Add github yamllint workflow [v3.28]

.github/workflows/yamllint.yml

@@ -0,0 +1,35 @@
+# Lint YAML files present in the repository.
+#
+# Currently we only lint semaphore yaml files, to
+# avoid excessive confusion from developers by
+# throwing unnecessary warnings or errors on arbitrary
+# yaml files.
+#
+# If you want to lint other YAML files in this
+# repository, *add a second workflow* and make
+# sure that you're specifying file paths in the
+# on:pull_request section and in the `with:file_or_dir`
+# section of the block itself.
+---
+name: Yaml Lint
+on:  # yamllint disable-line rule:truthy
+  pull_request:
+    paths:
+      - '.semaphore/**/*.yml'
+      - '.semaphore/.yamllint.yml'
+
+jobs:
+  lintSemaphoreYaml:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - id: yaml-lint
+        uses: ibiqlik/action-yamllint@v3
+        with:
+          file_or_dir: .semaphore/**/*.yml
+          config_file: .semaphore/.yamllint.yml
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: yamllint-logfile
+          path: ${{ steps.yaml-lint.outputs.logfile }}

.semaphore/.yamllint.yml

@@ -0,0 +1,8 @@
+extends: default
+
+rules:
+  line-length: disable
+  document-start: disable
+  empty-lines: disable
+  indentation:
+    indent-sequences: whatever

.semaphore/cleanup.yml

@@ -4,41 +4,38 @@ agent:
   machine:
     type: f1-standard-2
     os_image: ubuntu2004
-
 execution_time_limit:
   minutes: 10
-
 blocks:
-- name: Clean up GCE resources
-  dependencies: []
-  task:
-    prologue:
-      commands:
-      - checkout
-      - export GOOGLE_APPLICATION_CREDENTIALS=$HOME/secrets/secret.google-service-account-key.json
-      - export SHORT_WORKFLOW_ID=$(echo ${SEMAPHORE_WORKFLOW_ID} | sha256sum | cut -c -8)
-      - export ZONE=europe-west3-c
-      - export VM_PREFIX=sem-${SEMAPHORE_PROJECT_NAME}-${SHORT_WORKFLOW_ID}-
-      - echo VM_PREFIX=${VM_PREFIX}
-    jobs:
-    - name: Clean up GCE instances
-      commands:
-      - cd felix
-      - ./.semaphore/clean-up-vms ${VM_PREFIX}
-    secrets:
-    - name: google-service-account-for-gce
-
-- name: Clean up windows resources
-  dependencies: []
-  task:
-    prologue:
-      commands:
-        - checkout
-        - az login --service-principal -u "${AZ_SP_ID}" -p "${AZ_SP_PASSWORD}" --tenant "${AZ_TENANT_ID}" --output none
-        - cd process/testing/util
-    jobs:
-      - name: Clean up windows felix resources
+  - name: Clean up GCE resources
+    dependencies: []
+    task:
+      prologue:
         commands:
-          - ./delete-az-rg.sh ${USER}-capz-win-felix-${SEMAPHORE_WORKFLOW_ID:0:8}-rg
-    secrets:
-    - name: banzai-secrets
+          - checkout
+          - export GOOGLE_APPLICATION_CREDENTIALS=$HOME/secrets/secret.google-service-account-key.json
+          - export SHORT_WORKFLOW_ID=$(echo ${SEMAPHORE_WORKFLOW_ID} | sha256sum | cut -c -8)
+          - export ZONE=europe-west3-c
+          - export VM_PREFIX=sem-${SEMAPHORE_PROJECT_NAME}-${SHORT_WORKFLOW_ID}-
+          - echo VM_PREFIX=${VM_PREFIX}
+      jobs:
+        - name: Clean up GCE instances
+          commands:
+            - cd felix
+            - ./.semaphore/clean-up-vms ${VM_PREFIX}
+      secrets:
+        - name: google-service-account-for-gce
+  - name: Clean up windows resources
+    dependencies: []
+    task:
+      prologue:
+        commands:
+          - checkout
+          - az login --service-principal -u "${AZ_SP_ID}" -p "${AZ_SP_PASSWORD}" --tenant "${AZ_TENANT_ID}" --output none
+          - cd process/testing/util
+      jobs:
+        - name: Clean up windows felix resources
+          commands:
+            - ./delete-az-rg.sh ${USER}-capz-win-felix-${SEMAPHORE_WORKFLOW_ID:0:8}-rg
+      secrets:
+        - name: banzai-secrets

.semaphore/license-scanning/fossa-scan.yml

@@ -1,14 +1,11 @@
 version: v1.0
 name: Run Fossa Scan
-
 agent:
   machine:
     type: f1-standard-2
     os_image: ubuntu2004
-
 execution_time_limit:
   minutes: 30
-
 blocks:
   - name: "Trigger Fossa Scan"
     skip:

.semaphore/push-images/alp.yml

@@ -4,10 +4,8 @@ agent:
   machine:
     type: f1-standard-2
     os_image: ubuntu2004
-
 execution_time_limit:
   minutes: 60
-
 global_job_config:
   env_vars:
     - name: DEV_REGISTRIES
@@ -32,7 +30,6 @@ global_job_config:
       - echo $DOCKER_TOKEN | docker login --username "$DOCKER_USER" --password-stdin
       - echo $QUAY_TOKEN | docker login --username "$QUAY_USER" --password-stdin quay.io
       - export BRANCH_NAME=$SEMAPHORE_GIT_BRANCH
-
 blocks:
   - name: Publish ALP images
     dependencies: []

.semaphore/push-images/apiserver.yml

@@ -4,10 +4,8 @@ agent:
   machine:
     type: f1-standard-2
     os_image: ubuntu2004
-
 execution_time_limit:
   minutes: 60
-
 global_job_config:
   env_vars:
     - name: DEV_REGISTRIES
@@ -32,7 +30,6 @@ global_job_config:
       - echo $DOCKER_TOKEN | docker login --username "$DOCKER_USER" --password-stdin
       - echo $QUAY_TOKEN | docker login --username "$QUAY_USER" --password-stdin quay.io
       - export BRANCH_NAME=$SEMAPHORE_GIT_BRANCH
-
 blocks:
   - name: Publish apiserver images
     dependencies: []

.semaphore/push-images/calicoctl.yml

@@ -4,10 +4,8 @@ agent:
   machine:
     type: f1-standard-2
     os_image: ubuntu2004
-
 execution_time_limit:
   minutes: 60
-
 global_job_config:
   env_vars:
     - name: DEV_REGISTRIES
@@ -32,7 +30,6 @@ global_job_config:
       - echo $DOCKER_TOKEN | docker login --username "$DOCKER_USER" --password-stdin
       - echo $QUAY_TOKEN | docker login --username "$QUAY_USER" --password-stdin quay.io
       - export BRANCH_NAME=$SEMAPHORE_GIT_BRANCH
-
 blocks:
   - name: Publish calicoctl images
     dependencies: []

.semaphore/push-images/cni-plugin.yml

@@ -4,10 +4,8 @@ agent:
   machine:
     type: f1-standard-2
     os_image: ubuntu2004
-
 execution_time_limit:
   minutes: 60
-
 global_job_config:
   env_vars:
     - name: DEV_REGISTRIES
@@ -32,7 +30,6 @@ global_job_config:
       - echo $DOCKER_TOKEN | docker login --username "$DOCKER_USER" --password-stdin
       - echo $QUAY_TOKEN | docker login --username "$QUAY_USER" --password-stdin quay.io
       - export BRANCH_NAME=$SEMAPHORE_GIT_BRANCH
-
 blocks:
   - name: Publish cni-plugin images
     dependencies: []

.semaphore/push-images/key-cert-provisioner.yml

@@ -4,10 +4,8 @@ agent:
   machine:
     type: f1-standard-2
     os_image: ubuntu2004
-
 execution_time_limit:
   minutes: 60
-
 global_job_config:
   env_vars:
     - name: DEV_REGISTRIES
@@ -32,7 +30,6 @@ global_job_config:
       - echo $DOCKER_TOKEN | docker login --username "$DOCKER_USER" --password-stdin
       - echo $QUAY_TOKEN | docker login --username "$QUAY_USER" --password-stdin quay.io
       - export BRANCH_NAME=$SEMAPHORE_GIT_BRANCH
-
 blocks:
   - name: Publish key-cert-provisioner images
     dependencies: []

.semaphore/push-images/kube-controllers.yml

@@ -4,10 +4,8 @@ agent:
   machine:
     type: f1-standard-2
     os_image: ubuntu2004
-
 execution_time_limit:
   minutes: 60
-
 global_job_config:
   env_vars:
     - name: DEV_REGISTRIES
@@ -32,7 +30,6 @@ global_job_config:
       - echo $DOCKER_TOKEN | docker login --username "$DOCKER_USER" --password-stdin
       - echo $QUAY_TOKEN | docker login --username "$QUAY_USER" --password-stdin quay.io
       - export BRANCH_NAME=$SEMAPHORE_GIT_BRANCH
-
 blocks:
   - name: Publish kube-controllers images
     dependencies: []

.semaphore/push-images/node.yml

@@ -4,10 +4,8 @@ agent:
   machine:
     type: f1-standard-4
     os_image: ubuntu2004
-
 execution_time_limit:
   minutes: 60
-
 global_job_config:
   env_vars:
     - name: DEV_REGISTRIES
@@ -32,7 +30,6 @@ global_job_config:
       - echo $DOCKER_TOKEN | docker login --username "$DOCKER_USER" --password-stdin
       - echo $QUAY_TOKEN | docker login --username "$QUAY_USER" --password-stdin quay.io
       - export BRANCH_NAME=$SEMAPHORE_GIT_BRANCH
-
 blocks:
   - name: "Publish node images"
     dependencies: []

.semaphore/push-images/pod2daemon.yml

@@ -4,10 +4,8 @@ agent:
   machine:
     type: f1-standard-2
     os_image: ubuntu2004
-
 execution_time_limit:
   minutes: 60
-
 global_job_config:
   env_vars:
     - name: DEV_REGISTRIES
@@ -32,7 +30,6 @@ global_job_config:
       - echo $DOCKER_TOKEN | docker login --username "$DOCKER_USER" --password-stdin
       - echo $QUAY_TOKEN | docker login --username "$QUAY_USER" --password-stdin quay.io
       - export BRANCH_NAME=$SEMAPHORE_GIT_BRANCH
-
 blocks:
   - name: Publish pod2daemon images
     dependencies: []

.semaphore/push-images/typha.yml

@@ -4,10 +4,8 @@ agent:
   machine:
     type: f1-standard-2
     os_image: ubuntu2004
-
 execution_time_limit:
   minutes: 60
-
 global_job_config:
   env_vars:
     - name: DEV_REGISTRIES
@@ -32,7 +30,6 @@ global_job_config:
       - echo $DOCKER_TOKEN | docker login --username "$DOCKER_USER" --password-stdin
       - echo $QUAY_TOKEN | docker login --username "$QUAY_USER" --password-stdin quay.io
       - export BRANCH_NAME=$SEMAPHORE_GIT_BRANCH
-
 blocks:
   - name: Publish typha images
     dependencies: []