@catladder/cli 0.0.0-refactor-gitlab-jobs-c23038ea → 0.0.0-remove-undefined-66ca1336

package/dist/bundles/catenv/index.js

@@ -38952,13 +38952,131 @@ var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
 exports.__esModule = true;
 exports.createCustomJobs = void 0;
 var buildJob_1 = __nccwpck_require__(2644);
+var testJob_1 = __nccwpck_require__(2253);
 var createCustomJobs = function (context) {
-  return __spreadArray([], __read((0, buildJob_1.createCustomBuildJobs)(context)), false);
+  return __spreadArray(__spreadArray([], __read((0, testJob_1.createCustomTestJobs)(context)), false), __read((0, buildJob_1.createCustomBuildJobs)(context)), false);
 };
 exports.createCustomJobs = createCustomJobs;
 
 /***/ }),
 
+/***/ 2253:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+    return t;
+  };
+  return __assign.apply(this, arguments);
+};
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+exports.__esModule = true;
+exports.createCustomTestJobs = void 0;
+var path_1 = __nccwpck_require__(1017);
+var utils_1 = __nccwpck_require__(7461);
+var types_1 = __nccwpck_require__(1197);
+var RUNNER_CUSTOM_TEST_VARIABLES = {
+  KUBERNETES_CPU_REQUEST: "0.5",
+  KUBERNETES_CPU_LIMIT: "2",
+  KUBERNETES_MEMORY_REQUEST: "2Gi",
+  KUBERNETES_MEMORY_LIMIT: "4Gi"
+};
+var createCustomTestJobs = function (context) {
+  var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s;
+  // don't run tests after release
+  if (((_a = context.commitInfo) === null || _a === void 0 ? void 0 : _a.trigger) === "taggedRelease") {
+    return [];
+  }
+  var buildConfig = context.componentConfig.build;
+  if (!(0, types_1.isOfBuildType)(buildConfig, "custom")) {
+    throw new Error("deploy config is not custom");
+  }
+  var base = {
+    variables: __assign(__assign({
+      APP_PATH: context.componentConfig.dir
+    }, RUNNER_CUSTOM_TEST_VARIABLES), (_b = buildConfig.extraVars) !== null && _b !== void 0 ? _b : {}),
+    services: buildConfig.jobServices,
+    cache: buildConfig.jobCache,
+    stage: "test",
+    needs: [],
+    envMode: "none"
+  };
+  var auditJob = buildConfig.audit ? __assign(__assign(__assign({
+    name: "🛡 audit"
+  }, base), {
+    image: (_d = (_c = buildConfig.audit) === null || _c === void 0 ? void 0 : _c.jobImage) !== null && _d !== void 0 ? _d : buildConfig.jobImage,
+    cache: undefined,
+    script: __spreadArray([], __read((_f = (0, utils_1.ensureArray)((_e = buildConfig.audit) === null || _e === void 0 ? void 0 : _e.command)) !== null && _f !== void 0 ? _f : []), false),
+    allow_failure: true
+  }), createArtifactsConfig(context.componentConfig.dir, (_g = buildConfig.audit) === null || _g === void 0 ? void 0 : _g.artifactsReports)) : null;
+  var lintJob = buildConfig.lint ? __assign(__assign(__assign({
+    name: "👮 lint"
+  }, base), {
+    image: (_j = (_h = buildConfig.lint) === null || _h === void 0 ? void 0 : _h.jobImage) !== null && _j !== void 0 ? _j : buildConfig.jobImage,
+    script: __spreadArray([], __read((_l = (0, utils_1.ensureArray)((_k = buildConfig.lint) === null || _k === void 0 ? void 0 : _k.command)) !== null && _l !== void 0 ? _l : []), false)
+  }), createArtifactsConfig(context.componentConfig.dir, (_m = buildConfig.lint) === null || _m === void 0 ? void 0 : _m.artifactsReports)) : null;
+  var testJob = buildConfig.test ? __assign(__assign(__assign({
+    name: "🧪 test"
+  }, base), {
+    image: (_p = (_o = buildConfig.test) === null || _o === void 0 ? void 0 : _o.jobImage) !== null && _p !== void 0 ? _p : buildConfig.jobImage,
+    script: __spreadArray([], __read((_r = (0, utils_1.ensureArray)((_q = buildConfig.test) === null || _q === void 0 ? void 0 : _q.command)) !== null && _r !== void 0 ? _r : []), false)
+  }), createArtifactsConfig(context.componentConfig.dir, (_s = buildConfig.test) === null || _s === void 0 ? void 0 : _s.artifactsReports)) : null;
+  return [auditJob, lintJob, testJob].filter(utils_1.notNil);
+};
+exports.createCustomTestJobs = createCustomTestJobs;
+var createArtifactsConfig = function (rootPath, artifactsReports) {
+  var _a, _b;
+  return artifactsReports ? {
+    artifacts: {
+      paths: [],
+      reports: {
+        junit: (_b = (_a = artifactsReports === null || artifactsReports === void 0 ? void 0 : artifactsReports.junit) === null || _a === void 0 ? void 0 : _a.map(function (p) {
+          return (0, path_1.join)(rootPath, p);
+        })) !== null && _b !== void 0 ? _b : []
+      }
+    }
+  } : undefined;
+};
+
+/***/ }),
+
 /***/ 3219:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -39273,13 +39391,7 @@ var createNodeBuildJobs = function (context) {
