ci: bring k3s deploy workflow over from main

This commit only ever landed on main (from when main was still the
default branch); dev's copy was still the stale blue-green version.
Bringing main's file over as-is before making dev the default branch,
so neither branch ends up missing it.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

.gitea/workflows/deploy.yml

@@ -1,10 +1,10 @@
-name: Deploy im-manager (Blue-Green)
+name: Deploy im-manager (k3s test cluster)
 
 on:
   workflow_dispatch:
     inputs:
       image_tag:
-        description: '镜像tag，留空则使用commit短哈希'
+        description: '镜像tag，默认为 test（与集群 kustomization 里的 newTag 一致）'
         required: false
 
 jobs:
@@ -17,26 +17,21 @@ jobs:
         id: vars
         run: |
           TAG="${{ github.event.inputs.image_tag }}"
-          [ -z "$TAG" ] && TAG=$(git rev-parse --short HEAD)
+          [ -z "$TAG" ] && TAG=test
           echo "tag=$TAG" >> "$GITHUB_OUTPUT"
 
-      - name: 构建镜像(前端+后端一体，自包含多阶段构建)
+      - name: 登录镜像仓库
-        run: docker build -t im-manager:${{ steps.vars.outputs.tag }} .
+        run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login git.118im.com -u admin --password-stdin
 
-      - name: 蓝绿部署
+      - name: 构建并推送镜像(前端+后端一体，自包含多阶段构建)
-        env:
-          MYSQL_DSN: ${{ secrets.MYSQL_DSN }}
-          REDIS_ADDR: ${{ secrets.REDIS_ADDR }}
-          REDIS_DB: ${{ secrets.REDIS_DB }}
-          REDIS_PASSWORD: ${{ secrets.REDIS_PASSWORD }}
-          TOKEN_SECRET_KEY: ${{ secrets.TOKEN_SECRET_KEY }}
-          IM_ADMIN_API_BASE_URL: ${{ secrets.IM_ADMIN_API_BASE_URL }}
-          IM_ADMIN_API_SERVICE_ID: ${{ secrets.IM_ADMIN_API_SERVICE_ID }}
-          IM_ADMIN_API_SECRET: ${{ secrets.IM_ADMIN_API_SECRET }}
-          IM_INTERNAL_API_BASE_URL: ${{ secrets.IM_INTERNAL_API_BASE_URL }}
-          IM_INTERNAL_API_SERVICE_NAME: ${{ secrets.IM_INTERNAL_API_SERVICE_NAME }}
-          IM_INTERNAL_API_SECRET: ${{ secrets.IM_INTERNAL_API_SECRET }}
-          IM_CONFIG_API_SERVICE_NAME: ${{ secrets.IM_CONFIG_API_SERVICE_NAME }}
-          IM_CONFIG_API_SECRET: ${{ secrets.IM_CONFIG_API_SECRET }}
         run: |
-          IMAGE=im-manager:${{ steps.vars.outputs.tag }} /opt/apps/im-manager/deploy.sh
+          docker build -t git.118im.com/im_team/im-manager:${{ steps.vars.outputs.tag }} .
+          docker push git.118im.com/im_team/im-manager:${{ steps.vars.outputs.tag }}
+
+      - name: 部署到k3s测试集群
+        run: |
+          mkdir -p ~/.kube
+          echo "${{ secrets.KUBECONFIG }}" > ~/.kube/config
+          chmod 600 ~/.kube/config
+          kubectl rollout restart deployment/im-manager -n manager-system
+          kubectl rollout status deployment/im-manager -n manager-system --timeout=120s