mirror of
https://github.com/RWejlgaard/pez-infra.git
synced 2026-05-06 04:14:43 +00:00
Rasmus "Pez" Wejlgaard
88377f3e93
The lint-docker-compose workflow was swallowing all validation errors with || true, meaning broken compose files would never fail the check. - Remove || true and let validation failures propagate - Add a pre-step that creates empty stubs for referenced env_file entries (e.g. bitwarden/settings.env) so docker compose config can validate structure without needing real secrets - Track per-file pass/fail and exit non-zero if any file fails Closes PESO-130
45 lines
1.6 KiB
YAML
45 lines
1.6 KiB
YAML
name: Lint Docker Compose
|
|
|
|
on:
|
|
pull_request:
|
|
|
|
jobs:
|
|
compose-lint:
|
|
name: docker compose config
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Stub missing env files referenced by Compose
|
|
run: |
|
|
shopt -s globstar nullglob
|
|
for f in ansible/services/**/docker-compose.yml ansible/services/**/docker-compose.yaml ansible/services/**/compose.yml ansible/services/**/compose.yaml; do
|
|
dir=$(dirname "$f")
|
|
# Create empty stubs for any env_file entries that don't exist
|
|
grep -oP 'env_file:\s*\K.*|^\s*-\s*\K\S+\.env' "$f" 2>/dev/null | while read -r envfile; do
|
|
envfile=$(echo "$envfile" | sed 's/^["'\'']*//;s/["'\'']*$//')
|
|
if [ -n "$envfile" ] && [ ! -f "$dir/$envfile" ]; then
|
|
echo "Creating stub: $dir/$envfile"
|
|
touch "$dir/$envfile"
|
|
fi
|
|
done
|
|
done
|
|
|
|
- name: Validate Compose files
|
|
run: |
|
|
failed=0
|
|
found=0
|
|
shopt -s globstar nullglob
|
|
for f in ansible/services/**/docker-compose.yml ansible/services/**/docker-compose.yaml ansible/services/**/compose.yml ansible/services/**/compose.yaml; do
|
|
echo "::group::Validating $f"
|
|
if ! docker compose -f "$f" config --quiet 2>&1; then
|
|
echo "::error file=$f::Compose validation failed"
|
|
failed=1
|
|
fi
|
|
echo "::endgroup::"
|
|
found=1
|
|
done
|
|
if [ "$found" -eq 0 ]; then
|
|
echo "No Compose files found — skipping."
|
|
fi
|
|
exit $failed
|