chore(deps): update docker.io/library/alpine docker tag to v3.21.1

.drone.yml

@@ -0,0 +1,667 @@
+---
+kind: pipeline
+type: kubernetes
+name: linter
+
+clone:
+  disable: true
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: markdown lint
+  commands:
+  - markdownlint *.md
+  image: git.cryptic.systems/volker.raschek/markdownlint:0.43.0
+  resources:
+    limits:
+      cpu: 150
+      memory: 150M
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  resources:
+    limits:
+      cpu: 150
+      memory: 150M
+  when:
+    status:
+    - changed
+    - failure
+
+trigger:
+  event:
+    exclude:
+    - tag
+
+---
+kind: pipeline
+type: docker
+name: dry-run-amd64
+
+clone:
+  disable: true
+
+depends_on:
+- linter
+
+platform:
+  os: linux
+  arch: amd64
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: build
+  image: docker.io/plugins/docker:20.18.6
+  settings:
+    auto_tag: false
+    dockerfile: Dockerfile
+    dry_run: true
+    force_tag: true
+    no_cache: true
+    purge: true
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
+    tags: latest-amd64
+    username:
+      from_secret: git_cryptic_systems_container_registry_user
+    password:
+      from_secret: git_cryptic_systems_container_registry_password
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  when:
+    status:
+    - changed
+    - failure
+
+trigger:
+  branch:
+    exclude:
+    - master
+  event:
+  - pull_request
+  - push
+  repo:
+  - volker.raschek/helm-docker
+
+---
+kind: pipeline
+type: docker
+name: dry-run-arm64-v8
+
+clone:
+  disable: true
+
+depends_on:
+- linter
+
+platform:
+  os: linux
+  arch: arm64
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: build
+  image: docker.io/plugins/docker:20.18.6
+  settings:
+    auto_tag: false
+    dockerfile: Dockerfile
+    dry_run: true
+    force_tag: true
+    no_cache: true
+    purge: true
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
+    tags: latest-arm64-v8
+    username:
+      from_secret: git_cryptic_systems_container_registry_user
+    password:
+      from_secret: git_cryptic_systems_container_registry_password
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  when:
+    status:
+    - changed
+    - failure
+
+trigger:
+  branch:
+    exclude:
+    - master
+  event:
+  - pull_request
+  - push
+  repo:
+  - volker.raschek/helm-docker
+
+---
+kind: pipeline
+type: docker
+name: latest-amd64
+
+clone:
+  disable: true
+
+depends_on:
+- linter
+
+platform:
+  os: linux
+  arch: amd64
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: build
+  image: docker.io/plugins/docker:20.18.6
+  settings:
+    auto_tag: false
+    dockerfile: Dockerfile
+    force_tag: true
+    no_cache: true
+    purge: true
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
+    tags: latest-amd64
+    username:
+      from_secret: git_cryptic_systems_container_registry_user
+    password:
+      from_secret: git_cryptic_systems_container_registry_password
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  when:
+    status:
+    - changed
+    - failure
+
+trigger:
+  branch:
+  - master
+  event:
+  - cron
+  - push
+  repo:
+  - volker.raschek/helm-docker
+
+---
+kind: pipeline
+type: docker
+name: latest-arm64-v8
+
+clone:
+  disable: true
+
+depends_on:
+- linter
+
+platform:
+  os: linux
+  arch: arm64
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: build
+  image: docker.io/plugins/docker:20.18.6
+  settings:
+    auto_tag: false
+    dockerfile: Dockerfile
+    force_tag: true
+    no_cache: true
+    purge: true
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
+    tags: latest-arm64-v8
+    username:
+      from_secret: git_cryptic_systems_container_registry_user
+    password:
+      from_secret: git_cryptic_systems_container_registry_password
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  when:
+    status:
+    - changed
+    - failure
+
+trigger:
+  branch:
+  - master
+  event:
+  - cron
+  - push
+  repo:
+  - volker.raschek/helm-docker
+
+---
+kind: pipeline
+type: kubernetes
+name: latest-manifest
+
+clone:
+  disable: true
+
+depends_on:
+- latest-amd64
+- latest-arm64-v8
+
+# docker.io/plugins/manifest only for amd64 architectures available
+node_selector:
+  kubernetes.io/os: linux
+  kubernetes.io/arch: amd64
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: build-manifest
+  image: docker.io/plugins/manifest:1.4.0
+  settings:
+    auto_tag: false
+    ignore_missing: true
+    spec: manifest.tmpl
+    username:
+      from_secret: git_cryptic_systems_container_registry_user
+    password:
+      from_secret: git_cryptic_systems_container_registry_password
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  resources:
+    limits:
+      cpu: 150
+      memory: 150M
+  when:
+    status:
+    - changed
+    - failure
+
+trigger:
+  branch:
+  - master
+  event:
+  - cron
+  - push
+  repo:
+  - volker.raschek/helm-docker
+
+---
+kind: pipeline
+type: kubernetes
+name: latest-sync
+
+clone:
+  disable: true
+
+depends_on:
+- latest-manifest
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: latest-sync
+  commands:
+  - skopeo sync --all --src=docker --src-creds=$SRC_CRED_USERNAME:$SRC_CRED_PASSWORD --dest=docker --dest-creds=$DEST_CRED_USERNAME:$DEST_CRED_PASSWORD git.cryptic.systems/volker.raschek/helm docker.io/volkerraschek
+  environment:
+    SRC_CRED_USERNAME:
+      from_secret: git_cryptic_systems_container_registry_user
+    SRC_CRED_PASSWORD:
+      from_secret: git_cryptic_systems_container_registry_password
+    DEST_CRED_USERNAME:
+      from_secret: container_image_registry_user
+    DEST_CRED_PASSWORD:
+      from_secret: container_image_registry_password
+  image: quay.io/skopeo/stable:v1.17.0
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  resources:
+    limits:
+      cpu: 150
+      memory: 150M
+  when:
+    status:
+    - changed
+    - failure
+
+trigger:
+  branch:
+  - master
+  event:
+  - cron
+  - push
+  repo:
+  - volker.raschek/helm-docker
+
+---
+kind: pipeline
+type: docker
+name: tagged-amd64
+
+clone:
+  disable: true
+
+platform:
+  os: linux
+  arch: amd64
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: build
+  image: docker.io/plugins/docker:20.18.6
+  settings:
+    auto_tag: true
+    auto_tag_suffix: amd64
+    dockerfile: Dockerfile
+    force_tag: true
+    no_cache: true
+    purge: true
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
+    username:
+      from_secret: git_cryptic_systems_container_registry_user
+    password:
+      from_secret: git_cryptic_systems_container_registry_password
+    build_args:
+    - HELM_VERSION=${DRONE_TAG}
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  when:
+    status:
+    - changed
+    - failure
+
+trigger:
+  event:
+  - tag
+  repo:
+  - volker.raschek/helm-docker
+
+---
+kind: pipeline
+type: docker
+name: tagged-arm64-v8
+
+clone:
+  disable: true
+
+platform:
+  os: linux
+  arch: arm64
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: build
+  image: docker.io/plugins/docker:20.18.6
+  settings:
+    auto_tag: true
+    auto_tag_suffix: arm64-v8
+    dockerfile: Dockerfile
+    force_tag: true
+    no_cache: true
+    purge: true
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
+    username:
+      from_secret: git_cryptic_systems_container_registry_user
+    password:
+      from_secret: git_cryptic_systems_container_registry_password
+    build_args:
+    - HELM_VERSION=${DRONE_TAG}
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  when:
+    status:
+    - changed
+    - failure
+
+trigger:
+  event:
+  - tag
+  repo:
+  - volker.raschek/helm-docker
+
+---
+kind: pipeline
+type: kubernetes
+name: tagged-manifest
+
+clone:
+  disable: true
+
+depends_on:
+- tagged-amd64
+- tagged-arm64-v8
+
+# docker.io/plugins/manifest only for amd64 architectures available
+node_selector:
+  kubernetes.io/os: linux
+  kubernetes.io/arch: amd64
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: build-manifest
+  image: docker.io/plugins/manifest:1.4.0
+  settings:
+    auto_tag: true
+    ignore_missing: true
+    spec: manifest.tmpl
+    username:
+      from_secret: git_cryptic_systems_container_registry_user
+    password:
+      from_secret: git_cryptic_systems_container_registry_password
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  resources:
+    limits:
+      cpu: 150
+      memory: 150M
+  when:
+    status:
+    - changed
+    - failure
+
+trigger:
+  event:
+  - tag
+  repo:
+  - volker.raschek/helm-docker
+
+---
+kind: pipeline
+type: kubernetes
+name: tagged-sync
+
+clone:
+  disable: true
+
+depends_on:
+- tagged-manifest
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: tagged-sync
+  commands:
+  - skopeo sync --all --src=docker --src-creds=$SRC_CRED_USERNAME:$SRC_CRED_PASSWORD --dest=docker --dest-creds=$DEST_CRED_USERNAME:$DEST_CRED_PASSWORD git.cryptic.systems/volker.raschek/helm docker.io/volkerraschek
+  environment:
+    SRC_CRED_USERNAME:
+      from_secret: git_cryptic_systems_container_registry_user
+    SRC_CRED_PASSWORD:
+      from_secret: git_cryptic_systems_container_registry_password
+    DEST_CRED_USERNAME:
+      from_secret: container_image_registry_user
+    DEST_CRED_PASSWORD:
+      from_secret: container_image_registry_password
+  image: quay.io/skopeo/stable:v1.17.0
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  resources:
+    limits:
+      cpu: 150
+      memory: 150M
+  when:
+    status:
+    - changed
+    - failure
+
+trigger:
+  event:
+  - tag
+  repo:
+  - volker.raschek/helm-docker

.gitea/workflows/auto-release.yaml

@@ -1,71 +0,0 @@
-name: Auto release
-
-on:
-  push:
-    branches: [ "master" ]
-    paths:
-    - Makefile
-
-env:
-  GIT_EMAIL: noreply@cryptic.systems
-  GIT_USER: CSRBot
-
-jobs:
-  tag_on_change:
-    permissions:
-      contents: write
-
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5.0.0
-        with:
-          fetch-depth: 0
-
-      - name: Check if HELM_VERSION line changed
-        id: check_change
-        run: |
-          echo "changed=false" >> $GITHUB_OUTPUT
-
-          for file in Makefile; do
-            if git diff HEAD~1 HEAD -- "${file}" | grep --quiet '^[+-]HELM_VERSION'; then
-              echo "HELM_VERSION line changed."
-              echo "changed=true" >> $GITHUB_OUTPUT
-              break
-            fi
-          done
-
-      - name: Stop if no change detected
-        if: steps.check_change.outputs.changed == 'false'
-        run: echo "No HELM_VERSION change. Exiting..."
-
-      - name: Create and push new tag
-        id: create_tag
-        if: steps.check_change.outputs.changed == 'true'
-        run: |
-          defined_tag="$(grep --only-matching --perl-regexp 'HELM_VERSION\?=v?[\d]*(\.[\d]*){0,2}' Makefile | cut --delimiter='=' --fields=2)"
-
-          echo "defined_tag=${defined_tag}" >> $GITHUB_OUTPUT
-          echo "New tag: ${defined_tag}"
-
-          git config --local user.name "${GIT_USER}"
-          git config --local user.email "${GIT_EMAIL}"
-          git tag -a "${defined_tag}" -m "${defined_tag}"
-          git push origin "${defined_tag}"
-
-      - name: Trigger "Push tagged images" workflow
-        uses: actions/github-script@v8.0.0
-        with:
-          script: |
-            const workflowFileName = 'release.yaml';
-            const defaultBranch = context.payload.repository.default_branch;
-            const definedTag = '${{ steps.create_tag.outputs.defined_tag }}';
-
-            await github.rest.actions.createWorkflowDispatch({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                workflow_id: workflowFileName,
-                ref: defaultBranch,
-                inputs: {
-                  tag: definedTag
-                }
-            });

