Add github actions to create downloadable manifest on release

Also reorganizes the `manifests` directory to have a different overlay for releases.

Author: sibucan

.github/workflows/build-container-image.yaml

@@ -19,8 +19,8 @@ jobs:
       fail-fast: false
       matrix:
         platform:
-        - 'linux/amd64'
-        - 'linux/arm64'
+          - 'linux/amd64'
+          - 'linux/arm64'
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/generate-manifests.yaml

@@ -0,0 +1,34 @@
+name: Release assets
+
+on:
+  release:
+    types:
+      - published
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: build
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: bash
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          persist-credentials: true
+
+      - name: Build manifests
+        run: hack/release-manifests.sh ${{ github.event.release.tag_name }}
+
+      - name: Release manifests
+        uses: softprops/action-gh-release@v2
+        with:
+          files: |
+            _output/install.yaml

.gitignore

@@ -2,3 +2,4 @@
 *.kubeconfig
 bin/*
 cover.out
+_output

hack/install-demo.sh

@@ -39,7 +39,7 @@ cluster_name="${1:-kind}"
 kind get kubeconfig --name "${cluster_name}" > "${kubeconfig_file}"
 
 # Deploy capargo
-kubectl --kubeconfig "${kubeconfig_file}" apply -k manifests/kustomize
+kubectl --kubeconfig "${kubeconfig_file}" apply -k manifests/overlays/local
 kubectl --kubeconfig "${kubeconfig_file}" rollout --namespace capargo status deployment capargo
 
 # Install vcluster binary

hack/release-manifests.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+set -eou pipefail
+
+OUTPUT_DIR="${OUTPUT_DIR:-_output}"
+IMAGE_VERSION=${1}
+
+mkdir -p "${OUTPUT_DIR}"
+
+
+SED="sed"
+# Requires gsed to be installed via brew if on MacOS
+if [[ $(uname -s | tr '[:upper:]' '[:lower:]') == "darwin" ]]; then
+  SED="gsed"
+fi
+
+# Create install manifest
+echo "# This is an auto-generated file. DO NOT EDIT." > "${OUTPUT_DIR}"/install.yaml
+kubectl kustomize manifests/overlays/default >> "${OUTPUT_DIR}"/install.yaml
+"${SED}" -i -e "s|image: superorbital/capargo:latest|image: superorbital/capargo:${IMAGE_VERSION}|g" "${OUTPUT_DIR}"/install.yaml

manifests/kustomize/clusterrole.yaml manifests/base/clusterrole.yaml

@@ -0,0 +1,18 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: capargo
+spec:
+  replicas: 1
+  selector: {}
+  template:
+    spec:
+      containers:
+      - name: capargo
+        resources:
+          limits:
+            cpu: 500m
+            memory: 1G
+      serviceAccount: capargo
+      securityContext:
+        runAsUser: 1001

manifests/kustomize/clusterrolebinding.yaml manifests/base/clusterrolebinding.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+labels:
+- includeSelectors: true
+  pairs:
+    app.kubernetes.io/name: capargo
+namespace: capargo
+resources:
+- namespace.yaml
+- deployment.yaml
+- clusterrole.yaml
+- clusterrolebinding.yaml
+- serviceaccount.yaml

manifests/base/deployment.yaml

@@ -0,0 +1,17 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: capargo
+spec:
+  selector: {}
+  template:
+    spec:
+      containers:
+      - name: capargo
+        args:
+          - --argo-namespace=argocd
+        image: superorbital/capargo:latest
+        resources:
+          limits:
+            cpu: 500m
+            memory: 1G

manifests/base/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ../../base
+patches:
+- path: deployment-default.yaml

manifests/kustomize/namespace.yaml manifests/base/namespace.yaml

@@ -3,7 +3,6 @@ kind: Deployment
 metadata:
   name: capargo
 spec:
-  replicas: 1
   selector: {}
   template:
     spec:
@@ -17,8 +16,5 @@ spec:
         imagePullPolicy: Always
         resources:
           limits:
-            cpu: 500m
-            memory: 1G
-      serviceAccount: capargo
-      securityContext:
-        runAsUser: 1001
+            cpu: 250m
+            memory: 500M

manifests/kustomize/serviceaccount.yaml manifests/base/serviceaccount.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ../../base
+patches:
+- path: deployment-local.yaml