ajuste no drone.yml

.drone.yml

@@ -3,38 +3,29 @@ type: kubernetes
 name: deploy-backend
 
 steps:
-  # -----------------------------------------------------------
+  # BUILD & PUSH para Harbor
-  # BUILD & PUSH PARA O HARBOR
-  # -----------------------------------------------------------
   - name: build-and-push-backend
     image: plugins/docker:latest
-
     environment:
       DOCKER_USERNAME:
         from_secret: HARBOR_USERNAME
       DOCKER_PASSWORD:
         from_secret: HARBOR_PASSWORD
-
     settings:
       registry: in.gohorsejobs.com
       repo: gohorsejobs/gohorsejobs-backend
       tags:
         - latest
-
       context: backend
       dockerfile: backend/Dockerfile
-
+      insecure: true                   # Use apenas se necessário (HTTP ou certificado self-signed)
-      insecure: true
+      insecure_skip_verify: true       # Use apenas se necessário
-      insecure_skip_verify: true
       debug: true
       mtu: 0
 
-  # -----------------------------------------------------------
+  # DEPLOY no K3S
-  # DEPLOY NO K3S
-  # -----------------------------------------------------------
   - name: deploy-backend
     image: bitnami/kubectl:latest
-
     environment:
       KUBERNETES_SERVER:
         from_secret: K3S_SERVER
@@ -44,10 +35,8 @@ steps:
         from_secret: K3S_CLIENT_CERT
       KUBERNETES_CLIENT_KEY:
         from_secret: K3S_CLIENT_KEY
-
     commands:
       - mkdir -p ~/.kube
-
       - |
         cat <<EOF > ~/.kube/config
         apiVersion: v1
@@ -70,7 +59,6 @@ steps:
             namespace: gohorsejobs
         current-context: drone-context
         EOF
-
       - echo "Deploying backend..."
       - kubectl apply -f k8s/backend-deployment.yaml
       - kubectl apply -f k8s/backend-service.yaml

k8s/backend-deployment.yaml

@@ -13,24 +13,19 @@ spec:
     metadata:
       labels:
         app: gohorse-backend
-
+      # Para usar Infisical Sidecar, descomente as linhas abaixo:
-      # Se quiser ativar Infisical Sidecar, descomente abaixo
       # annotations:
       #   infisical.com/managed: "true"
       #   infisical.com/secret-path: "prod/backend"
-
     spec:
       containers:
         - name: backend
           image: in.gohorsejobs.com/gohorsejobs/gohorsejobs-backend:latest
           imagePullPolicy: Always
-
           ports:
             - containerPort: 3000
-
           env:
             - name: NODE_ENV
               value: "production"
-
       imagePullSecrets:
         - name: harbor-registry