_data=$2
|
|
local version=""
|
|
|
|
case "$source_type" in
|
|
"github-release")
|
|
version=$(curl -sL "https://api.github.com/repos/$source_data/releases/latest" | jq -r '.tag_name // empty')
|
|
;;
|
|
"github-sha")
|
|
local repo="${source_data%%:*}"
|
|
local branch="${source_data#*:}"
|
|
if [ "$branch" = "$source_data" ]; then
|
|
branch=$(curl -sL "https://api.github.com/repos/$repo" | jq -r '.default_branch // "main"')
|
|
fi
|
|
version=$(curl -sL "https://api.github.com/repos/$repo/commits/$branch" | jq -r '.sha // empty' | cut -c1-7)
|
|
;;
|
|
"dockerhub-tags")
|
|
version=$(curl -s "https://registry.hub.docker.com/v2/repositories/$source_data/tags?page_size=100" | jq -r '.results[].name' | grep -E '^[0-9]+\.[0-9]+\.[0-9]+$' | sort -V -r | head -1)
|
|
;;
|
|
"dockerhub-tags-pattern")
|
|
local repo="${source_data%%:*}"
|
|
local pattern="${source_data#*:}"
|
|
version=$(curl -s "https://registry.hub.docker.com/v2/repositories/$repo/tags?page_size=100" | jq -r '.results[].name' | grep -E "$pattern" | sort -V -r | head -1)
|
|
;;
|
|
"dockerhub-dev")
|
|
local repo="${source_data%%:*}"
|
|
local pattern="${source_data#*:}"
|
|
version=$(curl -s "https://registry.hub.docker.com/v2/repositories/$repo/tags?page_size=100" | jq -r '.results[].name' | grep -E "$pattern" | head -1)
|
|
;;
|
|
"ghcr-tags")
|
|
local repo="${source_data%%:*}"
|
|
local pattern="${source_data#*:}"
|
|
[ "$pattern" = "$source_data" ] && pattern='^v?[0-9]+\.[0-9]+\.[0-9]+$'
|
|
local token
|
|
token=$(curl -s "https://ghcr.io/token?scope=repository:${repo}:pull" | jq -r '.token // empty')
|
|
if [ -n "$token" ]; then
|
|
version=$(curl -s -H "Authorization: Bearer $token" "https://ghcr.io/v2/${repo}/tags/list?n=10000" | jq -r '.tags[]' | grep -E "$pattern" | sort -V -r | head -1)
|
|
fi
|
|
;;
|
|
"ghcr-tags-build")
|
|
# For images tagged as <base>-<build-number>-linux-<arch>; sorts by build number to find latest base tag.
|
|
local repo="${source_data%%:*}"
|
|
local pattern="${source_data#*:}"
|
|
[ "$pattern" = "$source_data" ] && pattern='^.*-[0-9]+-linux-amd64$'
|
|
local token
|
|
token=$(curl -s "https://ghcr.io/token?scope=repository:${repo}:pull" | jq -r '.token // empty')
|
|
if [ -n "$token" ]; then
|
|
version=$(curl -s -H "Authorization: Bearer $token" "https://ghcr.io/v2/${repo}/tags/list?n=10000" \
|
|
| jq -r '.tags[]' \
|
|
| grep -E "$pattern" \
|
|
| sort -t'-' -k3 -rn \
|
|
| head -1 \
|
|
| sed 's/-[0-9]*-linux-.*$//')
|
|
fi
|
|
;;
|
|
*)
|
|
return 1
|
|
;;
|
|
esac
|
|
echo "$version"
|
|
}
|
|
|
|
# Apply sed pattern if provided
|
|
apply_pattern() {
|
|
local version=$1
|
|
local pattern=$2
|
|
if [ -z "$pattern" ]; then
|
|
echo "$version"
|
|
else
|
|
echo "$version" | sed "$pattern"
|
|
fi
|
|
}
|
|
|
|
# Bump semver patch version (0.1.9 -> 0.1.10)
|
|
bump_version() {
|
|
local version=$1
|
|
# Extract optional suffix (e.g., -dev, -beta)
|
|
local suffix=""
|
|
if [[ "$version" == *-* ]]; then
|
|
suffix="-${version#*-}"
|
|
version="${version%%-*}"
|
|
fi
|
|
local major minor patch
|
|
IFS='.' read -r major minor patch <<< "$version"
|
|
patch=$((patch + 1))
|
|
echo "$major.$minor.$patch$suffix"
|
|
}
|
|
|
|
# Main loop through charts
|
|
for chart_dir in "$REPO_ROOT"/*/; do
|
|
chart_yaml="$chart_dir/Chart.yaml"
|
|
[ -f "$chart_yaml" ] || continue
|
|
|
|
chart_name=$(basename "$chart_dir")
|
|
echo "Checking chart: $chart_name"
|
|
|
|
# Parse metadata
|
|
source_type=$(grep "version-source:" "$chart_yaml" | sed 's/.*version-source: *//' | tr -d ' ' || true)
|
|
source_pattern=$(grep "version-pattern:" "$chart_yaml" | sed 's/.*version-pattern: *//' | sed 's/^"\(.*\)"$/\1/' || true)
|
|
version_exclude=$(grep "version-exclude:" "$chart_yaml" | sed 's/.*version-exclude: *"\([^"]*\)".*/\1/' || true)
|
|
current_app_version=$(grep "^appVersion:" "$chart_yaml" | head -1 | sed 's/.*appVersion: *"\([^"]*\)".*/\1/' || true)
|
|
current_chart_version=$(grep "^version:" "$chart_yaml" | head -1 | sed 's/.*version: *//' | tr -d ' ' || true)
|
|
|
|
if [ -z "$source_type" ]; then
|
|
echo " Skipping: No version-source found."
