refactor: simplified single-job pipeline with offline Nexus support

.gitea/workflows/kub-deploy.yml

@@ -6,112 +6,67 @@ on:
       - kub-stage
 
 env:
-  REGISTRY: gitea-svc:3000
+  REGISTRY: 194.5.195.53:30080
   IMAGE_NAME: admin/frontoffice-bff
-  NEXUS_URL: http://194.5.195.53:32081/repository/foursat-nuget-hosted/index.json
-  NEXUS_USER: admin
-  NEXUS_PASS: 87zH26nbqT
+  K8S_SERVER: 194.5.195.53
 
 jobs:
-  # Job 1: Pack and Push Protobuf packages
-  publish-packages:
+  build-and-deploy:
     runs-on: ubuntu-latest
     container:
-      image: 194.5.195.53:32082/dotnet/sdk:9.0
-    steps:
-      - name: Checkout code
-        run: |
-          apt-get update -qq && apt-get install -y git -qq
-          git clone --depth 1 --branch kub-stage http://gitea-svc:3000/admin/FrontOffice.BFF.git .
-          git log -1 --format="%H %s"
-
-      - name: Pack and Push Protobuf packages
-        run: |
-          echo "📦 Looking for Protobuf projects..."
-          
-          PROTO_PROJECTS=$(find . -name "*Protobuf*.csproj" -type f)
-          
-          if [ -z "$PROTO_PROJECTS" ]; then
-            echo "⚠️ No Protobuf projects found"
-            exit 0
-          fi
-          
-          echo "Found $(echo "$PROTO_PROJECTS" | wc -l) Protobuf projects"
-          echo ""
-          
-          for proj in $PROTO_PROJECTS; do
-            proj_name=$(basename "$proj" .csproj)
-            echo "📦 $proj_name"
-            
-            proj_dir=$(dirname "$proj")
-            
-            dotnet restore "$proj" -v q
-            dotnet build "$proj" -c Release --no-restore -v q
-            dotnet pack "$proj" -c Release --no-build -o "$proj_dir/nupkg" -v q
-            
-            for nupkg in $proj_dir/nupkg/*.nupkg; do
-              if [ -f "$nupkg" ]; then
-                dotnet nuget push "$nupkg" \
-                  --source "${{ env.NEXUS_URL }}" \
-                  --api-key "${{ env.NEXUS_USER }}:${{ env.NEXUS_PASS }}" \
-                  --skip-duplicate \
-                  --allow-insecure-connections 2>/dev/null && echo "  ✅ Pushed" || echo "  ⏭️ Skipped"
-              fi
-            done
-          done
-          
-          echo "✅ All Protobuf packages processed!"
-
-  # Job 2: Build and Deploy Docker image
-  build:
-    runs-on: ubuntu-latest
-    needs: publish-packages
-    container:
-      image: docker:latest
+      image: 194.5.195.53:32082/docker:latest
       options: --privileged
     steps:
-      - name: Start Docker daemon with insecure registry
+      - name: Start Docker daemon
         run: |
           mkdir -p /etc/docker
           cat > /etc/docker/daemon.json << 'DAEMON'
           {
-            "insecure-registries": ["194.5.195.53:30080", "194.5.195.53:32500", "194.5.195.53:32082", "gitea-svc:3000"]
+            "insecure-registries": ["194.5.195.53:30080", "194.5.195.53:32500", "194.5.195.53:32082"]
           }
           DAEMON
           dockerd &
-          for i in $(seq 1 30); do
-            docker info >/dev/null 2>&1 && break || sleep 2
-          done
-          docker info
+          for i in $(seq 1 30); do docker info >/dev/null 2>&1 && break || sleep 2; done
 
       - name: Checkout code
         run: |
           git clone --depth 1 --branch kub-stage http://gitea-svc:3000/admin/FrontOffice.BFF.git .
-          git log -1 --format="%H %s"
+
+      - name: Publish Protobuf packages
+        run: |
+          echo "📦 Publishing Protobuf packages..."
+          docker run --rm -v $(pwd):/src -w /src \
+            194.5.195.53:32082/dotnet/sdk:9.0 sh -c '
+              for proj in $(find . -name "*Protobuf*.csproj" -type f); do
+                echo "📦 $proj"
+                dotnet restore "$proj"
+                dotnet build "$proj" -c Release --no-restore
+                dotnet pack "$proj" -c Release --no-build -o "$(dirname $proj)/nupkg"
+                for nupkg in $(dirname $proj)/nupkg/*.nupkg; do
+                  [ -f "$nupkg" ] && dotnet nuget push "$nupkg" \
+                    --source "http://194.5.195.53:32081/repository/foursat-nuget-hosted/index.json" \
+                    --api-key "admin:87zH26nbqT" \
+                    --skip-duplicate --allow-insecure-connections || true
+                done
+              done
+            '
+          echo "✅ Protobuf packages done!"
 
       - name: Build Docker Image
         run: |
-          cd src
-          # استفاده از cached base images (بدون دانلود)
-          DOCKER_BUILDKIT=0 docker build -f FrontOffice.BFF.WebApi/Dockerfile \
-                       -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }} \
-                       -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest \
-                       .
-                       .
-
+          docker build -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest -f src/FrontOffice.BFF.WebApi/Dockerfile .
 
       - name: Push to Registry
         run: |
           echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login ${{ env.REGISTRY }} -u admin --password-stdin
-          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}
           docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
 
-      - name: Build and Push Complete
+      - name: Deploy to Kubernetes
         run: |
-          echo "🎉 Build and push completed successfully!"
-          echo "📦 Image pushed to: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}"
-          echo "📦 Latest tag: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest"
-          echo ""
-          echo "🚀 To deploy manually on server:"
-          echo "kubectl set image deployment/frontoffice-bff frontoffice-bff=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}"
-    
+          which sshpass || apk add --no-cache openssh-client sshpass
+          export SSHPASS="${{ secrets.SERVER_PASSWORD }}"
+          sshpass -e ssh -o StrictHostKeyChecking=no root@${{ env.K8S_SERVER }} "
+            kubectl rollout restart deployment/frontoffice-bff
+            kubectl rollout status deployment/frontoffice-bff --timeout=180s
+          "
+          echo "✅ Deployed!"