chore(docker): add root Dockerfile pinning ubi8/openjdk-21:1.21 + UID 1001 for lionsctl pipeline

.gitea/workflows/ci.yml

@@ -0,0 +1,76 @@
+# ============================================================================
+# Template — .gitea/workflows/ci.yml
+# Drop this file into each app repo (adjust LIONS_JAVA_VERSION +
+# LIONS_APP_NAME + optional --deploy-repo-url). It runs inside the
+# registry.lions.dev/lionsdev/lionsctl-ci:latest image, so lionsctl,
+# kubectl, helm, docker CLI, JDK 17+21 and Maven are all pre-installed.
+#
+# Required Gitea repo secrets:
+#   LIONS_REGISTRY_USERNAME   (typically "lionsregistry")
+#   LIONS_REGISTRY_PASSWORD
+#   LIONS_GIT_USERNAME        (typically "lionsdev")
+#   LIONS_GIT_ACCESS_TOKEN    (Gitea PAT with write:repository, write:package)
+#   LIONS_GIT_PASSWORD        (Gitea password for same user — Helm mode)
+#   SMTP_HOST SMTP_PORT SMTP_USERNAME SMTP_PASSWORD SMTP_FROM
+# ============================================================================
+name: CI/CD Pipeline
+
+on:
+  push:
+    branches: [ main ]
+  workflow_dispatch: {}
+
+env:
+  # Adjust per repo:
+  #   - unionflow-server-impl-quarkus      -> 21
+  #   - all others                         -> 17
+  LIONS_JAVA_VERSION: "17"
+  LIONS_CLUSTER: "k1"
+
+jobs:
+  pipeline:
+    runs-on: ubuntu-latest
+    container:
+      image: registry.lions.dev/lionsdev/lionsctl-ci:latest
+      credentials:
+        username: ${{ secrets.LIONS_REGISTRY_USERNAME }}
+        password: ${{ secrets.LIONS_REGISTRY_PASSWORD }}
+      # Mount the host docker socket so `docker build/push` inside the
+      # container hits the runner's daemon (DinD-free).
+      volumes:
+        - /var/run/docker.sock:/var/run/docker.sock
+
+    steps:
+      - name: Show tooling
+        run: |
+          lionsctl --version || true
+          docker --version
+          kubectl version --client=true
+          helm version --short
+          mvn --version | head -n2
+
+      - name: Pipeline deploy
+        env:
+          LIONS_REGISTRY_USERNAME: ${{ secrets.LIONS_REGISTRY_USERNAME }}
+          LIONS_REGISTRY_PASSWORD: ${{ secrets.LIONS_REGISTRY_PASSWORD }}
+          LIONS_GIT_USERNAME:      ${{ secrets.LIONS_GIT_USERNAME }}
+          LIONS_GIT_ACCESS_TOKEN:  ${{ secrets.LIONS_GIT_ACCESS_TOKEN }}
+          LIONS_GIT_PASSWORD:      ${{ secrets.LIONS_GIT_PASSWORD }}
+          SMTP_HOST:               ${{ secrets.SMTP_HOST }}
+          SMTP_PORT:               ${{ secrets.SMTP_PORT }}
+          SMTP_USERNAME:           ${{ secrets.SMTP_USERNAME }}
+          SMTP_PASSWORD:           ${{ secrets.SMTP_PASSWORD }}
+          SMTP_FROM:               ${{ secrets.SMTP_FROM }}
+        # No actions/checkout — lionsctl clones internally using git_access_token.
+        run: |
+          # For btpxpress-backend add:  --deploy-repo-url https://git.lions.dev/lionsdev/btpxpress-server-k1
+          # For btpxpress-frontend add: --deploy-repo-url https://git.lions.dev/lionsdev/btpxpress-client-k1
+          lionsctl pipeline \
+            -u ${{ gitea.server_url }}/${{ gitea.repository }} \
+            -b ${{ gitea.ref_name }} \
+            -j ${{ env.LIONS_JAVA_VERSION }} \
+            -e production \
+            -c ${{ env.LIONS_CLUSTER }} \
+            -p prod \
+            --deploy-repo-url https://git.lions.dev/lionsdev/lionsdev-client-impl-quarkus-k1 \
+            -m admin@lions.dev

Dockerfile

@@ -0,0 +1,22 @@
+# Dockerfile for lionsdev-client-impl-quarkus
+# Used by lionsctl pipeline. Expects `mvn clean package -Pprod` to have produced target/quarkus-app/ (fast-jar).
+FROM registry.access.redhat.com/ubi8/openjdk-21:1.21
+
+ENV LANGUAGE='en_US:en'
+
+COPY --chown=1001:1001 target/quarkus-app/lib/      /deployments/lib/
+COPY --chown=1001:1001 target/quarkus-app/*.jar     /deployments/
+COPY --chown=1001:1001 target/quarkus-app/app/      /deployments/app/
+COPY --chown=1001:1001 target/quarkus-app/quarkus/  /deployments/quarkus/
+
+USER 1001
+
+EXPOSE 8080
+
+ENV JAVA_OPTS="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
+ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=30s --retries=3 \
+  CMD curl -f http://localhost:8080/health || exit 1
+
+ENTRYPOINT [ "java", "-jar", "/deployments/quarkus-run.jar" ]