Bump the k8s group with 3 updates

.github/linters/ct.yaml

@@ -0,0 +1,7 @@
+# See https://github.com/helm/chart-testing#configuration
+remote: origin
+target-branch: main
+chart-dirs:
+  - .
+charts:
+  - chart

.github/workflows/test-go.yaml → .github/workflows/test-code.yaml

@@ -1,4 +1,4 @@
-name: Go
+name: Code
 on:
   push:
     branches:
@@ -30,7 +30,7 @@ jobs:
           path-to-profile: coverprofile.out
 
   lint:
-    name: Lint
+    name: Go Lint
     runs-on: ubuntu-latest
     steps:
 
@@ -44,6 +44,8 @@ jobs:
 
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v4
+        with:
+          skip-pkg-cache: true
 
   helm:
     name: Helm Checks
@@ -78,5 +80,11 @@ jobs:
           sed -i '/!\[Version\:/d' chart/README.md.old
           diff chart/README.md.old chart/README.md
 
+      - name: Set up chart-testing
+        uses: helm/chart-testing-action@v2.6.1
+
+      - name: Run chart-testing (lint)
+        run: ct lint --config .github/linters/ct.yaml
+
       - name: Template
         run: make helm-template

Makefile

@@ -41,31 +41,39 @@ HELM_DOCS ?= $(LOCALBIN)/helm-docs
 MOCKGEN ?= $(LOCALBIN)/mockgen
 SEMVER ?= $(LOCALBIN)/semver
 
+## Tool Versions
+GINKGO_VERSION ?= v2.17.1
+GOLANGCI_LINT_VERSION ?= v1.57.2
+GORELEASER_VERSION ?= v1.25.1
+HELM_DOCS_VERSION ?= v1.13.1
+MOCKGEN_VERSION ?= v0.4.0
+SEMVER_VERSION ?= v1.1.3
+
 ## Tool Installer
 .PHONY: ginkgo
 ginkgo: $(GINKGO) ## Download ginkgo locally if necessary.
 $(GINKGO): $(LOCALBIN)
-	test -s $(LOCALBIN)/ginkgo || GOBIN=$(LOCALBIN) go install github.com/onsi/ginkgo/v2/ginkgo
+	test -s $(LOCALBIN)/ginkgo || GOBIN=$(LOCALBIN) go install github.com/onsi/ginkgo/v2/ginkgo@$(GINKGO_VERSION)
 .PHONY: golangci-lint
 golangci-lint: $(GOLANGCI_LINT) ## Download golangci-lint locally if necessary.
 $(GOLANGCI_LINT): $(LOCALBIN)
-	test -s $(LOCALBIN)/golangci-lint || GOBIN=$(LOCALBIN) go install github.com/golangci/golangci-lint/cmd/golangci-lint
+	test -s $(LOCALBIN)/golangci-lint || GOBIN=$(LOCALBIN) go install github.com/golangci/golangci-lint/cmd/golangci-lint@$(GOLANGCI_LINT_VERSION)
 .PHONY: goreleaser
 goreleaser: $(GORELEASER) ## Download goreleaser locally if necessary.
 $(GORELEASER): $(LOCALBIN)
-	test -s $(LOCALBIN)/goreleaser || GOBIN=$(LOCALBIN) go install github.com/goreleaser/goreleaser
+	test -s $(LOCALBIN)/goreleaser || GOBIN=$(LOCALBIN) go install github.com/goreleaser/goreleaser@$(GORELEASER_VERSION)
 .PHONY: helm-docs
 helm-docs: $(HELM_DOCS) ## Download helm-docs locally if necessary.
 $(HELM_DOCS): $(LOCALBIN)
-	test -s $(LOCALBIN)/helm-docs || GOBIN=$(LOCALBIN) go install github.com/norwoodj/helm-docs/cmd/helm-docs
+	test -s $(LOCALBIN)/helm-docs || GOBIN=$(LOCALBIN) go install github.com/norwoodj/helm-docs/cmd/helm-docs@$(HELM_DOCS_VERSION)
 .PHONY: mockgen
 mockgen: $(MOCKGEN) ## Download mockgen locally if necessary.
 $(MOCKGEN): $(LOCALBIN)
-	test -s $(LOCALBIN)/mockgen || GOBIN=$(LOCALBIN) go install go.uber.org/mock/mockgen
+	test -s $(LOCALBIN)/mockgen || GOBIN=$(LOCALBIN) go install go.uber.org/mock/mockgen@$(MOCKGEN_VERSION)
 .PHONY: semver
 semver: $(SEMVER) ## Download semver locally if necessary.
 $(SEMVER): $(LOCALBIN)
-	test -s $(LOCALBIN)/semver || GOBIN=$(LOCALBIN) go install github.com/bakito/semver
+	test -s $(LOCALBIN)/semver || GOBIN=$(LOCALBIN) go install github.com/bakito/semver@$(SEMVER_VERSION)
 
 ## Update Tools
 .PHONY: update-toolbox-tools
@@ -77,7 +85,13 @@ update-toolbox-tools:
 		$(LOCALBIN)/helm-docs \
 		$(LOCALBIN)/mockgen \
 		$(LOCALBIN)/semver
-	toolbox makefile -f $(LOCALDIR)/Makefile
+	toolbox makefile -f $(LOCALDIR)/Makefile \
+		github.com/onsi/ginkgo/v2/ginkgo \
+		github.com/golangci/golangci-lint/cmd/golangci-lint \
+		github.com/goreleaser/goreleaser \
+		github.com/norwoodj/helm-docs/cmd/helm-docs \
+		go.uber.org/mock/mockgen@github.com/uber-go/mock \
+		github.com/bakito/semver
 ## toolbox - end
 
 build:

chart/Chart.yaml

@@ -10,7 +10,3 @@ name: sealed-secrets-web
 version: 3.1.4
 sources:
   - https://github.com/bakito/sealed-secrets-web
-#annotations:
-#  artifacthub.io/changes: |
-#    - kind: added
-#      description: ...

chart/values.yaml

@@ -35,13 +35,13 @@ image:
   # -- Additional command args
 
 # -- Secrets with credentials to pull images from a private registry. Registry secret names as an array.
-imagePullSecrets: [ ]
+imagePullSecrets: []
 
 # -- Additional volumeMounts to the image updater main container
-volumeMounts: [ ]
+volumeMounts: []
 
 # -- Additional volumes to the image updater pod
-volumes: [ ]
+volumes: []
 
 # -- String to partially override "argo-rollouts.fullname" template
 nameOverride: ""
@@ -67,7 +67,7 @@ service:
   # -- Service port
   port: 80
   # -- Service annotations
-  annotations: { }
+  annotations: {}
 
 ingress:
   # -- Enable ingress support
@@ -77,7 +77,7 @@ ingress:
   className: ""
 
   # -- Ingress annotations
-  annotations: { }
+  annotations: {}
   #   # -- Specifies number of requests accepted from a given IP each minute
   #   nginx.ingress.kubernetes.io/limit-rpm: "180"
   #   nginx.ingress.kubernetes.io/rewrite-target: /$2
@@ -95,14 +95,14 @@ ingress:
   defaultTls: false
 
   # -- Ingress tls
-  tls: [ ]
+  tls: []
   # - hosts:
   #   - example.internal
   #   - another-example.internal
   #   secretName: sealed-secrets-web-tls
 
 # -- Resource limits and requests for the pods.
-resources: { }
+resources: {}
 # limits:
 #   cpu: 100m
 #   memory: 128Mi
@@ -156,10 +156,10 @@ deployment:
   #   sealedSecretsControllerName: sealed-secrets
 
 # -- [Node selector]
-nodeSelector: { }
+nodeSelector: {}
 
 # -- [Tolerations] for use with node taints
-tolerations: [ ]
+tolerations: []
 
 # -- Assign custom [affinity] rules to the deployment
-affinity: { }
+affinity: {}