- secret:
    name: zuul-storage-proxy-registry-credentials
    data:
      quay.io:
        username: zuul-ci+opendevzuul
        password: !encrypted/pkcs1-oaep
          - f+MbgMldK5fRSiudArax0Kfh27tPhXMbwuOnlE3PguACmdiM1iojT5mTXicu4teZaB6w4
            7nOr9E6sFG+EQq2JgUaCbUKW7CM5sogj/z/7/FWromZmRHBcL82KoEXF2jXB6TVh8QmhD
            ww0MELKD2IoNEQ/Na2qY8vnF6urMmyxRkJlxhEXqMDGZKQLAzTA/psw4TaQ43M2XRtVs1
            KyzRIyIoV0QW4TkRLMpADA+zREJw0EQe621XRCEw5+z9dY60i+dim4FErpRoWMWcMmfHu
            W2kPu6dx+P4kxTeVHFZ1lcIzFAiVqFr4JwNjceCRgY4Aw/A6i3LNvmVnsWfjPgesFbZGQ
            OTxrCZMnb//01uUuLO+bSPP3Ez1LMNAyNAKg0u5kOWhB6LM1Xz6M6tU6yafecv18FhdZt
            m9zlHIJaedq8W/9HBHooauYxm+pSesHOA81oBDExBUQ/Vy04nPg9NGfh45ykItprO8+Ck
            fH1HitSy+29m4veX8r3z8YH+4R+qqV3Awqvn7IvMBYby0qztXHtN2BwglCq/tjtTOadEs
            bwUAug5sgYg1FXGItYUB2nK1tKTKZjwU/EKIhHO5DvB/HCOT8eklAiCLPGUzeSIkJ51tB
            lZBub4uG40DmnnJ7Z9BZUXafHiKD9DI1FOyV32cJ/fg86MXLei+AYSYv5d1tn8=
        api_token: !encrypted/pkcs1-oaep
          - axhWeseluuvfxpShTONWAmxrokDi4WOZEOnTWcFxaEcLJrokurDPDNjZGbcCw1ExsMVzp
            N1y0NVpsykc6aVEHyHXlKV6uopISaDDJqdBwFsETP77x28cRa74aZ+0o3iaeiXwHSGzUd
            mIfoQe/X98xP98+DAtJ8fPyw10CYZu4hbRaTLWMUySM7ArKTgGoOqAP/vOLabQT6ax5zV
            VKmC3UFopyyf/vPOja4l5qrFBCbn0y2jad7mPjAqUkNMWwkdzRShdd6qKb9pAPyHSyLXI
            5lBzwDVishB0r/o37iu2z+Zb5HCfbyBKu0YfKRYxm30QptaIbp+wD3n9n8htxYM++7WpQ
            9X6ZdRvZa7GyZFNkUU+8HU0cGhWgXQmoQoBIB+8aZ7Qxsw2xGO8EWKattNAH2hol3b3AP
            damZw3y7RLqjlyTuzIPGT6cgyzIkWpiYzPnQ8vrHjE1wghrmPO9wMBOeSin7v4ldF61NQ
            DsPW6uMLh3rHcrRmQXl9TbdM3TGRLAQIfDNMy4KDLUe7rIcgfvwxOgdSxOfxydSEb2oDU
            ZUUa9IZry1ZMf2THdPR16wGvfdU3ek4nmT+/js8zrf7LFig5YW1pI5qMq5V2rh5RhRHGu
            r4ceTYNwEYf7Tr3BfXa/S7VbdibLwkMlyGUzwgrBreDsiu36swNp7x8bqzdT44=

- job:
    name: zuul-storage-proxy-build-image
    description: Build and test a container image.
    parent: opendev-build-container-image
    allowed-projects: zuul/zuul-storage-proxy
    provides: zuul-storage-proxy-container-image
    run: &image_playbooks
      - playbooks/build.yaml
      - playbooks/test.yaml
    vars: &image_vars
      promote_container_image_method: intermediate-registry
      promote_container_image_job: zuul-storage-proxy-upload-image
      container_command: docker
      container_images:
        - context: .
          registry: quay.io
          repository: quay.io/zuul-ci/zuul-storage-proxy
          target: zuul-storage-proxy
          tags:
            # If zuul.tag is defined: [ '3', '3.19', '3.19.0' ].  Only works for 3-component tags.
            # Otherwise: ['latest']
            &imagetag "{{ zuul.tag is defined | ternary([zuul.get('tag', '').split('.')[0], '.'.join(zuul.get('tag', '').split('.')[:2]), zuul.get('tag', '')], ['latest']) }}"

- job:
    name: zuul-storage-proxy-upload-image
    parent: opendev-upload-container-image
    description: Build and test a container image.
    allowed-projects: zuul/zuul-storage-proxy
    run: *image_playbooks
    secrets:
      name: container_registry_credentials
      secret: zuul-storage-proxy-registry-credentials
      pass-to-parent: true
    provides: zuul-storage-proxy-container-image
    vars: *image_vars

- job:
    name: zuul-storage-proxy-promote-image
    parent: opendev-promote-container-image
    description: Promote previously uploaded container image.
    allowed-projects: zuul/zuul-storage-proxy
    secrets:
      name: container_registry_credentials
      secret: zuul-storage-proxy-registry-credentials
      pass-to-parent: true
    nodeset:
      nodes: []
    vars: *image_vars

- project:
    vars:
      release_python: python3
    check:
      jobs:
        - zuul-storage-proxy-build-image
        - tox-linters:
            vars:
              tox_install_bindep: false
    gate:
      jobs:
        - zuul-storage-proxy-upload-image
        - tox-linters:
            vars:
              tox_install_bindep: false
    promote:
      jobs:
        - zuul-storage-proxy-promote-image
    release:
      jobs:
        - zuul-release-python
        - upload-container-image:
            secrets:
              name: container_registry_credentials
              secret: zuul-storage-proxy-registry-credentials
              pass-to-parent: true
            vars:
              <<: *image_vars
              upload_container_image_promote: false