helm charts for open taco, ui adjustment for deploy

.dockerignore

@@ -61,3 +61,8 @@ libs/digger_config/**/.idea
 
 # flyctl launch added from libs/orchestrator/.gitignore
 libs/orchestrator/**/.idea
+
+# Don't copy node_modules - we install fresh in the container
+ui/node_modules
+ui/dist
+ui/.next

.github/workflows/backend-ee-release.yml

@@ -0,0 +1,96 @@
+name: Backend EE Docker Release
+
+on:
+  push:
+    tags:
+      - 'backend-ee/v*'
+
+permissions:
+  contents: write
+  packages: write
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}/digger-backend-ee
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Derive version
+        id: meta
+        run: |
+          TAG="${GITHUB_REF_NAME}"      # e.g. backend-ee/v1.2.3
+          VERSION="${TAG##*/}"          # v1.2.3
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: docker-meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=raw,value=${{ steps.meta.outputs.version }}
+            type=ref,event=tag
+            type=raw,value=latest
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: ./Dockerfile_backend_ee
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: ${{ steps.docker-meta.outputs.tags }}
+          labels: ${{ steps.docker-meta.outputs.labels }}
+          build-args: |
+            COMMIT_SHA=${{ github.sha }}
+            VERSION=${{ steps.meta.outputs.version }}
+
+  create-release:
+    needs: [build-and-push]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Derive version
+        id: meta
+        run: |
+          TAG="${GITHUB_REF_NAME}"      # e.g. backend-ee/v1.2.3
+          VERSION="${TAG##*/}"          # v1.2.3
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v1
+        with:
+          tag_name: ${{ github.ref_name }}
+          name: Digger Backend EE ${{ steps.meta.outputs.version }}
+          body: |
+            ## Digger Backend (Enterprise Edition) ${{ steps.meta.outputs.version }}
+
+            Terraform orchestration service with advanced features and multi-VCS support.
+
+            ### Docker Image
+            ```bash
+            docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.version }}
+            ```
+
+          draft: false
+          prerelease: false
+

.github/workflows/drift-release.yml

@@ -0,0 +1,96 @@
+name: Drift Docker Release
+
+on:
+  push:
+    tags:
+      - 'drift/v*'
+
+permissions:
+  contents: write
+  packages: write
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}/drift
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Derive version
+        id: meta
+        run: |
+          TAG="${GITHUB_REF_NAME}"      # e.g. drift/v1.2.3
+          VERSION="${TAG##*/}"          # v1.2.3
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: docker-meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=raw,value=${{ steps.meta.outputs.version }}
+            type=ref,event=tag
+            type=raw,value=latest
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: ./Dockerfile_drift
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: ${{ steps.docker-meta.outputs.tags }}
+          labels: ${{ steps.docker-meta.outputs.labels }}
+          build-args: |
+            COMMIT_SHA=${{ github.sha }}
+            VERSION=${{ steps.meta.outputs.version }}
+
+  create-release:
+    needs: [build-and-push]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Derive version
+        id: meta
+        run: |
+          TAG="${GITHUB_REF_NAME}"      # e.g. drift/v1.2.3
+          VERSION="${TAG##*/}"          # v1.2.3
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v1
+        with:
+          tag_name: ${{ github.ref_name }}
+          name: Drift ${{ steps.meta.outputs.version }}
+          body: |
+            ## Drift Detection Service ${{ steps.meta.outputs.version }}
+
+            Automated infrastructure drift detection and reporting service (Enterprise Edition).
+
+            ### Docker Image
+            ```bash
+            docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.version }}
+            ```
+
+          draft: false
+          prerelease: false
+

.github/workflows/helm-release.yml

@@ -14,6 +14,14 @@ permissions:
 jobs:
   release:
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        chart:
+          - digger-backend
+          - taco-drift
+          - taco-statesman
+          - taco-ui
+          - opentaco 
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -25,8 +33,8 @@ jobs:
         run: |
           echo "${{ secrets.GITHUB_TOKEN }}" | helm registry login ghcr.io -u ${{ github.actor }} --password-stdin
 
-      - name: Package and push chart
+      - name: Package and push ${{ matrix.chart }}
         run: |
-          cd helm-charts/digger-backend
+          cd helm-charts/${{ matrix.chart }}
           helm package .
-          helm push digger-backend-*.tgz oci://ghcr.io/diggerhq/helm-charts
+          helm push ${{ matrix.chart }}-*.tgz oci://ghcr.io/diggerhq/helm-charts

.github/workflows/ui-release.yml

@@ -0,0 +1,96 @@
+name: UI Docker Release
+
+on:
+  push:
+    tags:
+      - 'ui/v*'
+
+permissions:
+  contents: write
+  packages: write
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}/taco-ui
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Derive version
+        id: meta
+        run: |
+          TAG="${GITHUB_REF_NAME}"      # e.g. ui/v1.2.3
+          VERSION="${TAG##*/}"          # v1.2.3
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: docker-meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=raw,value=${{ steps.meta.outputs.version }}
+            type=ref,event=tag
+            type=raw,value=latest
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: ./Dockerfile_ui
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: ${{ steps.docker-meta.outputs.tags }}
+          labels: ${{ steps.docker-meta.outputs.labels }}
+          build-args: |
+            COMMIT_SHA=${{ github.sha }}
+            VERSION=${{ steps.meta.outputs.version }}
+
+  create-release:
+    needs: [build-and-push]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Derive version
+        id: meta
+        run: |
+          TAG="${GITHUB_REF_NAME}"      # e.g. ui/v1.2.3
+          VERSION="${TAG##*/}"          # v1.2.3
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v1
+        with:
+          tag_name: ${{ github.ref_name }}
+          name: Taco UI ${{ steps.meta.outputs.version }}
+          body: |
+            ## Taco UI ${{ steps.meta.outputs.version }}
+
+            Web-based frontend for OpenTaco infrastructure management platform.
+
+            ### Docker Image
+            ```bash
+            docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.version }}
+            ```
+
+          draft: false
+          prerelease: false
+

.gitignore

@@ -37,6 +37,16 @@ data/
 
 
 taco/data/
+.registry-config
+.secrets/
+
+# Helm chart archives (generated by helm dependency update)
+**/charts/*.tgz
+**/Chart.lock
+
+# Helm values with actual infrastructure config (team-specific)
+helm-charts/opentaco/values-production.yaml
+helm-charts/opentaco/values-test.yaml
 
 # Atlas migration checksums (auto-generated)
 **/migrations/**/atlas.sum

Dockerfile_backend_ee

@@ -43,7 +43,7 @@ RUN curl -sSf https://atlasgo.sh | sh
 
 
 # Set gin to production
-#ENV GIN_MODE=release
+ENV GIN_MODE=release
 
 # Expose the running port
 EXPOSE 3000

Dockerfile_drift

@@ -35,7 +35,7 @@ RUN curl -sSf https://atlasgo.sh | sh
 
 
 # Set gin to production
-#ENV GIN_MODE=release
+ENV GIN_MODE=release
 
 # Expose the running port
 EXPOSE 3000