---
# Pipeline for building and pushing the ops-keeper OCI image.
# Uses buildkit-launcher: spawns an ephemeral ARM64 hcloud VM, runs buildctl
# on it, pushes to zot, then destroys the VM.
# Triggered on push to main and on tag (for release images).

when:
  - event: push
    branch: main
  - event: tag

steps:
  build-image:
    image: reg.librecloud.online/images/buildkit-launcher:latest
    settings:
      workspace: ops-keeper
      context: .
      dockerfile: platform/crates/ops-keeper/Dockerfile
      image: reg.librecloud.online/images/ops-keeper:${CI_COMMIT_SHA}
      cache_from: type=registry,ref=reg.librecloud.online/cache/ops-keeper
      cache_to: type=registry,ref=reg.librecloud.online/cache/ops-keeper,mode=max
      language: rust
    secrets:
      - orchestrator_token
      - ssh_key
      - zot_credentials