From bce3b795a8f25f84dd521c29f996da34bdd89d86 Mon Sep 17 00:00:00 2001
From: nick-gorse <nick@olb42.com>
Date: Sun, 10 May 2026 13:42:33 +0100
Subject: [PATCH] fix gitea workflow

---
 .gitea/workflows/validate.yaml | 45 ++++++++++++++++------------------
 1 file changed, 21 insertions(+), 24 deletions(-)

diff --git a/.gitea/workflows/validate.yaml b/.gitea/workflows/validate.yaml
index acb3d1c..6475aae 100644
--- a/.gitea/workflows/validate.yaml
+++ b/.gitea/workflows/validate.yaml
@@ -14,22 +14,26 @@ jobs:
         run: |
           curl -sL https://github.com/yannh/kubeconform/releases/latest/download/kubeconform-linux-amd64.tar.gz \
             | tar xz -C /usr/local/bin
+          curl -fsSL https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
 
-          # Traefik IngressRoute is a CRD, so kubeconform needs an extra schema source.
-          mkdir -p .ci-schemas/traefik.io
-          curl -fsSL https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/traefik.io/ingressroute_v1alpha1.json \
-            -o .ci-schemas/traefik.io/ingressroute_v1alpha1.json
-          cp .ci-schemas/traefik.io/ingressroute_v1alpha1.json .ci-schemas/traefik.io/IngressRoute_v1alpha1.json
-          cp .ci-schemas/traefik.io/ingressroute_v1alpha1.json .ci-schemas/traefik.io/IngressRoute.json
-          cp .ci-schemas/traefik.io/ingressroute_v1alpha1.json .ci-schemas/traefik.io/ingressroute.json
+      - name: Helm lint
+        run: |
+          found=0
 
-          # ArgoCD Application is also a CRD.
-          mkdir -p .ci-schemas/argoproj.io
-          curl -fsSL https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/argoproj.io/application_v1alpha1.json \
-            -o .ci-schemas/argoproj.io/application_v1alpha1.json
-          cp .ci-schemas/argoproj.io/application_v1alpha1.json .ci-schemas/argoproj.io/Application_v1alpha1.json
-          cp .ci-schemas/argoproj.io/application_v1alpha1.json .ci-schemas/argoproj.io/Application.json
-          cp .ci-schemas/argoproj.io/application_v1alpha1.json .ci-schemas/argoproj.io/application.json
+          for parent in helm custom-charts; do
+            [ -d "$parent" ] || continue
+
+            for chart in "$parent"/*; do
+              [ -d "$chart" ] || continue
+              found=1
+              echo "Linting $chart"
+              helm lint "$chart"
+            done
+          done
+
+          if [ "$found" -eq 0 ]; then
+            echo "No Helm charts found"
+          fi
 
       - name: kubeconform - raw YAML
         run: |
@@ -41,21 +45,16 @@ jobs:
           mapfile -t manifests < <(
             find . -type f -name '*.yaml' \
             ! -path './.gitea/*' \
-            ! -name '.sops.yaml' \
-            ! -name '*.secret.yaml' \
             ! -name 'kustomization.yaml' \
-            ! \( -name 'secret*.yaml' \) \
-            ! \( -path '*/config/*' -prune \) \
+            ! -name 'values.yaml' \
             ! -path './bootstrap/config.yaml' \
-            ! -path './bootstrap/badge.yaml' \
-            ! \( -name '*patch*.yaml' \) \
             | sort
           )
 
           if [ "$bootstrap_enabled" != "true" ]; then
             filtered=()
             for manifest in "${manifests[@]}"; do
-              [ "$manifest" = "./bootstrap/application.yaml" ] && continue
+              [ "$manifest" = "./bootstrap/applicationset.yaml" ] && continue
               filtered+=("$manifest")
             done
             manifests=("${filtered[@]}")
@@ -70,10 +69,8 @@ jobs:
             | xargs kubeconform \
                 -strict \
                 -kubernetes-version 1.35.0 \
-                -schema-location default \
                 -ignore-missing-schemas \
-                -schema-location '.ci-schemas/{{.Group}}/{{.ResourceKind}}{{.KindSuffix}}.json' \
-                -schema-location '.ci-schemas/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \
+                -schema-location default \
                 -schema-location 'https://git.olb42.com/olb042/kubeconform/raw/branch/main/crdSchemas/{{ .ResourceKind }}_{{ .ResourceAPIVersion }}.json' \
                 -summary