     cache: __spreadArray([], __read((0, cache_1.getYarnCache)(context, "pull")), false),
     variables: {
       // only required for non static
-      YARN_INSTALL: (0, yarn_1.getYarnInstallCommand)(context, {
-        prodOnly: true
-      }),
-      YARN_INSTALL_WITHOUT_SCRIPTS: (0, yarn_1.getYarnInstallCommand)(context, {
-        prodOnly: true,
-        noScripts: true
-      }),
+      DOCKER_COPY_AND_INSTALL_APP: (0, yarn_1.getDockerAppCopyAndBuildScript)(context),
       DOCKER_COPY_WORKSPACE_FILES: (_e = (_d = context.packageManagerInfo) === null || _d === void 0 ? void 0 : _d.pathsToCopyInDocker.map(function (dir) {
         return "COPY --chown=node:node ".concat(dir, " /app/").concat(dir);
       })) === null || _e === void 0 ? void 0 : _e.join("\n")
@@ -39682,31 +39794,43 @@ var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
   return to.concat(ar || Array.prototype.slice.call(from));
 };
 exports.__esModule = true;
-exports.getYarnInstall = exports.ensureNodeVersion = exports.getYarnInstallCommand = void 0;
-var getYarnInstallCommand = function (context, options) {
+exports.getDockerAppCopyAndBuildScript = exports.getYarnInstall = exports.ensureNodeVersion = void 0;
+var YARN_INSTALL_CLASSIC = "yarn install --frozen-lockfile";
+// FIXME: check why and when rebuild is needed
+var YARN_BERRY_PROD_REBUILD = "yarn workspaces focus --production && yarn rebuild";
+var getYarnInstallCommand = function (context) {
   var _a;
   if ((_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.isClassic) {
-    return "yarn install --frozen-lockfile ".concat((options === null || options === void 0 ? void 0 : options.prodOnly) ? "--production" : "", " ").concat((options === null || options === void 0 ? void 0 : options.noScripts) ? "--ignore-scripts" : "");
+    return YARN_INSTALL_CLASSIC;
   }
-  // is modern
-  // yarn >= 4 ships with build in plugins, see https://github.com/yarnpkg/berry/pull/4253
-  // trying to import those fail on this version
-  var doesNotShipWithBuiltInPlugins = ["2", "3"].some(function (v) {
-    var _a;
-    return (_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.version.startsWith(v);
-  });
-  return (options === null || options === void 0 ? void 0 : options.prodOnly) ? "".concat((options === null || options === void 0 ? void 0 : options.noScripts) ? "YARN_ENABLE_SCRIPTS=false " : "").concat(doesNotShipWithBuiltInPlugins ? "yarn plugin import workspace-tools && " : " ", "yarn workspaces focus --production && yarn rebuild") // needs yarn plugin import workspace-tools
-  : "".concat((options === null || options === void 0 ? void 0 : options.noScripts) ? "YARN_ENABLE_SCRIPTS=false " : "", "yarn install --immutable");
+  return "yarn install --immutable";
 };
-exports.getYarnInstallCommand = getYarnInstallCommand;
 var ensureNodeVersion = function (context) {
   return ["if [ -f ./.nvmrc ]; then source /root/.nvm/nvm.sh && nvm install <<< .nvmrc; fi"];
 };
 exports.ensureNodeVersion = ensureNodeVersion;
 var getYarnInstall = function (context) {
-  return __spreadArray(__spreadArray([], __read((0, exports.ensureNodeVersion)(context)), false), [(0, exports.getYarnInstallCommand)(context)], false);
+  return __spreadArray(__spreadArray([], __read((0, exports.ensureNodeVersion)(context)), false), [getYarnInstallCommand(context)], false);
 };
 exports.getYarnInstall = getYarnInstall;
+var DOCKER_COPY_FILES = "COPY --chown=node:node $APP_DIR .";
+var getDockerAppCopyAndBuildScript = function (context) {
+  var _a;
+  if ((_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.isClassic) {
+    return "\nRUN ".concat(YARN_INSTALL_CLASSIC, " --production --ignore-scripts\n").concat(DOCKER_COPY_FILES, "\nRUN ").concat(YARN_INSTALL_CLASSIC, " --production \n    ").trim();
+  }
+  // yarn >= 4 ships with build in plugins, see https://github.com/yarnpkg/berry/pull/4253
+  // trying to import those fail on this version
+  var doesNotShipWithBuiltInPlugins = ["2", "3"].some(function (v) {
+    var _a;
+    return (_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.version.startsWith(v);
+  });
+  var maybeAddWorkspaceToolsCommand = doesNotShipWithBuiltInPlugins ? "RUN yarn plugin import workspace-tools" : "";
+  // copy first everything and then install
+  // rebuild first does not work as it will run postinstall and that might require files in the app
+  return "\n".concat(DOCKER_COPY_FILES, "\n").concat(maybeAddWorkspaceToolsCommand, "\nRUN ").concat(YARN_BERRY_PROD_REBUILD, "\n\n    ").trim();
+};
+exports.getDockerAppCopyAndBuildScript = getDockerAppCopyAndBuildScript;
 
