From d2f9b91d6730ea92f2b092aba6f7a98b562510dc Mon Sep 17 00:00:00 2001
From: root <ezach.me@gmail.com>
Date: Thu, 3 Sep 2026 11:41:25 +0700
Subject: [PATCH] fix: switch to kaniko build and update helm chart
 configuration

---
 .gitlab-ci.yml          | 40 ++++++++++++++++++++++++++++------------
 helm/sidata/values.yaml |  3 +++
 2 files changed, 31 insertions(+), 12 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 618a3b7..9295566 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -3,25 +3,41 @@ stages:
   - deploy
 
 variables:
-  NEXUS_PULL_REGISTRY: "10.15.39.186:8082"
   NEXUS_PUSH_REGISTRY: "10.15.39.186:8082"
   IMAGE_NAME: "eosbpkd/sidata"
-  DOCKER_HOST: "tcp://docker:2376"
-  DOCKER_TLS_CERTDIR: "/certs"
 
 build_image:
   stage: build
-  image: 10.15.39.186:8082/library/docker:24.0.5
-  services:
-    - name: 10.15.39.186:8082/library/docker:24.0.5-dind
-      alias: docker
+  image:
+    name: 10.15.39.186:8082/library/gcr.io/kaniko-project/executor:debug
+    entrypoint: [""]
   before_script:
-    - until docker info >/dev/null 2>&1; do echo "Waiting for docker daemon..."; sleep 1; done
+    - mkdir -p /kaniko/.docker
+    - AUTH=$(echo -n "$NEXUS_USERNAME:$NEXUS_PASSWORD" | base64 | tr -d '\n')
+    - echo "{\"auths\":{\"http://$NEXUS_PUSH_REGISTRY\":{\"auth\":\"$AUTH\"}}}" > /kaniko/.docker/config.json
   script:
-    - echo "$NEXUS_PASSWORD" | docker login -u "$NEXUS_USERNAME" --password-stdin $NEXUS_PUSH_REGISTRY
-    - docker build -t $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:$CI_COMMIT_SHA -t $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:latest .
-    - docker push $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:$CI_COMMIT_SHA
-    - docker push $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:latest
+    - /kaniko/executor
+      --context $CI_PROJECT_DIR
+      --dockerfile $CI_PROJECT_DIR/Dockerfile
+      --destination $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:$CI_COMMIT_SHA
+      --destination $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:latest
+      --insecure
+      --skip-tls-verify
+  only:
+    - main
+    - master
+    - fix/sidata-path
+
+deploy_rancher:
+  stage: deploy
+  image: 10.15.39.186:8082/library/alpine/helm:3.12.0
+  script:
+    - mkdir -p ~/.kube
+    - echo "$KUBECONFIG_B64" | base64 -d > ~/.kube/config
+    - helm upgrade --install sidata ./helm/sidata
+      --namespace default
+      --set image.repository=$NEXUS_PUSH_REGISTRY/$IMAGE_NAME
+      --set image.tag=$CI_COMMIT_SHA
   only:
     - main
     - master
diff --git a/helm/sidata/values.yaml b/helm/sidata/values.yaml
index 8d5d632..596ea08 100644
--- a/helm/sidata/values.yaml
+++ b/helm/sidata/values.yaml
@@ -5,6 +5,9 @@ image:
   tag: latest
   pullPolicy: Always
 
+# Tambahkan imagePullSecrets jika RKE2 membutuhkan kredensial untuk pull dari Nexus
+imagePullSecrets: []
+
 service:
   type: ClusterIP
   port: 80