Merge pull request #136 from Lerentis/feat/tt/schema-validation

feat(): added schema validation for chart

Author: Lerentis

.github/workflows/test-and-lint.yml

@@ -14,11 +14,19 @@ jobs:
       - name: Set up Helm
         uses: azure/setup-helm@v4
         with:
-          version: v3.11.2
+          version: v4.3.0
+
+      - name: Validate Helm values schema
+        run: |
+          helm template schema-validation charts/bitwarden-crd-operator >/dev/null
+          if helm template schema-validation charts/bitwarden-crd-operator --set image.pullPolicy=invalid >/dev/null 2>&1; then
+            echo "Expected invalid image.pullPolicy to fail schema validation"
+            exit 1
+          fi
 
       - uses: actions/setup-python@v6
         with:
-          python-version: '3.9'
+          python-version: '3.14'
           check-latest: true
 
       - name: Set up chart-testing
@@ -38,7 +46,7 @@ jobs:
 
       - name: Install ah cli
         run: |
-          export AH_VERSION=1.17.0
+          export AH_VERSION=1.23.0
           curl -LO https://github.com/artifacthub/hub/releases/download/v${AH_VERSION}/ah_${AH_VERSION}_linux_amd64.tar.gz
           tar -xf ah_${AH_VERSION}_linux_amd64.tar.gz
           chmod +x ./ah

charts/bitwarden-crd-operator/Chart.yaml

@@ -4,7 +4,7 @@ description: Deploy the Bitwarden CRD Operator
 
 type: application
 
-version: "v0.18.1"
+version: "v0.19.0"
 
 appVersion: "0.18.0"
 
@@ -112,24 +112,8 @@ annotations:
   artifacthub.io/operator: "true"
   artifacthub.io/containsSecurityUpdates: "false"
   artifacthub.io/changes: |
-    - kind: changed
-      description: "updated alpine to 3.24.2"
-    - kind: changed
-      description: "updated python to 3.14.7"
-    - kind: changed
-      description: "updated pip to 26.1.2"
-    - kind: changed
-      description: "updated libcrypto3 to 3.5.8"
-    - kind: changed
-      description: "updated nodejs to 24.18.1"
-    - kind: fixed
-      description: "fixed auth recovery to reconfigure the bitwarden host instead of falling back to a default"
-    - kind: changed
-      description: "updated kopf to 1.44.6"
-    - kind: changed
-      description: "updated kubernetes to 36.0.3"
-    - kind: fixed
-      description: "fixed termination of operator process after failed authentication recovery"
+    - kind: added
+      description: "added schema validation for helm values"
   artifacthub.io/images: |
     - name: bitwarden-crd-operator
       image: ghcr.io/lerentis/bitwarden-crd-operator:0.18.0

charts/bitwarden-crd-operator/values.schema.json

@@ -0,0 +1,112 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "type": "object",
+  "properties": {
+    "replicaCount": {
+      "type": "integer",
+      "minimum": 0
+    },
+    "image": {
+      "type": "object",
+      "properties": {
+        "repository": { "type": "string", "minLength": 1 },
+        "pullPolicy": { "type": "string", "enum": ["Always", "IfNotPresent", "Never"] },
+        "tag": { "type": "string" }
+      },
+      "required": ["repository", "pullPolicy"],
+      "additionalProperties": false
+    },
+    "imagePullSecrets": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "name": { "type": "string", "minLength": 1 }
+        },
+        "required": ["name"],
+        "additionalProperties": false
+      }
+    },
+    "nameOverride": { "type": "string" },
+    "fullnameOverride": { "type": "string" },
+    "deploymentStrategy": { "type": "string", "enum": ["Recreate", "RollingUpdate"] },
+    "env": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "name": { "type": "string", "minLength": 1 },
+          "value": { "type": "string" },
+          "valueFrom": { "type": "object" }
+        },
+        "required": ["name"],
+        "additionalProperties": false,
+        "oneOf": [
+          { "required": ["value"], "not": { "required": ["valueFrom"] } },
+          { "required": ["valueFrom"], "not": { "required": ["value"] } }
+        ]
+      }
+    },
+    "externalConfigSecret": {
+      "type": "object",
+      "properties": {
+        "enabled": { "type": "boolean" },
+        "name": { "type": "string" }
+      },
+      "required": ["enabled", "name"],
+      "additionalProperties": false,
+      "if": {
+        "properties": { "enabled": { "const": true } },
+        "required": ["enabled"]
+      },
+      "then": {
+        "properties": { "name": { "type": "string", "minLength": 1 } }
+      }
+    },
+    "serviceAccount": {
+      "type": "object",
+      "properties": {
+        "create": { "type": "boolean" },
+        "annotations": { "type": "object", "additionalProperties": { "type": "string" } },
+        "name": { "type": "string" }
+      },
+      "required": ["create", "annotations", "name"],
+      "additionalProperties": false
+    },
+    "podAnnotations": { "type": "object", "additionalProperties": { "type": "string" } },
+    "podSecurityContext": { "type": "object" },
+    "securityContext": { "type": "object" },
+    "readinessProbe": { "$ref": "#/definitions/probe" },
+    "livenessProbe": { "$ref": "#/definitions/probe" },
+    "resources": { "type": "object" },
+    "autoscaling": {
+      "type": "object",
+      "properties": {
+        "enabled": { "type": "boolean" },
+        "minReplicas": { "type": "integer", "minimum": 1 },
+        "maxReplicas": { "type": "integer", "minimum": 1 },
+        "targetCPUUtilizationPercentage": { "type": "integer", "minimum": 1, "maximum": 100 },
+        "targetMemoryUtilizationPercentage": { "type": "integer", "minimum": 1, "maximum": 100 }
+      },
+      "required": ["enabled", "minReplicas", "maxReplicas"],
+      "additionalProperties": false
+    },
+    "nodeSelector": { "type": "object", "additionalProperties": { "type": "string" } },
+    "tolerations": { "type": "array", "items": { "type": "object" } },
+    "affinity": { "type": "object" }
+  },
+  "definitions": {
+    "probe": {
+      "type": "object",
+      "properties": {
+        "failureThreshold": { "type": "integer", "minimum": 1 },
+        "initialDelaySeconds": { "type": "integer", "minimum": 0 },
+        "periodSeconds": { "type": "integer", "minimum": 1 },
+        "successThreshold": { "type": "integer", "minimum": 1 },
+        "timeoutSeconds": { "type": "integer", "minimum": 1 }
+      },
+      "required": ["failureThreshold", "initialDelaySeconds", "periodSeconds", "successThreshold", "timeoutSeconds"],
+      "additionalProperties": false
+    }
+  }
+}