From c8440548285e05d50099df0e96c4e51d94d91475 Mon Sep 17 00:00:00 2001
From: Marcus <bohessefm@gmail.com>
Date: Fri, 23 Jan 2026 16:51:40 -0300
Subject: [PATCH] ci: configura deploy automatico para k3s

---
 .forgejo/workflows/deploy.yaml | 25 +++++++++++++++++--------
 1 file changed, 17 insertions(+), 8 deletions(-)

diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml
index 59de432..cfe2d88 100644
--- a/.forgejo/workflows/deploy.yaml
+++ b/.forgejo/workflows/deploy.yaml
@@ -30,9 +30,11 @@ jobs:
           docker buildx inspect --bootstrap
 
       - name: Login to Forgejo Registry
-        run: |
-          # Tentativa manual de login caso a Action falhe no handshake
-          echo "${{ secrets.FORGEJO_TOKEN }}" | docker login pipe.gohorsejobs.com -u bohessefm --password-stdin
+        uses: docker/login-action@v3
+        with:
+          registry: pipe.gohorsejobs.com
+          username: bohessefm
+          password: ${{ secrets.FORGEJO_TOKEN }}
 
       - name: Build and Push Backend
         uses: docker/build-push-action@v5
@@ -63,16 +65,20 @@ jobs:
   deploy-to-k3s:
     needs: build-and-push
     runs-on: docker-ready
+    env:
+      DOCKER_API_VERSION: "1.43"
     defaults:
       run:
         shell: sh
     steps:
-      - name: Prepare Deploy
+      - name: Prepare Deploy (Git & Kubectl)
         run: |
           apk add --no-cache git curl
-          curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
-          chmod +x kubectl
-          mv kubectl /usr/local/bin/
+          if ! command -v kubectl >/dev/null; then
+            curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
+            chmod +x kubectl
+            mv kubectl /usr/local/bin/
+          fi
 
       - name: Checkout code
         uses: actions/checkout@v4
@@ -85,11 +91,14 @@ jobs:
 
       - name: Update Secrets and Apply
         run: |
+          # Criando o segredo com todas as variáveis necessárias (ajuste se faltar alguma)
           kubectl -n gohorsejobsdev delete secret backend-secrets --ignore-not-found
           kubectl -n gohorsejobsdev create secret generic backend-secrets \
             --from-literal=DATABASE_URL="${{ vars.DATABASE_URL }}" \
             --from-literal=JWT_SECRET="${{ vars.JWT_SECRET }}" \
-            --from-literal=MTU="${{ vars.MTU }}"
+            --from-literal=MTU="${{ vars.MTU }}" \
+            --from-literal=AWS_ACCESS_KEY_ID="${{ vars.AWS_ACCESS_KEY_ID }}" \
+            --from-literal=AWS_SECRET_ACCESS_KEY="${{ vars.AWS_SECRET_ACCESS_KEY }}"
           
           kubectl apply -f k8s/dev/ -n gohorsejobsdev
           kubectl -n gohorsejobsdev rollout restart deployment gohorse-backend-dev