.gitlab-ci.yml

variables:
  DOCKER_IMAGE: registry.ddbuild.io/docker:24.0.4-gbi-focal

build-staging:
  id_tokens:
    DDSIGN_ID_TOKEN:
      aud: image-integrity
  image: $DOCKER_IMAGE
  rules:
    - if: '$CI_COMMIT_REF_NAME != "master"'
  tags:
    - "arch:amd64"
  script:
    - METADATA_FILE=$(mktemp)
    - docker buildx build -t registry.ddbuild.io/kafka-kit:${CI_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA} --label target=staging --target dd-image -f Dockerfile --push --metadata-file ${METADATA_FILE} .
    - ddsign sign registry.ddbuild.io/kafka-kit:${CI_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA} --docker-metadata-file ${METADATA_FILE}


build-prod:
  id_tokens:
    DDSIGN_ID_TOKEN:
      aud: image-integrity
  image: $DOCKER_IMAGE
  rules:
    - if: '$CI_COMMIT_REF_NAME == "master"'
  tags:
    - "arch:amd64"
  script:
    - METADATA_FILE=$(mktemp)
    - docker buildx build -t registry.ddbuild.io/kafka-kit:${CI_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA} --label target=prod --target dd-image -f Dockerfile --push --metadata-file ${METADATA_FILE} .
    - ddsign sign registry.ddbuild.io/kafka-kit:${CI_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA} --docker-metadata-file ${METADATA_FILE}