.pre-commit-config.yaml

@@ -35,16 +35,6 @@ repos:
   # Kubernetes manifest validation
   - repo: local
     hooks:
-      - id: kubeconform_validate_apps
-        name: kubeconform validate apps
-        entry: ci/validate-apps.sh
-        language: system
-        pass_filenames: false
-      - id: kubeconform_validate_clusters
-        name: kubeconform validate clusters
-        entry: ci/validate-clusters.sh
-        language: system
-        pass_filenames: false
       - id: no_plain_secrets
         name: prevent plain kubernetes secrets
         entry: ci/validate-no-secrets.sh

.woodpecker/kubeconform.yaml

@@ -0,0 +1,9 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: kubeconform
+    image: git.unkin.net/unkin/almalinux9-base:latest
+    commands:
+      - dnf install make kustomize kubeconform helm -y
+      - make kubeconform

.woodpecker/pre-commit.yaml

@@ -5,5 +5,5 @@ steps:
   - name: pre-commit
     image: git.unkin.net/unkin/almalinux9-base:latest
     commands:
-      - dnf install uv kustomize kubeconform helm -y
+      - dnf install uv make -y
       - uvx pre-commit run --all-files

Makefile

@@ -6,6 +6,11 @@ build:
 	@mkdir -p manifests/$(filter-out $@,$(MAKECMDGOALS))
 	@kustomize build --enable-helm $(filter-out $@,$(MAKECMDGOALS)) --output manifests/$(filter-out $@,$(MAKECMDGOALS))
 
+# kubeconform
+kubeconform:
+	@ci/validate-apps.sh && \
+	ci/validate-clusters.sh
+
 # Clean all generated manifests
 clean:
 	@rm -rf manifests/