Description

This PR adds a GitHub Actions workflow to lint and publish the Spider Helm chart to a GitHub Pages-backed Helm repository (https://github.com/y-scope/spider/raw/gh-pages), so that downstream charts (e.g., CLP's) can consume it as a dependency via helm dependency update instead of vendoring a copy of the chart through http download.

Note for reviewer:

The implementation mirrors CLP's proven chart-publishing workflow: clp-package-helm.yaml but adapted to this repo's conventions. The change is mostly following y-scope/clp#1891's implementation.

Note for Spider maintainers:

One-time setup required:

The publish job checks out the gh-pages branch, which doesn't exist yet. It must be created once (as an empty orphan branch) before the first publish:

git switch --orphan gh-pages
git commit --allow-empty -m "ci(helm): Initialize Helm repository branch."
git push origin gh-pages

After the first publish, the repository is consumable via:

helm repo add spider https://github.com/y-scope/spider/raw/gh-pages
helm search repo spider --versions

Checklist

• The PR satisfies the contribution guidelines.
• This is a breaking change and that has been indicated in the PR title, OR this isn't a
  breaking change.
• Necessary docs have been updated, OR no docs need to be updated.

Validation performed

1. Pushing to main publishes the chart to gh-pages

1. Create the one-time gh-pages branch, then fast-forward the fork's main to this PR's head commit.

   git switch --orphan gh-pages
   git commit --allow-empty -m "ci(helm): Initialize Helm repository branch."
   git push origin gh-pages
   git push origin <this PR's head commit>:main

   Expected: the push triggers a spider-helm run on main in which lint and publish both succeed (fork run).

2. helm dependency update downloads the chart from the repository

1. Declare the published chart as a dependency of a scratch parent chart, then resolve it.

   mkdir fake-parent && cat > fake-parent/Chart.yaml <<'EOF'
   apiVersion: "v2"
   name: "fake-parent"
   version: "0.1.0"
   dependencies:
     - name: "spider"
       version: "0.1.2"
       repository: "https://github.com/20001020ycx/spider/raw/gh-pages"
       condition: "spider.enabled"
   EOF
   helm dependency update fake-parent

   Expected: Downloading spider from repo https://github.com/20001020ycx/spider/raw/gh-pages; fake-parent/charts/spider-0.1.2.tgz appears; fake-parent/Chart.lock pins digest: sha256:f12a4bd42da43a0e4a89acef7d3f879891127fb8b2e42f6ea1b74b88243eefe4.

2. Verify the downloaded subchart renders through the parent and honors its condition gate.

   helm template test fake-parent --set spider.enabled=true | grep -c '^# Source: fake-parent/charts/spider/'   # -> 8
   helm template test fake-parent --set spider.enabled=false | grep -c '^# Source:'   # -> 0

3. Verify helm dependency build reproduces charts/ from Chart.lock alone.

   rm -rf fake-parent/charts
   helm dependency build fake-parent
   ls fake-parent/charts   # -> spider-0.1.2.tgz

Summary by CodeRabbit

Summary by CodeRabbit

• New Features

  • Added a dedicated workflow to lint, package, and publish the Spider Helm chart.
  • Added Helm chart packaging automation and publishing to the chart repository (including index updates) for eligible releases.

• Bug Fixes

  • Updated CI linting flow so Helm validation runs via the dedicated Helm workflow.