ci: add prod overlay update on semver tags

Author: moabdelazem

.github/workflows/ci.yaml

@@ -3,6 +3,7 @@ name: CI
 on:
   push:
     branches: [main]
+    tags: ["v*"]
 
 env:
   DOCKER_IMAGE: moabdelazem/gitops-app
@@ -12,16 +13,35 @@ jobs:
   build-and-push:
     runs-on: ubuntu-latest
 
+    outputs:
+      image_tag: ${{ steps.meta.outputs.IMAGE_TAG }}
+      is_release: ${{ steps.meta.outputs.IS_RELEASE }}
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
       - name: Set build metadata
         id: meta
         run: |
-          echo "VERSION=${GITHUB_SHA::7}" >> $GITHUB_OUTPUT
-          echo "GIT_COMMIT=${GITHUB_SHA::7}" >> $GITHUB_OUTPUT
-          echo "BUILD_TIME=$(date -u '+%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
+          GIT_COMMIT=${GITHUB_SHA::7}
+          BUILD_TIME=$(date -u '+%Y-%m-%dT%H:%M:%SZ')
+
+          if [[ "$GITHUB_REF" == refs/tags/v* ]]; then
+            VERSION=${GITHUB_REF#refs/tags/}
+            IMAGE_TAG=$VERSION
+            IS_RELEASE=true
+          else
+            VERSION=$GIT_COMMIT
+            IMAGE_TAG=$GIT_COMMIT
+            IS_RELEASE=false
+          fi
+
+          echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
+          echo "GIT_COMMIT=$GIT_COMMIT" >> $GITHUB_OUTPUT
+          echo "BUILD_TIME=$BUILD_TIME" >> $GITHUB_OUTPUT
+          echo "IMAGE_TAG=$IMAGE_TAG" >> $GITHUB_OUTPUT
+          echo "IS_RELEASE=$IS_RELEASE" >> $GITHUB_OUTPUT
 
       - name: Login to Docker Hub
         uses: docker/login-action@v3
@@ -39,7 +59,7 @@ jobs:
             GIT_COMMIT=${{ steps.meta.outputs.GIT_COMMIT }}
             BUILD_TIME=${{ steps.meta.outputs.BUILD_TIME }}
           tags: |
-            ${{ env.DOCKER_IMAGE }}:${{ steps.meta.outputs.VERSION }}
+            ${{ env.DOCKER_IMAGE }}:${{ steps.meta.outputs.IMAGE_TAG }}
             ${{ env.DOCKER_IMAGE }}:latest
 
   update-manifests:
@@ -53,15 +73,22 @@ jobs:
           repository: ${{ env.MANIFESTS_REPO }}
           token: ${{ secrets.MANIFESTS_PAT }}
 
-      - name: Update dev overlay image tag
+      - name: Update dev overlay
+        if: needs.build-and-push.outputs.is_release == 'false'
         run: |
           cd overlays/dev
-          sed -i "s|newTag:.*|newTag: ${GITHUB_SHA::7}|" kustomization.yaml
+          sed -i "s|newTag:.*|newTag: ${{ needs.build-and-push.outputs.image_tag }}|" kustomization.yaml
+
+      - name: Update prod overlay
+        if: needs.build-and-push.outputs.is_release == 'true'
+        run: |
+          cd overlays/prod
+          sed -i "s|newTag:.*|newTag: ${{ needs.build-and-push.outputs.image_tag }}|" kustomization.yaml
 
       - name: Commit and push
         run: |
           git config user.name "github-actions"
           git config user.email "github-actions@github.com"
           git add .
-          git commit -m "chore: update dev image to ${GITHUB_SHA::7}"
+          git commit -m "chore: update image to ${{ needs.build-and-push.outputs.image_tag }}"
           git push