From 659ab2c8c4dd91ca8bc7d5ac9a19c4aefebe233e Mon Sep 17 00:00:00 2001
From: cialloo <admin@cialloo.com>
Date: Mon, 6 Oct 2025 14:32:32 +0800
Subject: [PATCH] Refactor CI/CD workflows to remove input parameters and use
 secrets for image tag and Kubernetes configurations

---
 .github/workflows/cd.yml | 31 +++++--------------------------
 .github/workflows/ci.yml |  8 +-------
 2 files changed, 6 insertions(+), 33 deletions(-)

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 2a06628..217ae52 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -13,35 +13,14 @@ on:
     branches:
       - dev
   workflow_dispatch:
-    inputs:
-      image_tag:
-        description: 'Docker image tag to deploy (e.g., latest, v1.0.0)'
-        required: false
-        default: 'latest'
-        type: string
-      namespace:
-        description: 'Kubernetes namespace (e.g., production, staging)'
-        required: false
-        default: 'default'
-        type: string
-      ingress_host:
-        description: 'Ingress host domain (e.g., www.example.com)'
-        required: false
-        default: 'www.cialloo.com'
-        type: string
-      force_restart:
-        description: 'Force rollout restart (restarts pods even if no changes)'
-        required: false
-        default: true
-        type: boolean
 
 # Environment variables available to all jobs
 env:
   # Kubernetes configuration
   KUBECONFIG_DATA: ${{ secrets.KUBECONFIG_DATA }}
   KUBERNETES_URL: ${{ secrets.KUBERNETES_URL }}
-  KUBERNETES_NAMESPACE: ${{ inputs.namespace || secrets.KUBERNETES_NAMESPACE }}
-  KUBERNETES_INGRESS_HOST: ${{ inputs.ingress_host || secrets.KUBERNETES_INGRESS_HOST }}
+  KUBERNETES_NAMESPACE: ${{ secrets.KUBERNETES_NAMESPACE }}
+  KUBERNETES_INGRESS_HOST: ${{ secrets.KUBERNETES_INGRESS_HOST }}
   
   # Container registry configuration
   CONTAINER_REGISTRY_URL: ${{ secrets.CONTAINER_REGISTRY_URL }}
@@ -49,14 +28,14 @@ env:
   CONTAINER_REGISTRY_NAMESPACE: ${{ secrets.CONTAINER_REGISTRY_NAMESPACE }}
   CONTAINER_REGISTRY_PASSWORD: ${{ secrets.CONTAINER_REGISTRY_PASSWORD }}
   CONTAINER_IMAGE_NAME: ${{ secrets.CONTAINER_IMAGE_NAME }}
-  CONTAINER_IMAGE_TAG: ${{ inputs.image_tag || 'latest' }}
-  FORCE_RESTART: ${{ inputs.force_restart }}
+  CONTAINER_IMAGE_TAG: ${{ secrets.CONTAINER_IMAGE_TAG }}
+  FORCE_RESTART: ${{ secrets.KUBERNETES_FORCE_RESTART }}
 
 jobs:
   deploy:
     name: Deploy to Kubernetes
     runs-on: ubuntu-latest
-    # Only run if CI workflow succeeded (for workflow_run trigger)
+    # Only run if CI workflow succeeded or manually dispatched
     if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
     
     steps:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8571c4d..d7aa469 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,12 +10,6 @@ on:
     branches:
       - dev
   workflow_dispatch:
-    inputs:
-      image_tag:
-        description: 'Docker image tag (e.g., latest, v1.0.0)'
-        required: false
-        default: 'latest'
-        type: string
 
 # Environment variables available to all jobs
 env:
@@ -24,7 +18,7 @@ env:
   CONTAINER_REGISTRY_NAMESPACE: ${{ secrets.CONTAINER_REGISTRY_NAMESPACE }}
   CONTAINER_REGISTRY_PASSWORD: ${{ secrets.CONTAINER_REGISTRY_PASSWORD }}
   CONTAINER_IMAGE_NAME: ${{ secrets.CONTAINER_IMAGE_NAME }}
-  CONTAINER_IMAGE_TAG: ${{ inputs.image_tag || 'latest' }}
+  CONTAINER_IMAGE_TAG: ${{ secrets.CONTAINER_IMAGE_TAG }}
 
 jobs:
   build-and-push: