@catladder/cli 0.0.0-main-332b079a → 0.0.0-main-752fde5b

package/dist/bundles/cli/index.js

@@ -1195,6 +1195,15 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
 exports.__esModule = true;
 var pipeline_1 = __nccwpck_require__(25355);
 var child_process_promise_1 = __nccwpck_require__(75763);
@@ -1213,79 +1222,79 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
                 return [4 /*yield*/, (0, autocompletions_1.envAndComponents)()];
             case 1: return [2 /*return*/, _b.apply(_a, [_c.sent()])
                     .action(function (_a) {
-                    var _b, _c, _d, _e;
                     var envComponent = _a.envComponent;
                     return __awaiter(this, void 0, void 0, function () {
-                        var _f, env, componentName, config, localPort, envVars, POSTGRESQL_PASSWORD, context, values, projectId, defaultInstanceId, instanceId, defaultRegion, region, instanceName, cloudsqlProxyCredentials;
+                        var _b, env, componentName, context, proxyInfo, DB_PASSWORD, DB_NAME, instanceName, localPort, cloudsqlProxyCredentials;
                         var _this = this;
-                        return __generator(this, function (_g) {
-                            switch (_g.label) {
+                        return __generator(this, function (_c) {
+                            switch (_c.label) {
                                 case 0:
-                                    _f = (0, getProjectConfig_1.parseChoice)(envComponent), env = _f.env, componentName = _f.componentName;
-                                    return [4 /*yield*/, (0, getProjectConfig_1.getProjectConfig)()];
+                                    _b = (0, getProjectConfig_1.parseChoice)(envComponent), env = _b.env, componentName = _b.componentName;
+                                    return [4 /*yield*/, (0, getProjectConfig_1.getPipelineContextByChoice)(env, componentName)];
                                 case 1:
-                                    config = _g.sent();
+                                    context = _c.sent();
+                                    if (env === "review") {
+                                        vorpal.log("⚠️ connection string does not include mr information on review environments");
+                                    }
+                                    if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) return [3 /*break*/, 3];
+                                    return [4 /*yield*/, getProxyInfoForKubernetes(context)];
+                                case 2:
+                                    proxyInfo = _c.sent();
+                                    return [3 /*break*/, 6];
+                                case 3:
+                                    if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "google-cloudrun")) return [3 /*break*/, 5];
+                                    return [4 /*yield*/, getProxyInfoForCloudRun(context)];
+                                case 4:
+                                    proxyInfo = _c.sent();
+                                    return [3 /*break*/, 6];
+                                case 5: throw new Error("unsupported environment");
+                                case 6:
+                                    DB_PASSWORD = proxyInfo.DB_PASSWORD, DB_NAME = proxyInfo.DB_NAME, instanceName = proxyInfo.instanceName;
                                     return [4 /*yield*/, this.prompt({
                                             type: "number",
                                             name: "localPort",
                                             "default": "54320",
                                             message: "Local port: "
                                         })];
-                                case 2:
-                                    localPort = (_g.sent()).localPort;
-                                    return [4 /*yield*/, (0, getProjectConfig_1.getEnvVars)(this, env, componentName)];
-                                case 3:
-                                    envVars = _g.sent();
-                                    POSTGRESQL_PASSWORD = envVars === null || envVars === void 0 ? void 0 : envVars.POSTGRESQL_PASSWORD;
-                                    return [4 /*yield*/, (0, getProjectConfig_1.getPipelineContextByChoice)(env, componentName)];
-                                case 4:
-                                    context = _g.sent();
-                                    if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
-                                        throw new Error("currently only supported for kubernetes deployment");
-                                    }
+                                case 7:
+                                    localPort = (_c.sent()).localPort;
                                     this.log("");
-                                    this.log("postgres-PW: ".concat(POSTGRESQL_PASSWORD));
+                                    this.log("postgres-PW: ".concat(DB_PASSWORD));
                                     this.log("");
-                                    this.log("POSTGRESQL_URL=postgresql://postgres:".concat(POSTGRESQL_PASSWORD, "@localhost:").concat(localPort, "/").concat(context.environment.envVars.KUBE_APP_NAME, "?schema=public"));
+                                    this.log("POSTGRESQL_URL=postgresql://postgres:".concat(DB_PASSWORD, "@localhost:").concat(localPort, "/").concat(DB_NAME, "?schema=public"));
                                     this.log("");
-                                    values = context.componentConfig.deploy.values;
-                                    projectId = ((_b = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _b === void 0 ? void 0 : _b.projectId) ||
-                                        ((_c = context.componentConfig.deploy.cluster) === null || _c === void 0 ? void 0 : _c.projectId);
-                                    defaultInstanceId = "".concat(config.customerName, "-").concat(config.appName, "-").concat(env);
-                                    instanceId = ((_d = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _d === void 0 ? void 0 : _d.instanceId) || defaultInstanceId;
-                                    defaultRegion = "europe-west6";
-                                    region = ((_e = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _e === void 0 ? void 0 : _e.region) || defaultRegion;
-                                    instanceName = "".concat(projectId, ":").concat(region, ":").concat(instanceId, "=tcp:").concat(localPort);
                                     return [4 /*yield*/, (0, getProjectConfig_1.getGitlabVar)(this, env, componentName, "cloudsqlProxyCredentials")];
-                                case 5:
-                                    cloudsqlProxyCredentials = _g.sent();
-                                    if (!cloudsqlProxyCredentials) {
-                                        // we store cloudsqlProxyCredentials on gitlab, but its currently get pushed via bitwarden due to legacy reasons
-                                        // this will be fixed with when https://git.panter.ch/catladder/catladder/-/merge_requests/32/ is merged
-                                        this.log("cloudsqlProxyCredentials env var missing in gitlab. Please contact gilde-ci-cd about that.");
-                                        throw new Error("cloudsqlProxyCredentials missing in secrets");
-                                    }
+                                case 8:
+                                    cloudsqlProxyCredentials = _c.sent();
                                     return [4 /*yield*/, (0, tmp_promise_1.withFile)(function (_a) {
                                             var tmpFilePath = _a.path;
                                             return __awaiter(_this, void 0, void 0, function () {
                                                 return __generator(this, function (_b) {
                                                     switch (_b.label) {
-                                                        case 0: return [4 /*yield*/, (0, fs_extra_1.writeFile)(tmpFilePath, cloudsqlProxyCredentials)];
+                                                        case 0:
+                                                            if (!cloudsqlProxyCredentials) return [3 /*break*/, 2];
+                                                            return [4 /*yield*/, (0, fs_extra_1.writeFile)(tmpFilePath, cloudsqlProxyCredentials)];
                                                         case 1:
                                                             _b.sent();
-                                                            return [4 /*yield*/, (0, child_process_promise_1.spawn)("cloud_sql_proxy", ["-instances", instanceName, "-credential_file", tmpFilePath], {
-                                                                    stdio: "inherit",
-                                                                    shell: true
-                                                                })];
-                                                        case 2:
+                                                            _b.label = 2;
+                                                        case 2: return [4 /*yield*/, (0, child_process_promise_1.spawn)("cloud_sql_proxy", __spreadArray([
+                                                                "-instances",
+                                                                "".concat(instanceName, "=tcp:").concat(localPort)
+                                                            ], (cloudsqlProxyCredentials
+                                                                ? ["-credential_file", tmpFilePath]
+                                                                : []), true), {
+                                                                stdio: "inherit",
+                                                                shell: true
+                                                            })];
+                                                        case 3:
                                                             _b.sent();
                                                             return [2 /*return*/];
                                                     }
                                                 });
                                             });
                                         })];
-                                case 6:
-                                    _g.sent();
+                                case 9:
+                                    _c.sent();
                                     return [2 /*return*/];
                             }
                         });
@@ -1294,6 +1303,58 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
         }
     });
 }); });
+var getProxyInfoForKubernetes = function (context) { return __awaiter(void 0, void 0, void 0, function () {
+    var envVars, DB_PASSWORD, DB_NAME, values, projectId, defaultInstanceId, instanceId, defaultRegion, region, instanceName;
+    var _a, _b, _c, _d;
+    return __generator(this, function (_e) {
+        switch (_e.label) {
+            case 0:
+                if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+                    throw new Error("unsupported");
+                }
+                return [4 /*yield*/, (0, getProjectConfig_1.getEnvVars)(this, context.environment.shortName, context.componentName)];
+            case 1:
+                envVars = _e.sent();
+                DB_PASSWORD = (envVars === null || envVars === void 0 ? void 0 : envVars.DB_PASSWORD) || (envVars === null || envVars === void 0 ? void 0 : envVars.POSTGRESQL_PASSWORD);
+                DB_NAME = context.environment.envVars.KUBE_APP_NAME;
+                values = context.componentConfig.deploy.values;
+                projectId = ((_a = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _a === void 0 ? void 0 : _a.projectId) ||
+                    ((_b = context.componentConfig.deploy.cluster) === null || _b === void 0 ? void 0 : _b.projectId);
+                defaultInstanceId = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName, "-").concat(context.environment.shortName);
+                instanceId = ((_c = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _c === void 0 ? void 0 : _c.instanceId) || defaultInstanceId;
+                defaultRegion = "europe-west6";
+                region = ((_d = values === null || values === void 0 ? void 0 : values.cloudsql) === null || _d === void 0 ? void 0 : _d.region) || defaultRegion;
+                instanceName = "".concat(projectId, ":").concat(region, ":").concat(instanceId);
+                return [2 /*return*/, {
+                        instanceName: instanceName,
+                        DB_PASSWORD: DB_PASSWORD,
+                        DB_NAME: DB_NAME
+                    }];
+        }
+    });
+}); };
+var getProxyInfoForCloudRun = function (context) { return __awaiter(void 0, void 0, void 0, function () {
+    var envVars, DB_PASSWORD, DB_NAME;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "google-cloudrun") ||
+                    !context.componentConfig.deploy.cloudSql) {
+                    throw new Error("unsupported");
+                }
+                return [4 /*yield*/, (0, getProjectConfig_1.getEnvVars)(this, context.environment.shortName, context.componentName)];
+            case 1:
+                envVars = _a.sent();
+                DB_PASSWORD = envVars === null || envVars === void 0 ? void 0 : envVars.DB_PASSWORD;
+                DB_NAME = context.environment.envVars.DB_NAME;
+                return [2 /*return*/, {
+                        instanceName: context.componentConfig.deploy.cloudSql.instanceConnectionName,
+                        DB_PASSWORD: DB_PASSWORD,
+                        DB_NAME: DB_NAME
+                    }];
+        }
+    });
+}); };
 //# sourceMappingURL=commandCloudSqlProxy.js.map
 
