@catladder/cli 0.0.0-main-2e888690 → 0.0.0-main-e76cf00d

package/dist/packages/pipeline/src/deploy/kubernetes/deployJob.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createKubernetesDeployJobs = void 0;
+const ciVariables_1 = require("../../bash/ciVariables");
+const getEnvironmentVariables_1 = require("../../context/getEnvironmentVariables");
+const runner_1 = require("../../runner");
+const base_1 = require("../base");
+const types_1 = require("../types");
+const kubeValues_1 = require("./kubeValues");
+const bash_1 = require("../../../../bash/src/index.js");
+const gitlab_1 = require("../../utils/gitlab");
+const ALL_VALUES_FILE = "__all_values.yml";
+const createKubernetesDeployJobs = (context) => {
+    var _a, _b, _c;
+    const deployConfig = (_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config;
+    if (!(0, types_1.isOfDeployType)(deployConfig, "kubernetes")) {
+        // should not happen
+        throw new Error("deploy config is not kubernetes");
+    }
+    const shared = {
+        image: (0, runner_1.getRunnerImage)("kubernetes"),
+        ...(deployConfig.debug
+            ? {
+                artifacts: {
+                    paths: [
+                        ALL_VALUES_FILE, // debug
+                    ],
+                    when: "always",
+                },
+            }
+            : {}),
+        variables: {
+            ...context.environment.envVars,
+            RELEASE_NAME: context.environment.fullName,
+            HELM_EXPERIMENTAL_OCI: "1",
+            KUBE_DOCKER_IMAGE_PULL_SECRET: `gitlab-registry-${context.name}`,
+            // credentials for the image pull secret kubernetesCreateSecret
+            // writes into the namespace. Resolved per backend (gitlab: the
+            // registry user + password, github: the actor + workflow token)
+            // so the script itself stays backend-agnostic.
+            DOCKER_REGISTRY_USER: (0, ciVariables_1.getCiVariable)(context, "registryUser"),
+            DOCKER_REGISTRY_PASSWORD: (0, ciVariables_1.getCiVariable)(context, "registryPassword"),
+            HELM_GITLAB_CHART_NAME: (_b = deployConfig.chartName) !== null && _b !== void 0 ? _b : "/helm-charts/the-panter-chart",
+            HELM_ARGS: [
+                ...(deployConfig.debug ? ["--debug"] : []),
+                ...((_c = deployConfig.additionalHelmArgs) !== null && _c !== void 0 ? _c : []),
+            ].join(" "),
+            COMPONENT_NAME: context.name,
+        },
+    };
+    const clusterName = `kube-${context.environment.fullName}`;
+    const connectContext = [
+        `kubectl config set-cluster "${clusterName}" --server="$${(0, getEnvironmentVariables_1.getSecretVarNameForContext)(context, "KUBE_URL")}" --certificate-authority <(echo $${(0, getEnvironmentVariables_1.getSecretVarNameForContext)(context, "KUBE_CA_PEM")} | base64 -d) --embed-certs=true`,
+        `kubectl config set-credentials "${clusterName}" --token="$${(0, getEnvironmentVariables_1.getSecretVarNameForContext)(context, "KUBE_TOKEN")}"`,
+        `kubectl config set-context "${clusterName}" --cluster="${clusterName}" --user="${clusterName}" --namespace="${context.environment.envVars.KUBE_NAMESPACE}"`,
+        `kubectl config use-context "${clusterName}"`,
+    ];
+    return (0, base_1.createDeployementJobs)(context, {
+        deploy: {
+            ...shared,
+            script: [
+                ...connectContext,
+                ...(0, gitlab_1.collapseableSection)("writeallvalues", "Write " + ALL_VALUES_FILE + " for helm deployment")((0, bash_1.writeBashYamlToFileScript)((0, kubeValues_1.createKubeValues)(context), ALL_VALUES_FILE)),
+                "kubernetesCreateSecret",
+                "kubernetesDeploy",
+                "echo deployment successful 😻",
+            ],
+        },
+        stop: {
+            ...shared,
+            script: [...connectContext, "kubernetesDelete"],
+        },
+        rollback: {
+            ...shared,
+            script: [...connectContext, "kubernetesRollback"],
+        },
+    });
+};
+exports.createKubernetesDeployJobs = createKubernetesDeployJobs;
+//# sourceMappingURL=deployJob.js.map

package/dist/packages/pipeline/src/deploy/kubernetes/deployJob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployJob.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/deploy/kubernetes/deployJob.ts"],"names":[],"mappings":";;;AAAA,wDAAuD;AACvD,mFAAmF;AACnF,yCAA8C;AAG9C,kCAAgD;AAEhD,oCAA0C;AAC1C,6CAAgD;AAEhD,0CAA4D;AAC5D,+CAAyD;AAEzD,MAAM,eAAe,GAAG,kBAAkB,CAAC;AACpC,MAAM,0BAA0B,GAAG,CACxC,OAAyB,EACT,EAAE;;IAClB,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,CAAC;IAC5C,IAAI,CAAC,IAAA,sBAAc,EAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAChD,oBAAoB;QACpB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAA4D;QACtE,KAAK,EAAE,IAAA,uBAAc,EAAC,YAAY,CAAC;QACnC,GAAG,CAAC,YAAY,CAAC,KAAK;YACpB,CAAC,CAAC;gBACE,SAAS,EAAE;oBACT,KAAK,EAAE;wBACL,eAAe,EAAE,QAAQ;qBAC1B;oBACD,IAAI,EAAE,QAAQ;iBACf;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE;YACT,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO;YAC9B,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ;YAC1C,qBAAqB,EAAE,GAAG;YAC1B,6BAA6B,EAAE,mBAAmB,OAAO,CAAC,IAAI,EAAE;YAChE,+DAA+D;YAC/D,+DAA+D;YAC/D,gEAAgE;YAChE,+CAA+C;YAC/C,oBAAoB,EAAE,IAAA,2BAAa,EAAC,OAAO,EAAE,cAAc,CAAC;YAC5D,wBAAwB,EAAE,IAAA,2BAAa,EAAC,OAAO,EAAE,kBAAkB,CAAC;YACpE,sBAAsB,EACpB,MAAA,YAAY,CAAC,SAAS,mCAAI,+BAA+B;YAC3D,SAAS,EAAE;gBACT,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,MAAA,YAAY,CAAC,kBAAkB,mCAAI,EAAE,CAAC;aAC3C,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,cAAc,EAAE,OAAO,CAAC,IAAI;SAC7B;KACF,CAAC;IAEF,MAAM,WAAW,GAAG,QAAQ,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IAC3D,MAAM,cAAc,GAAG;QACrB,+BAA+B,WAAW,gBAAgB,IAAA,oDAA0B,EAClF,OAAO,EACP,UAAU,CACX,qCAAqC,IAAA,oDAA0B,EAC9D,OAAO,EACP,aAAa,CACd,kCAAkC;QACnC,mCAAmC,WAAW,eAAe,IAAA,oDAA0B,EACrF,OAAO,EACP,YAAY,CACb,GAAG;QACJ,+BAA+B,WAAW,gBAAgB,WAAW,aAAa,WAAW,kBAAkB,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,GAAG;QAC5J,+BAA+B,WAAW,GAAG;KAC9C,CAAC;IAEF,OAAO,IAAA,4BAAqB,EAAC,OAAO,EAAE;QACpC,MAAM,EAAE;YACN,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,GAAG,cAAc;gBACjB,GAAG,IAAA,4BAAmB,EACpB,gBAAgB,EAChB,QAAQ,GAAG,eAAe,GAAG,sBAAsB,CACpD,CACC,IAAA,gCAAyB,EAAC,IAAA,6BAAgB,EAAC,OAAO,CAAC,EAAE,eAAe,CAAC,CACtE;gBACD,wBAAwB;gBACxB,kBAAkB;gBAElB,+BAA+B;aAChC;SACF;QACD,IAAI,EAAE;YACJ,GAAG,MAAM;YACT,MAAM,EAAE,CAAC,GAAG,cAAc,EAAE,kBAAkB,CAAC;SAChD;QACD,QAAQ,EAAE;YACR,GAAG,MAAM;YACT,MAAM,EAAE,CAAC,GAAG,cAAc,EAAE,oBAAoB,CAAC;SAClD;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AArFW,QAAA,0BAA0B,8BAqFrC"}

package/dist/packages/pipeline/src/deploy/kubernetes/index.d.ts

@@ -0,0 +1,3 @@
+import type { DeployConfigKubernetes, DeployTypeDefinition } from "..";
+export * from "./cloudSql";
+export declare const KUBERNETES_DEPLOY_TYPE: DeployTypeDefinition<DeployConfigKubernetes>;

package/dist/packages/pipeline/src/deploy/kubernetes/index.js

@@ -0,0 +1,56 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KUBERNETES_DEPLOY_TYPE = void 0;
+const slugify_1 = __importDefault(require("slugify"));
+const __1 = require("..");
+const bash_1 = require("../../../../bash/src/index.js");
+const additionalSecretKeys_1 = require("./additionalSecretKeys");
+const deployJob_1 = require("./deployJob");
+__exportStar(require("./cloudSql"), exports);
+exports.KUBERNETES_DEPLOY_TYPE = {
+    jobs: deployJob_1.createKubernetesDeployJobs,
+    defaults: () => ({}),
+    additionalSecretKeys: additionalSecretKeys_1.additionalKubernetesSecretKeys,
+    getAdditionalEnvVars: ({ componentName, fullConfig, deployConfigRaw, env, reviewSlug, envType, }) => {
+        var _a;
+        const KUBE_APP_NAME_PREFIX = envType === "review" && reviewSlug ? reviewSlug.concat("-") : "";
+        const KUBE_APP_NAME = KUBE_APP_NAME_PREFIX.concat(componentName);
+        const KUBE_NAMESPACE = (0, __1.getKubernetesNamespace)(fullConfig, env);
+        const componentSlug = (0, slugify_1.default)(componentName);
+        const domainCanonical = (deployConfigRaw && ((_a = deployConfigRaw.cluster) === null || _a === void 0 ? void 0 : _a.domainCanonical)) || // for convenience, we allow clusters to define a canonical domain, because a cluster has a fixed ip and you will usually have a domain pointing to that cluster
+            fullConfig.domainCanonical ||
+            "panter.cloud";
+        const HOSTNAME_INTERNAL = (0, bash_1.joinBashExpressions)([
+            componentSlug,
+            ...(envType === "review" && reviewSlug ? [reviewSlug] : []),
+            env,
+            fullConfig.appName,
+            fullConfig.customerName,
+            domainCanonical,
+        ], "."); // default for kubernetes and rest
+        return {
+            KUBE_NAMESPACE,
+            KUBE_APP_NAME,
+            KUBE_APP_NAME_PREFIX,
+            HOSTNAME_INTERNAL,
+        };
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/packages/pipeline/src/deploy/kubernetes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/deploy/kubernetes/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,sDAA8B;AAE9B,0BAA4C;AAC5C,0CAAsD;AACtD,iEAAwE;AACxE,2CAAyD;AACzD,6CAA2B;AACd,QAAA,sBAAsB,GACjC;IACE,IAAI,EAAE,sCAA0B;IAChC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;IACpB,oBAAoB,EAAE,qDAA8B;IACpD,oBAAoB,EAAE,CAAC,EACrB,aAAa,EACb,UAAU,EACV,eAAe,EACf,GAAG,EACH,UAAU,EACV,OAAO,GACR,EAAE,EAAE;;QACH,MAAM,oBAAoB,GACxB,OAAO,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,cAAc,GAAG,IAAA,0BAAsB,EAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,IAAA,iBAAO,EAAC,aAAa,CAAC,CAAC;QAE7C,MAAM,eAAe,GACnB,CAAC,eAAe,KAAI,MAAA,eAAe,CAAC,OAAO,0CAAE,eAAe,CAAA,CAAC,IAAI,gKAAgK;YACjO,UAAU,CAAC,eAAe;YAC1B,cAAc,CAAC;QAEjB,MAAM,iBAAiB,GAAG,IAAA,0BAAmB,EAC3C;YACE,aAAa;YACb,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG;YACH,UAAU,CAAC,OAAO;YAClB,UAAU,CAAC,YAAY;YACvB,eAAe;SAChB,EACD,GAAG,CACJ,CAAC,CAAC,kCAAkC;QACrC,OAAO;YACL,cAAc;YACd,aAAa;YACb,oBAAoB;YACpB,iBAAiB;SAClB,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/packages/pipeline/src/deploy/kubernetes/kubeEnv.d.ts

@@ -0,0 +1,10 @@
+import type { ComponentContext } from "../../types";
+import type { VariableValue } from "../../../../bash/src/index.js";
+/**
+ * separate by secrets and public.
+ * we evalulate the actual values later, but want to store the secrets in kubernetes secrets
+ */
+export declare const createKubeEnv: (context: ComponentContext) => {
+    secret: Record<string, VariableValue>;
+    public: Record<string, VariableValue>;
+};

package/dist/packages/pipeline/src/deploy/kubernetes/kubeEnv.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createKubeEnv = void 0;
+const types_1 = require("../types");
+const shouldGoIntoSecrets = (key, value) => {
+    var _a;
+    if (!value)
+        return false;
+    if ((_a = String(value)) === null || _a === void 0 ? void 0 : _a.includes("$CL_")) {
+        return true;
+    }
+    return false;
+};
+/**
+ * separate by secrets and public.
+ * we evalulate the actual values later, but want to store the secrets in kubernetes secrets
+ */
+const createKubeEnv = (context) => {
+    var _a;
+    if (!(0, types_1.isOfDeployType)((_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config, "kubernetes")) {
+        // should not happen
+        throw new Error("deploy config is not kubernetes");
+    }
+    const allEnvVars = context.environment.envVars;
+    const env = Object.entries(allEnvVars).reduce((acc, [key, value]) => {
+        if (shouldGoIntoSecrets(key, value === null || value === void 0 ? void 0 : value.toString())) {
+            acc.secret = {
+                ...acc.secret,
+                [key]: value !== null && value !== void 0 ? value : "",
+            };
+            return acc;
+        }
+        acc.public = {
+            ...acc.public,
+            [key]: value !== null && value !== void 0 ? value : "",
+        };
+        return acc;
+    }, {
+        secret: {},
+        public: {},
+    });
+    return env;
+};
+exports.createKubeEnv = createKubeEnv;
+//# sourceMappingURL=kubeEnv.js.map

package/dist/packages/pipeline/src/deploy/kubernetes/kubeEnv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubeEnv.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/deploy/kubernetes/kubeEnv.ts"],"names":[],"mappings":";;;AAEA,oCAA0C;AAE1C,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAAE,KAAyB,EAAE,EAAE;;IACrE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,MAAA,MAAM,CAAC,KAAK,CAAC,0CAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;GAGG;AACI,MAAM,aAAa,GAAG,CAAC,OAAyB,EAAE,EAAE;;IACzD,IAAI,CAAC,IAAA,sBAAc,EAAC,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1D,oBAAoB;QACpB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;IAE/C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAI3C,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACpB,IAAI,mBAAmB,CAAC,GAAG,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,GAAG;gBACX,GAAG,GAAG,CAAC,MAAM;gBACb,CAAC,GAAG,CAAC,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE;aACnB,CAAC;YACF,OAAO,GAAG,CAAC;QACb,CAAC;QACD,GAAG,CAAC,MAAM,GAAG;YACX,GAAG,GAAG,CAAC,MAAM;YACb,CAAC,GAAG,CAAC,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE;SACnB,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC,EACD;QACE,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;KACX,CACF,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAjCW,QAAA,aAAa,iBAiCxB"}

package/dist/packages/pipeline/src/deploy/kubernetes/kubeValues.d.ts

@@ -0,0 +1,90 @@
+import type { BuildContextComponent, ComponentContext } from "../../types/context";
+export declare const createKubeValues: (context: ComponentContext<BuildContextComponent>) => any[] | ({
+    env: {
+        secret: Record<string, import("../../../../bash/src/index.js").VariableValue>;
+        public: Record<string, import("../../../../bash/src/index.js").VariableValue>;
+    };
+    application: false | import("../types/base").AllowUnknownProps<{
+        command?: string;
+        enabled?: boolean;
+        redirects?: import("../types").KubernetesRedirect[];
+        hostAliases?: string[];
+        replicas?: number;
+        autoscale?: import("../types").KubernetesAutoscale;
+        updateStrategy?: import("../types").KubernetesUpdateStrategy;
+        resources?: import("../types").KubernetesResourcesDef;
+        healthRoute?: string;
+        startupProbe?: {
+            httpGet?: {
+                path?: string;
+                port?: number;
+                httpHeaders?: {
+                    name: string;
+                    value: string;
+                }[];
+                failureThreshold?: number;
+                timeoutSeconds?: number;
+                periodSeconds?: number;
+                successThreshold?: number;
+            };
+        };
+        readinessProbe?: {
+            httpGet?: {
+                path?: string;
+                port?: number;
+                httpHeaders?: {
+                    name: string;
+                    value: string;
+                }[];
+                failureThreshold?: number;
+                timeoutSeconds?: number;
+                periodSeconds?: number;
+                successThreshold?: number;
+            };
+        };
+        livenessProbe?: {
+            httpGet?: {
+                path?: string;
+                port?: number;
+                httpHeaders?: {
+                    name: string;
+                    value: string;
+                }[];
+                failureThreshold?: number;
+                timeoutSeconds?: number;
+                periodSeconds?: number;
+                successThreshold?: number;
+            };
+        };
+        worker?: import("../types").KubernetesWorkerDef;
+        jobDefaults?: {
+            resources: import("../types").KubernetesResourcesDef;
+        };
+    }>;
+} & {
+    cloudsql?: import("../types").DeployConfigKubernetesValuesCloudSQLUnmanaged;
+    mongodb?: import("../types").DeployConfigMongodb;
+    mailhog?: {
+        enabled: boolean;
+    };
+    secretsFromOtherComponent?: {
+        [envVar: string]: string;
+    };
+    mapServiceUrlToEnv?: {
+        [envVar: string]: string;
+    };
+    jobs: {
+        [k: string]: false | import("../types/base").AllowUnknownProps<{
+            command: string;
+            hook?: string;
+        }>;
+    };
+    cronjobs: {
+        [k: string]: false | import("../types/base").AllowUnknownProps<{
+            schedule: string;
+            command: string;
+            concurrencyPolicy?: "Forbid" | "Allow" | "Replace";
+            timeZone?: string;
+        }>;
+    };
+});

package/dist/packages/pipeline/src/deploy/kubernetes/kubeValues.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createKubeValues = void 0;
+const lodash_es_1 = require("lodash-es");
+const utils_1 = require("../../utils");
+const types_1 = require("../types");
+const cloudSql_1 = require("./cloudSql");
+const kubeEnv_1 = require("./kubeEnv");
+const mongodb_1 = require("./mongodb");
+const createAppConfig = (context, application) => {
+    if (application === false) {
+        return {
+            enabled: false,
+        };
+    }
+    const { healthRoute, command, ...rest } = application !== null && application !== void 0 ? application : {};
+    return (0, utils_1.mergeWithMergingArrays)({
+        host: context.environment.envVars.HOSTNAME,
+        command: command !== null && command !== void 0 ? command : (context.build.type !== "disabled"
+            ? context.build.config.startCommand
+            : undefined),
+        livenessProbe: {
+            httpGet: {
+                path: healthRoute !== null && healthRoute !== void 0 ? healthRoute : "__health",
+            },
+        },
+        readinessProbe: {
+            httpGet: {
+                path: healthRoute !== null && healthRoute !== void 0 ? healthRoute : "__health",
+            },
+        },
+        startupProbe: {
+            httpGet: {
+                path: healthRoute !== null && healthRoute !== void 0 ? healthRoute : "__health",
+            },
+        },
+    }, // default
+    rest);
+};
+const removeFalsy = (record) => {
+    if (!record)
+        return undefined;
+    return Object.fromEntries(Object.entries(record).filter(([, value]) => value !== false));
+};
+const createKubeValues = (context) => {
+    var _a, _b, _c;
+    const deployConfig = (_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config;
+    if (!deployConfig) {
+        return [];
+    }
+    if (!(0, types_1.isOfDeployType)(deployConfig, "kubernetes")) {
+        // should not happen
+        throw new Error("deploy config is not kubernetes");
+    }
+    const { values } = deployConfig;
+    // we remove the application config because it can be just the value `false` which is a convenience feature, but not supported in the helm chart
+    // we only merge the rest of the values in
+    const { application, jobs, cronjobs, ...rest } = values !== null && values !== void 0 ? values : {};
+    const env = (0, kubeEnv_1.createKubeEnv)(context);
+    const defaultKubeValues = (0, lodash_es_1.merge)({
+        env,
+        application: createAppConfig(context, application),
+    }, (0, cloudSql_1.hasKubernetesCloudSQL)(context)
+        ? (0, cloudSql_1.createKubernetesCloudsqlBaseValues)(context)
+        : {}, ((_c = (_b = deployConfig.values) === null || _b === void 0 ? void 0 : _b.mongodb) === null || _c === void 0 ? void 0 : _c.enabled)
+        ? (0, mongodb_1.createMongodbBaseConfig)(context)
+        : {});
+    const kubeValues = (0, utils_1.mergeWithMergingArrays)(defaultKubeValues, {
+        jobs: removeFalsy(jobs),
+        cronjobs: removeFalsy(cronjobs),
+        ...rest,
+    });
+    return kubeValues;
+};
+exports.createKubeValues = createKubeValues;
+//# sourceMappingURL=kubeValues.js.map

package/dist/packages/pipeline/src/deploy/kubernetes/kubeValues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubeValues.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/deploy/kubernetes/kubeValues.ts"],"names":[],"mappings":";;;AAAA,yCAAkC;AAMlC,uCAAqD;AAErD,oCAA0C;AAC1C,yCAGoB;AAEpB,uCAA0C;AAC1C,uCAAoD;AAEpD,MAAM,eAAe,GAAG,CACtB,OAAgD,EAChD,WAAwD,EACX,EAAE;IAC/C,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,EAAE,CAAC;IAE5D,OAAO,IAAA,8BAAsB,EAC3B;QACE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ;QAC1C,OAAO,EACL,OAAO,aAAP,OAAO,cAAP,OAAO,GACP,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;YAChC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY;YACnC,CAAC,CAAC,SAAS,CAAC;QAChB,aAAa,EAAE;YACb,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,UAAU;aAChC;SACF;QACD,cAAc,EAAE;YACd,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,UAAU;aAChC;SACF;QACD,YAAY,EAAE;YACZ,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,UAAU;aAChC;SACF;KACF,EAAE,UAAU;IACb,IAAI,CACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAI,MAAkC,EAAE,EAAE;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,CAC9D,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,gBAAgB,GAAG,CAC9B,OAAgD,EAChD,EAAE;;IACF,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,CAAC;IAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,IAAA,sBAAc,EAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAChD,oBAAoB;QACpB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC;IAEhC,gJAAgJ;IAChJ,0CAA0C;IAC1C,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAC;IAE9D,MAAM,GAAG,GAAG,IAAA,uBAAa,EAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,iBAAiB,GAAG,IAAA,iBAAK,EAC7B;QACE,GAAG;QACH,WAAW,EAAE,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC;KACnD,EACD,IAAA,gCAAqB,EAAC,OAAO,CAAC;QAC5B,CAAC,CAAC,IAAA,6CAAkC,EAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,EAAE,EACN,CAAA,MAAA,MAAA,YAAY,CAAC,MAAM,0CAAE,OAAO,0CAAE,OAAO;QACnC,CAAC,CAAC,IAAA,iCAAuB,EAAC,OAAO,CAAC;QAClC,CAAC,CAAC,EAAE,CACP,CAAC;IAEF,MAAM,UAAU,GAAG,IAAA,8BAAsB,EAAC,iBAAiB,EAAE;QAC3D,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC;QACvB,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC;QAE/B,GAAG,IAAI;KACR,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAzCW,QAAA,gBAAgB,oBAyC3B"}

package/dist/packages/pipeline/src/deploy/kubernetes/mongodb.d.ts

@@ -0,0 +1,32 @@
+import type { ComponentContext } from "../../types/context";
+export declare const createMongodbBaseConfig: (context: ComponentContext) => {
+    mongodb: {
+        enabled: boolean;
+        auth: {
+            enabled: boolean;
+            rootPassword: string;
+            replicaSetKey: string;
+        };
+        persistence: {
+            storageClass: string;
+        };
+        image: {
+            registry: string;
+            repository: string;
+        };
+        backup: {
+            enabled: boolean;
+            hostToBackup: string;
+            pvcToBackup: string;
+            image: string;
+            schedule: string;
+            volumeSnapshotClass: string;
+        };
+    };
+    env: {
+        secret: {
+            MONGO_OPLOG_URL?: string;
+            MONGO_URL: string;
+        };
+    };
+};

package/dist/packages/pipeline/src/deploy/kubernetes/mongodb.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMongodbBaseConfig = void 0;
+const lodash_es_1 = require("lodash-es");
+const getEnvironmentVariables_1 = require("../../context/getEnvironmentVariables");
+const types_1 = require("../types");
+const getCredentialString = (context) => `root:$${(0, getEnvironmentVariables_1.getSecretVarNameForContext)(context, "MONGODB_ROOT_PASSWORD")}@`;
+const getMongodbHost = (context, name) => {
+    const namespace = context.environment.envVars.KUBE_NAMESPACE;
+    return `${name}.${namespace}.svc.cluster.local:27017`;
+};
+const getMongodbStandaloneHost = (context) => {
+    const fullAppname = context.environment.envVars.KUBE_APP_NAME;
+    return getMongodbHost(context, `${fullAppname}-mongodb`);
+};
+const getMongodbReplicasetHost = (context, index) => {
+    const fullAppname = context.environment.envVars.KUBE_APP_NAME;
+    return getMongodbHost(context, `${fullAppname}-mongodb-${index}.${fullAppname}-mongodb-headless`);
+};
+const createMongodbUrl = (context, dbName) => {
+    var _a, _b, _c, _d;
+    if (!(0, types_1.isOfDeployType)((_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config, "kubernetes")) {
+        throw new Error("can only createMongodbUrl on supported deploys");
+    }
+    const mongodbConfig = (_c = (_b = context.deploy) === null || _b === void 0 ? void 0 : _b.config.values) === null || _c === void 0 ? void 0 : _c.mongodb;
+    let queryParams = undefined;
+    let hosts = "";
+    if ((mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.architecture) === "replicaset") {
+        hosts = (0, lodash_es_1.range)(0, (_d = mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.replicaCount) !== null && _d !== void 0 ? _d : 2)
+            .map((i) => getMongodbReplicasetHost(context, i))
+            .join(",");
+        queryParams = "replicaSet=rs0&authSource=admin";
+    }
+    else {
+        hosts = getMongodbStandaloneHost(context);
+        queryParams = "authSource=admin";
+    }
+    return `mongodb://${getCredentialString(context)}${hosts}/${dbName}${queryParams ? `?${queryParams}` : ""}`;
+};
+const createMongoBackupDefaultConfig = (context) => {
+    var _a, _b, _c;
+    if (!(0, types_1.isOfDeployType)((_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config, "kubernetes")) {
+        throw new Error("can only create mongodb base config on supported deploys");
+    }
+    const mongodbConfig = (_c = (_b = context.deploy) === null || _b === void 0 ? void 0 : _b.config.values) === null || _c === void 0 ? void 0 : _c.mongodb;
+    const fullAppName = context.environment.envVars.KUBE_APP_NAME;
+    const backupEnabled = ["prod", "stage"].includes(context.environment.envType);
+    let hostToBackup;
+    let pvcToBackup;
+    if ((mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.architecture) === "replicaset") {
+        // bit quirky, we need to specify the host and its volume
+        // on replicaset its probably best to not use the first one, whcih usually starts as master, so we take the second (last one would also be ok)
+        const backupHostIndex = (mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.architecture) === "replicaset" &&
+            mongodbConfig.replicaCount &&
+            mongodbConfig.replicaCount > 1
+            ? 1
+            : 0;
+        hostToBackup = getMongodbReplicasetHost(context, backupHostIndex);
+        pvcToBackup = `datadir-${fullAppName}-mongodb-${backupHostIndex}`;
+    }
+    else {
+        hostToBackup = getMongodbStandaloneHost(context);
+        pvcToBackup = `${fullAppName}-mongodb`;
+    }
+    return {
+        enabled: backupEnabled,
+        hostToBackup,
+        pvcToBackup,
+        image: "mrelite/kubectlmongoshell:v1.0",
+        schedule: "0 4 * * *",
+        volumeSnapshotClass: "snapshotclass",
+    };
+};
+const createMongodbBaseConfig = (context) => {
+    var _a, _b, _c, _d;
+    if (!(0, types_1.isOfDeployType)((_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config, "kubernetes")) {
+        throw new Error("can only create mongodb base config on supported deploys");
+    }
+    const mongodbConfig = (_c = (_b = context.deploy) === null || _b === void 0 ? void 0 : _b.config.values) === null || _c === void 0 ? void 0 : _c.mongodb;
+    return {
+        mongodb: {
+            enabled: true,
+            auth: {
+                enabled: true,
+                rootPassword: "$" + (0, getEnvironmentVariables_1.getSecretVarNameForContext)(context, "MONGODB_ROOT_PASSWORD"),
+                replicaSetKey: "$" + (0, getEnvironmentVariables_1.getSecretVarNameForContext)(context, "MONGODB_REPLICASET_KEY"),
+            },
+            persistence: {
+                storageClass: "standard-rwo",
+            },
+            image: {
+                registry: "bitnamilegacy",
+                repository: "mongodb",
+            },
+            backup: createMongoBackupDefaultConfig(context),
+        },
+        env: {
+            secret: {
+                MONGO_URL: createMongodbUrl(context, (_d = mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.dbName) !== null && _d !== void 0 ? _d : "app"),
+                ...((mongodbConfig === null || mongodbConfig === void 0 ? void 0 : mongodbConfig.architecture) === "replicaset"
+                    ? { MONGO_OPLOG_URL: createMongodbUrl(context, "local") } // oplog only works with replicasets
+                    : {}),
+            },
+        },
+    };
+};
+exports.createMongodbBaseConfig = createMongodbBaseConfig;
+//# sourceMappingURL=mongodb.js.map

package/dist/packages/pipeline/src/deploy/kubernetes/mongodb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongodb.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/deploy/kubernetes/mongodb.ts"],"names":[],"mappings":";;;AAAA,yCAAkC;AAClC,mFAAmF;AAEnF,oCAA0C;AAE1C,MAAM,mBAAmB,GAAG,CAAC,OAAyB,EAAE,EAAE,CACxD,SAAS,IAAA,oDAA0B,EAAC,OAAO,EAAE,uBAAuB,CAAC,GAAG,CAAC;AAC3E,MAAM,cAAc,GAAG,CAAC,OAAyB,EAAE,IAAY,EAAE,EAAE;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC;IAC7D,OAAO,GAAG,IAAI,IAAI,SAAS,0BAA0B,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAAC,OAAyB,EAAE,EAAE;IAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9D,OAAO,cAAc,CAAC,OAAO,EAAE,GAAG,WAAW,UAAU,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAAC,OAAyB,EAAE,KAAa,EAAE,EAAE;IAC5E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9D,OAAO,cAAc,CACnB,OAAO,EACP,GAAG,WAAW,YAAY,KAAK,IAAI,WAAW,mBAAmB,CAClE,CAAC;AACJ,CAAC,CAAC;AACF,MAAM,gBAAgB,GAAG,CAAC,OAAyB,EAAE,MAAc,EAAE,EAAE;;IACrE,IAAI,CAAC,IAAA,sBAAc,EAAC,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,aAAa,GAAG,MAAA,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,CAAC,MAAM,0CAAE,OAAO,CAAC;IAE7D,IAAI,WAAW,GAAuB,SAAS,CAAC;IAEhD,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,YAAY,MAAK,YAAY,EAAE,CAAC;QACjD,KAAK,GAAG,IAAA,iBAAK,EAAC,CAAC,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,YAAY,mCAAI,CAAC,CAAC;aAC/C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;aAChD,IAAI,CAAC,GAAG,CAAC,CAAC;QAEb,WAAW,GAAG,iCAAiC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC1C,WAAW,GAAG,kBAAkB,CAAC;IACnC,CAAC;IAED,OAAO,aAAa,mBAAmB,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI,MAAM,GAChE,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EACpC,EAAE,CAAC;AACL,CAAC,CAAC;AACF,MAAM,8BAA8B,GAAG,CAAC,OAAyB,EAAE,EAAE;;IACnE,IAAI,CAAC,IAAA,sBAAc,EAAC,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,aAAa,GAAG,MAAA,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,CAAC,MAAM,0CAAE,OAAO,CAAC;IAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9D,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAE9E,IAAI,YAAoB,CAAC;IACzB,IAAI,WAAmB,CAAC;IAExB,IAAI,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,YAAY,MAAK,YAAY,EAAE,CAAC;QACjD,yDAAyD;QACzD,8IAA8I;QAC9I,MAAM,eAAe,GACnB,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,YAAY,MAAK,YAAY;YAC5C,aAAa,CAAC,YAAY;YAC1B,aAAa,CAAC,YAAY,GAAG,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,CAAC,CAAC;QAER,YAAY,GAAG,wBAAwB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAClE,WAAW,GAAG,WAAW,WAAW,YAAY,eAAe,EAAE,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACjD,WAAW,GAAG,GAAG,WAAW,UAAU,CAAC;IACzC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,aAAa;QACtB,YAAY;QACZ,WAAW;QACX,KAAK,EAAE,gCAAgC;QACvC,QAAQ,EAAE,WAAW;QACrB,mBAAmB,EAAE,eAAe;KACrC,CAAC;AACJ,CAAC,CAAC;AACK,MAAM,uBAAuB,GAAG,CAAC,OAAyB,EAAE,EAAE;;IACnE,IAAI,CAAC,IAAA,sBAAc,EAAC,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,aAAa,GAAG,MAAA,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,CAAC,MAAM,0CAAE,OAAO,CAAC;IAE7D,OAAO;QACL,OAAO,EAAE;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,YAAY,EACV,GAAG,GAAG,IAAA,oDAA0B,EAAC,OAAO,EAAE,uBAAuB,CAAC;gBACpE,aAAa,EACX,GAAG,GAAG,IAAA,oDAA0B,EAAC,OAAO,EAAE,wBAAwB,CAAC;aACtE;YACD,WAAW,EAAE;gBACX,YAAY,EAAE,cAAc;aAC7B;YACD,KAAK,EAAE;gBACL,QAAQ,EAAE,eAAe;gBACzB,UAAU,EAAE,SAAS;aACtB;YACD,MAAM,EAAE,8BAA8B,CAAC,OAAO,CAAC;SAChD;QACD,GAAG,EAAE;YACH,MAAM,EAAE;gBACN,SAAS,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,MAAM,mCAAI,KAAK,CAAC;gBACpE,GAAG,CAAC,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,YAAY,MAAK,YAAY;oBAC9C,CAAC,CAAC,EAAE,eAAe,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,oCAAoC;oBAC9F,CAAC,CAAC,EAAE,CAAC;aACR;SACF;KACF,CAAC;AACJ,CAAC,CAAC;AAlCW,QAAA,uBAAuB,2BAkClC"}

package/dist/packages/pipeline/src/deploy/npmPackage/deployJob.d.ts

@@ -0,0 +1,3 @@
+import type { ComponentContext } from "../../types/context";
+import type { CatladderJob } from "../../types/jobs";
+export declare const createNpmPackageDeployJobs: (context: ComponentContext) => CatladderJob[];

package/dist/packages/pipeline/src/deploy/npmPackage/deployJob.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createNpmPackageDeployJobs = void 0;
+const runner_1 = require("../../runner");
+const shippedCatci_1 = require("../../catci/shippedCatci");
+const base_1 = require("../base");
+const types_1 = require("../types");
+const createNpmPackageDeployJobs = (context) => {
+    var _a;
+    const deployConfig = (_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config;
+    if (!(0, types_1.isOfDeployType)(deployConfig, "npmPackage")) {
+        // should not happen
+        throw new Error("deploy config is not npmPackage");
+    }
+    const args = [
+        `--dir ${context.build.dir}`,
+        `--env-type ${context.environment.envType}`,
+        ...(deployConfig.access ? [`--access ${deployConfig.access}`] : []),
+        ...(deployConfig.registry ? [`--registry ${deployConfig.registry}`] : []),
+        ...(deployConfig.distTag ? [`--dist-tag ${deployConfig.distTag}`] : []),
+    ];
+    return (0, base_1.createDeployementJobs)(context, {
+        deploy: {
+            // dedicated image: publishing needs npm >= 11.5.1 for trusted
+            // publishing (OIDC), which jobs-default's node does not carry
+            image: (0, runner_1.getRunnerImage)("npm-publish"),
+            // github: lowered to `id-token: write` so npm can exchange the
+            // workflow's OIDC token for short-lived publish credentials
+            idToken: true,
+            script: [
+                // catci derives version + dist-tag from the pipeline trigger,
+                // sets the version in package.json and runs npm publish
+                `node ${shippedCatci_1.GENERATED_CATCI_FOLDER}/index.js publish npm ${args.join(" ")}`,
+            ],
+            variables: {},
+        },
+    });
+};
+exports.createNpmPackageDeployJobs = createNpmPackageDeployJobs;
+//# sourceMappingURL=deployJob.js.map

package/dist/packages/pipeline/src/deploy/npmPackage/deployJob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployJob.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/deploy/npmPackage/deployJob.ts"],"names":[],"mappings":";;;AAEA,yCAA8C;AAC9C,2DAAkE;AAClE,kCAAgD;AAChD,oCAA0C;AAEnC,MAAM,0BAA0B,GAAG,CACxC,OAAyB,EACT,EAAE;;IAClB,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,CAAC;IAC5C,IAAI,CAAC,IAAA,sBAAc,EAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAChD,oBAAoB;QACpB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,IAAI,GAAG;QACX,SAAS,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;QAC5B,cAAc,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE;QAC3C,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;IAEF,OAAO,IAAA,4BAAqB,EAAC,OAAO,EAAE;QACpC,MAAM,EAAE;YACN,8DAA8D;YAC9D,8DAA8D;YAC9D,KAAK,EAAE,IAAA,uBAAc,EAAC,aAAa,CAAC;YACpC,+DAA+D;YAC/D,4DAA4D;YAC5D,OAAO,EAAE,IAAI;YACb,MAAM,EAAE;gBACN,8DAA8D;gBAC9D,wDAAwD;gBACxD,QAAQ,qCAAsB,yBAAyB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;aACxE;YACD,SAAS,EAAE,EAAE;SACd;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAjCW,QAAA,0BAA0B,8BAiCrC"}

package/dist/packages/pipeline/src/deploy/npmPackage/index.d.ts

@@ -0,0 +1,3 @@
+import type { DeployConfigNpmPackage, DeployTypeDefinition } from "..";
+export declare const NPM_TOKEN_SECRET_KEY = "NPM_TOKEN";
+export declare const NPM_PACKAGE_DEPLOY_TYPE: DeployTypeDefinition<DeployConfigNpmPackage>;

package/dist/packages/pipeline/src/deploy/npmPackage/index.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NPM_PACKAGE_DEPLOY_TYPE = exports.NPM_TOKEN_SECRET_KEY = void 0;
+const deployJob_1 = require("./deployJob");
+exports.NPM_TOKEN_SECRET_KEY = "NPM_TOKEN";
+exports.NPM_PACKAGE_DEPLOY_TYPE = {
+    jobs: deployJob_1.createNpmPackageDeployJobs,
+    defaults: () => ({}),
+    additionalSecretKeys: (ctx) => 
+    // publish credentials don't exist for the local env. Not hidden:
+    // the user sets the token via `catladder project secrets-set`
+    // (hidden is for machine-provisioned credentials)
+    ctx.envType !== "local" ? [{ key: exports.NPM_TOKEN_SECRET_KEY }] : [],
+    getAdditionalEnvVars: () => ({}),
+};
+//# sourceMappingURL=index.js.map

package/dist/packages/pipeline/src/deploy/npmPackage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/deploy/npmPackage/index.ts"],"names":[],"mappings":";;;AACA,2CAAyD;AAE5C,QAAA,oBAAoB,GAAG,WAAW,CAAC;AAEnC,QAAA,uBAAuB,GAClC;IACE,IAAI,EAAE,sCAA0B;IAChC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;IACpB,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE;IAC5B,iEAAiE;IACjE,8DAA8D;IAC9D,kDAAkD;IAClD,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,4BAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;IAChE,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;CACjC,CAAC"}

package/dist/packages/pipeline/src/deploy/pages/deployJob.d.ts

@@ -0,0 +1,3 @@
+import type { ComponentContext } from "../../types/context";
+import type { CatladderJob } from "../../types/jobs";
+export declare const createPagesDeployJobs: (context: ComponentContext) => Promise<CatladderJob[]>;