[internal] Fixes in ci, webhooks certificates generation hooks and add dmt check (#86)

Signed-off-by: Vasily Oleynikov <[email protected]>

Author: duckhawk

.github/workflows/build_dev.yml

@@ -25,6 +25,30 @@ defaults:
     shell: bash
 
 jobs:
+  lint:
+    runs-on: [self-hosted, regular]
+    continue-on-error: true
+    name: Lint
+    steps:
+      - uses: actions/checkout@v4
+      - name: Copy openapi/values_ce.yaml to openapi/values.yaml
+        run: |
+          if [ -f openapi/values_ce.yaml ]; then
+            cp openapi/values_ce.yaml openapi/values.yaml
+          fi
+      - uses: deckhouse/modules-actions/lint@main
+        env:
+          DMT_METRICS_URL: ${{ secrets.DMT_METRICS_URL }}
+          DMT_METRICS_TOKEN: ${{ secrets.DMT_METRICS_TOKEN }}
+      - name: Copy openapi/values_ee.yaml to openapi/values.yaml
+        run: |
+          if [ -f openapi/values_ee.yaml ]; then
+            cp openapi/values_ee.yaml openapi/values.yaml
+          fi
+      - uses: deckhouse/modules-actions/lint@main
+        env:
+          DMT_METRICS_URL: ${{ secrets.DMT_METRICS_URL }}
+          DMT_METRICS_TOKEN: ${{ secrets.DMT_METRICS_TOKEN }}
   set_edition:
     runs-on: [self-hosted, large]
     name: Set edition
@@ -94,4 +118,4 @@ jobs:
         with:
           module_source: "${{ vars.DEV_MODULE_SOURCE }}"
           module_name: ${{ vars.MODULE_NAME }}
-          module_tag: $(echo pr${{ github.ref_name }} | sed 's/\/.*//g')
+          module_tag: ${{ env.MODULES_MODULE_TAG }}

.github/workflows/deploy_dev.yml

@@ -31,11 +31,11 @@ on:
         description: "The module's tag, which must include the -dev1 postfix. For example: v1.21.1-dev1"
         type: string
         required: true
-      
+
       enableBuild:
         type: boolean
         default: true
-        description: 'Set to true if build is required'
+        description: "Set to true if build is required"
 
 jobs:
   deploy-dev:
@@ -61,11 +61,11 @@ jobs:
         with:
           registry: ${{ vars.DEV_REGISTRY }}
           registry_login: ${{ vars.DEV_MODULES_REGISTRY_LOGIN }}
-          registry_password: ${{ secrets.DEV_MODULES_REGISTRY_PASSWORD }}      
+          registry_password: ${{ secrets.DEV_MODULES_REGISTRY_PASSWORD }}
       - if: ${{ github.event.inputs.enableBuild == 'true' }}
         uses: deckhouse/modules-actions/build@v2
         with:
           module_source: "${{ vars.DEV_MODULE_SOURCE }}"
           module_name: ${{ vars.MODULE_NAME }}
-          module_tag: $(echo ${{ github.ref_name }} | sed 's/\/.*//g')
+          module_tag: ${{ github.event.inputs.tag }}
       - uses: deckhouse/modules-actions/deploy@v2

hooks/go/020-webhook-certs/webhook-certs.go

@@ -3,14 +3,15 @@ package hooks_common
 import (
 	"fmt"
 
-	consts "github.com/deckhouse/csi-nfs/hooks/go/consts"
 	tlscertificate "github.com/deckhouse/module-sdk/common-hooks/tls-certificate"
+	consts "github.com/deckhouse/csi-nfs/hooks/go/consts"
 )
 
 var _ = tlscertificate.RegisterInternalTLSHookEM(tlscertificate.GenSelfSignedTLSHookConf{
-	CN:            consts.WebhookCertCn,
-	TLSSecretName: fmt.Sprintf("%s-webhook-cert", consts.WebhookCertCn),
-	Namespace:     consts.ModuleNamespace,
+	CommonCACanonicalName: fmt.Sprintf("%s-%s", consts.ModulePluralName, consts.WebhookCertCn),
+	CN:                    consts.WebhookCertCn,
+	TLSSecretName:         fmt.Sprintf("%s-https-certs", consts.WebhookCertCn),
+	Namespace:             consts.ModuleNamespace,
 	SANs: tlscertificate.DefaultSANs([]string{
 		consts.WebhookCertCn,
 		fmt.Sprintf("%s.%s", consts.WebhookCertCn, consts.ModuleNamespace),

hooks/go/consts/consts.go

@@ -1,9 +1,10 @@
 package consts
 
 const (
-	ModuleName      string = "csiNfs"
-	ModuleNamespace string = "d8-csi-nfs"
-	WebhookCertCn   string = "webhooks"
+	ModuleName      	string = "csiNfs"
+	ModuleNamespace 	string = "d8-csi-nfs"
+	ModulePluralName 	string = "csi-nfs"
+	WebhookCertCn   	string = "webhooks"
 )
 
 var AllowedProvisioners = []string{