.gitea/workflows/build.yaml

@@ -1,49 +0,0 @@
-name: Build
-
-on:
-  pull_request:
-    types:
-    - opened
-    - reopened
-    - synchronize
-  push:
-    branches:
-    - master
-  workflow_dispatch: {}
-
-jobs:
-  build-arm64:
-    runs-on: ubuntu-latest-arm64
-    steps:
-      - uses: actions/checkout@v5.0.0
-      - uses: docker/setup-qemu-action@v3.6.0
-      - uses: docker/setup-buildx-action@v3.11.1
-
-      - name: Build image
-        run: |
-          TAG=latest
-
-          docker buildx build \
-            --platform linux/arm64 \
-            --file Dockerfile \
-            --provenance false \
-            --tag git.cryptic.systems/volker.raschek/helm:${TAG}-arm64 \
-            .
-
-  build-amd64:
-    runs-on: ubuntu-latest-amd64
-    steps:
-      - uses: actions/checkout@v5.0.0
-      - uses: docker/setup-qemu-action@v3.6.0
-      - uses: docker/setup-buildx-action@v3.11.1
-
-      - name: Build image
-        run: |
-          TAG=latest
-
-          docker buildx build \
-            --platform linux/amd64 \
-            --file Dockerfile \
-            --provenance false \
-            --tag git.cryptic.systems/volker.raschek/helm:${TAG}-amd64 \
-            .

.gitea/workflows/markdown-linters.yaml

@@ -1,21 +0,0 @@
-name: 'Lint Markdown files'
-
-on:
-  pull_request:
-    types:
-    - opened
-    - reopened
-    - synchronize
-  push:
-    branches:
-    - master
-  workflow_dispatch: {}
-
-jobs:
-  markdown-lint:
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v5.0.0
-    - uses: DavidAnson/markdownlint-cli2-action@v20.0.0
-      with:
-        globs: '**/*.md'

.gitea/workflows/release.yaml

@@ -1,155 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-    - "**"
-  workflow_dispatch:
-    inputs:
-      tag:
-        description: "Tag which should be released"
-        type: string
-        required: true
-
-jobs:
-  push-arm64:
-    runs-on: ubuntu-latest-arm64
-    steps:
-      - id: version_extraction
-        name: Extract git tag
-        run: |
-          VERSION="${{ inputs.tag || github.ref_name }}"
-          VERSION="${VERSION#refs/*/}"
-
-          echo "Version (raw):      ${VERSION}"
-          echo "Version (cleaned):  ${VERSION/v/}"
-
-          echo "version_raw=${VERSION}" >> $GITHUB_OUTPUT
-          echo "version_cleaned=${VERSION/v/}" >> $GITHUB_OUTPUT
-
-      - uses: actions/checkout@v5.0.0
-        with:
-          fetch-tags: true
-          ref: "${{ steps.version_extraction.outputs.version_raw }}"
-
-      - uses: docker/setup-qemu-action@v3.6.0
-      - uses: docker/setup-buildx-action@v3.11.1
-
-      - uses: docker/login-action@v3.6.0
-        with:
-          registry: git.cryptic.systems
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
-
-      - name: Build and push image
-        run: |
-          docker buildx build \
-            --build-arg HELM_VERSION=${{ github.ref_name }} \
-            --file Dockerfile \
-            --platform linux/arm64 \
-            --provenance false \
-            --push \
-            --tag git.cryptic.systems/volker.raschek/helm:${{ steps.version_extraction.outputs.version_cleaned }}-arm64 \
-            .
-
-  push-amd64:
-    runs-on: ubuntu-latest-amd64
-    steps:
-      - id: version_extraction
-        name: Extract git tag
-        run: |
-          VERSION="${{ inputs.tag || github.ref_name }}"
-          VERSION="${VERSION#refs/*/}"
-
-          echo "Version (raw):      ${VERSION}"
-          echo "Version (cleaned):  ${VERSION/v/}"
-
-          echo "version_raw=${VERSION}" >> $GITHUB_OUTPUT
-          echo "version_cleaned=${VERSION/v/}" >> $GITHUB_OUTPUT
-
-      - uses: actions/checkout@v5.0.0
-        with:
-          fetch-tags: true
-          ref: "${{ steps.version_extraction.outputs.version_raw }}"
-
-      - uses: docker/setup-qemu-action@v3.6.0
-      - uses: docker/setup-buildx-action@v3.11.1
-
-      - uses: docker/login-action@v3.6.0
-        with:
-          registry: git.cryptic.systems
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
-
-      - name: Build and push image
-        run: |
-          docker buildx build \
-            --build-arg HELM_VERSION=${{ github.ref_name }} \
-            --file Dockerfile \
-            --platform linux/amd64 \
-            --provenance false \
-            --push \
-            --tag git.cryptic.systems/volker.raschek/helm:${{ steps.version_extraction.outputs.version_cleaned }}-amd64 \
-            .
-
-  push-manifest:
-    runs-on: ubuntu-latest
-    needs:
-    - push-arm64
-    - push-amd64
-    steps:
-      - id: version_extraction
-        name: Extract git tag
-        run: |
-          VERSION="${{ inputs.tag || github.ref_name }}"
-          VERSION="${VERSION#refs/*/}"
-
-          echo "Version (raw):      ${VERSION}"
-          echo "Version (cleaned):  ${VERSION/v/}"
-
-          echo "version_raw=${VERSION}" >> $GITHUB_OUTPUT
-          echo "version_cleaned=${VERSION/v/}" >> $GITHUB_OUTPUT
-
-      - uses: docker/login-action@v3.6.0
-        with:
-          registry: git.cryptic.systems
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
-
-      - name: Create and push manifest
-        run: |
-          docker manifest create git.cryptic.systems/volker.raschek/helm:${{ steps.version_extraction.outputs.version_cleaned }} \
-            --amend git.cryptic.systems/volker.raschek/helm:${{ steps.version_extraction.outputs.version_cleaned }}-amd64 \
-            --amend git.cryptic.systems/volker.raschek/helm:${{ steps.version_extraction.outputs.version_cleaned }}-arm64
-
-          docker manifest push git.cryptic.systems/volker.raschek/helm:${{ steps.version_extraction.outputs.version_cleaned }}
-
-  sync-to-hub-docker-io:
-    needs:
-    - push-manifest
-    runs-on: ubuntu-latest
-    steps:
-      - id: version_extraction
-        name: Extract git tag
-        run: |
-          VERSION="${{ inputs.tag || github.ref_name }}"
-          VERSION="${VERSION#refs/*/}"
-
-          echo "Version (raw):      ${VERSION}"
-          echo "Version (cleaned):  ${VERSION/v/}"
-
-          echo "version_raw=${VERSION}" >> $GITHUB_OUTPUT
-          echo "version_cleaned=${VERSION/v/}" >> $GITHUB_OUTPUT
-
-      - name: Copy images to docker.io
-        run: |
-          apt-get update --yes
-          apt-get install --yes skopeo
-          skopeo copy \
-            --all \
-            --dest-password ${{ secrets.DOCKER_IO_PASSWORD }} \
-            --dest-username ${{ secrets.DOCKER_IO_USERNAME }} \
-            --src-password ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }} \
-            --src-username volker.raschek \
-              docker://git.cryptic.systems/volker.raschek/helm:${{ steps.version_extraction.outputs.version_cleaned }} \
-              docker://docker.io/volkerraschek/helm:${{ steps.version_extraction.outputs.version_cleaned }}

.gitea/workflows/update-docker-hub-description.yaml

@@ -1,22 +0,0 @@
-name: Update Docker Hub Description
-
-on:
-  push:
-    branches:
-    - master
-    paths:
-    - README.md
-  workflow_dispatch: {}
-
-jobs:
-  update-description-on-hub-docker-io:
-    runs-on:
-    - ubuntu-latest
-    steps:
-    - uses: actions/checkout@v5.0.0
-    - uses: peter-evans/dockerhub-description@v5.0.0
-      with:
-        username: ${{ secrets.DOCKER_IO_USERNAME }}
-        password: ${{ secrets.DOCKER_IO_PASSWORD }}
-        repository: volkerraschek/helm
-        readme-filepath: README.md

.markdownlint.yaml

@@ -45,17 +45,19 @@ MD012:
 # MD013/line-length - Line length
 MD013:
   # Number of characters
-  line_length: 120
+  line_length: 80
   # Number of characters for headings
-  heading_line_length: 120
+  heading_line_length: 80
   # Number of characters for code blocks
-  code_block_line_length: 120
+  code_block_line_length: 80
   # Include code blocks
   code_blocks: false
   # Include tables
   tables: false
   # Include headings
   headings: true
+  # Include headings
+  headers: true
   # Strict length checking
   strict: false
   # Stern length checking
@@ -68,6 +70,11 @@ MD022:
   # Blank lines below heading
   lines_below: 1
 
+# MD024/no-duplicate-heading/no-duplicate-header - Multiple headings with the same content
+MD024:
+  # Only check sibling headings
+  allow_different_nesting: true
+
 # MD025/single-title/single-h1 - Multiple top-level headings in the same document
 MD025:
   # Heading level
@@ -121,7 +128,8 @@ MD041:
 # MD044/proper-names - Proper names should have the correct capitalization
 MD044:
   # List of proper names
-  names: []
+  names:
+  - helm
   # Include code blocks
   code_blocks: false
 
