chart-releaser.yml

name: Chart Release

on:
  workflow_dispatch: 

env:
  CR_CONFIGFILE: "${{ github.workspace }}/cr.yaml"
  CR_TOOL_PATH: "${{ github.workspace }}/.cr-tool"
  CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
  TARGET_BRANCH: "${{ github.ref_name }}"
  CHART_NAME_CE: "plane-ce"
  CHART_NAME_ENTERPRISE: "plane-enterprise"

jobs:
  setup:
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Configure Git
        run: |
          git config user.name "$GITHUB_ACTOR"
          git config user.email "$GITHUB_ACTOR@users.noreply.github.com"

      - name: Install Helm
        uses: azure/setup-helm@v4

      - name: Prepare GPG key #this step is for using exported keys and make your github runner
        run: |
          gpg_dir=.cr-gpg
          mkdir "$gpg_dir"
          keyring="$gpg_dir/secring.gpg" #referring keyring to private key of gpg
          base64 -d <<< "$GPG_KEYRING_BASE64" > "$keyring" #storing base64 GPG key into keyring 
          passphrase_file="$gpg_dir/passphrase"
          echo "$GPG_PASSPHRASE" > "$passphrase_file" #storing passphrase data into a file
          echo "CR_PASSPHRASE_FILE=$passphrase_file" >> "$GITHUB_ENV" #saving passphrase into github-environment
          echo "CR_KEYRING=$keyring" >> "$GITHUB_ENV" #saving private key into github-environemnt
        env:
          GPG_KEYRING_BASE64: "${{ secrets.GPG_KEYRING_BASE64 }}" #Referring secrets of github above
          GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"

      - name: Rename Chart
        if: github.ref_name != 'master'
        run: |
          flatBranchName=$(echo "${{ env.TARGET_BRANCH }}" | sed 's/\//\-/g')
          sed -i "s/name: \(.*\)/name: \1-${flatBranchName}/" charts/${{ env.CHART_NAME_CE }}/Chart.yaml
          sed -i "s/name: \(.*\)/name: \1-${flatBranchName}/" charts/${{ env.CHART_NAME_ENTERPRISE }}/Chart.yaml

      - name: Release Charts
        uses: helm/chart-releaser-action@v1.6.0
        with:
          charts_dir: charts
          config: cr.yaml
          packages_with_index: false
          skip_existing: true
        env:
          CR_TOKEN: ${{ env.CR_TOKEN }}
          CR_KEY: "Plane"
          CR_KEYRING: ${{ env.CR_KEYRING }}
          CR_PASSPHRASE_FILE: ${{ env.CR_PASSPHRASE_FILE }}
          CR_SIGN: true

      - id: publish-plane-enterprise
        if: github.ref_name == 'master'
        name: Publish Plane-Enterprise
        env:
          CHART_REPO: ${{ env.CHART_NAME_ENTERPRISE }}
          HELM_REPO: plane
        run: |
          mkdir -p tmp
          helm registry login -u ${{ secrets.HARBOR_USERNAME }} -p ${{ secrets.HARBOR_TOKEN }} ${{ vars.HARBOR_REGISTRY }}
          helm package --sign --key "Plane" --keyring $CR_KEYRING --passphrase-file "$CR_PASSPHRASE_FILE" charts/$CHART_REPO -u -d tmp
          helm push tmp/${{ env.CHART_REPO }}-*.tgz oci://${{ vars.HARBOR_REGISTRY }}/${{env.HELM_REPO}}
          rm -rf tmp