From 4565eefe89dc94c43eac2d780b34cbd6a5a3ae38 Mon Sep 17 00:00:00 2001
From: Jun-te Kim <junte.kim@mealcraft.com>
Date: Sat, 6 Dec 2025 21:05:07 +0000
Subject: [PATCH] save

---
 .github/workflows/k8s_traefik_init_setup.yml | 45 +++++++-------------
 1 file changed, 16 insertions(+), 29 deletions(-)

diff --git a/.github/workflows/k8s_traefik_init_setup.yml b/.github/workflows/k8s_traefik_init_setup.yml
index de5d8a3..e95f88e 100644
--- a/.github/workflows/k8s_traefik_init_setup.yml
+++ b/.github/workflows/k8s_traefik_init_setup.yml
@@ -41,36 +41,23 @@ jobs:
         kubectl config use-context runner-context
 
     # -----------------------------------------------------
-    # Install BuildKit (rootless)
+    # Build & Push Docker Image (ARC-compatible, no Docker)
     # -----------------------------------------------------
-    - name: Install buildkit
-      run: |
-        curl -sSL https://github.com/moby/buildkit/releases/download/v0.12.5/buildkit-v0.12.5.linux-amd64.tar.gz -o buildkit.tar.gz
-        tar -xzf buildkit.tar.gz
-        mv bin/buildctl /usr/local/bin/
-        mv bin/buildkitd /usr/local/bin/
-        chmod +x /usr/local/bin/buildctl /usr/local/bin/buildkitd
-
-    # -----------------------------------------------------
-    # Start BuildKitd (rootless)
-    # -----------------------------------------------------
-    - name: Start buildkitd (rootless)
-      run: |
-        buildkitd --oci-worker-no-process-sandbox --rootless &
-        sleep 3
-
-    # -----------------------------------------------------
-    # Build & Push using BuildKit (NO Docker daemon)
-    # -----------------------------------------------------
-    - name: Build & Push Traefik Image
+    - name: Build & Push Traefik Image (ARC-compatible)
+      uses: docker/build-push-action@v5
       env:
-        IMAGE_TAG: docker.io/kimjunte/edge_router:${{ github.sha }}
-      run: |
-        buildctl build \
-          --frontend dockerfile.v0 \
-          --local context="$GITHUB_WORKSPACE/traefik" \
-          --local dockerfile="$GITHUB_WORKSPACE/traefik" \
-          --output type=image,name=${IMAGE_TAG},push=true
+        BUILDKIT_SBOM_SCAN_STATUS: disabled
+      with:
+        context: ${{ github.workspace }}/traefik
+        file: ${{ github.workspace }}/traefik/Dockerfile
+        platforms: linux/amd64
+        push: true
+        provenance: false
+        sbom: false
+        builder: default
+        tags: |
+          docker.io/kimjunte/edge_router:${{ github.sha }}
+          docker.io/kimjunte/edge_router:latest
 
     # -----------------------------------------------------
     # Apply Storage Classes + PVCs
@@ -108,7 +95,7 @@ jobs:
         kubectl apply -f traefik/edge-router/traefik-ingressroute.yml
 
     # -----------------------------------------------------
-    # Deploy whoami
+    # Deploy whoami (test app)
     # -----------------------------------------------------
     - name: Deploy whoami test service
       run: |