+ ADD SHORT_SHA to GITHUB_ENV in cd.yaml

.gitea/workflows/cd.yaml

@@ -1,16 +1,18 @@
 on:
   push:
     branches: [ main ]
+env:
+  NAMESPACE: ${{ github.repository_owner }}
+  DOCKER_REGISTRY: ghcr.io
+  DOCKER_REPOSITORY: ${{ github.repository }}
 jobs:
   build-and-deploy:
+    env:
+      IMAGE: ${{ env.DOCKER_REGISTRY }}/${{ env.DOCKER_REPOSITORY }}
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v2
-    - uses: benjlevesque/short-sha@v3.0
+    - name: Install kpack-cli
-      id: short-sha
-      with:
-        length: 10
-    - name: Set up kpack-cli
       env:
         KPACK_CLI_VERSION: "0.13.0"
       working-directory: /tmp
@@ -22,7 +24,7 @@ jobs:
         sudo mv kp-binaries/kp-linux-amd64-${KPACK_CLI_VERSION} /usr/local/bin/kp
         sudo chmod +x /usr/local/bin/kp
         kp version
-    - name: Set up kubectl
+    - name: Install kubectl
       uses: azure/setup-kubectl@v4
     - name: Configure kubectl
       uses: azure/k8s-set-context@v1
@@ -31,16 +33,20 @@ jobs:
     - name: Update kpack image
       env:
         SHA: ${{ github.sha }}
-        SHORT_SHA: ${{ steps.short-sha.outputs.sha }}
       run: |
-        kp image patch tutorial-image --replace-additional-tag "ghcr.io/hvg-dev/php-test:sha-${SHORT_SHA}" --git-revision "${SHA}" -n test-builder
+        SHORT_SHA=$(git rev-parse --short HEAD)
+        echo "SHORT_SHA=${SHORT_SHA}" >> $GITHUB_ENV
+        IMAGE_NAME="${GITHUB_REPOSITORY#$GITHUB_REPOSITORY_OWNER/}-${GITHUB_REF##*/}"
+        echo "IMAGE_NAME=${IMAGE_NAME}" >> $GITHUB_ENV
+        kp image patch $IMAGE_NAME --replace-additional-tag "${IMAGE}:sha-${SHORT_SHA}" --git-revision "${SHA}" -n $NAMESPACE
+        kp image status $IMAGE_NAME -n $NAMESPACE
     - name: Wait for build to complete
       run: |
-        BUILD=$(kubectl -n test-builder get image tutorial-image -o jsonpath='{.status.buildCounter}')
+        BUILD=$(kubectl -n $NAMESPACE get image $IMAGE_NAME -o jsonpath='{.status.buildCounter}')
-        BUILD_REF=$(kubectl -n test-builder get image tutorial-image -o jsonpath='{.status.latestBuildRef}')
+        BUILD_REF=$(kubectl -n $NAMESPACE get image $IMAGE_NAME -o jsonpath='{.status.latestBuildRef}')
-        kp build logs tutorial-image -n test-builder --build ${BUILD}
+        kp build logs $IMAGE_NAME -n $NAMESPACE --build ${BUILD}
-        kp build status tutorial-image -n test-builder -b $BUILD
+        kp build status $IMAGE_NAME -n $NAMESPACE -b $BUILD
-        if [ "$(kubectl -n test-builder get build $BUILD_REF -o jsonpath='{.status.conditions[0].status}')" != "True" ]; then exit 1; fi
+        if [ "$(kubectl -n $NAMESPACE get build $BUILD_REF -o jsonpath='{.status.conditions[0].status}')" != "True" ]; then exit 1; fi
 #    - name: Update Kubernetes deployment
 #      run: |
 #        kubectl set image deployment/my-app my-app=<registry>/<repository>:${{ github.sha }}

k8s/gitea-runner.yaml

@@ -1,3 +1,25 @@
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: runner-role
+rules:
+- apiGroups: ["*"]
+  resources: ["*"]
+  verbs: ["*"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: runner-role-binding
+subjects:
+- kind: ServiceAccount
+  name: default
+roleRef:
+  kind: Role
+  name: runner-role
+  apiGroup: rbac.authorization.k8s.io
+---
 kind: PersistentVolumeClaim
 apiVersion: v1
 metadata: