---
kind: pipeline
type: kubernetes

#type: docker

clone:
  #disable: true
  depth: 1

name: deploy develop and staging

platform:
  os: linux
  arch: amd64

trigger:
  branch:
  - master
  event:
  - push

steps:

- name: build test image
  image: harbor.1sept.ru/drone/drone-kaniko
  settings:
    registry: harbor.1sept.ru
    repo: drone/drone-kaniko-test
    cache: false
    tags:
      - git-${DRONE_COMMIT_SHA:0:7}
      - drone-${DRONE_BUILD_NUMBER}
    username:
      from_secret: harbor-username
    password:
      from_secret: harbor-password

- name: test image
  image: harbor.1sept.ru/drone/drone-kaniko-test:drone-${DRONE_BUILD_NUMBER}
  settings:
    registry: harbor.1sept.ru
    repo: drone/drone-kaniko-test
    cache: false
    tags:
      - test
    username:
      from_secret: harbor-username
    password:
      from_secret: harbor-password

image_pull_secrets:
- dockerconfig

---

kind: pipeline
name: promote production
type: kubernetes

clone:
  # disable: true
  depth: 1

trigger:
  branch:
  - main
  event:
  - promote
  target:
  - production

steps:

- name: build image
  image: harbor.1sept.ru/drone/drone-kaniko:drone-${DRONE_BUILD_PARENT}
  settings:
    registry: harbor.1sept.ru
    repo: drone/drone-kaniko
    cache: false
    tags:
      - git-${DRONE_COMMIT_SHA:0:7}
      - drone-${DRONE_BUILD_NUMBER}
      - latest
    username:
      from_secret: harbor-username
    password:
      from_secret: harbor-password

image_pull_secrets:
- dockerconfig

---
kind: signature
hmac: b97d0b7b38500ddc83be6f72d4ed497af1692c1222745daf386ca0670d2c844c

...