 /***/ }),
 
@@ -39743,29 +39867,25 @@ exports.createRailsBuildJobs = void 0;
 var types_1 = __nccwpck_require__(1197);
 var docker_1 = __nccwpck_require__(3219);
 var createRailsBuildJobs = function (context) {
-  var _a, _b, _c, _d, _e, _f;
+  var _a, _b, _c;
   var buildConfig = context.componentConfig.build;
   if (!(0, types_1.isOfBuildType)(buildConfig, "rails")) {
     // should not happen
     throw new Error("build type is not rails");
   }
   var cnbConf = buildConfig.cnbBuilder;
-  // backwards compatabilty with CNB_ENV_VARS
-  // TODO: remove when all projects are migrated
-  var packEnvArgs = (_c = (_b = (_a = buildConfig.extraVars) === null || _a === void 0 ? void 0 : _a.CNB_ENV_VARS) === null || _b === void 0 ? void 0 : _b.split(" ").map(function (v) {
-    return "--env '".concat(v, "'");
-  })) !== null && _c !== void 0 ? _c : Object.entries((_d = cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.buildVars) !== null && _d !== void 0 ? _d : {}).map(function (_a) {
+  var packEnvArgs = Object.entries((_a = cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.buildVars) !== null && _a !== void 0 ? _a : {}).map(function (_a) {
     var _b = __read(_a, 2),
       k = _b[0],
       v = _b[1];
     return "--env '".concat(k).concat(v ? "=".concat(v) : "", "'");
-  });
+  }).join(" ");
   return [(0, docker_1.createDockerBuildJobBase)(context, {
     variables: context.componentConfig.build.extraVars,
     // custom script
     script: [docker_1.gitlabDockerLogin, "docker pull $DOCKER_CACHE_IMAGE || true", "wget --output-document=- https://github.com/buildpacks/pack/releases/download/v".concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packVersion, "/pack-v").concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packVersion, "-linux.tgz | tar -zx --directory /usr/local/bin pack"), "chmod +x /usr/local/bin/pack",
     //  replace private git ssh gem sources with https to make bundler with credentials via env var work
-    "sed --in-place 's|git@\\([^:]*\\):|https://\\1/|g' Gemfile Gemfile.lock", "pack build \"$DOCKER_IMAGE:$DOCKER_IMAGE_TAG\" --builder '".concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.image, "' --publish --cache-image \"$DOCKER_CACHE_IMAGE\" ").concat(packEnvArgs.join(" "), " ").concat((_f = (_e = cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packExtraArgs) === null || _e === void 0 ? void 0 : _e.join(" ")) !== null && _f !== void 0 ? _f : "")]
+    "sed --in-place 's|git@\\([^:]*\\):|https://\\1/|g' Gemfile Gemfile.lock", "pack build \"$DOCKER_IMAGE:$DOCKER_IMAGE_TAG\" --builder '".concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.image, "' --publish --cache-image \"$DOCKER_CACHE_IMAGE\" ").concat(packEnvArgs, " ").concat((_c = (_b = cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packExtraArgs) === null || _b === void 0 ? void 0 : _b.join(" ")) !== null && _c !== void 0 ? _c : "")]
   })];
 };
 exports.createRailsBuildJobs = createRailsBuildJobs;
@@ -39889,9 +40009,8 @@ var createRailsTestJobs = function (context) {
   var bundlerCache = {
     key: {
       files: ["Gemfile.lock"],
-      prefix: "$CI_JOB_IMAGE" // a changed image might have different OS libraries which no longer work with the cached gems
+      prefix: "$CI_JOB_IMAGE"
     },
-
     paths: [bundlerCacheDir]
   };
   var auditJob = buildConfig.audit !== false ? __assign(__assign({
@@ -40112,7 +40231,7 @@ exports.readConfigSync = readConfigSync;
 
 exports.__esModule = true;
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "refactor-gitlab-jobs-c23038ea" || 0;
+exports.PIPELINE_IMAGE_TAG = "remove-undefined-66ca1336" || 0;
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
 
 /***/ }),
@@ -40569,8 +40688,13 @@ var getEnvironmentVariables = function (config, componentName, env, commitInfo,
           }
           publicEnvVarsRaw = (_e = (_d = envConfigRaw.vars) === null || _d === void 0 ? void 0 : _d.public) !== null && _e !== void 0 ? _e : {};
           additionalSecretKeys = deployConfigRaw ? deploy_1.DEPLOY_TYPES[deployConfigRaw.type].additionalSecretKeys(environmentContext) : [];
-          secretEnvVarKeys = __spreadArray(__spreadArray([], __read((_g = (_f = envConfigRaw.vars) === null || _f === void 0 ? void 0 : _f.secret) !== null && _g !== void 0 ? _g : []), false), __read(additionalSecretKeys), false);
-          secretEnvVars = Object.fromEntries(secretEnvVarKeys.map(function (key) {
+          secretEnvVarKeys = __spreadArray(__spreadArray([], __read(((_g = (_f = envConfigRaw.vars) === null || _f === void 0 ? void 0 : _f.secret) !== null && _g !== void 0 ? _g : []).map(function (key) {
+            return {
+              key: key
+            };
+          })), false), __read(additionalSecretKeys), false);
+          secretEnvVars = Object.fromEntries(secretEnvVarKeys.map(function (_a) {
+            var key = _a.key;
             return [key, "$".concat((0, exports.getSecretVarName)(env, componentName, key))];
           }));
           legacyFromComponents = (_j = (_h = envConfigRaw.vars) === null || _h === void 0 ? void 0 : _h.fromComponents) !== null && _j !== void 0 ? _j : {};
@@ -41425,6 +41549,7 @@ var createGoogleCloudRunDeployJobs = function (context) {
   };
   var getCreateScheduleScripts = function () {
     return jobsWithSchedule.map(function (_a) {
+      var _b;
       var job = _a.job,
         jobName = _a.jobName,
         schedulerName = _a.schedulerName;
@@ -41432,6 +41557,7 @@ var createGoogleCloudRunDeployJobs = function (context) {
         project: deployConfig.projectId,
         location: deployConfig.region,
         schedule: "\"".concat(job.schedule, "\""),
+        "max-retry-attempts": (_b = job.maxRetryAttempts) !== null && _b !== void 0 ? _b : 0,
         uri: "\"https://".concat(deployConfig.region, "-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/").concat(deployConfig.projectId, "/jobs/").concat(jobName, ":run\""),
         "http-method": "POST",
         "oauth-service-account-email": "$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com"
@@ -41447,13 +41573,15 @@ var createGoogleCloudRunDeployJobs = function (context) {
     });
     return jobsWithSchedule.map(function (_a) {
       var schedulerName = _a.schedulerName;
-      return __spreadArray([], __read((0, gitlab_1.allowFailureInScripts)(["gcloud scheduler jobs delete ".concat(schedulerName, " ").concat(argsString)])), false);
+      return ["gcloud scheduler jobs delete ".concat(schedulerName, " ").concat(argsString)];
     }).flat();
   };
   var getDeleteJobsScripts = function () {
-    return jobsWithNames.map(function (_a) {
+    return jobsWithNames.flatMap(function (_a) {
       var jobName = _a.jobName;
-      return "gcloud beta run jobs delete ".concat(jobName, " ").concat(commonArgsString);
+      return [
+      // first delete all job executions. Otherwise delete might fail if one of those is still running
+      "gcloud beta run jobs executions list ".concat(commonArgsString, " --job ").concat(jobName, " --format=\"value(name)\" | xargs -I {} gcloud beta run jobs executions delete {}  --quiet ").concat(commonArgsString), "gcloud beta run jobs delete ".concat(jobName, " ").concat(commonArgsString)];
     });
   };
   var deployScripts = __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), __read(setExtraVarsScripts(deployConfig)), false), __read(pushImageToArtifactsRegistry), false), ["echo \"$ENV_VARS\" > ____envvars.yaml"], false), __read(deployConfig.cloudSql ? (0, database_1.getDatabaseCreateScript)(context, deployConfig) // we create the db, so that we can also delete it afterwards
@@ -41487,7 +41615,7 @@ var createGoogleCloudRunDeployJobs = function (context) {
     variables: {
       CLOUDSDK_CORE_DISABLE_PROMPTS: "1"
     },
-    script: stopScripts
+    script: (0, gitlab_1.allowFailureInScripts)(stopScripts)
   })];
 };
 exports.createGoogleCloudRunDeployJobs = createGoogleCloudRunDeployJobs;
@@ -41545,20 +41673,21 @@ exports.__esModule = true;
 exports.GCLOUD_RUN_DEPLOY_TYPE = exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = void 0;
 var context_1 = __nccwpck_require__(2041);
 var gitlab_1 = __nccwpck_require__(4997);
+var utils_1 = __nccwpck_require__(463);
 var deployJob_1 = __nccwpck_require__(2256);
 var jobName_1 = __nccwpck_require__(7311);
 exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
 exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = "GCLOUD_RUN_canonicalHostSuffix";
 var getCloudSqlVariables = function (_a) {
-  var _b, _c, _d, _e;
+  var _b, _c;
   var deployConfigRaw = _a.deployConfigRaw,
     environmentSlugPrefix = _a.environmentSlugPrefix,
     env = _a.env,
     componentName = _a.componentName,
     fullConfig = _a.fullConfig;
   if (deployConfigRaw && deployConfigRaw.cloudSql) {
-    var DB_NAME = [(_b = deployConfigRaw.cloudSql.dbNamePrefix) !== null && _b !== void 0 ? _b : "".concat(fullConfig.customerName, "-").concat(fullConfig.appName), environmentSlugPrefix, (_c = deployConfigRaw.cloudSql.dbBaseName) !== null && _c !== void 0 ? _c : componentName].filter(Boolean).join("-");
-    var additionalQueryParamsString = Object.entries((_d = deployConfigRaw.cloudSql.dbAdditionalQueryParams) !== null && _d !== void 0 ? _d : {}).map(function (_a) {
+    var DB_NAME = (0, utils_1.getFullDbName)(deployConfigRaw.cloudSql, fullConfig, environmentSlugPrefix, componentName);
+    var additionalQueryParamsString = Object.entries((_b = deployConfigRaw.cloudSql.dbAdditionalQueryParams) !== null && _b !== void 0 ? _b : {}).map(function (_a) {
       var _b = __read(_a, 2),
         key = _b[0],
         value = _b[1];
@@ -41567,7 +41696,7 @@ var getCloudSqlVariables = function (_a) {
     return {
       CLOUD_SQL_INSTANCE_CONNECTION_NAME: deployConfigRaw.cloudSql.instanceConnectionName,
       DB_NAME: DB_NAME,
-      DB_USER: (_e = deployConfigRaw.cloudSql.dbUser) !== null && _e !== void 0 ? _e : "postgres",
+      DB_USER: (_c = deployConfigRaw.cloudSql.dbUser) !== null && _c !== void 0 ? _c : "postgres",
       DB_PASSWORD: "$" + (0, context_1.getSecretVarName)(env, componentName, "DB_PASSWORD"),
       DATABASE_URL: "postgresql://$DB_USER:$DB_PASSWORD@localhost/$DB_NAME?host=/cloudsql/$CLOUD_SQL_INSTANCE_CONNECTION_NAME".concat(additionalQueryParamsString),
       DATABASE_JDBC_URL: "jdbc:postgresql:///$DB_NAME?cloudSqlInstance=$CLOUD_SQL_INSTANCE_CONNECTION_NAME&socketFactory=com.google.cloud.sql.postgres.SocketFactory&user=$DB_USER&password=$DB_PASSWORD".concat(additionalQueryParamsString)
@@ -41590,7 +41719,15 @@ exports.GCLOUD_RUN_DEPLOY_TYPE = {
     return {};
   },
   additionalSecretKeys: function (ctx) {
-    return __spreadArray([exports.GCLOUD_DEPLOY_CREDENTIALS_KEY], __read(ctx.deployConfigRaw && ctx.deployConfigRaw.cloudSql ? ["DB_PASSWORD"] : []), false);
+    return __spreadArray([{
+      key: exports.GCLOUD_DEPLOY_CREDENTIALS_KEY,
+      hidden: true
+    }, {
+      key: exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX,
+      hidden: true
+    }], __read(ctx.deployConfigRaw && ctx.deployConfigRaw.cloudSql ? [{
+      key: "DB_PASSWORD"
+    }] : []), false);
   },
   getAdditionalEnvVars: function (ctx) {
     var _a;
@@ -41778,6 +41915,22 @@ exports.getCloudRunJobName = getCloudRunJobName;
 
 /***/ }),
 
+/***/ 463:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.getFullDbName = void 0;
+var getFullDbName = function (cloudSqlConfig, fullConfig, environmentSlugPrefix, componentName) {
+  var _a, _b;
+  return [(_a = cloudSqlConfig.dbNamePrefix) !== null && _a !== void 0 ? _a : "".concat(fullConfig.customerName, "-").concat(fullConfig.appName), environmentSlugPrefix, (_b = cloudSqlConfig.dbBaseName) !== null && _b !== void 0 ? _b : componentName].filter(Boolean).join("-");
+};
+exports.getFullDbName = getFullDbName;
+
+/***/ }),
+
 /***/ 6531:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -41823,7 +41976,7 @@ var runner_1 = __nccwpck_require__(5071);
 var base_1 = __nccwpck_require__(9177);
 var types_1 = __nccwpck_require__(3109);
 var createCustomDeployJobs = function (context) {
-  var _a, _b;
+  var _a, _b, _c;
   var deployConfig = context.componentConfig.deploy;
   if (deployConfig === false) {
     return [];
@@ -41834,11 +41987,14 @@ var createCustomDeployJobs = function (context) {
   }
   var baseDeploymentJob = (0, base_1.getBaseDeploymentJob)(context);
   var yarnInstall = (0, yarn_1.getYarnInstall)(context);
-  return [(0, lodash_1.merge)({}, baseDeploymentJob, {
+  return __spreadArray([(0, lodash_1.merge)({}, baseDeploymentJob, {
     image: (_a = deployConfig.jobImage) !== null && _a !== void 0 ? _a : (0, runner_1.getRunnerImage)("jobs-default"),
     cache: (_b = deployConfig.jobCache) !== null && _b !== void 0 ? _b : [],
     script: __spreadArray(__spreadArray(["cd ".concat(context.componentConfig.dir)], __read(deployConfig.requiresYarnInstall ? yarnInstall : []), false), __read(deployConfig.script), false)
-  })];
+  })], __read(deployConfig.stopScript ? [(0, lodash_1.merge)({}, (0, base_1.getBaseDeploymentStopJob)(context), {
+    image: (_c = deployConfig.jobImage) !== null && _c !== void 0 ? _c : (0, runner_1.getRunnerImage)("jobs-default"),
+    script: deployConfig.stopScript
+  })] : []), false);
 };
 exports.createCustomDeployJobs = createCustomDeployJobs;
 
@@ -41988,7 +42144,11 @@ var additionalKubernetesSecretKeys = function (_a) {
     keys.push("POSTGRESQL_PASSWORD");
     keys.push("cloudsqlProxyCredentials");
   }
-  return keys;
+  return keys.map(function (key) {
+    return {
+      key: key
+    };
+  });
 };
 exports.additionalKubernetesSecretKeys = additionalKubernetesSecretKeys;
 
