refactor + cleanup (#95)

* refactor + cleanup

.github/dependabot.yml

@@ -12,4 +12,4 @@ updates:
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "weekly"

.github/workflows/dependabot.yaml

@@ -20,4 +20,4 @@ jobs:
         run: gh pr merge --auto --merge "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

.github/workflows/linting.yaml

@@ -14,23 +14,6 @@ on:  # yamllint disable-line rule:truthy
       - docs/*.md
 
 jobs:
-  lint-kustomize:
-    runs-on: ubuntu-latest
-    env:
-      KUSTOMIZE_VERSION: 3.9.4
-      KUSTOMIZE_URL: https://github.com/kubernetes-sigs/kustomize/releases/download/v${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_amd64
-      BIN_PATH: /usr/bin
-    steps:
-      - name: Install Kustomize
-        run: |
-          sudo curl "${KUSTOMIZE_URL}" -L -o ${BIN_PATH}/kustomize
-          sudo chmod +x ${BIN_PATH}/kustomize
-      - name: Code Checkout
-        uses: actions/checkout@v4
-      - name: Validate Manifests
-        run: |
-          [ -d ./bootstrap/base ] && touch bootstrap/base/sealed-secrets-secret.yaml
-          ./scripts/validate_manifests.sh
 
   lint-yaml:
     runs-on: ubuntu-latest
@@ -65,4 +48,27 @@ jobs:
         uses: hadolint/[email protected]
         with:
           dockerfile: Dockerfile
-          recursive: true
+          recursive: true
+
+  lint-manifests:
+    runs-on: ubuntu-latest
+    env:
+      # KUSTOMIZE_VERSION: v5.0.1
+      BIN_PATH: /usr/bin
+    steps:
+      - name: Install Kustomize
+        run: |
+          set -x
+          LATEST=$( curl -s https://api.github.com/repos/kubernetes-sigs/kustomize/releases/latest | jq .name | sed 's#kustomize/##; s#"##g')
+          BIN_VERSION=${KUSTOMIZE_VERSION:-${LATEST}}
+          DOWNLOAD_URL=https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2F${BIN_VERSION}/kustomize_${BIN_VERSION}_linux_amd64.tar.gz
+
+          curl "${DOWNLOAD_URL}" -sL | sudo tar zx -C "${BIN_PATH}/" kustomize
+          sudo chmod +x "${BIN_PATH}"/kustomize
+      - name: Code Checkout
+        uses: actions/checkout@v4
+      - name: Validate Manifests
+        run: |
+          [ -d ./bootstrap/base ] && touch bootstrap/base/sealed-secrets-secret.yaml
+          ./scripts/validate_kustomize.sh
+          ./scripts/validate_helm.sh

.gitignore

@@ -4,7 +4,6 @@ scratch/
 files.txt
 bootstrap/sealed-secrets-secret.yaml
 **/charts/
-
 dictionary.dic
 
 # swap files

.hadolint.yaml

@@ -3,6 +3,7 @@ override:
   info:
     - DL3006  # Always tag the version of an image explicitly
     - DL3013  # Pin versions in pip
-    - DL3033  # Specify version with `dnf install
-    - DL3041  # Specify version with `yum install
-    - DL4006  # Set the SHELL option -o pipefail before RUN
+    - DL4006  # Set the SHELL option -o pipefail before RUN
+ignored:
+  - DL3033  # Specify version with `dnf install
+  - DL3041  # Specify version with `yum install

.pyspelling.yml

@@ -7,6 +7,7 @@ matrix:
       encoding: utf-8
       wordlists:
         - .wordlist-md
+      output: scratch/dictionary.dic
     pipeline:
       - pyspelling.filters.markdown:
       - pyspelling.filters.html:
@@ -17,3 +18,32 @@ matrix:
     sources:
       - '!**/INFO.md|!**/TODO.md|!venv/**|!scratch/**|**/*.md'
     default_encoding: utf-8
+  - name: Scripts
+    aspell:
+      lang: en
+    dictionary:
+      encoding: utf-8
+      wordlists:
+        - .wordlist-md
+        - .wordlist-sh
+      output: scratch/dictionary.dic
+    pipeline:
+      - pyspelling.filters.text:
+    sources:
+      - '!venv/**|!scratch/**|!*/wip/**|**/*.sh'
+    default_encoding: utf-8
+  - name: Python
+    aspell:
+      lang: en
+      # ignore-case: true
+    dictionary:
+      encoding: utf-8
+      wordlists:
+        - .wordlist-md
+        - .wordlist-sh
+      output: scratch/dictionary.dic
+    pipeline:
+      - pyspelling.filters.python:
+    sources:
+      - '!venv/**|!scratch/**|**/*.py'
+    default_encoding: utf-8