@catladder/cli 0.0.0-main-7b4a3dd5 → 0.0.0-main-5bc1bdb9

package/dist/bundles/cli/index.js

@@ -3468,6 +3468,103 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
 
 /***/ }),
 
+/***/ 41863:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+exports.projectSecretsClearBackups = void 0;
+var gitlab_1 = __nccwpck_require__(79818);
+var autocompletions_1 = __nccwpck_require__(41373);
+var projectSecretsClearBackups = function (vorpal, keep) {
+    if (keep === void 0) { keep = 3; }
+    return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, gitlab_1.clearBackups)(vorpal, keep)];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    });
+};
+exports.projectSecretsClearBackups = projectSecretsClearBackups;
+exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _b = (_a = vorpal
+                    .command("project-secrets-clear-backups", "clears all backups"))
+                    .autocomplete;
+                return [4 /*yield*/, (0, autocompletions_1.allEnvsAndAllComponents)()];
+            case 1:
+                _b.apply(_a, [_c.sent()])
+                    .action(function () {
+                    return __awaiter(this, void 0, void 0, function () {
+                        var keep;
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0: return [4 /*yield*/, this.prompt({
+                                        type: "number",
+                                        name: "keep",
+                                        "default": 1,
+                                        message: "How many backups should we keep? 🤔"
+                                    })];
+                                case 1:
+                                    keep = (_a.sent()).keep;
+                                    return [4 /*yield*/, (0, exports.projectSecretsClearBackups)(this, keep)];
+                                case 2: return [2 /*return*/, _a.sent()];
+                            }
+                        });
+                    });
+                });
+                return [2 /*return*/];
+        }
+    });
+}); });
+//# sourceMappingURL=commandSecretsClearBackups.js.map
+
+/***/ }),
+
 /***/ 54108:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -3753,6 +3850,7 @@ var commandOpenGrafana_1 = __importDefault(__nccwpck_require__(70414));
 var commandPortForward_1 = __importDefault(__nccwpck_require__(3415));
 var commandTriggerCronjob_1 = __importDefault(__nccwpck_require__(51827));
 var commandOpenGrafanaPod_1 = __importDefault(__nccwpck_require__(55848));
+var commandSecretsClearBackups_1 = __importDefault(__nccwpck_require__(41863));
 exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
     return __generator(this, function (_a) {
         (0, commandSetup_1["default"])(vorpal);
@@ -3771,6 +3869,7 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
         (0, commandOpenEnv_1["default"])(vorpal);
         (0, commandTriggerCronjob_1["default"])(vorpal);
         (0, commandConfigSecrets_1["default"])(vorpal);
+        (0, commandSecretsClearBackups_1["default"])(vorpal);
         (0, commandDeletePods_1["default"])(vorpal);
         (0, commandCopyDB_1["default"])(vorpal);
         (0, commandGetShell_1["default"])(vorpal);
@@ -3992,7 +4091,7 @@ var setupAccessTokens = function (instance) { return __awaiter(void 0, void 0, v
                         key: "GL_TOKEN",
                         value: GL_TOKEN,
                         masked: true
-                    })];
+                    }, "POST")];
             case 7:
                 _b.sent();
                 return [3 /*break*/, 8];
@@ -4005,7 +4104,7 @@ var setupAccessTokens = function (instance) { return __awaiter(void 0, void 0, v
                         id: projectId,
                         name: "gitlab-deploy-token",
                         scopes: ["read_registry"]
-                    })];
+                    }, "POST")];
             case 10:
                 _b.sent();
                 _b.label = 11;
@@ -7136,7 +7235,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 exports.__esModule = true;
-exports.upsertAllVariables = exports.getVariableValueByRawName = exports.getAllVariables = exports.getProjectInfo = exports.doGitlabRequest = exports.getGitlabToken = exports.setupGitlabToken = exports.hasGitlabToken = void 0;
+exports.upsertAllVariables = exports.clearBackups = exports.getVariableValueByRawName = exports.getAllVariables = exports.getProjectInfo = exports.doGitlabRequest = exports.getGitlabToken = exports.setupGitlabToken = exports.hasGitlabToken = void 0;
 var pipeline_1 = __nccwpck_require__(25355);
 var child_process_promise_1 = __nccwpck_require__(75763);
 var lodash_1 = __nccwpck_require__(23255);
@@ -7210,28 +7309,31 @@ var getGitlabToken = function (vorpal) { return __awaiter(void 0, void 0, void 0
     });
 }); };
 exports.getGitlabToken = getGitlabToken;
-var doGitlabRequest = function (vorpal, path, data, update) {
+var doGitlabRequest = function (vorpal, path, data, method) {
     if (data === void 0) { data = undefined; }
+    if (method === void 0) { method = "GET"; }
     return __awaiter(void 0, void 0, void 0, function () {
-        var rootToken, method, result, _a, _b, _c, _d, _e;
+        var rootToken, result, _a, _b, _c, _d, _e;
         return __generator(this, function (_f) {
             switch (_f.label) {
                 case 0: return [4 /*yield*/, (0, exports.getGitlabToken)(vorpal)];
                 case 1:
                     rootToken = _f.sent();
-                    method = data ? (update ? "PUT" : "POST") : "GET";
                     return [4 /*yield*/, (0, node_fetch_1["default"])("https://git.panter.ch/api/v4/".concat(path), {
                             method: method,
                             headers: {
                                 "Content-Type": "application/json",
                                 "Private-Token": rootToken
                             },
-                            body: JSON.stringify(data)
+                            body: data ? JSON.stringify(data) : undefined
                         })];
                 case 2:
                     result = _f.sent();
                     if (result.status >= 200 && result.status < 400) {
-                        return [2 /*return*/, result.json()];
+                        if (result.headers.get("content-type") === "application/json") {
+                            return [2 /*return*/, result.json()];
+                        }
+                        return [2 /*return*/, null];
                     }
                     if (result.status === 404) {
                         throw new Error("not found");
@@ -7313,7 +7415,7 @@ var createVariable = function (vorpal, projectId, key, value, masked, environmen
                         value: value,
                         masked: masked && isMaskable(value),
                         environment_scope: environment_scope
-                    })];
+                    }, "POST")];
                 case 1: return [2 /*return*/, _a.sent()];
             }
         });
@@ -7327,12 +7429,20 @@ var updateVariable = function (vorpal, projectId, key, value, masked) {
                 case 0: return [4 /*yield*/, (0, exports.doGitlabRequest)(vorpal, "projects/".concat(projectId, "/variables/").concat(key), {
                         value: value,
                         masked: masked && isMaskable(value)
-                    }, true)];
+                    }, "PUT")];
                 case 1: return [2 /*return*/, _a.sent()];
             }
         });
     });
 };
+var deleteVariable = function (vorpal, projectId, key) { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, exports.doGitlabRequest)(vorpal, "projects/".concat(projectId, "/variables/").concat(key), undefined, "DELETE")];
+            case 1: return [2 /*return*/, _a.sent()];
+        }
+    });
+}); };
 var getAllCatladderEnvVarsInGitlab = function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
     var allVariables;
     return __generator(this, function (_a) {
@@ -7362,6 +7472,46 @@ var getAllCatladderEnvVarsInGitlab = function (vorpal) { return __awaiter(void 0
         }
     });
 }); };
+var getBackupKey = function (fullKey, timestamp) {
+    return "".concat(fullKey, "_backup_").concat(timestamp);
+};
+var clearBackups = function (vorpal, keep) { return __awaiter(void 0, void 0, void 0, function () {
+    var existingVariables, id, _i, _a, _b, key, backups, backupsSorted, toDelete, _c, toDelete_1, timestamp;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
+            case 0: return [4 /*yield*/, getAllCatladderEnvVarsInGitlab(vorpal)];
+            case 1:
+                existingVariables = _d.sent();
+                return [4 /*yield*/, (0, exports.getProjectInfo)(vorpal)];
+            case 2:
+                id = (_d.sent()).id;
+                _i = 0, _a = Object.entries(existingVariables);
+                _d.label = 3;
+            case 3:
+                if (!(_i < _a.length)) return [3 /*break*/, 8];
+                _b = _a[_i], key = _b[0], backups = _b[1].backups;
+                backupsSorted = backups.sort(function (a, b) { return b - a; });
+                toDelete = backupsSorted.slice(keep);
+                _c = 0, toDelete_1 = toDelete;
+                _d.label = 4;
+            case 4:
+                if (!(_c < toDelete_1.length)) return [3 /*break*/, 7];
+                timestamp = toDelete_1[_c];
+                return [4 /*yield*/, deleteVariable(vorpal, id, getBackupKey(key, timestamp))];
+            case 5:
+                _d.sent();
+                _d.label = 6;
+            case 6:
+                _c++;
+                return [3 /*break*/, 4];
+            case 7:
+                _i++;
+                return [3 /*break*/, 3];
+            case 8: return [2 /*return*/];
+        }
+    });
+}); };
+exports.clearBackups = clearBackups;
 var upsertAllVariables = function (vorpal, variables, env, componentName, backup, masked // FIXME: would be better to have this per variable
 ) {
     if (backup === void 0) { backup = true; }
@@ -7394,7 +7544,7 @@ var upsertAllVariables = function (vorpal, variables, env, componentName, backup
                 case 4:
                     _d.sent();
                     if (!backup) return [3 /*break*/, 6];
-                    return [4 /*yield*/, createVariable(vorpal, id, fullKey + "_backup_" + new Date().getTime(), oldValue, masked, "_backup")];
+                    return [4 /*yield*/, createVariable(vorpal, id, getBackupKey(fullKey, new Date().getTime()), oldValue, masked, "_backup")];
                 case 5:
                     _d.sent();
                     _d.label = 6;
@@ -350603,7 +350753,7 @@ exports.readConfigSync = readConfigSync;
 
 exports.__esModule = true;
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "main-7b4a3dd5" || 0;
+exports.PIPELINE_IMAGE_TAG = "main-5bc1bdb9" || 0;
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
 
 /***/ }),
@@ -350804,52 +350954,19 @@ var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
   return to.concat(ar || Array.prototype.slice.call(from));
 };
 
-var __importDefault = this && this.__importDefault || function (mod) {
-  return mod && mod.__esModule ? mod : {
-    "default": mod
-  };
-};
-
 exports.__esModule = true;
-exports.getEnvironment = exports.getSecretVarNameForContext = exports.getSecretVarName = void 0;
+exports.getSecretVarNameForContext = exports.getSecretVarName = exports.getEnvironment = void 0;
 
 var lodash_1 = __nccwpck_require__(23255);
 
-var slugify_1 = __importDefault(__nccwpck_require__(44035));
-
 var deploy_1 = __nccwpck_require__(90223);
 
-var types_1 = __nccwpck_require__(63109);
-
 var config_1 = __nccwpck_require__(19997);
 
 var utils_1 = __nccwpck_require__(37461);
 
 var resolveReferences_1 = __nccwpck_require__(80928);
 
-var sanitizeForEnVar = function (s) {
-  return s.replace(/-/g, "_");
-};
-
-var getSecretVarName = function (env, componentName, key) {
-  return "CL_".concat(sanitizeForEnVar(env), "_").concat(sanitizeForEnVar(componentName), "_").concat(key);
-}; // remove dash from component name
-
-
-exports.getSecretVarName = getSecretVarName;
-
-var addIndexVar = function (vars) {
-  return __assign(__assign({}, vars), {
-    _ALL_ENV_VAR_KEYS: JSON.stringify(Object.keys(vars))
-  });
-};
-
-var getSecretVarNameForContext = function (context, key) {
-  return (0, exports.getSecretVarName)(context.environment.shortName, context.componentName, key);
-};
-
-exports.getSecretVarNameForContext = getSecretVarNameForContext;
-
 var getEnvironment = function (config, componentName, env, commitInfo, alreadyVisited // to prevent endless loop
 ) {
   if (alreadyVisited === void 0) {
@@ -350857,27 +350974,15 @@ var getEnvironment = function (config, componentName, env, commitInfo, alreadyVi
   }
 
   return __awaiter(void 0, void 0, void 0, function () {
-    var defaultConfig, envConfig, mergedConfig, envType, basePredefinedVariables, gitlabEnvironmentName, environmentSlug, predefinedVariables, host, url, fullName, devLocalConfig, port, componentSlug, envInUrl, domainCanonical, HOST_CANONICAL, KUBE_APP_NAME_PREFIX, KUBE_APP_NAME, KUBE_NAMESPACE, publicEnvVarsRaw, additionalSecretKeys, secretEnvVarKeys, secretEnvVars, legacyFromComponents, publicEnvVarsRawWithLegasyFromComponents, publicEnvVarsRawSanitized, envVarsRaw, envVars;
+    var envConfig, envType, basePredefinedVariables, gitlabEnvironmentName, environmentSlug, predefinedVariables, host, url, fullName, envVarContext, devLocalConfig, port, additionalEnvVars, publicEnvVarsRaw, additionalSecretKeys, secretEnvVarKeys, secretEnvVars, legacyFromComponents, publicEnvVarsRawWithLegasyFromComponents, publicEnvVarsRawSanitized, envVarsRaw, envVars;
 
-    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
 
-    return __generator(this, function (_o) {
-      switch (_o.label) {
+    return __generator(this, function (_l) {
+      switch (_l.label) {
         case 0:
-          defaultConfig = config.components[componentName];
-
-          if (!defaultConfig) {
-            throw new Error("unknown component " + componentName);
-          }
-
-          envConfig = (_b = (_a = defaultConfig.env) === null || _a === void 0 ? void 0 : _a[env]) !== null && _b !== void 0 ? _b : {};
-
-          if (envConfig === false) {
-            throw new Error("env is disabled: " + env);
-          }
-
-          mergedConfig = (0, utils_1.mergeWithMergingArrays)(defaultConfig, envConfig);
-          envType = (_c = envConfig === null || envConfig === void 0 ? void 0 : envConfig.type) !== null && _c !== void 0 ? _c : (0, config_1.isKnowEnvType)(env) ? env : null;
+          envConfig = getEnvConfig(config, componentName, env);
+          envType = (_a = envConfig === null || envConfig === void 0 ? void 0 : envConfig.type) !== null && _a !== void 0 ? _a : (0, config_1.isKnowEnvType)(env) ? env : null;
 
           if (!envType) {
             throw new Error("Missing type in environment " + env + " in component " + componentName);
@@ -350885,16 +350990,25 @@ var getEnvironment = function (config, componentName, env, commitInfo, alreadyVi
 
           basePredefinedVariables = {
             ENV_SHORT: env,
-            APP_DIR: mergedConfig.dir,
+            APP_DIR: envConfig.dir,
             ENV_TYPE: envType
           };
           gitlabEnvironmentName = envType === "review" && commitInfo ? "".concat(env, "/").concat(commitInfo.refName, "/").concat(componentName) : "".concat(env, "/").concat(componentName);
           environmentSlug = envType === "review" && commitInfo ? "".concat(env, "-").concat(commitInfo.reviewSlug, "-").concat(componentName) : "".concat(env, "-").concat(componentName);
           fullName = "".concat(config.customerName, "-").concat(config.appName, "-").concat(environmentSlug);
+          envVarContext = {
+            deployConfig: envConfig.deploy,
+            fullName: fullName,
+            envType: envType,
+            commitInfo: commitInfo,
+            componentName: componentName,
+            env: env,
+            fullConfig: config
+          };
 
           if (envType === "local") {
-            devLocalConfig = mergedConfig;
-            port = (_d = devLocalConfig.port) !== null && _d !== void 0 ? _d : 3000;
+            devLocalConfig = envConfig;
+            port = (_b = devLocalConfig.port) !== null && _b !== void 0 ? _b : 3000;
             host = "localhost:" + port;
             url = "http://" + host;
             predefinedVariables = {
@@ -350903,34 +351017,22 @@ var getEnvironment = function (config, componentName, env, commitInfo, alreadyVi
               PORT: port.toString()
             };
           } else {
-            componentSlug = (0, slugify_1["default"])(componentName);
-            envInUrl = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, ".").concat(env) : env;
-            domainCanonical = (mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.deploy) && (mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.deploy.type) === "kubernetes" && ((_e = mergedConfig.deploy.cluster) === null || _e === void 0 ? void 0 : _e.domainCanonical) || // for convenience, we allow clusters to define a canonical domain, because a cluster has a fixed ip and you will usually have a domain pointing to that cluster
-            config.domainCanonical || "panter.cloud";
-            HOST_CANONICAL = (0, types_1.isOfDeployType)(mergedConfig.deploy, "google-cloudrun") ? fullName.toLowerCase() + "-" + process.env[(0, exports.getSecretVarName)(env, componentName, deploy_1.GCLOUD_RUN_CANONICAL_HOST_SUFFIX)] : "".concat(componentSlug, ".").concat(envInUrl, ".").concat(config.appName, ".").concat(config.customerName, ".").concat(domainCanonical);
-            host = (_f = mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.host) !== null && _f !== void 0 ? _f : HOST_CANONICAL;
+            additionalEnvVars = envConfig.deploy ? deploy_1.DEPLOY_TYPES[envConfig.deploy.type].getAdditionalEnvVars(envVarContext) : {};
+            host = (_d = (_c = envConfig === null || envConfig === void 0 ? void 0 : envConfig.host) !== null && _c !== void 0 ? _c : additionalEnvVars.HOST_CANONICAL) !== null && _d !== void 0 ? _d : "unknown-host.example.com";
             url = "https://".concat(host);
-            KUBE_APP_NAME_PREFIX = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, "-") : "";
-            KUBE_APP_NAME = "".concat(KUBE_APP_NAME_PREFIX).concat(componentName);
-            KUBE_NAMESPACE = (0, deploy_1.getKubernetesNamespace)(config, env);
-            predefinedVariables = __assign(__assign({}, basePredefinedVariables), {
-              HOST_CANONICAL: HOST_CANONICAL,
+            predefinedVariables = __assign(__assign(__assign({}, basePredefinedVariables), {
               HOST: host,
-              ROOT_URL: url,
-              KUBE_NAMESPACE: KUBE_NAMESPACE,
-              KUBE_APP_NAME: KUBE_APP_NAME,
-              KUBE_APP_NAME_PREFIX: KUBE_APP_NAME_PREFIX
-            });
+              ROOT_URL: url
+            }), additionalEnvVars);
           }
 