@@ -42001,8 +42161,9 @@ exports.additionalKubernetesSecretKeys = additionalKubernetesSecretKeys;
 
 
 exports.__esModule = true;
-exports.createCloudsqlBaseConfig = exports.getKubernetesCloudSQLConfig = exports.hasKubernetesCloudSQL = void 0;
+exports.createKubernetesCloudsqlBaseValues = exports.hasKubernetesCloudSQL = void 0;
 var context_1 = __nccwpck_require__(2041);
+var utils_1 = __nccwpck_require__(463);
 var types_1 = __nccwpck_require__(3109);
 var hasKubernetesCloudSQL = function (context) {
   var _a, _b;
@@ -42012,22 +42173,42 @@ var hasKubernetesCloudSQL = function (context) {
   return false;
 };
 exports.hasKubernetesCloudSQL = hasKubernetesCloudSQL;
-var getKubernetesCloudSQLConfig = function (context) {
-  var _a;
-  if ((0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
-    return (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql;
+var createKubernetesCloudsqlBaseValues = function (context) {
+  var _a, _b, _c, _d, _e;
+  if (!(0, types_1.isOfDeployType)(context.componentConfig.deploy, "kubernetes")) {
+    throw new Error("cannot get cloud sql config");
+  }
+  var config = (_a = context.componentConfig.deploy.values) === null || _a === void 0 ? void 0 : _a.cloudsql;
+  if (!config) {
+    throw new Error("cannot get cloud sql config");
+  }
+  var proxyCredentials = "$".concat((0, context_1.getSecretVarNameForContext)(context, "cloudsqlProxyCredentials"));
+  if ((config === null || config === void 0 ? void 0 : config.type) !== "unmanaged") {
+    var instanceConnectionName = "".concat((_b = config.projectId) !== null && _b !== void 0 ? _b : "skynet-164509", ":").concat((_c = config.region) !== null && _c !== void 0 ? _c : "europe-west6", ":").concat((_d = config.instanceId) !== null && _d !== void 0 ? _d : context.environment.envVars.KUBE_NAMESPACE);
+    return {
+      cloudsql: {
+        enabled: config.enabled,
+        dbUser: "postgres",
+        instanceConnectionName: instanceConnectionName,
+        proxyCredentials: proxyCredentials,
+        fullDbName: context.environment.envVars.KUBE_APP_NAME
+      }
+    };
+  } else if (config.type === "unmanaged") {
+    return {
+      cloudsql: {
+        enabled: config.enabled,
+        dbUser: (_e = config.dbUser) !== null && _e !== void 0 ? _e : "postgres",
+        instanceConnectionName: config.instanceConnectionName,
+        proxyCredentials: proxyCredentials,
+        fullDbName: (0, utils_1.getFullDbName)(config, context.fullConfig, context.environment.slugPrefix, context.componentName)
+      }
+    };
+  } else {
+    throw new Error("unknonw type");
   }
-  throw new Error("cannot get cloud sql config");
-};
-exports.getKubernetesCloudSQLConfig = getKubernetesCloudSQLConfig;
-var createCloudsqlBaseConfig = function (context) {
-  return {
-    cloudsql: {
-      proxyCredentials: "$".concat((0, context_1.getSecretVarNameForContext)(context, "cloudsqlProxyCredentials"))
-    }
-  };
 };
-exports.createCloudsqlBaseConfig = createCloudsqlBaseConfig;
+exports.createKubernetesCloudsqlBaseValues = createKubernetesCloudsqlBaseValues;
 
 /***/ }),
 
@@ -42410,7 +42591,7 @@ var createKubeValues = function (context) {
   var defaultKubeValues = (0, lodash_1.merge)({
     env: env,
     application: createAppConfig(context, application)
-  }, (0, cloudSql_1.hasKubernetesCloudSQL)(context) ? (0, cloudSql_1.createCloudsqlBaseConfig)(context) : {}, ((_b = (_a = deployConfig.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled) ? (0, mongodb_1.createMongodbBaseConfig)(context) : {});
+  }, (0, cloudSql_1.hasKubernetesCloudSQL)(context) ? (0, cloudSql_1.createKubernetesCloudsqlBaseValues)(context) : {}, ((_b = (_a = deployConfig.values) === null || _a === void 0 ? void 0 : _a.mongodb) === null || _b === void 0 ? void 0 : _b.enabled) ? (0, mongodb_1.createMongodbBaseConfig)(context) : {});
   var kubeValues = (0, processSecretsAsFiles_1.processSecretsAsFiles)((0, utils_1.mergeWithMergingArrays)(defaultKubeValues, __assign({
     jobs: removeFalsy(jobs),
     cronjobs: removeFalsy(cronjobs)
@@ -43557,6 +43738,7 @@ exports.__esModule = true;
 exports.createJobsForComponent = void 0;
 var lodash_1 = __nccwpck_require__(3255);
 var build_1 = __nccwpck_require__(3760);
+var reporting_1 = __nccwpck_require__(3545);
 var context_1 = __nccwpck_require__(2041);
 var deploy_1 = __nccwpck_require__(223);
 var getCommitInfo_1 = __nccwpck_require__(5923);
@@ -43579,13 +43761,11 @@ var getCustomJobs = function (context) {
   return injectDefaultVarsInCustomJobs(context, rawJobs);
 };
 var createRawJobs = function (context) {
-  if (context.componentConfig.deploy === false) {
-    return [];
-  }
   var buildJobs = build_1.BUILD_TYPES[context.componentConfig.build.type].jobs(context);
-  var deployJobs = deploy_1.DEPLOY_TYPES[context.componentConfig.deploy.type].jobs(context);
+  var deployJobs = context.componentConfig.deploy !== false ? deploy_1.DEPLOY_TYPES[context.componentConfig.deploy.type].jobs(context) : [];
+  var reportingJobs = (0, reporting_1.createReportingJobs)(context);
   var customJobs = getCustomJobs(context);
-  return __spreadArray(__spreadArray(__spreadArray([], __read(buildJobs), false), __read(deployJobs), false), __read(customJobs), false);
+  return __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read(buildJobs), false), __read(deployJobs), false), __read(reportingJobs), false), __read(customJobs), false);
 };
 var createJobsForComponent = function (config, componentName, env, trigger) {
   return __awaiter(void 0, void 0, void 0, function () {
@@ -43788,6 +43968,13 @@ exports.__esModule = true;
 exports.createGitlabJobs = exports.makeGitlabJob = void 0;
 var lodash_1 = __nccwpck_require__(3255);
 var defaults_1 = __nccwpck_require__(7383);
+var removeUndefined = function (obj) {
+  return Object.fromEntries(Object.entries(obj).filter(function (_a) {
+    var _b = __read(_a, 2),
+      value = _b[1];
+    return value !== undefined;
+  }));
+};
 var getFullJobName = function (name, componentName, env) {
   if (env) {
     return "".concat(componentName, " ").concat(name, " | ").concat(env, " ");
@@ -43845,7 +44032,7 @@ var makeGitlabJob = function (componentName, env, _a, allJobs) {
     return getJobName(a).localeCompare(getJobName(b));
   });
   var fullJobName = getFullJobName(name, componentName, envMode !== "none" ? env : undefined);
-  var gitlabJob = __assign(__assign({}, job), {
+  var gitlabJob = removeUndefined(__assign(__assign({}, job), {
     stage: stage,
     environment: ((_b = job.environment) === null || _b === void 0 ? void 0 : _b.on_stop) ? __assign(__assign({}, job.environment), {
       on_stop: getFullReferencedJobName(job.environment.on_stop, componentName, env, allJobs)
@@ -43854,7 +44041,7 @@ var makeGitlabJob = function (componentName, env, _a, allJobs) {
     needs: gitlabNeeds,
     retry: defaults_1.BASE_RETRY,
     interruptible: true
-  });
+  }));
   return [fullJobName, gitlabJob];
 };
 exports.makeGitlabJob = makeGitlabJob;
@@ -44068,7 +44255,7 @@ var path_equal_1 = __nccwpck_require__(4843);
 var yarnUtils_1 = __nccwpck_require__(1369);
 var getPackageManagerInfo = function (config, componentName) {
   return __awaiter(void 0, void 0, void 0, function () {
-    var version, isClassic, component, workspaces, currentWorkspace, componentIsInWorkspace, workspaceRoot, packageJson, workspacePackageJson, lockFile, configFiles, rcFiles, workspaceDependencies, pathsToCopyInDocker;
+    var version, isClassic, component, workspaces, currentWorkspace, componentIsInWorkspace, workspaceRoot, packageJson, workspacePackageJson, lockFile, configFiles, configFilePaths, workspaceDependencies, pathsToCopyInDocker;
     return __generator(this, function (_a) {
       switch (_a.label) {
         case 0:
@@ -44090,9 +44277,9 @@ var getPackageManagerInfo = function (config, componentName) {
           workspacePackageJson = componentIsInWorkspace ? (0, path_1.join)(workspaceRoot, "package.json") : null;
           lockFile = componentIsInWorkspace ? (0, path_1.join)(workspaceRoot, "yarn.lock") : (0, path_1.join)(component.dir, "yarn.lock");
           configFiles = [".yarnrc", ".yarnrc.yml", ".npmrc", ".yarn"];
-          rcFiles = (componentIsInWorkspace ? configFiles : configFiles.map(function (f) {
+          configFilePaths = __spreadArray(__spreadArray([], __read(configFiles), false), __read(configFiles.map(function (f) {
             return (0, path_1.join)(component.dir, f);
-          })).filter(function (f) {
+          })), false).filter(function (f) {
             return (0, fs_1.existsSync)(f);
           });
           workspaceDependencies = currentWorkspace ? __spreadArray(__spreadArray([], __read(currentWorkspace.workspaceDependencies), false), __read(currentWorkspace.mismatchedWorkspaceDependencies), false).map(function (name) {
@@ -44101,7 +44288,7 @@ var getPackageManagerInfo = function (config, componentName) {
               return w.name === name;
             })) === null || _a === void 0 ? void 0 : _a.location;
           }).filter(Boolean) : [];
-          pathsToCopyInDocker = __spreadArray(__spreadArray(__spreadArray(__spreadArray([packageJson], __read(workspacePackageJson ? [workspacePackageJson] : []), false), [lockFile], false), __read(rcFiles), false), __read(workspaceDependencies), false);
+          pathsToCopyInDocker = __spreadArray(__spreadArray(__spreadArray(__spreadArray([packageJson], __read(workspacePackageJson ? [workspacePackageJson] : []), false), [lockFile], false), __read(configFilePaths), false), __read(workspaceDependencies), false);
           return [2 /*return*/, {
             type: "yarn",
             workspaces: workspaces,
@@ -44326,7 +44513,7 @@ exports.getWorkspaces = (0, memoizee_1["default"])(function (isClassic) {
 
 
 exports.__esModule = true;
-exports.RULES_RELEASE = exports.RULE_CONDITION_MAIN_BRANCH = exports.RULES_ALWAYS = exports.RULE_NEVER_ON_RELEASE_COMMIT = void 0;
+exports.RULES_RELEASE = exports.RULE_CONDITION_HOTFIX_BRANCH = exports.RULE_CONDITION_MAIN_BRANCH = exports.RULES_ALWAYS = exports.RULE_NEVER_ON_RELEASE_COMMIT = void 0;
 exports.RULE_NEVER_ON_RELEASE_COMMIT = {
   "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
   when: "never"
@@ -44341,6 +44528,7 @@ exports.RULES_ALWAYS = [{
   "if": "$CI_MERGE_REQUEST_ID"
 }];
 exports.RULE_CONDITION_MAIN_BRANCH = "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH";
+exports.RULE_CONDITION_HOTFIX_BRANCH = "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/";
 exports.RULES_RELEASE = [exports.RULE_NEVER_ON_RELEASE_COMMIT, {
   "if": exports.RULE_CONDITION_MAIN_BRANCH + ' && $AUTO_RELEASE == "true"',
   when: "on_success"
@@ -44348,7 +44536,7 @@ exports.RULES_RELEASE = [exports.RULE_NEVER_ON_RELEASE_COMMIT, {
   "if": exports.RULE_CONDITION_MAIN_BRANCH,
   when: "manual"
 }, {
-  "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
+  "if": exports.RULE_CONDITION_HOTFIX_BRANCH,
   when: "manual"
 }];
 
@@ -44567,7 +44755,7 @@ var sanitizeForBashVariable = function (name) {
 };
 exports.sanitizeForBashVariable = sanitizeForBashVariable;
 var repeatOnFailure = function (command, options) {
-  return "\n    until ".concat(command, " &> /dev/null\n    do\n      echo \"Trying again.\"\n      sleep ").concat(options.pauseInSeconds, "\n    done\n  ");
+  return "\n    until ".concat(command, "\n    do\n      echo \"Trying again.\"\n      sleep ").concat(options.pauseInSeconds, "\n    done\n  ");
 };
 exports.repeatOnFailure = repeatOnFailure;
 
@@ -44631,6 +44819,61 @@ exports.mergeWithMergingArrays = mergeWithMergingArrays;
 
 /***/ }),
 
+/***/ 3545:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.createReportingJobs = void 0;
+var base_1 = __nccwpck_require__(9177);
+var utils_1 = __nccwpck_require__(7461);
+var STAGE = "verify";
+var SBOM_GENERATE_JOB_NAME = "🧾 sbom";
+var SBOM_FILE = "__sbom.json";
+var createSbomGenerateJob = function (context) {
+  var _a, _b, _c, _d, _e;
+  var buildConfig = context.componentConfig.build;
+  var defaultImage = "aquasec/trivy:0.38.3";
+  var defaultScript = ["trivy fs --quiet --format cyclonedx --output \"".concat(SBOM_FILE, "\" ").concat(((_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.componentIsInWorkspace) ? "." : context.componentConfig.dir)];
+  var image = buildConfig.type === "custom" && buildConfig.sbom !== false ? (_c = (_b = buildConfig.sbom) === null || _b === void 0 ? void 0 : _b.jobImage) !== null && _c !== void 0 ? _c : defaultImage : defaultImage;
+  var script = buildConfig.type === "custom" && buildConfig.sbom !== false ? (_e = (0, utils_1.ensureArray)((_d = buildConfig.sbom) === null || _d === void 0 ? void 0 : _d.command)) !== null && _e !== void 0 ? _e : defaultScript : defaultScript;
+  return {
+    name: SBOM_GENERATE_JOB_NAME,
+    stage: STAGE,
+    needs: context.componentConfig.deploy !== false ? [base_1.DEPLOY_JOB_NAME] : [],
+    envMode: "jobPerEnv",
+    variables: {},
+    cache: undefined,
+    image: image,
+    script: script,
+    allow_failure: true,
+    artifacts: {
+      paths: [SBOM_FILE]
+    }
+  };
+};
+var createSbomUploadJob = function (context) {
+  return {
+    name: "🧾 sbom upload",
+    stage: STAGE,
+    needs: [SBOM_GENERATE_JOB_NAME],
+    envMode: "jobPerEnv",
+    variables: {},
+    cache: undefined,
+    image: "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
+    script: ["/dtrackuploader https://dep.panter.dev/ \"$DT_KEY\" upload \"".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName, "/").concat(context.componentName, "\" \"").concat(context.environment.shortName, "\" \"").concat(SBOM_FILE, "\" vex.json")],
+    allow_failure: true
+  };
+};
+var createReportingJobs = function (context) {
+  return context.componentConfig.build.type === "custom" && context.componentConfig.build.sbom === false ? [] : [createSbomGenerateJob(context), createSbomUploadJob(context)];
+};
+exports.createReportingJobs = createReportingJobs;
+
+/***/ }),
+
 /***/ 9904:
 /***/ ((module) => {