From 9b3ce842509fb74ff3e9d2b8ae49d84ccfa0e5d8 Mon Sep 17 00:00:00 2001
From: unkin-agent <unkin-agent@unkin.net>
Date: Fri, 2 Oct 2026 23:45:43 +1000
Subject: [PATCH] ci: move Go steps to gobuilder, enable S3 build cache

Switches pre-commit and test to the estate gobuilder image for TLS
trust to s3.ceph.unkin.net and a prebuilt go-cache-plugin, then wires
the shared S3-backed GOCACHEPROG.

- pre-commit.yaml, test.yaml: golang:1.25 -> gobuilder:0.1.2-alma9
- add GOCACHE_* / AWS_* env (org secrets) with absolute cache-dir
- set kubernetes resources + default serviceAccountName per step
- docker-build/release steps unchanged (compile inside Dockerfile)
---
 .woodpecker/pre-commit.yaml | 23 ++++++++++++++++++++++-
 .woodpecker/test.yaml       | 23 ++++++++++++++++++++++-
 2 files changed, 44 insertions(+), 2 deletions(-)

diff --git a/.woodpecker/pre-commit.yaml b/.woodpecker/pre-commit.yaml
index 2dd88b8..f984cc7 100644
--- a/.woodpecker/pre-commit.yaml
+++ b/.woodpecker/pre-commit.yaml
@@ -3,7 +3,28 @@ when:
 
 steps:
   - name: pre-commit
-    image: golang:1.25
+    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/gobuilder:0.1.2-alma9
+    environment:
+      GOCACHE_S3_BUCKET: gocache
+      GOCACHE_S3_REGION: us-east-1
+      GOCACHE_S3_ENDPOINT_URL: https://s3.ceph.unkin.net
+      GOCACHE_S3_PATH_STYLE: "true"
+      GOCACHE_KEY_PREFIX: ci-cephrgw-operator
+      GOCACHEPROG: go-cache-plugin --cache-dir=/tmp/gocache
+      AWS_ACCESS_KEY_ID:
+        from_secret: GOCACHE_AWS_ACCESS_KEY_ID
+      AWS_SECRET_ACCESS_KEY:
+        from_secret: GOCACHE_AWS_SECRET_ACCESS_KEY
     commands:
       - test -z "$(gofmt -l .)"
       - go vet ./...
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 1Gi
+            cpu: "1"
+          limits:
+            memory: 4Gi
+            cpu: "2"
diff --git a/.woodpecker/test.yaml b/.woodpecker/test.yaml
index 75fc514..9805875 100644
--- a/.woodpecker/test.yaml
+++ b/.woodpecker/test.yaml
@@ -3,6 +3,27 @@ when:
 
 steps:
   - name: test
-    image: golang:1.25
+    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/gobuilder:0.1.2-alma9
+    environment:
+      GOCACHE_S3_BUCKET: gocache
+      GOCACHE_S3_REGION: us-east-1
+      GOCACHE_S3_ENDPOINT_URL: https://s3.ceph.unkin.net
+      GOCACHE_S3_PATH_STYLE: "true"
+      GOCACHE_KEY_PREFIX: ci-cephrgw-operator
+      GOCACHEPROG: go-cache-plugin --cache-dir=/tmp/gocache
+      AWS_ACCESS_KEY_ID:
+        from_secret: GOCACHE_AWS_ACCESS_KEY_ID
+      AWS_SECRET_ACCESS_KEY:
+        from_secret: GOCACHE_AWS_SECRET_ACCESS_KEY
     commands:
       - go test -race -count=1 ./api/... ./internal/...
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 1Gi
+            cpu: "1"
+          limits:
+            memory: 4Gi
+            cpu: "2"