chore: trigger branch helm/image publish

Author: sohamjadiya-git

.github/workflows/release-helm-chart-by-branch.yaml

@@ -19,6 +19,7 @@ concurrency:
 env:
   # OCI repo will be computed and exported later to ensure lowercase
   OCI_REPO: ""
+  NODEOPS_REGISTRY: reg.nodeops.xyz
 
 jobs:
   release:
@@ -79,6 +80,32 @@ jobs:
           helm package deployments/kubernetes/chart/reloader --destination dist
           ls -l dist
 
+      - name: Set up Docker Buildx (for NodeOps image build)
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to NodeOps Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.NODEOPS_REGISTRY }}
+          username: ${{ secrets.NODEOPS_REGISTRY_USERNAME }}
+          password: ${{ secrets.NODEOPS_REGISTRY_PASSWORD }}
+
+      - name: Build and Push NodeOps Images (version + vault-watcher)
+        run: |
+          set -e
+          ver='${{ steps.newver.outputs.version }}'
+          build_date=$(date -u +'%Y-%m-%dT%H:%M:%SZ')
+          echo "Building multi-arch image for version $ver"
+          docker buildx build \
+            --platform linux/amd64,linux/arm64 \
+            --build-arg VERSION=$ver \
+            --build-arg COMMIT=${{ github.sha }} \
+            --build-arg BUILD_DATE=$build_date \
+            -t ${{ env.NODEOPS_REGISTRY }}/devops/reloader:$ver \
+            -t ${{ env.NODEOPS_REGISTRY }}/devops/reloader:vault-watcher \
+            --push .
+          echo "NodeOps images pushed: $ver and vault-watcher"
+
       - name: Compute OCI repo (lowercase owner)
         run: |
           OWNER_LOWER=$(echo "${{ github.repository_owner }}" | tr 'A-Z' 'a-z')

.github/workflows/release.yaml

@@ -11,6 +11,7 @@ env:
   KUBERNETES_VERSION: "1.30.0"
   KIND_VERSION: "0.23.0"
   REGISTRY: ghcr.io
+  NODEOPS_REGISTRY: reg.nodeops.xyz
 
 jobs:
   release:

deployments/kubernetes/chart/reloader/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 name: reloader
 description: Reloader chart that runs on kubernetes
-version: 0.1.10
+version: 0.1.11
 appVersion: v1.4.10
 keywords:
   - Reloader

deployments/kubernetes/manifests/reloader-helmchart.yaml

@@ -7,20 +7,33 @@ spec:
   targetNamespace: stakater
   chart: reloader
   # Set this to the chart version you published to your GitHub Pages repo
-  version: 0.1.10
+  version: 0.1.11
   repo: https://NodeOps-app.github.io/Reloader
   valuesContent: |
+    # Source: values-vault.yaml (inlined to override defaults)
+    image:
+      repository: reg.nodeops.xyz/devops/reloader
+      tag: vault-watcher
+      pullPolicy: IfNotPresent
     reloader:
-      logLevel: info
+      reloadStrategy: annotations
+      logLevel: debug
+      enableMetricsByNamespace: true
+      custom_annotations:
+        vault: "vault.reloader.stakater.com/reload"
       vaultTrigger:
         enabled: false
+        rotationToken: ""
       vaultWatcher:
         enabled: true
-        address: "https://vault.example.com"  # change to your Vault URL
+        address: "https://vault.nodeops.xyz"
+        token: ""            # prefer Secret env mapping or Kubernetes auth
         pollInterval: "45s"
-        # Do NOT set token here; read from secret below via env mapping
+        skipTLSVerify: false
       deployment:
         env:
           existing:
-            vault-creds:   # Secret name (must exist in targetNamespace)
-              VAULT_TOKEN: VAULT_TOKEN  # env var name : secret key
+            vault-creds:
+              VAULT_TOKEN: VAULT_TOKEN
+    # Secret creation example (must exist before install):
+    # kubectl -n stakater create secret generic vault-creds --from-literal=VAULT_TOKEN="<token>"