mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-20 19:10:34 +00:00
Daniel FarrellandStephen Kitt
e16a2c36df
Set the GitHub Actions token permission to null in most workflows. This results in: GITHUB_TOKEN Permissions Metadata: read The default permissions, used without the null override, are either GITHUB_TOKEN Permissions Actions: write Checks: write Contents: write Deployments: write Discussions: write Issues: write Metadata: read Packages: write Pages: write PullRequests: write RepositoryProjects: write SecurityEvents: write Statuses: write or GITHUB_TOKEN Permissions Actions: read Checks: read Contents: read Deployments: read Discussions: read Issues: read Metadata: read Packages: read Pages: read PullRequests: read RepositoryProjects: read SecurityEvents: read Statuses: read Jobs triggered by PRs get read permissions, other jobs get write. One job requires non-null permissions to function. The dependent issues GHA needs PR/issues write permissions to add/remove `dependent` labels. It needs status write permission to block/unblock PRs when dependencies are missing/met. Fails with HttpError otherwise. Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
submariner-charts
Please see the Helm docs on Submariner's website.
Development workflow
Prerequisites
Create a fork and checkout
Create a fork of the original repository, clone it locally and checkout a new branch from master.
Example:
git clone https://github.com/myuser/submariner-charts.git
cd submariner-charts
git checkout -b new-feature
Now you can modify the Helm charts according to your needs.
Use the modified charts
Locally-modified charts can be installed using helm install,
referring to the local path; for example:
helm install submariner-k8s-broker ./submariner-k8s-broker ...
In the base directory of this repository, a local deployment using the local charts can be obtained by running the following command:
make deploy
This will start two kind clusters and deploy Submariner using the Broker and Operator charts.
make e2e
will run the end-to-end test suite used to validate that Submariner is working correctly.