Mavol CI (KAS + Traefik) quick drop-in

Files:

• .gitlab-ci.yml — ready for GitLab Agent (KAS) deploys. Uses Helm with Agent kube-context.
• .gitlab/agents/mavol-agent/config.yaml — grants CI access to the agent. Update mavol/mavol if your project path differs.

Pre-req:

1. Traefik serves https://kas.mavol.online with valid LE cert; routes to KAS via h2c://127.0.0.1:8150.
2. In Omnibus /etc/gitlab/gitlab.rb:
   • gitlab_kas['enable'] = true
   • gitlab_kas['listen_address'] = '127.0.0.1:8150'
   • gitlab_kas['external_url'] = 'https://kas.mavol.online'
   • gitlab_rails['gitlab_kas_external_url'] = 'https://kas.mavol.online' Then: gitlab-ctl reconfigure.

Notes:

• Build jobs push images with Kaniko to GitLab registry.
• Each build emits build.env (dotenv) with TAG vars; deploy falls back to IMAGE_TAG if a service wasn't rebuilt.
• Deploy uses --kube-context "${CI_PROJECT_PATH}:mavol-agent"; no kubeconfig in CI.