@@ -133,4 +141,4 @@ MD046:
 # MD048/code-fence-style - Code fence style
 MD048:
   # Code fence syle
-  style: "backtick"
+  style: "backtick"

Dockerfile

@@ -1,4 +1,4 @@
-FROM docker.io/library/alpine:3.22.2
+FROM docker.io/library/alpine:3.21.1
 
 ARG HELM_VERSION
 

Makefile

@@ -1,6 +1,6 @@
 # HELM_VERSION
-# Only required to install a specify version
+# Only required to install a specifiy version
-HELM_VERSION?=v3.19.0 # renovate: datasource=github-releases depName=helm/helm
+HELM_VERSION?=v3.16.4 # renovate: datasource=github-releases depName=helm/helm
 
 # CONTAINER_RUNTIME
 # The CONTAINER_RUNTIME variable will be used to specified the path to a
@@ -9,13 +9,14 @@ CONTAINER_RUNTIME?=$(shell which podman)
 
 # HELM_IMAGE_REGISTRY_NAME
 # Defines the name of the new container to be built using several variables.
-HELM_IMAGE_REGISTRY_NAME?=git.cryptic.systems
+HELM_IMAGE_REGISTRY_NAME:=git.cryptic.systems
-HELM_IMAGE_REGISTRY_USER?=volker.raschek
+HELM_IMAGE_REGISTRY_USER:=volker.raschek
 
 HELM_IMAGE_NAMESPACE?=${HELM_IMAGE_REGISTRY_USER}
 HELM_IMAGE_NAME:=helm
 HELM_IMAGE_VERSION?=latest
 HELM_IMAGE_FULLY_QUALIFIED=${HELM_IMAGE_REGISTRY_NAME}/${HELM_IMAGE_NAMESPACE}/${HELM_IMAGE_NAME}:${HELM_IMAGE_VERSION}
+HELM_IMAGE_UNQUALIFIED=${HELM_IMAGE_NAMESPACE}/${HELM_IMAGE_NAME}:${HELM_IMAGE_VERSION}
 
 # BUILD CONTAINER IMAGE
 # ==============================================================================
@@ -27,13 +28,15 @@ container-image/build:
 		--no-cache \
 		--pull \
 		--tag ${HELM_IMAGE_FULLY_QUALIFIED} \
+		--tag ${HELM_IMAGE_UNQUALIFIED} \
 		.
 
 # DELETE CONTAINER IMAGE
 # ==============================================================================
 PHONY:=container-image/delete
 container-image/delete:
-	- ${CONTAINER_RUNTIME} image rm ${HELM_IMAGE_FULLY_QUALIFIED}
+	- ${CONTAINER_RUNTIME} image rm ${HELM_IMAGE_FULLY_QUALIFIED} ${HELM_IMAGE_UNQUALIFIED}
+	- ${CONTAINER_RUNTIME} image rm ${BASE_IMAGE_FULL}
 
 # PUSH CONTAINER IMAGE
 # ==============================================================================

README.md

@@ -1,17 +1,64 @@
-# helm
+# helm-docker
 
+[![Build Status](https://drone.cryptic.systems/api/badges/volker.raschek/helm-docker/status.svg)](https://drone.cryptic.systems/volker.raschek/helm-docker)
 [![Docker Pulls](https://img.shields.io/docker/pulls/volkerraschek/helm)](https://hub.docker.com/r/volkerraschek/helm)
 
-This project contains all sources to build the container image `git.cryptic.systems/volker.raschek/helm`. The primary
+This project contains all sources to build the container image
-goal of this project is to package the binary `helm` as container image and provide the functionally for CI/CD workflows.
+`docker.io/volkerraschek/helm`. The primary goal of this project is to package
-The source code of the binary can be found in the upstream project of [helm](github.com/helm/helm).
+the binary `helm` as container image to provide the functionally for CI/CD
+workflows. The source code of the binary can be found in the upstream project of
+[helm](github.com/helm/helm).
 
-```bash
+## drone
-IMAGE_VERSION=3.19.0
+
-docker run \
+Here is an example to lint, package and deploy a chart to chartmuseum via
-  --rm \
+`docker.io/volkerraschek/helm`.
-  --volume "$(pwd):$(pwd)" \
+
-  --workdir "$(pwd)" \
+```yaml
-    "git.cryptic.systems/volker.raschek/helm:${IMAGE_VERSION}" \
+kind: pipeline
-      version
+type: kubernetes
+name: linter
+
+platform:
+  os: linux
+  arch: amd64
+
+steps:
+- name: helm lint
+  commands:
+  - helm lint
+  image: docker.io/volkerraschek/helm:latest
+  resources:
+    limits:
+      cpu: 50
+      memory: 50M
+
+---
+kind: pipeline
+type: kubernetes
+name: release
+
+platform:
+  os: linux
+
+steps:
+- name: release-helm-chart
+  commands:
+  - helm plugin install https://github.com/chartmuseum/helm-push.git
+  - helm repo add myrepo https://charts.example.com/myrepo
+  - helm package --version ${DRONE_TAG} .
+  - helm cm-push ${DRONE_REPO_NAME}-${DRONE_TAG}.tgz myrepo
+  environment:
+    HELM_REPO_PASSWORD:
+      from_secret: helm_repo_password
+    HELM_REPO_USERNAME:
+      from_secret: helm_repo_username
+  image: docker.io/volkerraschek/helm:latest
+  resources:
+    limits:
+      cpu: 50
+      memory: 50M
+trigger:
+  event:
+  - tag
 ```

manifest.tmpl

@@ -0,0 +1,20 @@
+image: git.cryptic.systems/volker.raschek/helm:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}
+{{#if build.tags}}
+tags:
+{{#each build.tags}}
+  - {{this}}
+{{/each}}
+  - "latest"
+{{/if}}
+manifests:
+  -
+    image: git.cryptic.systems/volker.raschek/helm:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-amd64
+    platform:
+      architecture: amd64
+      os: linux
+  -
+    image: git.cryptic.systems/volker.raschek/helm:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-arm64-v8
+    platform:
+      architecture: arm64
+      os: linux
+      variant: v8

renovate.json

@@ -1,36 +1,38 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "customManagers": [
+  "assignees": [ "volker.raschek" ],
-    {
+  "labels": [ "renovate" ],
-      "customType": "regex",
-      "fileMatch": [
-        "^README\\.md$"
-      ],
-      "matchStrings": [
-        "IMAGE_VERSION=(?<currentValue>.*)"
-      ],
-      "datasourceTemplate": "github-releases",
-      "depNameTemplate": "helm/helm",
-      "versioningTemplate": "semver"
-    }
-  ],
-  "extends": [
-    "local>volker.raschek/renovate-config:default#master",
-    "local>volker.raschek/renovate-config:container#master",
-    "local>volker.raschek/renovate-config:actions#master",
-    "local>volker.raschek/renovate-config:regexp#master"
-  ],
   "packageRules": [
     {
-      "addLabels": [
+      "addLabels": [ "renovate/droneci", "renovate/automerge" ],
-        "renovate/automerge"
-      ],
       "automerge": true,
-      "matchPackageNames": [
+      "matchManagers": "droneci",
-        "helm/helm"
+      "matchUpdateTypes": [ "minor", "patch"]
+    },
+    {
+      "description": "Automatically update patch version of used container images in docker files",
+      "addLabels": [ "renovate/container-image", "renovate/automerge" ],
+      "automerge": true,
+      "matchManagers": [ "dockerfile" ],
+      "matchUpdateTypes": [ "patch" ]
+    },
+    {
+      "addLabels": [ "renovate/helm", "renovate/automerge" ],
+      "automerge": false,
+      "matchPackageNames": [ "helm" ],
+      "matchManagers": [ "regex" ]
+    }
+  ],
+  "rebaseLabel": "renovate/rebase",
+  "rebaseWhen": "behind-base-branch",
+  "regexManagers": [
+    {
+      "description": "Update version",
+      "fileMatch": [
+        "^Makefile$"
       ],
-      "matchManagers": [
+      "matchStrings": [
-        "regex"
+        "HELM_VERSION\\?=(?<currentValue>.*) # renovate: datasource=(?<datasource>.*) depName=(?<depName>.*)( lookupName=(?<lookupName>.*))?( versioning=(?<versioning>.*))?"
       ]
     }
   ]