 /***/ }),
@@ -4158,6 +4219,15 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
 exports.__esModule = true;
 exports.setupCloudRun = void 0;
 var pipeline_1 = __nccwpck_require__(25355);
@@ -4178,7 +4248,12 @@ var setupCloudRun = function (instance, context) { return __awaiter(void 0, void
                 config = context.componentConfig.deploy;
                 // enable services
                 instance.log("enable required servies...");
-                return [4 /*yield*/, (0, enableServices_1.enableGCloudServices)(["run.googleapis.com", "artifactregistry.googleapis.com"], config)];
+                return [4 /*yield*/, (0, enableServices_1.enableGCloudServices)(__spreadArray([
+                        "run.googleapis.com",
+                        "artifactregistry.googleapis.com"
+                    ], (config.cloudSql
+                        ? ["sqladmin.googleapis.com", "sql-component.googleapis.com"]
+                        : []), true), config)];
             case 1:
                 _b.sent();
                 instance.log("upsert artifacts registry...");
@@ -4192,11 +4267,11 @@ var setupCloudRun = function (instance, context) { return __awaiter(void 0, void
                         description: "This service account deploys to google cloud",
                         name: "cl-d",
                         // TODO: run.admin is a bit much, would be better to follow https://stackoverflow.com/questions/55788714/deploying-to-cloud-run-with-a-custom-service-account-failed-with-iam-serviceacco
-                        roles: [
+                        roles: __spreadArray([
                             "roles/artifactregistry.repoAdmin",
                             "roles/run.admin",
-                            "roles/iam.serviceAccountUser",
-                        ]
+                            "roles/iam.serviceAccountUser"
+                        ], (config.cloudSql ? ["roles/cloudsql.admin"] : []), true)
                     }, pipeline_1.GCLOUD_DEPLOY_CREDENTIALS_KEY)];
             case 3:
                 _b.sent();
@@ -4272,10 +4347,10 @@ var pipeline_1 = __nccwpck_require__(25355);
 var setupCloudSQL = function (instance, context) { return __awaiter(void 0, void 0, void 0, function () {
     var config;
     return __generator(this, function (_a) {
-        if (!(0, pipeline_1.hasCloudSQL)(context)) {
+        if (!(0, pipeline_1.hasKubernetesCloudSQL)(context)) {
             throw new Error("cannot setup cloudsql, as it has none");
         }
-        config = (0, pipeline_1.getCloudSQLConfig)(context);
+        config = (0, pipeline_1.getKubernetesCloudSQLConfig)(context);
         instance.log("");
         instance.log("! make sure to provide cloudsqlProxyCredentials for the cloud sql service account in " +
             config.projectId);
@@ -4354,7 +4429,7 @@ var setupContext = function (instance, context) { return __awaiter(void 0, void
                 _a.sent();
                 _a.label = 2;
             case 2:
-                if (!(0, pipeline_1.hasCloudSQL)(context)) return [3 /*break*/, 4];
+                if (!(0, pipeline_1.hasKubernetesCloudSQL)(context)) return [3 /*break*/, 4];
                 return [4 /*yield*/, (0, setupCloudSQL_1.setupCloudSQL)(instance, context)];
             case 3:
                 _a.sent();
@@ -350930,7 +351005,7 @@ exports.readConfigSync = readConfigSync;
 
 exports.__esModule = true;
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "main-332b079a" || 0;
+exports.PIPELINE_IMAGE_TAG = "main-752fde5b" || 0;
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
 
 /***/ }),
@@ -352401,10 +352476,12 @@ var types_1 = __nccwpck_require__(63109);
 
 var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(22607);
 
+var database_1 = __nccwpck_require__(41384);
+
 var gitlab_1 = __nccwpck_require__(84997);
 
 var createGoogleCloudRunDeployJobs = function (context) {
-  var _a, _b;
+  var _a;
 
   var deployConfig = context.componentConfig.deploy;
 
@@ -352433,7 +352510,8 @@ var createGoogleCloudRunDeployJobs = function (context) {
     return "".concat(key, "=").concat(value);
   }).join(",");
   var commonArgs = "--project ".concat(deployConfig.projectId, " --region=").concat(deployConfig.region);
-  var commonDeployArgs = "--image ".concat(gcloudImageName, " ").concat(commonArgs, " --labels ").concat(labelsString);
+  var cloudRunArgs = deployConfig.cloudSql ? "--set-cloudsql-instances=".concat(deployConfig.cloudSql.instanceConnectionName) : "";
+  var commonDeployArgs = "--image ".concat(gcloudImageName, " ").concat(commonArgs, " ").concat(cloudRunArgs, " --labels ").concat(labelsString);
   var serviceName = context.environment.fullName.toLowerCase();
 
   var getServiceDeployScript = function (service) {
@@ -352448,7 +352526,7 @@ var createGoogleCloudRunDeployJobs = function (context) {
     // due to some oversight from google, jobs create does not accept `--env-vars-file` 🤦
     // lucky, update on the other hand accepts it... so let's just imediatly update it
     // also we cannot upsert a job, so we have to create it and catch the error and then update
-    var args = "".concat(jobName, " --command=\"").concat(job.command.split(" ").join(","), "\" ").concat(commonDeployArgs);
+    var args = "".concat(jobName, " --command=\"").concat(job.command.split(" ").join(","), "\" ").concat(commonDeployArgs, " --memory=").concat(job.memory || "512Mi");
     return __spreadArray(__spreadArray([], __read((0, gitlab_1.allowFailureInScripts)(["gcloud beta run jobs create ".concat(args)])), false), ["gcloud beta run jobs update ".concat(args, " --env-vars-file=____envvars.yaml")], false);
   };
 
@@ -352457,10 +352535,13 @@ var createGoogleCloudRunDeployJobs = function (context) {
   };
 
   var getFullJobName = function (name) {
-    return context.environment.fullName.toLowerCase() + "-" + name;
+    return context.environment.fullName.toLowerCase() + "-" + name.toLowerCase();
   };
 
-  var jobsWithNames = Object.entries((_a = deployConfig.jobs) !== null && _a !== void 0 ? _a : {}).map(function (_a) {
+  var jobsWithNames = Object.entries((_a = deployConfig.jobs) !== null && _a !== void 0 ? _a : {}) // filter out disabled jobs
+  .filter(function (entry) {
+    return Boolean(entry[1]);
+  }).map(function (_a) {
     var _b = __read(_a, 2),
         name = _b[0],
         job = _b[1];
@@ -352468,7 +352549,8 @@ var createGoogleCloudRunDeployJobs = function (context) {
     return [getFullJobName(name), job];
   });
 
-  var cloudRunDeployScripts = __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(["echo \"$ENV_VARS\" > ____envvars.yaml", "cat ____envvars.yaml"], __read(jobsWithNames.map(function (_a) {
+  var cloudRunDeployScripts = __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(["echo \"$ENV_VARS\" > ____envvars.yaml"], __read(deployConfig.cloudSql ? (0, database_1.getDatabaseCreateScript)(context, deployConfig) // we create the db, so that we can also delete it afterwards
+  : []), false), __read(jobsWithNames.map(function (_a) {
     var _b = __read(_a, 2),
         name = _b[0],
         job = _b[1];
@@ -352476,37 +352558,32 @@ var createGoogleCloudRunDeployJobs = function (context) {
     return getJobCreateScripts(name, job);
   }).flat()), false), __read(jobsWithNames.filter(function (_a) {
     var _b = __read(_a, 2),
-        name = _b[0],
         job = _b[1];
 
     return job.when === "preDeploy";
   }).map(function (_a) {
-    var _b = __read(_a, 2),
-        name = _b[0],
-        job = _b[1];
+    var _b = __read(_a, 1),
+        name = _b[0];
 
     return getJobRunScript(name);
   })), false), __read(deployConfig.service !== false ? [getServiceDeployScript(deployConfig.service)] : []), false), __read(jobsWithNames.filter(function (_a) {
     var _b = __read(_a, 2),
-        name = _b[0],
         job = _b[1];
 
     return job.when === "postDeploy";
   }).map(function (_a) {
-    var _b = __read(_a, 2),
-        name = _b[0],
-        job = _b[1];
+    var _b = __read(_a, 1),
+        name = _b[0];
 
     return getJobRunScript(name);
   })), false), ["docker image rm ".concat(gcloudImageName)], false);
 
-  var cloudRunStopScripts = __spreadArray(__spreadArray([], __read(deployConfig.service !== false ? ["gcloud run services delete ".concat(serviceName, " ").concat(commonArgs)] : []), false), __read(Object.entries((_b = deployConfig.jobs) !== null && _b !== void 0 ? _b : {}).map(function (_a) {
-    var _b = __read(_a, 2),
-        name = _b[0],
-        job = _b[1];
+  var cloudRunStopScripts = __spreadArray(__spreadArray(__spreadArray([], __read(deployConfig.service !== false ? ["gcloud run services delete ".concat(serviceName, " ").concat(commonArgs)] : []), false), __read(jobsWithNames.map(function (_a) {
+    var _b = __read(_a, 1),
+        name = _b[0];
 
-    return "gcloud beta run jobs delete ".concat(getFullJobName(name), " ").concat(commonArgs);
-  })), false);
+    return "gcloud beta run jobs delete ".concat(name, " ").concat(commonArgs);
+  })), false), __read(deployConfig.cloudSql && deployConfig.cloudSql.deleteDatabaseOnStop ? (0, database_1.getDatabaseDeleteScript)(context, deployConfig) : []), false);
 
   var baseStopJob = (0, base_1.getBaseDeploymentStopJob)(context);
   return [(0, lodash_1.merge)({}, baseDeploymentJob, (0, docker_1.getDockerJobBaseProps)(context), {
@@ -352581,6 +352658,16 @@ var __read = this && this.__read || function (o, n) {
   return ar;
 };
 
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
 exports.__esModule = true;
 exports.GCLOUD_RUN_DEPLOY_TYPE = exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = void 0;
 
@@ -352592,13 +352679,50 @@ var deployJob_1 = __nccwpck_require__(82256);
 
 exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
 exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = "GCLOUD_RUN_canonicalHostSuffix";
+
+var getCloudSqlVariables = function (_a) {
+  var _b;
+
+  var deployConfigRaw = _a.deployConfigRaw,
+      environmentSlug = _a.environmentSlug,
+      env = _a.env,
+      componentName = _a.componentName,
+      fullConfig = _a.fullConfig;
+
+  if (deployConfigRaw && deployConfigRaw.cloudSql) {
+    var DB_NAME = [(_b = deployConfigRaw.cloudSql.dbNamePrefix) !== null && _b !== void 0 ? _b : "".concat(fullConfig.customerName, "-").concat(fullConfig.appName), environmentSlug].filter(Boolean).join("-");
+    var hostAndDb = "localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME";
+    return {
+      CLOUD_SQL_INSTANCE_CONNECTION_NAME: deployConfigRaw.cloudSql.instanceConnectionName,
+      DB_NAME: DB_NAME,
+      DB_USER: "postgres",
+      DB_PASSWORD: "$" + (0, context_1.getSecretVarName)(env, componentName, "DB_PASSWORD"),
+      DATABASE_URL: "postgresql://$DB_USER:$DB_PASSWORD@".concat(hostAndDb),
+      DATABASE_URL_NO_PW: "postgresql://".concat(hostAndDb)
+    };
+  }
+
+  return {};
+};
+
 exports.GCLOUD_RUN_DEPLOY_TYPE = {
   jobs: deployJob_1.createGoogleCloudRunDeployJobs,
-  defaults: function () {
+  defaults: function (_a) {
+    var deployConfigRaw = _a.deployConfigRaw,
+        envType = _a.envType;
+
+    if (deployConfigRaw && deployConfigRaw.cloudSql) {
+      return {
+        cloudSql: {
+          deleteDatabaseOnStop: envType === "review"
+        }
+      };
+    }
+
     return {};
   },
-  additionalSecretKeys: function () {
-    return [exports.GCLOUD_DEPLOY_CREDENTIALS_KEY];
+  additionalSecretKeys: function (ctx) {
+    return __spreadArray([exports.GCLOUD_DEPLOY_CREDENTIALS_KEY], __read(ctx.deployConfigRaw && ctx.deployConfigRaw.cloudSql ? ["DB_PASSWORD"] : []), false);
   },
   getAdditionalEnvVars: function (ctx) {
     var fullName = ctx.fullName,
@@ -352613,69 +352737,121 @@ exports.GCLOUD_RUN_DEPLOY_TYPE = {
 
       return ["CLOUD_RUN_JOB_TRIGGER_URL_" + (0, gitlab_1.sanitizeForBashVariable)(name), "https://".concat(deployConfigRaw.region, "-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/").concat(deployConfigRaw.projectId, "/jobs/").concat(name, ":run")];
     })) : {};
-    return __assign({
+    return __assign(__assign({
       HOST_CANONICAL: HOST_CANONICAL
-    }, jobTriggers);
+    }, getCloudSqlVariables(ctx)), jobTriggers);
   }
 };
 
 /***/ }),
 
-/***/ 22607:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+/***/ 41384:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
 
 
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
 exports.__esModule = true;
-exports.gcloudServiceAccountLoginCommands = void 0;
+exports.getDatabaseCreateScript = exports.getDatabaseDeleteScript = void 0;
 
-var __1 = __nccwpck_require__(81344);
+var gitlab_1 = __nccwpck_require__(84997);
 
-var context_1 = __nccwpck_require__(22041);
+var getDatabaseDeleteScript = function (context, deployConfig) {
+  var _a;
 
-var gcloudServiceAccountLoginCommands = function (context) {
-  return ["echo $".concat((0, context_1.getSecretVarNameForContext)(context, __1.GCLOUD_DEPLOY_CREDENTIALS_KEY), " > ./____keyfile.json\n          "), "gcloud auth activate-service-account --key-file=\"./____keyfile.json\""];
-};
+  if (!deployConfig.cloudSql || !deployConfig.cloudSql.deleteDatabaseOnStop) {
+    throw new Error("not possible");
+  }
 
-exports.gcloudServiceAccountLoginCommands = gcloudServiceAccountLoginCommands;
+  var DB_NAME = ((_a = context.environment.envVars) !== null && _a !== void 0 ? _a : {}).DB_NAME;
 
-/***/ }),
+  if (!DB_NAME) {
+    throw new Error("error: env vars did not specify DB_NAME");
+  }
 
-/***/ 13539:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+  var _b = __read(deployConfig.cloudSql.instanceConnectionName.split(":"), 3),
+      projectId = _b[0],
+      region = _b[1],
+      instanceId = _b[2]; // unfortunatly the database cannot be deleted right after the service has stopped, as it might still have connections
+  // we have to repeate this process
 
-"use strict";
 
+  return ["echo \"deleting database ".concat(DB_NAME, "...\""), "echo \"\uD83D\uDC46 this can take multiple attemps (3-5min), because google cloud run may still have a connection to the database after the cloud run service is shut down\"", (0, gitlab_1.repeatOnFailure)("gcloud sql databases delete ".concat(DB_NAME, " --instance=").concat(instanceId, " --project ").concat(projectId), {
+    pauseInSeconds: 10
+  })];
+};
 
-exports.__esModule = true;
-exports.getCloudSQLConfig = exports.hasCloudSQL = void 0;
+exports.getDatabaseDeleteScript = getDatabaseDeleteScript;
 
-var types_1 = __nccwpck_require__(63109);
+var getDatabaseCreateScript = function (context, deployConfig) {
+  var _a;
 
-var hasCloudSQL = function (context) {
-  var _a, _b;
+  if (!deployConfig.cloudSql) {
+    throw new Error("not possible");
+  }
 
-  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
-    return (_b = (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql) === null || _b === void 0 ? void 0 : _b.enabled;
+  var DB_NAME = ((_a = context.environment.envVars) !== null && _a !== void 0 ? _a : {}).DB_NAME;
+
+  if (!DB_NAME) {
+    throw new Error("error: env vars did not specify DB_NAME");
   }
 
-  return false;
+  var _b = __read(deployConfig.cloudSql.instanceConnectionName.split(":"), 3),
+      projectId = _b[0],
+      region = _b[1],
+      instanceId = _b[2]; // may fail if it already exists
+
+
+  return (0, gitlab_1.allowFailureInScripts)(["echo \"ensuring Database...\"", "gcloud sql databases create ".concat(DB_NAME, " --instance=").concat(instanceId, " --project ").concat(projectId)]);
 };
 
-exports.hasCloudSQL = hasCloudSQL;
+exports.getDatabaseCreateScript = getDatabaseCreateScript;
 
-var getCloudSQLConfig = function (context) {
-  var _a;
+/***/ }),
 
-  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
-    return (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql;
-  }
+/***/ 22607:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
-  throw new Error("cannot get cloud sql config");
+"use strict";
+
+
+exports.__esModule = true;
+exports.gcloudServiceAccountLoginCommands = void 0;
+
+var __1 = __nccwpck_require__(81344);
+
+var context_1 = __nccwpck_require__(22041);
+
+var gcloudServiceAccountLoginCommands = function (context) {
+  return ["echo $".concat((0, context_1.getSecretVarNameForContext)(context, __1.GCLOUD_DEPLOY_CREDENTIALS_KEY), " > ./____keyfile.json\n          "), "gcloud auth activate-service-account --key-file=\"./____keyfile.json\""];
 };
 
-exports.getCloudSQLConfig = getCloudSQLConfig;
+exports.gcloudServiceAccountLoginCommands = gcloudServiceAccountLoginCommands;
 
 /***/ }),
 
@@ -352882,7 +353058,7 @@ var kubernetes_1 = __nccwpck_require__(95682);
 
 __exportStar(__nccwpck_require__(81344), exports);
 
-__exportStar(__nccwpck_require__(13539), exports);
+__exportStar(__nccwpck_require__(11925), exports);
 
 __exportStar(__nccwpck_require__(95682), exports);
 
@@ -352939,6 +353115,43 @@ exports.additionalKubernetesSecretKeys = additionalKubernetesSecretKeys;
 
 /***/ }),
 
+/***/ 11925:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.getKubernetesCloudSQLConfig = exports.hasKubernetesCloudSQL = void 0;
+
+var types_1 = __nccwpck_require__(63109);
+
+var hasKubernetesCloudSQL = function (context) {
+  var _a, _b;
+
+  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+    return (_b = (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql) === null || _b === void 0 ? void 0 : _b.enabled;
+  }
+
+  return false;
+};
+
+exports.hasKubernetesCloudSQL = hasKubernetesCloudSQL;
+
+var getKubernetesCloudSQLConfig = function (context) {
+  var _a;
+
+  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+    return (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql;
+  }
+
+  throw new Error("cannot get cloud sql config");
+};
+
+exports.getKubernetesCloudSQLConfig = getKubernetesCloudSQLConfig;
+
+/***/ }),
+
 /***/ 395:
 /***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
@@ -353275,7 +353488,7 @@ var lodash_1 = __nccwpck_require__(23255);
 
 var utils_1 = __nccwpck_require__(37461);
 
-var cloudSql_1 = __nccwpck_require__(13539);
+var cloudSql_1 = __nccwpck_require__(11925);
 
 var types_1 = __nccwpck_require__(63109);
 
@@ -353345,7 +353558,7 @@ var createKubeValues = function (context) {
   var defaultKubeValues = (0, lodash_1.merge)({
     env: env,
     application: createAppConfig(context, application)
-  }, (0, cloudSql_1.hasCloudSQL)(context) ? (0, cloudsql_1.createCloudsqlBaseConfig)(context) : {}, ((_b = (_a = deployConfig.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled) ? (0, mongodb_1.createMongodbBaseConfig)(context) : {});
+  }, (0, cloudSql_1.hasKubernetesCloudSQL)(context) ? (0, cloudsql_1.createCloudsqlBaseConfig)(context) : {}, ((_b = (_a = deployConfig.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled) ? (0, mongodb_1.createMongodbBaseConfig)(context) : {});
   var kubeValues = (0, processSecretsAsFiles_1.processSecretsAsFiles)((0, utils_1.mergeWithMergingArrays)(defaultKubeValues, rest));
   return kubeValues;
 };
@@ -355135,7 +355348,7 @@ var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
 };
 
 exports.__esModule = true;
-exports.sanitizeForBashVariable = exports.allowFailureInScripts = void 0;
+exports.repeatOnFailure = exports.sanitizeForBashVariable = exports.allowFailureInScripts = void 0;
 
 var allowFailureInScripts = function (script) {
   return __spreadArray(__spreadArray(["set +e"], __read(script), false), ["set -e" // reenable
@@ -355150,6 +355363,12 @@ var sanitizeForBashVariable = function (name) {
 
 exports.sanitizeForBashVariable = sanitizeForBashVariable;
 
+var repeatOnFailure = function (command, options) {
+  return "\n    until ".concat(command, " &> /dev/null\n    do\n      echo \"Trying again.\"\n      sleep ").concat(options.pauseInSeconds, "\n    done\n  ");
+};
+
+exports.repeatOnFailure = repeatOnFailure;
+
 /***/ }),
 
 /***/ 37461: