diff --git a/.drone.yml b/.drone.yml
index a9748e3..c1fb418 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -22,7 +22,7 @@ trigger:
 
 steps:
 
-- name: pre build image
+- name: build test image
   image: harbor.1sept.ru/drone/drone-kaniko
   settings:
     registry: harbor.1sept.ru
@@ -49,8 +49,28 @@ steps:
     password:
       from_secret: harbor-password
 
+---
+
+kind: pipeline
+name: promote production
+type: kubernetes
+
+clone:
+  disable: true
+  depth: 1
+
+trigger:
+  branch:
+  - main
+  event:
+  - promote
+  target:
+  - production
+
+steps:
+
 - name: build image
-  image: harbor.1sept.ru/drone/drone-kaniko
+  image: harbor.1sept.ru/drone/drone-kaniko:git-${DRONE_COMMIT_SHA:0:7}
   settings:
     registry: harbor.1sept.ru
     repo: drone/drone-kaniko
@@ -73,6 +93,6 @@ image_pull_secrets:
 
 ---
 kind: signature
-hmac: 71e77d227ecf0c74b53f943cc5b50c9701fd2d5b78722d62104463d0b93584d3
+hmac: 2e179ce3cc776d731e1d73f83aea98dc4d931b6fc93adeea3f590ac2440a6d33
 
 ...