From 3d7cf89a2f6b868fb513667dd97cda0f3e6ad01f Mon Sep 17 00:00:00 2001
From: "noah.lancien" <noah.lancien@ldc.fr>
Date: Tue, 30 Sep 2025 14:50:35 +0000
Subject: [PATCH] Added docker multostage for Bedrock (ACF variables)

---
 build/docker-bedrock-multistage.yml | 51 +++++++++++++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100644 build/docker-bedrock-multistage.yml

diff --git a/build/docker-bedrock-multistage.yml b/build/docker-bedrock-multistage.yml
new file mode 100644
index 0000000..bac9ef2
--- /dev/null
+++ b/build/docker-bedrock-multistage.yml
@@ -0,0 +1,51 @@
+.docker-build:
+    stage: build
+    image:
+        name: gcr.io/kaniko-project/executor:v1.23.2-debug
+        entrypoint: [""]
+    script:
+        - /kaniko/executor
+            --context "${CI_PROJECT_DIR}"
+            --build-arg "GITLAB_USER=${CI_DEPLOY_USER}"
+            --build-arg "GITLAB_PASSWORD=${CI_DEPLOY_PASSWORD}"
+            --build-arg "APP_ACF_USER=${APP_ACF_USER}"
+            --build-arg "APP_ACF_PWD=${APP_ACF_PWD}"
+            --dockerfile "${CI_PROJECT_DIR}/Dockerfile"
+            --destination "${IMAGE_TAG}"
+            --cache=true
+            --cache-ttl 24h
+    allow_failure: false
+    dependencies:
+        - composer-security
+        - npm-security
+    needs:
+        - job: composer-security
+          optional: true
+        - job: npm-security
+          optional: true
+
+docker-build:staging:
+    extends: .docker-build
+    variables:
+        IMAGE_TAG: "${CI_REGISTRY_IMAGE}:s-${CI_COMMIT_SHA}"
+    rules:
+        - if: $CI_COMMIT_BRANCH == "trunk"
+          allow_failure: true
+
+
+docker-build:latest:
+    extends: .docker-build
+    variables:
+        IMAGE_TAG: "${CI_REGISTRY_IMAGE}:p-${CI_COMMIT_SHA}"
+    rules:
+        - if: $CI_COMMIT_BRANCH == "main" || $CI_COMMIT_BRANCH == "master"
+          allow_failure: true
+
+
+docker-build:release:
+    extends: .docker-build
+    variables:
+        IMAGE_TAG: "${CI_REGISTRY_IMAGE}:${CI_COMMIT_TAG}"
+    rules:
+        - if: $CI_COMMIT_TAG != null
+          allow_failure: true