@catladder/cli 0.0.0-main-b9978361 → 0.0.0-main-24bccda4

package/dist/bundles/cli/index.js

@@ -4033,6 +4033,105 @@ exports.setupAccessTokens = setupAccessTokens;
 
 /***/ }),
 
+/***/ 89010:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+exports.setupCloudRun = void 0;
+var pipeline_1 = __nccwpck_require__(25355);
+var artifactsRegistry_1 = __nccwpck_require__(78118);
+var getCloudRunDomainSuffix_1 = __nccwpck_require__(33414);
+var enableServices_1 = __nccwpck_require__(4895);
+var serviceAccounts_1 = __nccwpck_require__(79772);
+var gitlab_1 = __nccwpck_require__(79818);
+var setupCloudRun = function (instance, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var config, suffix;
+    var _a;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "google-cloudrun")) {
+                    throw new Error("deploy config is not of type 'google-cloudrun'");
+                }
+                config = context.componentConfig.deploy;
+                // enable services
+                instance.log("enable required servies...");
+                return [4 /*yield*/, (0, enableServices_1.enableGCloudServices)(["run.googleapis.com", "artifactregistry.googleapis.com"], config)];
+            case 1:
+                _b.sent();
+                return [4 /*yield*/, (0, artifactsRegistry_1.upsertGcloudArtifactsRegistry)(config)];
+            case 2:
+                _b.sent();
+                return [4 /*yield*/, (0, serviceAccounts_1.upsertGcloudServiceAccountAndSaveSecret)(instance, context, {
+                        projectId: config.projectId,
+                        displayName: "Catladder gcloud deploy",
+                        description: "This service account deploys to google cloud",
+                        name: "cl-d",
+                        // TODO: run.admin is a bit much, would be better to follow https://stackoverflow.com/questions/55788714/deploying-to-cloud-run-with-a-custom-service-account-failed-with-iam-serviceacco
+                        roles: [
+                            "roles/artifactregistry.repoAdmin",
+                            "roles/run.admin",
+                            "roles/iam.serviceAccountUser",
+                        ]
+                    }, pipeline_1.GCLOUD_DEPLOY_CREDENTIALS_KEY)];
+            case 3:
+                _b.sent();
+                return [4 /*yield*/, (0, getCloudRunDomainSuffix_1.getCloudRunDomainSuffix)(config)];
+            case 4:
+                suffix = _b.sent();
+                instance.log("domain suffix: " + suffix);
+                return [4 /*yield*/, (0, gitlab_1.upsertAllVariables)(instance, (_a = {},
+                        _a[pipeline_1.GCLOUD_RUN_CANONICAL_HOST_SUFFIX] = suffix,
+                        _a), context.environment.shortName, context.componentName)];
+            case 5:
+                _b.sent();
+                return [2 /*return*/];
+        }
+    });
+}); };
+exports.setupCloudRun = setupCloudRun;
+//# sourceMappingURL=setupCloudRun.js.map
+
+/***/ }),
+
 /***/ 63660:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -4140,6 +4239,7 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
 exports.__esModule = true;
 exports.setupContext = void 0;
 var pipeline_1 = __nccwpck_require__(25355);
+var setupCloudRun_1 = __nccwpck_require__(89010);
 var setupCloudSQL_1 = __nccwpck_require__(63660);
 var setupKubernetes_1 = __nccwpck_require__(82308);
 var setupContext = function (instance, context) { return __awaiter(void 0, void 0, void 0, function () {
@@ -4155,19 +4255,25 @@ var setupContext = function (instance, context) { return __awaiter(void 0, void
                     context.componentName +
                     "...");
                 instance.log("");
-                if (!(0, pipeline_1.hasCloudSQL)(context)) return [3 /*break*/, 2];
-                return [4 /*yield*/, (0, setupCloudSQL_1.setupCloudSQL)(instance, context)];
+                if (!(0, pipeline_1.isOfDeployType)(context.componentConfig.deploy, "google-cloudrun")) return [3 /*break*/, 2];
+                return [4 /*yield*/, (0, setupCloudRun_1.setupCloudRun)(instance, context)];
             case 1:
                 _a.sent();
                 _a.label = 2;
             case 2:
-                deployConfig = context.componentConfig.deploy;
-                if (!(0, pipeline_1.isOfDeployType)(deployConfig, "kubernetes")) return [3 /*break*/, 4];
-                return [4 /*yield*/, (0, setupKubernetes_1.setupKubernetes)(instance, context)];
+                if (!(0, pipeline_1.hasCloudSQL)(context)) return [3 /*break*/, 4];
+                return [4 /*yield*/, (0, setupCloudSQL_1.setupCloudSQL)(instance, context)];
             case 3:
                 _a.sent();
                 _a.label = 4;
             case 4:
+                deployConfig = context.componentConfig.deploy;
+                if (!(0, pipeline_1.isOfDeployType)(deployConfig, "kubernetes")) return [3 /*break*/, 6];
+                return [4 /*yield*/, (0, setupKubernetes_1.setupKubernetes)(instance, context)];
+            case 5:
+                _a.sent();
+                _a.label = 6;
+            case 6:
                 instance.log("");
                 instance.log("✅ " +
                     context.environment.shortName +
@@ -5971,43 +6077,73 @@ exports.parseChoice = parseChoice;
 
 /***/ }),
 
-/***/ 54756:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+/***/ 78118:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
 
-exports.__esModule = true;
-exports.getk8sApiBatchBeta = exports.getk8sApiBatch = exports.getk8sApi = void 0;
-var client_node_1 = __nccwpck_require__(15124);
-var getKubeConfig = function () {
-    var kc = new client_node_1.KubeConfig();
-    kc.loadFromDefault();
-    return kc;
-};
-/**
- * get kubernetes client. avoid reusing the instance when context get changed
- * @returns kuberenetes client
- */
-var getk8sApi = function () {
-    var kc = getKubeConfig();
-    return kc.makeApiClient(client_node_1.CoreV1Api);
-};
-exports.getk8sApi = getk8sApi;
-var getk8sApiBatch = function () {
-    var kc = getKubeConfig();
-    return kc.makeApiClient(client_node_1.BatchV1Api);
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
 };
-exports.getk8sApiBatch = getk8sApiBatch;
-var getk8sApiBatchBeta = function () {
-    var kc = getKubeConfig();
-    return kc.makeApiClient(client_node_1.BatchV1beta1Api);
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
 };
-exports.getk8sApiBatchBeta = getk8sApiBatchBeta;
-//# sourceMappingURL=index.js.map
+exports.__esModule = true;
+exports.upsertGcloudArtifactsRegistry = void 0;
+var child_process_promise_1 = __nccwpck_require__(75763);
+var upsertGcloudArtifactsRegistry = function (config) { return __awaiter(void 0, void 0, void 0, function () {
+    var e_1;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                _a.trys.push([0, 2, , 3]);
+                return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud artifacts repositories create catladder-deploy --project=\"".concat(config.projectId, "\" --repository-format=docker --location=").concat(config.region))];
+            case 1:
+                _a.sent();
+                return [3 /*break*/, 3];
+            case 2:
+                e_1 = _a.sent();
+                return [3 /*break*/, 3];
+            case 3: return [2 /*return*/];
+        }
+    });
+}); };
+exports.upsertGcloudArtifactsRegistry = upsertGcloudArtifactsRegistry;
+//# sourceMappingURL=artifactsRegistry.js.map
 
 /***/ }),
 
-/***/ 80606:
+/***/ 33414:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
@@ -6049,73 +6185,404 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
     }
 };
 exports.__esModule = true;
-exports.getProjectPodNames = exports.getProjectPvcs = exports.getProjectPods = void 0;
-var parseChoice_1 = __nccwpck_require__(3319);
-var k8sApi_1 = __nccwpck_require__(54756);
-var projects_1 = __nccwpck_require__(41619);
-var getProjectPods = function (envComponent) { return __awaiter(void 0, void 0, void 0, function () {
-    var namespace, k8sApi, res, componentName;
-    return __generator(this, function (_a) {
-        switch (_a.label) {
-            case 0: return [4 /*yield*/, (0, projects_1.getProjectNamespace)(envComponent)];
-            case 1:
-                namespace = _a.sent();
-                k8sApi = (0, k8sApi_1.getk8sApi)();
-                return [4 /*yield*/, k8sApi.listNamespacedPod(namespace)];
-            case 2:
-                res = _a.sent();
-                componentName = (0, parseChoice_1.parseChoice)(envComponent).componentName;
-                return [2 /*return*/, res.body.items.filter(function (item) { var _a, _b; return componentName ? (_b = (_a = item.metadata) === null || _a === void 0 ? void 0 : _a.name) === null || _b === void 0 ? void 0 : _b.includes(componentName + "-") : true; })];
-        }
-    });
-}); };
-exports.getProjectPods = getProjectPods;
-var getProjectPvcs = function (envComponent) { return __awaiter(void 0, void 0, void 0, function () {
-    var namespace, k8sApi, res;
+exports.getCloudRunDomainSuffix = void 0;
+var child_process_promise_1 = __nccwpck_require__(75763);
+var getSuffixFromService = function (service) {
+    var fullUrl = service.status.url;
+    var name = service.metadata.name;
+    return fullUrl.replace("https://" + name + "-", "");
+};
+var getCloudRunDomainSuffix = function (config) { return __awaiter(void 0, void 0, void 0, function () {
+    var dummyServiceName, existingServices, result;
     return __generator(this, function (_a) {
         switch (_a.label) {
-            case 0: return [4 /*yield*/, (0, projects_1.getProjectNamespace)(envComponent)];
+            case 0:
+                dummyServiceName = "cl-dummy-service";
+                return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud run services list --format=json  --project=\"".concat(config.projectId, "\"  --region=").concat(config.region, " --limit=1")).then(function (r) { return JSON.parse(r.stdout); })];
             case 1:
-                namespace = _a.sent();
-                k8sApi = (0, k8sApi_1.getk8sApi)();
-                return [4 /*yield*/, k8sApi.listNamespacedPersistentVolumeClaim(namespace)];
+                existingServices = _a.sent();
+                if (existingServices.length > 0) {
+                    return [2 /*return*/, getSuffixFromService(existingServices[0])];
+                }
+                return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud run deploy ".concat(dummyServiceName, " --region=").concat(config.region, " --allow-unauthenticated --project ").concat(config.projectId, " --image=us-docker.pkg.dev/cloudrun/container/hello --format=json")).then(function (r) { return JSON.parse(r.stdout); })];
             case 2:
-                res = _a.sent();
-                return [2 /*return*/, res.body.items];
-        }
-    });
-}); };
-exports.getProjectPvcs = getProjectPvcs;
-var getProjectPodNames = function (envComponent) { return __awaiter(void 0, void 0, void 0, function () {
-    var pods;
-    return __generator(this, function (_a) {
-        switch (_a.label) {
-            case 0: return [4 /*yield*/, (0, exports.getProjectPods)(envComponent)];
-            case 1:
-                pods = _a.sent();
-                return [2 /*return*/, pods.map(function (n) { return n.metadata.name; })];
+                result = _a.sent();
+                return [4 /*yield*/, getSuffixFromService(result)];
+            case 3: return [2 /*return*/, _a.sent()];
         }
     });
 }); };
-exports.getProjectPodNames = getProjectPodNames;
-//# sourceMappingURL=index.js.map
+exports.getCloudRunDomainSuffix = getCloudRunDomainSuffix;
+//# sourceMappingURL=getCloudRunDomainSuffix.js.map
 
 /***/ }),
 
-/***/ 71628:
-/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+/***/ 4895:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
 
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
 exports.__esModule = true;
-// eslint-disable-next-line @typescript-eslint/no-var-requires
-var ownPkg = __nccwpck_require__(4147);
-exports["default"] = ownPkg;
-//# sourceMappingURL=packageInfos.js.map
+exports.enableGCloudServices = void 0;
+var child_process_promise_1 = __nccwpck_require__(75763);
+var enableGCloudServices = function (services, config) { return __awaiter(void 0, void 0, void 0, function () {
+    var _i, services_1, service;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                _i = 0, services_1 = services;
+                _a.label = 1;
+            case 1:
+                if (!(_i < services_1.length)) return [3 /*break*/, 4];
+                service = services_1[_i];
+                return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud services enable ".concat(service, " --project=").concat(config.projectId))];
+            case 2:
+                _a.sent();
+                _a.label = 3;
+            case 3:
+                _i++;
+                return [3 /*break*/, 1];
+            case 4: return [2 /*return*/];
+        }
+    });
+}); };
+exports.enableGCloudServices = enableGCloudServices;
+//# sourceMappingURL=enableServices.js.map
 
 /***/ }),
 
-/***/ 66894:
+/***/ 79772:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+exports.upsertGcloudServiceAccountAndSaveSecret = exports.accountExists = void 0;
+var child_process_promise_1 = __nccwpck_require__(75763);
+var crypto_1 = __nccwpck_require__(6113);
+var gitlab_1 = __nccwpck_require__(79818);
+var accountExists = function (fullIdentifier) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                _b.trys.push([0, 2, , 3]);
+                return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud iam service-accounts describe ".concat(fullIdentifier))];
+            case 1:
+                _b.sent();
+                return [2 /*return*/, true];
+            case 2:
+                _a = _b.sent();
+                return [2 /*return*/, false];
+            case 3: return [2 /*return*/];
+        }
+    });
+}); };
+exports.accountExists = accountExists;
+var upsertGcloudServiceAccount = function (context, account) { return __awaiter(void 0, void 0, void 0, function () {
+    var projectId, name, displayName, roles, description, namePrefix, nameSuffix, nameMiddleLength, nameMiddle, middle, fullName, fullDisplayName, fullIdentifier, existing, memberName, _i, roles_1, role, keys, _a, keys_1, key;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                projectId = account.projectId, name = account.name, displayName = account.displayName, roles = account.roles, description = account.description;
+                namePrefix = "".concat(name, "-");
+                nameSuffix = "-".concat(context.environment.shortName, "-").concat(context.componentName);
+                nameMiddleLength = 30 - namePrefix.length - nameSuffix.length;
+                nameMiddle = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName);
+                middle = hashIfNessecary(nameMiddle, nameMiddleLength);
+                fullName = "".concat(namePrefix).concat(middle).concat(nameSuffix);
+                fullDisplayName = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName, " ").concat(context.environment.shortName, ":").concat(context.componentName, " | ").concat(displayName);
+                fullIdentifier = "".concat(fullName, "@").concat(projectId, ".iam.gserviceaccount.com");
+                return [4 /*yield*/, (0, exports.accountExists)(fullIdentifier)];
+            case 1:
+                existing = _b.sent();
+                if (!!existing) return [3 /*break*/, 3];
+                return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud iam service-accounts create ".concat(fullName, " --display-name=\"").concat(fullDisplayName, "\" --project=\"").concat(projectId, "\"  --description=\"").concat(description, "\""))];
+            case 2:
+                _b.sent();
+                _b.label = 3;
+            case 3:
+                memberName = "serviceAccount:".concat(fullIdentifier);
+                _i = 0, roles_1 = roles;
+                _b.label = 4;
+            case 4:
+                if (!(_i < roles_1.length)) return [3 /*break*/, 7];
+                role = roles_1[_i];
+                return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud projects add-iam-policy-binding ".concat(projectId, " --member=").concat(memberName, " --role=").concat(role, " "))];
+            case 5:
+                _b.sent();
+                _b.label = 6;
+            case 6:
+                _i++;
+                return [3 /*break*/, 4];
+            case 7: return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud iam service-accounts keys list --iam-account=".concat(fullIdentifier, " --managed-by=user --format=json")).then(function (o) { return JSON.parse(o.stdout); })];
+            case 8:
+                keys = _b.sent();
+                _a = 0, keys_1 = keys;
+                _b.label = 9;
+            case 9:
+                if (!(_a < keys_1.length)) return [3 /*break*/, 12];
+                key = keys_1[_a];
+                return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud iam service-accounts keys delete ".concat(key.name, " --quiet --iam-account=").concat(fullIdentifier))];
+            case 10:
+                _b.sent();
+                _b.label = 11;
+            case 11:
+                _a++;
+                return [3 /*break*/, 9];
+            case 12: return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud iam service-accounts keys create /dev/stdout --iam-account=".concat(fullIdentifier)).then(function (o) { return o.stdout; })];
+            case 13: return [2 /*return*/, _b.sent()];
+        }
+    });
+}); };
+var upsertGcloudServiceAccountAndSaveSecret = function (instance, context, account, secretName) { return __awaiter(void 0, void 0, void 0, function () {
+    var key;
+    var _a;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                instance.log("upserting service account " + account.name + "...");
+                return [4 /*yield*/, upsertGcloudServiceAccount(context, account)];
+            case 1:
+                key = _b.sent();
+                return [4 /*yield*/, (0, gitlab_1.upsertAllVariables)(instance, (_a = {},
+                        _a[secretName] = key,
+                        _a), context.environment.shortName, context.componentName)];
+            case 2:
+                _b.sent();
+                instance.log("done!");
+                return [2 /*return*/];
+        }
+    });
+}); };
+exports.upsertGcloudServiceAccountAndSaveSecret = upsertGcloudServiceAccountAndSaveSecret;
+var hashIfNessecary = function (str, maxLength) {
+    return str.length > maxLength ? hash(str, maxLength) : str;
+};
+var hash = function (str, length) {
+    return (0, crypto_1.createHmac)("sha256", str).digest("hex").substring(0, length);
+};
+//# sourceMappingURL=serviceAccounts.js.map
+
+/***/ }),
+
+/***/ 54756:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+exports.__esModule = true;
+exports.getk8sApiBatchBeta = exports.getk8sApiBatch = exports.getk8sApi = void 0;
+var client_node_1 = __nccwpck_require__(15124);
+var getKubeConfig = function () {
+    var kc = new client_node_1.KubeConfig();
+    kc.loadFromDefault();
+    return kc;
+};
+/**
+ * get kubernetes client. avoid reusing the instance when context get changed
+ * @returns kuberenetes client
+ */
+var getk8sApi = function () {
+    var kc = getKubeConfig();
+    return kc.makeApiClient(client_node_1.CoreV1Api);
+};
+exports.getk8sApi = getk8sApi;
+var getk8sApiBatch = function () {
+    var kc = getKubeConfig();
+    return kc.makeApiClient(client_node_1.BatchV1Api);
+};
+exports.getk8sApiBatch = getk8sApiBatch;
+var getk8sApiBatchBeta = function () {
+    var kc = getKubeConfig();
+    return kc.makeApiClient(client_node_1.BatchV1beta1Api);
+};
+exports.getk8sApiBatchBeta = getk8sApiBatchBeta;
+//# sourceMappingURL=index.js.map
+
+/***/ }),
+
+/***/ 80606:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+exports.getProjectPodNames = exports.getProjectPvcs = exports.getProjectPods = void 0;
+var parseChoice_1 = __nccwpck_require__(3319);
+var k8sApi_1 = __nccwpck_require__(54756);
+var projects_1 = __nccwpck_require__(41619);
+var getProjectPods = function (envComponent) { return __awaiter(void 0, void 0, void 0, function () {
+    var namespace, k8sApi, res, componentName;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, projects_1.getProjectNamespace)(envComponent)];
+            case 1:
+                namespace = _a.sent();
+                k8sApi = (0, k8sApi_1.getk8sApi)();
+                return [4 /*yield*/, k8sApi.listNamespacedPod(namespace)];
+            case 2:
+                res = _a.sent();
+                componentName = (0, parseChoice_1.parseChoice)(envComponent).componentName;
+                return [2 /*return*/, res.body.items.filter(function (item) { var _a, _b; return componentName ? (_b = (_a = item.metadata) === null || _a === void 0 ? void 0 : _a.name) === null || _b === void 0 ? void 0 : _b.includes(componentName + "-") : true; })];
+        }
+    });
+}); };
+exports.getProjectPods = getProjectPods;
+var getProjectPvcs = function (envComponent) { return __awaiter(void 0, void 0, void 0, function () {
+    var namespace, k8sApi, res;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, projects_1.getProjectNamespace)(envComponent)];
+            case 1:
+                namespace = _a.sent();
+                k8sApi = (0, k8sApi_1.getk8sApi)();
+                return [4 /*yield*/, k8sApi.listNamespacedPersistentVolumeClaim(namespace)];
+            case 2:
+                res = _a.sent();
+                return [2 /*return*/, res.body.items];
+        }
+    });
+}); };
+exports.getProjectPvcs = getProjectPvcs;
+var getProjectPodNames = function (envComponent) { return __awaiter(void 0, void 0, void 0, function () {
+    var pods;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, exports.getProjectPods)(envComponent)];
+            case 1:
+                pods = _a.sent();
+                return [2 /*return*/, pods.map(function (n) { return n.metadata.name; })];
+        }
+    });
+}); };
+exports.getProjectPodNames = getProjectPodNames;
+//# sourceMappingURL=index.js.map
+
+/***/ }),
+
+/***/ 71628:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+exports.__esModule = true;
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+var ownPkg = __nccwpck_require__(4147);
+exports["default"] = ownPkg;
+//# sourceMappingURL=packageInfos.js.map
+
+/***/ }),
+
+/***/ 66894:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
@@ -6515,8 +6982,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 exports.__esModule = true;
 exports.upsertAllVariables = exports.getVariableValueByRawName = exports.getAllVariables = exports.getProjectInfo = exports.doGitlabRequest = exports.getGitlabToken = exports.setupGitlabToken = exports.hasGitlabToken = void 0;
-var child_process_promise_1 = __nccwpck_require__(75763);
 var pipeline_1 = __nccwpck_require__(25355);
+var child_process_promise_1 = __nccwpck_require__(75763);
 var lodash_1 = __nccwpck_require__(23255);
 var memoizee_1 = __importDefault(__nccwpck_require__(85839));
 var node_fetch_1 = __importDefault(__nccwpck_require__(26372));
@@ -349224,7 +349691,7 @@ var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
 };
 
 exports.__esModule = true;
-exports.createDockerBuildJobDefault = exports.createDockerBuildJobBase = exports.DOCKER_BUILD_JOB_NAME = exports.getDockerBuildVariables = exports.requiresDockerBuild = exports.getDockerImageVariables = void 0;
+exports.createDockerBuildJobDefault = exports.gitlabDockerLogin = exports.createDockerBuildJobBase = exports.getDockerJobBaseProps = exports.DOCKER_BUILD_JOB_NAME = exports.getDockerBuildVariables = exports.requiresDockerBuild = exports.getDockerImageVariables = void 0;
 
 var lodash_1 = __nccwpck_require__(23255);
 
@@ -349259,6 +349726,10 @@ var requiresDockerBuild = function (context) {
     return true;
   }
 
+  if ((0, deploy_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    return true;
+  }
+
   if ((0, deploy_1.isOfDeployType)(deployConfig, "custom") && deployConfig.requiresDocker) {
     return true;
   }
@@ -349286,33 +349757,41 @@ var getDockerBuildVariables = function (context) {
 exports.getDockerBuildVariables = getDockerBuildVariables;
 exports.DOCKER_BUILD_JOB_NAME = "🔨 docker";
 
-var createDockerBuildJobBase = function (context, _a) {
-  var script = _a.script,
-      variables = _a.variables,
-      def = __rest(_a, ["script", "variables"]);
-
-  return (0, lodash_1.merge)({
-    name: exports.DOCKER_BUILD_JOB_NAME,
-    envMode: "jobPerEnv",
-    stage: "build",
+var getDockerJobBaseProps = function (context) {
+  return {
     image: (0, runner_1.getRunnerImage)("docker-build"),
     services: [{
       name: "docker:20-dind",
       command: ["--tls=false"]
     }],
-    variables: __assign(__assign({}, (0, exports.getDockerBuildVariables)(context)), variables !== null && variables !== void 0 ? variables : {}),
+    variables: (0, exports.getDockerBuildVariables)(context)
+  };
+};
+
+exports.getDockerJobBaseProps = getDockerJobBaseProps;
+
+var createDockerBuildJobBase = function (context, _a) {
+  var script = _a.script,
+      def = __rest(_a, ["script"]);
+
+  return (0, lodash_1.merge)(__assign(__assign({
+    name: exports.DOCKER_BUILD_JOB_NAME,
+    envMode: "jobPerEnv",
+    stage: "build"
+  }, (0, exports.getDockerJobBaseProps)(context)), {
     script: script || []
-  }, def);
+  }), def);
 };
 
 exports.createDockerBuildJobBase = createDockerBuildJobBase;
+exports.gitlabDockerLogin = "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY";
 
 var createDockerBuildJobDefault = function (context, _a) {
   var script = _a.script,
       def = __rest(_a, ["script"]);
 
   return (0, exports.createDockerBuildJobBase)(context, __assign({
-    script: __spreadArray(__spreadArray([], __read(script || []), false), ["docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY", "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1", "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE", "docker push $DOCKER_CACHE_IMAGE"], false)
+    script: __spreadArray(__spreadArray([], __read(script || []), false), [exports.gitlabDockerLogin, "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile . --build-arg BUILDKIT_INLINE_CACHE=1", "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE", "docker push $DOCKER_CACHE_IMAGE"], false)
   }, def));
 };
 
@@ -350213,11 +350692,67 @@ exports.readConfigSync = readConfigSync;
 
 exports.__esModule = true;
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "main-b9978361" || 0;
+exports.PIPELINE_IMAGE_TAG = "main-24bccda4" || 0;
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
 
 /***/ }),
 
+/***/ 30486:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+
+    return t;
+  };
+
+  return __assign.apply(this, arguments);
+};
+
+var __importDefault = this && this.__importDefault || function (mod) {
+  return mod && mod.__esModule ? mod : {
+    "default": mod
+  };
+};
+
+exports.__esModule = true;
+exports.getLabels = void 0;
+
+var slugify_1 = __importDefault(__nccwpck_require__(44035));
+
+var sanitize = function (value) {
+  if (!value) return value; //"The value can only contain lowercase letters, numeric characters, underscores and dashes. The value can be at most 63 characters long. International characters are allowed."
+  // slugify should do the job
+
+  return (0, slugify_1["default"])(value).toLowerCase();
+};
+
+var getLabels = function (context) {
+  var _a, _b, _c;
+
+  var labels = __assign({
+    "customer-name": sanitize(context.fullConfig.customerName),
+    "app-name": sanitize(context.fullConfig.appName),
+    "env-type": sanitize(context.environment.envType),
+    "env-name": sanitize(context.environment.shortName),
+    "build-type": sanitize((_a = context.componentConfig.build) === null || _a === void 0 ? void 0 : _a.type)
+  }, (_c = (_b = context.fullConfig.meta) === null || _b === void 0 ? void 0 : _b.labels) !== null && _c !== void 0 ? _c : {});
+
+  return labels;
+};
+
+exports.getLabels = getLabels;
+
+/***/ }),
+
 /***/ 22041:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -350431,6 +350966,8 @@ var build_1 = __nccwpck_require__(73760);
 
 var deploy_1 = __nccwpck_require__(90223);
 
+var types_1 = __nccwpck_require__(63109);
+
 var config_1 = __nccwpck_require__(19997);
 
 var utils_1 = __nccwpck_require__(37461);
@@ -350517,7 +351054,7 @@ var getEnvironment = function (config, componentName, env, commitInfo, alreadyVi
             envInUrl = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, ".").concat(env) : env;
             domainCanonical = (mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.deploy) && (mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.deploy.type) === "kubernetes" && ((_e = mergedConfig.deploy.cluster) === null || _e === void 0 ? void 0 : _e.domainCanonical) || // for convenience, we allow clusters to define a canonical domain, because a cluster has a fixed ip and you will usually have a domain pointing to that cluster
             config.domainCanonical || "panter.cloud";
-            HOST_CANONICAL = "".concat(componentSlug, ".").concat(envInUrl, ".").concat(config.appName, ".").concat(config.customerName, ".").concat(domainCanonical);
+            HOST_CANONICAL = (0, types_1.isOfDeployType)(mergedConfig.deploy, "kubernetes") ? "".concat(componentSlug, ".").concat(envInUrl, ".").concat(config.appName, ".").concat(config.customerName, ".").concat(domainCanonical) : (0, types_1.isOfDeployType)(mergedConfig.deploy, "google-cloudrun") ? environmentSlug + "-" + process.env[(0, exports.getSecretVarName)(env, componentName, deploy_1.GCLOUD_RUN_CANONICAL_HOST_SUFFIX)] : "";
             host = (_f = mergedConfig === null || mergedConfig === void 0 ? void 0 : mergedConfig.host) !== null && _f !== void 0 ? _f : HOST_CANONICAL;
             url_1 = "https://".concat(host);
             KUBE_APP_NAME_PREFIX = envType === "review" && commitInfo ? "".concat(commitInfo.reviewSlug, "-") : "";
@@ -351158,6 +351695,169 @@ exports.getBaseRollbackJob = getBaseRollbackJob;
 
 /***/ }),
 
+/***/ 82256:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+      r,
+      ar = [],
+      e;
+
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+
+  return ar;
+};
+
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+
+exports.__esModule = true;
+exports.createDeployJob = void 0;
+
+var js_yaml_1 = __nccwpck_require__(3618);
+
+var lodash_1 = __nccwpck_require__(23255);
+
+var _1 = __nccwpck_require__(81344);
+
+var docker_1 = __nccwpck_require__(33219);
+
+var getLabels_1 = __nccwpck_require__(30486);
+
+var runner_1 = __nccwpck_require__(55071);
+
+var base_1 = __nccwpck_require__(89177);
+
+var types_1 = __nccwpck_require__(63109);
+
+var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(22607);
+
+var createDeployJob = function (context) {
+  var deployConfig = context.componentConfig.deploy;
+
+  if (deployConfig === false) {
+    return [];
+  }
+
+  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    // should not happen
+    throw new Error("deploy config is not custom");
+  }
+
+  var baseDeploymentJob = (0, base_1.getBaseDeploymentJob)(context);
+  var fullAppName = "".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName);
+  var dockerUrl = "".concat(deployConfig.region, "-docker.pkg.dev/").concat(deployConfig.projectId, "/catladder-deploy/").concat(fullAppName);
+  var gcloudImageName = "".concat(dockerUrl, "/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG");
+
+  var pushImageToArtifactsRegistry = __spreadArray(__spreadArray([docker_1.gitlabDockerLogin], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud auth configure-docker ".concat(deployConfig.region, "-docker.pkg.dev"), "docker pull $DOCKER_IMAGE:$DOCKER_IMAGE_TAG", "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG ".concat(gcloudImageName), "docker push ".concat(gcloudImageName)], false);
+
+  var allEnvVars = (0, lodash_1.omit)(context.environment.envVars, _1.GCLOUD_DEPLOY_CREDENTIALS_KEY);
+  var serviceName = context.environment.slug;
+  var labelsString = Object.entries((0, getLabels_1.getLabels)(context)).map(function (_a) {
+    var _b = __read(_a, 2),
+        key = _b[0],
+        value = _b[1];
+
+    return "".concat(key, "=").concat(value);
+  }).join(",");
+  var command = context.componentConfig.build.startCommand ? "--command=\"".concat(context.componentConfig.build.startCommand.split(" ").join(","), "\"") : ""; // TODO: split secrets out
+
+  var cloudRunDeploy = ["echo \"$ENV_VARS\" > ____envvars.yaml", "gcloud run deploy ".concat(serviceName, " --image ").concat(gcloudImageName, " --region=").concat(deployConfig.region, " --allow-unauthenticated --project ").concat(deployConfig.projectId, " ").concat(command, " --env-vars-file=____envvars.yaml --labels ").concat(labelsString), "docker image rm ".concat(gcloudImageName)];
+  var baseStopJob = (0, base_1.getBaseDeploymentStopJob)(context);
+  return [(0, lodash_1.merge)({}, baseDeploymentJob, (0, docker_1.getDockerJobBaseProps)(context), {
+    artifacts: {
+      paths: ["____envvars.yaml"]
+    },
+    variables: {
+      ENV_VARS: (0, js_yaml_1.dump)(allEnvVars, {
+        lineWidth: -1,
+        quotingType: "'",
+        forceQuotes: true
+      })
+    },
+    image: (0, runner_1.getRunnerImage)("gcloud"),
+    script: __spreadArray(__spreadArray([], __read(pushImageToArtifactsRegistry), false), __read(cloudRunDeploy), false)
+  }), (0, lodash_1.merge)({}, baseStopJob, {
+    image: (0, runner_1.getRunnerImage)("gcloud"),
+    script: __spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), ["gcloud run services delete ".concat(serviceName, " --project ").concat(deployConfig.projectId, " --region=").concat(deployConfig.region, " --quiet")], false)
+  })];
+};
+
+exports.createDeployJob = createDeployJob;
+
+/***/ }),
+
+/***/ 81344:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.GCLOUD_RUN_DEPLOY_TYPE = exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = void 0;
+
+var deployJob_1 = __nccwpck_require__(82256);
+
+exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
+exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = "GCLOUD_RUN_canonicalHostSuffix";
+exports.GCLOUD_RUN_DEPLOY_TYPE = {
+  jobs: deployJob_1.createDeployJob,
+  defaults: function () {
+    return {};
+  },
+  additionalSecretKeys: function () {
+    return [exports.GCLOUD_DEPLOY_CREDENTIALS_KEY];
+  }
+};
+
+/***/ }),
+
+/***/ 22607:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.gcloudServiceAccountLoginCommands = void 0;
+
+var __1 = __nccwpck_require__(81344);
+
+var context_1 = __nccwpck_require__(22041);
+
+var gcloudServiceAccountLoginCommands = function (context) {
+  return ["echo $".concat((0, context_1.getSecretVarNameForContext)(context, __1.GCLOUD_DEPLOY_CREDENTIALS_KEY), " > ./____keyfile.json\n          "), "gcloud auth activate-service-account --key-file=\"./____keyfile.json\""];
+};
+
+exports.gcloudServiceAccountLoginCommands = gcloudServiceAccountLoginCommands;
+
+/***/ }),
+
 /***/ 13539:
 /***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
@@ -351167,7 +351867,7 @@ exports.getBaseRollbackJob = getBaseRollbackJob;
 exports.__esModule = true;
 exports.getCloudSQLConfig = exports.hasCloudSQL = void 0;
 
-var types_1 = __nccwpck_require__(49702);
+var types_1 = __nccwpck_require__(63109);
 
 var hasCloudSQL = function (context) {
   var _a, _b;
@@ -351247,7 +351947,7 @@ var yarn_1 = __nccwpck_require__(10464);
 
 var base_1 = __nccwpck_require__(89177);
 
-var types_1 = __nccwpck_require__(49702);
+var types_1 = __nccwpck_require__(63109);
 
 var createCustomDeployJobs = function (context) {
   var deployConfig = context.componentConfig.deploy;
@@ -351322,21 +352022,26 @@ var __exportStar = this && this.__exportStar || function (m, exports) {
 exports.__esModule = true;
 exports.DEPLOY_TYPES = void 0;
 
+var cloudRun_1 = __nccwpck_require__(81344);
+
 var custom_1 = __nccwpck_require__(75599);
 
 var kubernetes_1 = __nccwpck_require__(95682);
 
 __exportStar(__nccwpck_require__(95682), exports);
 
-__exportStar(__nccwpck_require__(49702), exports);
+__exportStar(__nccwpck_require__(63109), exports);
 
 __exportStar(__nccwpck_require__(92757), exports);
 
 __exportStar(__nccwpck_require__(13539), exports);
 
+__exportStar(__nccwpck_require__(81344), exports);
+
 exports.DEPLOY_TYPES = {
   kubernetes: kubernetes_1.KUBERNETES_DEPLOY_TYPE,
-  custom: custom_1.CUSTOM_DEPLOY_TYPE
+  custom: custom_1.CUSTOM_DEPLOY_TYPE,
+  "google-cloudrun": cloudRun_1.GCLOUD_RUN_DEPLOY_TYPE
 };
 
 /***/ }),
@@ -351466,7 +352171,7 @@ var runner_1 = __nccwpck_require__(55071);
 
 var base_1 = __nccwpck_require__(89177);
 
-var types_1 = __nccwpck_require__(49702);
+var types_1 = __nccwpck_require__(63109);
 
 var kubeValues_1 = __nccwpck_require__(1061);
 
@@ -351602,7 +352307,7 @@ var __read = this && this.__read || function (o, n) {
 exports.__esModule = true;
 exports.createKubeEnv = void 0;
 
-var types_1 = __nccwpck_require__(49702);
+var types_1 = __nccwpck_require__(63109);
 
 var shouldGoIntoSecrets = function (key, value) {
   var _a;
@@ -351677,7 +352382,7 @@ var utils_1 = __nccwpck_require__(37461);
 
 var cloudSql_1 = __nccwpck_require__(13539);
 
-var types_1 = __nccwpck_require__(49702);
+var types_1 = __nccwpck_require__(63109);
 
 var cloudsql_1 = __nccwpck_require__(395);
 
@@ -351940,15 +352645,58 @@ exports.processSecretsAsFiles = processSecretsAsFiles;
 
 /***/ }),
 
-/***/ 49702:
+/***/ 20438:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+
+/***/ }),
+
+/***/ 22689:
 /***/ ((__unused_webpack_module, exports) => {
 
 "use strict";
 
 
+exports.__esModule = true;
+
+/***/ }),
+
+/***/ 63109:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __createBinding = this && this.__createBinding || (Object.create ? function (o, m, k, k2) {
+  if (k2 === undefined) k2 = k;
+  Object.defineProperty(o, k2, {
+    enumerable: true,
+    get: function () {
+      return m[k];
+    }
+  });
+} : function (o, m, k, k2) {
+  if (k2 === undefined) k2 = k;
+  o[k2] = m[k];
+});
+
+var __exportStar = this && this.__exportStar || function (m, exports) {
+  for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+
 exports.__esModule = true;
 exports.isOfDeployType = void 0;
 
+__exportStar(__nccwpck_require__(20438), exports);
+
+__exportStar(__nccwpck_require__(22689), exports);
+
+__exportStar(__nccwpck_require__(15299), exports);
+
 var isOfDeployType = function (t) {
   var types = [];
 
@@ -351963,6 +352711,16 @@ exports.isOfDeployType = isOfDeployType;
 
 /***/ }),
 
+/***/ 15299:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+
+/***/ }),
+
 /***/ 92757:
 /***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
@@ -351972,7 +352730,7 @@ exports.isOfDeployType = isOfDeployType;
 exports.__esModule = true;
 exports.contextIsStoppable = exports.getKubernetesNamespace = exports.getFullKubernetesClusterName = void 0;
 
-var types_1 = __nccwpck_require__(49702);
+var types_1 = __nccwpck_require__(63109);
 
 var getFullKubernetesClusterName = function (cluster) {
   if (cluster.type === "gcloud") {
@@ -351995,6 +352753,10 @@ var contextIsStoppable = function (context) {
     return true;
   }
 
+  if ((0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    return true;
+  }
+
   if ((0, types_1.isOfDeployType)(deployConfig, "custom") && deployConfig.stopScript) {
     return true;
   }