infra: Add ci docker image builder

.github/workflows/deploy-backend.yml

@@ -0,0 +1,33 @@
+name: Deploy Backend
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        required: true
+        type: string
+        description: Docker image tag for container registry
+
+env:
+  IMAGE_NAME: backend
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    container:
+      image: gcr.io/kaniko-project/executor:debug
+      options: "--entrypoint=''"
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Authentificate in container registry
+        run: |
+          mkdir -p /kaniko/.docker
+          echo "{\"auths\":{\"${{ secrets.CI_REGISTRY }}\":{\"auth\":\"$(echo -n "json_key:${{ secrets.CI_REGISTRY_KEY }}" | base64 | tr -d '\n' )\"}}}" > /kaniko/.docker/config.json
+
+      - name: Build and push
+        run: >-
+          /kaniko/executor
+          --context "."
+          --dockerfile "./Dockerfile"
+          --destination "${{ secrets.CI_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ inputs.tag }}"

infra/k8s/service-account.yaml

@@ -0,0 +1,27 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: admin-user
+  namespace: kube-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: admin-user
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+  - kind: ServiceAccount
+    name: admin-user
+    namespace: kube-system
+---
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/service-account-token
+metadata:
+  name: admin-user-token
+  namespace: kube-system
+  annotations:
+    kubernetes.io/service-account.name: "admin-user"