diff --git a/.github/workflows/publish-chart.yaml b/.github/workflows/publish-chart.yaml index c48d6879af8..8bf50bc6982 100644 --- a/.github/workflows/publish-chart.yaml +++ b/.github/workflows/publish-chart.yaml @@ -15,18 +15,18 @@ env: HELM_REP: helm-charts GH_OWNER: aquasecurity CHART_DIR: helm/trivy - KIND_VERSION: "v0.11.1" - KIND_IMAGE: "kindest/node:v1.21.1@sha256:69860bda5563ac81e3c0057d654b5253219618a22ec3a346306239bba8cfa1a6" + KIND_VERSION: "v0.14.0" + KIND_IMAGE: "kindest/node:v1.23.6@sha256:b1fa224cc6c7ff32455e0b1fd9cbfd3d3bc87ecaa8fcb06961ed1afb3db0f9ae" jobs: test-chart: runs-on: ubuntu-20.04 steps: - name: Checkout - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 + uses: actions/checkout@v3 with: fetch-depth: 0 - name: Install Helm - uses: azure/setup-helm@18bc76811624f360dbd7f18c2d4ecb32c7b87bab + uses: azure/setup-helm@v3.3 with: version: v3.5.0 - name: Set up python @@ -35,9 +35,9 @@ jobs: python-version: 3.7 - name: Setup Chart Linting id: lint - uses: helm/chart-testing-action@dae259e86a35ff09145c0805e2d7dd3f7207064a + uses: helm/chart-testing-action@v2.2.1 - name: Setup Kubernetes cluster (KIND) - uses: helm/kind-action@d08cf6ff1575077dee99962540d77ce91c62387d + uses: helm/kind-action@v1.3.0 with: version: ${{ env.KIND_VERSION }} image: ${{ env.KIND_IMAGE }} @@ -45,7 +45,7 @@ jobs: run: ct lint-and-install --validate-maintainers=false --charts helm/trivy - name: Run chart-testing (Ingress enabled) run: | - sed -i -e '117s,false,'true',g' ./helm/trivy/values.yaml + sed -i -e '133s,false,'true',g' ./helm/trivy/values.yaml ct lint-and-install --validate-maintainers=false --charts helm/trivy publish-chart: @@ -55,7 +55,7 @@ jobs: runs-on: ubuntu-20.04 steps: - name: Checkout - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 + uses: actions/checkout@v3 with: fetch-depth: 0 - name: Install chart-releaser diff --git a/helm/trivy/values.yaml b/helm/trivy/values.yaml index cd2b4110d8b..225fcff6c43 100644 --- a/helm/trivy/values.yaml +++ b/helm/trivy/values.yaml @@ -28,7 +28,7 @@ resources: rbac: create: true - pspEnabled: true + pspEnabled: false podSecurityContext: runAsUser: 65534