-          publicEnvVarsRaw = (_h = (_g = mergedConfig.vars) === null || _g === void 0 ? void 0 : _g.public) !== null && _h !== void 0 ? _h : {};
-          additionalSecretKeys = mergedConfig.deploy ? deploy_1.DEPLOY_TYPES[mergedConfig.deploy.type].additionalSecretKeys( // eslint-disable-next-line @typescript-eslint/no-explicit-any
-          mergedConfig.deploy) : [];
-          secretEnvVarKeys = __spreadArray(__spreadArray([], __read((_k = (_j = mergedConfig.vars) === null || _j === void 0 ? void 0 : _j.secret) !== null && _k !== void 0 ? _k : []), false), __read(additionalSecretKeys), false);
+          publicEnvVarsRaw = (_f = (_e = envConfig.vars) === null || _e === void 0 ? void 0 : _e.public) !== null && _f !== void 0 ? _f : {};
+          additionalSecretKeys = envConfig.deploy ? deploy_1.DEPLOY_TYPES[envConfig.deploy.type].additionalSecretKeys(envVarContext) : [];
+          secretEnvVarKeys = __spreadArray(__spreadArray([], __read((_h = (_g = envConfig.vars) === null || _g === void 0 ? void 0 : _g.secret) !== null && _h !== void 0 ? _h : []), false), __read(additionalSecretKeys), false);
           secretEnvVars = Object.fromEntries(secretEnvVarKeys.map(function (key) {
             return [key, "$".concat((0, exports.getSecretVarName)(env, componentName, key))];
           }));
-          legacyFromComponents = (_m = (_l = mergedConfig.vars) === null || _l === void 0 ? void 0 : _l.fromComponents) !== null && _m !== void 0 ? _m : {};
+          legacyFromComponents = (_k = (_j = envConfig.vars) === null || _j === void 0 ? void 0 : _j.fromComponents) !== null && _k !== void 0 ? _k : {};
           publicEnvVarsRawWithLegasyFromComponents = (0, lodash_1.merge)({}, (0, resolveReferences_1.translateLegacyFromComponents)(legacyFromComponents), publicEnvVarsRaw);
           publicEnvVarsRawSanitized = Object.fromEntries(Object.entries(publicEnvVarsRawWithLegasyFromComponents).map(function (_a) {
             var _b = __read(_a, 2),
@@ -350963,7 +351065,7 @@ var getEnvironment = function (config, componentName, env, commitInfo, alreadyVi
           }, alreadyVisited)];
 
         case 1:
-          envVars = _o.sent();
+          envVars = _l.sent();
           return [2
           /*return*/
           , {
@@ -350987,6 +351089,47 @@ var getEnvironment = function (config, componentName, env, commitInfo, alreadyVi
 
 exports.getEnvironment = getEnvironment;
 
+var sanitizeForEnVar = function (s) {
+  return s.replace(/-/g, "_");
+};
+
+var getSecretVarName = function (env, componentName, key) {
+  return "CL_".concat(sanitizeForEnVar(env), "_").concat(sanitizeForEnVar(componentName), "_").concat(key);
+}; // remove dash from component name
+
+
+exports.getSecretVarName = getSecretVarName;
+
+var addIndexVar = function (vars) {
+  return __assign(__assign({}, vars), {
+    _ALL_ENV_VAR_KEYS: JSON.stringify(Object.keys(vars))
+  });
+};
+
+var getSecretVarNameForContext = function (context, key) {
+  return (0, exports.getSecretVarName)(context.environment.shortName, context.componentName, key);
+};
+
+exports.getSecretVarNameForContext = getSecretVarNameForContext;
+
+var getEnvConfig = function (config, componentName, env) {
+  var _a, _b;
+
+  var defaultConfig = config.components[componentName];
+
+  if (!defaultConfig) {
+    throw new Error("unknown component " + componentName);
+  }
+
+  var envCustomizations = (_b = (_a = defaultConfig.env) === null || _a === void 0 ? void 0 : _a[env]) !== null && _b !== void 0 ? _b : {};
+
+  if (envCustomizations === false) {
+    throw new Error("env is disabled: " + env);
+  }
+
+  return (0, utils_1.mergeWithMergingArrays)(defaultConfig, envCustomizations);
+};
+
 /***/ }),
 
 /***/ 30486:
@@ -351815,7 +351958,7 @@ var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
 };
 
 exports.__esModule = true;
-exports.createDeployJob = void 0;
+exports.createGoogleCloudRunDeployJobs = void 0;
 
 var js_yaml_1 = __nccwpck_require__(3618);
 
@@ -351835,16 +351978,16 @@ var types_1 = __nccwpck_require__(63109);
 
 var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(22607);
 
-var createDeployJob = function (context) {
+var createGoogleCloudRunDeployJobs = function (context) {
   var deployConfig = context.componentConfig.deploy;
 
   if (deployConfig === false) {
     return [];
   }
 
-  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun", "google-cloudrun-job")) {
     // should not happen
-    throw new Error("deploy config is not custom");
+    throw new Error("deploy config is wrong");
   }
 
   var baseDeploymentJob = (0, base_1.getBaseDeploymentJob)(context);
@@ -351855,7 +351998,6 @@ var createDeployJob = function (context) {
   var pushImageToArtifactsRegistry = __spreadArray(__spreadArray([docker_1.gitlabDockerLogin], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud auth configure-docker ".concat(deployConfig.region, "-docker.pkg.dev"), "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG ".concat(gcloudImageName), "docker push ".concat(gcloudImageName)], false);
 
   var allEnvVars = (0, lodash_1.omit)(context.environment.envVars, _1.GCLOUD_DEPLOY_CREDENTIALS_KEY);
-  var serviceName = context.environment.fullName.toLowerCase();
   var labelsString = Object.entries((0, getLabels_1.getLabels)(context)).map(function (_a) {
     var _b = __read(_a, 2),
         key = _b[0],
@@ -351863,9 +352005,39 @@ var createDeployJob = function (context) {
 
     return "".concat(key, "=").concat(value);
   }).join(",");
-  var command = context.componentConfig.build.startCommand ? "--command=\"".concat(context.componentConfig.build.startCommand.split(" ").join(","), "\"") : ""; // TODO: split secrets out
+  var commonArgs = "--project ".concat(deployConfig.projectId, " --region=").concat(deployConfig.region);
+
+  var getDeployCommand = function () {
+    var _a;
+
+    var name = context.environment.fullName.toLowerCase();
+    var command = (_a = deployConfig.command) !== null && _a !== void 0 ? _a : context.componentConfig.build.startCommand;
+    var commandArg = command ? "--command=\"".concat(command.split(" ").join(","), "\"") : "";
+    var commonDeployArgs = "".concat(commandArg, " --image ").concat(gcloudImageName, " ").concat(commonArgs, " --env-vars-file=____envvars.yaml --labels ").concat(labelsString);
+
+    if (deployConfig.type === "google-cloudrun") {
+      return "gcloud run deploy ".concat(name, " ").concat(commonDeployArgs, " --allow-unauthenticated");
+    }
+
+    if (deployConfig.type === "google-cloudrun-job") {
+      return "gcloud beta run jobs create ".concat(name, " ").concat(commonDeployArgs);
+    }
+  };
+
+  var getStopCommand = function () {
+    var name = context.environment.fullName.toLowerCase();
+    var commonStopArgs = "".concat(commonArgs, " --quiet");
 
-  var cloudRunDeploy = ["echo \"$ENV_VARS\" > ____envvars.yaml", "gcloud run deploy ".concat(serviceName, " --image ").concat(gcloudImageName, " --region=").concat(deployConfig.region, " --allow-unauthenticated --project ").concat(deployConfig.projectId, " ").concat(command, " --env-vars-file=____envvars.yaml --labels ").concat(labelsString), "docker image rm ".concat(gcloudImageName)];
+    if (deployConfig.type === "google-cloudrun") {
+      return "gcloud run services delete ".concat(name, " ").concat(commonStopArgs);
+    }
+
+    if (deployConfig.type === "google-cloudrun-job") {
+      return "gcloud beta run jobs delete ".concat(name, " ").concat(commonStopArgs);
+    }
+  };
+
+  var cloudRunDeploy = ["echo \"$ENV_VARS\" > ____envvars.yaml", getDeployCommand(), "docker image rm ".concat(gcloudImageName)];
   var baseStopJob = (0, base_1.getBaseDeploymentStopJob)(context);
   return [(0, lodash_1.merge)({}, baseDeploymentJob, (0, docker_1.getDockerJobBaseProps)(context), {
     artifacts: {
@@ -351882,11 +352054,11 @@ var createDeployJob = function (context) {
     script: __spreadArray(__spreadArray([], __read(pushImageToArtifactsRegistry), false), __read(cloudRunDeploy), false)
   }), (0, lodash_1.merge)({}, baseStopJob, {
     image: (0, runner_1.getRunnerImage)("gcloud"),
-    script: __spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud run services delete ".concat(serviceName, " --project ").concat(deployConfig.projectId, " --region=").concat(deployConfig.region, " --quiet")], false)
+    script: __spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), [getStopCommand()], false)
   })];
 };
 
-exports.createDeployJob = createDeployJob;
+exports.createGoogleCloudRunDeployJobs = createGoogleCloudRunDeployJobs;
 
 /***/ }),
 
@@ -351897,21 +352069,59 @@ exports.createDeployJob = createDeployJob;
 
 
 exports.__esModule = true;
-exports.GCLOUD_RUN_DEPLOY_TYPE = exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = void 0;
+exports.GCLOUD_RUN_DEPLOY_TYPES = exports.GCLOUD_RUN_JOB_DEPLOY_TYPE = exports.GCLOUD_RUN_DEPLOY_TYPE = exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = void 0;
+
+var context_1 = __nccwpck_require__(22041);
 
 var deployJob_1 = __nccwpck_require__(82256);
 
 exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
 exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = "GCLOUD_RUN_canonicalHostSuffix";
 exports.GCLOUD_RUN_DEPLOY_TYPE = {
-  jobs: deployJob_1.createDeployJob,
+  jobs: deployJob_1.createGoogleCloudRunDeployJobs,
   defaults: function () {
     return {};
   },
   additionalSecretKeys: function () {
     return [exports.GCLOUD_DEPLOY_CREDENTIALS_KEY];
+  },
+  getAdditionalEnvVars: function (_a) {
+    var fullName = _a.fullName,
+        env = _a.env,
+        componentName = _a.componentName;
+    var HOST_CANONICAL = fullName.toLowerCase() + "-" + process.env[(0, context_1.getSecretVarName)(env, componentName, exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX)];
+    return {
+      HOST_CANONICAL: HOST_CANONICAL
+    };
   }
 };
+exports.GCLOUD_RUN_JOB_DEPLOY_TYPE = {
+  jobs: deployJob_1.createGoogleCloudRunDeployJobs,
+  defaults: function () {
+    return {};
+  },
+  additionalSecretKeys: function () {
+    return [exports.GCLOUD_DEPLOY_CREDENTIALS_KEY];
+  },
+  getAdditionalEnvVars: function (_a) {
+    var deployConfig = _a.deployConfig,
+        fullName = _a.fullName;
+
+    if (!deployConfig) {
+      return {};
+    }
+
+    var jobName = fullName.toLowerCase();
+    var CLOUD_RUN_JOB_TRIGGER_URL = "https://".concat(deployConfig.region, "-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/").concat(deployConfig.projectId, "/jobs/").concat(jobName, ":run");
+    return {
+      CLOUD_RUN_JOB_TRIGGER_URL: CLOUD_RUN_JOB_TRIGGER_URL
+    };
+  }
+};
+exports.GCLOUD_RUN_DEPLOY_TYPES = {
+  "google-cloudrun": exports.GCLOUD_RUN_DEPLOY_TYPE,
+  "google-cloudrun-job": exports.GCLOUD_RUN_JOB_DEPLOY_TYPE
+};
 
 /***/ }),
 
@@ -352066,6 +352276,9 @@ exports.CUSTOM_DEPLOY_TYPE = {
   },
   additionalSecretKeys: function () {
     return [];
+  },
+  getAdditionalEnvVars: function () {
+    return {};
   }
 };
 
@@ -352129,6 +352342,9 @@ exports.DOCKER_TAG_DEPLOY_TYPE = {
   },
   additionalSecretKeys: function () {
     return [];
+  },
+  getAdditionalEnvVars: function () {
+    return {};
   }
 };
 
@@ -352140,6 +352356,20 @@ exports.DOCKER_TAG_DEPLOY_TYPE = {
 "use strict";
 
 
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+
+    return t;
+  };
+
+  return __assign.apply(this, arguments);
+};
+
 var __createBinding = this && this.__createBinding || (Object.create ? function (o, m, k, k2) {
   if (k2 === undefined) k2 = k;
   Object.defineProperty(o, k2, {
@@ -352178,12 +352408,11 @@ __exportStar(__nccwpck_require__(13539), exports);
 
 __exportStar(__nccwpck_require__(81344), exports);
 
-exports.DEPLOY_TYPES = {
+exports.DEPLOY_TYPES = __assign({
   kubernetes: kubernetes_1.KUBERNETES_DEPLOY_TYPE,
   custom: custom_1.CUSTOM_DEPLOY_TYPE,
-  "google-cloudrun": cloudRun_1.GCLOUD_RUN_DEPLOY_TYPE,
   dockerTag: dockerTag_1.DOCKER_TAG_DEPLOY_TYPE
-};
+}, cloudRun_1.GCLOUD_RUN_DEPLOY_TYPES);
 
 /***/ }),
 
@@ -352196,20 +352425,26 @@ exports.DEPLOY_TYPES = {
 exports.__esModule = true;
 exports.additionalKubernetesSecretKeys = void 0;
 
-var additionalKubernetesSecretKeys = function (config) {
-  var _a, _b, _c, _d;
+var additionalKubernetesSecretKeys = function (_a) {
+  var _b, _c, _d, _e;
+
+  var deployConfig = _a.deployConfig;
+
+  if (!deployConfig) {
+    return [];
+  }
 
   var keys = [];
 
-  if ((_b = (_a = config.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled) {
+  if ((_c = (_b = deployConfig.values) === null || _b === void 0 ? void 0 : _b.mongodb) === null || _c === void 0 ? void 0 : _c.enabled) {
     keys.push("MONGODB_ROOT_PASSWORD");
 
-    if (config.values.mongodb.architecture === "replicaset") {
+    if (deployConfig.values.mongodb.architecture === "replicaset") {
       keys.push("MONGODB_REPLICASET_KEY");
     }
   }
 
-  if ((_d = (_c = config.values) === null || _c === void 0 ? void 0 : _c.cloudsql) === null || _d === void 0 ? void 0 : _d.enabled) {
+  if ((_e = (_d = deployConfig.values) === null || _d === void 0 ? void 0 : _d.cloudsql) === null || _e === void 0 ? void 0 : _e.enabled) {
     keys.push("POSTGRESQL_PASSWORD");
     keys.push("cloudsqlProxyCredentials");
   }
@@ -352379,14 +352614,24 @@ exports.createKubernetesDeployJobs = createKubernetesDeployJobs;
 /***/ }),
 
 /***/ 95682:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
 
 
+var __importDefault = this && this.__importDefault || function (mod) {
+  return mod && mod.__esModule ? mod : {
+    "default": mod
+  };
+};
+
 exports.__esModule = true;
 exports.KUBERNETES_DEPLOY_TYPE = void 0;
 
+var slugify_1 = __importDefault(__nccwpck_require__(44035));
+
+var __1 = __nccwpck_require__(90223);
+
 var additionalSecretKeys_1 = __nccwpck_require__(75775);
 
 var deployJob_1 = __nccwpck_require__(9792);
@@ -352396,7 +352641,32 @@ exports.KUBERNETES_DEPLOY_TYPE = {
   defaults: function () {
     return {};
   },
-  additionalSecretKeys: additionalSecretKeys_1.additionalKubernetesSecretKeys
+  additionalSecretKeys: additionalSecretKeys_1.additionalKubernetesSecretKeys,
+  getAdditionalEnvVars: function (_a) {
+    var _b;
+
+    var componentName = _a.componentName,
+        fullConfig = _a.fullConfig,
+        deployConfig = _a.deployConfig,
+        env = _a.env,
+        envType = _a.envType,
+        commitInfo = _a.commitInfo;
+    var KUBE_APP_NAME_PREFIX = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, "-") : "";
+    var KUBE_APP_NAME = "".concat(KUBE_APP_NAME_PREFIX).concat(componentName);
+    var KUBE_NAMESPACE = (0, __1.getKubernetesNamespace)(fullConfig, env);
+    var componentSlug = (0, slugify_1["default"])(componentName);
+    var envInUrl = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, ".").concat(env) : env;
+    var domainCanonical = deployConfig && ((_b = deployConfig.cluster) === null || _b === void 0 ? void 0 : _b.domainCanonical) || // for convenience, we allow clusters to define a canonical domain, because a cluster has a fixed ip and you will usually have a domain pointing to that cluster
+    fullConfig.domainCanonical || "panter.cloud";
+    var HOST_CANONICAL = "".concat(componentSlug, ".").concat(envInUrl, ".").concat(fullConfig.appName, ".").concat(fullConfig.customerName, ".").concat(domainCanonical); // default for kubernetes and rest
+
+    return {
+      KUBE_NAMESPACE: KUBE_NAMESPACE,
+      KUBE_APP_NAME: KUBE_APP_NAME,
+      KUBE_APP_NAME_PREFIX: KUBE_APP_NAME_PREFIX,
+      HOST_CANONICAL: HOST_CANONICAL
+    };
+  }
 };
 
 /***/ }),