feat: イメージタグを SHA ベースにして ArgoCD 自動デプロイを実現

- values.yaml: container.image を repository + tag に分離
- deployment.yaml: 分離後の形式でイメージ参照
- deploy.yaml: SHA タグでビルド・push + values.yaml 自動更新

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Y-RyuZU

.github/workflows/deploy.yaml

@@ -47,13 +47,29 @@ jobs:
           username: ${{ env.NORMALIZED_OWNER_NAME }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      # 5. Docker イメージをビルド
+      # 5. Docker イメージをビルド（latest + SHA タグ）
       - name: Build Docker Image
         run: |
+          IMAGE=ghcr.io/${{ env.NORMALIZED_OWNER_NAME }}/${{ env.NORMALIZED_REPOSITORY_NAME }}
+          SHORT_SHA=${GITHUB_SHA::7}
           docker build -f infra/docker/Dockerfile . \
-            -t ghcr.io/${{ env.NORMALIZED_OWNER_NAME }}/${{ env.NORMALIZED_REPOSITORY_NAME }}:latest
+            -t ${IMAGE}:latest \
+            -t ${IMAGE}:${SHORT_SHA}
+          echo "SHORT_SHA=${SHORT_SHA}" >> $GITHUB_ENV
 
       # 6. Docker イメージをプッシュ
       - name: Push Docker Image
         run: |
-          docker push ghcr.io/${{ env.NORMALIZED_OWNER_NAME }}/${{ env.NORMALIZED_REPOSITORY_NAME }}:latest
+          IMAGE=ghcr.io/${{ env.NORMALIZED_OWNER_NAME }}/${{ env.NORMALIZED_REPOSITORY_NAME }}
+          docker push ${IMAGE}:latest
+          docker push ${IMAGE}:${{ env.SHORT_SHA }}
+
+      # 7. values.yaml のイメージタグを更新して push
+      - name: Update image tag in values.yaml
+        run: |
+          sed -i "s/^  tag: .*/  tag: ${{ env.SHORT_SHA }}/" infra/k8s/values.yaml
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add infra/k8s/values.yaml
+          git diff --staged --quiet || git commit -m "ci: update image tag to ${{ env.SHORT_SHA }}"
+          git push

infra/k8s/templates/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: {{ .Values.appName }}-container
-          image: {{ .Values.container.image }}
+          image: {{ .Values.container.repository }}:{{ .Values.container.tag }}
           ports:
             - containerPort: {{ .Values.container.port }}
           resources:

infra/k8s/values.yaml

@@ -4,7 +4,8 @@ source:
   repoURL: 'git@github.com:Y-RyuZU/ReactPortfolio.git'
   targetRevision: main
 container:
-  image: ghcr.io/y-ryuzu/react-portfolio:latest
+  repository: ghcr.io/y-ryuzu/react-portfolio
+  tag: latest
   port: 3000
 resources:
   limits: