Helm Chart workflow (pab1it0/prometheus-mcp-server)

name: Helm Chart
 
on:
  push:
    branches: ["main"]
    tags:
      - 'v*'         # app release tags - also re-publishes the chart at HEAD
      - 'chart-v*'   # chart-only release tags, decoupled from app cadence
    paths:
      - 'charts/**'
  pull_request:
    branches: ["main"]
    paths:
      - 'charts/**'
 
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
 
jobs:
  lint-test:
    name: Lint and Test
    runs-on: latchkey-small
    timeout-minutes: 10
    permissions:
      contents: read
 
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
 
      - name: Require Chart.yaml version bump when charts/ changes
        if: github.event_name == 'pull_request'
        run: |
          base="origin/${{ github.base_ref }}"
          git fetch --no-tags origin "${{ github.base_ref }}"
          if git diff --name-only "$base"...HEAD -- charts/ | grep -q .; then
            if ! git diff "$base"...HEAD -- charts/prometheus-mcp-server/Chart.yaml | grep -qE '^[+]version:'; then
              echo "::error::charts/ changed but Chart.yaml 'version:' was not bumped. Bump it per SemVer (https://semver.org)."
              exit 1
            fi
          fi
 
      - name: Set up Helm
        uses: azure/setup-helm@v4
 
      - name: Lint chart
        run: helm lint charts/prometheus-mcp-server
 
      - name: Template chart (default values)
        run: helm template test charts/prometheus-mcp-server
 
      - name: Template chart with CI values
        run: |
          for values_file in charts/prometheus-mcp-server/ci/*.yaml; do
            echo "=== Testing with $values_file ==="
            helm template test charts/prometheus-mcp-server -f "$values_file"
          done
 
  publish:
    name: Publish to OCI Registry
    if: github.event_name == 'push' && github.ref_type == 'tag'
    needs: lint-test
    runs-on: latchkey-small
    timeout-minutes: 10
    permissions:
      contents: read
      packages: write
 
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
 
      - name: Verify chart-v* tag matches Chart.yaml version
        if: startsWith(github.ref, 'refs/tags/chart-v')
        run: |
          tag_version="${GITHUB_REF#refs/tags/chart-v}"
          chart_version=$(grep '^version:' charts/prometheus-mcp-server/Chart.yaml | sed -E 's/^version: *"?([^"]*)"?$/\1/')
          if [ "$tag_version" != "$chart_version" ]; then
            echo "::error::tag chart-v$tag_version does not match Chart.yaml version $chart_version"
            exit 1
          fi
          echo "tag chart-v$tag_version matches Chart.yaml version $chart_version"
 
      - name: Set up Helm
        uses: azure/setup-helm@v4
 
      - name: Log in to GHCR
        run: echo "${{ secrets.GITHUB_TOKEN }}" | helm registry login ghcr.io -u "${{ github.actor }}" --password-stdin
 
      - name: Package chart
        run: helm package charts/prometheus-mcp-server
 
      - name: Push chart to OCI registry
        run: helm push prometheus-mcp-server-*.tgz oci://ghcr.io/pab1it0/charts