flux-update-scheduled-check.yml

name: Flux Update Schedule Check
on:
  schedule:
    - cron:  '0 12 * * SUN'
  workflow_dispatch: {}

jobs:
  flux-schedule-check:
    name: Flux Update Schedule Check
    runs-on:
      - self-hosted
      - small
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Checkout kommander code
        uses: actions/checkout@v4
        with:
          repository: mesosphere/kommander
          path: kommander
          token: ${{ secrets.MESOSPHERECI_USER_TOKEN }}

      - name: Import GPG key (kommander workdir)
        uses: crazy-max/ghaction-import-gpg@v6
        with:
          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
          passphrase: ${{ secrets.GPG_PASSPHRASE }}
          git_user_signingkey: true
          git_commit_gpgsign: true
          git_tag_gpgsign: true
          git_push_gpgsign: true
          git_config_global: true
          workdir: 'kommander'

      - name: Import GPG key
        uses: crazy-max/ghaction-import-gpg@v6
        with:
          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
          passphrase: ${{ secrets.GPG_PASSPHRASE }}
          git_user_signingkey: true
          git_commit_gpgsign: true
          git_tag_gpgsign: true
          git_push_gpgsign: true
          git_config_global: true

      - uses: webfactory/ssh-agent@v0.9.0
        with:
          ssh-private-key: ${{ secrets.PRIVATE_SSH_KEY }}

      - name: Install NIX
        uses: cachix/install-nix-action@V28

      - name: Install devbox
        uses: jetify-com/devbox-install-action@v0.11.0
        with:
          enable-cache: true
          skip-nix-installation: true

      - name: Check for Flux update
        env:
          GH_TOKEN: ${{ secrets.MESOSPHERECI_USER_TOKEN }}
          GPG_KEY_ID: ${{ secrets.GPG_KEY_ID }}
        run: devbox run -- "make KOMMANDER_REPO_PATH=${GITHUB_WORKSPACE}/kommander make flux-update"