Ma Sandbox Deploy

REPO_ROOT=$(git rev-parse --show-toplevel)

# 1. Build statically-linked linux/arm64 binary (CGO_ENABLED=0 required — Distroless base has no libc)
cd "$REPO_ROOT/go"
CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -o /tmp/apiserver-local ./cmd/apiserver/

# 2. Copy config (only needed once, or when config files change)
cp -r "$REPO_ROOT/go/cmd/apiserver/config" /tmp/apiserver-config

# 3. Prepare a clean build context and build Docker image
mkdir -p /tmp/apiserver-build
cp /tmp/apiserver-local /tmp/apiserver-build/apiserver-local
cp -r /tmp/apiserver-config /tmp/apiserver-build/apiserver-config
docker build \
  -f "$REPO_ROOT/docker/service.Dockerfile" \
  --build-arg BINARY_PATH=apiserver-local \
  --build-arg CONFIG_PATH=apiserver-config \
  --platform linux/arm64 \
  --label git.branch="$(git -C "$REPO_ROOT" rev-parse --abbrev-ref HEAD)" \
  --label git.sha="$(git -C "$REPO_ROOT" rev-parse --short HEAD)" \
  --label git.dirty="$(git -C "$REPO_ROOT" diff --quiet || echo true)" \
  -t michelangelo-apiserver:local \
  /tmp/apiserver-build/

# 4. Import image into k3d cluster
k3d image import michelangelo-apiserver:local -c michelangelo-sandbox

# 5. Sync sandbox with local image override
# IMPORTANT: pass --set images.apiserver=... on EVERY sync call — helm's --reuse-values
# silently reverts to the default ghcr.io image if you omit it
source "$REPO_ROOT/python/.venv/bin/activate"
ma sandbox sync \
  --set images.apiserver=michelangelo-apiserver:local \
  --set images.pullPolicy=IfNotPresent \
  --set ui.enabled=true \
  --set envoy.enabled=true \
  --set controllermgr.enabled=true \
  --set worker.enabled=true

git diff --name-only HEAD | grep 'cmd/apiserver/config/'

# Rebuild binary, re-import, rollout restart
CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -o /tmp/apiserver-local "$REPO_ROOT/go/cmd/apiserver/"
cp /tmp/apiserver-local /tmp/apiserver-build/apiserver-local
docker build \
  -f "$REPO_ROOT/docker/service.Dockerfile" \
  --build-arg BINARY_PATH=apiserver-local \
  --build-arg CONFIG_PATH=apiserver-config \
  --platform linux/arm64 \
  --label git.branch="$(git -C "$REPO_ROOT" rev-parse --abbrev-ref HEAD)" \
  --label git.sha="$(git -C "$REPO_ROOT" rev-parse --short HEAD)" \
  --label git.dirty="$(git -C "$REPO_ROOT" diff --quiet || echo true)" \
  -t michelangelo-apiserver:local \
  /tmp/apiserver-build/
k3d image import michelangelo-apiserver:local -c michelangelo-sandbox
kubectl rollout restart deployment/michelangelo-apiserver
kubectl rollout status deployment/michelangelo-apiserver --timeout=60s

kubectl get pod -l app.kubernetes.io/component=apiserver \
  -o jsonpath='{.items[0].spec.containers[0].image}'

docker image inspect michelangelo-apiserver:local --format '{{json .Config.Labels}}'
# {"git.branch":"craig.marker/fix-...","git.sha":"d1046e10","git.dirty":"true"}

docker image inspect michelangelo-apiserver:local --format 'built: {{.Created}}'
kubectl get pod -l app.kubernetes.io/component=apiserver \
  -o jsonpath='started: {.items[0].status.startTime}{"\n"}'