Merge pull request #77 from HideyoshiSolutions/fix/fixes-ingress-cert

fix: fixes ingress cert

.github/workflows/deploy.yml

@@ -2,6 +2,11 @@ name: ci
 
 on:
   push:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Tag to deploy'
+        required: false
 
 jobs:
   build:
@@ -122,10 +127,14 @@ jobs:
           SHORT_SHA=$(echo "${GITHUB_SHA}" | cut -c1-7)
           
           IMAGE_BASE="ghcr.io/${OWNER}/${REPO}"
-          IMAGE_TAG="sha-${SHORT_SHA}"
+          IMAGE_TAG="${{ github.event.inputs.tag || '' }}"
+          if [ -z "$IMAGE_TAG" ]; then
+            IMAGE_TAG="sha-$SHORT_SHA"
+          fi
           
           echo "IMAGE_BASE=${IMAGE_BASE}" >> $GITHUB_ENV
           echo "IMAGE_TAG=${IMAGE_TAG}" >> $GITHUB_ENV
+          echo "" >> $GITHUB_ENV
 
       - name: Import SOPS GPG Key
         run: |
@@ -139,7 +148,7 @@ jobs:
       - name: Decrypt SOPS Secrets Test
         run: |
           cd .k8s
-          sops -d secrets.enc.yml secrets.yml
+          sops -d secrets.enc.yml > secrets.yml
 
       - name: Apply Kubernetes Manifests - Configuration
         run: cat .k8s/config.template.yml | envsubst | kubectl apply -f -
@@ -156,7 +165,7 @@ jobs:
       - name: Apply Kubernetes Manifests - Deployment
         run: |
           cat .k8s/deployment.template.yml | envsubst | kubectl apply -f -
-          cat .k8s/deployment.yaml | envsubst | kubectl rollout status deployment/frontend-deployment -n ${KUBE_NAMESPACE} --timeout=120s
+          cat .k8s/deployment.template.yml | envsubst | kubectl rollout status deployment/frontend-deployment -n ${KUBE_NAMESPACE} --timeout=120s
 
       - name: Apply Kubernetes Manifests - Service
         run: cat .k8s/service.template.yml | envsubst | kubectl apply -f -

.k8s/ingress.template.yml

@@ -4,6 +4,7 @@ metadata:
     name: backend-ingress
     namespace: ${KUBE_NAMESPACE}
     annotations:
+        cert-manager.io/cluster-issuer: cluster-certificate-issuer
         kubernetes.io/ingress.class: nginx
         nginx.ingress.kubernetes.io/use-regex: "true"
         nginx.ingress.kubernetes.io/rewrite-target: /
@@ -11,7 +12,7 @@ spec:
     tls:
         -   hosts:
                 - ${KUBE_API_DOMAIN}
-            secretName: letsencrypt-cluster-certificate-tls
+            secretName: backend-tls
     rules:
         -   host: ${KUBE_API_DOMAIN}
             http: