From 14a9e9511e63eb629f28259b849225d62b99d7e3 Mon Sep 17 00:00:00 2001
From: Jesse Egbosionu <j3bsie@gmail.com>
Date: Sat, 24 Oct 2026 21:22:02 +0200
Subject: [PATCH] feat: add kustomize setup and pin image version in deployment

---
 .github/workflows/deploy.yml | 12 +++++++++++-
 k8s/kustomization.yaml       |  2 +-
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 83c658a..1ed45fa 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -119,8 +119,18 @@ jobs:
 
           KUBECONFIG="${KUBECONFIG_PATH}" kubectl cluster-info --request-timeout=15s
 
+      - name: Set up kustomize
+        env:
+          KUSTOMIZE_VERSION: v5.7.1
+        run: |
+          mkdir -p "${RUNNER_TEMP}/bin"
+          curl -fsSL "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2F${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz" \
+            | tar -xz -C "${RUNNER_TEMP}/bin" kustomize
+          echo "${RUNNER_TEMP}/bin" >> "${GITHUB_PATH}"
+
       - name: Pin image to this commit
-        run: sed -i "s/newTag: latest/newTag: sha-${GITHUB_SHA}/" k8s/kustomization.yaml
+        working-directory: k8s
+        run: kustomize edit set image "jesseinit-portfolio=${REGISTRY}/${IMAGE_NAME}:sha-${GITHUB_SHA}"
 
       - name: Apply manifests
         run: kubectl apply -k k8s/
diff --git a/k8s/kustomization.yaml b/k8s/kustomization.yaml
index dc09e2c..26ad538 100644
--- a/k8s/kustomization.yaml
+++ b/k8s/kustomization.yaml
@@ -15,7 +15,7 @@ labels:
       app.kubernetes.io/name: personal-site
       app.kubernetes.io/managed-by: kustomize
 
-# CI rewrites newTag to sha-<commit> before applying.
+# CI pins this to sha-<commit> with `kustomize edit set image` before applying.
 images:
   - name: jesseinit-portfolio
     newName: tea.jesseinit.dev/jesseinit/personal-site