image:monthly:
  stage: image
  extends: .id_apply
  script:
    - VERSION="$(cut -d. -f1-2 packer/VERSION).$(date +%Y%m%d)"
    - az login --service-principal -u "$ARM_CLIENT_ID" -t "$ARM_TENANT_ID"
        --federated-token "$AZURE_ID_TOKEN" -o none
    - az account set -s "$ARM_SUBSCRIPTION_ID"
    - (cd packer && packer init . && packer build -color=false -var image_version="$VERSION" .)
    - git switch -c "patch-image-$VERSION"
    - sed -i -E "s/(image_version *= *\")[^\"]+/\1$VERSION/" workload/terraform.tfvars
    - git -c user.name="IaC-Pipeline" -c user.email="ci@localhost"
        commit -am "Rollout Patch-Image $VERSION"
    - git push "https://oauth2:${CI_PUSH_TOKEN}@${CI_SERVER_HOST}/${CI_PROJECT_PATH}.git" HEAD
        -o merge_request.create
        -o merge_request.target="$CI_DEFAULT_BRANCH"
        -o merge_request.title="Patch-Image $VERSION"
  rules:
    - if: $CI_PIPELINE_SOURCE == "schedule" && $SCHEDULE == "monthly-image"