ci: add consolidated GitOps test workflow with validation by devantler · Pull Request #1287 · devantler-tech/platform

devantler · 2026-03-26T12:25:39Z

Purpose

Add a CI workflow that calls the consolidated ci-gitops-test reusable workflow, which now includes manifest validation as an early step (before cluster provisioning).

Changes

Added .github/workflows/ci-gitops-test.yaml calling the reusable workflow with VALIDATE: true
Validation runs before cluster creation, failing fast on invalid manifests

The standalone ci-gitops-validate.yaml reusable workflow has been removed
Validation is now integrated into ci-gitops-test.yaml via the ksail-cluster composite action's validate input
KSail PR: fix(validate): respect sourceDirectory from ksail.yaml config ksail#3399 (validate respects sourceDirectory)

What gets tested

ksail workload validate — validates K8s manifests before any cluster provisioning
Full cluster lifecycle — create → push → reconcile → delete (Talos + Docker)

Copilot

Pull request overview

This PR appears intended to trigger/verify CI behavior related to a KSail validate fix and reusable workflow changes, but the only repository change included is a no-op formatting change to the README.

Changes:

Add a trailing blank line to README.md.

README.md

Calls the ci-gitops-test reusable workflow which now includes manifest validation as an early step before cluster provisioning.

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

.github/workflows/ci.yaml

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 3 comments.

.github/workflows/ci.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Nikolai Emil Damm <ned@devantler.tech>

.github/workflows/ci.yaml

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

@main

- Pin devantler-tech/ksail/.github/actions/ksail-cluster from @main to @4cc958abae21913e32d6effbcc8c02bd1fe5a4f9 - Add environment: ci to the test job for secret protection

Signed-off-by: Nikolai Emil Damm <nikolaiemildamm@icloud.com>

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 3 comments.

Copilot · 2026-03-26T20:56:14Z

.github/workflows/ci.yaml

+          persist-credentials: false
+
+      - name: 🧪 System Test
+        uses: devantler-tech/ksail/.github/actions/ksail-cluster@4cc958abae21913e32d6effbcc8c02bd1fe5a4f9 # main


uses: references in this repo appear to be pinned to a commit SHA with an inline comment indicating the released version (e.g., # v1.9.7, # v1.22.5). Here the action is pinned to a SHA but the comment says # main, which is misleading because it looks like a moving ref. Consider updating the comment to the actual release/tag for that SHA (or removing the comment) to keep dependency provenance clear and consistent.

Suggested change

uses: devantler-tech/ksail/.github/actions/ksail-cluster@4cc958abae21913e32d6effbcc8c02bd1fe5a4f9 # main

uses: devantler-tech/ksail/.github/actions/ksail-cluster@4cc958abae21913e32d6effbcc8c02bd1fe5a4f9

Copilot · 2026-03-26T20:56:14Z

.github/workflows/ci.yaml

+    environment: ci
+    steps:
+      - name: 📑 Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: 🧪 System Test
+        uses: devantler-tech/ksail/.github/actions/ksail-cluster@4cc958abae21913e32d6effbcc8c02bd1fe5a4f9 # main
+        with:
+          distribution: Talos
+          provider: Docker
+          init: "false"
+          validate: "true"
+          sops-age-key: ${{ secrets.SOPS_AGE_KEY }}
+          hosts-file: ${{ vars.HOSTS_FILE }}
+          root-ca-cert-file: ${{ vars.ROOT_CA_CERT_FILE }}


This workflow runs on pull_request but depends on secrets.SOPS_AGE_KEY and environment vars (HOSTS_FILE, ROOT_CA_CERT_FILE). For PRs from forks, GitHub does not provide repository secrets/variables, so this job will likely fail (or run with empty inputs). If forked PRs are expected, gate the job to non-fork PRs or split out a secretless validation job that still runs for forks.

Copilot · 2026-03-26T20:56:14Z

.github/workflows/ci.yaml

+name: CI
+on:
+  pull_request:
+    branches: [main]
+


The PR description says this adds a .github/workflows/ci-gitops-test.yaml workflow calling the consolidated ci-gitops-test reusable workflow, but the actual change adds .github/workflows/ci.yaml and runs the ksail-cluster composite action directly. Either update the PR description to match the implemented approach, or adjust the workflow to call the intended reusable workflow so the change is traceable and consistent with the stated design.

devantler added 3 commits March 26, 2026 12:40

ci: test ksail-cluster action integration

9303a6a

ci: re-trigger CI with fixed ksail-cluster action

f8da89f

ci: re-trigger CI with updated validate workflow

fa09316

Copilot AI review requested due to automatic review settings March 26, 2026 12:25

github-project-automation bot added this to 🌊 Project Board Mar 26, 2026

github-project-automation bot moved this to 🫴 Ready in 🌊 Project Board Mar 26, 2026

github-actions bot approved these changes Mar 26, 2026

View reviewed changes

botantler bot enabled auto-merge March 26, 2026 12:25

github-project-automation bot moved this from 🫴 Ready to 🚀 In Finalization in 🌊 Project Board Mar 26, 2026

Copilot started reviewing on behalf of devantler March 26, 2026 12:26 View session

Copilot AI reviewed Mar 26, 2026

View reviewed changes

README.md Show resolved Hide resolved

Merge branch 'main' into ci/test-ksail-cluster-action

c0a0032

devantler changed the title ~~ci: verify validate workflow with KSail sourceDirectory fix~~ ci: add consolidated GitOps test workflow with validation Mar 26, 2026

ci: add consolidated GitOps test workflow with validation

fe3e26d

Calls the ci-gitops-test reusable workflow which now includes manifest validation as an early step before cluster provisioning.

Copilot AI review requested due to automatic review settings March 26, 2026 20:02

Copilot started reviewing on behalf of devantler March 26, 2026 20:03 View session

Copilot AI reviewed Mar 26, 2026

View reviewed changes

.github/workflows/ci.yaml Outdated Show resolved Hide resolved

github-advanced-security bot found potential problems Mar 26, 2026

View reviewed changes

.github/workflows/ci.yaml Fixed Show fixed Hide fixed

ci: rename ci-gitops-test to ci.yaml, scope to main PRs

8456a8e

github-advanced-security bot found potential problems Mar 26, 2026

View reviewed changes

.github/workflows/ci.yaml Fixed Show fixed Hide fixed

ci: call ksail-cluster action directly instead of reusable workflow

63beafe

Copilot AI review requested due to automatic review settings March 26, 2026 20:16

github-advanced-security bot found potential problems Mar 26, 2026

View reviewed changes

.github/workflows/ci.yaml Fixed Show fixed Hide fixed

.github/workflows/ci.yaml Fixed Show fixed Hide fixed

Copilot started reviewing on behalf of devantler March 26, 2026 20:16 View session

Copilot AI reviewed Mar 26, 2026

View reviewed changes

.github/workflows/ci.yaml Outdated Show resolved Hide resolved

.github/workflows/ci.yaml Outdated Show resolved Hide resolved

.github/workflows/ci.yaml Show resolved Hide resolved

Update .github/workflows/ci.yaml

ab86e12

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Nikolai Emil Damm <ned@devantler.tech>

Copilot AI review requested due to automatic review settings March 26, 2026 20:21

github-advanced-security bot found potential problems Mar 26, 2026

View reviewed changes

.github/workflows/ci.yaml Fixed Show fixed Hide fixed

Copilot started reviewing on behalf of devantler March 26, 2026 20:21 View session

Copilot AI reviewed Mar 26, 2026

View reviewed changes

ci: pin ksail-cluster action to SHA and add environment

25b95d9

- Pin devantler-tech/ksail/.github/actions/ksail-cluster from @main to @4cc958abae21913e32d6effbcc8c02bd1fe5a4f9 - Add environment: ci to the test job for secret protection

devantler had a problem deploying to ci March 26, 2026 20:52 — with GitHub Actions Failure

Rename GitOps test step to System Test

b3ebab8

Signed-off-by: Nikolai Emil Damm <nikolaiemildamm@icloud.com>

Copilot AI review requested due to automatic review settings March 26, 2026 20:54

devantler had a problem deploying to ci March 26, 2026 20:54 — with GitHub Actions Failure

Copilot started reviewing on behalf of devantler March 26, 2026 20:54 View session

Copilot AI reviewed Mar 26, 2026

View reviewed changes

devantler had a problem deploying to ci March 27, 2026 07:20 — with GitHub Actions Failure

	uses: devantler-tech/ksail/.github/actions/ksail-cluster@4cc958abae21913e32d6effbcc8c02bd1fe5a4f9 # main
	uses: devantler-tech/ksail/.github/actions/ksail-cluster@4cc958abae21913e32d6effbcc8c02bd1fe5a4f9

Conversation

devantler commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Purpose

Changes

Related

What gets tested

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

devantler commented Mar 26, 2026 •

edited

Loading