fix: release helm chart failing due to invalid token (#209)

* - Adding repositories for which token is needed

* - Addressing error "A sequence was not expected"

* - Restored the trigger on v*

* - Tempalized the clusterrole to get the correct labels

* - trigger

* - Correcting the label

* - Adding k8tls adpater as a dependency

.github/workflows/stable-release.yaml

@@ -51,6 +51,7 @@ jobs:
         with:
           app-id: ${{ vars.ACTIONS_APP_ID }}
           private-key: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }}
+          repositories: charts
 
       - name: Publish Helm chart
         uses: stefanprodan/helm-gh-pages@master

deployments/nimbus-kyverno/templates/_helpers.tpl

@@ -50,6 +50,15 @@ app.kubernetes.io/name: {{ include "nimbus-kyverno.name" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
 {{- end }}
 
+{{/*
+ClusterRoleSelector labels
+*/}}
+{{- define "nimbus-kyverno.clusterRoleSelectorLabels" -}}
+app.kubernetes.io/component: background-controller
+app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/part-of: {{ .Release.Name }}-kyverno
+{{- end }}
+
 {{/*
 Create the name of the service account to use
 */}}

deployments/nimbus-kyverno/templates/clusterrole.yaml

@@ -2,9 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
-    app.kubernetes.io/component: background-controller
-    app.kubernetes.io/instance: nimbus-kyverno
-    app.kubernetes.io/part-of: nimbus-kyverno
+    {{- include "nimbus-kyverno.clusterRoleSelectorLabels" . | nindent 4 }}
   name: nimbus-kyverno:update-resources
 rules:
 - apiGroups:

deployments/nimbus/Chart.yaml

@@ -30,3 +30,8 @@ dependencies:
     version: ">= 0.1.0"
     repository: https://5gsec.github.io/charts
     condition: autoDeploy.kyverno
+
+  - name: nimbus-k8tls
+    version: ">= 0.1.0"
+    repository: https://5gsec.github.io/charts
+    condition: autoDeploy.k8tls

deployments/nimbus/values.yaml

@@ -4,6 +4,7 @@ autoDeploy:
   kubearmor: true
   netpol: true
   kyverno: true
+  k8tls: true
 
 replicaCount: 1