@catladder/cli 0.0.0-inventory-ee7caa55 → 0.0.0-jdbc-064ed4e2

package/dist/bundles/cli/index.js

@@ -1195,6 +1195,15 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
 exports.__esModule = true;
 var pipeline_1 = __nccwpck_require__(25355);
 var child_process_promise_1 = __nccwpck_require__(75763);
@@ -1213,79 +1222,79 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
                 return [4 /*yield*/, (0, autocompletions_1.envAndComponents)()];
             case 1: return [2 /*return*/, _b.apply(_a, [_c.sent()])
                     .action(function (_a) {
-                    var _b, _c, _d, _e;
                     var envComponent = _a.envComponent;
                     return __awaiter(this, void 0, void 0, function () {
-                        var _f, env, componentName, config, localPort, envVars, POSTGRESQL_PASSWORD, context, values, projectId, defaultInstanceId, instanceId, defaultRegion, region, instanceName, cloudsqlProxyCredentials;
+                        var _b, env, componentName, context, proxyInfo, DB_PASSWORD, DB_NAME, instanceName, localPort, cloudsqlProxyCredentials;
                         var _this = this;
-                        return __generator(this, function (_g) {
-                            switch (_g.label) {
+                        return __generator(this, function (_c) {
+                            switch (_c.label) {
                                 case 0:
-                                    _f = (0, getProjectConfig_1.parseChoice)(envComponent), env = _f.env, componentName = _f.componentName;
-                                    return [4 /*yield*/, (0, getProjectConfig_1.getProjectConfig)()];
+                                    _b = (0, getProjectConfig_1.parseChoice)(envComponent), env = _b.env, componentName = _b.componentName;
+                                    return [4 /*yield*/, (0, getProjectConfig_1.getPipelineContextByChoice)(env, componentName)];
                                 case 1:
-                                    config = _g.sent();
+                                    context = _c.sent();
+                                    if (env === "review") {
+                                        vorpal.log("⚠️ connection string does not include mr information on review environments");
+                                    }
+                                    if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) return [3 /*break*/, 3];
+                                    return [4 /*yield*/, getProxyInfoForKubernetes(context)];
+                                case 2:
+                                    proxyInfo = _c.sent();
+                                    return [3 /*break*/, 6];
+                                case 3:
+                                    if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "google-cloudrun")) return [3 /*break*/, 5];
+                                    return [4 /*yield*/, getProxyInfoForCloudRun(context)];
+                                case 4:
+                                    proxyInfo = _c.sent();
+                                    return [3 /*break*/, 6];
+                                case 5: throw new Error("unsupported environment");
+                                case 6:
+                                    DB_PASSWORD = proxyInfo.DB_PASSWORD, DB_NAME = proxyInfo.DB_NAME, instanceName = proxyInfo.instanceName;
                                     return [4 /*yield*/, this.prompt({
                                             type: "number",
                                             name: "localPort",
                                             "default": "54320",
                                             message: "Local port: "
                                         })];
-                                case 2:
-                                    localPort = (_g.sent()).localPort;
-                                    return [4 /*yield*/, (0, getProjectConfig_1.getEnvVars)(this, env, componentName)];
-                                case 3:
-                                    envVars = _g.sent();
-                                    POSTGRESQL_PASSWORD = envVars === null || envVars === void 0 ? void 0 : envVars.POSTGRESQL_PASSWORD;
-                                    return [4 /*yield*/, (0, getProjectConfig_1.getPipelineContextByChoice)(env, componentName)];
-                                case 4:
-                                    context = _g.sent();
-                                    if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
-                                        throw new Error("currently only supported for kubernetes deployment");
-                                    }
+                                case 7:
+                                    localPort = (_c.sent()).localPort;
                                     this.log("");
-                                    this.log("postgres-PW: ".concat(POSTGRESQL_PASSWORD));
+                                    this.log("postgres-PW: ".concat(DB_PASSWORD));
                                     this.log("");
-                                    this.log("POSTGRESQL_URL=postgresql://postgres:".concat(POSTGRESQL_PASSWORD, "@localhost:").concat(localPort, "/").concat(context.environment.envVars.KUBE_APP_NAME, "?schema=public"));
+                                    this.log("POSTGRESQL_URL=postgresql://postgres:".concat(DB_PASSWORD, "@localhost:").concat(localPort, "/").concat(DB_NAME, "?schema=public"));
                                     this.log("");
-                                    values = context.componentConfig.deploy.values;
-                                    projectId = ((_b = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _b === void 0 ? void 0 : _b.projectId) ||
-                                        ((_c = context.componentConfig.deploy.cluster) === null || _c === void 0 ? void 0 : _c.projectId);
-                                    defaultInstanceId = "".concat(config.customerName, "-").concat(config.appName, "-").concat(env);
-                                    instanceId = ((_d = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _d === void 0 ? void 0 : _d.instanceId) || defaultInstanceId;
-                                    defaultRegion = "europe-west6";
-                                    region = ((_e = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _e === void 0 ? void 0 : _e.region) || defaultRegion;
-                                    instanceName = "".concat(projectId, ":").concat(region, ":").concat(instanceId, "=tcp:").concat(localPort);
                                     return [4 /*yield*/, (0, getProjectConfig_1.getGitlabVar)(this, env, componentName, "cloudsqlProxyCredentials")];
-                                case 5:
-                                    cloudsqlProxyCredentials = _g.sent();
-                                    if (!cloudsqlProxyCredentials) {
-                                        // we store cloudsqlProxyCredentials on gitlab, but its currently get pushed via bitwarden due to legacy reasons
-                                        // this will be fixed with when https://git.panter.ch/catladder/catladder/-/merge_requests/32/ is merged
-                                        this.log("cloudsqlProxyCredentials env var missing in gitlab. Please contact gilde-ci-cd about that.");
-                                        throw new Error("cloudsqlProxyCredentials missing in secrets");
-                                    }
+                                case 8:
+                                    cloudsqlProxyCredentials = _c.sent();
                                     return [4 /*yield*/, (0, tmp_promise_1.withFile)(function (_a) {
                                             var tmpFilePath = _a.path;
                                             return __awaiter(_this, void 0, void 0, function () {
                                                 return __generator(this, function (_b) {
                                                     switch (_b.label) {
-                                                        case 0: return [4 /*yield*/, (0, fs_extra_1.writeFile)(tmpFilePath, cloudsqlProxyCredentials)];
+                                                        case 0:
+                                                            if (!cloudsqlProxyCredentials) return [3 /*break*/, 2];
+                                                            return [4 /*yield*/, (0, fs_extra_1.writeFile)(tmpFilePath, cloudsqlProxyCredentials)];
                                                         case 1:
                                                             _b.sent();
-                                                            return [4 /*yield*/, (0, child_process_promise_1.spawn)("cloud_sql_proxy", ["-instances", instanceName, "-credential_file", tmpFilePath], {
-                                                                    stdio: "inherit",
-                                                                    shell: true
-                                                                })];
-                                                        case 2:
+                                                            _b.label = 2;
+                                                        case 2: return [4 /*yield*/, (0, child_process_promise_1.spawn)("cloud_sql_proxy", __spreadArray([
+                                                                "-instances",
+                                                                "".concat(instanceName, "=tcp:").concat(localPort)
+                                                            ], (cloudsqlProxyCredentials
+                                                                ? ["-credential_file", tmpFilePath]
+                                                                : []), true), {
+                                                                stdio: "inherit",
+                                                                shell: true
+                                                            })];
+                                                        case 3:
                                                             _b.sent();
                                                             return [2 /*return*/];
                                                     }
                                                 });
                                             });
                                         })];
-                                case 6:
-                                    _g.sent();
+                                case 9:
+                                    _c.sent();
                                     return [2 /*return*/];
                             }
                         });
@@ -1294,6 +1303,58 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
         }
     });
 }); });
+var getProxyInfoForKubernetes = function (context) { return __awaiter(void 0, void 0, void 0, function () {
+    var envVars, DB_PASSWORD, DB_NAME, values, projectId, defaultInstanceId, instanceId, defaultRegion, region, instanceName;
+    var _a, _b, _c, _d;
+    return __generator(this, function (_e) {
+        switch (_e.label) {
+            case 0:
+                if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+                    throw new Error("unsupported");
+                }
+                return [4 /*yield*/, (0, getProjectConfig_1.getEnvVars)(this, context.environment.shortName, context.componentName)];
+            case 1:
+                envVars = _e.sent();
+                DB_PASSWORD = (envVars === null || envVars === void 0 ? void 0 : envVars.DB_PASSWORD) || (envVars === null || envVars === void 0 ? void 0 : envVars.POSTGRESQL_PASSWORD);
+                DB_NAME = context.environment.envVars.KUBE_APP_NAME;
+                values = context.componentConfig.deploy.values;
+                projectId = ((_a = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _a === void 0 ? void 0 : _a.projectId) ||
+                    ((_b = context.componentConfig.deploy.cluster) === null || _b === void 0 ? void 0 : _b.projectId);
+                defaultInstanceId = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName, "-").concat(context.environment.shortName);
+                instanceId = ((_c = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _c === void 0 ? void 0 : _c.instanceId) || defaultInstanceId;
+                defaultRegion = "europe-west6";
+                region = ((_d = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _d === void 0 ? void 0 : _d.region) || defaultRegion;
+                instanceName = "".concat(projectId, ":").concat(region, ":").concat(instanceId);
+                return [2 /*return*/, {
+                        instanceName: instanceName,
+                        DB_PASSWORD: DB_PASSWORD,
+                        DB_NAME: DB_NAME
+                    }];
+        }
+    });
+}); };
+var getProxyInfoForCloudRun = function (context) { return __awaiter(void 0, void 0, void 0, function () {
+    var envVars, DB_PASSWORD, DB_NAME;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "google-cloudrun") ||
+                    !context.componentConfig.deploy.cloudSql) {
+                    throw new Error("unsupported");
+                }
+                return [4 /*yield*/, (0, getProjectConfig_1.getEnvVars)(this, context.environment.shortName, context.componentName)];
+            case 1:
+                envVars = _a.sent();
+                DB_PASSWORD = envVars === null || envVars === void 0 ? void 0 : envVars.DB_PASSWORD;
+                DB_NAME = context.environment.envVars.DB_NAME;
+                return [2 /*return*/, {
+                        instanceName: context.componentConfig.deploy.cloudSql.instanceConnectionName,
+                        DB_PASSWORD: DB_PASSWORD,
+                        DB_NAME: DB_NAME
+                    }];
+        }
+    });
+}); };
 //# sourceMappingURL=commandCloudSqlProxy.js.map
 
 /***/ }),
@@ -3468,6 +3529,103 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
 
 /***/ }),
 
+/***/ 41863:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+exports.projectSecretsClearBackups = void 0;
+var gitlab_1 = __nccwpck_require__(79818);
+var autocompletions_1 = __nccwpck_require__(41373);
+var projectSecretsClearBackups = function (vorpal, keep) {
+    if (keep === void 0) { keep = 3; }
+    return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, gitlab_1.clearBackups)(vorpal, keep)];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    });
+};
+exports.projectSecretsClearBackups = projectSecretsClearBackups;
+exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _b = (_a = vorpal
+                    .command("project-secrets-clear-backups", "clears all backups"))
+                    .autocomplete;
+                return [4 /*yield*/, (0, autocompletions_1.allEnvsAndAllComponents)()];
+            case 1:
+                _b.apply(_a, [_c.sent()])
+                    .action(function () {
+                    return __awaiter(this, void 0, void 0, function () {
+                        var keep;
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0: return [4 /*yield*/, this.prompt({
+                                        type: "number",
+                                        name: "keep",
+                                        "default": 1,
+                                        message: "How many backups should we keep? 🤔"
+                                    })];
+                                case 1:
+                                    keep = (_a.sent()).keep;
+                                    return [4 /*yield*/, (0, exports.projectSecretsClearBackups)(this, keep)];
+                                case 2: return [2 /*return*/, _a.sent()];
+                            }
+                        });
+                    });
+                });
+                return [2 /*return*/];
+        }
+    });
+}); });
+//# sourceMappingURL=commandSecretsClearBackups.js.map
+
+/***/ }),
+
 /***/ 54108:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -3753,6 +3911,7 @@ var commandOpenGrafana_1 = __importDefault(__nccwpck_require__(70414));
 var commandPortForward_1 = __importDefault(__nccwpck_require__(3415));
 var commandTriggerCronjob_1 = __importDefault(__nccwpck_require__(51827));
 var commandOpenGrafanaPod_1 = __importDefault(__nccwpck_require__(55848));
+var commandSecretsClearBackups_1 = __importDefault(__nccwpck_require__(41863));
 exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
     return __generator(this, function (_a) {
         (0, commandSetup_1["default"])(vorpal);
@@ -3771,6 +3930,7 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
         (0, commandOpenEnv_1["default"])(vorpal);
         (0, commandTriggerCronjob_1["default"])(vorpal);
         (0, commandConfigSecrets_1["default"])(vorpal);
+        (0, commandSecretsClearBackups_1["default"])(vorpal);
         (0, commandDeletePods_1["default"])(vorpal);
         (0, commandCopyDB_1["default"])(vorpal);
         (0, commandGetShell_1["default"])(vorpal);
@@ -3992,7 +4152,7 @@ var setupAccessTokens = function (instance) { return __awaiter(void 0, void 0, v
                         key: "GL_TOKEN",
                         value: GL_TOKEN,
                         masked: true
-                    })];
+                    }, "POST")];
             case 7:
                 _b.sent();
                 return [3 /*break*/, 8];
@@ -4005,7 +4165,7 @@ var setupAccessTokens = function (instance) { return __awaiter(void 0, void 0, v
                         id: projectId,
                         name: "gitlab-deploy-token",
                         scopes: ["read_registry"]
-                    })];
+                    }, "POST")];
             case 10:
                 _b.sent();
                 _b.label = 11;
@@ -4059,6 +4219,15 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
 exports.__esModule = true;
 exports.setupCloudRun = void 0;
 var pipeline_1 = __nccwpck_require__(25355);
@@ -4079,7 +4248,12 @@ var setupCloudRun = function (instance, context) { return __awaiter(void 0, void
                 config = context.componentConfig.deploy;
                 // enable services
                 instance.log("enable required servies...");
-                return [4 /*yield*/, (0, enableServices_1.enableGCloudServices)(["run.googleapis.com", "artifactregistry.googleapis.com"], config)];
+                return [4 /*yield*/, (0, enableServices_1.enableGCloudServices)(__spreadArray([
+                        "run.googleapis.com",
+                        "artifactregistry.googleapis.com"
+                    ], (config.cloudSql
+                        ? ["sqladmin.googleapis.com", "sql-component.googleapis.com"]
+                        : []), true), config)];
             case 1:
                 _b.sent();
                 instance.log("upsert artifacts registry...");
@@ -4093,11 +4267,11 @@ var setupCloudRun = function (instance, context) { return __awaiter(void 0, void
                         description: "This service account deploys to google cloud",
                         name: "cl-d",
                         // TODO: run.admin is a bit much, would be better to follow https://stackoverflow.com/questions/55788714/deploying-to-cloud-run-with-a-custom-service-account-failed-with-iam-serviceacco
-                        roles: [
+                        roles: __spreadArray([
                             "roles/artifactregistry.repoAdmin",
                             "roles/run.admin",
-                            "roles/iam.serviceAccountUser",
-                        ]
+                            "roles/iam.serviceAccountUser"
+                        ], (config.cloudSql ? ["roles/cloudsql.admin"] : []), true)
                     }, pipeline_1.GCLOUD_DEPLOY_CREDENTIALS_KEY)];
             case 3:
                 _b.sent();
@@ -4173,10 +4347,10 @@ var pipeline_1 = __nccwpck_require__(25355);
 var setupCloudSQL = function (instance, context) { return __awaiter(void 0, void 0, void 0, function () {
     var config;
     return __generator(this, function (_a) {
-        if (!(0, pipeline_1.hasCloudSQL)(context)) {
+        if (!(0, pipeline_1.hasKubernetesCloudSQL)(context)) {
             throw new Error("cannot setup cloudsql, as it has none");
         }
-        config = (0, pipeline_1.getCloudSQLConfig)(context);
+        config = (0, pipeline_1.getKubernetesCloudSQLConfig)(context);
         instance.log("");
         instance.log("! make sure to provide cloudsqlProxyCredentials for the cloud sql service account in " +
             config.projectId);
@@ -4255,7 +4429,7 @@ var setupContext = function (instance, context) { return __awaiter(void 0, void
                 _a.sent();
                 _a.label = 2;
             case 2:
-                if (!(0, pipeline_1.hasCloudSQL)(context)) return [3 /*break*/, 4];
+                if (!(0, pipeline_1.hasKubernetesCloudSQL)(context)) return [3 /*break*/, 4];
                 return [4 /*yield*/, (0, setupCloudSQL_1.setupCloudSQL)(instance, context)];
             case 3:
                 _a.sent();
@@ -7136,7 +7310,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 exports.__esModule = true;
-exports.upsertAllVariables = exports.getVariableValueByRawName = exports.getAllVariables = exports.getProjectInfo = exports.doGitlabRequest = exports.getGitlabToken = exports.setupGitlabToken = exports.hasGitlabToken = void 0;
+exports.upsertAllVariables = exports.clearBackups = exports.getVariableValueByRawName = exports.getAllVariables = exports.getProjectInfo = exports.doGitlabRequest = exports.getGitlabToken = exports.setupGitlabToken = exports.hasGitlabToken = void 0;
 var pipeline_1 = __nccwpck_require__(25355);
 var child_process_promise_1 = __nccwpck_require__(75763);
 var lodash_1 = __nccwpck_require__(23255);
@@ -7210,28 +7384,31 @@ var getGitlabToken = function (vorpal) { return __awaiter(void 0, void 0, void 0
     });
 }); };
 exports.getGitlabToken = getGitlabToken;
-var doGitlabRequest = function (vorpal, path, data, update) {
+var doGitlabRequest = function (vorpal, path, data, method) {
     if (data === void 0) { data = undefined; }
+    if (method === void 0) { method = "GET"; }
     return __awaiter(void 0, void 0, void 0, function () {
-        var rootToken, method, result, _a, _b, _c, _d, _e;
+        var rootToken, result, _a, _b, _c, _d, _e;
         return __generator(this, function (_f) {
             switch (_f.label) {
                 case 0: return [4 /*yield*/, (0, exports.getGitlabToken)(vorpal)];
                 case 1:
                     rootToken = _f.sent();
-                    method = data ? (update ? "PUT" : "POST") : "GET";
                     return [4 /*yield*/, (0, node_fetch_1["default"])("https://git.panter.ch/api/v4/".concat(path), {
                             method: method,
                             headers: {
                                 "Content-Type": "application/json",
                                 "Private-Token": rootToken
                             },
-                            body: JSON.stringify(data)
+                            body: data ? JSON.stringify(data) : undefined
                         })];
                 case 2:
                     result = _f.sent();
                     if (result.status >= 200 && result.status < 400) {
-                        return [2 /*return*/, result.json()];
+                        if (result.headers.get("content-type") === "application/json") {
+                            return [2 /*return*/, result.json()];
+                        }
+                        return [2 /*return*/, null];
                     }
                     if (result.status === 404) {
                         throw new Error("not found");
@@ -7313,7 +7490,7 @@ var createVariable = function (vorpal, projectId, key, value, masked, environmen
                         value: value,
                         masked: masked && isMaskable(value),
                         environment_scope: environment_scope
-                    })];
+                    }, "POST")];
                 case 1: return [2 /*return*/, _a.sent()];
             }
         });
@@ -7327,12 +7504,20 @@ var updateVariable = function (vorpal, projectId, key, value, masked) {
                 case 0: return [4 /*yield*/, (0, exports.doGitlabRequest)(vorpal, "projects/".concat(projectId, "/variables/").concat(key), {
                         value: value,
                         masked: masked && isMaskable(value)
-                    }, true)];
+                    }, "PUT")];
                 case 1: return [2 /*return*/, _a.sent()];
             }
         });
     });
 };
+var deleteVariable = function (vorpal, projectId, key) { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, exports.doGitlabRequest)(vorpal, "projects/".concat(projectId, "/variables/").concat(key), undefined, "DELETE")];
+            case 1: return [2 /*return*/, _a.sent()];
+        }
+    });
+}); };
 var getAllCatladderEnvVarsInGitlab = function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
     var allVariables;
     return __generator(this, function (_a) {
@@ -7362,6 +7547,46 @@ var getAllCatladderEnvVarsInGitlab = function (vorpal) { return __awaiter(void 0
         }
     });
 }); };
+var getBackupKey = function (fullKey, timestamp) {
+    return "".concat(fullKey, "_backup_").concat(timestamp);
+};
+var clearBackups = function (vorpal, keep) { return __awaiter(void 0, void 0, void 0, function () {
+    var existingVariables, id, _i, _a, _b, key, backups, backupsSorted, toDelete, _c, toDelete_1, timestamp;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
+            case 0: return [4 /*yield*/, getAllCatladderEnvVarsInGitlab(vorpal)];
+            case 1:
+                existingVariables = _d.sent();
+                return [4 /*yield*/, (0, exports.getProjectInfo)(vorpal)];
+            case 2:
+                id = (_d.sent()).id;
+                _i = 0, _a = Object.entries(existingVariables);
+                _d.label = 3;
+            case 3:
+                if (!(_i < _a.length)) return [3 /*break*/, 8];
+                _b = _a[_i], key = _b[0], backups = _b[1].backups;
+                backupsSorted = backups.sort(function (a, b) { return b - a; });
+                toDelete = backupsSorted.slice(keep);
+                _c = 0, toDelete_1 = toDelete;
+                _d.label = 4;
+            case 4:
+                if (!(_c < toDelete_1.length)) return [3 /*break*/, 7];
+                timestamp = toDelete_1[_c];
+                return [4 /*yield*/, deleteVariable(vorpal, id, getBackupKey(key, timestamp))];
+            case 5:
+                _d.sent();
+                _d.label = 6;
+            case 6:
+                _c++;
+                return [3 /*break*/, 4];
+            case 7:
+                _i++;
+                return [3 /*break*/, 3];
+            case 8: return [2 /*return*/];
+        }
+    });
+}); };
+exports.clearBackups = clearBackups;
 var upsertAllVariables = function (vorpal, variables, env, componentName, backup, masked // FIXME: would be better to have this per variable
 ) {
     if (backup === void 0) { backup = true; }
@@ -7394,7 +7619,7 @@ var upsertAllVariables = function (vorpal, variables, env, componentName, backup
                 case 4:
                     _d.sent();
                     if (!backup) return [3 /*break*/, 6];
-                    return [4 /*yield*/, createVariable(vorpal, id, fullKey + "_backup_" + new Date().getTime(), oldValue, masked, "_backup")];
+                    return [4 /*yield*/, createVariable(vorpal, id, getBackupKey(fullKey, new Date().getTime()), oldValue, masked, "_backup")];
                 case 5:
                     _d.sent();
                     _d.label = 6;
@@ -349475,8 +349700,6 @@ var lodash_1 = __nccwpck_require__(23255);
 
 var __1 = __nccwpck_require__(25355);
 
-var reportingJob_1 = __nccwpck_require__(89572);
-
 var utils_1 = __nccwpck_require__(37461);
 
 var yarn_1 = __nccwpck_require__(10464);
@@ -349486,12 +349709,11 @@ var constants_1 = __nccwpck_require__(11542);
 var getBuildInfo_1 = __nccwpck_require__(9197);
 
 var createBuildJob = function (context, _a) {
-  var _b, _c, _d;
+  var _b, _c;
 
   var script = _a.script,
       variables = _a.variables,
-      artifacts = _a.artifacts,
-      def = __rest(_a, ["script", "variables", "artifacts"]);
+      def = __rest(_a, ["script", "variables"]);
 
   return (0, lodash_1.merge)({
     name: constants_1.APP_BUILD_JOB_NAME,
@@ -349503,7 +349725,7 @@ var createBuildJob = function (context, _a) {
     variables: __assign(__assign(__assign(__assign({}, constants_1.RUNNER_BUILD_RESOURCE_VARIABLES), variables !== null && variables !== void 0 ? variables : {}), context.environment.envVars), (_b = context.componentConfig.build.extraVars) !== null && _b !== void 0 ? _b : {}),
     script: __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, getBuildInfo_1.getBuildInfo)(context)), false), __read((0, yarn_1.ensureNodeVersion)(context)), false), ["cd ".concat(context.componentConfig.dir)], false), __read((_c = (0, utils_1.ensureArray)(script)) !== null && _c !== void 0 ? _c : []), false),
     artifacts: {
-      paths: __spreadArray([context.componentConfig.dir + "/__build_info.json", context.componentConfig.dir + "/" + reportingJob_1.INVENTORY_ARTIFACTS_DIR], __read((_d = artifacts === null || artifacts === void 0 ? void 0 : artifacts.paths) !== null && _d !== void 0 ? _d : []), false)
+      paths: [context.componentConfig.dir + "/__build_info.json"]
     }
   }, def);
 };
@@ -349531,7 +349753,7 @@ exports.getBuildInfo = getBuildInfo;
 
 /***/ }),
 
-/***/ 33219:
+/***/ 62644:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
@@ -349551,15 +349773,177 @@ var __assign = this && this.__assign || function () {
   return __assign.apply(this, arguments);
 };
 
-var __rest = this && this.__rest || function (s, e) {
-  var t = {};
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
 
-  for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0) t[p] = s[p];
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
 
-  if (s != null && typeof Object.getOwnPropertySymbols === "function") for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
-    if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i])) t[p[i]] = s[p[i]];
+  return ar;
+};
+
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
   }
-  return t;
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.createCustomBuildJobs = void 0;
+
+var path_1 = __nccwpck_require__(71017);
+
+var utils_1 = __nccwpck_require__(37461);
+
+var constants_1 = __nccwpck_require__(11542);
+
+var createBuildJob_1 = __nccwpck_require__(58063);
+
+var docker_1 = __nccwpck_require__(33219);
+
+var types_1 = __nccwpck_require__(71197);
+
+var RUNNER_BUILD_VARIABLES = {
+  KUBERNETES_CPU_REQUEST: "0.5",
+  KUBERNETES_CPU_LIMIT: "2",
+  KUBERNETES_MEMORY_REQUEST: "2Gi",
+  KUBERNETES_MEMORY_LIMIT: "4Gi"
+};
+
+var createCustomBuildJobs = function (context) {
+  var _a, _b, _c, _d;
+
+  var buildConfig = context.componentConfig.build;
+
+  if (!(0, types_1.isOfBuildType)(buildConfig, "custom")) {
+    throw new Error("deploy config is not custom");
+  }
+
+  var appBuildJob = buildConfig.buildCommand !== null ? (0, createBuildJob_1.createBuildJob)(context, {
+    image: buildConfig.jobImage,
+    variables: __assign({}, RUNNER_BUILD_VARIABLES),
+    script: __spreadArray([], __read((_a = (0, utils_1.ensureArray)(buildConfig.buildCommand)) !== null && _a !== void 0 ? _a : []), false),
+    artifacts: {
+      paths: __spreadArray([(0, path_1.join)(context.componentConfig.dir, "__build_info.json"), (0, path_1.join)(context.componentConfig.dir, "dist")], __read((_c = (_b = buildConfig.artifactsPaths) === null || _b === void 0 ? void 0 : _b.map(function (path) {
+        return (0, path_1.join)(context.componentConfig.dir, path);
+      })) !== null && _c !== void 0 ? _c : []), false)
+    }
+  }) : null;
+  return __spreadArray(__spreadArray([], __read(appBuildJob ? [appBuildJob] : []), false), __read((0, docker_1.requiresDockerBuild)(context) ? [(0, docker_1.createDockerBuildJobDefault)(context, {
+    script: [((_d = buildConfig.docker) === null || _d === void 0 ? void 0 : _d.type) === "nginx" ? "ensureNginxDockerfile" : "" // e.g. custom,
+    ].filter(Boolean),
+    variables: {},
+    needs: appBuildJob ? [constants_1.APP_BUILD_JOB_NAME] : []
+  })] : []), false);
+};
+
+exports.createCustomBuildJobs = createCustomBuildJobs;
+
+/***/ }),
+
+/***/ 53437:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.createCustomJobs = void 0;
+
+var buildJob_1 = __nccwpck_require__(62644);
+
+var createCustomJobs = function (context) {
+  return __spreadArray([], __read((0, buildJob_1.createCustomBuildJobs)(context)), false);
+};
+
+exports.createCustomJobs = createCustomJobs;
+
+/***/ }),
+
+/***/ 33219:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+
+    return t;
+  };
+
+  return __assign.apply(this, arguments);
+};
+
+var __rest = this && this.__rest || function (s, e) {
+  var t = {};
+
+  for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0) t[p] = s[p];
+
+  if (s != null && typeof Object.getOwnPropertySymbols === "function") for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+    if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i])) t[p[i]] = s[p[i]];
+  }
+  return t;
 };
 
 var __read = this && this.__read || function (o, n) {
@@ -349736,6 +350120,8 @@ var __exportStar = this && this.__exportStar || function (m, exports) {
 exports.__esModule = true;
 exports.BUILD_TYPES = void 0;
 
+var custom_1 = __nccwpck_require__(53437);
+
 var node_1 = __nccwpck_require__(66994);
 
 __exportStar(__nccwpck_require__(71197), exports);
@@ -349775,6 +350161,12 @@ exports.BUILD_TYPES = {
         startCommand: "node main.js"
       };
     }
+  },
+  custom: {
+    jobs: custom_1.createCustomJobs,
+    defaults: function () {
+      return {};
+    }
   }
 };
 
@@ -349856,10 +350248,8 @@ var constants_2 = __nccwpck_require__(69284);
 
 var yarn_1 = __nccwpck_require__(10464);
 
-var reportingJob_1 = __nccwpck_require__(89572);
-
 var createNodeBuildJobs = function (context) {
-  var _a, _b, _c, _d, _e, _f, _g;
+  var _a, _b, _c, _d, _e;
 
   var buildConfig = context.componentConfig.build;
 
@@ -349868,17 +350258,14 @@ var createNodeBuildJobs = function (context) {
   }
 
   var yarnInstall = (0, yarn_1.getYarnInstall)(context);
-  var yarnReportDependenciesListCommand = ((_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.isClassic) ? "npm ls --depth 0 --json -prod | jq '.dependencies | to_entries | .[] | {artifact: .key, version: .value.version, type: \"npm\"}'" : "yarn info --json -A| jq '{version: .children.Version, artifact: .value, type: \"npm\" }'";
-  var debugcom = ((_b = context.packageManagerInfo) === null || _b === void 0 ? void 0 : _b.isClassic) ? "npm ls --depth 0 --json -prod" : "yarn info --json -A";
-  var yarnReportDependenciesCommand = ["mkdir -p ".concat(reportingJob_1.INVENTORY_ARTIFACTS_DIR_DEPENDENCIES), yarnReportDependenciesListCommand + " > " + reportingJob_1.INVENTORY_ARTIFACTS_DIR_DEPENDENCIES + "/app.jsonl"];
   var appBuildJob = buildConfig.buildCommand !== null ? (0, createBuildJob_1.createBuildJob)(context, {
     variables: __assign({}, constants_2.NODE_RUNNER_BUILD_VARIABLES),
     cache: __spreadArray(__spreadArray([], __read((0, cache_1.getNodeCache)(context)), false), __read((0, cache_1.getNextCache)(context)), false),
-    script: __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read(yarnInstall), false), __read((_c = (0, utils_1.ensureArray)(buildConfig.buildCommand)) !== null && _c !== void 0 ? _c : []), false), [debugcom], false), __read(yarnReportDependenciesCommand), false),
+    script: __spreadArray(__spreadArray([], __read(yarnInstall), false), __read((_a = (0, utils_1.ensureArray)(buildConfig.buildCommand)) !== null && _a !== void 0 ? _a : []), false),
     artifacts: {
-      paths: __spreadArray([(0, path_1.join)(context.componentConfig.dir, "dist"), (0, path_1.join)(context.componentConfig.dir, ".next")], __read((_e = (_d = buildConfig.artifactsPaths) === null || _d === void 0 ? void 0 : _d.map(function (path) {
+      paths: __spreadArray([(0, path_1.join)(context.componentConfig.dir, "__build_info.json"), (0, path_1.join)(context.componentConfig.dir, "dist"), (0, path_1.join)(context.componentConfig.dir, ".next")], __read((_c = (_b = buildConfig.artifactsPaths) === null || _b === void 0 ? void 0 : _b.map(function (path) {
         return (0, path_1.join)(context.componentConfig.dir, path);
-      })) !== null && _e !== void 0 ? _e : []), false)
+      })) !== null && _c !== void 0 ? _c : []), false)
     }
   }) : null;
   return __spreadArray(__spreadArray([], __read(appBuildJob ? [appBuildJob] : []), false), __read((0, docker_1.requiresDockerBuild)(context) ? [(0, docker_1.createDockerBuildJobDefault)(context, {
@@ -349893,9 +350280,9 @@ var createNodeBuildJobs = function (context) {
         prodOnly: true,
         noScripts: true
       }),
-      DOCKER_COPY_WORKSPACE_FILES: (_g = (_f = context.packageManagerInfo) === null || _f === void 0 ? void 0 : _f.pathsToCopyInDocker.map(function (dir) {
+      DOCKER_COPY_WORKSPACE_FILES: (_e = (_d = context.packageManagerInfo) === null || _d === void 0 ? void 0 : _d.pathsToCopyInDocker.map(function (dir) {
         return "COPY --chown=node:node ".concat(dir, " /app/").concat(dir);
-      })) === null || _g === void 0 ? void 0 : _g.join("\n")
+      })) === null || _e === void 0 ? void 0 : _e.join("\n")
     },
     needs: appBuildJob ? [constants_1.APP_BUILD_JOB_NAME] : []
   })] : []), false);
@@ -349952,14 +350339,21 @@ exports.getNextCache = exports.getNodeCache = exports.getNodeModulesCache = expo
 var path_1 = __nccwpck_require__(71017);
 
 var getYarnCache = function (context, policy) {
+  var _a;
+
   if (policy === void 0) {
     policy = "pull-push";
   }
 
-  return [{
+  var componentIsInWorkspace = (_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.componentIsInWorkspace;
+  return [componentIsInWorkspace ? {
     key: "yarn",
     policy: policy,
     paths: [".yarn"]
+  } : {
+    key: context.componentConfig.dir + "-yarn",
+    policy: policy,
+    paths: [(0, path_1.join)(context.componentConfig.dir, ".yarn")]
   }];
 };
 
@@ -350367,7 +350761,7 @@ var getYarnInstallCommand = function (context, options) {
 
     return (_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.version.startsWith(v);
   });
-  return (options === null || options === void 0 ? void 0 : options.prodOnly) ? "".concat((options === null || options === void 0 ? void 0 : options.noScripts) ? "YARN_ENABLE_SCRIPTS=false " : "").concat(doesNotShipWithBuiltInPlugins ? "yarn plugin import workspace-tools && " : " ", "yarn workspaces focus --production") // needs yarn plugin import workspace-tools
+  return (options === null || options === void 0 ? void 0 : options.prodOnly) ? "".concat((options === null || options === void 0 ? void 0 : options.noScripts) ? "YARN_ENABLE_SCRIPTS=false " : "").concat(doesNotShipWithBuiltInPlugins ? "yarn plugin import workspace-tools && " : " ", "yarn workspaces focus --production && yarn rebuild") // needs yarn plugin import workspace-tools
   : "".concat((options === null || options === void 0 ? void 0 : options.noScripts) ? "YARN_ENABLE_SCRIPTS=false " : "", "yarn install --immutable");
 };
 
@@ -350611,31 +351005,75 @@ exports.readConfigSync = readConfigSync;
 
 exports.__esModule = true;
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "inventory-ee7caa55" || 0;
+exports.PIPELINE_IMAGE_TAG = "jdbc-064ed4e2" || 0;
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
 
 /***/ }),
 
-/***/ 60740:
-/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+/***/ 25706:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
 "use strict";
 
 
-var __assign = this && this.__assign || function () {
-  __assign = Object.assign || function (t) {
-    for (var s, i = 1, n = arguments.length; i < n; i++) {
-      s = arguments[i];
+exports.__esModule = true;
+exports.getEnvConfig = void 0;
 
-      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
-    }
+var utils_1 = __nccwpck_require__(37461);
 
-    return t;
-  };
+var getEnvConfig = function (config, componentName, env) {
+  var _a, _b;
 
-  return __assign.apply(this, arguments);
+  var defaultConfig = config.components[componentName];
+
+  if (!defaultConfig) {
+    throw new Error("unknown component " + componentName);
+  }
+
+  var envCustomizations = (_b = (_a = defaultConfig.env) === null || _a === void 0 ? void 0 : _a[env]) !== null && _b !== void 0 ? _b : {};
+
+  if (envCustomizations === false) {
+    throw new Error("env is disabled: " + env);
+  }
+
+  return (0, utils_1.mergeWithMergingArrays)(defaultConfig, envCustomizations);
+};
+
+exports.getEnvConfig = getEnvConfig;
+
+/***/ }),
+
+/***/ 94811:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.getEnvType = void 0;
+
+var types_1 = __nccwpck_require__(71753);
+
+var getEnvType = function (env, envConfig) {
+  if (envConfig.type) return envConfig.type;
+
+  if ((0, types_1.isKnowEnvType)(env)) {
+    return env;
+  }
+
+  throw new Error("unknown env type: " + env);
 };
 
+exports.getEnvType = getEnvType;
+
+/***/ }),
+
+/***/ 60740:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
 var __awaiter = this && this.__awaiter || function (thisArg, _arguments, P, generator) {
   function adopt(value) {
     return value instanceof P ? value : new P(function (resolve) {
@@ -350777,201 +351215,28 @@ var __generator = this && this.__generator || function (thisArg, body) {
   }
 };
 
-var __read = this && this.__read || function (o, n) {
-  var m = typeof Symbol === "function" && o[Symbol.iterator];
-  if (!m) return o;
-  var i = m.call(o),
-      r,
-      ar = [],
-      e;
-
-  try {
-    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
-  } catch (error) {
-    e = {
-      error: error
-    };
-  } finally {
-    try {
-      if (r && !r.done && (m = i["return"])) m.call(i);
-    } finally {
-      if (e) throw e.error;
-    }
-  }
-
-  return ar;
-};
-
-var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
-  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
-    if (ar || !(i in from)) {
-      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
-      ar[i] = from[i];
-    }
-  }
-  return to.concat(ar || Array.prototype.slice.call(from));
-};
-
-var __importDefault = this && this.__importDefault || function (mod) {
-  return mod && mod.__esModule ? mod : {
-    "default": mod
-  };
-};
-
 exports.__esModule = true;
-exports.getEnvironment = exports.getSecretVarNameForContext = exports.getSecretVarName = void 0;
-
-var lodash_1 = __nccwpck_require__(23255);
-
-var slugify_1 = __importDefault(__nccwpck_require__(44035));
-
-var deploy_1 = __nccwpck_require__(90223);
-
-var types_1 = __nccwpck_require__(63109);
-
-var config_1 = __nccwpck_require__(19997);
-
-var utils_1 = __nccwpck_require__(37461);
-
-var resolveReferences_1 = __nccwpck_require__(80928);
-
-var sanitizeForEnVar = function (s) {
-  return s.replace(/-/g, "_");
-};
-
-var getSecretVarName = function (env, componentName, key) {
-  return "CL_".concat(sanitizeForEnVar(env), "_").concat(sanitizeForEnVar(componentName), "_").concat(key);
-}; // remove dash from component name
-
-
-exports.getSecretVarName = getSecretVarName;
-
-var addIndexVar = function (vars) {
-  return __assign(__assign({}, vars), {
-    _ALL_ENV_VAR_KEYS: JSON.stringify(Object.keys(vars))
-  });
-};
+exports.getEnvironment = void 0;
 
-var getSecretVarNameForContext = function (context, key) {
-  return (0, exports.getSecretVarName)(context.environment.shortName, context.componentName, key);
-};
-
-exports.getSecretVarNameForContext = getSecretVarNameForContext;
+var getEnvironmentContext_1 = __nccwpck_require__(95141);
 
-var getEnvironment = function (config, componentName, env, commitInfo, alreadyVisited // to prevent endless loop
-) {
-  if (alreadyVisited === void 0) {
-    alreadyVisited = {};
-  }
+var getEnvironmentVariables_1 = __nccwpck_require__(76602);
 
+var getEnvironment = function (config, componentName, env, commitInfo) {
   return __awaiter(void 0, void 0, void 0, function () {
-    var defaultConfig, envConfig, mergedConfig, envType, basePredefinedVariables, gitlabEnvironmentName, environmentSlug, predefinedVariables, host, url, fullName, devLocalConfig, port, componentSlug, envInUrl, domainCanonical, HOST_CANONICAL, KUBE_APP_NAME_PREFIX, KUBE_APP_NAME, KUBE_NAMESPACE, publicEnvVarsRaw, additionalSecretKeys, secretEnvVarKeys, secretEnvVars, legacyFromComponents, publicEnvVarsRawWithLegasyFromComponents, publicEnvVarsRawSanitized, envVarsRaw, envVars;
+    var _a, envVars, secretEnvVarKeys, host, url, envContext, envType;
 
-    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
-
-    return __generator(this, function (_o) {
-      switch (_o.label) {
+    return __generator(this, function (_b) {
+      switch (_b.label) {
         case 0:
-          defaultConfig = config.components[componentName];
-
-          if (!defaultConfig) {
-            throw new Error("unknown component " + componentName);
-          }
-
-          envConfig = (_b = (_a = defaultConfig.env) === null || _a === void 0 ? void 0 : _a[env]) !== null && _b !== void 0 ? _b : {};
-
-          if (envConfig === false) {
-            throw new Error("env is disabled: " + env);
-          }
-
-          mergedConfig = (0, utils_1.mergeWithMergingArrays)(defaultConfig, envConfig);
-          envType = (_c = envConfig === null || envConfig === void 0 ? void 0 : envConfig.type) !== null && _c !== void 0 ? _c : (0, config_1.isKnowEnvType)(env) ? env : null;
-
-          if (!envType) {
-            throw new Error("Missing type in environment " + env + " in component " + componentName);
-          }
-
-          basePredefinedVariables = {
-            ENV_SHORT: env,
-            APP_DIR: mergedConfig.dir,
-            ENV_TYPE: envType
-          };
-          gitlabEnvironmentName = envType === "review" && commitInfo ? "".concat(env, "/").concat(commitInfo.refName, "/").concat(componentName) : "".concat(env, "/").concat(componentName);
-          environmentSlug = envType === "review" && commitInfo ? "".concat(env, "-").concat(commitInfo.reviewSlug, "-").concat(componentName) : "".concat(env, "-").concat(componentName);
-          fullName = "".concat(config.customerName, "-").concat(config.appName, "-").concat(environmentSlug);
-
-          if (envType === "local") {
-            devLocalConfig = mergedConfig;
-            port = (_d = devLocalConfig.port) !== null && _d !== void 0 ? _d : 3000;
-            host = "localhost:" + port;
-            url = "http://" + host;
-            predefinedVariables = {
-              ENV_SHORT: "local",
-              ROOT_URL: url,
-              PORT: port.toString()
-            };
-          } else {
-            componentSlug = (0, slugify_1["default"])(componentName);
-            envInUrl = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, ".").concat(env) : env;
-            domainCanonical = (mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.deploy) && (mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.deploy.type) === "kubernetes" && ((_e = mergedConfig.deploy.cluster) === null || _e === void 0 ? void 0 : _e.domainCanonical) || // for convenience, we allow clusters to define a canonical domain, because a cluster has a fixed ip and you will usually have a domain pointing to that cluster
-            config.domainCanonical || "panter.cloud";
-            HOST_CANONICAL = (0, types_1.isOfDeployType)(mergedConfig.deploy, "google-cloudrun") ? fullName.toLowerCase() + "-" + process.env[(0, exports.getSecretVarName)(env, componentName, deploy_1.GCLOUD_RUN_CANONICAL_HOST_SUFFIX)] : "".concat(componentSlug, ".").concat(envInUrl, ".").concat(config.appName, ".").concat(config.customerName, ".").concat(domainCanonical);
-            host = (_f = mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.host) !== null && _f !== void 0 ? _f : HOST_CANONICAL;
-            url = "https://".concat(host);
-            KUBE_APP_NAME_PREFIX = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, "-") : "";
-            KUBE_APP_NAME = "".concat(KUBE_APP_NAME_PREFIX).concat(componentName);
-            KUBE_NAMESPACE = (0, deploy_1.getKubernetesNamespace)(config, env);
-            predefinedVariables = __assign(__assign({}, basePredefinedVariables), {
-              HOST_CANONICAL: HOST_CANONICAL,
-              HOST: host,
-              ROOT_URL: url,
-              KUBE_NAMESPACE: KUBE_NAMESPACE,
-              KUBE_APP_NAME: KUBE_APP_NAME,
-              KUBE_APP_NAME_PREFIX: KUBE_APP_NAME_PREFIX
-            });
-          }
-
-          publicEnvVarsRaw = (_h = (_g = mergedConfig.vars) === null || _g === void 0 ? void 0 : _g.public) !== null && _h !== void 0 ? _h : {};
-          additionalSecretKeys = mergedConfig.deploy ? deploy_1.DEPLOY_TYPES[mergedConfig.deploy.type].additionalSecretKeys( // eslint-disable-next-line @typescript-eslint/no-explicit-any
-          mergedConfig.deploy) : [];
-          secretEnvVarKeys = __spreadArray(__spreadArray([], __read((_k = (_j = mergedConfig.vars) === null || _j === void 0 ? void 0 : _j.secret) !== null && _k !== void 0 ? _k : []), false), __read(additionalSecretKeys), false);
-          secretEnvVars = Object.fromEntries(secretEnvVarKeys.map(function (key) {
-            return [key, "$".concat((0, exports.getSecretVarName)(env, componentName, key))];
-          }));
-          legacyFromComponents = (_m = (_l = mergedConfig.vars) === null || _l === void 0 ? void 0 : _l.fromComponents) !== null && _m !== void 0 ? _m : {};
-          publicEnvVarsRawWithLegasyFromComponents = (0, lodash_1.merge)({}, (0, resolveReferences_1.translateLegacyFromComponents)(legacyFromComponents), publicEnvVarsRaw);
-          publicEnvVarsRawSanitized = Object.fromEntries(Object.entries(publicEnvVarsRawWithLegasyFromComponents).map(function (_a) {
-            var _b = __read(_a, 2),
-                key = _b[0],
-                value = _b[1];
-
-            return [key, (0, lodash_1.isObject)(value) ? JSON.stringify(value) : "".concat(value)];
-          }));
-          envVarsRaw = addIndexVar(__assign(__assign(__assign({}, predefinedVariables), secretEnvVars), publicEnvVarsRawSanitized));
           return [4
           /*yield*/
-          , (0, resolveReferences_1.resolveReferences)(envVarsRaw, function (componentName, variableName, alreadyVisited) {
-            return __awaiter(void 0, void 0, void 0, function () {
-              var envVars;
-              return __generator(this, function (_a) {
-                switch (_a.label) {
-                  case 0:
-                    return [4
-                    /*yield*/
-                    , (0, exports.getEnvironment)(config, componentName, env, commitInfo, alreadyVisited)];
-
-                  case 1:
-                    envVars = _a.sent().envVars;
-                    return [2
-                    /*return*/
-                    , envVars[variableName]];
-                }
-              });
-            });
-          }, alreadyVisited)];
+          , (0, getEnvironmentVariables_1.getEnvironmentVariables)(config, componentName, env, commitInfo)];
 
         case 1:
-          envVars = _o.sent();
+          _a = _b.sent(), envVars = _a.envVars, secretEnvVarKeys = _a.secretEnvVarKeys, host = _a.host, url = _a.url;
+          envContext = (0, getEnvironmentContext_1.getEnvironmentContext)(config, env, componentName, commitInfo);
+          envType = envContext.envType;
           return [2
           /*return*/
           , {
@@ -350979,11 +351244,11 @@ var getEnvironment = function (config, componentName, env, commitInfo, alreadyVi
             host: host,
             url: url,
             gitlabEnvironment: {
-              name: gitlabEnvironmentName,
+              name: envContext.gitlabEnvironmentName,
               url: url
             },
-            fullName: fullName,
-            slug: environmentSlug,
+            fullName: envContext.fullName,
+            slug: envContext.environmentSlug,
             shortName: env,
             envVars: envVars,
             secretEnvVarKeys: secretEnvVarKeys
@@ -350997,6 +351262,378 @@ exports.getEnvironment = getEnvironment;
 
 /***/ }),
 
+/***/ 95141:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.getEnvironmentContext = void 0;
+
+var getEnvConfig_1 = __nccwpck_require__(25706);
+
+var getEnvType_1 = __nccwpck_require__(94811);
+
+var getEnvironmentSlug = function (envConfig, env, componentName, commitInfo) {
+  var envType = (0, getEnvType_1.getEnvType)(env, envConfig);
+  return envType === "review" && commitInfo ? "".concat(env, "-").concat(commitInfo.reviewSlug, "-").concat(componentName) : "".concat(env, "-").concat(componentName);
+};
+
+var getEnvironmentContext = function (config, env, componentName, commitInfo) {
+  var envConfigRaw = (0, getEnvConfig_1.getEnvConfig)(config, componentName, env);
+  var envType = (0, getEnvType_1.getEnvType)(env, envConfigRaw);
+  var environmentSlug = getEnvironmentSlug(envConfigRaw, env, componentName, commitInfo);
+  var gitlabEnvironmentName = envType === "review" && commitInfo ? "".concat(env, "/").concat(commitInfo.refName, "/").concat(componentName) : "".concat(env, "/").concat(componentName);
+  var fullName = "".concat(config.customerName, "-").concat(config.appName, "-").concat(environmentSlug);
+  return {
+    envConfigRaw: envConfigRaw,
+    deployConfigRaw: envConfigRaw.deploy,
+    buildConfigRaw: envConfigRaw.build,
+    environmentSlug: environmentSlug,
+    gitlabEnvironmentName: gitlabEnvironmentName,
+    fullName: fullName,
+    envType: envType,
+    commitInfo: commitInfo,
+    componentName: componentName,
+    env: env,
+    fullConfig: config
+  };
+};
+
+exports.getEnvironmentContext = getEnvironmentContext;
+
+/***/ }),
+
+/***/ 76602:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+
+    return t;
+  };
+
+  return __assign.apply(this, arguments);
+};
+
+var __awaiter = this && this.__awaiter || function (thisArg, _arguments, P, generator) {
+  function adopt(value) {
+    return value instanceof P ? value : new P(function (resolve) {
+      resolve(value);
+    });
+  }
+
+  return new (P || (P = Promise))(function (resolve, reject) {
+    function fulfilled(value) {
+      try {
+        step(generator.next(value));
+      } catch (e) {
+        reject(e);
+      }
+    }
+
+    function rejected(value) {
+      try {
+        step(generator["throw"](value));
+      } catch (e) {
+        reject(e);
+      }
+    }
+
+    function step(result) {
+      result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
+    }
+
+    step((generator = generator.apply(thisArg, _arguments || [])).next());
+  });
+};
+
+var __generator = this && this.__generator || function (thisArg, body) {
+  var _ = {
+    label: 0,
+    sent: function () {
+      if (t[0] & 1) throw t[1];
+      return t[1];
+    },
+    trys: [],
+    ops: []
+  },
+      f,
+      y,
+      t,
+      g;
+  return g = {
+    next: verb(0),
+    "throw": verb(1),
+    "return": verb(2)
+  }, typeof Symbol === "function" && (g[Symbol.iterator] = function () {
+    return this;
+  }), g;
+
+  function verb(n) {
+    return function (v) {
+      return step([n, v]);
+    };
+  }
+
+  function step(op) {
+    if (f) throw new TypeError("Generator is already executing.");
+
+    while (_) try {
+      if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+      if (y = 0, t) op = [op[0] & 2, t.value];
+
+      switch (op[0]) {
+        case 0:
+        case 1:
+          t = op;
+          break;
+
+        case 4:
+          _.label++;
+          return {
+            value: op[1],
+            done: false
+          };
+
+        case 5:
+          _.label++;
+          y = op[1];
+          op = [0];
+          continue;
+
+        case 7:
+          op = _.ops.pop();
+
+          _.trys.pop();
+
+          continue;
+
+        default:
+          if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+            _ = 0;
+            continue;
+          }
+
+          if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+            _.label = op[1];
+            break;
+          }
+
+          if (op[0] === 6 && _.label < t[1]) {
+            _.label = t[1];
+            t = op;
+            break;
+          }
+
+          if (t && _.label < t[2]) {
+            _.label = t[2];
+
+            _.ops.push(op);
+
+            break;
+          }
+
+          if (t[2]) _.ops.pop();
+
+          _.trys.pop();
+
+          continue;
+      }
+
+      op = body.call(thisArg, _);
+    } catch (e) {
+      op = [6, e];
+      y = 0;
+    } finally {
+      f = t = 0;
+    }
+
+    if (op[0] & 5) throw op[1];
+    return {
+      value: op[0] ? op[1] : void 0,
+      done: true
+    };
+  }
+};
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.getSecretVarNameForContext = exports.getSecretVarName = exports.getEnvironmentVariables = void 0;
+
+var lodash_1 = __nccwpck_require__(23255);
+
+var deploy_1 = __nccwpck_require__(90223);
+
+var getEnvironmentContext_1 = __nccwpck_require__(95141);
+
+var resolveReferences_1 = __nccwpck_require__(80928);
+
+var getEnvironmentVariables = function (config, componentName, env, commitInfo, alreadyVisited // to prevent endless loop
+) {
+  if (alreadyVisited === void 0) {
+    alreadyVisited = {};
+  }
+
+  return __awaiter(void 0, void 0, void 0, function () {
+    var environmentContext, envConfigRaw, deployConfigRaw, envType, basePredefinedVariables, predefinedVariables, host, url, devLocalConfig, port, additionalEnvVars, publicEnvVarsRaw, additionalSecretKeys, secretEnvVarKeys, secretEnvVars, legacyFromComponents, publicEnvVarsRawWithLegasyFromComponents, publicEnvVarsRawSanitized, envVarsRaw, envVars;
+
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+
+    return __generator(this, function (_k) {
+      switch (_k.label) {
+        case 0:
+          environmentContext = (0, getEnvironmentContext_1.getEnvironmentContext)(config, env, componentName, commitInfo);
+          envConfigRaw = environmentContext.envConfigRaw, deployConfigRaw = environmentContext.deployConfigRaw, envType = environmentContext.envType;
+          basePredefinedVariables = {
+            ENV_SHORT: env,
+            APP_DIR: envConfigRaw.dir,
+            ENV_TYPE: envType
+          };
+
+          if (envType === "local") {
+            devLocalConfig = envConfigRaw;
+            port = (_a = devLocalConfig.port) !== null && _a !== void 0 ? _a : 3000;
+            host = "localhost:" + port;
+            url = "http://" + host;
+            predefinedVariables = {
+              ENV_SHORT: "local",
+              ROOT_URL: url,
+              PORT: port.toString()
+            };
+          } else {
+            additionalEnvVars = deployConfigRaw ? deploy_1.DEPLOY_TYPES[deployConfigRaw.type].getAdditionalEnvVars(environmentContext) : {};
+            host = (_c = (_b = envConfigRaw === null || envConfigRaw === void 0 ? void 0 : envConfigRaw.host) !== null && _b !== void 0 ? _b : additionalEnvVars.HOST_CANONICAL) !== null && _c !== void 0 ? _c : "unknown-host.example.com";
+            url = "https://".concat(host);
+            predefinedVariables = __assign(__assign(__assign({}, basePredefinedVariables), {
+              HOST: host,
+              ROOT_URL: url
+            }), additionalEnvVars);
+          }
+
+          publicEnvVarsRaw = (_e = (_d = envConfigRaw.vars) === null || _d === void 0 ? void 0 : _d.public) !== null && _e !== void 0 ? _e : {};
+          additionalSecretKeys = deployConfigRaw ? deploy_1.DEPLOY_TYPES[deployConfigRaw.type].additionalSecretKeys(environmentContext) : [];
+          secretEnvVarKeys = __spreadArray(__spreadArray([], __read((_g = (_f = envConfigRaw.vars) === null || _f === void 0 ? void 0 : _f.secret) !== null && _g !== void 0 ? _g : []), false), __read(additionalSecretKeys), false);
+          secretEnvVars = Object.fromEntries(secretEnvVarKeys.map(function (key) {
+            return [key, "$".concat((0, exports.getSecretVarName)(env, componentName, key))];
+          }));
+          legacyFromComponents = (_j = (_h = envConfigRaw.vars) === null || _h === void 0 ? void 0 : _h.fromComponents) !== null && _j !== void 0 ? _j : {};
+          publicEnvVarsRawWithLegasyFromComponents = (0, lodash_1.merge)({}, (0, resolveReferences_1.translateLegacyFromComponents)(legacyFromComponents), publicEnvVarsRaw);
+          publicEnvVarsRawSanitized = Object.fromEntries(Object.entries(publicEnvVarsRawWithLegasyFromComponents).map(function (_a) {
+            var _b = __read(_a, 2),
+                key = _b[0],
+                value = _b[1];
+
+            return [key, (0, lodash_1.isObject)(value) ? JSON.stringify(value) : "".concat(value)];
+          }));
+          envVarsRaw = addIndexVar(__assign(__assign(__assign({}, predefinedVariables), secretEnvVars), publicEnvVarsRawSanitized));
+          return [4
+          /*yield*/
+          , (0, resolveReferences_1.resolveReferences)(envVarsRaw, function (otherComponentName, variableName, alreadyVisited) {
+            return __awaiter(void 0, void 0, void 0, function () {
+              var otherEnvVars;
+              return __generator(this, function (_a) {
+                switch (_a.label) {
+                  case 0:
+                    return [4
+                    /*yield*/
+                    , (0, exports.getEnvironmentVariables)(config, otherComponentName, env, commitInfo, alreadyVisited)];
+
+                  case 1:
+                    otherEnvVars = _a.sent().envVars;
+                    return [2
+                    /*return*/
+                    , otherEnvVars[variableName]];
+                }
+              });
+            });
+          }, alreadyVisited)];
+
+        case 1:
+          envVars = _k.sent();
+          return [2
+          /*return*/
+          , {
+            envVars: envVars,
+            secretEnvVarKeys: secretEnvVarKeys,
+            host: host,
+            url: url
+          }];
+      }
+    });
+  });
+};
+
+exports.getEnvironmentVariables = getEnvironmentVariables;
+
+var sanitizeForEnVar = function (s) {
+  return s.replace(/-/g, "_");
+};
+
+var getSecretVarName = function (env, componentName, key) {
+  return "CL_".concat(sanitizeForEnVar(env), "_").concat(sanitizeForEnVar(componentName), "_").concat(key);
+}; // remove dash from component name
+
+
+exports.getSecretVarName = getSecretVarName;
+
+var addIndexVar = function (vars) {
+  return __assign(__assign({}, vars), {
+    _ALL_ENV_VAR_KEYS: JSON.stringify(Object.keys(vars))
+  });
+};
+
+var getSecretVarNameForContext = function (context, key) {
+  return (0, exports.getSecretVarName)(context.environment.shortName, context.componentName, key);
+};
+
+exports.getSecretVarNameForContext = getSecretVarNameForContext;
+
+/***/ }),
+
 /***/ 30486:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -351228,34 +351865,30 @@ var utils_1 = __nccwpck_require__(37461);
 
 var getEnvironment_1 = __nccwpck_require__(60740);
 
+var getEnvironmentContext_1 = __nccwpck_require__(95141);
+
 __exportStar(__nccwpck_require__(60740), exports);
 
+__exportStar(__nccwpck_require__(76602), exports);
+
 var createContext = function (config, componentName, env, commitInfo, packageManagerInfo) {
   return __awaiter(void 0, void 0, void 0, function () {
-    var rawConfig, envConfig, componentConfigWithoutDefaults, defaults, componentConfig;
+    var envContext, componentConfigWithoutDefaults, defaults, componentConfig;
 
     var _a;
 
-    var _b, _c;
-
-    return __generator(this, function (_d) {
-      switch (_d.label) {
+    return __generator(this, function (_b) {
+      switch (_b.label) {
         case 0:
           if (!/^[a-z0-9-]+$/.test(componentName)) {
             throw new Error("componentName may only contain lower case letters, numbers and -");
           }
 
-          rawConfig = config.components[componentName];
-
-          if (!rawConfig) {
-            throw new Error("unknown component " + componentName);
-          }
-
-          envConfig = (_c = (_b = rawConfig.env) === null || _b === void 0 ? void 0 : _b[env]) !== null && _c !== void 0 ? _c : {};
-          componentConfigWithoutDefaults = (0, utils_1.mergeWithMergingArrays)(rawConfig, envConfig);
+          envContext = (0, getEnvironmentContext_1.getEnvironmentContext)(config, env, componentName, commitInfo);
+          componentConfigWithoutDefaults = envContext.envConfigRaw;
           defaults = componentConfigWithoutDefaults.deploy ? {
-            build: build_1.BUILD_TYPES[componentConfigWithoutDefaults.build.type].defaults(),
-            deploy: deploy_1.DEPLOY_TYPES[componentConfigWithoutDefaults.deploy.type].defaults()
+            build: build_1.BUILD_TYPES[componentConfigWithoutDefaults.build.type].defaults(envContext),
+            deploy: deploy_1.DEPLOY_TYPES[componentConfigWithoutDefaults.deploy.type].defaults(envContext)
           } : {
             build: {},
             deploy: {}
@@ -351273,7 +351906,7 @@ var createContext = function (config, componentName, env, commitInfo, packageMan
         case 1:
           return [2
           /*return*/
-          , (_a.environment = _d.sent(), _a.commitInfo = commitInfo, _a.packageManagerInfo = packageManagerInfo, _a)];
+          , (_a.environment = _b.sent(), _a.commitInfo = commitInfo, _a.packageManagerInfo = packageManagerInfo, _a)];
       }
     });
   });
@@ -351812,115 +352445,393 @@ var __read = this && this.__read || function (o, n) {
   return ar;
 };
 
-var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
-  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
-    if (ar || !(i in from)) {
-      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
-      ar[i] = from[i];
-    }
-  }
-  return to.concat(ar || Array.prototype.slice.call(from));
-};
-
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.createGoogleCloudRunDeployJobs = void 0;
+
+var js_yaml_1 = __nccwpck_require__(3618);
+
+var lodash_1 = __nccwpck_require__(23255);
+
+var _1 = __nccwpck_require__(81344);
+
+var docker_1 = __nccwpck_require__(33219);
+
+var getLabels_1 = __nccwpck_require__(30486);
+
+var runner_1 = __nccwpck_require__(55071);
+
+var base_1 = __nccwpck_require__(89177);
+
+var types_1 = __nccwpck_require__(63109);
+
+var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(22607);
+
+var database_1 = __nccwpck_require__(41384);
+
+var gitlab_1 = __nccwpck_require__(84997);
+
+var createGoogleCloudRunDeployJobs = function (context) {
+  var _a;
+
+  var deployConfig = context.componentConfig.deploy;
+
+  if (deployConfig === false) {
+    return [];
+  }
+
+  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    // should not happen
+    throw new Error("deploy config is wrong");
+  }
+
+  var baseDeploymentJob = (0, base_1.getBaseDeploymentJob)(context);
+  var fullAppName = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName);
+  var dockerUrl = "".concat(deployConfig.region, "-docker.pkg.dev/").concat(deployConfig.projectId, "/catladder-deploy/").concat(fullAppName);
+  var gcloudImageName = "".concat(dockerUrl, "/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG");
+
+  var pushImageToArtifactsRegistry = __spreadArray(__spreadArray([docker_1.gitlabDockerLogin], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud auth configure-docker ".concat(deployConfig.region, "-docker.pkg.dev"), "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG ".concat(gcloudImageName), "docker push ".concat(gcloudImageName)], false);
+
+  var allEnvVars = (0, lodash_1.omit)(context.environment.envVars, _1.GCLOUD_DEPLOY_CREDENTIALS_KEY);
+  var labelsString = Object.entries((0, getLabels_1.getLabels)(context)).map(function (_a) {
+    var _b = __read(_a, 2),
+        key = _b[0],
+        value = _b[1];
+
+    return "".concat(key, "=").concat(value);
+  }).join(",");
+  var commonArgs = "--project ".concat(deployConfig.projectId, " --region=").concat(deployConfig.region);
+  var cloudRunArgs = deployConfig.cloudSql ? "--set-cloudsql-instances=".concat(deployConfig.cloudSql.instanceConnectionName) : "";
+  var commonDeployArgs = "--image ".concat(gcloudImageName, " ").concat(commonArgs, " ").concat(cloudRunArgs, " --labels ").concat(labelsString);
+  var serviceName = context.environment.fullName.toLowerCase();
+
+  var getServiceDeployScript = function (service) {
+    var _a;
+
+    var command = service !== true ? (_a = service === null || service === void 0 ? void 0 : service.command) !== null && _a !== void 0 ? _a : context.componentConfig.build.startCommand : undefined;
+    var commandArg = command ? "--command=\"".concat(command.split(" ").join(","), "\"") : "";
+    return "gcloud run deploy ".concat(serviceName, " ").concat(commandArg, " ").concat(commonDeployArgs, " --env-vars-file=____envvars.yaml --allow-unauthenticated");
+  };
+
+  var getJobCreateScripts = function (jobName, job) {
+    // due to some oversight from google, jobs create does not accept `--env-vars-file` 🤦
+    // lucky, update on the other hand accepts it... so let's just imediatly update it
+    // also we cannot upsert a job, so we have to create it and catch the error and then update
+    var args = "".concat(jobName, " --command=\"").concat(job.command.split(" ").join(","), "\" ").concat(commonDeployArgs, " --memory=").concat(job.memory || "512Mi");
+    return __spreadArray(__spreadArray([], __read((0, gitlab_1.allowFailureInScripts)(["gcloud beta run jobs create ".concat(args)])), false), ["gcloud beta run jobs update ".concat(args, " --env-vars-file=____envvars.yaml")], false);
+  };
+
+  var getJobRunScript = function (jobName) {
+    return "gcloud beta run jobs execute ".concat(jobName, " ").concat(commonArgs);
+  };
+
+  var getFullJobName = function (name) {
+    return context.environment.fullName.toLowerCase() + "-" + name.toLowerCase();
+  };
+
+  var jobsWithNames = Object.entries((_a = deployConfig.jobs) !== null && _a !== void 0 ? _a : {}) // filter out disabled jobs
+  .filter(function (entry) {
+    return Boolean(entry[1]);
+  }).map(function (_a) {
+    var _b = __read(_a, 2),
+        name = _b[0],
+        job = _b[1];
+
+    return [getFullJobName(name), job];
+  });
+
+  var cloudRunDeployScripts = __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(["echo \"$ENV_VARS\" > ____envvars.yaml"], __read(deployConfig.cloudSql ? (0, database_1.getDatabaseCreateScript)(context, deployConfig) // we create the db, so that we can also delete it afterwards
+  : []), false), __read(jobsWithNames.map(function (_a) {
+    var _b = __read(_a, 2),
+        name = _b[0],
+        job = _b[1];
+
+    return getJobCreateScripts(name, job);
+  }).flat()), false), __read(jobsWithNames.filter(function (_a) {
+    var _b = __read(_a, 2),
+        job = _b[1];
+
+    return job.when === "preDeploy";
+  }).map(function (_a) {
+    var _b = __read(_a, 1),
+        name = _b[0];
+
+    return getJobRunScript(name);
+  })), false), __read(deployConfig.service !== false ? [getServiceDeployScript(deployConfig.service)] : []), false), __read(jobsWithNames.filter(function (_a) {
+    var _b = __read(_a, 2),
+        job = _b[1];
+
+    return job.when === "postDeploy";
+  }).map(function (_a) {
+    var _b = __read(_a, 1),
+        name = _b[0];
+
+    return getJobRunScript(name);
+  })), false), ["docker image rm ".concat(gcloudImageName)], false);
+
+  var cloudRunStopScripts = __spreadArray(__spreadArray(__spreadArray([], __read(deployConfig.service !== false ? ["gcloud run services delete ".concat(serviceName, " ").concat(commonArgs)] : []), false), __read(jobsWithNames.map(function (_a) {
+    var _b = __read(_a, 1),
+        name = _b[0];
+
+    return "gcloud beta run jobs delete ".concat(name, " ").concat(commonArgs);
+  })), false), __read(deployConfig.cloudSql && deployConfig.cloudSql.deleteDatabaseOnStop ? (0, database_1.getDatabaseDeleteScript)(context, deployConfig) : []), false);
+
+  var baseStopJob = (0, base_1.getBaseDeploymentStopJob)(context);
+  return [(0, lodash_1.merge)({}, baseDeploymentJob, (0, docker_1.getDockerJobBaseProps)(context), {
+    artifacts: {
+      paths: ["____envvars.yaml"]
+    },
+    variables: {
+      CLOUDSDK_CORE_DISABLE_PROMPTS: "1",
+      ENV_VARS: (0, js_yaml_1.dump)(allEnvVars, {
+        lineWidth: -1,
+        quotingType: "'",
+        forceQuotes: true
+      })
+    },
+    image: (0, runner_1.getRunnerImage)("gcloud"),
+    script: __spreadArray(__spreadArray([], __read(pushImageToArtifactsRegistry), false), __read(cloudRunDeployScripts), false)
+  }), (0, lodash_1.merge)({}, baseStopJob, {
+    image: (0, runner_1.getRunnerImage)("gcloud"),
+    variables: {
+      CLOUDSDK_CORE_DISABLE_PROMPTS: "1"
+    },
+    script: __spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), __read(cloudRunStopScripts), false)
+  })];
+};
+
+exports.createGoogleCloudRunDeployJobs = createGoogleCloudRunDeployJobs;
+
+/***/ }),
+
+/***/ 81344:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+
+    return t;
+  };
+
+  return __assign.apply(this, arguments);
+};
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.GCLOUD_RUN_DEPLOY_TYPE = exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = void 0;
+
+var context_1 = __nccwpck_require__(22041);
+
+var gitlab_1 = __nccwpck_require__(84997);
+
+var deployJob_1 = __nccwpck_require__(82256);
+
+exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
+exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = "GCLOUD_RUN_canonicalHostSuffix";
+
+var getCloudSqlVariables = function (_a) {
+  var _b;
+
+  var deployConfigRaw = _a.deployConfigRaw,
+      environmentSlug = _a.environmentSlug,
+      env = _a.env,
+      componentName = _a.componentName,
+      fullConfig = _a.fullConfig;
+
+  if (deployConfigRaw && deployConfigRaw.cloudSql) {
+    var DB_NAME = [(_b = deployConfigRaw.cloudSql.dbNamePrefix) !== null && _b !== void 0 ? _b : "".concat(fullConfig.customerName, "-").concat(fullConfig.appName), environmentSlug].filter(Boolean).join("-");
+    var hostAndDb = "localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME";
+    return {
+      CLOUD_SQL_INSTANCE_CONNECTION_NAME: deployConfigRaw.cloudSql.instanceConnectionName,
+      DB_NAME: DB_NAME,
+      DB_USER: "postgres",
+      DB_PASSWORD: "$" + (0, context_1.getSecretVarName)(env, componentName, "DB_PASSWORD"),
+      DATABASE_URL: "postgresql://$DB_USER:$DB_PASSWORD@".concat(hostAndDb),
+      DATABASE_JDBC_URL: "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD"
+    };
+  }
+
+  return {};
+};
+
+exports.GCLOUD_RUN_DEPLOY_TYPE = {
+  jobs: deployJob_1.createGoogleCloudRunDeployJobs,
+  defaults: function (_a) {
+    var deployConfigRaw = _a.deployConfigRaw,
+        envType = _a.envType;
+
+    if (deployConfigRaw && deployConfigRaw.cloudSql) {
+      return {
+        cloudSql: {
+          deleteDatabaseOnStop: envType === "review"
+        }
+      };
+    }
+
+    return {};
+  },
+  additionalSecretKeys: function (ctx) {
+    return __spreadArray([exports.GCLOUD_DEPLOY_CREDENTIALS_KEY], __read(ctx.deployConfigRaw && ctx.deployConfigRaw.cloudSql ? ["DB_PASSWORD"] : []), false);
+  },
+  getAdditionalEnvVars: function (ctx) {
+    var fullName = ctx.fullName,
+        env = ctx.env,
+        componentName = ctx.componentName,
+        deployConfigRaw = ctx.deployConfigRaw;
+    var HOST_CANONICAL = fullName.toLowerCase() + "-" + process.env[(0, context_1.getSecretVarName)(env, componentName, exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX)];
+    var jobTriggers = deployConfigRaw && deployConfigRaw.jobs ? Object.fromEntries(Object.entries(deployConfigRaw.jobs).map(function (_a) {
+      var _b = __read(_a, 2),
+          name = _b[0],
+          job = _b[1];
+
+      return ["CLOUD_RUN_JOB_TRIGGER_URL_" + (0, gitlab_1.sanitizeForBashVariable)(name), "https://".concat(deployConfigRaw.region, "-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/").concat(deployConfigRaw.projectId, "/jobs/").concat(name, ":run")];
+    })) : {};
+    return __assign(__assign({
+      HOST_CANONICAL: HOST_CANONICAL
+    }, getCloudSqlVariables(ctx)), jobTriggers);
+  }
+};
+
+/***/ }),
+
+/***/ 41384:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
 exports.__esModule = true;
-exports.createDeployJob = void 0;
-
-var js_yaml_1 = __nccwpck_require__(3618);
-
-var lodash_1 = __nccwpck_require__(23255);
-
-var _1 = __nccwpck_require__(81344);
+exports.getDatabaseCreateScript = exports.getDatabaseDeleteScript = void 0;
 
-var docker_1 = __nccwpck_require__(33219);
+var gitlab_1 = __nccwpck_require__(84997);
 
-var getLabels_1 = __nccwpck_require__(30486);
-
-var runner_1 = __nccwpck_require__(55071);
-
-var base_1 = __nccwpck_require__(89177);
-
-var types_1 = __nccwpck_require__(63109);
-
-var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(22607);
-
-var createDeployJob = function (context) {
-  var deployConfig = context.componentConfig.deploy;
+var getDatabaseDeleteScript = function (context, deployConfig) {
+  var _a;
 
-  if (deployConfig === false) {
-    return [];
+  if (!deployConfig.cloudSql || !deployConfig.cloudSql.deleteDatabaseOnStop) {
+    throw new Error("not possible");
   }
 
-  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
-    // should not happen
-    throw new Error("deploy config is not custom");
-  }
-
-  var baseDeploymentJob = (0, base_1.getBaseDeploymentJob)(context);
-  var fullAppName = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName);
-  var dockerUrl = "".concat(deployConfig.region, "-docker.pkg.dev/").concat(deployConfig.projectId, "/catladder-deploy/").concat(fullAppName);
-  var gcloudImageName = "".concat(dockerUrl, "/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG");
+  var DB_NAME = ((_a = context.environment.envVars) !== null && _a !== void 0 ? _a : {}).DB_NAME;
 
-  var pushImageToArtifactsRegistry = __spreadArray(__spreadArray([docker_1.gitlabDockerLogin], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud auth configure-docker ".concat(deployConfig.region, "-docker.pkg.dev"), "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG ".concat(gcloudImageName), "docker push ".concat(gcloudImageName)], false);
+  if (!DB_NAME) {
+    throw new Error("error: env vars did not specify DB_NAME");
+  }
 
-  var allEnvVars = (0, lodash_1.omit)(context.environment.envVars, _1.GCLOUD_DEPLOY_CREDENTIALS_KEY);
-  var serviceName = context.environment.fullName.toLowerCase();
-  var labelsString = Object.entries((0, getLabels_1.getLabels)(context)).map(function (_a) {
-    var _b = __read(_a, 2),
-        key = _b[0],
-        value = _b[1];
+  var _b = __read(deployConfig.cloudSql.instanceConnectionName.split(":"), 3),
+      projectId = _b[0],
+      region = _b[1],
+      instanceId = _b[2]; // unfortunatly the database cannot be deleted right after the service has stopped, as it might still have connections
+  // we have to repeate this process
 
-    return "".concat(key, "=").concat(value);
-  }).join(",");
-  var command = context.componentConfig.build.startCommand ? "--command=\"".concat(context.componentConfig.build.startCommand.split(" ").join(","), "\"") : ""; // TODO: split secrets out
 
-  var cloudRunDeploy = ["echo \"$ENV_VARS\" > ____envvars.yaml", "gcloud run deploy ".concat(serviceName, " --image ").concat(gcloudImageName, " --region=").concat(deployConfig.region, " --allow-unauthenticated --project ").concat(deployConfig.projectId, " ").concat(command, " --env-vars-file=____envvars.yaml --labels ").concat(labelsString), "docker image rm ".concat(gcloudImageName)];
-  var baseStopJob = (0, base_1.getBaseDeploymentStopJob)(context);
-  return [(0, lodash_1.merge)({}, baseDeploymentJob, (0, docker_1.getDockerJobBaseProps)(context), {
-    artifacts: {
-      paths: ["____envvars.yaml"]
-    },
-    variables: {
-      ENV_VARS: (0, js_yaml_1.dump)(allEnvVars, {
-        lineWidth: -1,
-        quotingType: "'",
-        forceQuotes: true
-      })
-    },
-    image: (0, runner_1.getRunnerImage)("gcloud"),
-    script: __spreadArray(__spreadArray([], __read(pushImageToArtifactsRegistry), false), __read(cloudRunDeploy), false)
-  }), (0, lodash_1.merge)({}, baseStopJob, {
-    image: (0, runner_1.getRunnerImage)("gcloud"),
-    script: __spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud run services delete ".concat(serviceName, " --project ").concat(deployConfig.projectId, " --region=").concat(deployConfig.region, " --quiet")], false)
+  return ["echo \"deleting database ".concat(DB_NAME, "...\""), "echo \"\uD83D\uDC46 this can take multiple attemps (3-5min), because google cloud run may still have a connection to the database after the cloud run service is shut down\"", (0, gitlab_1.repeatOnFailure)("gcloud sql databases delete ".concat(DB_NAME, " --instance=").concat(instanceId, " --project ").concat(projectId), {
+    pauseInSeconds: 10
   })];
 };
 
-exports.createDeployJob = createDeployJob;
+exports.getDatabaseDeleteScript = getDatabaseDeleteScript;
 
-/***/ }),
+var getDatabaseCreateScript = function (context, deployConfig) {
+  var _a;
 
-/***/ 81344:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+  if (!deployConfig.cloudSql) {
+    throw new Error("not possible");
+  }
 
-"use strict";
+  var DB_NAME = ((_a = context.environment.envVars) !== null && _a !== void 0 ? _a : {}).DB_NAME;
 
+  if (!DB_NAME) {
+    throw new Error("error: env vars did not specify DB_NAME");
+  }
 
-exports.__esModule = true;
-exports.GCLOUD_RUN_DEPLOY_TYPE = exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = void 0;
+  var _b = __read(deployConfig.cloudSql.instanceConnectionName.split(":"), 3),
+      projectId = _b[0],
+      region = _b[1],
+      instanceId = _b[2]; // may fail if it already exists
 
-var deployJob_1 = __nccwpck_require__(82256);
 
-exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
-exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = "GCLOUD_RUN_canonicalHostSuffix";
-exports.GCLOUD_RUN_DEPLOY_TYPE = {
-  jobs: deployJob_1.createDeployJob,
-  defaults: function () {
-    return {};
-  },
-  additionalSecretKeys: function () {
-    return [exports.GCLOUD_DEPLOY_CREDENTIALS_KEY];
-  }
+  return (0, gitlab_1.allowFailureInScripts)(["echo \"ensuring Database...\"", "gcloud sql databases create ".concat(DB_NAME, " --instance=").concat(instanceId, " --project ").concat(projectId)]);
 };
 
+exports.getDatabaseCreateScript = getDatabaseCreateScript;
+
 /***/ }),
 
 /***/ 22607:
@@ -351944,43 +352855,6 @@ exports.gcloudServiceAccountLoginCommands = gcloudServiceAccountLoginCommands;
 
 /***/ }),
 
-/***/ 13539:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
-
-"use strict";
-
-
-exports.__esModule = true;
-exports.getCloudSQLConfig = exports.hasCloudSQL = void 0;
-
-var types_1 = __nccwpck_require__(63109);
-
-var hasCloudSQL = function (context) {
-  var _a, _b;
-
-  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
-    return (_b = (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql) === null || _b === void 0 ? void 0 : _b.enabled;
-  }
-
-  return false;
-};
-
-exports.hasCloudSQL = hasCloudSQL;
-
-var getCloudSQLConfig = function (context) {
-  var _a;
-
-  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
-    return (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql;
-  }
-
-  throw new Error("cannot get cloud sql config");
-};
-
-exports.getCloudSQLConfig = getCloudSQLConfig;
-
-/***/ }),
-
 /***/ 16531:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -352074,6 +352948,9 @@ exports.CUSTOM_DEPLOY_TYPE = {
   },
   additionalSecretKeys: function () {
     return [];
+  },
+  getAdditionalEnvVars: function () {
+    return {};
   }
 };
 
@@ -352137,6 +353014,9 @@ exports.DOCKER_TAG_DEPLOY_TYPE = {
   },
   additionalSecretKeys: function () {
     return [];
+  },
+  getAdditionalEnvVars: function () {
+    return {};
   }
 };
 
@@ -352176,21 +353056,21 @@ var dockerTag_1 = __nccwpck_require__(18990);
 
 var kubernetes_1 = __nccwpck_require__(95682);
 
+__exportStar(__nccwpck_require__(81344), exports);
+
+__exportStar(__nccwpck_require__(11925), exports);
+
 __exportStar(__nccwpck_require__(95682), exports);
 
 __exportStar(__nccwpck_require__(63109), exports);
 
 __exportStar(__nccwpck_require__(92757), exports);
 
-__exportStar(__nccwpck_require__(13539), exports);
-
-__exportStar(__nccwpck_require__(81344), exports);
-
 exports.DEPLOY_TYPES = {
   kubernetes: kubernetes_1.KUBERNETES_DEPLOY_TYPE,
   custom: custom_1.CUSTOM_DEPLOY_TYPE,
-  "google-cloudrun": cloudRun_1.GCLOUD_RUN_DEPLOY_TYPE,
-  dockerTag: dockerTag_1.DOCKER_TAG_DEPLOY_TYPE
+  dockerTag: dockerTag_1.DOCKER_TAG_DEPLOY_TYPE,
+  "google-cloudrun": cloudRun_1.GCLOUD_RUN_DEPLOY_TYPE
 };
 
 /***/ }),
@@ -352204,20 +353084,26 @@ exports.DEPLOY_TYPES = {
 exports.__esModule = true;
 exports.additionalKubernetesSecretKeys = void 0;
 
-var additionalKubernetesSecretKeys = function (config) {
-  var _a, _b, _c, _d;
+var additionalKubernetesSecretKeys = function (_a) {
+  var _b, _c, _d, _e;
+
+  var deployConfigRaw = _a.deployConfigRaw;
+
+  if (!deployConfigRaw) {
+    return [];
+  }
 
   var keys = [];
 
-  if ((_b = (_a = config.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled) {
+  if ((_c = (_b = deployConfigRaw.values) === null || _b === void 0 ? void 0 : _b.mongodb) === null || _c === void 0 ? void 0 : _c.enabled) {
     keys.push("MONGODB_ROOT_PASSWORD");
 
-    if (config.values.mongodb.architecture === "replicaset") {
+    if (deployConfigRaw.values.mongodb.architecture === "replicaset") {
       keys.push("MONGODB_REPLICASET_KEY");
     }
   }
 
-  if ((_d = (_c = config.values) === null || _c === void 0 ? void 0 : _c.cloudsql) === null || _d === void 0 ? void 0 : _d.enabled) {
+  if ((_e = (_d = deployConfigRaw.values) === null || _d === void 0 ? void 0 : _d.cloudsql) === null || _e === void 0 ? void 0 : _e.enabled) {
     keys.push("POSTGRESQL_PASSWORD");
     keys.push("cloudsqlProxyCredentials");
   }
@@ -352229,6 +353115,43 @@ exports.additionalKubernetesSecretKeys = additionalKubernetesSecretKeys;
 
 /***/ }),
 
+/***/ 11925:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.getKubernetesCloudSQLConfig = exports.hasKubernetesCloudSQL = void 0;
+
+var types_1 = __nccwpck_require__(63109);
+
+var hasKubernetesCloudSQL = function (context) {
+  var _a, _b;
+
+  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+    return (_b = (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql) === null || _b === void 0 ? void 0 : _b.enabled;
+  }
+
+  return false;
+};
+
+exports.hasKubernetesCloudSQL = hasKubernetesCloudSQL;
+
+var getKubernetesCloudSQLConfig = function (context) {
+  var _a;
+
+  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+    return (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql;
+  }
+
+  throw new Error("cannot get cloud sql config");
+};
+
+exports.getKubernetesCloudSQLConfig = getKubernetesCloudSQLConfig;
+
+/***/ }),
+
 /***/ 395:
 /***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
@@ -352387,14 +353310,24 @@ exports.createKubernetesDeployJobs = createKubernetesDeployJobs;
 /***/ }),
 
 /***/ 95682:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
 
 
+var __importDefault = this && this.__importDefault || function (mod) {
+  return mod && mod.__esModule ? mod : {
+    "default": mod
+  };
+};
+
 exports.__esModule = true;
 exports.KUBERNETES_DEPLOY_TYPE = void 0;
 
+var slugify_1 = __importDefault(__nccwpck_require__(44035));
+
+var __1 = __nccwpck_require__(90223);
+
 var additionalSecretKeys_1 = __nccwpck_require__(75775);
 
 var deployJob_1 = __nccwpck_require__(9792);
@@ -352404,7 +353337,32 @@ exports.KUBERNETES_DEPLOY_TYPE = {
   defaults: function () {
     return {};
   },
-  additionalSecretKeys: additionalSecretKeys_1.additionalKubernetesSecretKeys
+  additionalSecretKeys: additionalSecretKeys_1.additionalKubernetesSecretKeys,
+  getAdditionalEnvVars: function (_a) {
+    var _b;
+
+    var componentName = _a.componentName,
+        fullConfig = _a.fullConfig,
+        deployConfigRaw = _a.deployConfigRaw,
+        env = _a.env,
+        envType = _a.envType,
+        commitInfo = _a.commitInfo;
+    var KUBE_APP_NAME_PREFIX = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, "-") : "";
+    var KUBE_APP_NAME = "".concat(KUBE_APP_NAME_PREFIX).concat(componentName);
+    var KUBE_NAMESPACE = (0, __1.getKubernetesNamespace)(fullConfig, env);
+    var componentSlug = (0, slugify_1["default"])(componentName);
+    var envInUrl = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, ".").concat(env) : env;
+    var domainCanonical = deployConfigRaw && ((_b = deployConfigRaw.cluster) === null || _b === void 0 ? void 0 : _b.domainCanonical) || // for convenience, we allow clusters to define a canonical domain, because a cluster has a fixed ip and you will usually have a domain pointing to that cluster
+    fullConfig.domainCanonical || "panter.cloud";
+    var HOST_CANONICAL = "".concat(componentSlug, ".").concat(envInUrl, ".").concat(fullConfig.appName, ".").concat(fullConfig.customerName, ".").concat(domainCanonical); // default for kubernetes and rest
+
+    return {
+      KUBE_NAMESPACE: KUBE_NAMESPACE,
+      KUBE_APP_NAME: KUBE_APP_NAME,
+      KUBE_APP_NAME_PREFIX: KUBE_APP_NAME_PREFIX,
+      HOST_CANONICAL: HOST_CANONICAL
+    };
+  }
 };
 
 /***/ }),
@@ -352530,7 +353488,7 @@ var lodash_1 = __nccwpck_require__(23255);
 
 var utils_1 = __nccwpck_require__(37461);
 
-var cloudSql_1 = __nccwpck_require__(13539);
+var cloudSql_1 = __nccwpck_require__(11925);
 
 var types_1 = __nccwpck_require__(63109);
 
@@ -352600,7 +353558,7 @@ var createKubeValues = function (context) {
   var defaultKubeValues = (0, lodash_1.merge)({
     env: env,
     application: createAppConfig(context, application)
-  }, (0, cloudSql_1.hasCloudSQL)(context) ? (0, cloudsql_1.createCloudsqlBaseConfig)(context) : {}, ((_b = (_a = deployConfig.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled) ? (0, mongodb_1.createMongodbBaseConfig)(context) : {});
+  }, (0, cloudSql_1.hasKubernetesCloudSQL)(context) ? (0, cloudsql_1.createCloudsqlBaseConfig)(context) : {}, ((_b = (_a = deployConfig.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled) ? (0, mongodb_1.createMongodbBaseConfig)(context) : {});
   var kubeValues = (0, processSecretsAsFiles_1.processSecretsAsFiles)((0, utils_1.mergeWithMergingArrays)(defaultKubeValues, rest));
   return kubeValues;
 };
@@ -352973,52 +353931,6 @@ __exportStar(__nccwpck_require__(90223), exports);
 
 /***/ }),
 
-/***/ 89572:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
-
-"use strict";
-
-
-exports.__esModule = true;
-exports.createInventoryReporitngJob = exports.INVENTORY_ARTIFACTS_DIR_DEPENDENCIES = exports.INVENTORY_ARTIFACTS_DIR = void 0;
-
-var lodash_1 = __nccwpck_require__(23255);
-
-var path_1 = __nccwpck_require__(71017);
-
-exports.INVENTORY_ARTIFACTS_DIR = "__cl__reporting";
-exports.INVENTORY_ARTIFACTS_DIR_DEPENDENCIES = (0, path_1.join)(exports.INVENTORY_ARTIFACTS_DIR, "dependencies");
-
-var createInventoryReporitngJob = function (context) {
-  var inventoryTemplate = {
-    appName: context.fullConfig.appName,
-    customerName: context.fullConfig.customerName,
-    componentName: context.componentName,
-    environment: (0, lodash_1.pick)(context.environment, ["shortName", "fullName", "host", "url"]),
-    build: context.componentConfig.build,
-    deploy: context.componentConfig.deploy
-  };
-  var printReportComand = "echo '".concat(JSON.stringify(inventoryTemplate), "' | jq --argjson dependencies \"$(cat ").concat(exports.INVENTORY_ARTIFACTS_DIR_DEPENDENCIES, "/* | jq -n '. |= [inputs]')\" '. + {dependencies: $dependencies}'");
-  return {
-    envMode: "jobPerEnv",
-    name: "inventory:reporting",
-    stage: "reporting",
-    variables: {},
-    script: ["cd ".concat(context.componentConfig.dir), printReportComand],
-    needsStages: [{
-      stage: "build",
-      artifacts: true
-    }, {
-      stage: "deploy",
-      artifacts: true
-    }]
-  };
-};
-
-exports.createInventoryReporitngJob = createInventoryReporitngJob;
-
-/***/ }),
-
 /***/ 78974:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -353521,8 +354433,6 @@ var context_1 = __nccwpck_require__(22041);
 
 var deploy_1 = __nccwpck_require__(90223);
 
-var reportingJob_1 = __nccwpck_require__(89572);
-
 var utils_1 = __nccwpck_require__(37461);
 
 var makeGitlabJob_1 = __nccwpck_require__(15715);
@@ -353559,8 +354469,7 @@ var createRawJobs = function (context) {
   var buildJobs = build_1.BUILD_TYPES[context.componentConfig.build.type].jobs(context);
   var deployJobs = deploy_1.DEPLOY_TYPES[context.componentConfig.deploy.type].jobs(context);
   var customJobs = getCustomJobs(context);
-  var reportInventoryJob = (0, reportingJob_1.createInventoryReporitngJob)(context);
-  return __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read(buildJobs), false), __read(deployJobs), false), __read(customJobs), false), [reportInventoryJob], false);
+  return __spreadArray(__spreadArray(__spreadArray([], __read(buildJobs), false), __read(deployJobs), false), __read(customJobs), false);
 };
 
 var getFullJobName = function (name, componentName, env) {
@@ -354383,7 +355292,7 @@ __exportStar(__nccwpck_require__(63146), exports);
 
 exports.__esModule = true;
 exports.BASE_STAGES = void 0;
-exports.BASE_STAGES = ["setup", "test", "build", "deploy", "verify", "rollback", "stop", "reporting"];
+exports.BASE_STAGES = ["setup", "test", "build", "deploy", "verify", "rollback", "stop"];
 
 /***/ }),
 
@@ -354397,6 +355306,71 @@ exports.__esModule = true;
 
 /***/ }),
 
+/***/ 84997:
+/***/ (function(__unused_webpack_module, exports) {
+
+"use strict";
+
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.repeatOnFailure = exports.sanitizeForBashVariable = exports.allowFailureInScripts = void 0;
+
+var allowFailureInScripts = function (script) {
+  return __spreadArray(__spreadArray(["set +e"], __read(script), false), ["set -e" // reenable
+  ], false);
+};
+
+exports.allowFailureInScripts = allowFailureInScripts;
+
+var sanitizeForBashVariable = function (name) {
+  return name.replace(/-/g, "_");
+};
+
+exports.sanitizeForBashVariable = sanitizeForBashVariable;
+
+var repeatOnFailure = function (command, options) {
+  return "\n    until ".concat(command, " &> /dev/null\n    do\n      echo \"Trying again.\"\n      sleep ").concat(options.pauseInSeconds, "\n    done\n  ");
+};
+
+exports.repeatOnFailure = repeatOnFailure;
+
+/***/ }),
+
 /***/ 37461:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {