when:
  - event: tag
    ref: refs/tags/v*

steps:
  # No push credentials: the in-cluster runner has push access to the artifactapi
  # docker-internal registry (same credential-less pattern as jellyfin-ha).
  - name: docker
    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest
    settings:
      registry: artifactapi.k8s.syd1.au.unkin.net
      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/autobackup-operator
      dockerfile: Dockerfile.operator
      tags:
        - ${CI_COMMIT_TAG}
        - latest
    backend_options:
      kubernetes:
        serviceAccountName: autobackup-operator-ci
        resources:
          requests:
            memory: 512Mi
            cpu: 1
          limits:
            memory: 2Gi
            cpu: 2