feat: Add run-openshift-preflight action (#71)

Author: Techassi

README.md

@@ -26,6 +26,7 @@ particular step in a workflow.
 - [publish-image](./publish-image/README.md)
 - [publish-index-manifest](./publish-index-manifest/README.md)
 - [run-integration-test](./run-integration-test/README.md)
+- [run-openshift-preflight](./run-openshift-preflight/README.md)
 - [run-pre-commit](./run-pre-commit/README.md)
 - [send-slack-notification](./send-slack-notification/README.md)
 - [setup-k8s-tools](./setup-k8s-tools/README.md)

run-openshift-preflight/README.md

@@ -0,0 +1,24 @@
+# `run-openshift-preflight`
+
+> Manifest: [run-openshift-preflight/action.yml][run-openshift-preflight]
+
+This action downloads the OpenShift preflight tool, runs it, and then reports if the checks passed.
+
+## Inputs and Outputs
+
+> [!TIP]
+> For descriptions of the inputs and outputs, see the complete [run-openshift-preflight] action.
+
+### Inputs
+
+| Input                | Required (Default) | Description                                  |
+| -------------------- | ------------------ | -------------------------------------------- |
+| `image-index-uri`    | Yes                | The image index URI (eg. oci.stackable.tech/sdp/kafka:3.4.1-stackable0.0.0-dev) of the image to be checked. |
+| `image-architecture` | Yes                | The image architecture to be checked.        |
+| `preflight-version`  | No (`latest`)      | The version of the OpenShift preflight tool. |
+
+### Outputs
+
+None.
+
+[run-openshift-preflight]: ./action.yaml

run-openshift-preflight/action.yaml

@@ -0,0 +1,66 @@
+---
+name: Run OpenShift Preflight
+description: |
+  This action downloads the OpenShift preflight tool, runs it, and then reports
+  if the check passed.
+inputs:
+  preflight-version:
+    default: latest
+    description: The version of the OpenShift preflight tool.
+  image-index-uri:
+    description: |
+      The image index URI (eg. oci.stackable.tech/sdp/kafka:3.4.1-stackable0.0.0-dev) of the image
+      to be checked.
+  image-architecture:
+    description: The image architecture to be checked.
+runs:
+  using: composite
+  steps:
+    - name: Download the OpenShift preflight tool
+      env:
+        PREFLIGHT_VERSION: ${{ inputs.preflight-version }}
+        GITHUB_DEBUG: ${{ runner.debug }}
+      shell: bash
+      run: |
+        set -euo pipefail
+        [ -n "$GITHUB_DEBUG" ] && set -x
+
+        ARCH=$("$GITHUB_ACTION_PATH/../.scripts/actions/get_architecture.sh")
+        SYSTEM=$("$GITHUB_ACTION_PATH/../.scripts/actions/get_platform.sh")
+
+        if [ "$PREFLIGHT_VERSION" == "latest" ]; then
+          curl -fsSL -o /tmp/openshift-preflight "https://github.com/redhat-openshift-ecosystem/openshift-preflight/releases/latest/download/preflight-${SYSTEM}-${ARCH}"
+        else
+          curl -fsSL -o /tmp/openshift-preflight "https://github.com/redhat-openshift-ecosystem/openshift-preflight/releases/download/${PREFLIGHT_VERSION}/preflight-${SYSTEM}-${ARCH}"
+        fi
+
+        sudo install -m 755 -t /usr/local/bin /tmp/openshift-preflight
+
+    - name: Check Container Image
+      env:
+        IMAGE_ARCHITECTURE: ${{ inputs.image-architecture }}
+        IMAGE_INDEX_URI: ${{ inputs.image-index-uri }}
+        GITHUB_DEBUG: ${{ runner.debug }}
+      shell: bash
+      run: |
+        set -euo pipefail
+        [ -n "$GITHUB_DEBUG" ] && set -x
+
+        openshift-preflight check container "$IMAGE_INDEX_URI" --platform "linux/$IMAGE_ARCHITECTURE" > preflight.out
+
+    - name: Report Result
+      env:
+        GITHUB_DEBUG: ${{ runner.debug }}
+      shell: bash
+      run: |
+        set -euo pipefail
+        [ -n "$GITHUB_DEBUG" ] && set -x
+
+        if [ "$(jq -r .passed < preflight.out)" == true ]; then
+          echo "Checks Passed"
+          exit 0
+        else
+          echo "Checks failed"
+          cat preflight.out
+          exit 1
+        fi