ci: trigger build

.gitea/workflows/deploy.yaml

@@ -1,51 +1,70 @@
 name: CI/CD Pipeline to Rancher - SIDATA
 
 on:
-  push:
+push:
-    branches:
+branches:
-      - main
+- main
 
 jobs:
-  build-and-deploy:
+build-and-deploy:
-    runs-on: ubuntu-latest
+runs-on: ubuntu-latest
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@v3
 
-      # Login ke Registry Gitea Lokal
+steps:
-      - name: Log in to Gitea Container Registry
+  # ============================================================
-        uses: docker/login-action@v2
+  # Checkout
-        with:
+  # ============================================================
-          registry: 10.15.39.187:3000
+  - name: Checkout Code
-          username: ${{ secrets.REGISTRY_USER }}
+    uses: actions/checkout@v3
-          password: ${{ secrets.REGISTRY_PASSWORD }}
 
-      # Build & Push Image Aplikasi SIDATA ke Registry
+  # ============================================================
-      - name: Build and Push Docker Image
+  # Login Registry
-        uses: docker/build-push-action@v4
+  # ============================================================
-        with:
+  - name: Log in to Gitea Container Registry
-          context: .
+    uses: docker/login-action@v2
-          push: true
+    with:
-          tags: |
+      registry: registry-bpkd.drc-bpkd.data-center.id
-            10.15.39.187:3000/${{ secrets.REGISTRY_USER }}/sidata:latest
+      username: ${{ secrets.REGISTRY_USER }}
-            10.15.39.187:3000/${{ secrets.REGISTRY_USER }}/sidata:${{ gitea.sha }}
+      password: ${{ secrets.REGISTRY_PASSWORD }}
 
-      # Deploy & Update Workload di Cluster Local Rancher BPKD
+  # ============================================================
-      - name: Deploy to Rancher Cluster
+  # Build & Push
-        run: |
+  # ============================================================
-          # Download binary kubectl
+  - name: Build and Push Docker Image
-          curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
+    uses: docker/build-push-action@v4
-          chmod +x kubectl
+    with:
+      context: .
+      push: true
+      tags: |
+        registry-bpkd.drc-bpkd.data-center.id/${{ secrets.REGISTRY_USER }}/sidata:latest
+        registry-bpkd.drc-bpkd.data-center.id/${{ secrets.REGISTRY_USER }}/sidata:${{ gitea.sha }}
 
-          # Set Kubeconfig menggunakan API Rancher BPKD
+  # ============================================================
-          ./kubectl config set-cluster rancher-cluster --server=${{ secrets.RANCHER_URL }}/k8s/clusters/${{ secrets.RANCHER_CLUSTER_ID }} --insecure-skip-tls-verify=true
+  # Deploy ke Rancher
-          ./kubectl config set-credentials rancher-user --token=${{ secrets.RANCHER_TOKEN }}
+  # ============================================================
-          ./kubectl config set-context rancher-context --cluster=rancher-cluster --user=rancher-user
+  - name: Deploy to Rancher Cluster
-          ./kubectl config use-context rancher-context
+    shell: bash
+    run: |
+      set -e
 
-          # Update Container Image untuk Workload sidata
+      echo "=== Download kubectl ==="
-          # Sesuaikan 'sidata-deployment', 'sidata-container', dan namespace jika berbeda di Rancher
-          ./kubectl set image deployment/sidata-deployment sidata-container=10.15.39.187:3000/${{ secrets.REGISTRY_USER }}/sidata:${{ gitea.sha }} -n sidataprod
 
-          # Pantau Status Rollout hingga Sukses
+      KUBECTL_VERSION=$(curl -L -s https://dl.k8s.io/release/stable.txt)
-          ./kubectl rollout status deployment/sidata-deployment -n sidataprod
+
+      curl -fLO \
+        "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl"
+
+      chmod +x kubectl
+
+      echo "kubectl version:"
+      ./kubectl version --client
+
+      echo "=== Configure Rancher Kubeconfig ==="
+
+      ./kubectl config set-cluster rancher-cluster \
+        --server="${{ secrets.RANCHER_URL }}/k8s/clusters/${{ secrets.RANCHER_CLUSTER_ID }}" \
+        --insecure-skip-tls-verify=true
+
+      ./kubectl config set-credentials rancher-user \
+        --token="${{ secrets.RANCHER_TOKEN }}"
+
+      ./

Dockerfile

@@ -1,4 +1,4 @@
-FROM 10.15.39.186:8083/php74-fpm-oci8-lengkap:1.0
+FROM registry-nexus-bpkd.drc-bpkd.data-center.id/php74-fpm-oci8-lengkap:1.0
 
 ARG http_proxy
 ARG https_proxy

app/Http/Middleware/Authenticate.php

@@ -16,7 +16,7 @@ class Authenticate extends Middleware
     {
         if (! $request->expectsJson()) {
             // Paksa redirect membawa prefix /sidata agar tidak terlempar ke root domain
-            return url('/sidata/login');
+            return redirect()->guest(route('login'));
         }
     }
 }

app/Http/Middleware/TrustProxies.php

@@ -2,22 +2,13 @@
 
 namespace App\Http\Middleware;
 
-use Illuminate\Http\Middleware\TrustProxies as Middleware;
+use Fideloper\Proxy\TrustProxies as Middleware;
-use Illuminate\Http\Request;
 
 class TrustProxies extends Middleware
 {
-    /**
-     * The trusted proxies for this application.
-     *
-     * @var array|string|null
-     */
     protected $proxies = '*';
 
-    /**
+    protected $headers = [
-     * The headers that should be used to detect proxies.
+        \Illuminate\Http\Request::HEADER_X_FORWARDED_ALL,
-     *
+    ];
-     * @var int
-     */
-    protected $headers = Request::HEADER_X_FORWARDED_ALL;
 }

app/Providers/RouteServiceProvider.php

@@ -17,7 +17,7 @@ class RouteServiceProvider extends ServiceProvider
      *
      * @var string
      */
-    public const HOME = '/sidata/home';
+    public const HOME = '/home';
 
     /**
      * The controller namespace for the application.

helm/sidata/templates/middleware.yaml

@@ -6,4 +6,4 @@
 # spec:
 #   stripPrefix:
 #     prefixes:
-#       - /sidata
+#       - /sidataprod