fix: switch to kaniko build and update helm chart configuration

.gitlab-ci.yml

@@ -3,25 +3,41 @@ stages:
   - deploy
 
 variables:
-  NEXUS_PULL_REGISTRY: "10.15.39.186:8082"
   NEXUS_PUSH_REGISTRY: "10.15.39.186:8082"
   IMAGE_NAME: "eosbpkd/sidata"
-  DOCKER_HOST: "tcp://docker:2376"
-  DOCKER_TLS_CERTDIR: "/certs"
 
 build_image:
   stage: build
-  image: 10.15.39.186:8082/library/docker:24.0.5
-  services:
-    - name: 10.15.39.186:8082/library/docker:24.0.5-dind
-      alias: docker
+  image:
+    name: 10.15.39.186:8082/library/gcr.io/kaniko-project/executor:debug
+    entrypoint: [""]
   before_script:
-    - until docker info >/dev/null 2>&1; do echo "Waiting for docker daemon..."; sleep 1; done
+    - mkdir -p /kaniko/.docker
+    - AUTH=$(echo -n "$NEXUS_USERNAME:$NEXUS_PASSWORD" | base64 | tr -d '\n')
+    - echo "{\"auths\":{\"http://$NEXUS_PUSH_REGISTRY\":{\"auth\":\"$AUTH\"}}}" > /kaniko/.docker/config.json
   script:
-    - echo "$NEXUS_PASSWORD" | docker login -u "$NEXUS_USERNAME" --password-stdin $NEXUS_PUSH_REGISTRY
-    - docker build -t $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:$CI_COMMIT_SHA -t $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:latest .
-    - docker push $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:$CI_COMMIT_SHA
-    - docker push $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:latest
+    - /kaniko/executor
+      --context $CI_PROJECT_DIR
+      --dockerfile $CI_PROJECT_DIR/Dockerfile
+      --destination $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:$CI_COMMIT_SHA
+      --destination $NEXUS_PUSH_REGISTRY/$IMAGE_NAME:latest
+      --insecure
+      --skip-tls-verify
+  only:
+    - main
+    - master
+    - fix/sidata-path
+
+deploy_rancher:
+  stage: deploy
+  image: 10.15.39.186:8082/library/alpine/helm:3.12.0
+  script:
+    - mkdir -p ~/.kube
+    - echo "$KUBECONFIG_B64" | base64 -d > ~/.kube/config
+    - helm upgrade --install sidata ./helm/sidata
+      --namespace default
+      --set image.repository=$NEXUS_PUSH_REGISTRY/$IMAGE_NAME
+      --set image.tag=$CI_COMMIT_SHA
   only:
     - main
     - master

helm/sidata/values.yaml

@@ -5,6 +5,9 @@ image:
   tag: latest
   pullPolicy: Always
 
+# Tambahkan imagePullSecrets jika RKE2 membutuhkan kredensial untuk pull dari Nexus
+imagePullSecrets: []
+
 service:
   type: ClusterIP
   port: 80