@catladder/cli 0.0.0-main-472dbf39 → 0.0.0-main-c28a5e64

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. package/dist/apps/cli/commands/project/setup/setupAccessTokens.js +2 -15
  2. package/dist/apps/cli/commands/project/setup/setupAccessTokens.js.map +1 -1
  3. package/dist/apps/cli/commands/project/setup/setupKubernetes.js +37 -20
  4. package/dist/apps/cli/commands/project/setup/setupKubernetes.js.map +1 -1
  5. package/dist/bundles/catenv/index.js +15 -4
  6. package/dist/bundles/cli/index.js +54 -39
  7. package/dist/tsconfig.tsbuildinfo +1 -1
  8. package/package.json +2 -2
  9. package/src/apps/cli/commands/project/setup/setupAccessTokens.ts +0 -26
  10. package/src/apps/cli/commands/project/setup/setupKubernetes.ts +32 -1
package/dist/apps/cli/commands/project/setup/setupAccessTokens.js CHANGED
@@ -43,7 +43,7 @@ exports.setupAccessTokens = void 0;
43
43
  var open_1 = __importDefault(require("open"));
44
44
  var gitlab_1 = require("../../../../../utils/gitlab");
45
45
  var setupAccessTokens = function (instance) { return __awaiter(void 0, void 0, void 0, function () {
46
- var _a, projectId, projectWebUrl, e_1, understood, GL_TOKEN, deploy_tokens;
46
+ var _a, projectId, projectWebUrl, e_1, understood, GL_TOKEN;
47
47
  return __generator(this, function (_b) {
48
48
  switch (_b.label) {
49
49
  case 0: return [4 /*yield*/, (0, gitlab_1.getProjectInfo)(instance)];
@@ -95,20 +95,7 @@ var setupAccessTokens = function (instance) { return __awaiter(void 0, void 0, v
95
95
  case 7:
96
96
  _b.sent();
97
97
  return [3 /*break*/, 8];
98
- case 8: return [4 /*yield*/, (0, gitlab_1.doGitlabRequest)(instance, "projects/".concat(projectId, "/deploy_tokens"))];
99
- case 9:
100
- deploy_tokens = _b.sent();
101
- if (!!deploy_tokens.find(function (v) { return v.name === "gitlab-deploy-token"; })) return [3 /*break*/, 11];
102
- instance.log("I will setup the 'GitLab Deploy Token', so Kubernetes can pull images from this project.");
103
- return [4 /*yield*/, (0, gitlab_1.doGitlabRequest)(instance, "projects/".concat(projectId, "/deploy_tokens"), {
104
- id: projectId,
105
- name: "gitlab-deploy-token",
106
- scopes: ["read_registry"]
107
- }, "POST")];
108
- case 10:
109
- _b.sent();
110
- _b.label = 11;
111
- case 11: return [2 /*return*/];
98
+ case 8: return [2 /*return*/];
112
99
  }
113
100
  });
114
101
  }); };
package/dist/apps/cli/commands/project/setup/setupAccessTokens.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"setupAccessTokens.js","sourceRoot":"","sources":["../../../../../../src/apps/cli/commands/project/setup/setupAccessTokens.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8CAAwB;AAExB,sDAA8E;AAEvE,IAAM,iBAAiB,GAAG,UAAO,QAAyB;;;;oBACb,qBAAM,IAAA,uBAAc,EACpE,QAAQ,CACT,EAAA;;gBAFK,KAA4C,SAEjD,EAFW,SAAS,QAAA,EAAW,aAAa,aAAA;;;;gBAI3C,qBAAM,IAAA,wBAAe,EAAC,QAAQ,EAAE,mBAAY,SAAS,wBAAqB,CAAC,EAAA;;gBAA3E,SAA2E,CAAC;;;;gBAE5E,IAAI,GAAC,CAAC,OAAO,KAAK,WAAW,EAAE;oBAC7B,MAAM,GAAC,CAAC;iBACT;gBACD,YAAY;gBAEZ,QAAQ,CAAC,GAAG,CACV,4EAA4E,CAC7E,CAAC;gBACF,QAAQ,CAAC,GAAG,CACV,uNAAuN,CACxN,CAAC;gBACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAEI,qBAAM,QAAQ,CAAC,MAAM,CAAC;wBAC3C,SAAO,EAAE,IAAI;wBACb,OAAO,EAAE,oCAAoC;wBAC7C,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,SAAS;qBAChB,CAAC,EAAA;;gBALM,UAAU,GAAK,CAAA,SAKrB,CAAA,WALgB;gBAMlB,IAAI,CAAC,UAAU,EAAE;oBACf,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;iBACtC;gBACD,IAAA,iBAAI,EAAC,UAAG,aAAa,8BAA2B,CAAC,CAAC;gBAElD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAEnB,QAAQ,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBAE9C,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACE,qBAAM,QAAQ,CAAC,MAAM,CAAC;wBACzC,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,UAAU;wBAChB,OAAO,EAAE,gBAAgB;qBAC1B,CAAC,EAAA;;gBAJM,QAAQ,GAAK,CAAA,SAInB,CAAA,SAJc;gBAMhB,qBAAM,IAAA,wBAAe,EACnB,QAAQ,EACR,mBAAY,SAAS,eAAY,EACjC;wBACE,GAAG,EAAE,UAAU;wBACf,KAAK,EAAE,QAAQ;wBACf,MAAM,EAAE,IAAI;qBACb,EACD,MAAM,CACP,EAAA;;gBATD,SASC,CAAC;;oBAGkB,qBAAM,IAAA,wBAAe,EACzC,QAAQ,EACR,mBAAY,SAAS,mBAAgB,CACtC,EAAA;;gBAHK,aAAa,GAAG,SAGrB;qBAGC,CAAC,aAAa,CAAC,IAAI,CACjB,UAAC,CAAmB,IAAK,OAAA,CAAC,CAAC,IAAI,KAAK,qBAAqB,EAAhC,CAAgC,CAC1D,EAFD,yBAEC;gBAED,QAAQ,CAAC,GAAG,CACV,0FAA0F,CAC3F,CAAC;gBAEF,qBAAM,IAAA,wBAAe,EACnB,QAAQ,EACR,mBAAY,SAAS,mBAAgB,EACrC;wBACE,EAAE,EAAE,SAAS;wBACb,IAAI,EAAE,qBAAqB;wBAC3B,MAAM,EAAE,CAAC,eAAe,CAAC;qBAC1B,EACD,MAAM,CACP,EAAA;;gBATD,SASC,CAAC;;;;;KAEL,CAAC;AA/EW,QAAA,iBAAiB,qBA+E5B"}
