Add promote job

.drone.yml

@@ -55,3 +55,55 @@ volumes:
   - name: containers
     host:
       path: /var/lib/containers
+---
+kind: pipeline
+type: kubernetes
+name: promote
+
+steps:
+  - name: promote
+    image: mgoltzsche/podman:5.3.1
+    privileged: true
+    environment:
+      REGISTRY_USERNAME:
+        from_secret: registry_username
+      REGISTRY_PASSWORD:
+        from_secret: registry_password
+      REGISTRY_SERVER: "docker.io"
+      RELEASE_IMAGE_NAME: "docker.io/genunix/restic"
+    commands:
+      - podman login --username "$${REGISTRY_USERNAME}" --password "$${REGISTRY_PASSWORD}" "$${REGISTRY_SERVER}"
+      - echo "== Promoting $${RELEASE_IMAGE_NAME}:$${DRONE_COMMIT_SHA} into production"
+      - podman pull docker://$${RELEASE_IMAGE_NAME}:$${DRONE_COMMIT_SHA}
+      - podman push $${RELEASE_IMAGE_NAME}:$${DRONE_COMMIT_SHA} docker://$${RELEASE_IMAGE_NAME}:latest
+      - podman logout "$${REGISTRY_SERVER}"
+    volumes:
+      - name: containers
+        path: /var/lib/containers
+
+  - name: cleanup
+    image: mgoltzsche/podman:5.3.1
+    privileged: true
+    environment:
+      RELEASE_IMAGE_NAME: "docker.io/genunix/restic"
+    commands:
+      - podman rmi -f $${RELEASE_IMAGE_NAME}:$${DRONE_COMMIT_SHA}
+      - podman rmi -f $${RELEASE_IMAGE_NAME}:latest
+      - podman image prune -f
+    volumes:
+      - name: containers
+        path: /var/lib/containers
+    when:
+      branch:
+        - master
+
+trigger:
+  event:
+  - promote
+  target:
+  - production
+
+volumes:
+  - name: containers
+    host:
+      path: /var/lib/containers