feature: add ko build workflow

for publishing container images

Signed-off-by: Jordan Evans <jevans@linuxfoundation.org>

Author: jordane

.github/workflows/ko-build-main.yaml

@@ -0,0 +1,35 @@
+# Copyright The Linux Foundation and each contributor to LFX.
+# SPDX-License-Identifier: MIT
+---
+name: Publish Main
+
+'on':
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  publish:
+    name: Publish Main
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+      - uses: ko-build/setup-ko@v0.8
+        with:
+          version: v0.17.1
+      - run: |
+          ko build github.com/linuxfoundation/lfx-v2-query-service/cmd \
+            -B \
+            --platform linux/amd64,linux/arm64 \
+            -t ${{ github.sha }} \
+            --sbom spdx

.github/workflows/ko-build-tag.yaml

@@ -0,0 +1,38 @@
+# Copyright The Linux Foundation and each contributor to LFX.
+# SPDX-License-Identifier: MIT
+---
+name: Publish Tagged Release
+
+on:
+  push:
+    tags:
+      - v*
+
+permissions:
+  contents: read
+
+jobs:
+  publish:
+    name: Publish Tagged Release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+      - uses: ko-build/setup-ko@v0.8
+        with:
+          version: v0.17.1
+      - name: generate version without v
+        id: version-no-v
+        run: echo version="${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"
+      - run: |
+          ko build github.com/linuxfoundation/lfx-v2-query-service/cmd \
+            -B \
+            --platform linux/amd64,linux/arm64 \
+            -t ${{ github.sha }} \
+            -t ${{ steps.version-no-v.outputs.version }} \
+            --sbom spdx

charts/lfx-v2-query-service/templates/deployment.yaml

@@ -7,7 +7,7 @@ metadata:
   name: query-svc
   namespace: lfx
 spec:
-  replicas: {{ .Values.replicaCount }} 
+  replicas: {{ .Values.replicaCount }}
   selector:
     matchLabels:
       app: query-svc
@@ -19,7 +19,6 @@ spec:
       containers:
         - name: app
           image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
-          imagePullPolicy: Never
           env:
             - name: OPENSEARCH_URL
               value: {{.Values.opensearch.url}}

charts/lfx-v2-query-service/values.yaml

@@ -6,7 +6,7 @@ replicaCount: 1
 # Override from CLI/CI: --set image.tag=<git-sha>, etc.
 image:
   tag: "0.1.0"
-  repository: linuxfoundation/lfx-query-svc
+  repository: ghcr.io/linuxfoundation/lfx-v2-query-service/cmd
 
 # ingress is the configuration for the ingress routing
 ingress: