@catladder/cli 0.0.0-inventory-2f61feef → 0.0.0-jdbc-064ed4e2

package/dist/bundles/catenv/index.js

@@ -613,7 +613,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 exports.__esModule = true;
-exports.upsertAllVariables = exports.getVariableValueByRawName = exports.getAllVariables = exports.getProjectInfo = exports.doGitlabRequest = exports.getGitlabToken = exports.setupGitlabToken = exports.hasGitlabToken = void 0;
+exports.upsertAllVariables = exports.clearBackups = exports.getVariableValueByRawName = exports.getAllVariables = exports.getProjectInfo = exports.doGitlabRequest = exports.getGitlabToken = exports.setupGitlabToken = exports.hasGitlabToken = void 0;
 var pipeline_1 = __nccwpck_require__(5355);
 var child_process_promise_1 = __nccwpck_require__(5763);
 var lodash_1 = __nccwpck_require__(3255);
@@ -687,28 +687,31 @@ var getGitlabToken = function (vorpal) { return __awaiter(void 0, void 0, void 0
     });
 }); };
 exports.getGitlabToken = getGitlabToken;
-var doGitlabRequest = function (vorpal, path, data, update) {
+var doGitlabRequest = function (vorpal, path, data, method) {
     if (data === void 0) { data = undefined; }
+    if (method === void 0) { method = "GET"; }
     return __awaiter(void 0, void 0, void 0, function () {
-        var rootToken, method, result, _a, _b, _c, _d, _e;
+        var rootToken, result, _a, _b, _c, _d, _e;
         return __generator(this, function (_f) {
             switch (_f.label) {
                 case 0: return [4 /*yield*/, (0, exports.getGitlabToken)(vorpal)];
                 case 1:
                     rootToken = _f.sent();
-                    method = data ? (update ? "PUT" : "POST") : "GET";
                     return [4 /*yield*/, (0, node_fetch_1["default"])("https://git.panter.ch/api/v4/".concat(path), {
                             method: method,
                             headers: {
                                 "Content-Type": "application/json",
                                 "Private-Token": rootToken
                             },
-                            body: JSON.stringify(data)
+                            body: data ? JSON.stringify(data) : undefined
                         })];
                 case 2:
                     result = _f.sent();
                     if (result.status >= 200 && result.status < 400) {
-                        return [2 /*return*/, result.json()];
+                        if (result.headers.get("content-type") === "application/json") {
+                            return [2 /*return*/, result.json()];
+                        }
+                        return [2 /*return*/, null];
                     }
                     if (result.status === 404) {
                         throw new Error("not found");
@@ -790,7 +793,7 @@ var createVariable = function (vorpal, projectId, key, value, masked, environmen
                         value: value,
                         masked: masked && isMaskable(value),
                         environment_scope: environment_scope
-                    })];
+                    }, "POST")];
                 case 1: return [2 /*return*/, _a.sent()];
             }
         });
@@ -804,12 +807,20 @@ var updateVariable = function (vorpal, projectId, key, value, masked) {
                 case 0: return [4 /*yield*/, (0, exports.doGitlabRequest)(vorpal, "projects/".concat(projectId, "/variables/").concat(key), {
                         value: value,
                         masked: masked && isMaskable(value)
-                    }, true)];
+                    }, "PUT")];
                 case 1: return [2 /*return*/, _a.sent()];
             }
         });
     });
 };
+var deleteVariable = function (vorpal, projectId, key) { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, exports.doGitlabRequest)(vorpal, "projects/".concat(projectId, "/variables/").concat(key), undefined, "DELETE")];
+            case 1: return [2 /*return*/, _a.sent()];
+        }
+    });
+}); };
 var getAllCatladderEnvVarsInGitlab = function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
     var allVariables;
     return __generator(this, function (_a) {
@@ -839,6 +850,46 @@ var getAllCatladderEnvVarsInGitlab = function (vorpal) { return __awaiter(void 0
         }
     });
 }); };
+var getBackupKey = function (fullKey, timestamp) {
+    return "".concat(fullKey, "_backup_").concat(timestamp);
+};
+var clearBackups = function (vorpal, keep) { return __awaiter(void 0, void 0, void 0, function () {
+    var existingVariables, id, _i, _a, _b, key, backups, backupsSorted, toDelete, _c, toDelete_1, timestamp;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
+            case 0: return [4 /*yield*/, getAllCatladderEnvVarsInGitlab(vorpal)];
+            case 1:
+                existingVariables = _d.sent();
+                return [4 /*yield*/, (0, exports.getProjectInfo)(vorpal)];
+            case 2:
+                id = (_d.sent()).id;
+                _i = 0, _a = Object.entries(existingVariables);
+                _d.label = 3;
+            case 3:
+                if (!(_i < _a.length)) return [3 /*break*/, 8];
+                _b = _a[_i], key = _b[0], backups = _b[1].backups;
+                backupsSorted = backups.sort(function (a, b) { return b - a; });
+                toDelete = backupsSorted.slice(keep);
+                _c = 0, toDelete_1 = toDelete;
+                _d.label = 4;
+            case 4:
+                if (!(_c < toDelete_1.length)) return [3 /*break*/, 7];
+                timestamp = toDelete_1[_c];
+                return [4 /*yield*/, deleteVariable(vorpal, id, getBackupKey(key, timestamp))];
+            case 5:
+                _d.sent();
+                _d.label = 6;
+            case 6:
+                _c++;
+                return [3 /*break*/, 4];
+            case 7:
+                _i++;
+                return [3 /*break*/, 3];
+            case 8: return [2 /*return*/];
+        }
+    });
+}); };
+exports.clearBackups = clearBackups;
 var upsertAllVariables = function (vorpal, variables, env, componentName, backup, masked // FIXME: would be better to have this per variable
 ) {
     if (backup === void 0) { backup = true; }
@@ -871,7 +922,7 @@ var upsertAllVariables = function (vorpal, variables, env, componentName, backup
                 case 4:
                     _d.sent();
                     if (!backup) return [3 /*break*/, 6];
-                    return [4 /*yield*/, createVariable(vorpal, id, fullKey + "_backup_" + new Date().getTime(), oldValue, masked, "_backup")];
+                    return [4 /*yield*/, createVariable(vorpal, id, getBackupKey(fullKey, new Date().getTime()), oldValue, masked, "_backup")];
                 case 5:
                     _d.sent();
                     _d.label = 6;
@@ -38703,8 +38754,6 @@ var lodash_1 = __nccwpck_require__(3255);
 
 var __1 = __nccwpck_require__(5355);
 
-var reportingJob_1 = __nccwpck_require__(9572);
-
 var utils_1 = __nccwpck_require__(7461);
 
 var yarn_1 = __nccwpck_require__(464);
@@ -38714,12 +38763,11 @@ var constants_1 = __nccwpck_require__(1542);
 var getBuildInfo_1 = __nccwpck_require__(9197);
 
 var createBuildJob = function (context, _a) {
-  var _b, _c, _d;
+  var _b, _c;
 
   var script = _a.script,
       variables = _a.variables,
-      artifacts = _a.artifacts,
-      def = __rest(_a, ["script", "variables", "artifacts"]);
+      def = __rest(_a, ["script", "variables"]);
 
   return (0, lodash_1.merge)({
     name: constants_1.APP_BUILD_JOB_NAME,
@@ -38731,7 +38779,7 @@ var createBuildJob = function (context, _a) {
     variables: __assign(__assign(__assign(__assign({}, constants_1.RUNNER_BUILD_RESOURCE_VARIABLES), variables !== null && variables !== void 0 ? variables : {}), context.environment.envVars), (_b = context.componentConfig.build.extraVars) !== null && _b !== void 0 ? _b : {}),
     script: __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, getBuildInfo_1.getBuildInfo)(context)), false), __read((0, yarn_1.ensureNodeVersion)(context)), false), ["cd ".concat(context.componentConfig.dir)], false), __read((_c = (0, utils_1.ensureArray)(script)) !== null && _c !== void 0 ? _c : []), false),
     artifacts: {
-      paths: __spreadArray([context.componentConfig.dir + "/__build_info.json", context.componentConfig.dir + "/" + reportingJob_1.INVENTORY_ARTIFACTS_DIR], __read((_d = artifacts === null || artifacts === void 0 ? void 0 : artifacts.paths) !== null && _d !== void 0 ? _d : []), false)
+      paths: [context.componentConfig.dir + "/__build_info.json"]
     }
   }, def);
 };
@@ -38759,6 +38807,168 @@ exports.getBuildInfo = getBuildInfo;
 
 /***/ }),
 
+/***/ 2644:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+
+    return t;
+  };
+
+  return __assign.apply(this, arguments);
+};
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.createCustomBuildJobs = void 0;
+
+var path_1 = __nccwpck_require__(1017);
+
+var utils_1 = __nccwpck_require__(7461);
+
+var constants_1 = __nccwpck_require__(1542);
+
+var createBuildJob_1 = __nccwpck_require__(8063);
+
+var docker_1 = __nccwpck_require__(3219);
+
+var types_1 = __nccwpck_require__(1197);
+
+var RUNNER_BUILD_VARIABLES = {
+  KUBERNETES_CPU_REQUEST: "0.5",
+  KUBERNETES_CPU_LIMIT: "2",
+  KUBERNETES_MEMORY_REQUEST: "2Gi",
+  KUBERNETES_MEMORY_LIMIT: "4Gi"
+};
+
+var createCustomBuildJobs = function (context) {
+  var _a, _b, _c, _d;
+
+  var buildConfig = context.componentConfig.build;
+
+  if (!(0, types_1.isOfBuildType)(buildConfig, "custom")) {
+    throw new Error("deploy config is not custom");
+  }
+
+  var appBuildJob = buildConfig.buildCommand !== null ? (0, createBuildJob_1.createBuildJob)(context, {
+    image: buildConfig.jobImage,
+    variables: __assign({}, RUNNER_BUILD_VARIABLES),
+    script: __spreadArray([], __read((_a = (0, utils_1.ensureArray)(buildConfig.buildCommand)) !== null && _a !== void 0 ? _a : []), false),
+    artifacts: {
+      paths: __spreadArray([(0, path_1.join)(context.componentConfig.dir, "__build_info.json"), (0, path_1.join)(context.componentConfig.dir, "dist")], __read((_c = (_b = buildConfig.artifactsPaths) === null || _b === void 0 ? void 0 : _b.map(function (path) {
+        return (0, path_1.join)(context.componentConfig.dir, path);
+      })) !== null && _c !== void 0 ? _c : []), false)
+    }
+  }) : null;
+  return __spreadArray(__spreadArray([], __read(appBuildJob ? [appBuildJob] : []), false), __read((0, docker_1.requiresDockerBuild)(context) ? [(0, docker_1.createDockerBuildJobDefault)(context, {
+    script: [((_d = buildConfig.docker) === null || _d === void 0 ? void 0 : _d.type) === "nginx" ? "ensureNginxDockerfile" : "" // e.g. custom,
+    ].filter(Boolean),
+    variables: {},
+    needs: appBuildJob ? [constants_1.APP_BUILD_JOB_NAME] : []
+  })] : []), false);
+};
+
+exports.createCustomBuildJobs = createCustomBuildJobs;
+
+/***/ }),
+
+/***/ 3437:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.createCustomJobs = void 0;
+
+var buildJob_1 = __nccwpck_require__(2644);
+
+var createCustomJobs = function (context) {
+  return __spreadArray([], __read((0, buildJob_1.createCustomBuildJobs)(context)), false);
+};
+
+exports.createCustomJobs = createCustomJobs;
+
+/***/ }),
+
 /***/ 3219:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -38964,6 +39174,8 @@ var __exportStar = this && this.__exportStar || function (m, exports) {
 exports.__esModule = true;
 exports.BUILD_TYPES = void 0;
 
+var custom_1 = __nccwpck_require__(3437);
+
 var node_1 = __nccwpck_require__(6994);
 
 __exportStar(__nccwpck_require__(1197), exports);
@@ -39003,6 +39215,12 @@ exports.BUILD_TYPES = {
         startCommand: "node main.js"
       };
     }
+  },
+  custom: {
+    jobs: custom_1.createCustomJobs,
+    defaults: function () {
+      return {};
+    }
   }
 };
 
@@ -39084,10 +39302,8 @@ var constants_2 = __nccwpck_require__(9284);
 
 var yarn_1 = __nccwpck_require__(464);
 
-var reportingJob_1 = __nccwpck_require__(9572);
-
 var createNodeBuildJobs = function (context) {
-  var _a, _b, _c, _d, _e, _f, _g;
+  var _a, _b, _c, _d, _e;
 
   var buildConfig = context.componentConfig.build;
 
@@ -39096,17 +39312,14 @@ var createNodeBuildJobs = function (context) {
   }
 
   var yarnInstall = (0, yarn_1.getYarnInstall)(context);
-  var yarnReportDependenciesListCommand = ((_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.isClassic) ? "npm ls --depth 0 --json -prod | jq '.dependencies | to_entries | .[] | {artifact: .key, version: .value.version, type: \"npm\"}'" : "yarn info --json -A| jq '{version: .children.Version, artifact: .value, type: \"npm\" }'";
-  var debugcom = ((_b = context.packageManagerInfo) === null || _b === void 0 ? void 0 : _b.isClassic) ? "npm ls --depth 0 --json -prod" : "yarn info --json -A";
-  var yarnReportDependenciesCommand = ["mkdir -p ".concat(reportingJob_1.INVENTORY_ARTIFACTS_DIR_DEPENDENCIES), yarnReportDependenciesListCommand + " > " + reportingJob_1.INVENTORY_ARTIFACTS_DIR_DEPENDENCIES + "/app.jsonl"];
   var appBuildJob = buildConfig.buildCommand !== null ? (0, createBuildJob_1.createBuildJob)(context, {
     variables: __assign({}, constants_2.NODE_RUNNER_BUILD_VARIABLES),
     cache: __spreadArray(__spreadArray([], __read((0, cache_1.getNodeCache)(context)), false), __read((0, cache_1.getNextCache)(context)), false),
-    script: __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read(yarnInstall), false), __read((_c = (0, utils_1.ensureArray)(buildConfig.buildCommand)) !== null && _c !== void 0 ? _c : []), false), [debugcom], false), __read(yarnReportDependenciesCommand), false),
+    script: __spreadArray(__spreadArray([], __read(yarnInstall), false), __read((_a = (0, utils_1.ensureArray)(buildConfig.buildCommand)) !== null && _a !== void 0 ? _a : []), false),
     artifacts: {
-      paths: __spreadArray([(0, path_1.join)(context.componentConfig.dir, "dist"), (0, path_1.join)(context.componentConfig.dir, ".next")], __read((_e = (_d = buildConfig.artifactsPaths) === null || _d === void 0 ? void 0 : _d.map(function (path) {
+      paths: __spreadArray([(0, path_1.join)(context.componentConfig.dir, "__build_info.json"), (0, path_1.join)(context.componentConfig.dir, "dist"), (0, path_1.join)(context.componentConfig.dir, ".next")], __read((_c = (_b = buildConfig.artifactsPaths) === null || _b === void 0 ? void 0 : _b.map(function (path) {
         return (0, path_1.join)(context.componentConfig.dir, path);
-      })) !== null && _e !== void 0 ? _e : []), false)
+      })) !== null && _c !== void 0 ? _c : []), false)
     }
   }) : null;
   return __spreadArray(__spreadArray([], __read(appBuildJob ? [appBuildJob] : []), false), __read((0, docker_1.requiresDockerBuild)(context) ? [(0, docker_1.createDockerBuildJobDefault)(context, {
@@ -39121,9 +39334,9 @@ var createNodeBuildJobs = function (context) {
         prodOnly: true,
         noScripts: true
       }),
-      DOCKER_COPY_WORKSPACE_FILES: (_g = (_f = context.packageManagerInfo) === null || _f === void 0 ? void 0 : _f.pathsToCopyInDocker.map(function (dir) {
+      DOCKER_COPY_WORKSPACE_FILES: (_e = (_d = context.packageManagerInfo) === null || _d === void 0 ? void 0 : _d.pathsToCopyInDocker.map(function (dir) {
         return "COPY --chown=node:node ".concat(dir, " /app/").concat(dir);
-      })) === null || _g === void 0 ? void 0 : _g.join("\n")
+      })) === null || _e === void 0 ? void 0 : _e.join("\n")
     },
     needs: appBuildJob ? [constants_1.APP_BUILD_JOB_NAME] : []
   })] : []), false);
@@ -39180,14 +39393,21 @@ exports.getNextCache = exports.getNodeCache = exports.getNodeModulesCache = expo
 var path_1 = __nccwpck_require__(1017);
 
 var getYarnCache = function (context, policy) {
+  var _a;
+
   if (policy === void 0) {
     policy = "pull-push";
   }
 
-  return [{
+  var componentIsInWorkspace = (_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.componentIsInWorkspace;
+  return [componentIsInWorkspace ? {
     key: "yarn",
     policy: policy,
     paths: [".yarn"]
+  } : {
+    key: context.componentConfig.dir + "-yarn",
+    policy: policy,
+    paths: [(0, path_1.join)(context.componentConfig.dir, ".yarn")]
   }];
 };
 
@@ -39595,7 +39815,7 @@ var getYarnInstallCommand = function (context, options) {
 
     return (_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.version.startsWith(v);
   });
-  return (options === null || options === void 0 ? void 0 : options.prodOnly) ? "".concat((options === null || options === void 0 ? void 0 : options.noScripts) ? "YARN_ENABLE_SCRIPTS=false " : "").concat(doesNotShipWithBuiltInPlugins ? "yarn plugin import workspace-tools && " : " ", "yarn workspaces focus --production") // needs yarn plugin import workspace-tools
+  return (options === null || options === void 0 ? void 0 : options.prodOnly) ? "".concat((options === null || options === void 0 ? void 0 : options.noScripts) ? "YARN_ENABLE_SCRIPTS=false " : "").concat(doesNotShipWithBuiltInPlugins ? "yarn plugin import workspace-tools && " : " ", "yarn workspaces focus --production && yarn rebuild") // needs yarn plugin import workspace-tools
   : "".concat((options === null || options === void 0 ? void 0 : options.noScripts) ? "YARN_ENABLE_SCRIPTS=false " : "", "yarn install --immutable");
 };
 
@@ -39839,17 +40059,312 @@ exports.readConfigSync = readConfigSync;
 
 exports.__esModule = true;
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "inventory-2f61feef" || 0;
+exports.PIPELINE_IMAGE_TAG = "jdbc-064ed4e2" || 0;
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
 
 /***/ }),
 
+/***/ 5706:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.getEnvConfig = void 0;
+
+var utils_1 = __nccwpck_require__(7461);
+
+var getEnvConfig = function (config, componentName, env) {
+  var _a, _b;
+
+  var defaultConfig = config.components[componentName];
+
+  if (!defaultConfig) {
+    throw new Error("unknown component " + componentName);
+  }
+
+  var envCustomizations = (_b = (_a = defaultConfig.env) === null || _a === void 0 ? void 0 : _a[env]) !== null && _b !== void 0 ? _b : {};
+
+  if (envCustomizations === false) {
+    throw new Error("env is disabled: " + env);
+  }
+
+  return (0, utils_1.mergeWithMergingArrays)(defaultConfig, envCustomizations);
+};
+
+exports.getEnvConfig = getEnvConfig;
+
+/***/ }),
+
+/***/ 4811:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.getEnvType = void 0;
+
+var types_1 = __nccwpck_require__(1753);
+
+var getEnvType = function (env, envConfig) {
+  if (envConfig.type) return envConfig.type;
+
+  if ((0, types_1.isKnowEnvType)(env)) {
+    return env;
+  }
+
+  throw new Error("unknown env type: " + env);
+};
+
+exports.getEnvType = getEnvType;
+
+/***/ }),
+
 /***/ 740:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
 
 
+var __awaiter = this && this.__awaiter || function (thisArg, _arguments, P, generator) {
+  function adopt(value) {
+    return value instanceof P ? value : new P(function (resolve) {
+      resolve(value);
+    });
+  }
+
+  return new (P || (P = Promise))(function (resolve, reject) {
+    function fulfilled(value) {
+      try {
+        step(generator.next(value));
+      } catch (e) {
+        reject(e);
+      }
+    }
+
+    function rejected(value) {
+      try {
+        step(generator["throw"](value));
+      } catch (e) {
+        reject(e);
+      }
+    }
+
+    function step(result) {
+      result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
+    }
+
+    step((generator = generator.apply(thisArg, _arguments || [])).next());
+  });
+};
+
+var __generator = this && this.__generator || function (thisArg, body) {
+  var _ = {
+    label: 0,
+    sent: function () {
+      if (t[0] & 1) throw t[1];
+      return t[1];
+    },
+    trys: [],
+    ops: []
+  },
+      f,
+      y,
+      t,
+      g;
+  return g = {
+    next: verb(0),
+    "throw": verb(1),
+    "return": verb(2)
+  }, typeof Symbol === "function" && (g[Symbol.iterator] = function () {
+    return this;
+  }), g;
+
+  function verb(n) {
+    return function (v) {
+      return step([n, v]);
+    };
+  }
+
+  function step(op) {
+    if (f) throw new TypeError("Generator is already executing.");
+
+    while (_) try {
+      if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+      if (y = 0, t) op = [op[0] & 2, t.value];
+
+      switch (op[0]) {
+        case 0:
+        case 1:
+          t = op;
+          break;
+
+        case 4:
+          _.label++;
+          return {
+            value: op[1],
+            done: false
+          };
+
+        case 5:
+          _.label++;
+          y = op[1];
+          op = [0];
+          continue;
+
+        case 7:
+          op = _.ops.pop();
+
+          _.trys.pop();
+
+          continue;
+
+        default:
+          if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+            _ = 0;
+            continue;
+          }
+
+          if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+            _.label = op[1];
+            break;
+          }
+
+          if (op[0] === 6 && _.label < t[1]) {
+            _.label = t[1];
+            t = op;
+            break;
+          }
+
+          if (t && _.label < t[2]) {
+            _.label = t[2];
+
+            _.ops.push(op);
+
+            break;
+          }
+
+          if (t[2]) _.ops.pop();
+
+          _.trys.pop();
+
+          continue;
+      }
+
+      op = body.call(thisArg, _);
+    } catch (e) {
+      op = [6, e];
+      y = 0;
+    } finally {
+      f = t = 0;
+    }
+
+    if (op[0] & 5) throw op[1];
+    return {
+      value: op[0] ? op[1] : void 0,
+      done: true
+    };
+  }
+};
+
+exports.__esModule = true;
+exports.getEnvironment = void 0;
+
+var getEnvironmentContext_1 = __nccwpck_require__(4650);
+
+var getEnvironmentVariables_1 = __nccwpck_require__(6602);
+
+var getEnvironment = function (config, componentName, env, commitInfo) {
+  return __awaiter(void 0, void 0, void 0, function () {
+    var _a, envVars, secretEnvVarKeys, host, url, envContext, envType;
+
+    return __generator(this, function (_b) {
+      switch (_b.label) {
+        case 0:
+          return [4
+          /*yield*/
+          , (0, getEnvironmentVariables_1.getEnvironmentVariables)(config, componentName, env, commitInfo)];
+
+        case 1:
+          _a = _b.sent(), envVars = _a.envVars, secretEnvVarKeys = _a.secretEnvVarKeys, host = _a.host, url = _a.url;
+          envContext = (0, getEnvironmentContext_1.getEnvironmentContext)(config, env, componentName, commitInfo);
+          envType = envContext.envType;
+          return [2
+          /*return*/
+          , {
+            envType: envType,
+            host: host,
+            url: url,
+            gitlabEnvironment: {
+              name: envContext.gitlabEnvironmentName,
+              url: url
+            },
+            fullName: envContext.fullName,
+            slug: envContext.environmentSlug,
+            shortName: env,
+            envVars: envVars,
+            secretEnvVarKeys: secretEnvVarKeys
+          }];
+      }
+    });
+  });
+};
+
+exports.getEnvironment = getEnvironment;
+
+/***/ }),
+
+/***/ 4650:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.getEnvironmentContext = void 0;
+
+var getEnvConfig_1 = __nccwpck_require__(5706);
+
+var getEnvType_1 = __nccwpck_require__(4811);
+
+var getEnvironmentSlug = function (envConfig, env, componentName, commitInfo) {
+  var envType = (0, getEnvType_1.getEnvType)(env, envConfig);
+  return envType === "review" && commitInfo ? "".concat(env, "-").concat(commitInfo.reviewSlug, "-").concat(componentName) : "".concat(env, "-").concat(componentName);
+};
+
+var getEnvironmentContext = function (config, env, componentName, commitInfo) {
+  var envConfigRaw = (0, getEnvConfig_1.getEnvConfig)(config, componentName, env);
+  var envType = (0, getEnvType_1.getEnvType)(env, envConfigRaw);
+  var environmentSlug = getEnvironmentSlug(envConfigRaw, env, componentName, commitInfo);
+  var gitlabEnvironmentName = envType === "review" && commitInfo ? "".concat(env, "/").concat(commitInfo.refName, "/").concat(componentName) : "".concat(env, "/").concat(componentName);
+  var fullName = "".concat(config.customerName, "-").concat(config.appName, "-").concat(environmentSlug);
+  return {
+    envConfigRaw: envConfigRaw,
+    deployConfigRaw: envConfigRaw.deploy,
+    buildConfigRaw: envConfigRaw.build,
+    environmentSlug: environmentSlug,
+    gitlabEnvironmentName: gitlabEnvironmentName,
+    fullName: fullName,
+    envType: envType,
+    commitInfo: commitInfo,
+    componentName: componentName,
+    env: env,
+    fullConfig: config
+  };
+};
+
+exports.getEnvironmentContext = getEnvironmentContext;
+
+/***/ }),
+
+/***/ 6602:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
 var __assign = this && this.__assign || function () {
   __assign = Object.assign || function (t) {
     for (var s, i = 1, n = arguments.length; i < n; i++) {
@@ -40040,97 +40555,42 @@ var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
   return to.concat(ar || Array.prototype.slice.call(from));
 };
 
-var __importDefault = this && this.__importDefault || function (mod) {
-  return mod && mod.__esModule ? mod : {
-    "default": mod
-  };
-};
-
 exports.__esModule = true;
-exports.getEnvironment = exports.getSecretVarNameForContext = exports.getSecretVarName = void 0;
+exports.getSecretVarNameForContext = exports.getSecretVarName = exports.getEnvironmentVariables = void 0;
 
 var lodash_1 = __nccwpck_require__(3255);
 
-var slugify_1 = __importDefault(__nccwpck_require__(4035));
-
 var deploy_1 = __nccwpck_require__(223);
 
-var types_1 = __nccwpck_require__(3109);
-
-var config_1 = __nccwpck_require__(9997);
-
-var utils_1 = __nccwpck_require__(7461);
+var getEnvironmentContext_1 = __nccwpck_require__(4650);
 
 var resolveReferences_1 = __nccwpck_require__(928);
 
-var sanitizeForEnVar = function (s) {
-  return s.replace(/-/g, "_");
-};
-
-var getSecretVarName = function (env, componentName, key) {
-  return "CL_".concat(sanitizeForEnVar(env), "_").concat(sanitizeForEnVar(componentName), "_").concat(key);
-}; // remove dash from component name
-
-
-exports.getSecretVarName = getSecretVarName;
-
-var addIndexVar = function (vars) {
-  return __assign(__assign({}, vars), {
-    _ALL_ENV_VAR_KEYS: JSON.stringify(Object.keys(vars))
-  });
-};
-
-var getSecretVarNameForContext = function (context, key) {
-  return (0, exports.getSecretVarName)(context.environment.shortName, context.componentName, key);
-};
-
-exports.getSecretVarNameForContext = getSecretVarNameForContext;
-
-var getEnvironment = function (config, componentName, env, commitInfo, alreadyVisited // to prevent endless loop
+var getEnvironmentVariables = function (config, componentName, env, commitInfo, alreadyVisited // to prevent endless loop
 ) {
   if (alreadyVisited === void 0) {
     alreadyVisited = {};
   }
 
   return __awaiter(void 0, void 0, void 0, function () {
-    var defaultConfig, envConfig, mergedConfig, envType, basePredefinedVariables, gitlabEnvironmentName, environmentSlug, predefinedVariables, host, url, fullName, devLocalConfig, port, componentSlug, envInUrl, domainCanonical, HOST_CANONICAL, KUBE_APP_NAME_PREFIX, KUBE_APP_NAME, KUBE_NAMESPACE, publicEnvVarsRaw, additionalSecretKeys, secretEnvVarKeys, secretEnvVars, legacyFromComponents, publicEnvVarsRawWithLegasyFromComponents, publicEnvVarsRawSanitized, envVarsRaw, envVars;
+    var environmentContext, envConfigRaw, deployConfigRaw, envType, basePredefinedVariables, predefinedVariables, host, url, devLocalConfig, port, additionalEnvVars, publicEnvVarsRaw, additionalSecretKeys, secretEnvVarKeys, secretEnvVars, legacyFromComponents, publicEnvVarsRawWithLegasyFromComponents, publicEnvVarsRawSanitized, envVarsRaw, envVars;
 
-    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j;
 
-    return __generator(this, function (_o) {
-      switch (_o.label) {
+    return __generator(this, function (_k) {
+      switch (_k.label) {
         case 0:
-          defaultConfig = config.components[componentName];
-
-          if (!defaultConfig) {
-            throw new Error("unknown component " + componentName);
-          }
-
-          envConfig = (_b = (_a = defaultConfig.env) === null || _a === void 0 ? void 0 : _a[env]) !== null && _b !== void 0 ? _b : {};
-
-          if (envConfig === false) {
-            throw new Error("env is disabled: " + env);
-          }
-
-          mergedConfig = (0, utils_1.mergeWithMergingArrays)(defaultConfig, envConfig);
-          envType = (_c = envConfig === null || envConfig === void 0 ? void 0 : envConfig.type) !== null && _c !== void 0 ? _c : (0, config_1.isKnowEnvType)(env) ? env : null;
-
-          if (!envType) {
-            throw new Error("Missing type in environment " + env + " in component " + componentName);
-          }
-
+          environmentContext = (0, getEnvironmentContext_1.getEnvironmentContext)(config, env, componentName, commitInfo);
+          envConfigRaw = environmentContext.envConfigRaw, deployConfigRaw = environmentContext.deployConfigRaw, envType = environmentContext.envType;
           basePredefinedVariables = {
             ENV_SHORT: env,
-            APP_DIR: mergedConfig.dir,
+            APP_DIR: envConfigRaw.dir,
             ENV_TYPE: envType
           };
-          gitlabEnvironmentName = envType === "review" && commitInfo ? "".concat(env, "/").concat(commitInfo.refName, "/").concat(componentName) : "".concat(env, "/").concat(componentName);
-          environmentSlug = envType === "review" && commitInfo ? "".concat(env, "-").concat(commitInfo.reviewSlug, "-").concat(componentName) : "".concat(env, "-").concat(componentName);
-          fullName = "".concat(config.customerName, "-").concat(config.appName, "-").concat(environmentSlug);
 
           if (envType === "local") {
-            devLocalConfig = mergedConfig;
-            port = (_d = devLocalConfig.port) !== null && _d !== void 0 ? _d : 3000;
+            devLocalConfig = envConfigRaw;
+            port = (_a = devLocalConfig.port) !== null && _a !== void 0 ? _a : 3000;
             host = "localhost:" + port;
             url = "http://" + host;
             predefinedVariables = {
@@ -40139,34 +40599,22 @@ var getEnvironment = function (config, componentName, env, commitInfo, alreadyVi
               PORT: port.toString()
             };
           } else {
-            componentSlug = (0, slugify_1["default"])(componentName);
-            envInUrl = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, ".").concat(env) : env;
-            domainCanonical = (mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.deploy) && (mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.deploy.type) === "kubernetes" && ((_e = mergedConfig.deploy.cluster) === null || _e === void 0 ? void 0 : _e.domainCanonical) || // for convenience, we allow clusters to define a canonical domain, because a cluster has a fixed ip and you will usually have a domain pointing to that cluster
-            config.domainCanonical || "panter.cloud";
-            HOST_CANONICAL = (0, types_1.isOfDeployType)(mergedConfig.deploy, "google-cloudrun") ? fullName.toLowerCase() + "-" + process.env[(0, exports.getSecretVarName)(env, componentName, deploy_1.GCLOUD_RUN_CANONICAL_HOST_SUFFIX)] : "".concat(componentSlug, ".").concat(envInUrl, ".").concat(config.appName, ".").concat(config.customerName, ".").concat(domainCanonical);
-            host = (_f = mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.host) !== null && _f !== void 0 ? _f : HOST_CANONICAL;
+            additionalEnvVars = deployConfigRaw ? deploy_1.DEPLOY_TYPES[deployConfigRaw.type].getAdditionalEnvVars(environmentContext) : {};
+            host = (_c = (_b = envConfigRaw === null || envConfigRaw === void 0 ? void 0 : envConfigRaw.host) !== null && _b !== void 0 ? _b : additionalEnvVars.HOST_CANONICAL) !== null && _c !== void 0 ? _c : "unknown-host.example.com";
             url = "https://".concat(host);
-            KUBE_APP_NAME_PREFIX = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, "-") : "";
-            KUBE_APP_NAME = "".concat(KUBE_APP_NAME_PREFIX).concat(componentName);
-            KUBE_NAMESPACE = (0, deploy_1.getKubernetesNamespace)(config, env);
-            predefinedVariables = __assign(__assign({}, basePredefinedVariables), {
-              HOST_CANONICAL: HOST_CANONICAL,
+            predefinedVariables = __assign(__assign(__assign({}, basePredefinedVariables), {
               HOST: host,
-              ROOT_URL: url,
-              KUBE_NAMESPACE: KUBE_NAMESPACE,
-              KUBE_APP_NAME: KUBE_APP_NAME,
-              KUBE_APP_NAME_PREFIX: KUBE_APP_NAME_PREFIX
-            });
+              ROOT_URL: url
+            }), additionalEnvVars);
           }
 
-          publicEnvVarsRaw = (_h = (_g = mergedConfig.vars) === null || _g === void 0 ? void 0 : _g.public) !== null && _h !== void 0 ? _h : {};
-          additionalSecretKeys = mergedConfig.deploy ? deploy_1.DEPLOY_TYPES[mergedConfig.deploy.type].additionalSecretKeys( // eslint-disable-next-line @typescript-eslint/no-explicit-any
-          mergedConfig.deploy) : [];
-          secretEnvVarKeys = __spreadArray(__spreadArray([], __read((_k = (_j = mergedConfig.vars) === null || _j === void 0 ? void 0 : _j.secret) !== null && _k !== void 0 ? _k : []), false), __read(additionalSecretKeys), false);
+          publicEnvVarsRaw = (_e = (_d = envConfigRaw.vars) === null || _d === void 0 ? void 0 : _d.public) !== null && _e !== void 0 ? _e : {};
+          additionalSecretKeys = deployConfigRaw ? deploy_1.DEPLOY_TYPES[deployConfigRaw.type].additionalSecretKeys(environmentContext) : [];
+          secretEnvVarKeys = __spreadArray(__spreadArray([], __read((_g = (_f = envConfigRaw.vars) === null || _f === void 0 ? void 0 : _f.secret) !== null && _g !== void 0 ? _g : []), false), __read(additionalSecretKeys), false);
           secretEnvVars = Object.fromEntries(secretEnvVarKeys.map(function (key) {
             return [key, "$".concat((0, exports.getSecretVarName)(env, componentName, key))];
           }));
-          legacyFromComponents = (_m = (_l = mergedConfig.vars) === null || _l === void 0 ? void 0 : _l.fromComponents) !== null && _m !== void 0 ? _m : {};
+          legacyFromComponents = (_j = (_h = envConfigRaw.vars) === null || _h === void 0 ? void 0 : _h.fromComponents) !== null && _j !== void 0 ? _j : {};
           publicEnvVarsRawWithLegasyFromComponents = (0, lodash_1.merge)({}, (0, resolveReferences_1.translateLegacyFromComponents)(legacyFromComponents), publicEnvVarsRaw);
           publicEnvVarsRawSanitized = Object.fromEntries(Object.entries(publicEnvVarsRawWithLegasyFromComponents).map(function (_a) {
             var _b = __read(_a, 2),
@@ -40178,50 +40626,65 @@ var getEnvironment = function (config, componentName, env, commitInfo, alreadyVi
           envVarsRaw = addIndexVar(__assign(__assign(__assign({}, predefinedVariables), secretEnvVars), publicEnvVarsRawSanitized));
           return [4
           /*yield*/
-          , (0, resolveReferences_1.resolveReferences)(envVarsRaw, function (componentName, variableName, alreadyVisited) {
+          , (0, resolveReferences_1.resolveReferences)(envVarsRaw, function (otherComponentName, variableName, alreadyVisited) {
             return __awaiter(void 0, void 0, void 0, function () {
-              var envVars;
+              var otherEnvVars;
               return __generator(this, function (_a) {
                 switch (_a.label) {
                   case 0:
                     return [4
                     /*yield*/
-                    , (0, exports.getEnvironment)(config, componentName, env, commitInfo, alreadyVisited)];
+                    , (0, exports.getEnvironmentVariables)(config, otherComponentName, env, commitInfo, alreadyVisited)];
 
                   case 1:
-                    envVars = _a.sent().envVars;
+                    otherEnvVars = _a.sent().envVars;
                     return [2
                     /*return*/
-                    , envVars[variableName]];
+                    , otherEnvVars[variableName]];
                 }
               });
             });
           }, alreadyVisited)];
 
         case 1:
-          envVars = _o.sent();
+          envVars = _k.sent();
           return [2
           /*return*/
           , {
-            envType: envType,
-            host: host,
-            url: url,
-            gitlabEnvironment: {
-              name: gitlabEnvironmentName,
-              url: url
-            },
-            fullName: fullName,
-            slug: environmentSlug,
-            shortName: env,
             envVars: envVars,
-            secretEnvVarKeys: secretEnvVarKeys
+            secretEnvVarKeys: secretEnvVarKeys,
+            host: host,
+            url: url
           }];
       }
     });
   });
 };
 
-exports.getEnvironment = getEnvironment;
+exports.getEnvironmentVariables = getEnvironmentVariables;
+
+var sanitizeForEnVar = function (s) {
+  return s.replace(/-/g, "_");
+};
+
+var getSecretVarName = function (env, componentName, key) {
+  return "CL_".concat(sanitizeForEnVar(env), "_").concat(sanitizeForEnVar(componentName), "_").concat(key);
+}; // remove dash from component name
+
+
+exports.getSecretVarName = getSecretVarName;
+
+var addIndexVar = function (vars) {
+  return __assign(__assign({}, vars), {
+    _ALL_ENV_VAR_KEYS: JSON.stringify(Object.keys(vars))
+  });
+};
+
+var getSecretVarNameForContext = function (context, key) {
+  return (0, exports.getSecretVarName)(context.environment.shortName, context.componentName, key);
+};
+
+exports.getSecretVarNameForContext = getSecretVarNameForContext;
 
 /***/ }),
 
@@ -40456,34 +40919,30 @@ var utils_1 = __nccwpck_require__(7461);
 
 var getEnvironment_1 = __nccwpck_require__(740);
 
+var getEnvironmentContext_1 = __nccwpck_require__(4650);
+
 __exportStar(__nccwpck_require__(740), exports);
 
+__exportStar(__nccwpck_require__(6602), exports);
+
 var createContext = function (config, componentName, env, commitInfo, packageManagerInfo) {
   return __awaiter(void 0, void 0, void 0, function () {
-    var rawConfig, envConfig, componentConfigWithoutDefaults, defaults, componentConfig;
+    var envContext, componentConfigWithoutDefaults, defaults, componentConfig;
 
     var _a;
 
-    var _b, _c;
-
-    return __generator(this, function (_d) {
-      switch (_d.label) {
+    return __generator(this, function (_b) {
+      switch (_b.label) {
         case 0:
           if (!/^[a-z0-9-]+$/.test(componentName)) {
             throw new Error("componentName may only contain lower case letters, numbers and -");
           }
 
-          rawConfig = config.components[componentName];
-
-          if (!rawConfig) {
-            throw new Error("unknown component " + componentName);
-          }
-
-          envConfig = (_c = (_b = rawConfig.env) === null || _b === void 0 ? void 0 : _b[env]) !== null && _c !== void 0 ? _c : {};
-          componentConfigWithoutDefaults = (0, utils_1.mergeWithMergingArrays)(rawConfig, envConfig);
+          envContext = (0, getEnvironmentContext_1.getEnvironmentContext)(config, env, componentName, commitInfo);
+          componentConfigWithoutDefaults = envContext.envConfigRaw;
           defaults = componentConfigWithoutDefaults.deploy ? {
-            build: build_1.BUILD_TYPES[componentConfigWithoutDefaults.build.type].defaults(),
-            deploy: deploy_1.DEPLOY_TYPES[componentConfigWithoutDefaults.deploy.type].defaults()
+            build: build_1.BUILD_TYPES[componentConfigWithoutDefaults.build.type].defaults(envContext),
+            deploy: deploy_1.DEPLOY_TYPES[componentConfigWithoutDefaults.deploy.type].defaults(envContext)
           } : {
             build: {},
             deploy: {}
@@ -40501,7 +40960,7 @@ var createContext = function (config, componentName, env, commitInfo, packageMan
         case 1:
           return [2
           /*return*/
-          , (_a.environment = _d.sent(), _a.commitInfo = commitInfo, _a.packageManagerInfo = packageManagerInfo, _a)];
+          , (_a.environment = _b.sent(), _a.commitInfo = commitInfo, _a.packageManagerInfo = packageManagerInfo, _a)];
       }
     });
   });
@@ -41040,115 +41499,393 @@ var __read = this && this.__read || function (o, n) {
   return ar;
 };
 
-var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
-  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
-    if (ar || !(i in from)) {
-      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
-      ar[i] = from[i];
-    }
-  }
-  return to.concat(ar || Array.prototype.slice.call(from));
-};
-
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.createGoogleCloudRunDeployJobs = void 0;
+
+var js_yaml_1 = __nccwpck_require__(3618);
+
+var lodash_1 = __nccwpck_require__(3255);
+
+var _1 = __nccwpck_require__(1344);
+
+var docker_1 = __nccwpck_require__(3219);
+
+var getLabels_1 = __nccwpck_require__(486);
+
+var runner_1 = __nccwpck_require__(5071);
+
+var base_1 = __nccwpck_require__(9177);
+
+var types_1 = __nccwpck_require__(3109);
+
+var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(2607);
+
+var database_1 = __nccwpck_require__(1384);
+
+var gitlab_1 = __nccwpck_require__(4997);
+
+var createGoogleCloudRunDeployJobs = function (context) {
+  var _a;
+
+  var deployConfig = context.componentConfig.deploy;
+
+  if (deployConfig === false) {
+    return [];
+  }
+
+  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    // should not happen
+    throw new Error("deploy config is wrong");
+  }
+
+  var baseDeploymentJob = (0, base_1.getBaseDeploymentJob)(context);
+  var fullAppName = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName);
+  var dockerUrl = "".concat(deployConfig.region, "-docker.pkg.dev/").concat(deployConfig.projectId, "/catladder-deploy/").concat(fullAppName);
+  var gcloudImageName = "".concat(dockerUrl, "/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG");
+
+  var pushImageToArtifactsRegistry = __spreadArray(__spreadArray([docker_1.gitlabDockerLogin], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud auth configure-docker ".concat(deployConfig.region, "-docker.pkg.dev"), "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG ".concat(gcloudImageName), "docker push ".concat(gcloudImageName)], false);
+
+  var allEnvVars = (0, lodash_1.omit)(context.environment.envVars, _1.GCLOUD_DEPLOY_CREDENTIALS_KEY);
+  var labelsString = Object.entries((0, getLabels_1.getLabels)(context)).map(function (_a) {
+    var _b = __read(_a, 2),
+        key = _b[0],
+        value = _b[1];
+
+    return "".concat(key, "=").concat(value);
+  }).join(",");
+  var commonArgs = "--project ".concat(deployConfig.projectId, " --region=").concat(deployConfig.region);
+  var cloudRunArgs = deployConfig.cloudSql ? "--set-cloudsql-instances=".concat(deployConfig.cloudSql.instanceConnectionName) : "";
+  var commonDeployArgs = "--image ".concat(gcloudImageName, " ").concat(commonArgs, " ").concat(cloudRunArgs, " --labels ").concat(labelsString);
+  var serviceName = context.environment.fullName.toLowerCase();
+
+  var getServiceDeployScript = function (service) {
+    var _a;
+
+    var command = service !== true ? (_a = service === null || service === void 0 ? void 0 : service.command) !== null && _a !== void 0 ? _a : context.componentConfig.build.startCommand : undefined;
+    var commandArg = command ? "--command=\"".concat(command.split(" ").join(","), "\"") : "";
+    return "gcloud run deploy ".concat(serviceName, " ").concat(commandArg, " ").concat(commonDeployArgs, " --env-vars-file=____envvars.yaml --allow-unauthenticated");
+  };
+
+  var getJobCreateScripts = function (jobName, job) {
+    // due to some oversight from google, jobs create does not accept `--env-vars-file` 🤦
+    // lucky, update on the other hand accepts it... so let's just imediatly update it
+    // also we cannot upsert a job, so we have to create it and catch the error and then update
+    var args = "".concat(jobName, " --command=\"").concat(job.command.split(" ").join(","), "\" ").concat(commonDeployArgs, " --memory=").concat(job.memory || "512Mi");
+    return __spreadArray(__spreadArray([], __read((0, gitlab_1.allowFailureInScripts)(["gcloud beta run jobs create ".concat(args)])), false), ["gcloud beta run jobs update ".concat(args, " --env-vars-file=____envvars.yaml")], false);
+  };
+
+  var getJobRunScript = function (jobName) {
+    return "gcloud beta run jobs execute ".concat(jobName, " ").concat(commonArgs);
+  };
+
+  var getFullJobName = function (name) {
+    return context.environment.fullName.toLowerCase() + "-" + name.toLowerCase();
+  };
+
+  var jobsWithNames = Object.entries((_a = deployConfig.jobs) !== null && _a !== void 0 ? _a : {}) // filter out disabled jobs
+  .filter(function (entry) {
+    return Boolean(entry[1]);
+  }).map(function (_a) {
+    var _b = __read(_a, 2),
+        name = _b[0],
+        job = _b[1];
+
+    return [getFullJobName(name), job];
+  });
+
+  var cloudRunDeployScripts = __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(["echo \"$ENV_VARS\" > ____envvars.yaml"], __read(deployConfig.cloudSql ? (0, database_1.getDatabaseCreateScript)(context, deployConfig) // we create the db, so that we can also delete it afterwards
+  : []), false), __read(jobsWithNames.map(function (_a) {
+    var _b = __read(_a, 2),
+        name = _b[0],
+        job = _b[1];
+
+    return getJobCreateScripts(name, job);
+  }).flat()), false), __read(jobsWithNames.filter(function (_a) {
+    var _b = __read(_a, 2),
+        job = _b[1];
+
+    return job.when === "preDeploy";
+  }).map(function (_a) {
+    var _b = __read(_a, 1),
+        name = _b[0];
+
+    return getJobRunScript(name);
+  })), false), __read(deployConfig.service !== false ? [getServiceDeployScript(deployConfig.service)] : []), false), __read(jobsWithNames.filter(function (_a) {
+    var _b = __read(_a, 2),
+        job = _b[1];
+
+    return job.when === "postDeploy";
+  }).map(function (_a) {
+    var _b = __read(_a, 1),
+        name = _b[0];
+
+    return getJobRunScript(name);
+  })), false), ["docker image rm ".concat(gcloudImageName)], false);
+
+  var cloudRunStopScripts = __spreadArray(__spreadArray(__spreadArray([], __read(deployConfig.service !== false ? ["gcloud run services delete ".concat(serviceName, " ").concat(commonArgs)] : []), false), __read(jobsWithNames.map(function (_a) {
+    var _b = __read(_a, 1),
+        name = _b[0];
+
+    return "gcloud beta run jobs delete ".concat(name, " ").concat(commonArgs);
+  })), false), __read(deployConfig.cloudSql && deployConfig.cloudSql.deleteDatabaseOnStop ? (0, database_1.getDatabaseDeleteScript)(context, deployConfig) : []), false);
+
+  var baseStopJob = (0, base_1.getBaseDeploymentStopJob)(context);
+  return [(0, lodash_1.merge)({}, baseDeploymentJob, (0, docker_1.getDockerJobBaseProps)(context), {
+    artifacts: {
+      paths: ["____envvars.yaml"]
+    },
+    variables: {
+      CLOUDSDK_CORE_DISABLE_PROMPTS: "1",
+      ENV_VARS: (0, js_yaml_1.dump)(allEnvVars, {
+        lineWidth: -1,
+        quotingType: "'",
+        forceQuotes: true
+      })
+    },
+    image: (0, runner_1.getRunnerImage)("gcloud"),
+    script: __spreadArray(__spreadArray([], __read(pushImageToArtifactsRegistry), false), __read(cloudRunDeployScripts), false)
+  }), (0, lodash_1.merge)({}, baseStopJob, {
+    image: (0, runner_1.getRunnerImage)("gcloud"),
+    variables: {
+      CLOUDSDK_CORE_DISABLE_PROMPTS: "1"
+    },
+    script: __spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), __read(cloudRunStopScripts), false)
+  })];
+};
+
+exports.createGoogleCloudRunDeployJobs = createGoogleCloudRunDeployJobs;
+
+/***/ }),
+
+/***/ 1344:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+
+    return t;
+  };
+
+  return __assign.apply(this, arguments);
+};
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.GCLOUD_RUN_DEPLOY_TYPE = exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = void 0;
+
+var context_1 = __nccwpck_require__(2041);
+
+var gitlab_1 = __nccwpck_require__(4997);
+
+var deployJob_1 = __nccwpck_require__(2256);
+
+exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
+exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = "GCLOUD_RUN_canonicalHostSuffix";
+
+var getCloudSqlVariables = function (_a) {
+  var _b;
+
+  var deployConfigRaw = _a.deployConfigRaw,
+      environmentSlug = _a.environmentSlug,
+      env = _a.env,
+      componentName = _a.componentName,
+      fullConfig = _a.fullConfig;
+
+  if (deployConfigRaw && deployConfigRaw.cloudSql) {
+    var DB_NAME = [(_b = deployConfigRaw.cloudSql.dbNamePrefix) !== null && _b !== void 0 ? _b : "".concat(fullConfig.customerName, "-").concat(fullConfig.appName), environmentSlug].filter(Boolean).join("-");
+    var hostAndDb = "localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME";
+    return {
+      CLOUD_SQL_INSTANCE_CONNECTION_NAME: deployConfigRaw.cloudSql.instanceConnectionName,
+      DB_NAME: DB_NAME,
+      DB_USER: "postgres",
+      DB_PASSWORD: "$" + (0, context_1.getSecretVarName)(env, componentName, "DB_PASSWORD"),
+      DATABASE_URL: "postgresql://$DB_USER:$DB_PASSWORD@".concat(hostAndDb),
+      DATABASE_JDBC_URL: "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD"
+    };
+  }
+
+  return {};
+};
+
+exports.GCLOUD_RUN_DEPLOY_TYPE = {
+  jobs: deployJob_1.createGoogleCloudRunDeployJobs,
+  defaults: function (_a) {
+    var deployConfigRaw = _a.deployConfigRaw,
+        envType = _a.envType;
+
+    if (deployConfigRaw && deployConfigRaw.cloudSql) {
+      return {
+        cloudSql: {
+          deleteDatabaseOnStop: envType === "review"
+        }
+      };
+    }
+
+    return {};
+  },
+  additionalSecretKeys: function (ctx) {
+    return __spreadArray([exports.GCLOUD_DEPLOY_CREDENTIALS_KEY], __read(ctx.deployConfigRaw && ctx.deployConfigRaw.cloudSql ? ["DB_PASSWORD"] : []), false);
+  },
+  getAdditionalEnvVars: function (ctx) {
+    var fullName = ctx.fullName,
+        env = ctx.env,
+        componentName = ctx.componentName,
+        deployConfigRaw = ctx.deployConfigRaw;
+    var HOST_CANONICAL = fullName.toLowerCase() + "-" + process.env[(0, context_1.getSecretVarName)(env, componentName, exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX)];
+    var jobTriggers = deployConfigRaw && deployConfigRaw.jobs ? Object.fromEntries(Object.entries(deployConfigRaw.jobs).map(function (_a) {
+      var _b = __read(_a, 2),
+          name = _b[0],
+          job = _b[1];
+
+      return ["CLOUD_RUN_JOB_TRIGGER_URL_" + (0, gitlab_1.sanitizeForBashVariable)(name), "https://".concat(deployConfigRaw.region, "-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/").concat(deployConfigRaw.projectId, "/jobs/").concat(name, ":run")];
+    })) : {};
+    return __assign(__assign({
+      HOST_CANONICAL: HOST_CANONICAL
+    }, getCloudSqlVariables(ctx)), jobTriggers);
+  }
+};
+
+/***/ }),
+
+/***/ 1384:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
 exports.__esModule = true;
-exports.createDeployJob = void 0;
-
-var js_yaml_1 = __nccwpck_require__(3618);
-
-var lodash_1 = __nccwpck_require__(3255);
-
-var _1 = __nccwpck_require__(1344);
+exports.getDatabaseCreateScript = exports.getDatabaseDeleteScript = void 0;
 
-var docker_1 = __nccwpck_require__(3219);
+var gitlab_1 = __nccwpck_require__(4997);
 
-var getLabels_1 = __nccwpck_require__(486);
-
-var runner_1 = __nccwpck_require__(5071);
-
-var base_1 = __nccwpck_require__(9177);
-
-var types_1 = __nccwpck_require__(3109);
-
-var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(2607);
-
-var createDeployJob = function (context) {
-  var deployConfig = context.componentConfig.deploy;
+var getDatabaseDeleteScript = function (context, deployConfig) {
+  var _a;
 
-  if (deployConfig === false) {
-    return [];
+  if (!deployConfig.cloudSql || !deployConfig.cloudSql.deleteDatabaseOnStop) {
+    throw new Error("not possible");
   }
 
-  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
-    // should not happen
-    throw new Error("deploy config is not custom");
-  }
-
-  var baseDeploymentJob = (0, base_1.getBaseDeploymentJob)(context);
-  var fullAppName = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName);
-  var dockerUrl = "".concat(deployConfig.region, "-docker.pkg.dev/").concat(deployConfig.projectId, "/catladder-deploy/").concat(fullAppName);
-  var gcloudImageName = "".concat(dockerUrl, "/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG");
+  var DB_NAME = ((_a = context.environment.envVars) !== null && _a !== void 0 ? _a : {}).DB_NAME;
 
-  var pushImageToArtifactsRegistry = __spreadArray(__spreadArray([docker_1.gitlabDockerLogin], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud auth configure-docker ".concat(deployConfig.region, "-docker.pkg.dev"), "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG ".concat(gcloudImageName), "docker push ".concat(gcloudImageName)], false);
+  if (!DB_NAME) {
+    throw new Error("error: env vars did not specify DB_NAME");
+  }
 
-  var allEnvVars = (0, lodash_1.omit)(context.environment.envVars, _1.GCLOUD_DEPLOY_CREDENTIALS_KEY);
-  var serviceName = context.environment.fullName.toLowerCase();
-  var labelsString = Object.entries((0, getLabels_1.getLabels)(context)).map(function (_a) {
-    var _b = __read(_a, 2),
-        key = _b[0],
-        value = _b[1];
+  var _b = __read(deployConfig.cloudSql.instanceConnectionName.split(":"), 3),
+      projectId = _b[0],
+      region = _b[1],
+      instanceId = _b[2]; // unfortunatly the database cannot be deleted right after the service has stopped, as it might still have connections
+  // we have to repeate this process
 
-    return "".concat(key, "=").concat(value);
-  }).join(",");
-  var command = context.componentConfig.build.startCommand ? "--command=\"".concat(context.componentConfig.build.startCommand.split(" ").join(","), "\"") : ""; // TODO: split secrets out
 
-  var cloudRunDeploy = ["echo \"$ENV_VARS\" > ____envvars.yaml", "gcloud run deploy ".concat(serviceName, " --image ").concat(gcloudImageName, " --region=").concat(deployConfig.region, " --allow-unauthenticated --project ").concat(deployConfig.projectId, " ").concat(command, " --env-vars-file=____envvars.yaml --labels ").concat(labelsString), "docker image rm ".concat(gcloudImageName)];
-  var baseStopJob = (0, base_1.getBaseDeploymentStopJob)(context);
-  return [(0, lodash_1.merge)({}, baseDeploymentJob, (0, docker_1.getDockerJobBaseProps)(context), {
-    artifacts: {
-      paths: ["____envvars.yaml"]
-    },
-    variables: {
-      ENV_VARS: (0, js_yaml_1.dump)(allEnvVars, {
-        lineWidth: -1,
-        quotingType: "'",
-        forceQuotes: true
-      })
-    },
-    image: (0, runner_1.getRunnerImage)("gcloud"),
-    script: __spreadArray(__spreadArray([], __read(pushImageToArtifactsRegistry), false), __read(cloudRunDeploy), false)
-  }), (0, lodash_1.merge)({}, baseStopJob, {
-    image: (0, runner_1.getRunnerImage)("gcloud"),
-    script: __spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud run services delete ".concat(serviceName, " --project ").concat(deployConfig.projectId, " --region=").concat(deployConfig.region, " --quiet")], false)
+  return ["echo \"deleting database ".concat(DB_NAME, "...\""), "echo \"\uD83D\uDC46 this can take multiple attemps (3-5min), because google cloud run may still have a connection to the database after the cloud run service is shut down\"", (0, gitlab_1.repeatOnFailure)("gcloud sql databases delete ".concat(DB_NAME, " --instance=").concat(instanceId, " --project ").concat(projectId), {
+    pauseInSeconds: 10
   })];
 };
 
-exports.createDeployJob = createDeployJob;
+exports.getDatabaseDeleteScript = getDatabaseDeleteScript;
 
-/***/ }),
+var getDatabaseCreateScript = function (context, deployConfig) {
+  var _a;
 
-/***/ 1344:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+  if (!deployConfig.cloudSql) {
+    throw new Error("not possible");
+  }
 
-"use strict";
+  var DB_NAME = ((_a = context.environment.envVars) !== null && _a !== void 0 ? _a : {}).DB_NAME;
 
+  if (!DB_NAME) {
+    throw new Error("error: env vars did not specify DB_NAME");
+  }
 
-exports.__esModule = true;
-exports.GCLOUD_RUN_DEPLOY_TYPE = exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = void 0;
+  var _b = __read(deployConfig.cloudSql.instanceConnectionName.split(":"), 3),
+      projectId = _b[0],
+      region = _b[1],
+      instanceId = _b[2]; // may fail if it already exists
 
-var deployJob_1 = __nccwpck_require__(2256);
 
-exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
-exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = "GCLOUD_RUN_canonicalHostSuffix";
-exports.GCLOUD_RUN_DEPLOY_TYPE = {
-  jobs: deployJob_1.createDeployJob,
-  defaults: function () {
-    return {};
-  },
-  additionalSecretKeys: function () {
-    return [exports.GCLOUD_DEPLOY_CREDENTIALS_KEY];
-  }
+  return (0, gitlab_1.allowFailureInScripts)(["echo \"ensuring Database...\"", "gcloud sql databases create ".concat(DB_NAME, " --instance=").concat(instanceId, " --project ").concat(projectId)]);
 };
 
+exports.getDatabaseCreateScript = getDatabaseCreateScript;
+
 /***/ }),
 
 /***/ 2607:
@@ -41172,43 +41909,6 @@ exports.gcloudServiceAccountLoginCommands = gcloudServiceAccountLoginCommands;
 
 /***/ }),
 
-/***/ 3539:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
-
-"use strict";
-
-
-exports.__esModule = true;
-exports.getCloudSQLConfig = exports.hasCloudSQL = void 0;
-
-var types_1 = __nccwpck_require__(3109);
-
-var hasCloudSQL = function (context) {
-  var _a, _b;
-
-  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
-    return (_b = (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql) === null || _b === void 0 ? void 0 : _b.enabled;
-  }
-
-  return false;
-};
-
-exports.hasCloudSQL = hasCloudSQL;
-
-var getCloudSQLConfig = function (context) {
-  var _a;
-
-  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
-    return (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql;
-  }
-
-  throw new Error("cannot get cloud sql config");
-};
-
-exports.getCloudSQLConfig = getCloudSQLConfig;
-
-/***/ }),
-
 /***/ 6531:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -41302,6 +42002,9 @@ exports.CUSTOM_DEPLOY_TYPE = {
   },
   additionalSecretKeys: function () {
     return [];
+  },
+  getAdditionalEnvVars: function () {
+    return {};
   }
 };
 
@@ -41365,6 +42068,9 @@ exports.DOCKER_TAG_DEPLOY_TYPE = {
   },
   additionalSecretKeys: function () {
     return [];
+  },
+  getAdditionalEnvVars: function () {
+    return {};
   }
 };
 
@@ -41404,21 +42110,21 @@ var dockerTag_1 = __nccwpck_require__(8990);
 
 var kubernetes_1 = __nccwpck_require__(5682);
 
+__exportStar(__nccwpck_require__(1344), exports);
+
+__exportStar(__nccwpck_require__(1925), exports);
+
 __exportStar(__nccwpck_require__(5682), exports);
 
 __exportStar(__nccwpck_require__(3109), exports);
 
 __exportStar(__nccwpck_require__(2757), exports);
 
-__exportStar(__nccwpck_require__(3539), exports);
-
-__exportStar(__nccwpck_require__(1344), exports);
-
 exports.DEPLOY_TYPES = {
   kubernetes: kubernetes_1.KUBERNETES_DEPLOY_TYPE,
   custom: custom_1.CUSTOM_DEPLOY_TYPE,
-  "google-cloudrun": cloudRun_1.GCLOUD_RUN_DEPLOY_TYPE,
-  dockerTag: dockerTag_1.DOCKER_TAG_DEPLOY_TYPE
+  dockerTag: dockerTag_1.DOCKER_TAG_DEPLOY_TYPE,
+  "google-cloudrun": cloudRun_1.GCLOUD_RUN_DEPLOY_TYPE
 };
 
 /***/ }),
@@ -41432,20 +42138,26 @@ exports.DEPLOY_TYPES = {
 exports.__esModule = true;
 exports.additionalKubernetesSecretKeys = void 0;
 
-var additionalKubernetesSecretKeys = function (config) {
-  var _a, _b, _c, _d;
+var additionalKubernetesSecretKeys = function (_a) {
+  var _b, _c, _d, _e;
+
+  var deployConfigRaw = _a.deployConfigRaw;
+
+  if (!deployConfigRaw) {
+    return [];
+  }
 
   var keys = [];
 
-  if ((_b = (_a = config.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled) {
+  if ((_c = (_b = deployConfigRaw.values) === null || _b === void 0 ? void 0 : _b.mongodb) === null || _c === void 0 ? void 0 : _c.enabled) {
     keys.push("MONGODB_ROOT_PASSWORD");
 
-    if (config.values.mongodb.architecture === "replicaset") {
+    if (deployConfigRaw.values.mongodb.architecture === "replicaset") {
       keys.push("MONGODB_REPLICASET_KEY");
     }
   }
 
-  if ((_d = (_c = config.values) === null || _c === void 0 ? void 0 : _c.cloudsql) === null || _d === void 0 ? void 0 : _d.enabled) {
+  if ((_e = (_d = deployConfigRaw.values) === null || _d === void 0 ? void 0 : _d.cloudsql) === null || _e === void 0 ? void 0 : _e.enabled) {
     keys.push("POSTGRESQL_PASSWORD");
     keys.push("cloudsqlProxyCredentials");
   }
@@ -41457,6 +42169,43 @@ exports.additionalKubernetesSecretKeys = additionalKubernetesSecretKeys;
 
 /***/ }),
 
+/***/ 1925:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.getKubernetesCloudSQLConfig = exports.hasKubernetesCloudSQL = void 0;
+
+var types_1 = __nccwpck_require__(3109);
+
+var hasKubernetesCloudSQL = function (context) {
+  var _a, _b;
+
+  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+    return (_b = (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql) === null || _b === void 0 ? void 0 : _b.enabled;
+  }
+
+  return false;
+};
+
+exports.hasKubernetesCloudSQL = hasKubernetesCloudSQL;
+
+var getKubernetesCloudSQLConfig = function (context) {
+  var _a;
+
+  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+    return (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql;
+  }
+
+  throw new Error("cannot get cloud sql config");
+};
+
+exports.getKubernetesCloudSQLConfig = getKubernetesCloudSQLConfig;
+
+/***/ }),
+
 /***/ 395:
 /***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
@@ -41615,14 +42364,24 @@ exports.createKubernetesDeployJobs = createKubernetesDeployJobs;
 /***/ }),
 
 /***/ 5682:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
 
 
+var __importDefault = this && this.__importDefault || function (mod) {
+  return mod && mod.__esModule ? mod : {
+    "default": mod
+  };
+};
+
 exports.__esModule = true;
 exports.KUBERNETES_DEPLOY_TYPE = void 0;
 
+var slugify_1 = __importDefault(__nccwpck_require__(4035));
+
+var __1 = __nccwpck_require__(223);
+
 var additionalSecretKeys_1 = __nccwpck_require__(5775);
 
 var deployJob_1 = __nccwpck_require__(9792);
@@ -41632,7 +42391,32 @@ exports.KUBERNETES_DEPLOY_TYPE = {
   defaults: function () {
     return {};
   },
-  additionalSecretKeys: additionalSecretKeys_1.additionalKubernetesSecretKeys
+  additionalSecretKeys: additionalSecretKeys_1.additionalKubernetesSecretKeys,
+  getAdditionalEnvVars: function (_a) {
+    var _b;
+
+    var componentName = _a.componentName,
+        fullConfig = _a.fullConfig,
+        deployConfigRaw = _a.deployConfigRaw,
+        env = _a.env,
+        envType = _a.envType,
+        commitInfo = _a.commitInfo;
+    var KUBE_APP_NAME_PREFIX = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, "-") : "";
+    var KUBE_APP_NAME = "".concat(KUBE_APP_NAME_PREFIX).concat(componentName);
+    var KUBE_NAMESPACE = (0, __1.getKubernetesNamespace)(fullConfig, env);
+    var componentSlug = (0, slugify_1["default"])(componentName);
+    var envInUrl = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, ".").concat(env) : env;
+    var domainCanonical = deployConfigRaw && ((_b = deployConfigRaw.cluster) === null || _b === void 0 ? void 0 : _b.domainCanonical) || // for convenience, we allow clusters to define a canonical domain, because a cluster has a fixed ip and you will usually have a domain pointing to that cluster
+    fullConfig.domainCanonical || "panter.cloud";
+    var HOST_CANONICAL = "".concat(componentSlug, ".").concat(envInUrl, ".").concat(fullConfig.appName, ".").concat(fullConfig.customerName, ".").concat(domainCanonical); // default for kubernetes and rest
+
+    return {
+      KUBE_NAMESPACE: KUBE_NAMESPACE,
+      KUBE_APP_NAME: KUBE_APP_NAME,
+      KUBE_APP_NAME_PREFIX: KUBE_APP_NAME_PREFIX,
+      HOST_CANONICAL: HOST_CANONICAL
+    };
+  }
 };
 
 /***/ }),
@@ -41758,7 +42542,7 @@ var lodash_1 = __nccwpck_require__(3255);
 
 var utils_1 = __nccwpck_require__(7461);
 
-var cloudSql_1 = __nccwpck_require__(3539);
+var cloudSql_1 = __nccwpck_require__(1925);
 
 var types_1 = __nccwpck_require__(3109);
 
@@ -41828,7 +42612,7 @@ var createKubeValues = function (context) {
   var defaultKubeValues = (0, lodash_1.merge)({
     env: env,
     application: createAppConfig(context, application)
-  }, (0, cloudSql_1.hasCloudSQL)(context) ? (0, cloudsql_1.createCloudsqlBaseConfig)(context) : {}, ((_b = (_a = deployConfig.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled) ? (0, mongodb_1.createMongodbBaseConfig)(context) : {});
+  }, (0, cloudSql_1.hasKubernetesCloudSQL)(context) ? (0, cloudsql_1.createCloudsqlBaseConfig)(context) : {}, ((_b = (_a = deployConfig.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled) ? (0, mongodb_1.createMongodbBaseConfig)(context) : {});
   var kubeValues = (0, processSecretsAsFiles_1.processSecretsAsFiles)((0, utils_1.mergeWithMergingArrays)(defaultKubeValues, rest));
   return kubeValues;
 };
@@ -42201,57 +42985,6 @@ __exportStar(__nccwpck_require__(223), exports);
 
 /***/ }),
 
-/***/ 9572:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
-
-"use strict";
-
-
-exports.__esModule = true;
-exports.createInventoryReporitngJob = exports.INVENTORY_ARTIFACTS_DIR_DEPENDENCIES = exports.INVENTORY_ARTIFACTS_DIR = void 0;
-
-var lodash_1 = __nccwpck_require__(3255);
-
-var path_1 = __nccwpck_require__(1017);
-
-exports.INVENTORY_ARTIFACTS_DIR = "__cl__reporting";
-exports.INVENTORY_ARTIFACTS_DIR_DEPENDENCIES = (0, path_1.join)(exports.INVENTORY_ARTIFACTS_DIR, "dependencies");
-
-var createInventoryReporitngJob = function (context) {
-  var inventoryTemplate = {
-    repository: {
-      projectId: process.env.CI_PROJECT_ID,
-      url: process.env.CI_PROJECT_URL
-    },
-    appName: context.fullConfig.appName,
-    customerName: context.fullConfig.customerName,
-    componentName: context.componentName,
-    environment: (0, lodash_1.pick)(context.environment, ["shortName", "fullName", "host", "url"]),
-    build: context.componentConfig.build,
-    deploy: context.componentConfig.deploy,
-    packageManager: context.packageManagerInfo
-  };
-  var printReportComand = "echo '".concat(JSON.stringify(inventoryTemplate), "' | jq --argjson dependencies \"$(cat ").concat(exports.INVENTORY_ARTIFACTS_DIR_DEPENDENCIES, "/* | jq -n '. |= [inputs]')\" '. + {dependencies: $dependencies}'");
-  return {
-    envMode: "jobPerEnv",
-    name: "inventory:reporting",
-    stage: "reporting",
-    variables: {},
-    script: ["cd ".concat(context.componentConfig.dir), printReportComand],
-    needsStages: [{
-      stage: "build",
-      artifacts: true
-    }, {
-      stage: "deploy",
-      artifacts: true
-    }]
-  };
-};
-
-exports.createInventoryReporitngJob = createInventoryReporitngJob;
-
-/***/ }),
-
 /***/ 8974:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -42754,8 +43487,6 @@ var context_1 = __nccwpck_require__(2041);
 
 var deploy_1 = __nccwpck_require__(223);
 
-var reportingJob_1 = __nccwpck_require__(9572);
-
 var utils_1 = __nccwpck_require__(7461);
 
 var makeGitlabJob_1 = __nccwpck_require__(5715);
@@ -42792,8 +43523,7 @@ var createRawJobs = function (context) {
   var buildJobs = build_1.BUILD_TYPES[context.componentConfig.build.type].jobs(context);
   var deployJobs = deploy_1.DEPLOY_TYPES[context.componentConfig.deploy.type].jobs(context);
   var customJobs = getCustomJobs(context);
-  var reportInventoryJob = (0, reportingJob_1.createInventoryReporitngJob)(context);
-  return __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read(buildJobs), false), __read(deployJobs), false), __read(customJobs), false), [reportInventoryJob], false);
+  return __spreadArray(__spreadArray(__spreadArray([], __read(buildJobs), false), __read(deployJobs), false), __read(customJobs), false);
 };
 
 var getFullJobName = function (name, componentName, env) {
@@ -43616,7 +44346,7 @@ __exportStar(__nccwpck_require__(3146), exports);
 
 exports.__esModule = true;
 exports.BASE_STAGES = void 0;
-exports.BASE_STAGES = ["setup", "test", "build", "deploy", "verify", "rollback", "stop", "reporting"];
+exports.BASE_STAGES = ["setup", "test", "build", "deploy", "verify", "rollback", "stop"];
 
 /***/ }),
 
@@ -43630,6 +44360,71 @@ exports.__esModule = true;
 
 /***/ }),
 
+/***/ 4997:
+/***/ (function(__unused_webpack_module, exports) {
+
+"use strict";
+
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.repeatOnFailure = exports.sanitizeForBashVariable = exports.allowFailureInScripts = void 0;
+
+var allowFailureInScripts = function (script) {
+  return __spreadArray(__spreadArray(["set +e"], __read(script), false), ["set -e" // reenable
+  ], false);
+};
+
+exports.allowFailureInScripts = allowFailureInScripts;
+
+var sanitizeForBashVariable = function (name) {
+  return name.replace(/-/g, "_");
+};
+
+exports.sanitizeForBashVariable = sanitizeForBashVariable;
+
+var repeatOnFailure = function (command, options) {
+  return "\n    until ".concat(command, " &> /dev/null\n    do\n      echo \"Trying again.\"\n      sleep ").concat(options.pauseInSeconds, "\n    done\n  ");
+};
+
+exports.repeatOnFailure = repeatOnFailure;
+
+/***/ }),
+
 /***/ 7461:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {