when:
- event: manual

steps:
- name: publish
  image: quay.io/podman/stable
  environment:
    REGISTRY: registry.mnl.de
    REGISTRY_USER: mnl
    REGISTRY_TOKEN:
      from_secret: REGISTRY_TOKEN

  commands:
  - export IMAGE_TAG="$REGISTRY/$REGISTRY_USER/jdk21-builder:$CI_COMMIT_REF"
  # - podman build -t $IMAGE_TAG .
  - echo $REGISTRY_TOKEN | podman login -u $REGISTRY_USER --password-stdin $REGISTRY
  backend_options:
    kubernetes:
      securityContext:
        privileged: true
        runAsUser: 1000
        runAsGroup: 1000