ci: rename Images to Publish & Deploy, add self-hosted deploy job (#103)

* ci: rename Images workflow to Publish & Deploy, add self-hosted deploy job

After images are published and the Helm chart is pushed to OCI, a new
deploy job runs on a self-hosted runner inside the OpenShift cluster to
helm upgrade --install the release into the humr namespace.

Signed-off-by: Tomas Pilar <thomas7pilar@gmail.com>

* ci: use kubectl rollout restart instead of helm for deploy job

Simpler approach — restart all deployments and statefulsets in the humr
namespace so they pick up the newly published images, then wait for
rollout completion.

Signed-off-by: Tomas Pilar <thomas7pilar@gmail.com>

---------

Signed-off-by: Tomas Pilar <thomas7pilar@gmail.com>

Author: pilartomas

.github/workflows/images.yml .github/workflows/publish-deploy.yml.github/workflows/images.yml renamed to .github/workflows/publish-deploy.yml

@@ -1,4 +1,4 @@
-name: Images
+name: Publish & Deploy
 
 on:
   push:
@@ -117,3 +117,16 @@ jobs:
         run: helm package deploy/helm/humr --version ${{ steps.version.outputs.version }} --app-version ${{ steps.version.outputs.version }}
       - name: Push to OCI registry
         run: helm push humr-${{ steps.version.outputs.version }}.tgz oci://ghcr.io/kagenti/humr/charts
+
+  deploy:
+    runs-on: self-hosted
+    timeout-minutes: 10
+    needs: helm-package
+    if: startsWith(github.ref, 'refs/tags/v')
+    steps:
+      - name: Rollout restart
+        run: kubectl rollout restart statefulset,deployment --namespace humr
+      - name: Wait for rollout
+        run: |
+          kubectl rollout status statefulset --namespace humr --timeout=5m
+          kubectl rollout status deployment --namespace humr --timeout=5m