ci: trigger build

.gitea/workflows/deploy.yaml

@@ -1,51 +1,70 @@
 name: CI/CD Pipeline to Rancher - SIDATA
 
 on:
-  push:
-    branches:
-      - main
+push:
+branches:
+- main
 
 jobs:
-  build-and-deploy:
-    runs-on: ubuntu-latest
-    steps:
+build-and-deploy:
+runs-on: ubuntu-latest
+
+steps:
+  # ============================================================
+  # Checkout
+  # ============================================================
   - name: Checkout Code
     uses: actions/checkout@v3
 
-      # Login ke Registry Gitea Lokal
+  # ============================================================
+  # Login Registry
+  # ============================================================
   - name: Log in to Gitea Container Registry
     uses: docker/login-action@v2
     with:
-          registry: 10.15.39.187:3000
+      registry: registry-bpkd.drc-bpkd.data-center.id
       username: ${{ secrets.REGISTRY_USER }}
       password: ${{ secrets.REGISTRY_PASSWORD }}
 
-      # Build & Push Image Aplikasi SIDATA ke Registry
+  # ============================================================
+  # Build & Push
+  # ============================================================
   - name: Build and Push Docker Image
     uses: docker/build-push-action@v4
     with:
       context: .
       push: true
       tags: |
-            10.15.39.187:3000/${{ secrets.REGISTRY_USER }}/sidata:latest
-            10.15.39.187:3000/${{ secrets.REGISTRY_USER }}/sidata:${{ gitea.sha }}
+        registry-bpkd.drc-bpkd.data-center.id/${{ secrets.REGISTRY_USER }}/sidata:latest
+        registry-bpkd.drc-bpkd.data-center.id/${{ secrets.REGISTRY_USER }}/sidata:${{ gitea.sha }}
 
-      # Deploy & Update Workload di Cluster Local Rancher BPKD
+  # ============================================================
+  # Deploy ke Rancher
+  # ============================================================
   - name: Deploy to Rancher Cluster
+    shell: bash
     run: |
-          # Download binary kubectl
-          curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
+      set -e
+
+      echo "=== Download kubectl ==="
+
+      KUBECTL_VERSION=$(curl -L -s https://dl.k8s.io/release/stable.txt)
+
+      curl -fLO \
+        "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl"
+
       chmod +x kubectl
 
-          # Set Kubeconfig menggunakan API Rancher BPKD
-          ./kubectl config set-cluster rancher-cluster --server=${{ secrets.RANCHER_URL }}/k8s/clusters/${{ secrets.RANCHER_CLUSTER_ID }} --insecure-skip-tls-verify=true
-          ./kubectl config set-credentials rancher-user --token=${{ secrets.RANCHER_TOKEN }}
-          ./kubectl config set-context rancher-context --cluster=rancher-cluster --user=rancher-user
-          ./kubectl config use-context rancher-context
+      echo "kubectl version:"
+      ./kubectl version --client
 
-          # Update Container Image untuk Workload sidata
-          # Sesuaikan 'sidata-deployment', 'sidata-container', dan namespace jika berbeda di Rancher
-          ./kubectl set image deployment/sidata-deployment sidata-container=10.15.39.187:3000/${{ secrets.REGISTRY_USER }}/sidata:${{ gitea.sha }} -n sidataprod
+      echo "=== Configure Rancher Kubeconfig ==="
 
-          # Pantau Status Rollout hingga Sukses
-          ./kubectl rollout status deployment/sidata-deployment -n sidataprod
+      ./kubectl config set-cluster rancher-cluster \
+        --server="${{ secrets.RANCHER_URL }}/k8s/clusters/${{ secrets.RANCHER_CLUSTER_ID }}" \
+        --insecure-skip-tls-verify=true
+
+      ./kubectl config set-credentials rancher-user \
+        --token="${{ secrets.RANCHER_TOKEN }}"
+
+      ./

Dockerfile

@@ -1,4 +1,4 @@
-FROM 10.15.39.186:8083/php74-fpm-oci8-lengkap:1.0
+FROM registry-nexus-bpkd.drc-bpkd.data-center.id/php74-fpm-oci8-lengkap:1.0
 
 ARG http_proxy
 ARG https_proxy

app/Http/Middleware/Authenticate.php

@@ -16,7 +16,7 @@ class Authenticate extends Middleware
     {
         if (! $request->expectsJson()) {
             // Paksa redirect membawa prefix /sidata agar tidak terlempar ke root domain
-            return url('/sidata/login');
+            return redirect()->guest(route('login'));
         }
     }
 }

app/Http/Middleware/TrustProxies.php

@@ -2,22 +2,13 @@
 
 namespace App\Http\Middleware;
 
-use Illuminate\Http\Middleware\TrustProxies as Middleware;
-use Illuminate\Http\Request;
+use Fideloper\Proxy\TrustProxies as Middleware;
 
 class TrustProxies extends Middleware
 {
-    /**
-     * The trusted proxies for this application.
-     *
-     * @var array|string|null
-     */
     protected $proxies = '*';
 
-    /**
-     * The headers that should be used to detect proxies.
-     *
-     * @var int
-     */
-    protected $headers = Request::HEADER_X_FORWARDED_ALL;
+    protected $headers = [
+        \Illuminate\Http\Request::HEADER_X_FORWARDED_ALL,
+    ];
 }

app/Providers/RouteServiceProvider.php

@@ -17,7 +17,7 @@ class RouteServiceProvider extends ServiceProvider
      *
      * @var string
      */
-    public const HOME = '/sidata/home';
+    public const HOME = '/home';
 
     /**
      * The controller namespace for the application.

helm/sidata/templates/middleware.yaml

@@ -6,4 +6,4 @@
 # spec:
 #   stripPrefix:
 #     prefixes:
-#       - /sidata
+#       - /sidataprod