gke-helm-upgrade.yml

---
name: GKE Helm Upgrade

on:
    workflow_call:
        secrets:
            WORKLOAD_ID_PROVIDER:
                required: true
            SERVICE_ACCOUNT:
                required: true
        inputs:
            GCP_PROJECT:
                required: true
                type: string
            GKE_CLUSTER:
              required: true
              type: string
            GKE_REGION:
              required: true
              type: string
            HELM_RELEASE:
              required: true
              type: string
            HELM_CHART_DIR:
              required: true
              type: string
            HELM_VALUES:
              required: true
              type: string

jobs:
    helm-upgrade:
        runs-on: ubuntu-latest

        permissions:
            contents: read
            id-token: write

        steps:
            - uses: actions/checkout@v3
            - name: auth
              id: gcloud_auth
              uses: google-github-actions/auth@v1
              with:
                  workload_identity_provider: ${{ secrets.WORKLOAD_ID_PROVIDER }}
                  service_account: ${{ secrets.SERVICE_ACCOUNT }}
                  project_id: ${{ inputs.GCP_PROJECT }}
                  token_format: access_token
            - name: get-gke-credentials
              id: get-gke-credentials
              uses: google-github-actions/get-gke-credentials@v1
              with:
                cluster_name: ${{ inputs.GKE_CLUSTER }}
                location: ${{ inputs.GKE_REGION }}
            - name: helm-upgrade
              id: helm-upgrade
              run: helm upgrade ${{ inputs.HELM_RELEASE }} ${{ inputs.HELM_CHART_DIR }}/ --values ${{ inputs.HELM_VALUES }} --atomic --install