pipeline {
    agent none

    stages {
        stage('SSHCA') {
            stages {
                stage('Server') {
                    agent {
                        kubernetes {
                            yamlFile 'ci/podTemplate.yaml'
                            yamlMergeStrategy merge()
                            defaultContainer 'buildah'
                        }
                    }
                    stages {
                        stage('Build') {
                            steps {
                                sh '. ci/build.sh'
                            }
                        }

                        stage('Publish') {
                            steps {
                                withEnv([
                                    "REGISTRY_AUTH_FILE=${env.WORKSPACE_TMP}/auth.json"
                                ]) {
                                    withCredentials([usernamePassword(
                                        credentialsId: 'jenkins-packages',
                                        usernameVariable: 'BUILDAH_USERNAME',
                                        passwordVariable: 'BUILDAH_PASSWORD',
                                    )]) {
                                        sh """
                                            buildah login \
                                            --username \${BUILDAH_USERNAME} \
                                            --password \${BUILDAH_PASSWORD} \
                                            git.pyrocufflink.net
                                        """
                                    }
                                    sh '. ci/publish.sh'
                                }
                            }
                        }
                    }
                }
            }
        }
    }
}