1
+ {"version":3,"file":"setupAccessTokens.js","sourceRoot":"","sources":["../../../../../../src/apps/cli/commands/project/setup/setupAccessTokens.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8CAAwB;AAExB,sDAA8E;AAEvE,IAAM,iBAAiB,GAAG,UAAO,QAAyB;;;;oBACb,qBAAM,IAAA,uBAAc,EACpE,QAAQ,CACT,EAAA;;gBAFK,KAA4C,SAEjD,EAFW,SAAS,QAAA,EAAW,aAAa,aAAA;;;;gBAI3C,qBAAM,IAAA,wBAAe,EAAC,QAAQ,EAAE,mBAAY,SAAS,wBAAqB,CAAC,EAAA;;gBAA3E,SAA2E,CAAC;;;;gBAE5E,IAAI,GAAC,CAAC,OAAO,KAAK,WAAW,EAAE;oBAC7B,MAAM,GAAC,CAAC;iBACT;gBACD,YAAY;gBAEZ,QAAQ,CAAC,GAAG,CACV,4EAA4E,CAC7E,CAAC;gBACF,QAAQ,CAAC,GAAG,CACV,uNAAuN,CACxN,CAAC;gBACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAEI,qBAAM,QAAQ,CAAC,MAAM,CAAC;wBAC3C,SAAO,EAAE,IAAI;wBACb,OAAO,EAAE,oCAAoC;wBAC7C,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,SAAS;qBAChB,CAAC,EAAA;;gBALM,UAAU,GAAK,CAAA,SAKrB,CAAA,WALgB;gBAMlB,IAAI,CAAC,UAAU,EAAE;oBACf,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;iBACtC;gBACD,IAAA,iBAAI,EAAC,UAAG,aAAa,8BAA2B,CAAC,CAAC;gBAElD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAEnB,QAAQ,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBAE9C,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACE,qBAAM,QAAQ,CAAC,MAAM,CAAC;wBACzC,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,UAAU;wBAChB,OAAO,EAAE,gBAAgB;qBAC1B,CAAC,EAAA;;gBAJM,QAAQ,GAAK,CAAA,SAInB,CAAA,SAJc;gBAMhB,qBAAM,IAAA,wBAAe,EACnB,QAAQ,EACR,mBAAY,SAAS,eAAY,EACjC;wBACE,GAAG,EAAE,UAAU;wBACf,KAAK,EAAE,QAAQ;wBACf,MAAM,EAAE,IAAI;qBACb,EACD,MAAM,CACP,EAAA;;gBATD,SASC,CAAC;;;;;KAEL,CAAC;AArDW,QAAA,iBAAiB,qBAqD5B"}
package/dist/apps/cli/commands/project/setup/setupKubernetes.js CHANGED
@@ -46,7 +46,7 @@ var cluster_1 = require("../../../../../utils/cluster");
46
46
  var gitlab_1 = require("../../../../../utils/gitlab");
47
47
  var ensureNamespace_1 = __importDefault(require("../utils/ensureNamespace"));
48
48
  var setupKubernetes = function (instance, context) { return __awaiter(void 0, void 0, void 0, function () {
49
- var deployConfig, fullName, namespace, serviceAccountName, KUBE_URL, e_1, secretName, KUBE_CA_PEM, KUBE_TOKEN, vars, missing;
49
+ var deployConfig, projectId, deploy_tokens, fullName, namespace, serviceAccountName, KUBE_URL, e_1, secretName, KUBE_CA_PEM, KUBE_TOKEN, vars, missing;
50
50
  return __generator(this, function (_a) {
51
51
  switch (_a.label) {
52
52
  case 0:
@@ -54,15 +54,32 @@ var setupKubernetes = function (instance, context) { return __awaiter(void 0, vo
54
54
  if (!(0, pipeline_1.isOfDeployType)(deployConfig, "kubernetes")) {
55
55
  throw new Error("cannot run setupKubernetes on non-kubernetes deployments");
56
56
  }
57
+ return [4 /*yield*/, (0, gitlab_1.getProjectInfo)(instance)];
58
+ case 1:
59
+ projectId = (_a.sent()).id;
60
+ return [4 /*yield*/, (0, gitlab_1.doGitlabRequest)(instance, "projects/".concat(projectId, "/deploy_tokens"))];
61
+ case 2:
62
+ deploy_tokens = _a.sent();
63
+ if (!!deploy_tokens.find(function (v) { return v.name === "gitlab-deploy-token"; })) return [3 /*break*/, 4];
64
+ instance.log("I will setup the 'GitLab Deploy Token', so Kubernetes can pull images from this project.");
65
+ return [4 /*yield*/, (0, gitlab_1.doGitlabRequest)(instance, "projects/".concat(projectId, "/deploy_tokens"), {
66
+ id: projectId,
67
+ name: "gitlab-deploy-token",
68
+ scopes: ["read_registry"]
69
+ }, "POST")];
70
+ case 3:
71
+ _a.sent();
72
+ _a.label = 4;
73
+ case 4:
57
74
  fullName = (0, pipeline_1.getFullKubernetesClusterName)(deployConfig.cluster);
58
75
  instance.log("cluster: ".concat(fullName));
59
76
  return [4 /*yield*/, (0, cluster_1.connectToCluster)(fullName)];
60
- case 1:
77
+ case 5:
61
78
  _a.sent();
62
79
  instance.log("");
63
80
  instance.log("ensuring namespace ...");
64
81
  return [4 /*yield*/, (0, ensureNamespace_1["default"])(context)];
65
- case 2:
82
+ case 6:
66
83
  namespace = _a.sent();
67
84
  instance.log("Namespace " + namespace + " created / updated!");
68
85
  instance.log("");
@@ -72,43 +89,43 @@ var setupKubernetes = function (instance, context) { return __awaiter(void 0, vo
72
89
  instance.log("ensuring service accounts...");
73
90
  serviceAccountName = "cl-".concat(context.componentName, "-deploy");
74
91
  return [4 /*yield*/, (0, child_process_promise_1.exec)("TERM=dumb kubectl cluster-info | grep -E 'Kubernetes master|Kubernetes control plane' | awk '/http/ {print $NF}'").then(function (s) { return s.stdout.trim(); })];
75
- case 3:
92
+ case 7:
76
93
  KUBE_URL = _a.sent();
77
- _a.label = 4;
78
- case 4:
79
- _a.trys.push([4, 8, , 9]);
94
+ _a.label = 8;
95
+ case 8:
96
+ _a.trys.push([8, 12, , 13]);
80
97
  return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl delete serviceaccount --namespace ".concat(namespace, " ").concat(serviceAccountName))];
81
- case 5:
98
+ case 9:
82
99
  _a.sent();
83
100
  return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl delete rolebinding --namespace ".concat(namespace, " ").concat(serviceAccountName))];
84
- case 6:
101
+ case 10:
85
102
  _a.sent();
86
103
  return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl delete role --namespace ".concat(namespace, " ").concat(serviceAccountName))];
87
- case 7:
104
+ case 11:
88
105
  _a.sent();
89
- return [3 /*break*/, 9];
90
- case 8:
106
+ return [3 /*break*/, 13];
107
+ case 12:
91
108
  e_1 = _a.sent();
92
- return [3 /*break*/, 9];
93
- case 9: return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl create serviceaccount --namespace ".concat(namespace, " ").concat(serviceAccountName))];
94
- case 10:
109
+ return [3 /*break*/, 13];
110
+ case 13: return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl create serviceaccount --namespace ".concat(namespace, " ").concat(serviceAccountName))];
111
+ case 14:
95
112
  _a.sent();
96
113
  // upsert role in the ns
97
114
  return [4 /*yield*/, (0, child_process_promise_1.exec)("cat <<EOF | kubectl apply -f -\nkind: Role\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n namespace: ".concat(namespace, "\n name: ").concat(serviceAccountName, "\nrules:\n- apiGroups: [\"\", \"extensions\", \"apps\", \"networking.k8s.io\", \"batch\", \"autoscaling\", \"rbac.authorization.k8s.io\",\"snapshot.storage.k8s.io\"]\n resources: [\"deployments\", \"replicasets\", \"statefulsets\", \"pods\", \"secrets\", \"configmaps\", \"services\", \"ingresses\", \"serviceaccounts\", \"roles\", \"rolebindings\", \"jobs\", \"cronjobs\", \"horizontalpodautoscalers\", \"persistentvolumeclaims\", \"volumesnapshots\"]\n verbs: [\"*\"]\n---\nkind: RoleBinding\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: ").concat(serviceAccountName, "\n namespace: ").concat(namespace, "\nsubjects:\n - kind: ServiceAccount\n name: ").concat(serviceAccountName, "\n namespace: ").concat(namespace, "\nroleRef:\n kind: Role\n name: ").concat(serviceAccountName, "\n apiGroup: rbac.authorization.k8s.io\nEOF\n"))];
98
- case 11:
115
+ case 15:
99
116
  // upsert role in the ns
100
117
  _a.sent();
101
118
  secretName = "".concat(serviceAccountName, "-secret");
102
119
  // create token for the service account
103
120
  return [4 /*yield*/, (0, child_process_promise_1.exec)("\nkubectl apply -f - <<EOF\napiVersion: v1\nkind: Secret\nmetadata:\n name: ".concat(secretName, "\n namespace: ").concat(namespace, "\n annotations:\n kubernetes.io/service-account.name: ").concat(serviceAccountName, "\ntype: kubernetes.io/service-account-token\nEOF\n "))];
104
- case 12:
121
+ case 16:
105
122
  // create token for the service account
106
123
  _a.sent();
107
124
  return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl get secret ".concat(secretName, " --namespace ").concat(namespace, " -o jsonpath=\"{['data']['ca\\.crt']}\"")).then(function (c) { return c.stdout.trim(); })];
108
- case 13:
125
+ case 17:
109
126
  KUBE_CA_PEM = _a.sent();
110
127
  return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl get secret ".concat(secretName, " --namespace ").concat(namespace, " -o jsonpath=\"{['data']['token']}\" | base64 --decode")).then(function (c) { return c.stdout.trim(); })];
111
- case 14:
128
+ case 18:
112
129
  KUBE_TOKEN = _a.sent();
113
130
  vars = {
114
131
  KUBE_TOKEN: KUBE_TOKEN,
@@ -128,7 +145,7 @@ var setupKubernetes = function (instance, context) { return __awaiter(void 0, vo
128
145
  instance.log("pusing secrets to gitlab...");
129
146
  return [4 /*yield*/, (0, gitlab_1.upsertAllVariables)(instance, vars, context.environment.shortName, context.componentName, false // no backup
130
147
  )];
131
- case 15:
148
+ case 19:
132
149
  _a.sent();
133
150
  instance.log("done!");
134
151
  return [2 /*return*/];
package/dist/apps/cli/commands/project/setup/setupKubernetes.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"setupKubernetes.js","sourceRoot":"","sources":["../../../../../../src/apps/cli/commands/project/setup/setupKubernetes.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,gDAG6B;AAE7B,+DAA6C;AAC7C,wDAAgE;AAChE,sDAAiE;AACjE,6EAAuD;AAEhD,IAAM,eAAe,GAAG,UAC7B,QAAyB,EACzB,OAAgB;;;;;gBAEV,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC;gBACpD,IAAI,CAAC,IAAA,yBAAc,EAAC,YAAY,EAAE,YAAY,CAAC,EAAE;oBAC/C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;iBAC7E;gBAEK,QAAQ,GAAG,IAAA,uCAA4B,EAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBACpE,QAAQ,CAAC,GAAG,CAAC,mBAAY,QAAQ,CAAE,CAAC,CAAC;gBAErC,qBAAM,IAAA,0BAAgB,EAAC,QAAQ,CAAC,EAAA;;gBAAhC,SAAgC,CAAC;gBACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjB,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBACrB,qBAAM,IAAA,4BAAe,EAAC,OAAO,CAAC,EAAA;;gBAA1C,SAAS,GAAG,SAA8B;gBAChD,QAAQ,CAAC,GAAG,CAAC,YAAY,GAAG,SAAS,GAAG,qBAAqB,CAAC,CAAC;gBAC/D,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjB,mBAAmB;gBAEnB,mFAAmF;gBACnF,gEAAgE;gBAChE,QAAQ,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;gBACvC,kBAAkB,GAAG,aAAM,OAAO,CAAC,aAAa,YAAS,CAAC;gBAC/C,qBAAM,IAAA,4BAAI,EACzB,kHAAkH,CACnH,CAAC,IAAI,CAAC,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAf,CAAe,CAAC,EAAA;;gBAFxB,QAAQ,GAAG,SAEa;;;;gBAI5B,qBAAM,IAAA,4BAAI,EACR,oDAA6C,SAAS,cAAI,kBAAkB,CAAE,CAC/E,EAAA;;gBAFD,SAEC,CAAC;gBACF,qBAAM,IAAA,4BAAI,EACR,iDAA0C,SAAS,cAAI,kBAAkB,CAAE,CAC5E,EAAA;;gBAFD,SAEC,CAAC;gBACF,qBAAM,IAAA,4BAAI,EACR,0CAAmC,SAAS,cAAI,kBAAkB,CAAE,CACrE,EAAA;;gBAFD,SAEC,CAAC;;;;;oBAKJ,qBAAM,IAAA,4BAAI,EACR,oDAA6C,SAAS,cAAI,kBAAkB,CAAE,CAC/E,EAAA;;gBAFD,SAEC,CAAC;gBAEF,wBAAwB;gBAExB,qBAAM,IAAA,4BAAI,EAAC,wHAIE,SAAS,uBACd,kBAAkB,2jBASlB,kBAAkB,4BACb,SAAS,8DAGZ,kBAAkB,+BACZ,SAAS,+CAGjB,kBAAkB,mDAG3B,CAAC,EAAA;;gBA3BA,wBAAwB;gBAExB,SAyBA,CAAC;gBAEK,UAAU,GAAG,UAAG,kBAAkB,YAAS,CAAC;gBAClD,uCAAuC;gBACvC,qBAAM,IAAA,4BAAI,EAAC,uFAKH,UAAU,4BACL,SAAS,uEAEkB,kBAAkB,yDAGzD,CAAC,EAAA;;gBAZF,uCAAuC;gBACvC,SAWE,CAAC;gBAEiB,qBAAM,IAAA,4BAAI,EAC5B,6BAAsB,UAAU,0BAAgB,SAAS,4CAAuC,CACjG,CAAC,IAAI,CAAC,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAf,CAAe,CAAC,EAAA;;gBAFxB,WAAW,GAAG,SAEU;gBACX,qBAAM,IAAA,4BAAI,EAC3B,6BAAsB,UAAU,0BAAgB,SAAS,2DAAsD,CAChH,CAAC,IAAI,CAAC,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAf,CAAe,CAAC,EAAA;;gBAFxB,UAAU,GAAG,SAEW;gBAExB,IAAI,GAAG;oBACX,UAAU,YAAA;oBACV,WAAW,aAAA;oBACX,QAAQ,UAAA;iBACT,CAAC;gBAEI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,CAAC,CAAC,CAAC,EAAL,CAAK,CAAC,CAAC;gBAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;oBACtB,MAAM,IAAI,KAAK,CACb,6CAA6C;wBAC3C,OAAO,CAAC,GAAG,CAAC,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,CAAC,CAAC,EAAJ,CAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;wBACnC,2DAA2D;wBAC3D,QAAQ;wBACR,GAAG,CACN,CAAC;iBACH;gBAED,QAAQ,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;gBAEpD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjB,QAAQ,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;gBAE5C,qBAAM,IAAA,2BAAkB,EACtB,QAAQ,EACR,IAAI,EACJ,OAAO,CAAC,WAAW,CAAC,SAAS,EAC7B,OAAO,CAAC,aAAa,EACrB,KAAK,CAAC,YAAY;qBACnB,EAAA;;gBAND,SAMC,CAAC;gBACF,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;;;;KACvB,CAAC;AAhIW,QAAA,eAAe,mBAgI1B"}
1
+ {"version":3,"file":"setupKubernetes.js","sourceRoot":"","sources":["../../../../../../src/apps/cli/commands/project/setup/setupKubernetes.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,gDAG6B;AAE7B,+DAA6C;AAC7C,wDAAgE;AAChE,sDAIqC;AACrC,6EAAuD;AAEhD,IAAM,eAAe,GAAG,UAC7B,QAAyB,EACzB,OAAgB;;;;;gBAEV,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC;gBACpD,IAAI,CAAC,IAAA,yBAAc,EAAC,YAAY,EAAE,YAAY,CAAC,EAAE;oBAC/C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;iBAC7E;gBAEyB,qBAAM,IAAA,uBAAc,EAAC,QAAQ,CAAC,EAAA;;gBAA5C,SAAS,GAAK,CAAA,SAA8B,CAAA,GAAnC;gBACC,qBAAM,IAAA,wBAAe,EACzC,QAAQ,EACR,mBAAY,SAAS,mBAAgB,CACtC,EAAA;;gBAHK,aAAa,GAAG,SAGrB;qBAGC,CAAC,aAAa,CAAC,IAAI,CACjB,UAAC,CAAmB,IAAK,OAAA,CAAC,CAAC,IAAI,KAAK,qBAAqB,EAAhC,CAAgC,CAC1D,EAFD,wBAEC;gBAED,QAAQ,CAAC,GAAG,CACV,0FAA0F,CAC3F,CAAC;gBAEF,qBAAM,IAAA,wBAAe,EACnB,QAAQ,EACR,mBAAY,SAAS,mBAAgB,EACrC;wBACE,EAAE,EAAE,SAAS;wBACb,IAAI,EAAE,qBAAqB;wBAC3B,MAAM,EAAE,CAAC,eAAe,CAAC;qBAC1B,EACD,MAAM,CACP,EAAA;;gBATD,SASC,CAAC;;;gBAGE,QAAQ,GAAG,IAAA,uCAA4B,EAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBACpE,QAAQ,CAAC,GAAG,CAAC,mBAAY,QAAQ,CAAE,CAAC,CAAC;gBAErC,qBAAM,IAAA,0BAAgB,EAAC,QAAQ,CAAC,EAAA;;gBAAhC,SAAgC,CAAC;gBACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjB,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBACrB,qBAAM,IAAA,4BAAe,EAAC,OAAO,CAAC,EAAA;;gBAA1C,SAAS,GAAG,SAA8B;gBAChD,QAAQ,CAAC,GAAG,CAAC,YAAY,GAAG,SAAS,GAAG,qBAAqB,CAAC,CAAC;gBAC/D,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjB,mBAAmB;gBAEnB,mFAAmF;gBACnF,gEAAgE;gBAChE,QAAQ,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;gBACvC,kBAAkB,GAAG,aAAM,OAAO,CAAC,aAAa,YAAS,CAAC;gBAC/C,qBAAM,IAAA,4BAAI,EACzB,kHAAkH,CACnH,CAAC,IAAI,CAAC,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAf,CAAe,CAAC,EAAA;;gBAFxB,QAAQ,GAAG,SAEa;;;;gBAI5B,qBAAM,IAAA,4BAAI,EACR,oDAA6C,SAAS,cAAI,kBAAkB,CAAE,CAC/E,EAAA;;gBAFD,SAEC,CAAC;gBACF,qBAAM,IAAA,4BAAI,EACR,iDAA0C,SAAS,cAAI,kBAAkB,CAAE,CAC5E,EAAA;;gBAFD,SAEC,CAAC;gBACF,qBAAM,IAAA,4BAAI,EACR,0CAAmC,SAAS,cAAI,kBAAkB,CAAE,CACrE,EAAA;;gBAFD,SAEC,CAAC;;;;;qBAKJ,qBAAM,IAAA,4BAAI,EACR,oDAA6C,SAAS,cAAI,kBAAkB,CAAE,CAC/E,EAAA;;gBAFD,SAEC,CAAC;gBAEF,wBAAwB;gBAExB,qBAAM,IAAA,4BAAI,EAAC,wHAIE,SAAS,uBACd,kBAAkB,2jBASlB,kBAAkB,4BACb,SAAS,8DAGZ,kBAAkB,+BACZ,SAAS,+CAGjB,kBAAkB,mDAG3B,CAAC,EAAA;;gBA3BA,wBAAwB;gBAExB,SAyBA,CAAC;gBAEK,UAAU,GAAG,UAAG,kBAAkB,YAAS,CAAC;gBAClD,uCAAuC;gBACvC,qBAAM,IAAA,4BAAI,EAAC,uFAKH,UAAU,4BACL,SAAS,uEAEkB,kBAAkB,yDAGzD,CAAC,EAAA;;gBAZF,uCAAuC;gBACvC,SAWE,CAAC;gBAEiB,qBAAM,IAAA,4BAAI,EAC5B,6BAAsB,UAAU,0BAAgB,SAAS,4CAAuC,CACjG,CAAC,IAAI,CAAC,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAf,CAAe,CAAC,EAAA;;gBAFxB,WAAW,GAAG,SAEU;gBACX,qBAAM,IAAA,4BAAI,EAC3B,6BAAsB,UAAU,0BAAgB,SAAS,2DAAsD,CAChH,CAAC,IAAI,CAAC,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAf,CAAe,CAAC,EAAA;;gBAFxB,UAAU,GAAG,SAEW;gBAExB,IAAI,GAAG;oBACX,UAAU,YAAA;oBACV,WAAW,aAAA;oBACX,QAAQ,UAAA;iBACT,CAAC;gBAEI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,CAAC,CAAC,CAAC,EAAL,CAAK,CAAC,CAAC;gBAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;oBACtB,MAAM,IAAI,KAAK,CACb,6CAA6C;wBAC3C,OAAO,CAAC,GAAG,CAAC,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,CAAC,CAAC,EAAJ,CAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;wBACnC,2DAA2D;wBAC3D,QAAQ;wBACR,GAAG,CACN,CAAC;iBACH;gBAED,QAAQ,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;gBAEpD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjB,QAAQ,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;gBAE5C,qBAAM,IAAA,2BAAkB,EACtB,QAAQ,EACR,IAAI,EACJ,OAAO,CAAC,WAAW,CAAC,SAAS,EAC7B,OAAO,CAAC,aAAa,EACrB,KAAK,CAAC,YAAY;qBACnB,EAAA;;gBAND,SAMC,CAAC;gBACF,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;;;;KACvB,CAAC;AA3JW,QAAA,eAAe,mBA2J1B"}
package/dist/bundles/catenv/index.js CHANGED
@@ -40918,7 +40918,7 @@ exports.readConfigSync = readConfigSync;
40918
40918
 
40919
40919
  exports.__esModule = true;
40920
40920
  exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
40921
- exports.PIPELINE_IMAGE_TAG = "main-472dbf39" || 0;
40921
+ exports.PIPELINE_IMAGE_TAG = "main-c28a5e64" || 0;
40922
40922
  exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
40923
40923
 
40924
40924
  /***/ }),
@@ -46426,14 +46426,18 @@ exports.getWorkspaceDependencies = getWorkspaceDependencies;
46426
46426
 
46427
46427
 
46428
46428
  exports.__esModule = true;
46429
- exports.RULES_RELEASE = exports.RULE_CONDITION_HOTFIX_BRANCH = exports.RULE_CONDITION_MAIN_BRANCH = exports.RULES_ALWAYS = exports.RULE_NEVER_ON_RELEASE_COMMIT = void 0;
46429
+ exports.RULES_MANUAL_RELEASE = exports.RULES_RELEASE = exports.RULE_CONDITION_HOTFIX_BRANCH = exports.RULE_CONDITION_MAIN_BRANCH = exports.RULES_ALWAYS = exports.RULE_NEVER_ON_SCHEDULE = exports.RULE_NEVER_ON_RELEASE_COMMIT = void 0;
46430
46430
  exports.RULE_NEVER_ON_RELEASE_COMMIT = {
46431
46431
  "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
46432
46432
  when: "never"
46433
46433
  };
46434
+ exports.RULE_NEVER_ON_SCHEDULE = {
46435
+ "if": '$CI_PIPELINE_SOURCE == "schedule"',
46436
+ when: "never"
46437
+ };
46434
46438
  exports.RULES_ALWAYS = [{
46435
46439
  "if": "$CI_COMMIT_TAG"
46436
- }, exports.RULE_NEVER_ON_RELEASE_COMMIT, {
46440
+ }, exports.RULE_NEVER_ON_RELEASE_COMMIT, exports.RULE_NEVER_ON_SCHEDULE, {
46437
46441
  "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/"
46438
46442
  }, {
46439
46443
  "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH"
@@ -46442,7 +46446,7 @@ exports.RULES_ALWAYS = [{
46442
46446
  }];
46443
46447
  exports.RULE_CONDITION_MAIN_BRANCH = "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH";
46444
46448
  exports.RULE_CONDITION_HOTFIX_BRANCH = "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/";
46445
- exports.RULES_RELEASE = [exports.RULE_NEVER_ON_RELEASE_COMMIT, {
46449
+ exports.RULES_RELEASE = [exports.RULE_NEVER_ON_RELEASE_COMMIT, exports.RULE_NEVER_ON_SCHEDULE, {
46446
46450
  "if": exports.RULE_CONDITION_MAIN_BRANCH + ' && $AUTO_RELEASE == "true"',
46447
46451
  when: "on_success"
46448
46452
  }, {
@@ -46452,6 +46456,13 @@ exports.RULES_RELEASE = [exports.RULE_NEVER_ON_RELEASE_COMMIT, {
46452
46456
  "if": exports.RULE_CONDITION_HOTFIX_BRANCH,
46453
46457
  when: "manual"
46454
46458
  }];
46459
+ exports.RULES_MANUAL_RELEASE = [exports.RULE_NEVER_ON_RELEASE_COMMIT, exports.RULE_NEVER_ON_SCHEDULE, {
46460
+ "if": exports.RULE_CONDITION_MAIN_BRANCH,
46461
+ when: "manual"
46462
+ }, {
46463
+ "if": exports.RULE_CONDITION_HOTFIX_BRANCH,
46464
+ when: "manual"
46465
+ }];
46455
46466
 
46456
46467
  /***/ }),
46457
46468
 
package/dist/bundles/cli/index.js CHANGED
@@ -4915,7 +4915,7 @@ exports.setupAccessTokens = void 0;
4915
4915
  var open_1 = __importDefault(__nccwpck_require__(14247));
4916
4916
  var gitlab_1 = __nccwpck_require__(79818);
4917
4917
  var setupAccessTokens = function (instance) { return __awaiter(void 0, void 0, void 0, function () {
4918
- var _a, projectId, projectWebUrl, e_1, understood, GL_TOKEN, deploy_tokens;
4918
+ var _a, projectId, projectWebUrl, e_1, understood, GL_TOKEN;
4919
4919
  return __generator(this, function (_b) {
4920
4920
  switch (_b.label) {
4921
4921
  case 0: return [4 /*yield*/, (0, gitlab_1.getProjectInfo)(instance)];
@@ -4967,20 +4967,7 @@ var setupAccessTokens = function (instance) { return __awaiter(void 0, void 0, v
4967
4967
  case 7:
4968
4968
  _b.sent();
4969
4969
  return [3 /*break*/, 8];
4970
- case 8: return [4 /*yield*/, (0, gitlab_1.doGitlabRequest)(instance, "projects/".concat(projectId, "/deploy_tokens"))];
4971
- case 9:
4972
- deploy_tokens = _b.sent();
4973
- if (!!deploy_tokens.find(function (v) { return v.name === "gitlab-deploy-token"; })) return [3 /*break*/, 11];
4974
- instance.log("I will setup the 'GitLab Deploy Token', so Kubernetes can pull images from this project.");
4975
- return [4 /*yield*/, (0, gitlab_1.doGitlabRequest)(instance, "projects/".concat(projectId, "/deploy_tokens"), {
4976
- id: projectId,
4977
- name: "gitlab-deploy-token",
4978
- scopes: ["read_registry"]
4979
- }, "POST")];
4980
- case 10:
4981
- _b.sent();
4982
- _b.label = 11;
4983
- case 11: return [2 /*return*/];
4970
+ case 8: return [2 /*return*/];
4984
4971
  }
4985
4972
  });
4986
4973
  }); };
@@ -5254,7 +5241,7 @@ var cluster_1 = __nccwpck_require__(66894);
5254
5241
  var gitlab_1 = __nccwpck_require__(79818);
5255
5242
  var ensureNamespace_1 = __importDefault(__nccwpck_require__(99489));
5256
5243
  var setupKubernetes = function (instance, context) { return __awaiter(void 0, void 0, void 0, function () {
5257
- var deployConfig, fullName, namespace, serviceAccountName, KUBE_URL, e_1, secretName, KUBE_CA_PEM, KUBE_TOKEN, vars, missing;
5244
+ var deployConfig, projectId, deploy_tokens, fullName, namespace, serviceAccountName, KUBE_URL, e_1, secretName, KUBE_CA_PEM, KUBE_TOKEN, vars, missing;
5258
5245
  return __generator(this, function (_a) {
5259
5246
  switch (_a.label) {
5260
5247
  case 0:
@@ -5262,15 +5249,32 @@ var setupKubernetes = function (instance, context) { return __awaiter(void 0, vo
5262
5249
  if (!(0, pipeline_1.isOfDeployType)(deployConfig, "kubernetes")) {
5263
5250
  throw new Error("cannot run setupKubernetes on non-kubernetes deployments");
5264
5251
  }
5252
+ return [4 /*yield*/, (0, gitlab_1.getProjectInfo)(instance)];
5253
+ case 1:
5254
+ projectId = (_a.sent()).id;
5255
+ return [4 /*yield*/, (0, gitlab_1.doGitlabRequest)(instance, "projects/".concat(projectId, "/deploy_tokens"))];
5256
+ case 2:
5257
+ deploy_tokens = _a.sent();
5258
+ if (!!deploy_tokens.find(function (v) { return v.name === "gitlab-deploy-token"; })) return [3 /*break*/, 4];
5259
