Add Kaniko build workflow for backend

.gitea/workflows/build-deploy.yml

@@ -0,0 +1,72 @@
+name: Build and Deploy Backend
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v3
+    
+    - name: Build with Kaniko
+      run: |
+        # 用 kubectl 建立 Kaniko Job 去 build image
+        cat <<EOJOB | kubectl apply -f -
+        apiVersion: batch/v1
+        kind: Job
+        metadata:
+          name: build-backend-${{ github.sha }}
+          namespace: cloudforge
+        spec:
+          ttlSecondsAfterFinished: 600
+          template:
+            spec:
+              containers:
+              - name: kaniko
+                image: gcr.io/kaniko-project/executor:v1.9.0
+                args:
+                - "--dockerfile=Dockerfile"
+                - "--context=git://gitea-http.gitea.svc.cluster.local:3000/cloudforge-dev/dashboard-backend.git#main"
+                - "--destination=cloudforge-dashboard-backend:${{ github.sha }}"
+                - "--destination=cloudforge-dashboard-backend:latest"
+                - "--insecure"
+                - "--skip-tls-verify"
+                - "--no-push"
+                volumeMounts:
+                - name: docker-config
+                  mountPath: /kaniko/.docker
+              restartPolicy: Never
+              volumes:
+              - name: docker-config
+                emptyDir: {}
+        EOJOB
+    
+    - name: Wait for build
+      run: |
+        kubectl wait --for=condition=complete \
+          --timeout=600s \
+          job/build-backend-${{ github.sha }} \
+          -n cloudforge
+    
+    - name: Deploy Backend
+      run: |
+        # 更新 deployment image
+        kubectl set image deployment/dashboard-backend \
+          backend=cloudforge-dashboard-backend:${{ github.sha }} \
+          -n cloudforge \
+          --record
+    
+    - name: Verify Deployment
+      run: |
+        kubectl rollout status deployment/dashboard-backend \
+          -n cloudforge \
+          --timeout=300s
+    
+    - name: Cleanup
+      run: |
+        kubectl delete job build-backend-${{ github.sha }} -n cloudforge