Automating with Helm in CI/CD

name: Deploy with Helm
on:
  push:
    branches: [ main ]

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Install Helm
        run: |
          curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3
          chmod 700 get_helm.sh
          ./get_helm.sh

      - name: Deploy to Kubernetes
        run: helm upgrade --install my-app ./helm-chart

apiVersion: v1
kind: ServiceAccount
metadata:
  name: helm-deployer
  namespace: production
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: helm-deployer-role
  namespace: production
rules:
- apiGroups: [""]
  resources: ["pods"]
  verbs: ["get", "list"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: helm-deployer-binding
  namespace: production
subjects:
- kind: ServiceAccount
  name: helm-deployer
  apiGroup: ""
roleRef:
  kind: Role
  name: helm-deployer-role
  apiGroup: ""

helm lint my-chart

helm install my-release ./my-chart --dry-run --debug

helm install my-app ./my-chart --values config.yaml --namespace production --wait

helm upgrade my-app ./my-chart --set image.tag=v2.0 --set service.port=8080

helm test my-release

helm test my-release --timeout 300s

helm rollback my-app

helm rollback my-app 3

helm package myapp/
helm repo add artifact-hub https://artifacthub.io
helm push myapp-1.0.0.tgz artifact-hub

image:
  repository: my-app
  tag: "${CI_COMMIT_TAG}"
  pullPolicy: IfNotPresent

service:
  port: 8080
  type: ClusterIP

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: my-helm-app
spec:
  project: default
  source:
    repoURL: https://github.com/myorg/my-repo.git
    targetRevision: HEAD
    path: helm-charts/my-app
    helm:
      valueFiles:
        - values-production.yaml
  destination:
    server: https://kubernetes.default.svc
    namespace: production
  syncPolicy:
    automated:
      prune: true
      selfHeal: true

apiVersion: apps/v1
kind: Deployment
metadata:
  name: app-blue
spec:
  replicas: 3
  selector:
    matchLabels:
      app: myapp
      version: blue
  template:
    metadata:
      labels:
        app: myapp
        version: blue
    spec:
      containers:
      - name: app
        image: myapp:v1.2.0
        ports:
        - containerPort: 8080

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: app-green
spec:
  replicas: 0
  selector:
    matchLabels:
      app: myapp
      version: green
  template:
    metadata:
      labels:
        app: myapp
        version: green
    spec:
      containers:
      - name: app
        image: myapp:v1.3.0
        ports:
        - containerPort: 8080

---
apiVersion: v1
kind: Service
metadata:
  name: app-service
spec:
  selector:
    app: myapp
    version: blue
  ports:
  - port: 80
    targetPort: 8080