Skip to content

Add workflow to auto-bump aws-for-fluent-bit chart - #1373

Open
gian25-work wants to merge 3 commits into
aws:masterfrom
gian25-work:automation/update-aws-for-fluent-bit
Open

gian25-work wants to merge 3 commits into
aws:masterfrom
gian25-work:automation/update-aws-for-fluent-bit

Conversation

@gian25-work

@gian25-work gian25-work commented Sep 17, 2026

Copy link
Copy Markdown

Adds a weekly GitHub Actions workflow that checks the latest release of aws/aws-for-fluent-bit and opens a PR bumping appVersion, image.tag and the chart version. Mirrors the existing update-eks-chart.yaml (cron + hack/ script + peter-evans/create-pull-request), but needs no AWS credentials since it only reads the public GitHub releases API.

Version handling

  • Latest is picked by semver (sort -V), not by release date. GitHub lists releases newest-first by creation date, so a backport to an older line (e.g. a 2.x CVE rebuild published after 3.4.16) would otherwise be picked and downgrade the chart. This also means 2.x releases are naturally ignored while 3.x exists, and a future 4.x is picked up instead of silently ignored.
  • Current ahead of latest (semver compare) is a no-op, so a manual bump to a newer version is never reverted.
  • Chart version bump follows the size of the image jump: a major image bump (e.g. 2.x → 3.x) increments the chart minor version and resets patch, as done manually in Upgrade aws-for-fluent-bit chart to v0.2.0 (upstream version to 3.2.1) #1294; minor/patch/build image bumps increment the chart patch version.

Background: the chart is currently bumped by hand (last on 2026-02-03, #1294) and lags the image by several releases. See #1039 and #1372.

Testing

Ran ./hack/update-aws-for-fluent-bit.sh locally against master:

  • 3.2.1 → 3.4.16: only three lines change (Chart.yaml version 0.2.0 → 0.2.1, appVersion, values.yaml image.tag), helm lint passes, second run is a no-op.
  • Simulated appVersion: 2.34.3.20260910 → 3.4.16: chart version 0.2.0 → 0.3.0.
  • Simulated appVersion: 9.0.0: no-op.

image.tag is updated with sed rather than yq -i because yq rewrites the block scalars and comment indentation in values.yaml.

🤖 Generated with Claude Code

gian25-work and others added 3 commits September 17, 2026 10:39
Weekly job checks the latest 3.x release of aws/aws-for-fluent-bit and
opens a PR bumping appVersion, image.tag and the chart patch version.
Mirrors update-eks-chart.yaml; needs no AWS credentials.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
GitHub lists releases by creation date, so a backport to an older 3.x
minor published after the current head would have been picked as the
new version and downgraded the chart. Sort with sort -V instead.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Drop the 3.x filter so a future 4.x is picked up instead of silently
ignored. Compare current and latest by semver so a chart already ahead
of the newest release is left alone. A major image bump increments the
chart minor version, matching aws#1294; anything else increments patch.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@gian25-work

Copy link
Copy Markdown
Author

The logic of the script will need to be reviewed when the chart version is stable v1 instead of v0

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant