fix: start nginx without resolving A-site at boot [deploy]

.gitea/workflows/ci.yml

@@ -195,10 +195,22 @@ jobs:
           export DEPLOYMENT="${REPO_NAME}-deploy"
           export CONTAINER="app"
 
-          echo "Deploying ${IMAGE_LATEST} to ${NAMESPACE}/${DEPLOYMENT}"
-          kubectl set image "deployment/${DEPLOYMENT}" "${CONTAINER}=${IMAGE_LATEST}" -n "${NAMESPACE}"
+          export IMAGE_SHA="104.225.236.253:30500/${REPO_NAME}:${GITHUB_SHA}"
+          echo "Deploying ${IMAGE_SHA} (and ${IMAGE_LATEST}) to ${NAMESPACE}/${DEPLOYMENT}"
+          kubectl set image "deployment/${DEPLOYMENT}" "${CONTAINER}=${IMAGE_SHA}" -n "${NAMESPACE}"
           kubectl rollout restart "deployment/${DEPLOYMENT}" -n "${NAMESPACE}"
-          kubectl rollout status "deployment/${DEPLOYMENT}" -n "${NAMESPACE}" --timeout=180s
+          if ! kubectl rollout status "deployment/${DEPLOYMENT}" -n "${NAMESPACE}" --timeout=180s; then
+            echo "❌ rollout timed out; dumping diagnostics"
+            kubectl get pods -n "${NAMESPACE}" -o wide || true
+            kubectl describe "deployment/${DEPLOYMENT}" -n "${NAMESPACE}" || true
+            kubectl get pods -n "${NAMESPACE}" -o name | while read -r p; do
+              echo "----- ${p} describe -----"
+              kubectl describe -n "${NAMESPACE}" "${p}" || true
+              echo "----- ${p} logs -----"
+              kubectl logs -n "${NAMESPACE}" "${p}" --all-containers --tail=80 || true
+            done
+            exit 1
+          fi
           echo "✅ Deployment completed successfully"
 
   deploy-only: