ADD: limit pipeline execution to a specific set of nodes

.drone.yml

@@ -5,6 +5,7 @@ platform:
   arch: amd64
 node_selector:
   kubernetes.io/arch: amd64
+  federationhq.de/location: Blumendorf
 
 volumes:
 - name: fedhq-ca-crt
@@ -32,6 +33,7 @@ platform:
   arch: arm64
 node_selector:
   kubernetes.io/arch: arm64
+  federationhq.de/location: Blumendorf
 
 volumes:
 - name: fedhq-ca-crt
@@ -57,7 +59,8 @@ type: kubernetes
 name: push
 node_selector:
   kubernetes.io/arch: amd64
-       
+  federationhq.de/location: Blumendorf
+        
 volumes:
 - name: fedhq-ca-crt
   config_map:
@@ -69,14 +72,36 @@ steps:
   - name: push
     image: quay.io/buildah/stable
     privileged: true
+    environment:
+      USERNAME:
+        from_secret: username
+      PASSWORD:
+        from_secret: password
     volumes:
     - name: fedhq-ca-crt
       path: /etc/ssl/certs2/
     commands:
       - scripts/setupEnvironment.sh
-      - buildah manifest create registry.cloud.federationhq.de/imapfilter:latest registry.cloud.federationhq.de/imapfilter:latest-arm64 registry.cloud.federationhq.de/imapfilter:latest-amd64
-      - buildah manifest push registry.cloud.federationhq.de/imapfilter:latest docker://registry.cloud.federationhq.de/imapfilter:latest 
-      - buildah manifest rm registry.cloud.federationhq.de/imapfilter:latest
+      - buildah manifest create imapfilter:latest registry.cloud.federationhq.de/imapfilter:latest-arm64 registry.cloud.federationhq.de/imapfilter:latest-amd64
+      - buildah manifest push --all imapfilter:latest docker://registry.cloud.federationhq.de/imapfilter:latest 
+      - buildah login -u $${USERNAME} -p $${PASSWORD} registry.hub.docker.com
+      - buildah manifest push --all imapfilter:latest docker://registry.hub.docker.com/byterazor/imapfilter:latest
+      - buildah manifest rm imapfilter:latest
 depends_on:
   - build-amd64
-  - build-arm64
+  - build-arm64
+
+
+---
+kind: secret
+name: username
+get:
+  path: docker
+  name: username
+
+---
+kind: secret
+name: password
+get:
+  path: docker
+  name: secret

README.md

@@ -1,49 +1,66 @@
+---
+lang: EN_US
+---
+
 # ImapFilter Container Image
 
+## Description
+
 This repository contains the Containerfile and associated scripts for a container image that runs [imapfilter](https://github.com/lefcha/imapfilter).
 
-The container is based on alpine linux to keep it small.
+The image is based on Alpine Linux and compiles the main branch of 
+imapfilter in a build image so that the bare imapfilter image is 
+as small as possible.
 
-## Author
+imapfilter is running in a loop waiting 500 seconds between each 
+run. 
 
-- Dominik Meyer <dmeyer@federationhq.de>
+## Security
+
+Imapfilter is running with a non-root userid to improve security.
+In kubernetes you can also enforce running the image with readonly 
+root directory.
+
+## Supported Architectures
+
+- amd64
+- arm64
+
+## Updates
+
+I am trying to update the image weekly as long as my private kubernetes cluster is available. So I do not promise anything and do **not** rely 
+your business on this image.
+
+## Prerequisities
+
+A container runtime like
+
+* docker 
+* podman
+* kubernetes
 
 
-## Prerequisites
+## Container Parameters
 
-- Buildah
+At the moment there are no parameters but there will be 
+some added in the future.
 
-## Usage
 
-### Building the Container Image
+## Volumes
 
-You can build the container image using the following command:
+You have to mount the imapfilter config file to /home/imapfilter/config.lua. This can be done by a bind mount or a configmap in kubernetes.
 
-\```bash
-buildah bud -t imapfilter:latest .
-\```
+## Source Repository
 
-### Running the Container
+* https://gitea.federationhq.de/Container/imapfilter.git
 
-You can create and run a container from this image with the following command:
+## Prebuild Images
 
-\```bash
-podman run -d --name imapfilter imapfilter:latest
-\```
+* https://hub.docker.com/repository/docker/byterazor/imapfilter/general
 
-### Pushing the Container Image to a Registry
+## Authors
 
-With Buildah:
-
-\```bash
-buildah push imapfilter:latest docker://<registry>/<username>/imapfilter:latest
-\```
-
-Replace `<registry>` with the name of your Docker registry and `<username>` with your username on that registry.
-
-## Configuration
-
-T.b.d.
+* **Dominik Meyer** - *Initial work* 
 
 ## License