ci(main): trigger image builds on main branch commits

.gitea/workflows/build-prod.yaml

@@ -0,0 +1,53 @@
+name: build
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  build-push:
+    runs-on: docker
+    permissions:
+      packages: write
+      contents: read
+    env:
+      REGISTRY: forgejo.riotpiao.com
+      IMAGE_NAME: rock/kmsvc-manage
+      REGISTRY_PAT: ${{ secrets.REGISTRY_PAT }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Get commit short SHA
+        id: short_sha
+        run: echo "sha=${GITHUB_SHA:0:7}" >> $GITHUB_OUTPUT
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Forgejo Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: rock
+          password: ${{ env.REGISTRY_PAT }}
+
+      - name: Extract metadata (tags, labels)
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=raw,value=${{ steps.short_sha.outputs.sha }}
+            type=raw,value=latest,enable={{is_default_branch}}
+
+      - name: Build and push image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

k8s/argocd/apps/00-strimzi-operator.yaml

@@ -2,7 +2,7 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: strimzi-operator
-  namespace: cicd
+  namespace: sqs
   annotations:
     argocd.argoproj.io/sync-wave: "0"
 spec:

k8s/argocd/apps/01-kafka-cluster.yaml

@@ -2,14 +2,14 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: kafka-cluster
-  namespace: cicd
+  namespace: sqs
   annotations:
     argocd.argoproj.io/sync-wave: "1"
 spec:
   project: kmsvc
   source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/kafaka-management-service.git
+    repoURL: https://forgejo.riotpiao.com/rock/kmsvc-manage.git
-    targetRevision: main
+    targetRevision: prod
     path: k8s/charts/kafka-cluster
     helm:
       values: |

k8s/argocd/apps/02-redis.yaml

@@ -2,7 +2,7 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: kmsvc-redis
-  namespace: cicd
+  namespace: sqs
   annotations:
     argocd.argoproj.io/sync-wave: "1"
 spec:

k8s/argocd/apps/03-queue-crd.yaml

@@ -2,14 +2,14 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: queue-crd
-  namespace: cicd
+  namespace: sqs
   annotations:
     argocd.argoproj.io/sync-wave: "2"
 spec:
   project: kmsvc
   source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/kafaka-management-service.git
+    repoURL: https://forgejo.riotpiao.com/rock/kmsvc-manage.git
-    targetRevision: main
+    targetRevision: prod
     path: k8s/charts/queue-crd
     helm:
       values: |

k8s/argocd/apps/04-management-service.yaml

@@ -2,31 +2,31 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: management-service
-  namespace: cicd
+  namespace: sqs
   annotations:
     argocd.argoproj.io/sync-wave: "2"
 spec:
   project: kmsvc
   source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/kafaka-management-service.git
+    repoURL: https://forgejo.riotpiao.com/rock/kmsvc-manage.git
-    targetRevision: main
+    targetRevision: prod
     path: k8s/charts/management-service
     helm:
       values: |
         namespace: sqs
         image:
-          repository: forgejo.riotpiao.homelab.com/rock/kafka-management-service
+          repository: forgejo.riotpiao.com/rock/kmsvc-manage
-          # CI (.forgejo/workflows/release.yaml) writes the released git tag
+          # On prod branch: built on each commit push via CI workflow
-          # here and pushes the commit -- ArgoCD picks it up on its next sync.
+          # Tag is set to the git commit SHA for reproducible deployments
           tag: latest
         env:
           kafkaBrokers: "kmsvc-kafka-bootstrap.sqs.svc.cluster.local:9092"
           redisAddr: "kmsvc-redis-master.sqs.svc.cluster.local:6379"
-          authentikIssuerURL: "https://authentik.riotpiao.homelab.com/application/o/kafaka/"
+          authentikIssuerURL: ""
-          authentikAudience: "QI0gPtR99ar8VvhK8Tqox4SDkTKzbNU7lbgwBNSc"
+          authentikAudience: ""
         ingress:
           enabled: true
-          host: kmsvc.riotpiao.homelab.com
+          host: kmsvc.riotpiao.com
           clusterIssuer: homelab-ca
   destination:
     server: https://kubernetes.default.svc

k8s/argocd/root.yaml

@@ -7,13 +7,13 @@ spec:
   project: kmsvc
   source:
     repoURL: https://forgejo.riotpiao.com/rock/kmsvc-manage.git
-    targetRevision: main
+    targetRevision: prod
     path: k8s/argocd/apps
     directory:
       recurse: false
   destination:
     server: https://kubernetes.default.svc
-    namespace: cicd
+    namespace: sqs
   syncPolicy:
     automated:
       prune: true

k8s/charts/management-service/values.yaml

@@ -2,7 +2,7 @@ namespace: sqs
 replicaCount: 2
 
 image:
-  repository: forgejo.riotpiao.homelab.com/rock/kafka-management-service
+  repository: forgejo.riotpiao.com/rock/kmsvc-manage
   tag: latest
   pullPolicy: Always