modified: README.md

modified:   deploy/README.md
renamed:    deploy/rbac.yaml -> deploy/cicd-rbac.yaml

.gitea/workflows/deploy.yaml

@@ -1,14 +1,17 @@
-name: Casa Home Assistant CI/CD Pipeline (testing)
+name: Casa Home Assistant CI/CD Pipeline
 
 on:
   push:
     branches:
       - fix/*
       - main
+      - master
   pull_request:
+  schedule:
+    - cron: '0 16 * * 0' # every sunday 4 pm
 
 jobs:
-  build:
+  deploy:
     runs-on: casa-vlan-cicd
     env:
       GITHUB_TEMP: ${{ runner.temp }}
@@ -40,9 +43,6 @@ jobs:
           INGRESS_ROUTES_MATCH: "${{ secrets.CASA_HOMEASSISTANT_INGRESS_ROUTES_MATCH }}"
           INGRESS_TLS_SECRET_NAME: "${{ secrets.CASA_HOMEASSISTANT_INGRESS_TLS_SECRET_NAME }}"
         run: |
-          #set -x for debugging
-          set -e
-          cd ${{ gitea.workspace }}
-          kubectl apply -f ./deploy/deployment.yaml
-          envsubst < ./deploy/service.template.yaml | kubectl apply -f -
+          kubectl apply -f ./deploy/deployment.yaml \
+          && envsubst < ./deploy/service.template.yaml | kubectl apply -f -
             

.gitea/workflows/fetch-actions.sh

@@ -1,28 +0,0 @@
-set -euo pipefail
-
-echo "fetching actions."
-
-# check arguments
-ERROR=0
-
-if [ -z "${RUNNER_TEMP}" ]; then
-    echo "❌ ERROR: missing env RUNNER_TEMP"
-    $ERROR=1
-fi
-
-if [ -z "${WORKSPACE}" ]; then
-    echo "❌ ERROR: missing env WORKSPACE"
-    $ERROR=1
-fi
-
-if [ "$ERROR" != 0 ]; then
-    exit "$ERROR"
-fi
-# end check arguments
-mkdir -p ${RUNNER_TEMP}/gitea_src
-mkdir -p ${WORKSPACE}/.gitea/limbo_actions
-git clone -b main --depth=1 https://git.limbosolutions.com/kb/gitea ${RUNNER_TEMP}/gitea_src
-
-for dir in ${RUNNER_TEMP}/gitea_src/.gitea/actions/*; do
-    ln -s "$dir" "${WORKSPACE}/.gitea/limbo_actions/$(basename "$dir")"
-done

README.md

@@ -2,10 +2,9 @@
 
 Welcome to my Home Assistant setup repository.  
 This repository documents and maintains the Home Assistant instance running in my home, hosted on casa server k3s cluster.  
-All essential containers, such as MQTT and speech recognition, are hosted on the same server for seamless integration.  
+Related containers, such as MQTT and speech recognition, are hosted on same cluster.  
 
-<!-- omit in toc -->
-## Table of Contents
+**Table of Contents:**
 
 - [Devices](#devices)
   - [Broadlink - RM4 Pro](#broadlink---rm4-pro)

deploy/README.md

@@ -44,8 +44,8 @@ All Environment variables requirements as set as secrets.
 
 [gitea workflow](../.gitea/workflows/deploy.yaml)
 
-## RBAC
+## cicd RBAC
 
 ```bash { cwd=../ }
-kubectl apply -f ./deploy/rbac.yaml
+kubectl apply -f ./deploy/cicd-rbac.yaml
 ```

deploy/deployment.yaml

@@ -33,9 +33,15 @@ spec:
     spec:
       dnsPolicy: ClusterFirstWithHostNet # ensures pod uses cluster DNS (CoreDNS) for service discovery even with host networking
       hostNetwork: true
+      nodeName: casa # force deploy to master node cluster
+      tolerations:
+        - key: "node-role.kubernetes.io/control-plane" # allow installation on control-plane
+          operator: "Exists"
+          effect: "NoSchedule"
       containers:
         - name: home-assistant
           image: "homeassistant/home-assistant"
+          imagePullPolicy: Always
           env:
             - name: TZ
               value: Europe/Lisbon  # set timezone