Use Chart Testing Composite

.github/workflows/chart-ci.yaml

@@ -42,25 +42,6 @@ jobs:
       with:
         fetch-depth: 0
         ref: ${{ github.event.merge_group.head_ref }}
-    - uses: azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0
-    - uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
-    - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
+    - uses: intel/ai-containers/workflows/charts@3dd3db546b10d1a29f17a4fc45d4c5b7ca950c90 # main
       with:
-        python-version: 3.x
-    - name: Setup chart-testing
-      uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
-    - name: Get chart diff
-      id: changed
-      run: |
-        changed=$(ct list-changed --target-branch ${{ github.event.repository.default_branch }} --config .github/ct.yaml)
-        if [[ -n "$changed" ]]; then
-          echo "changed=true" >> "$GITHUB_OUTPUT"
-        fi
-    - name: Helm Lint, Install, and Test
-      if: steps.changed.outputs.changed == 'true'
-      run: |
-        install -m 0600 ${{ secrets.KUBECONFIG_PATH }} /tmp/config.yaml
-        kubectl config use-context kubeflow
-        ct lint-and-install --target-branch ${{ github.event.repository.default_branch }} --config .github/ct.yaml --debug --namespace helm-ci
-      env:
-        KUBECONFIG: /tmp/config.yaml
+        kubeconfig_path: ${{ secrets.KUBECONFIG_PATH }}

.github/workflows/integration-test.yaml

@@ -68,7 +68,7 @@ jobs:
         group: ${{ fromJson(needs.group-diff.outputs.groups) }}
         experimental: [true]
       fail-fast: false
-    uses: ./.github/workflows/container-ci.yaml
+    uses: intel/ai-containers/.github/workflows/container-ci.yaml@3dd3db546b10d1a29f17a4fc45d4c5b7ca950c90 # main
     with:
       group_dir: ${{ matrix.group }}
       ref: "refs/pull/${{ github.event.number }}/merge"

.github/workflows/weekly-test.yaml

@@ -47,11 +47,26 @@ jobs:
         group: ${{ fromJson(needs.get-groups.outputs.groups) }}
         experimental: [true]
       fail-fast: false
-    uses: ./.github/workflows/container-ci.yaml
+    uses: intel/ai-containers/.github/workflows/container-ci.yaml@3dd3db546b10d1a29f17a4fc45d4c5b7ca950c90 # main
     with:
       group_dir: ${{ matrix.group }}
       ref: main
     secrets: inherit
+  helm-ci:
+    runs-on: kubectl
+    steps:
+    - name: Harden Runner
+      uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
+      with:
+        egress-policy: audit
+    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+      with:
+        fetch-depth: 0
+    - uses: intel/ai-containers/workflows/charts@3dd3db546b10d1a29f17a4fc45d4c5b7ca950c90 # main
+      with:
+        config: '--all --namespace helm-ci'
+        list_changed: false
+        kubeconfig_path: ${{ secrets.KUBECONFIG_PATH }}
   scan:
     name: gitleaks
     runs-on: ubuntu-latest