Update .forgejo/workflows/deploy.yaml

.forgejo/workflows/deploy.yaml

@@ -28,14 +28,15 @@ jobs:
 
       - name: Set up Docker Buildx
         run: |
-          # Limpeza e criação robusta do builder
+          # Limpa builders antigos e força a criação de um novo para evitar cache de credenciais
           docker buildx rm local-builder || true
-          docker buildx create --name local-builder --driver docker-container
-          docker buildx use local-builder
+          docker buildx create --name local-builder --driver docker-container --use
           docker buildx inspect --bootstrap
 
       - name: Login to Forgejo Registry
         run: |
+          # Limpa logins antigos antes de entrar com o novo token
+          docker logout ${{ env.REGISTRY }}
           echo "${{ secrets.FORGEJO_TOKEN }}" | docker login ${{ env.REGISTRY }} -u bohessefm --password-stdin
 
       - name: Build and Push Backend
@@ -47,6 +48,8 @@ jobs:
           builder: local-builder
           provenance: false
           sbom: false
+          # Adicionamos o carregamento explícito de imagens locais se necessário
+          # e garantimos que ele use o builder recém-criado
           tags: |
             ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest
             ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }}
@@ -89,10 +92,8 @@ jobs:
           chmod 600 $HOME/.kube/config
           export KUBECONFIG=$HOME/.kube/config
 
-          # Garante o namespace
           kubectl create namespace gohorsejobsdev --dry-run=client -o yaml | kubectl apply -f -
 
-          # Segredos de ambiente
           kubectl -n gohorsejobsdev delete secret backend-secrets --ignore-not-found
           kubectl -n gohorsejobsdev create secret generic backend-secrets \
             --from-literal=MTU='${{ vars.MTU }}' \
@@ -113,7 +114,6 @@ jobs:
             --from-literal=AMQP_URL='${{ vars.AMQP_URL }}' \
             --from-literal=DATABASE_URL='${{ vars.DATABASE_URL }}'
 
-          # Secret de autenticação para o K3s conseguir baixar a imagem
           kubectl -n gohorsejobsdev create secret docker-registry forgejo-registry \
             --docker-server=pipe.gohorsejobs.com \
             --docker-username=bohessefm \
@@ -122,10 +122,8 @@ jobs:
 
           kubectl patch serviceaccount default -p '{"imagePullSecrets": [{"name": "forgejo-registry"}]}' -n gohorsejobsdev
 
-          # Deploy dos manifestos
           kubectl apply -f k8s/dev/ -n gohorsejobsdev
 
-          # Reinicia os pods para garantir a nova imagem e segredos
           kubectl rollout restart deployment/gohorse-backend-dev -n gohorsejobsdev || true
           kubectl rollout restart deployment/gohorse-backoffice-dev -n gohorsejobsdev || true