+ instance.log("I will setup the 'GitLab Deploy Token', so Kubernetes can pull images from this project.");
5260
+ return [4 /*yield*/, (0, gitlab_1.doGitlabRequest)(instance, "projects/".concat(projectId, "/deploy_tokens"), {
5261
+ id: projectId,
5262
+ name: "gitlab-deploy-token",
5263
+ scopes: ["read_registry"]
5264
+ }, "POST")];
5265
+ case 3:
5266
+ _a.sent();
5267
+ _a.label = 4;
5268
+ case 4:
5265
5269
  fullName = (0, pipeline_1.getFullKubernetesClusterName)(deployConfig.cluster);
5266
5270
  instance.log("cluster: ".concat(fullName));
5267
5271
  return [4 /*yield*/, (0, cluster_1.connectToCluster)(fullName)];
5268
- case 1:
5272
+ case 5:
5269
5273
  _a.sent();
5270
5274
  instance.log("");
5271
5275
  instance.log("ensuring namespace ...");
5272
5276
  return [4 /*yield*/, (0, ensureNamespace_1["default"])(context)];
5273
- case 2:
5277
+ case 6:
5274
5278
  namespace = _a.sent();
5275
5279
  instance.log("Namespace " + namespace + " created / updated!");
5276
5280
  instance.log("");
@@ -5280,43 +5284,43 @@ var setupKubernetes = function (instance, context) { return __awaiter(void 0, vo
5280
5284
  instance.log("ensuring service accounts...");
5281
5285
  serviceAccountName = "cl-".concat(context.componentName, "-deploy");
5282
5286
  return [4 /*yield*/, (0, child_process_promise_1.exec)("TERM=dumb kubectl cluster-info | grep -E 'Kubernetes master|Kubernetes control plane' | awk '/http/ {print $NF}'").then(function (s) { return s.stdout.trim(); })];
5283
- case 3:
5287
+ case 7:
5284
5288
  KUBE_URL = _a.sent();
5285
- _a.label = 4;
5286
- case 4:
5287
- _a.trys.push([4, 8, , 9]);
5289
+ _a.label = 8;
5290
+ case 8:
5291
+ _a.trys.push([8, 12, , 13]);
5288
5292
  return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl delete serviceaccount --namespace ".concat(namespace, " ").concat(serviceAccountName))];
5289
- case 5:
5293
+ case 9:
5290
5294
  _a.sent();
5291
5295
  return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl delete rolebinding --namespace ".concat(namespace, " ").concat(serviceAccountName))];
5292
- case 6:
5296
+ case 10:
5293
5297
  _a.sent();
5294
5298
  return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl delete role --namespace ".concat(namespace, " ").concat(serviceAccountName))];
5295
- case 7:
5299
+ case 11:
5296
5300
  _a.sent();
5297
- return [3 /*break*/, 9];
5298
- case 8:
5301
+ return [3 /*break*/, 13];
5302
+ case 12:
5299
5303
  e_1 = _a.sent();
5300
- return [3 /*break*/, 9];
5301
- case 9: return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl create serviceaccount --namespace ".concat(namespace, " ").concat(serviceAccountName))];
5302
- case 10:
5304
+ return [3 /*break*/, 13];
5305
+ case 13: return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl create serviceaccount --namespace ".concat(namespace, " ").concat(serviceAccountName))];
5306
+ case 14:
5303
5307
  _a.sent();
5304
5308
  // upsert role in the ns
5305
5309
  return [4 /*yield*/, (0, child_process_promise_1.exec)("cat <<EOF | kubectl apply -f -\nkind: Role\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n namespace: ".concat(namespace, "\n name: ").concat(serviceAccountName, "\nrules:\n- apiGroups: [\"\", \"extensions\", \"apps\", \"networking.k8s.io\", \"batch\", \"autoscaling\", \"rbac.authorization.k8s.io\",\"snapshot.storage.k8s.io\"]\n resources: [\"deployments\", \"replicasets\", \"statefulsets\", \"pods\", \"secrets\", \"configmaps\", \"services\", \"ingresses\", \"serviceaccounts\", \"roles\", \"rolebindings\", \"jobs\", \"cronjobs\", \"horizontalpodautoscalers\", \"persistentvolumeclaims\", \"volumesnapshots\"]\n verbs: [\"*\"]\n---\nkind: RoleBinding\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: ").concat(serviceAccountName, "\n namespace: ").concat(namespace, "\nsubjects:\n - kind: ServiceAccount\n name: ").concat(serviceAccountName, "\n namespace: ").concat(namespace, "\nroleRef:\n kind: Role\n name: ").concat(serviceAccountName, "\n apiGroup: rbac.authorization.k8s.io\nEOF\n"))];
5306
- case 11:
5310
+ case 15:
5307
5311
  // upsert role in the ns
5308
5312
  _a.sent();
5309
5313
  secretName = "".concat(serviceAccountName, "-secret");
5310
5314
  // create token for the service account
5311
5315
  return [4 /*yield*/, (0, child_process_promise_1.exec)("\nkubectl apply -f - <<EOF\napiVersion: v1\nkind: Secret\nmetadata:\n name: ".concat(secretName, "\n namespace: ").concat(namespace, "\n annotations:\n kubernetes.io/service-account.name: ").concat(serviceAccountName, "\ntype: kubernetes.io/service-account-token\nEOF\n "))];
5312
- case 12:
5316
+ case 16:
5313
5317
  // create token for the service account
5314
5318
  _a.sent();
5315
5319
  return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl get secret ".concat(secretName, " --namespace ").concat(namespace, " -o jsonpath=\"{['data']['ca\\.crt']}\"")).then(function (c) { return c.stdout.trim(); })];
5316
- case 13:
5320
+ case 17:
5317
5321
  KUBE_CA_PEM = _a.sent();
5318
5322
  return [4 /*yield*/, (0, child_process_promise_1.exec)("kubectl get secret ".concat(secretName, " --namespace ").concat(namespace, " -o jsonpath=\"{['data']['token']}\" | base64 --decode")).then(function (c) { return c.stdout.trim(); })];
5319
- case 14:
5323
+ case 18:
5320
5324
  KUBE_TOKEN = _a.sent();
5321
5325
  vars = {
5322
5326
  KUBE_TOKEN: KUBE_TOKEN,
@@ -5336,7 +5340,7 @@ var setupKubernetes = function (instance, context) { return __awaiter(void 0, vo
5336
5340
  instance.log("pusing secrets to gitlab...");
5337
5341
  return [4 /*yield*/, (0, gitlab_1.upsertAllVariables)(instance, vars, context.environment.shortName, context.componentName, false // no backup
5338
5342
  )];
5339
- case 15:
5343
+ case 19:
5340
5344
  _a.sent();
5341
5345
  instance.log("done!");
5342
5346
  return [2 /*return*/];
@@ -355848,7 +355852,7 @@ exports.readConfigSync = readConfigSync;
355848
355852
 
355849
355853
  exports.__esModule = true;
355850
355854
  exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
355851
- exports.PIPELINE_IMAGE_TAG = "main-472dbf39" || 0;
355855
+ exports.PIPELINE_IMAGE_TAG = "main-c28a5e64" || 0;
355852
355856
  exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
355853
355857
 
355854
355858
  /***/ }),
@@ -361356,14 +361360,18 @@ exports.getWorkspaceDependencies = getWorkspaceDependencies;
361356
361360
 
361357
361361
 
361358
361362
  exports.__esModule = true;
361359
- exports.RULES_RELEASE = exports.RULE_CONDITION_HOTFIX_BRANCH = exports.RULE_CONDITION_MAIN_BRANCH = exports.RULES_ALWAYS = exports.RULE_NEVER_ON_RELEASE_COMMIT = void 0;
361363
+ exports.RULES_MANUAL_RELEASE = exports.RULES_RELEASE = exports.RULE_CONDITION_HOTFIX_BRANCH = exports.RULE_CONDITION_MAIN_BRANCH = exports.RULES_ALWAYS = exports.RULE_NEVER_ON_SCHEDULE = exports.RULE_NEVER_ON_RELEASE_COMMIT = void 0;
361360
361364
  exports.RULE_NEVER_ON_RELEASE_COMMIT = {
361361
361365
  "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
361362
361366
  when: "never"
361363
361367
  };
361368
+ exports.RULE_NEVER_ON_SCHEDULE = {
361369
+ "if": '$CI_PIPELINE_SOURCE == "schedule"',
361370
+ when: "never"
361371
+ };
361364
361372
  exports.RULES_ALWAYS = [{
361365
361373
  "if": "$CI_COMMIT_TAG"
361366
- }, exports.RULE_NEVER_ON_RELEASE_COMMIT, {
361374
+ }, exports.RULE_NEVER_ON_RELEASE_COMMIT, exports.RULE_NEVER_ON_SCHEDULE, {
361367
361375
  "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/"
361368
361376
  }, {
361369
361377
  "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH"
@@ -361372,7 +361380,7 @@ exports.RULES_ALWAYS = [{
361372
361380
  }];
361373
361381
  exports.RULE_CONDITION_MAIN_BRANCH = "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH";
361374
361382
  exports.RULE_CONDITION_HOTFIX_BRANCH = "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/";
361375
- exports.RULES_RELEASE = [exports.RULE_NEVER_ON_RELEASE_COMMIT, {
361383
+ exports.RULES_RELEASE = [exports.RULE_NEVER_ON_RELEASE_COMMIT, exports.RULE_NEVER_ON_SCHEDULE, {
361376
361384
  "if": exports.RULE_CONDITION_MAIN_BRANCH + ' && $AUTO_RELEASE == "true"',
361377
361385
  when: "on_success"
361378
361386
  }, {
@@ -361382,6 +361390,13 @@ exports.RULES_RELEASE = [exports.RULE_NEVER_ON_RELEASE_COMMIT, {
361382
361390
  "if": exports.RULE_CONDITION_HOTFIX_BRANCH,
361383
361391
  when: "manual"
361384
361392
  }];
361393
+ exports.RULES_MANUAL_RELEASE = [exports.RULE_NEVER_ON_RELEASE_COMMIT, exports.RULE_NEVER_ON_SCHEDULE, {
361394
+ "if": exports.RULE_CONDITION_MAIN_BRANCH,
361395
+ when: "manual"
361396
+ }, {
361397
+ "if": exports.RULE_CONDITION_HOTFIX_BRANCH,
361398
+ when: "manual"
361399
+ }];
361385
361400
 
361386
361401
  /***/ }),
361387
361402