kind: pipeline
type: kubernetes
name: default-build

workspace:
  path: /cache

volumes:
- name: fedhq-ca-crt
  config_map:
    name: fedhq-ca-crt
    default_mode: 420     # same as 644 in octal, or u+w,a+r
    optional: false
- name: cache
  claim:
    name: federationhq-drone-cache-pvc
    read_only: false 

steps:
  - name: Build Image
    image:  registry.cloud.federationhq.de/drone-buildah-plugin:latest
    privileged: true
    volumes:
    - name: fedhq-ca-crt
      path: /etc/ssl/certs2/
    - name: cache
      path: /var/lib/containers/storage
    settings:
      dockerfile: Dockerfile
      pullfirst: true
      ca_cert: "/etc/ssl/certs2/federationHQ-CA.pem"
      registry: "registry.cloud.federationhq.de"
      tag: latex:latest