|
|
continue
|
|
fi
|
|
|
|
# Fetch and clean latest
|
|
echo " Source image: $source_type"
|
|
if ! latest_raw=$(fetch_latest "${source_type%%:*}" "${source_type#*:}" 2>&1); then
|
|
echo " Error: Unsupported source type '${source_type%%:*}'."
|
|
ERRORS_FOUND="$ERRORS_FOUND\n- **$chart_name**: unsupported source type '${source_type%%:*}'"
|
|
continue
|
|
fi
|
|
|
|
latest_clean=$(apply_pattern "$latest_raw" "$source_pattern")
|
|
|
|
if [ -z "$latest_clean" ]; then
|
|
echo " Error: Could not fetch latest version."
|
|
ERRORS_FOUND="$ERRORS_FOUND\n- **$chart_name**: could not fetch latest version from $source_type"
|
|
continue
|
|
fi
|
|
|
|
if [ -n "$version_exclude" ] && [ "$latest_clean" = "$version_exclude" ]; then
|
|
echo " Skipping excluded version: $latest_clean"
|
|
continue
|
|
fi
|
|
|
|
echo " Current: $current_app_version | Latest: $latest_clean"
|
|
|
|
# Compare and Update
|
|
if [ "$current_app_version" != "$latest_clean" ]; then
|
|
bump_chart=$(grep -E '^ version-bump-chart:' "$chart_yaml" | sed 's/.*: *"\?//;s/"\?$//')
|
|
if [ "$bump_chart" = "false" ]; then
|
|
echo " 🚀 Update found! Bumping to App: $latest_clean | Chart: $current_chart_version (chart version pinned)"
|
|
sed -i.bak \
|
|
-e "s|^appVersion:.*|appVersion: \"$latest_clean\"|"\
|
|
"$chart_yaml"
|
|
else
|
|
new_chart_version=$(bump_version "$current_chart_version")
|
|
echo " 🚀 Update found! Bumping to App: $latest_clean | Chart: $new_chart_version"
|
|
sed -i.bak \
|
|
-e "s|^appVersion:.*|appVersion: \"$latest_clean\"|"\
|
|
-e "s|^version:.*|version: $new_chart_version|" \
|
|
"$chart_yaml"
|
|
fi
|
|
rm -f "$chart_yaml.bak"
|
|
|
|
# Update image.tag in values.yaml if it has a non-empty tag (for wrapper charts)
|
|
values_yaml="$chart_dir/values.yaml"
|
|
if [ -f "$values_yaml" ] && grep -qE 'tag: ".+"' "$values_yaml"; then
|
|
sed -i.bak \
|
|
-e 's|tag: "[^"][^"]*"|tag: "'"$latest_clean"'"|' \
|
|
"$values_yaml"
|
|
rm -f "$values_yaml.bak"
|
|
echo " Updated values.yaml image.tag"
|
|
fi
|
|
|
|
UPDATES_FOUND="$UPDATES_FOUND\n- **$chart_name**: $current_app_version ➔ $latest_clean (Chart v$new_chart_version)"
|
|
else
|
|
echo " Up to date."
|
|
fi
|
|
done
|
|
|
|
# Output summary for GH Actions
|
|
if [ -n "$UPDATES_FOUND" ]; then
|
|
echo -e "$UPDATES_FOUND" > "$REPO_ROOT/update_summary.txt"
|
|
fi
|
|
|
|
if [ -n "$ERRORS_FOUND" ]; then
|
|
echo -e "$ERRORS_FOUND" > "$REPO_ROOT/errors_summary.txt"
|
|
fi
|
|
|
|
exit 0
|